last executing test programs: 21.289402174s ago: executing program 1 (id=17): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='debugfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000f00)={0x1}) mount$bpf(0x0, &(0x7f0000000e40)='./file0\x00', 0x0, 0x2000030, &(0x7f0000000e80)={[{@uid={'uid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x7}}]}) 21.276888155s ago: executing program 1 (id=18): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x7}, 0x0) 21.264928796s ago: executing program 1 (id=20): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/119, 0x77}], 0x1}, 0x10}], 0x1, 0x10043, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 19.272515552s ago: executing program 1 (id=30): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0x280444e, &(0x7f0000000a00)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@data_err_abort}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@nouid32}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x17}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x1, 0xbdb, &(0x7f0000003380)="$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") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x14000, 0x0) chdir(0x0) symlink(0x0, &(0x7f0000004280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000900)={'security\x00', 0x2, [{}, {}]}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000c80)='mounts\x00') read$FUSE(r1, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xa5a) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) fchown(r4, r2, r3) 19.113664817s ago: executing program 1 (id=34): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\b\x00', 0x2}, {&(0x7f0000000700)="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", 0x5d9}, {&(0x7f0000000d00)="d7759bc0", 0x4}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x63) getdents64(r1, &(0x7f00000003c0)=""/61, 0x3d) getdents64(r1, 0xfffffffffffffffe, 0x29) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000400)={@rand_addr, @empty}, &(0x7f0000000440)=0xc) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000d40)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x8, 0x9, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@noop, @generic={0x83, 0xd, "438636bd995ae0b8dfd429"}, @generic={0x88, 0x4, 'eO'}]}}}}}) mkdir(&(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/ioports\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/123, 0x7b, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000e40)={@multicast1, @local, r2}, 0xc) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x4, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "874cda2ff6d5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xb0, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="050f050000001002007e0600005f010200000a070100000010010480000ffe06000800100405e5ccbdda0274ad9f417dc81800100300020081060a00"], 0x1, [{0x0, 0x0}]}) 18.634936087s ago: executing program 1 (id=36): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x19f, &(0x7f0000000600)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x1, 0x561, &(0x7f0000000640)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 18.634854977s ago: executing program 32 (id=36): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x19f, &(0x7f0000000600)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x1, 0x561, &(0x7f0000000640)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.661527272s ago: executing program 0 (id=138): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./debug\x00', &(0x7f00000006c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./debug/failslab/times\x00', 0x2, 0x0) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1', 0x1) syz_emit_ethernet(0xe, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88a2}}}, 0x0) 4.622998196s ago: executing program 0 (id=140): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0/file0\x00', 0x103042, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000001a80)='./file1\x00', 0x106) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="ff", 0x1}], 0x1, 0x807, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001b40)={0x0, r0, 0x4, 0x0, 0x4, 0x1000000000000}) 4.423219706s ago: executing program 0 (id=141): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\b\x00', 0x2}, {&(0x7f0000000700)="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", 0x5d9}, {&(0x7f0000000d00)="d7759bc0", 0x4}], 0x3, 0x0, 0x0, 0xe0000000}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x63) getdents64(r1, &(0x7f00000003c0)=""/61, 0x3d) getdents64(r1, 0xfffffffffffffffe, 0x29) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000400)={@rand_addr, @empty}, &(0x7f0000000440)=0xc) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000d40)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x8, 0x9, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@noop, @generic={0x83, 0xd, "438636bd995ae0b8dfd429"}, @generic={0x88, 0x4, 'eO'}]}}}}}) mkdir(&(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/ioports\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/123, 0x7b, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000e40)={@multicast1, @local, r2}, 0xc) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x4, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "874cda2ff6d5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xb0, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="050f050000001002007e0600005f010200000a070100000010010480000ffe06000800100405e5ccbdda0274ad9f417dc81800100300020081060a00"], 0x1, [{0x0, 0x0}]}) 3.80246699s ago: executing program 5 (id=147): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x20, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) 3.720249618s ago: executing program 5 (id=150): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x596d, 0x44, 0x0, 0x0, 0x5b, 0xfffffffc, 0x9, 0xffffffff, 0x8, 0x0}) 3.695041421s ago: executing program 5 (id=151): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x5, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000000, 0x1, 0x4, 0x5, 0x7, 0x200000200000003, 0x100000000}, {0x800, 0xfffffffffffffffd, 0x6, 0x7}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x6c}, 0xa, @in=@remote, 0x3502, 0x4, 0x2, 0x0, 0x9, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 3.661738324s ago: executing program 5 (id=152): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f0000000380)=ANY=[], 0x1, 0x1520, &(0x7f0000001f80)="$eJzs3AuYjtX2APC19t7vGJP4muQy7L3XyxeDbZIkl4REkiRJkltC0iRJQmIISRqSkOskuQwhuTUmjfv9EkLS5EiTJCEhYf8fnfo7nc6pc55zzt//ObN+z/M+s9e839rf2t+a+d7LPPN93WNE3eb1ajclIviX4J+/pABALAAMAYACABAAQKX4SvGAoyGvxJR/7UnYv9d96Ze7AnY5cf9zN+5/7sb9z924/7kb9z934/7nbtz/3I37z1hutm1W0at4y73bP3P/P+73dv7h/X/g+///7/Dx/79ITvmJn28of03PfyKF+5+7cf9zN+5/7sb9z924/7kb9/+/gce/uysAqPU7mdz/3I37z1hudrnvP/N2ebfL/fPHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx3OOMvUQDwy/hy18UYY4wxxhhjjLF/H5/nL6OYv9qb//+2GMYYY4wxxhhjjP2HIAiQoCCAGMgDsZAX4uAKyAdXQn4oABG4CuLhaigI10AhKAxFoCgkQDEoDhoMWCAIoQSUhChcC6WgNCRCGSgL5cBBeUiC66ACXA8V4QaoBDdCZbgJqkBVqAbV4WaoAbdATagFteFWqAO3QV2oB7dDfbgDGsCd0BDugkZvL/Ue7oEmcC80hfugGdwPzeEBaAEPQktoBa2hDbT9vXy4Gxr/zfxnoQ88B32hH6RAfxgAz8NAGASD4QUYAi/CUHgJhsHLkArDYQS8AiPhVRgFr8FoGANj4XUYB+NhAkyESTAZ0uANmAJvwlR4C6bBdJgBMyEdZsFseBvmwFyYB+/AfHgXFsBCWASLYQm8BxmwFDLhfVgGH0AWLIcVsBJWwWpYA2thHayHDbARNsFm2AJbYRt8CNthB+yEj2AX7IY98DHshU9gH3wK2fDZX+cX+P3803+V3xMBAQUKVKgwBmMwFmMxDuMwH+bD/JgfIxjBeIzHglgQC2EhLIJFMAETsDgWR4MGCQlLYAmMYhRLYSlMxEQsi2XRocMkTMIKeD1WxIpYCSthZayMVbAqVsXqWB1rYA2siTWxNtbGOlgH62JdvB1vxzuwATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbY2tsi22xHbbD9tgeO2JH7ISdsDN2xmRMxi7YBbsiYjfsht2xO/bAHtgTe2EvfBafxefwOeyHdUR/HIADcCAOxMH4Ar6AL+JQfAlfwpcxFYfjCHwFX8FXcRSewtE4BsfiWKwhxuMEnIgkJmMapuEUnIJTcSpOw+k4HWdiOs7C2Tgb5+BcnIvv4Hx8F9/FhbgQF+MSXIIZuBQzMROX4WnMwuW4AlfiKlyNq3AtrsO1uAE34gbcjJtxK27FD/FD3IE7MA9+hLtxN36MH+Mn+AmmYjZm437cjwfwAB7Eg5iDOXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Fk8i+fw6YQvm+0usz4VxEVKKBEjYkSsiBVxIk7kE/lEfpFfRERExIt4UVAUFIVEIVFEFBEJIkEUF8WFEUaQCEUJUUJERVSUEqVEokgUZUVZ4YQTSSJJVBAVREVRUVQSN4rK4iZRRVQVHVx1UV3UEB1dTVFL1Ba1RR1xm6gr6ol6or6oLxqIBqKhaCgaiUaisbhHNBH9cTDeJy52prkYji3ECGwpWonWoo14FR8S7cQobC86iI7iETEGR2Nn0c4li8dFFzEBu4onxUR8SnQXk7GHeEb0FL1Eb/Gs6CPau76/3O4UM3GgGCQGixfEHLxNXOxYXfGySBXDxQjxiliMr4pR4jUxWowRY8XrYpwYLyaIiWKSmCzSxBtiinhTTBVviWliupghZop0MUvMFm+LOWKumCfeEfPFu2KBWCgWicViiXhPZIilIlO8L5aJD0SWWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im/hQbBc7xE7xkdgldos94mOxV3wi9olPRbb4TOwXfxIHxOfioPhC5IgvxSHxlTgsvhZHxDfiqPhWHBPHxQnxnTgpvo+cwl/W+6M4J86LC8ILkCiFlFLJQMbIPDJW5pVx8goJ8kqZXxaQEXmVjJdXy4LyGllIFpZFZFGZIIvJ4lJLI60kGcoSsqSMymtlKVlaJsoysqwsJ50sL5PkdbKCvF5WlDfISvJGWVneJKvIqrKarC5vljXkLbKmrCVry1tlHXmbrCvrydtlfXmHbCDvlA3lXbKRvFs2lvfIJvJe2VTeJ5vJ+2Vz+YBsIR+ULWUr2Vq2kW3lQ7KdfFi2lx1kR/mI7CQflZ3lYzJZPi67yCdkV/mk7Cafkt3l07KHfEb2lL1kb3leXpBe9pX9ZIrsLwfI5+VAOUgOlsHPL9BLcph8WabK4XKEfEWOlK/KUfI1OVqOkWPl63KcHC8nyIlykpws0+Qbcop8U06Vb8lpcrqcIWfKdDlLDpZD5ItyqJz3D+S/+VN+zK/yh/307FvlNvmh3C53yJ3yI7lL7pZ75B65V+6V++Q+mS2z5X65Xx6QB+RBeVDmyBx5SB6Sh+VheUQekUeblpbH5PFyIL+TJ+X38pQ8LU/LH+RZeVae+/k1AIVKKKmUClSMyqNiVV4Vp65Q+dSVKr8qoCLqKhWvrlYF1TWqkCqsiqiiKkEVU8WVVkZZRSpUJVRJFVXXqlKqtEpUZVRZVU45VV4lqev+5fw/qq+taqvaqXaqvWqvOqqOqpPqpDqrzipZJasuqovqqrqqbqqb6q66qx6qh+qpeqreqrfqo/qovqqvSlEpaoB6Xg1Ug9Rg9YIaol5UQ9VQNUwNU6kqVY1QI9RINVKNUqPUaDVajVVj1Tg1Tk1QE9QkNUmlqTQ1RU1RU9VUNU1NUzPUDJWu0tVsNVvNUXPUPDVPzVfz1QK1QC1Si9QStURlqAyVqTLVMrVMZanlarlaqVaq1Wq1WqvWqvVqvdqoNqrNarPKUtvUNrVdbVc71U61S+1Se9QetVftVfvUPpWtstV+tV8dUAfUQXVQ5agcdUgdUofVYXVEHVFH1VF1TB1TJ9QJdVKdVKfUKXVGnVFn1Vl1Tp1TF9SFi6d9gQhEoAIVxAQxQWwQG8QFcUG+IF+QP8gfRIJIEB/EBwWDa4JCQeGgSFA0SAiKBSmgAxPYgIIwKBGUDKLBtUGpoHSQGJQJygblAheUD5KC64IKwfVBxeCGoFJwY1A5uCmoElQNqgXVg5uDGsEtQc2gVlA7uDWoE9wW1A3qBbcH9YM7ggbBnUHD4K6gUXB30Di4J2gS3Bs0De4LmgX3B82DB4IWwYNBy6BV0DpoE7T9t87v/anCD7u+up9O0f31AP28HqgH6cH6BT1Ev6iH6pf0MP2yTtXD9Qj9ih6pX9Wj9Gt6tB6jx+rX9Tg9Xk/QE/UkPVmn6Tf0FP2mnqrf0tP0dD1Dz9Tpepaerd/Wc/RcPU+/o+frd/UCvVAv0ov1Ev2eztBLdaZ+Xy/TH+gsvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nv2h3q536J36I71L79Z79Md6r/5E79Of6mz9md6v/6QP6M/1Qf2FztFf6kP6K31Yf62P6G/0Uf2tPqaP6xP6O31Sf69P6dP6jP5Bn9U/6nP6vL6g/cWT+4uHd6OMMjEmxsSaWBNn4kw+k8/kN/lNxERMvIk3BU3Bi2+YpogpYhJMgiluipuLyJApYUqYqImaUqaUSTSJpqwpa5xxJskkmQqmgqloKppKppKpbCqbKqaKqWaqmZvNzeYWc4upZWqZW82t5jZzm6ln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpZpqZ5qa5aWFamJampWltWpu2pq1pZ9qZ9qa96Wg6mk6mk+lsOptkk2y6mC6mq+lqupluprvpbnqYHqan6Wl6m96mj+lj+pq+JsWkmAFmgBloBprBZrAZYoaYoWaoGWaGmVSTakaYEWakGWlGmVFmtBljxprXzTgz3kwwE80kM9mkmTQzxUwxU81UM81MMzPMDJNu0s1sM9vMMXPMPDPPzDfzzQKzwCwyi8wSs8RkmAyTaTLNMrPMZJkss8KsMKvMKrPGrDHrzDqzwWwwm8wms8VsMdvMNrPdbDc7zU6zy+wye8wes9fsNfvMPpNtss1+s98cMAfMQXPQ5Jgcc8gcMofNYXPEHDFHzVFzzBwzJ8wJc9KcNKfMKXPGnDFnzY/mnDlvLhhvYq2AOHuFzWevtPltARtr89qL8cUj5MW4iC1qE2wxW9xqW8gW/lVsrLWJtowta8tZZ8vbJHvdb+IqtqqtZqvbm20Ne4ut+Zu4vr3DNrB32ob2LlvP3v6ruJG92za2D9gm9kHb1LayzWwb2zx4wLawD9qWtpVtbdvYTvZR29k+ZpPt47aLfeI3cYZdatfZ9XaD3Wj32k/sGfuDPWy/tmftj7av7WeH2BftUPuSHWZftql2+G/isfZ1O86OtxPsRDvJTv5NPMPOtOl2lp1t37Zz7NzfxEvse3a+zbQL7EK7yC7+Kb5YU6Z93y6zH9gsu9yusCvtKrvarrFr/7fWlXaz3WK32j32Y7vd7rA77Ud2l939U3xxHfvspzbbfmYP2a/sAfu5PWiP2Bz75U/xxfUdsd/Yo/Zbe8wetyfsd/ak/d6esqd/Wv/FtX9nz9sL1lsgJEGSFAUUQ3kolvJSHF1B+ehKyk8FKEJXUTxdTQXpGipEhakIFaUEKkbFSZMhS0QhlaCSFKVrqRSVpkQqQ2WpHDkqT0l0HVWg66ki3UCV6EaqTDdRFapK1ag63Uw16BaqSbWoNt1KdbynulSPbqf6dAc1oDupId1Fjehuakz3UBO6l5rSfdSM7qfm9AC1oAepJbWi1tSG2tJD1I4epvbUgTrSI9SJHqXO9Bgl0+PUhZ6grvQkdaOnqDs9TT3oGepJvag3PUt96DnqS/0ohfrTAHqeBtIgGkwv0BB6kYbSSzSMXqZUGk4j6BUaSa/SKHqNRtMYGkuv0zgaTxNoIk2iyZRGb9AUepOm0ls0jabTDJpJ6TSLZtPbNIfm0jx6h+bTu7SAFtIiWkxL6D3KoKWUSe/TMvqAsmg5raCVtIpW0xpaS+toPW2gjbSJNtMW2krb6EPaTjtoJ31Eu2g37aGPaS99QvvoU8qmz2g//YkO0Od0kL6gHPqSDtFXdJi+piP0DR2lb+kYHacT9B2dpO/pFJ2mM/QDnaUf6RydpwvkCUIMRShDFQZhTJgnjA3zhnHhFWG+8Mowf1ggjIRXhfHh1WHB8JqwUFg4LBIWDRPCYmHxUIcmtCGFYVgiLBlGw2vDUmHpMDEsE5YNy4UuLB8mhdeFFcLrw4rhDWGl8MawcnhTCClVwwfuqh7eHNYIbwlrhrXC2uGtYZ3wtrBuWC+8Pawf3hE2CO8MG4Z3hRXDu8PG4T1hk/DesGl4X9gsvD9sHj4QtggfDFuGrcLWYZuwbfhQ2C58OGwfdgg7ho+EncJHw87hY2Fy+HjYJXziD/enhP3DAeHz4fOh93eKny8LohnRpdHM6PvRZdEPolnR5dEV0ZXRVdHV0TXRtdFVALAhujG6Kbo5uiW6Nep9vTzg0AknnXKBi3F5XKzL6+LcFS6fu9LldwVcxF3l4t3VrqC7xhVyhV0RV9QluGKuuNPOOOvIha6EK+mi7lpXypV2ia6MK+vKOefKuyTXxrV1bV0797Br7zq4ju4R94h71D3qHnOPucddF/eE6+qedN3cU667e9o97Z5xPV0v19s96/q451xf18+luBQ3wA1wA91AN9gNdkPcEDfUDXXD3DCX6lLdCDfCjXQj3Sg3yo12o91YN9aNc+PcBDfBTXKTXJpLc1PcFDfVTXXT3DQ3w81w6S7dzXaz3Rw3x81z89z8xPlugVvgFrlFbolb4jJchst0mW6ZW+ayXJZb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8LluC/dIfeVO+y+dkfcN+6o+9Ydc8fdCfedO+m+d6fcaXfG/eDOuh/dOXfeXXDepUXeiEyJvBmZGnkrMi0yPTIjMjOSHpkVmR15OzInMjcyL/JOZH7k3ciCyMLIosjiyJLIe5GMyNJIZuT9yLLIB5GsyPLIisjKyKrI6oj3xbaHvoQv6aP+Wl/Kl/aJvowv68t558v7JH+dr+Cv9xX9Db6Sv9FX9jf5Kr6qr+Yf9C19K9/at/Ft/UO+nX/Yt/cdfEf/iO/kH/Wd/WM+2T/uu/gnfFf/pO/mn/Ld/dO+h3/G9/S9fG//rO/jn/N9fT+f4vv7Af55P9AP8oP9C36If9EP9S/5Yf5ln+qH+xH+FT/Sv+pH+df8aD/Gj/Wv+3F+vJ/gJ/pJfrJP82/4Kf5NP9W/5af56X6Gn+nT/Sw/27/t5/i5fp5/x8/37/oFfqFf5Bf7Jf49n+GX+kz/vl/mP/BZfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bf5Dv93v8Dv9R36X3+33+I/9Xv+J3+c/9dn+M7/f/8kf8J/7g/4Ln+O/9If8V/6w/9of8d/4o/5bf8wf9yf8d/6k/96f8qf9Gf+DP+t/9Of8eX+B/2eNMcYYY+wfIv9gf/+/8b0YAPjlkmgAAFy5o2jOX8+5qdCfx4NEQqcIADzer8d9v2x16qSkpPz82CwJQcmFABD59fy/xMuhIzwKydABKvzN+gaJXmfpD+aP3ggQ9xc5sXApvjT/9X9n/oceGZtROTwT/zvzLwRILHkpJy9cii/NX/HvzF+43R/Un/fzNID2f5GTDy7Fl+ZPgofhCUj+1SMZY4wxxhhjjLE/GySqdfv715/yf6/PE9SlnDxwKf6j63PGGGOMMcYYY4xdfk/16v3YQ8nJHbr9YwP8+e/S/1wWD3jw3zPI+/Ovzv+Xev5Dg8v5rsQYY4wxxhj7T7h00n+5K2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/4uPE7vca2SMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYut/8JAAD//4cELAw=") chdir(&(0x7f00000034c0)='./file0\x00') creat(&(0x7f0000003500)='./bus\x00', 0x182) mount(&(0x7f0000003540)=@loop={'/dev/loop', 0x0}, &(0x7f0000003580)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003600)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000003640)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000003680)="d4", 0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x100) sendfile(r1, r0, 0x0, 0x3ffff) truncate(&(0x7f0000000940)='./file3\x00', 0x10004) 3.41283276s ago: executing program 5 (id=164): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0/file0\x00', 0x103042, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000001a80)='./file1\x00', 0x106) fallocate(r2, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001b40)={0x0, r0, 0x4, 0x0, 0x4, 0x1000000000000}) 3.284228343s ago: executing program 5 (id=155): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) lseek(r0, 0x0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42c01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000180)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000200)={"5e2a161b31f70bf30e1d927bb606f34efd3376aaabd9eb74ecaa3addcc999c36e7427b92d397577e118d163e6d7da212a9d3a242904e4bcfcfda295e1b1c2d43b66f62e46e7a37337a44694c9b7e15af1577e2715956f44aa7b4bae48788da9406c93d5313121fdfc8e83eaa50a17bef676f45cfee619c0cca8e763e89ff9af230242e6b2330d472167638c2cc64d788c1040322ae0e2204cf0632525c469a87c0c39d2160eea082af1cc195db217670b3d588c1c4449207506d6913d9cbfdb57e6984d9514d80b18056bc27f6c747c6de3bd7080fed3e836fbe2b6bf498da0d6dbe829e6c1fab999c3f38f657c7768b8dbbc51f39959a0b0bf7eee0e75473e17e0a0dffe16840151d5d7db9d3ebf0e12500005d961b2006b316e0eb5d55e70c763415d247e8d418be0a7139816f97d80cc733462550eeb41a15f7ddc65be4722ffe62751213d591509868df56995b3b80fb291b78acbee70451828bd0c0419153922a8b122b554266896008adb449b2e2efa1315ef2f4ce2e7cb87994200d259fe021b69923ae13edd59cfdf3f0b15754a58d01409e1588619088fe4ebe552ad9885dd5a5cdf055b5b17b54548e41d68ef7d8435321056a6f6e0588059e99c4c6d92a6e3296320d202aaa4827a383ef6a654b3493c6138346dac1faa634534935a102271b412c44527532ea4c0e347e9f414d075ac46d393f35f8459e1cb5d9935f2c428765b2465c44cd8108f9bcd470ab009a30a93f2fc8e61556b8169957b0d660c2582f8d750cfc336827307c2823490f21f05c5d3d45496ce800f05c266c00656f30a17aaef1eea051c6ea1e3203819ebb4ac4681be21b3e90f38bebb96596165a13839fcd0496cc3891c30f3fc4ca3dd665fe9f41eca1672da249ea30f45e8275c9b570055b45bb26f73732b7f94122b104e4f37dee1634b81a203367c6b68afb7c77d28fcccadd247d636e6aa1bbfab62b9a18980a6f9502dd2e2348a0cc4bec567300ce53ae19562a818d01340ca918d0cfa3fd9b96693448c196b31399d06e65673929f97f9d8e5e7dbc154e39c4b1363d46fc4a85c88f30e795f4423c63adf6fb471d5501cad367148d68af1c20f187196c02b3c558a64d06ae3b3df58551e8b05bc086840e0c1d00dd789288df6fb097b3fd3437682801023eeae6a6e87b419bf6f97c7d40c3af777ce9e2311f9e05caad86a6e0cf88a53acc9d3c118080238bd9867860d4117ce46d11ba66f4ad76348953e3e582298e79d08573d99d84bf39175e4c5ddae89c3922f7f828a4a7c6b7698b1a52228181dbaa61b65bb735c5d976431656f58a52755bb462f0d202a73b5fd6e04e55ade4bef4c1fdcc460ce280dc7e216a7843b726e0063842fea9de4a412f4b0c27ae7638a62ce255c3423c7ee290d338945c24f918ea58a19b100d7aef9ab9827eeb4cb4a795"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1fff) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, 0x0, 0x0, 0x3209864, 0x0) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mount$bind(0x0, &(0x7f0000000680)='.\x00', 0x0, 0x101020, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) 3.284104913s ago: executing program 33 (id=155): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) lseek(r0, 0x0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42c01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000180)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000200)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1fff) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, 0x0, 0x0, 0x3209864, 0x0) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mount$bind(0x0, &(0x7f0000000680)='.\x00', 0x0, 0x101020, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) 2.214950563s ago: executing program 2 (id=161): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x596d, 0x44, 0x0, 0x0, 0x5b, 0xfffffffc, 0x9, 0xffffffff, 0x8, 0x0}) 2.209696713s ago: executing program 2 (id=162): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x3}) 2.203101774s ago: executing program 2 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="306663353a313232373a6964c5d8093f6e95", 0x12) 2.197038645s ago: executing program 2 (id=165): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0x280444e, &(0x7f0000000a00)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@data_err_abort}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@nouid32}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x17}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x1, 0xbdb, &(0x7f0000003380)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x14000, 0x0) chdir(0x0) symlink(0x0, &(0x7f0000004280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000900)={'security\x00', 0x2, [{}, {}]}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0xa5a) 2.040287991s ago: executing program 2 (id=166): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1', 0x1) syz_emit_ethernet(0xe, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88a2}}}, 0x0) 1.890807786s ago: executing program 2 (id=168): ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000ec0)={0x8, 0x1}) 1.868247399s ago: executing program 34 (id=168): ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000ec0)={0x8, 0x1}) 1.739477352s ago: executing program 6 (id=172): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000200)=0xe8) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x4, 0x25, &(0x7f00000003c0)={0x0, 0x3, 0x1ff, 0xa}, 0x8, 0x2, 0x9, 0x0, 0x9, 0x1, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r2, &(0x7f0000000300)=@known='security.selinux\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) close(r3) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x40047452, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x4003, &(0x7f0000000240)={[], [{@permit_directio}, {@fowner_gt={'fowner>', r0}}]}, 0x6, 0x632, &(0x7f0000000d40)="$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") 1.590799197s ago: executing program 6 (id=174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x3, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x80, 0x3c}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@multicast2, {0x20000, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffff001, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x101}, {0x6, 0x200, 0xffffffbc}, 0x70bd2a, 0x80000, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xacd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000007c0), 0x800001d, 0x1c) 1.547780851s ago: executing program 6 (id=176): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x3, 0x14fe, &(0x7f0000001340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f) 1.453983561s ago: executing program 6 (id=178): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1', 0x1) syz_emit_ethernet(0xe, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88a2}}}, 0x0) 1.383336058s ago: executing program 6 (id=180): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000014c0)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0/file0\x00', 0x103042, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="ff", 0x1}], 0x1, 0x807, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001b40)={0x0, r0, 0x4, 0x0, 0x4, 0x1000000000000}) 1.381233588s ago: executing program 0 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731109000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a00), 0x181000, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000a40)=0xd) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000ec0)) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000b00)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x102280, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000b80)={0x18}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='mnt\x00', 0x0, &(0x7f0000000540)={[{@noquota}, {@discard}, {@i_version}, {@nobarrier}]}, 0x0, 0x235, &(0x7f0000000580)="$eJzs3T9oA1UcB/DvXRL7L0jVRRBUEBEtlLoJLnVRKEgpIoIKFREXpRVqi1vr5OKgs0onlyJuVkfpUlwUwalqh7oIWhwsDjpEkmul2ohiak68zwcuuUveu9877r7vshwJ0FizSRaTtJLMJekkKS43uLNaZs83d6cOV5Ne77EfikG7arty0W8myU6SB5IclEVeaCdb+0+d/HT0yD2vb3bufnf/yamxHuS505PjR8/eWX7tg6X7tz774rvlIovp/u64rl8x5LN2kdz8bxT7jyjadY+Av2Pllfe/7Of+liR3DfLfSZnq5L2xccNBJ/e9/Wd93/z+89vGOVbg+vV6nf49cKcHNE6ZpJuinE9SrZfl/Hz1G/6r1nT54vrGy3PPr2+uPVf3TAVcl25y/PBHEx/O/CH/37aq/AP/X93JHD++svd1f/2sVfdogHHq3//nntm+N/IPjSP/0FzyD80l/9Bc8g/NJf/QXPIPzSX/0FzyD80l/9Bcl/MPADRLb6LuJ5CButQ9/wAAAAAAAAAAAAAAAAAAAFftTh2uXizjqvnJW8npQ0naw+q3Bv9HnEwOXqd/LPrNflNU3Uby9B0j7mBE79X89PWN39Rb/9Pb662/vZbsvJpkod2+ev0V59ffP3fTX3zfeXbEAiN68Il66/+yV2/9paPk4/78szBs/ilz6+B9+PzT7Z+/Eeu/9POIOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBsfg0AAP//CqRtMQ==") syz_open_dev$usbfs(0x0, 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='mnt/encrypted_dir\x00', 0x800, 0x2) chdir(&(0x7f0000000880)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20800, 0x0, 0xbe, 0x0, &(0x7f0000000a00)) 1.180488799s ago: executing program 3 (id=183): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001140)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000001180)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000011c0)='.\x00', &(0x7f0000001200), 0x2000090, &(0x7f0000001240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.132196794s ago: executing program 6 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000", @ANYBLOB="439882e9bc6f445df9f365516ed749b37c20e04b1c98e4c0102ff546728cb6f200"], 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1.114156486s ago: executing program 4 (id=185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x3, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x80, 0x3c}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@multicast2, {0x20000, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffff001, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x101}, {0x6, 0x200, 0xffffffbc}, 0x70bd2a, 0x80000, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xacd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000007c0), 0x800001d, 0x1c) 1.089033868s ago: executing program 0 (id=186): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x2200050, &(0x7f00000009c0)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000001c40)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0x2002, 0xa) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001cc0)={0xc, r0, 0x13, 0x0, 0x0, 0xfffffffffdffffff}) 1.083652009s ago: executing program 4 (id=187): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x3, 0x14fe, &(0x7f0000001340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f) 963.328301ms ago: executing program 7 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3ff800, 0x3a, '\\', 0x3a, '])(*', 0x3a, './file0'}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) capget(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/sda\x00', 0x42, 0x0) ioctl$BLKROSET(r4, 0x2284, 0x0) 962.193471ms ago: executing program 4 (id=197): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000c00)={0x20000014}) epoll_pwait(r1, &(0x7f0000000c40)=[{}], 0x1, 0xff, 0x0, 0x0) 924.192415ms ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nodiscard}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x18a1, 0x7d043}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$binfmt_misc(r3, &(0x7f0000000280), 0xfffffecc) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x1218088, &(0x7f0000000340)=ANY=[], 0x4a, 0x2e3, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x143142, 0x40) write$cgroup_devices(r2, &(0x7f0000000f40)={'b', ' *:* ', 'rw\x00'}, 0x9) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7472757374656480002b00"], &(0x7f00000000c0)=""/58, 0x3a) read$FUSE(r0, &(0x7f00000036c0)={0x2020}, 0x2020) 923.541805ms ago: executing program 4 (id=189): r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='1', 0x1) syz_emit_ethernet(0xe, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88a2}}}, 0x0) 609.095978ms ago: executing program 4 (id=190): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 556.208823ms ago: executing program 4 (id=191): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000100)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000001680)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000780)='GPL\x00', 0x2, 0xff5c, &(0x7f00000007c0)=""/222}, 0x78) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x20a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="b3", 0x1}], 0x1}}], 0x1, 0x4000001) r3 = dup(r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) close_range(r0, 0xffffffffffffffff, 0x0) 283.015801ms ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x0, 0x4a, 0x0, 0x8, 0xfffffffe}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 221.788397ms ago: executing program 3 (id=193): clock_settime(0x65aa4009dfa1d22, &(0x7f0000000000)={0x0, 0x989680}) 119.649628ms ago: executing program 3 (id=194): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000ac0)=0x5, 0x4) connect$inet6(r0, &(0x7f0000001000)={0xa, 0x4e22, 0xe27d, @remote, 0x1}, 0x1c) 119.475438ms ago: executing program 3 (id=195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731109000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a00), 0x181000, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000a40)=0xd) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000ec0)) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000b00)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x102280, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000b80)={0x18}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='mnt\x00', 0x0, &(0x7f0000000540)={[{@noquota}, {@discard}, {@i_version}, {@nobarrier}]}, 0x0, 0x235, &(0x7f0000000580)="$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") syz_open_dev$usbfs(0x0, 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='mnt/encrypted_dir\x00', 0x800, 0x2) chdir(&(0x7f0000000880)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20800, 0x0, 0xbe, 0x0, &(0x7f0000000a00)) 92.483041ms ago: executing program 7 (id=196): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000003a40), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000003a80)) 84.669082ms ago: executing program 3 (id=198): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) 197.751µs ago: executing program 7 (id=199): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x2000000) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz1\x00', {0xeb, 0x5, 0x3, 0x9}, 0x1, [0xbc2e, 0x7, 0x8, 0xfffff9df, 0x0, 0x5, 0xffffffff, 0x1ff, 0x2, 0xffff, 0xa076, 0x8, 0x8, 0x4, 0x7ff, 0x8001, 0x4, 0xc3b, 0x2, 0x1000, 0x2d, 0x4, 0x3, 0x4, 0x3d8, 0x5, 0x3, 0xb, 0x3, 0x6f6, 0x1ff, 0x6, 0x6f8e, 0x1ff, 0x1ff, 0x6, 0x6, 0x6, 0xc71, 0x40, 0x4, 0x8, 0x338000, 0x2, 0xd, 0x9, 0x2, 0x8, 0x7, 0x0, 0x0, 0x4e770b95, 0x6, 0xfffffffa, 0x500, 0x4, 0x4, 0x885, 0x8, 0x3cafad58, 0x9, 0x8, 0xa5, 0xa], [0x7fff, 0x0, 0xf, 0x61, 0x0, 0x5, 0x9, 0x760e596f, 0x6, 0x1, 0x8d, 0x6, 0x7, 0xff, 0x1000, 0x8, 0xfffffff8, 0x8, 0x9, 0x2, 0x6, 0x3, 0x8c, 0x8, 0x7, 0x7, 0x5, 0x7ff, 0x68, 0x7, 0xfffffff0, 0x1, 0x7, 0xde10, 0x80, 0x1, 0x8, 0x5, 0x4, 0x5, 0x696, 0x2, 0x101, 0x8, 0xa86, 0x0, 0x601, 0xfffffff7, 0x200, 0x7, 0x3, 0x9, 0xa0d9, 0x70, 0x0, 0x7c, 0x9, 0x0, 0x8, 0x8, 0x200, 0xffffff5f, 0xc, 0xc0c1], [0x8000, 0x4, 0x10001, 0x7, 0x2, 0x0, 0xfffffffc, 0x8, 0x4, 0x5, 0x2, 0x8, 0x4, 0x2, 0x1ad09c2e, 0x0, 0x80, 0x1, 0x7, 0x7, 0x10001, 0x80000001, 0xd, 0x6, 0x2, 0x4, 0x10001, 0x200, 0x853, 0x3be9, 0x1, 0x7, 0x5, 0x3, 0x8, 0x80000001, 0x1, 0x4, 0x2, 0xffffffff, 0x2, 0x0, 0xb, 0x3, 0x72, 0x0, 0x50, 0xb, 0x2, 0x7fffffff, 0x5, 0x6, 0x800, 0x48f686fd, 0x4, 0xf, 0xff, 0x7, 0xfffff4ef, 0xaa7d, 0x972a, 0x7, 0xf, 0xc9], [0x4, 0x7, 0x8001, 0x7ff, 0x80000000, 0x7, 0x3, 0x1, 0x9, 0x6, 0x0, 0xbf, 0x7fff, 0x8, 0x1, 0x4, 0x8, 0x400, 0xfffffffa, 0x6, 0x8, 0x1, 0x7fff, 0x4, 0xc15c, 0x5, 0x2, 0x8, 0x3, 0x3, 0x2, 0x400, 0xffffff62, 0x7, 0x8, 0x1, 0x3, 0x80000001, 0x1, 0x4, 0x4b2, 0x401, 0x9, 0xffffffff, 0xc767, 0x0, 0x1, 0x7ae, 0x1, 0xd, 0x0, 0xc000000, 0x2, 0x1, 0xffff, 0x5, 0xfffffffd, 0x7, 0xe835, 0x80000001, 0x8, 0x8, 0x300, 0x2]}, 0x45c) 0s ago: executing program 7 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)) kernel console output (not intermixed with test programs): GE): batadv_slave_0: link becomes ready [ 20.845852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.854220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.862341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.870866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.879129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.887193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.895290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.905272][ T288] device veth1_macvtap entered promiscuous mode [ 20.916299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.924544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.932861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.940368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.948743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.957168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.965274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.976628][ T289] device veth1_macvtap entered promiscuous mode [ 20.988197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.992970][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 20.995955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.012103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.020456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.028811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.055717][ T309] loop4: detected capacity change from 0 to 512 [ 21.062755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.073368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.081620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.083681][ T309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 21.090037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.111216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.113703][ T309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 21.119645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.139155][ T309] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.5: invalid indirect mapped block 83886080 (level 1) [ 21.154557][ T309] EXT4-fs (loop4): Remounting filesystem read-only [ 21.161205][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.161436][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.169924][ T309] EXT4-fs (loop4): 1 orphan inode deleted [ 21.183615][ T309] EXT4-fs (loop4): 1 truncate cleaned up [ 21.189750][ T309] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,nodiscard,quota,. Quota mode: writeback. [ 21.199581][ T287] device veth0_vlan entered promiscuous mode [ 21.246494][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.254779][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.275831][ T287] device veth1_macvtap entered promiscuous mode [ 21.288074][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.298685][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.307881][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.334645][ T321] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.5: iget: bad extra_isize 46 (inode size 256) [ 21.359544][ T321] EXT4-fs (loop4): Remounting filesystem read-only [ 21.368042][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.376390][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.404015][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.418032][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.427274][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.436017][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.438019][ T324] loop1: detected capacity change from 0 to 2048 [ 21.591115][ T324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.601921][ T324] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.618911][ T324] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 345: padding at end of block bitmap is not set [ 21.633784][ T324] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 21.646408][ T324] EXT4-fs (loop1): This should not happen!! Data will be lost [ 21.646408][ T324] [ 21.656571][ T324] EXT4-fs (loop1): Total free blocks count 0 [ 21.662802][ T324] EXT4-fs (loop1): Free/Dirty block details [ 21.668909][ T324] EXT4-fs (loop1): free_blocks=0 [ 21.674579][ T324] EXT4-fs (loop1): dirty_blocks=16 [ 21.679851][ T324] EXT4-fs (loop1): Block reservation details [ 21.686023][ T324] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 21.770184][ T332] loop1: detected capacity change from 0 to 512 [ 21.826743][ T332] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 21.837882][ T332] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.928860][ T340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=340 comm=syz.1.11 [ 21.943809][ T340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=340 comm=syz.1.11 [ 21.964616][ T347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.204743][ T371] sd 0:0:1:0: device reset [ 22.247298][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.302658][ T307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.372555][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.442608][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.553026][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 22.652612][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 22.662728][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 22.682620][ T307] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 22.732581][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 22.742821][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 22.802651][ T26] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.813671][ T26] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.823626][ T26] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 22.836613][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 22.842626][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 22.843253][ T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 22.859875][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.868027][ T307] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 22.877291][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.885546][ T26] usb 2-1: config 0 descriptor?? [ 22.890598][ T307] usb 5-1: Product: syz [ 22.894784][ T307] usb 5-1: Manufacturer: syz [ 22.899381][ T307] usb 5-1: SerialNumber: syz [ 22.902794][ T6] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 22.905496][ T307] usb 5-1: config 0 descriptor?? [ 22.913358][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.925983][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 22.950109][ T6] usb 4-1: Product: syz [ 22.954337][ T6] usb 4-1: Manufacturer: syz [ 22.959155][ T20] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 22.971677][ T378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'. [ 22.973162][ T307] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 22.980519][ T6] usb 4-1: SerialNumber: syz [ 22.980844][ T20] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 23.002977][ T307] usb 5-1: Detected FT232RL [ 23.005531][ T378] loop0: detected capacity change from 0 to 128 [ 23.014535][ T20] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 23.027740][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 23.038549][ T20] usb 3-1: config 1 interface 1 has no altsetting 0 [ 23.045663][ T6] usb 4-1: selecting invalid altsetting 1 [ 23.051536][ T6] usb 4-1: unit 6 not found! [ 23.114317][ T378] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 23.189764][ T382] loop0: detected capacity change from 0 to 512 [ 23.196157][ T307] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 23.204260][ T382] ======================================================= [ 23.204260][ T382] WARNING: The mand mount option has been deprecated and [ 23.204260][ T382] and is ignored by this kernel. Remove the mand [ 23.204260][ T382] option from the mount to silence this warning. [ 23.204260][ T382] ======================================================= [ 23.245176][ T382] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.25: bad orphan inode 15 [ 23.255373][ T382] ext4_test_bit(bit=14, block=5) = 0 [ 23.260666][ T382] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,quota,noblock_validity,nobarrier,noinit_itable,max_dir_size_kb=0x0000000000000057,noload,,errors=continue. Quota mode: writeback. [ 23.272996][ T6] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 23.322615][ T20] usb 3-1: string descriptor 0 read error: -22 [ 23.328810][ T20] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 23.343176][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.473657][ T307] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 23.512460][ T26] usb 4-1: USB disconnect, device number 2 [ 23.575461][ T6] usb 2-1: USB disconnect, device number 2 [ 23.691065][ T307] usb 5-1: USB disconnect, device number 2 [ 23.698093][ T307] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 23.707654][ T307] ftdi_sio 5-1:0.0: device disconnected [ 24.021717][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 24.021730][ T30] audit: type=1400 audit(1793848456.334:151): avc: denied { ioctl } for pid=388 comm="syz.3.27" path="socket:[16000]" dev="sockfs" ino=16000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.042591][ T20] usb 3-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 24.067329][ T20] usb 3-1: USB disconnect, device number 2 [ 24.075464][ T393] loop3: detected capacity change from 0 to 256 [ 24.093874][ T395] loop1: detected capacity change from 0 to 4096 [ 24.105936][ T393] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 24.118649][ T395] EXT4-fs (loop1): Test dummy encryption mode enabled [ 24.125759][ T395] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 24.135381][ T395] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 24.147253][ T30] audit: type=1400 audit(1793848456.464:152): avc: denied { write } for pid=392 comm="syz.3.29" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.171068][ T395] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,data_err=abort,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000017,usrjquota=./file0,,errors=continue. Quota mode: writeback. [ 24.183679][ T30] audit: type=1400 audit(1793848456.464:153): avc: denied { remove_name } for pid=392 comm="syz.3.29" name="file1" dev="loop3" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.228663][ T30] audit: type=1400 audit(1793848456.464:154): avc: denied { rename } for pid=392 comm="syz.3.29" name="file1" dev="loop3" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.256936][ T30] audit: type=1400 audit(1793848456.464:155): avc: denied { add_name } for pid=392 comm="syz.3.29" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.273243][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.277644][ T30] audit: type=1400 audit(1793848456.524:156): avc: denied { mount } for pid=394 comm="syz.1.30" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.354725][ T30] audit: type=1400 audit(1793848456.544:157): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 24.392089][ T30] audit: type=1400 audit(1793848456.544:158): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 24.415432][ T30] audit: type=1400 audit(1793848456.544:159): avc: denied { bpf } for pid=398 comm="syz.0.31" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 24.436701][ T30] audit: type=1400 audit(1793848456.544:160): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.664755][ T287] syz-executor (287) used greatest stack depth: 22024 bytes left [ 24.732394][ T415] loop2: detected capacity change from 0 to 512 [ 24.758836][ T418] loop4: detected capacity change from 0 to 1024 [ 24.786761][ T420] loop0: detected capacity change from 0 to 128 [ 24.808356][ T418] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 24.811047][ T420] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 24.816400][ T418] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.827457][ T420] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.863350][ T418] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,grpquota,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 24.889709][ T418] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.903852][ T415] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,grpid,grpjquota=,sysvgroups,inode_readahead_blks=0x0000000000800000,bsdgroups,i_version,nobarrier,,errors=continue. Quota mode: writeback. [ 24.933028][ T415] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.983326][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.992627][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.000046][ T421] device bridge_slave_0 entered promiscuous mode [ 25.009856][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.020475][ T415] EXT4-fs error (device loop2): ext4_generic_delete_entry:2731: inode #12: block 32: comm syz.2.38: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 25.040958][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.048514][ T421] device bridge_slave_1 entered promiscuous mode [ 25.098643][ T415] EXT4-fs error (device loop2) in ext4_delete_entry:2802: Corrupt filesystem [ 25.128991][ T415] EXT4-fs warning (device loop2): ext4_rename_delete:3794: inode #12: comm syz.2.38: Deleting old file: nlink 2, error=-117 [ 25.146243][ T8] device bridge_slave_1 left promiscuous mode [ 25.152728][ T418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.40: bg 0: block 112: padding at end of block bitmap is not set [ 25.152951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.167219][ T418] EXT4-fs (loop4): Remounting filesystem read-only [ 25.184995][ T8] device bridge_slave_0 left promiscuous mode [ 25.191525][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.200051][ T8] device veth1_macvtap left promiscuous mode [ 25.210081][ T8] device veth0_vlan left promiscuous mode [ 25.264985][ T442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.288360][ T440] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.44: iget: bad i_size value: 38620345925642 [ 25.293444][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.307865][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.309893][ T440] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 25.315144][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.327776][ T440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.333755][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.364385][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.405563][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.419832][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.448651][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.472887][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.490507][ T421] device veth0_vlan entered promiscuous mode [ 25.504684][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.514517][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.527821][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.535989][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.544143][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.551582][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.566336][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.604126][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.616560][ T421] device veth1_macvtap entered promiscuous mode [ 25.636882][ T460] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.651535][ T460] EXT4-fs error (device loop4): ext4_empty_dir:3156: inode #12: block 80: comm syz.4.46: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 25.671404][ T460] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #12: comm syz.4.46: directory missing '..' [ 25.671796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.690464][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.698745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.707210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.715496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.793342][ T480] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.824046][ T477] x86/PAT: syz.0.57:477 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 25.826544][ T484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.843938][ T484] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.871873][ T476] x86/PAT: syz.0.57:476 freeing invalid memtype [mem 0xfe000000-0xfe407fff] [ 25.873738][ T484] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 25.894908][ T307] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 25.949887][ T494] overlayfs: missing 'lowerdir' [ 26.162679][ T498] capability: warning: `syz.3.64' uses 32-bit capabilities (legacy support in use) [ 26.302722][ T307] usb 3-1: config 32 has an invalid descriptor of length 152, skipping remainder of the config [ 26.313151][ T307] usb 3-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.326277][ T307] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 26.335438][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.419480][ T499] set_capacity_and_notify: 5 callbacks suppressed [ 26.419491][ T499] loop0: detected capacity change from 0 to 131072 [ 26.442572][ T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.475943][ T499] F2FS-fs (loop0): invalid crc value [ 26.483400][ T499] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.492673][ T306] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 26.511622][ T499] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 26.518842][ T499] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 26.637232][ T509] Zero length message leads to an empty skb [ 26.642572][ T307] usb 3-1: string descriptor 0 read error: -71 [ 26.649738][ T307] hub 3-1:32.0: bad descriptor, ignoring hub [ 26.655934][ T307] hub: probe of 3-1:32.0 failed with error -5 [ 26.682574][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 26.710050][ T511] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 26.742916][ T307] usb 3-1: USB disconnect, device number 3 [ 26.802584][ T20] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 26.821128][ T20] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 26.830449][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.839452][ T20] usb 4-1: config 0 descriptor?? [ 26.852653][ T306] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.863248][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.883012][ T20] usb 4-1: bad CDC descriptors [ 26.898695][ T306] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.072685][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.082249][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.096861][ T306] usb 5-1: Product: syz [ 27.102653][ T306] usb 5-1: Manufacturer: syz [ 27.107515][ T306] usb 5-1: SerialNumber: syz [ 27.113942][ T526] loop0: detected capacity change from 0 to 512 [ 27.121863][ T526] EXT4-fs (loop0): Ignoring removed oldalloc option [ 27.130191][ T526] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 27.139723][ T526] EXT4-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 27.141130][ T528] loop2: detected capacity change from 0 to 512 [ 27.194164][ T528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.502580][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.612043][ T307] usb 4-1: USB disconnect, device number 3 [ 27.626483][ T538] loop3: detected capacity change from 0 to 512 [ 27.704850][ T538] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.714683][ T538] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 27.723812][ T538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 27.731856][ T538] System zones: 0-2, 18-18, 34-34 [ 27.737851][ T538] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.76: bad orphan inode 15 [ 27.748016][ T538] ext4_test_bit(bit=14, block=18) = 1 [ 27.753461][ T538] is_bad_inode(inode)=0 [ 27.757639][ T538] NEXT_ORPHAN(inode)=2264924160 [ 27.762574][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 27.762621][ T538] max_ino=32 [ 27.770914][ T538] i_nlink=0 [ 27.774464][ T538] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.76: corrupted inode contents [ 27.786650][ T538] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #15: comm syz.3.76: mark_inode_dirty error [ 27.798193][ T538] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #15: comm syz.3.76: corrupted inode contents [ 27.810191][ T538] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #15: comm syz.3.76: mark_inode_dirty error [ 27.822234][ T538] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2960: inode #15: comm syz.3.76: mark inode dirty (error -117) [ 27.836057][ T538] EXT4-fs warning (device loop3): ext4_evict_inode:305: xattr delete (err -117) [ 27.845274][ T538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.877423][ T538] FAULT_INJECTION: forcing a failure. [ 27.877423][ T538] name failslab, interval 1, probability 5, space 0, times 100 [ 27.890339][ T538] CPU: 0 PID: 538 Comm: syz.3.76 Not tainted syzkaller #0 [ 27.897460][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.907511][ T538] Call Trace: [ 27.910768][ T538] [ 27.913676][ T538] __dump_stack+0x21/0x30 [ 27.918022][ T538] dump_stack_lvl+0x110/0x170 [ 27.922679][ T538] ? show_regs_print_info+0x20/0x20 [ 27.927864][ T538] dump_stack+0x15/0x20 [ 27.931998][ T538] should_fail+0x3ab/0x500 [ 27.936387][ T538] __should_failslab+0xa4/0xe0 [ 27.941136][ T538] should_failslab+0x9/0x20 [ 27.945647][ T538] slab_pre_alloc_hook+0x39/0xd0 [ 27.950563][ T538] kmem_cache_alloc_trace+0x48/0x270 [ 27.955842][ T538] ? audit_log_d_path+0xc6/0x240 [ 27.960756][ T538] audit_log_d_path+0xc6/0x240 [ 27.965494][ T538] ? audit_log_untrustedstring+0xe6/0x100 [ 27.971186][ T538] common_lsm_audit+0x322/0x1670 [ 27.976097][ T538] ? avc_audit_pre_callback+0x290/0x290 [ 27.981616][ T538] ? ipv6_skb_to_auditdata+0xdd0/0xdd0 [ 27.987046][ T538] ? avc_update_node+0x2c6/0x8a0 [ 27.991966][ T538] slow_avc_audit+0x1c4/0x240 [ 27.996645][ T538] ? avc_get_hash_stats+0x180/0x180 [ 28.001845][ T538] ? avc_has_perm_noaudit+0x313/0x5c0 [ 28.007223][ T538] ? path_openat+0x284f/0x2f80 [ 28.012077][ T538] avc_has_perm+0x1fb/0x250 [ 28.016585][ T538] ? kmem_cache_free+0x100/0x320 [ 28.021523][ T538] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 28.026913][ T538] ? _kstrtoull+0x3bb/0x4c0 [ 28.031413][ T538] file_has_perm+0x52d/0x700 [ 28.035997][ T538] ? match_file+0x130/0x130 [ 28.040494][ T538] selinux_file_permission+0x3f4/0x510 [ 28.045951][ T538] security_file_permission+0x69/0xa0 [ 28.051325][ T538] vfs_write+0x1e6/0xfd0 [ 28.055569][ T538] ? file_end_write+0x1b0/0x1b0 [ 28.060412][ T538] ? __fget_files+0x2e1/0x340 [ 28.065082][ T538] ? __fdget_pos+0x1f7/0x380 [ 28.069662][ T538] ? ksys_write+0x70/0x260 [ 28.074069][ T538] ksys_write+0x14a/0x260 [ 28.078389][ T538] ? __ia32_sys_read+0x90/0x90 [ 28.083149][ T538] ? __kasan_check_write+0x14/0x20 [ 28.088257][ T538] ? switch_fpu_return+0x15d/0x2c0 [ 28.093366][ T538] __x64_sys_write+0x7b/0x90 [ 28.097952][ T538] x64_sys_call+0x8ef/0x9a0 [ 28.102454][ T538] do_syscall_64+0x4c/0xa0 [ 28.107004][ T538] ? clear_bhb_loop+0x50/0xa0 [ 28.111687][ T538] ? clear_bhb_loop+0x50/0xa0 [ 28.116361][ T538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.122258][ T538] RIP: 0033:0x7fd5a59a3b19 [ 28.126673][ T538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.146281][ T538] RSP: 002b:00007fd5a43fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 28.154728][ T538] RAX: ffffffffffffffda RBX: 00007fd5a5c29fa0 RCX: 00007fd5a59a3b19 [ 28.162698][ T538] RDX: 0000000000000006 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 28.170650][ T538] RBP: 00007fd5a5a3bb70 R08: 0000000000000000 R09: 0000000000000000 [ 28.178619][ T538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.186570][ T538] R13: 00007fd5a5c2a038 R14: 00007fd5a5c29fa0 R15: 00007ffcd4a55328 [ 28.194524][ T538] [ 28.244871][ T20] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 28.253357][ T20] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 28.261986][ T20] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 28.270986][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.280656][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.290502][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.303484][ T20] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 28.312649][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.321116][ T20] usb 3-1: config 0 descriptor?? [ 28.379399][ T551] FAULT_INJECTION: forcing a failure. [ 28.379399][ T551] name failslab, interval 1, probability 5, space 0, times 99 [ 28.392152][ T551] CPU: 0 PID: 551 Comm: syz.3.80 Not tainted syzkaller #0 [ 28.399259][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 28.409291][ T551] Call Trace: [ 28.412581][ T551] [ 28.415495][ T551] __dump_stack+0x21/0x30 [ 28.419808][ T551] dump_stack_lvl+0x110/0x170 [ 28.424479][ T551] ? show_regs_print_info+0x20/0x20 [ 28.429667][ T551] ? kvasprintf+0x118/0x1a0 [ 28.434164][ T551] ? bust_spinlocks+0xe0/0xe0 [ 28.438838][ T551] dump_stack+0x15/0x20 [ 28.442980][ T551] should_fail+0x3ab/0x500 [ 28.447405][ T551] __should_failslab+0xa4/0xe0 [ 28.452150][ T551] should_failslab+0x9/0x20 [ 28.456661][ T551] slab_pre_alloc_hook+0x39/0xd0 [ 28.461598][ T551] ? mm_alloc+0x23/0xb0 [ 28.465748][ T551] kmem_cache_alloc+0x44/0x260 [ 28.470507][ T551] mm_alloc+0x23/0xb0 [ 28.474475][ T551] alloc_bprm+0x1cb/0x740 [ 28.478801][ T551] ? __check_object_size+0x2dd/0x3b0 [ 28.484136][ T551] do_execveat_common+0x1aa/0xab0 [ 28.489157][ T551] __x64_sys_execveat+0xce/0xf0 [ 28.494004][ T551] x64_sys_call+0x5c3/0x9a0 [ 28.498501][ T551] do_syscall_64+0x4c/0xa0 [ 28.502986][ T551] ? clear_bhb_loop+0x50/0xa0 [ 28.507641][ T551] ? clear_bhb_loop+0x50/0xa0 [ 28.512399][ T551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.518270][ T551] RIP: 0033:0x7fd5a59a3b19 [ 28.522663][ T551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.542249][ T551] RSP: 002b:00007fd5a43fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 28.550644][ T551] RAX: ffffffffffffffda RBX: 00007fd5a5c29fa0 RCX: 00007fd5a59a3b19 [ 28.558596][ T551] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 28.566550][ T551] RBP: 00007fd5a5a3bb70 R08: 0000000000001000 R09: 0000000000000000 [ 28.574506][ T551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.582482][ T551] R13: 00007fd5a5c2a038 R14: 00007fd5a5c29fa0 R15: 00007ffcd4a55328 [ 28.590446][ T551] [ 28.593790][ T306] cdc_ncm 5-1:1.0: bind() failure [ 28.600766][ T20] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.614883][ T306] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 28.621860][ T20] usb 3-1: USB disconnect, device number 4 [ 28.629570][ T20] usblp0: removed [ 28.642589][ T306] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 28.650022][ T306] usb 5-1: USB disconnect, device number 3 [ 29.122365][ T560] loop4: detected capacity change from 0 to 512 [ 29.133195][ T560] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.164715][ T560] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 29.181792][ T560] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.205308][ T558] loop5: detected capacity change from 0 to 131072 [ 29.245545][ T558] F2FS-fs (loop5): invalid crc value [ 29.252263][ T558] F2FS-fs (loop5): Found nat_bits in checkpoint [ 29.274690][ T567] loop4: detected capacity change from 0 to 128 [ 29.292552][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.293134][ T567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.303689][ T558] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 29.311139][ T567] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.317573][ T558] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 29.348952][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 29.348963][ T30] audit: type=1400 audit(1793848461.664:219): avc: denied { map } for pid=566 comm="syz.4.85" path="/11/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.520035][ T30] audit: type=1400 audit(1793848461.834:220): avc: denied { ioctl } for pid=572 comm="syz.3.86" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.546892][ T573] loop3: detected capacity change from 0 to 128 [ 29.572577][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 29.621741][ T573] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 29.634855][ T6] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.635488][ T30] audit: type=1400 audit(1793848461.944:221): avc: denied { read write } for pid=580 comm="syz.4.89" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.656552][ T6] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.675833][ T573] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.689852][ T30] audit: type=1400 audit(1793848461.944:222): avc: denied { open } for pid=580 comm="syz.4.89" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.690938][ T573] syz.3.86 (pid 573) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 29.722890][ T558] syz.5.82 (558) used greatest stack depth: 21920 bytes left [ 29.724027][ T20] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 29.742099][ T20] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 29.750924][ T20] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 29.759929][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.770182][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 29.780517][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.793656][ T20] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 29.803149][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.812265][ T20] usb 3-1: config 0 descriptor?? [ 29.848784][ T586] loop3: detected capacity change from 0 to 512 [ 30.008190][ T586] EXT4-fs (loop3): Ignoring removed bh option [ 30.020972][ T586] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.91: corrupted in-inode xattr [ 30.034500][ T586] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.91: couldn't read orphan inode 15 (err -117) [ 30.047491][ T586] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,errors=continue,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 30.114071][ T20] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 30.201241][ T30] audit: type=1400 audit(1793848462.514:223): avc: denied { create } for pid=585 comm="syz.3.91" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 30.290585][ T599] loop0: detected capacity change from 0 to 256 [ 30.346885][ T599] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 30.361913][ T30] audit: type=1400 audit(1793848462.684:224): avc: denied { associate } for pid=598 comm="syz.0.94" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.383420][ T30] audit: type=1400 audit(1793848462.684:225): avc: denied { write open } for pid=598 comm="syz.0.94" path="/22/file1/file1" dev="loop0" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.407547][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 30.407805][ T30] audit: type=1400 audit(1793848462.684:226): avc: denied { lock } for pid=598 comm="syz.0.94" path="/22/file1/file1" dev="loop0" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.438132][ T30] audit: type=1400 audit(1793848462.684:227): avc: denied { unlink } for pid=598 comm="syz.0.94" name="file1" dev="loop0" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.465067][ T30] audit: type=1400 audit(1793848462.774:228): avc: denied { read write } for pid=531 comm="syz.2.74" name="lp0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 30.515106][ T602] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 30.523490][ T600] usblp0:failed reading printer status (-32) [ 30.552807][ T60] usb 3-1: USB disconnect, device number 5 [ 30.559246][ T60] usblp0: removed [ 30.599237][ T602] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.95: inode has both inline data and extents flags [ 30.612435][ T602] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 30.624375][ T602] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 30.752425][ T606] FAULT_INJECTION: forcing a failure. [ 30.752425][ T606] name failslab, interval 1, probability 5, space 0, times 10000 [ 30.765569][ T606] CPU: 0 PID: 606 Comm: syz.0.96 Not tainted syzkaller #0 [ 30.772660][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.772685][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.783778][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.793555][ T606] Call Trace: [ 30.793564][ T606] [ 30.793571][ T606] __dump_stack+0x21/0x30 [ 30.793596][ T606] dump_stack_lvl+0x110/0x170 [ 30.803382][ T26] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 30.806568][ T606] ? show_regs_print_info+0x20/0x20 [ 30.809487][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.813787][ T606] dump_stack+0x15/0x20 [ 30.813807][ T606] should_fail+0x3ab/0x500 [ 30.813824][ T606] __should_failslab+0xa4/0xe0 [ 30.853818][ T606] should_failslab+0x9/0x20 [ 30.858304][ T606] slab_pre_alloc_hook+0x39/0xd0 [ 30.863226][ T606] ? security_inode_alloc+0x33/0x110 [ 30.868493][ T606] kmem_cache_alloc+0x44/0x260 [ 30.873254][ T606] security_inode_alloc+0x33/0x110 [ 30.878342][ T606] inode_init_always+0x72c/0x9b0 [ 30.883259][ T606] iget_locked+0x20d/0x850 [ 30.887652][ T606] kernfs_get_inode+0x4b/0x6d0 [ 30.892389][ T606] kernfs_iop_lookup+0x20f/0x310 [ 30.897302][ T606] __lookup_slow+0x2b8/0x410 [ 30.901866][ T606] ? lookup_one_len+0x2d0/0x2d0 [ 30.906706][ T606] ? down_read+0xab/0x100 [ 30.911031][ T606] ? handle_dots+0xe10/0xe10 [ 30.915597][ T606] lookup_slow+0x57/0x70 [ 30.919814][ T606] walk_component+0x326/0x460 [ 30.924466][ T606] link_path_walk+0x688/0xde0 [ 30.929120][ T606] ? handle_lookup_down+0x130/0x130 [ 30.934312][ T606] path_openat+0x282/0x2f80 [ 30.938807][ T606] ? __kasan_slab_alloc+0xc9/0xe0 [ 30.943806][ T606] ? __kasan_slab_alloc+0xb7/0xe0 [ 30.948806][ T606] ? slab_post_alloc_hook+0x4f/0x2b0 [ 30.954063][ T606] ? do_sys_openat2+0xeb/0x7f0 [ 30.958817][ T606] ? __x64_sys_openat+0x136/0x160 [ 30.963815][ T606] ? x64_sys_call+0x219/0x9a0 [ 30.968486][ T606] ? do_syscall_64+0x4c/0xa0 [ 30.973051][ T606] ? do_filp_open+0x400/0x400 [ 30.977708][ T606] do_filp_open+0x1df/0x400 [ 30.982185][ T606] ? vfs_tmpfile+0x2d0/0x2d0 [ 30.986762][ T606] ? noop_direct_IO+0x20/0x20 [ 30.991417][ T606] do_sys_openat2+0x15e/0x7f0 [ 30.996067][ T606] ? __se_sys_futex+0x135/0x330 [ 31.000895][ T606] ? __fget_files+0x2e1/0x340 [ 31.005547][ T606] ? do_sys_open+0xe0/0xe0 [ 31.009940][ T606] ? __x64_sys_futex+0x100/0x100 [ 31.014856][ T606] __x64_sys_openat+0x136/0x160 [ 31.019681][ T606] x64_sys_call+0x219/0x9a0 [ 31.024162][ T606] do_syscall_64+0x4c/0xa0 [ 31.028571][ T606] ? clear_bhb_loop+0x50/0xa0 [ 31.033223][ T606] ? clear_bhb_loop+0x50/0xa0 [ 31.037877][ T606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.043745][ T606] RIP: 0033:0x7fb5eb1cbb19 [ 31.048136][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.067731][ T606] RSP: 002b:00007fb5e9c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 31.076124][ T606] RAX: ffffffffffffffda RBX: 00007fb5eb452090 RCX: 00007fb5eb1cbb19 [ 31.084072][ T606] RDX: 0000000000000001 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 31.092020][ T606] RBP: 00007fb5eb263b70 R08: 0000000000000000 R09: 0000000000000000 [ 31.099964][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.107926][ T606] R13: 00007fb5eb452128 R14: 00007fb5eb452090 R15: 00007ffd32a236b8 [ 31.115876][ T606] [ 31.126915][ T608] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.142026][ T26] usb 6-1: config 0 descriptor?? [ 31.147426][ T606] FAULT_INJECTION: forcing a failure. [ 31.147426][ T606] name failslab, interval 1, probability 5, space 0, times 9999 [ 31.154174][ T608] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 31.160507][ T606] CPU: 1 PID: 606 Comm: syz.0.96 Not tainted syzkaller #0 [ 31.177321][ T608] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.184176][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.184193][ T606] Call Trace: [ 31.184199][ T606] [ 31.184204][ T606] __dump_stack+0x21/0x30 [ 31.184225][ T606] dump_stack_lvl+0x110/0x170 [ 31.184240][ T606] ? show_regs_print_info+0x20/0x20 [ 31.184257][ T606] ? prandom_u32+0x24d/0x290 [ 31.184274][ T606] dump_stack+0x15/0x20 [ 31.184288][ T606] should_fail+0x3ab/0x500 [ 31.238054][ T606] __should_failslab+0xa4/0xe0 [ 31.242828][ T606] should_failslab+0x9/0x20 [ 31.247332][ T606] slab_pre_alloc_hook+0x39/0xd0 [ 31.252266][ T606] kmem_cache_alloc_trace+0x48/0x270 [ 31.257553][ T606] ? raw_ioctl+0x190a/0x3040 [ 31.262141][ T606] raw_ioctl+0x190a/0x3040 [ 31.266550][ T606] ? ioctl_has_perm+0x1b8/0x4f0 [ 31.271413][ T606] ? ioctl_has_perm+0x3ab/0x4f0 [ 31.276259][ T606] ? audio_source_pcm_show+0xe0/0xe0 [ 31.281534][ T606] ? has_cap_mac_admin+0x370/0x370 [ 31.286641][ T606] ? put_vma+0x44/0x60 [ 31.290700][ T606] ? do_user_addr_fault+0x9e5/0x11c0 [ 31.295991][ T606] ? __fget_files+0x2e1/0x340 [ 31.300666][ T606] ? security_file_ioctl+0x84/0xa0 [ 31.305775][ T606] ? audio_source_pcm_show+0xe0/0xe0 [ 31.311055][ T606] __se_sys_ioctl+0x121/0x1a0 [ 31.315739][ T606] __x64_sys_ioctl+0x7b/0x90 [ 31.320323][ T606] x64_sys_call+0x2f/0x9a0 [ 31.324734][ T606] do_syscall_64+0x4c/0xa0 [ 31.329145][ T606] ? clear_bhb_loop+0x50/0xa0 [ 31.333818][ T606] ? clear_bhb_loop+0x50/0xa0 [ 31.338488][ T606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.344372][ T606] RIP: 0033:0x7fb5eb1cb7ab [ 31.348781][ T606] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 31.368379][ T606] RSP: 002b:00007fb5e9bfff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.376788][ T606] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fb5eb1cb7ab [ 31.384756][ T606] RDX: 00007fb5e9c00fd0 RSI: 0000000041015500 RDI: 0000000000000008 [ 31.392718][ T606] RBP: 00007fb5e9c00fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 31.400682][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5e9bfffa0 [ 31.408648][ T606] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000 [ 31.416615][ T606] [ 31.448005][ T606] netlink: 'syz.0.96': attribute type 4 has an invalid length. [ 31.462392][ T606] FAULT_INJECTION: forcing a failure. [ 31.462392][ T606] name failslab, interval 1, probability 5, space 0, times 100 [ 31.476167][ T622] set_capacity_and_notify: 3 callbacks suppressed [ 31.476181][ T622] loop2: detected capacity change from 0 to 128 [ 31.477789][ T624] loop4: detected capacity change from 0 to 1024 [ 31.482928][ T606] CPU: 1 PID: 606 Comm: syz.0.96 Not tainted syzkaller #0 [ 31.502254][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.512309][ T606] Call Trace: [ 31.515580][ T606] [ 31.518499][ T606] __dump_stack+0x21/0x30 [ 31.522823][ T606] dump_stack_lvl+0x110/0x170 [ 31.527490][ T606] ? show_regs_print_info+0x20/0x20 [ 31.532681][ T606] dump_stack+0x15/0x20 [ 31.536822][ T606] should_fail+0x3ab/0x500 [ 31.541247][ T606] __should_failslab+0xa4/0xe0 [ 31.545991][ T606] should_failslab+0x9/0x20 [ 31.550472][ T606] slab_pre_alloc_hook+0x39/0xd0 [ 31.555389][ T606] ? __alloc_skb+0xe4/0x730 [ 31.559870][ T606] kmem_cache_alloc+0x44/0x260 [ 31.564636][ T606] __alloc_skb+0xe4/0x730 [ 31.568961][ T606] rtmsg_fib+0xdd/0x480 [ 31.573114][ T606] fib_table_delete+0xcbe/0x1180 [ 31.578034][ T606] ? nexthop_get_nhc_lookup+0x820/0x820 [ 31.583559][ T606] ? kasan_set_track+0x5b/0x70 [ 31.588312][ T606] ? kasan_set_track+0x4a/0x70 [ 31.593052][ T606] ? kasan_set_free_info+0x23/0x40 [ 31.598143][ T606] ? ____kasan_slab_free+0x125/0x160 [ 31.603409][ T606] ? __kasan_slab_free+0x11/0x20 [ 31.608325][ T606] ? slab_free_freelist_hook+0xc2/0x190 [ 31.613871][ T606] ? kmem_cache_free+0x100/0x320 [ 31.618792][ T606] ? fib_new_table+0x10d/0x2b0 [ 31.623536][ T606] fib_del_ifaddr+0x48a/0x1c80 [ 31.628283][ T606] ? rtnl_setlink+0x350/0x4d0 [ 31.632939][ T606] ? netlink_rcv_skb+0x1e9/0x430 [ 31.637886][ T606] ? rtnetlink_rcv+0x1c/0x20 [ 31.642453][ T606] ? do_iter_readv_writev+0x3c8/0x5f0 [ 31.647804][ T606] ? do_iter_write+0x207/0x7b0 [ 31.652545][ T606] ? do_writev+0x14e/0x2c0 [ 31.656950][ T606] ? __x64_sys_writev+0x7d/0x90 [ 31.661786][ T606] ? do_syscall_64+0x4c/0xa0 [ 31.666354][ T606] ? fib_modify_prefix_metric+0x800/0x800 [ 31.672054][ T606] ? __kasan_check_write+0x14/0x20 [ 31.677144][ T606] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 31.682587][ T606] ? _raw_spin_lock+0xf0/0xf0 [ 31.687242][ T606] ? kmem_cache_free+0x100/0x320 [ 31.692165][ T606] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 31.697953][ T606] ? __wake_up+0x11c/0x180 [ 31.702349][ T606] ? remove_wait_queue+0x140/0x140 [ 31.707438][ T606] ? kfree_skbmem+0x10c/0x180 [ 31.712094][ T606] ? __kasan_check_write+0x14/0x20 [ 31.717185][ T606] ? rwsem_read_trylock+0x2af/0x640 [ 31.722366][ T606] ? down_read+0xab/0x100 [ 31.726698][ T606] fib_inetaddr_event+0xc9/0x310 [ 31.731617][ T606] blocking_notifier_call_chain+0xba/0x140 [ 31.737402][ T606] __inet_del_ifa+0x81f/0xd90 [ 31.742065][ T606] ? rcu_gp_kthread_wake+0x90/0x90 [ 31.747157][ T606] ? ip_mc_destroy_dev+0x39a/0x3e0 [ 31.752250][ T606] inetdev_event+0x646/0x1060 [ 31.756921][ T606] ? devinet_exit_net+0x220/0x220 [ 31.761922][ T606] ? up_read+0x56/0x1d0 [ 31.766055][ T606] raw_notifier_call_chain+0x90/0x100 [ 31.771408][ T606] call_netdevice_notifiers_mtu+0x13b/0x1c0 [ 31.777299][ T606] ? dev_set_mtu_ext+0x640/0x640 [ 31.782216][ T606] ? cgw_notifier+0xd6/0x390 [ 31.786791][ T606] ? raw_notifier_call_chain+0xe9/0x100 [ 31.792315][ T606] dev_set_mtu_ext+0x474/0x640 [ 31.797058][ T606] ? __kasan_check_write+0x14/0x20 [ 31.802150][ T606] ? dev_validate_mtu+0x170/0x170 [ 31.807153][ T606] ? vprintk_default+0x26/0x30 [ 31.811902][ T606] do_setlink+0x8f4/0x2970 [ 31.816300][ T606] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 31.822432][ T606] ? __nla_validate_parse+0x1e07/0x2850 [ 31.827962][ T606] ? __nla_validate+0x60/0x60 [ 31.832629][ T606] ? __sprint_symbol+0x12d/0x2c0 [ 31.837548][ T606] ? kallsyms_lookup_buildid+0x4fb/0x660 [ 31.843162][ T606] ? put_dec_trunc8+0x229/0x370 [ 31.847994][ T606] ? put_dec+0xd7/0xe0 [ 31.852041][ T606] ? number+0xc99/0xef0 [ 31.856197][ T606] rtnl_setlink+0x350/0x4d0 [ 31.860679][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 31.866038][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 31.871212][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 31.876565][ T606] ? avc_denied+0x1b0/0x1b0 [ 31.881052][ T606] ? mutex_lock+0x9b/0x1c0 [ 31.885447][ T606] ? wait_for_completion_killable_timeout+0x10/0x10 [ 31.892015][ T606] ? ns_capable+0x8c/0xf0 [ 31.896324][ T606] ? netlink_net_capable+0x125/0x160 [ 31.901589][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 31.906764][ T606] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 31.911683][ T606] ? rtnetlink_bind+0x80/0x80 [ 31.916337][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 31.921690][ T606] ? memcpy+0x56/0x70 [ 31.925653][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 31.931002][ T606] ? arch_stack_walk+0xee/0x140 [ 31.935835][ T606] ? avc_denied+0x1b0/0x1b0 [ 31.940318][ T606] ? stack_trace_save+0xa6/0xf0 [ 31.945148][ T606] ? avc_has_perm+0x163/0x250 [ 31.949808][ T606] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 31.955166][ T606] ? vfs_writev+0x2df/0x570 [ 31.959671][ T606] ? selinux_nlmsg_lookup+0x3a4/0x440 [ 31.965023][ T606] netlink_rcv_skb+0x1e9/0x430 [ 31.969768][ T606] ? rtnetlink_bind+0x80/0x80 [ 31.974421][ T606] ? netlink_ack+0xb10/0xb10 [ 31.978991][ T606] ? _copy_from_iter+0x4a4/0x10a0 [ 31.984017][ T606] ? __netlink_lookup+0x387/0x3b0 [ 31.989033][ T606] rtnetlink_rcv+0x1c/0x20 [ 31.993431][ T606] netlink_unicast+0x86c/0xa30 [ 31.998202][ T606] netlink_sendmsg+0x879/0xb80 [ 32.002949][ T606] ? avc_denied+0x1b0/0x1b0 [ 32.007433][ T606] ? netlink_getsockopt+0x530/0x530 [ 32.012612][ T606] ? security_socket_sendmsg+0x82/0xa0 [ 32.018049][ T606] sock_write_iter+0x2a6/0x3a0 [ 32.022795][ T606] ? sock_read_iter+0x380/0x380 [ 32.027632][ T606] ? file_has_perm+0x52d/0x700 [ 32.032378][ T606] do_iter_readv_writev+0x477/0x5f0 [ 32.037557][ T606] ? generic_file_rw_checks+0x2a0/0x2a0 [ 32.043081][ T606] ? fsnotify_perm+0x67/0x5b0 [ 32.047736][ T606] ? security_file_permission+0x79/0xa0 [ 32.053259][ T606] ? security_file_permission+0x83/0xa0 [ 32.058787][ T606] do_iter_write+0x207/0x7b0 [ 32.063355][ T606] vfs_writev+0x2df/0x570 [ 32.067662][ T606] ? do_writev+0x2c0/0x2c0 [ 32.072058][ T606] ? __fget_files+0x2e1/0x340 [ 32.076711][ T606] ? __fdget_pos+0x1f7/0x380 [ 32.081276][ T606] ? do_writev+0x76/0x2c0 [ 32.085584][ T606] do_writev+0x14e/0x2c0 [ 32.089804][ T606] ? do_readv+0x450/0x450 [ 32.094113][ T606] ? __kasan_check_write+0x14/0x20 [ 32.099202][ T606] ? switch_fpu_return+0x15d/0x2c0 [ 32.104294][ T606] __x64_sys_writev+0x7d/0x90 [ 32.108948][ T606] x64_sys_call+0x974/0x9a0 [ 32.113433][ T606] do_syscall_64+0x4c/0xa0 [ 32.117828][ T606] ? clear_bhb_loop+0x50/0xa0 [ 32.122484][ T606] ? clear_bhb_loop+0x50/0xa0 [ 32.127145][ T606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.133019][ T606] RIP: 0033:0x7fb5eb1cbb19 [ 32.137429][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.157011][ T606] RSP: 002b:00007fb5e9c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 32.165408][ T606] RAX: ffffffffffffffda RBX: 00007fb5eb452090 RCX: 00007fb5eb1cbb19 [ 32.173357][ T606] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 32.181304][ T606] RBP: 00007fb5eb263b70 R08: 0000000000000000 R09: 0000000000000000 [ 32.189253][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.197199][ T606] R13: 00007fb5eb452128 R14: 00007fb5eb452090 R15: 00007ffd32a236b8 [ 32.205153][ T606] [ 32.215320][ T606] FAULT_INJECTION: forcing a failure. [ 32.215320][ T606] name failslab, interval 1, probability 5, space 0, times 99 [ 32.228182][ T606] CPU: 0 PID: 606 Comm: syz.0.96 Not tainted syzkaller #0 [ 32.235296][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.245345][ T606] Call Trace: [ 32.248621][ T606] [ 32.251543][ T606] __dump_stack+0x21/0x30 [ 32.255877][ T606] dump_stack_lvl+0x110/0x170 [ 32.260550][ T606] ? show_regs_print_info+0x20/0x20 [ 32.265745][ T606] ? prandom_u32+0x24d/0x290 [ 32.270335][ T606] dump_stack+0x15/0x20 [ 32.274485][ T606] should_fail+0x3ab/0x500 [ 32.278899][ T606] __should_failslab+0xa4/0xe0 [ 32.283659][ T606] should_failslab+0x9/0x20 [ 32.288160][ T606] slab_pre_alloc_hook+0x39/0xd0 [ 32.293094][ T606] ? __alloc_skb+0xe4/0x730 [ 32.297595][ T606] kmem_cache_alloc+0x44/0x260 [ 32.302356][ T606] __alloc_skb+0xe4/0x730 [ 32.306680][ T606] inet_netconf_notify_devconf+0x169/0x220 [ 32.312483][ T606] inetdev_event+0x7b0/0x1060 [ 32.317155][ T606] ? devinet_exit_net+0x220/0x220 [ 32.322183][ T606] ? up_read+0x56/0x1d0 [ 32.326336][ T606] raw_notifier_call_chain+0x90/0x100 [ 32.331708][ T606] call_netdevice_notifiers_mtu+0x13b/0x1c0 [ 32.337604][ T606] ? dev_set_mtu_ext+0x640/0x640 [ 32.342541][ T606] ? cgw_notifier+0xd6/0x390 [ 32.347129][ T606] ? raw_notifier_call_chain+0xe9/0x100 [ 32.352669][ T606] dev_set_mtu_ext+0x474/0x640 [ 32.357430][ T606] ? __kasan_check_write+0x14/0x20 [ 32.362536][ T606] ? dev_validate_mtu+0x170/0x170 [ 32.367558][ T606] ? vprintk_default+0x26/0x30 [ 32.369884][ T616] loop3: detected capacity change from 0 to 131072 [ 32.372313][ T606] do_setlink+0x8f4/0x2970 [ 32.372333][ T606] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 32.380408][ T624] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,inode_readahead_blks=0x0000000000000001,block_validity,errors=remount-ro,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,. Quota mode: none. [ 32.383193][ T606] ? __nla_validate_parse+0x1e07/0x2850 [ 32.383216][ T606] ? __nla_validate+0x60/0x60 [ 32.383230][ T606] ? __sprint_symbol+0x12d/0x2c0 [ 32.383247][ T606] ? kallsyms_lookup_buildid+0x4fb/0x660 [ 32.390852][ T624] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.414370][ T606] ? put_dec_trunc8+0x229/0x370 [ 32.414391][ T606] ? put_dec+0xd7/0xe0 [ 32.414405][ T606] ? number+0xc99/0xef0 [ 32.414421][ T606] rtnl_setlink+0x350/0x4d0 [ 32.441803][ T624] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #12: comm syz.4.101: directory missing '..' [ 32.445430][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 32.445457][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 32.484595][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 32.489952][ T606] ? avc_denied+0x1b0/0x1b0 [ 32.494437][ T606] ? mutex_lock+0x9b/0x1c0 [ 32.498828][ T606] ? wait_for_completion_killable_timeout+0x10/0x10 [ 32.503422][ T26] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x1 [ 32.505391][ T606] ? ns_capable+0x8c/0xf0 [ 32.513436][ T26] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 32.516609][ T606] ? netlink_net_capable+0x125/0x160 [ 32.532950][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 32.538148][ T606] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 32.543064][ T606] ? rtnetlink_bind+0x80/0x80 [ 32.547712][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 32.553081][ T606] ? memcpy+0x56/0x70 [ 32.557041][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 32.562387][ T606] ? arch_stack_walk+0xee/0x140 [ 32.567215][ T606] ? avc_denied+0x1b0/0x1b0 [ 32.571691][ T606] ? stack_trace_save+0xa6/0xf0 [ 32.576521][ T606] ? avc_has_perm+0x163/0x250 [ 32.581176][ T606] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 32.586523][ T606] ? vfs_writev+0x2df/0x570 [ 32.591003][ T606] ? selinux_nlmsg_lookup+0x3a4/0x440 [ 32.596352][ T606] netlink_rcv_skb+0x1e9/0x430 [ 32.601094][ T606] ? rtnetlink_bind+0x80/0x80 [ 32.605757][ T606] ? netlink_ack+0xb10/0xb10 [ 32.610333][ T606] ? _copy_from_iter+0x4a4/0x10a0 [ 32.615338][ T606] ? __netlink_lookup+0x387/0x3b0 [ 32.620342][ T606] rtnetlink_rcv+0x1c/0x20 [ 32.624741][ T606] netlink_unicast+0x86c/0xa30 [ 32.629491][ T606] netlink_sendmsg+0x879/0xb80 [ 32.634238][ T606] ? avc_denied+0x1b0/0x1b0 [ 32.638735][ T606] ? netlink_getsockopt+0x530/0x530 [ 32.643909][ T606] ? security_socket_sendmsg+0x82/0xa0 [ 32.649344][ T606] sock_write_iter+0x2a6/0x3a0 [ 32.654086][ T606] ? sock_read_iter+0x380/0x380 [ 32.658929][ T606] ? file_has_perm+0x52d/0x700 [ 32.663668][ T606] do_iter_readv_writev+0x477/0x5f0 [ 32.668844][ T606] ? generic_file_rw_checks+0x2a0/0x2a0 [ 32.674367][ T606] ? fsnotify_perm+0x67/0x5b0 [ 32.679021][ T606] ? security_file_permission+0x79/0xa0 [ 32.684558][ T606] ? security_file_permission+0x83/0xa0 [ 32.690079][ T606] do_iter_write+0x207/0x7b0 [ 32.694646][ T606] vfs_writev+0x2df/0x570 [ 32.698949][ T606] ? do_writev+0x2c0/0x2c0 [ 32.703340][ T606] ? __fget_files+0x2e1/0x340 [ 32.707994][ T606] ? __fdget_pos+0x1f7/0x380 [ 32.712566][ T606] ? do_writev+0x76/0x2c0 [ 32.716893][ T606] do_writev+0x14e/0x2c0 [ 32.721114][ T606] ? do_readv+0x450/0x450 [ 32.725437][ T606] ? __kasan_check_write+0x14/0x20 [ 32.730540][ T606] ? switch_fpu_return+0x15d/0x2c0 [ 32.735631][ T606] __x64_sys_writev+0x7d/0x90 [ 32.740283][ T606] x64_sys_call+0x974/0x9a0 [ 32.744762][ T606] do_syscall_64+0x4c/0xa0 [ 32.749151][ T606] ? clear_bhb_loop+0x50/0xa0 [ 32.753803][ T606] ? clear_bhb_loop+0x50/0xa0 [ 32.758472][ T606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.764345][ T606] RIP: 0033:0x7fb5eb1cbb19 [ 32.768752][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.788351][ T606] RSP: 002b:00007fb5e9c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 32.796763][ T606] RAX: ffffffffffffffda RBX: 00007fb5eb452090 RCX: 00007fb5eb1cbb19 [ 32.804726][ T606] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 32.812684][ T606] RBP: 00007fb5eb263b70 R08: 0000000000000000 R09: 0000000000000000 [ 32.820642][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.828602][ T606] R13: 00007fb5eb452128 R14: 00007fb5eb452090 R15: 00007ffd32a236b8 [ 32.836561][ T606] [ 32.840697][ T26] cp2112 0003:10C4:EA90.0003: error requesting version [ 32.847815][ T606] FAULT_INJECTION: forcing a failure. [ 32.847815][ T606] name failslab, interval 1, probability 5, space 0, times 98 [ 32.848415][ T26] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 32.860528][ T606] CPU: 0 PID: 606 Comm: syz.0.96 Not tainted syzkaller #0 [ 32.870600][ T26] usb 6-1: USB disconnect, device number 2 [ 32.874968][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.874979][ T606] Call Trace: [ 32.874984][ T606] [ 32.874990][ T606] __dump_stack+0x21/0x30 [ 32.901303][ T606] dump_stack_lvl+0x110/0x170 [ 32.905968][ T606] ? show_regs_print_info+0x20/0x20 [ 32.911149][ T606] dump_stack+0x15/0x20 [ 32.915283][ T606] should_fail+0x3ab/0x500 [ 32.919681][ T606] __should_failslab+0xa4/0xe0 [ 32.924442][ T606] should_failslab+0x9/0x20 [ 32.928933][ T606] slab_pre_alloc_hook+0x39/0xd0 [ 32.933869][ T606] ? __alloc_skb+0xe4/0x730 [ 32.938352][ T606] kmem_cache_alloc+0x44/0x260 [ 32.943096][ T606] __alloc_skb+0xe4/0x730 [ 32.947404][ T606] inet6_rt_notify+0x293/0x480 [ 32.952146][ T606] ? rt6_nh_dump_exceptions+0x6b0/0x6b0 [ 32.957672][ T606] ? call_fib_notifiers+0xa0/0xc0 [ 32.962680][ T606] fib6_del+0xb9e/0xf00 [ 32.966822][ T606] ? fib6_locate+0x520/0x520 [ 32.971390][ T606] ? fib6_ifdown+0x2e8/0x4e0 [ 32.975957][ T606] fib6_clean_node+0x2a1/0x540 [ 32.980702][ T606] ? node_free_rcu+0x30/0x30 [ 32.985270][ T606] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 32.990714][ T606] fib6_walk_continue+0x54b/0x740 [ 32.995723][ T606] fib6_walk+0x153/0x280 [ 32.999951][ T606] fib6_clean_all+0x1a1/0x270 [ 33.004607][ T606] ? netlink_unicast+0x86c/0xa30 [ 33.009529][ T606] ? netlink_sendmsg+0x879/0xb80 [ 33.014449][ T606] ? rt6_sync_down_dev+0x140/0x140 [ 33.019543][ T606] ? fib6_del+0xf00/0xf00 [ 33.023854][ T606] ? node_free_rcu+0x30/0x30 [ 33.028424][ T606] ? rt6_sync_down_dev+0x140/0x140 [ 33.033518][ T606] ? __kasan_check_write+0x14/0x20 [ 33.038613][ T606] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 33.044053][ T606] rt6_disable_ip+0x12a/0x840 [ 33.048716][ T606] ? __kasan_check_write+0x14/0x20 [ 33.053807][ T606] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 33.059251][ T606] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 33.065037][ T606] ? pneigh_queue_purge+0x44d/0x4b0 [ 33.070217][ T606] ? fib6_ifdown+0x4e0/0x4e0 [ 33.074788][ T606] ? __kasan_check_read+0x11/0x20 [ 33.079792][ T606] addrconf_ifdown+0x144/0x1910 [ 33.084630][ T606] ? __neigh_ifdown+0x38d/0x3a0 [ 33.089469][ T606] ? addrconf_cleanup+0x1c0/0x1c0 [ 33.094490][ T606] ? __kasan_check_write+0x14/0x20 [ 33.099590][ T606] ? mutex_unlock+0x8f/0x230 [ 33.104176][ T606] ? __mutex_lock_slowpath+0x10/0x10 [ 33.109461][ T606] ? macsec_notify+0x10d/0x4c0 [ 33.114216][ T606] addrconf_notify+0x3bd/0xe00 [ 33.118979][ T606] raw_notifier_call_chain+0x90/0x100 [ 33.124334][ T606] call_netdevice_notifiers_mtu+0x13b/0x1c0 [ 33.130211][ T606] ? dev_set_mtu_ext+0x640/0x640 [ 33.135136][ T606] ? cgw_notifier+0xd6/0x390 [ 33.139711][ T606] ? raw_notifier_call_chain+0xe9/0x100 [ 33.145247][ T606] dev_set_mtu_ext+0x474/0x640 [ 33.150000][ T606] ? __kasan_check_write+0x14/0x20 [ 33.155096][ T606] ? dev_validate_mtu+0x170/0x170 [ 33.160101][ T606] ? vprintk_default+0x26/0x30 [ 33.164846][ T606] do_setlink+0x8f4/0x2970 [ 33.169245][ T606] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 33.175378][ T606] ? __nla_validate_parse+0x1e07/0x2850 [ 33.180907][ T606] ? __nla_validate+0x60/0x60 [ 33.185560][ T606] ? __sprint_symbol+0x12d/0x2c0 [ 33.190476][ T606] ? kallsyms_lookup_buildid+0x4fb/0x660 [ 33.196088][ T606] ? put_dec_trunc8+0x229/0x370 [ 33.200917][ T606] ? put_dec+0xd7/0xe0 [ 33.204965][ T606] ? number+0xc99/0xef0 [ 33.209100][ T606] rtnl_setlink+0x350/0x4d0 [ 33.213586][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 33.218943][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 33.224129][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 33.229486][ T606] ? avc_denied+0x1b0/0x1b0 [ 33.233978][ T606] ? mutex_lock+0x9b/0x1c0 [ 33.238384][ T606] ? wait_for_completion_killable_timeout+0x10/0x10 [ 33.244958][ T606] ? ns_capable+0x8c/0xf0 [ 33.249273][ T606] ? netlink_net_capable+0x125/0x160 [ 33.254637][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 33.259816][ T606] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 33.264738][ T606] ? rtnetlink_bind+0x80/0x80 [ 33.269400][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 33.274755][ T606] ? memcpy+0x56/0x70 [ 33.278720][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 33.284079][ T606] ? arch_stack_walk+0xee/0x140 [ 33.288925][ T606] ? avc_denied+0x1b0/0x1b0 [ 33.293419][ T606] ? stack_trace_save+0xa6/0xf0 [ 33.298256][ T606] ? avc_has_perm+0x163/0x250 [ 33.302918][ T606] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 33.308293][ T606] ? vfs_writev+0x2df/0x570 [ 33.312782][ T606] ? selinux_nlmsg_lookup+0x3a4/0x440 [ 33.318137][ T606] netlink_rcv_skb+0x1e9/0x430 [ 33.322892][ T606] ? rtnetlink_bind+0x80/0x80 [ 33.327554][ T606] ? netlink_ack+0xb10/0xb10 [ 33.332124][ T606] ? _copy_from_iter+0x4a4/0x10a0 [ 33.337132][ T606] ? __netlink_lookup+0x387/0x3b0 [ 33.342136][ T606] rtnetlink_rcv+0x1c/0x20 [ 33.346530][ T606] netlink_unicast+0x86c/0xa30 [ 33.351279][ T606] netlink_sendmsg+0x879/0xb80 [ 33.356023][ T606] ? avc_denied+0x1b0/0x1b0 [ 33.360504][ T606] ? netlink_getsockopt+0x530/0x530 [ 33.365684][ T606] ? security_socket_sendmsg+0x82/0xa0 [ 33.371125][ T606] sock_write_iter+0x2a6/0x3a0 [ 33.375870][ T606] ? sock_read_iter+0x380/0x380 [ 33.380701][ T606] ? file_has_perm+0x52d/0x700 [ 33.385445][ T606] do_iter_readv_writev+0x477/0x5f0 [ 33.390623][ T606] ? generic_file_rw_checks+0x2a0/0x2a0 [ 33.396149][ T606] ? fsnotify_perm+0x67/0x5b0 [ 33.400805][ T606] ? security_file_permission+0x79/0xa0 [ 33.406328][ T606] ? security_file_permission+0x83/0xa0 [ 33.411855][ T606] do_iter_write+0x207/0x7b0 [ 33.416427][ T606] vfs_writev+0x2df/0x570 [ 33.420735][ T606] ? do_writev+0x2c0/0x2c0 [ 33.425136][ T606] ? __fget_files+0x2e1/0x340 [ 33.429793][ T606] ? __fdget_pos+0x1f7/0x380 [ 33.434363][ T606] ? do_writev+0x76/0x2c0 [ 33.438676][ T606] do_writev+0x14e/0x2c0 [ 33.442897][ T606] ? do_readv+0x450/0x450 [ 33.447207][ T606] ? __kasan_check_write+0x14/0x20 [ 33.452302][ T606] ? switch_fpu_return+0x15d/0x2c0 [ 33.457400][ T606] __x64_sys_writev+0x7d/0x90 [ 33.462058][ T606] x64_sys_call+0x974/0x9a0 [ 33.466541][ T606] do_syscall_64+0x4c/0xa0 [ 33.470938][ T606] ? clear_bhb_loop+0x50/0xa0 [ 33.475597][ T606] ? clear_bhb_loop+0x50/0xa0 [ 33.480251][ T606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.486125][ T606] RIP: 0033:0x7fb5eb1cbb19 [ 33.490524][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.510107][ T606] RSP: 002b:00007fb5e9c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 33.518500][ T606] RAX: ffffffffffffffda RBX: 00007fb5eb452090 RCX: 00007fb5eb1cbb19 [ 33.526455][ T606] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 33.534405][ T606] RBP: 00007fb5eb263b70 R08: 0000000000000000 R09: 0000000000000000 [ 33.542354][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.550321][ T606] R13: 00007fb5eb452128 R14: 00007fb5eb452090 R15: 00007ffd32a236b8 [ 33.558276][ T606] [ 33.565648][ T606] FAULT_INJECTION: forcing a failure. [ 33.565648][ T606] name failslab, interval 1, probability 5, space 0, times 97 [ 33.578842][ T606] CPU: 1 PID: 606 Comm: syz.0.96 Not tainted syzkaller #0 [ 33.585976][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.596030][ T606] Call Trace: [ 33.599305][ T606] [ 33.602224][ T606] __dump_stack+0x21/0x30 [ 33.606541][ T606] dump_stack_lvl+0x110/0x170 [ 33.611203][ T606] ? show_regs_print_info+0x20/0x20 [ 33.616385][ T606] dump_stack+0x15/0x20 [ 33.620522][ T606] should_fail+0x3ab/0x500 [ 33.624920][ T606] __should_failslab+0xa4/0xe0 [ 33.629668][ T606] should_failslab+0x9/0x20 [ 33.634153][ T606] slab_pre_alloc_hook+0x39/0xd0 [ 33.639077][ T606] ? __alloc_skb+0xe4/0x730 [ 33.643556][ T606] kmem_cache_alloc+0x44/0x260 [ 33.648302][ T606] ? br_get_link_af_size_filtered+0xdc/0x190 [ 33.654267][ T606] __alloc_skb+0xe4/0x730 [ 33.658577][ T606] rtmsg_ifinfo_build_skb+0x75/0x180 [ 33.663874][ T606] rtmsg_ifinfo+0x7a/0x130 [ 33.668269][ T606] __dev_notify_flags+0xe0/0x5b0 [ 33.673186][ T606] ? __dev_change_flags+0x12d/0x6a0 [ 33.678364][ T606] ? __dev_change_flags+0x6a0/0x6a0 [ 33.683544][ T606] ? __dev_change_flags+0x4ce/0x6a0 [ 33.688737][ T606] ? dev_get_flags+0x1e0/0x1e0 [ 33.693481][ T606] ? dev_validate_mtu+0x170/0x170 [ 33.698485][ T606] dev_change_flags+0xe3/0x1a0 [ 33.703230][ T606] do_setlink+0xc95/0x2970 [ 33.707629][ T606] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 33.713764][ T606] ? __nla_validate_parse+0x1e07/0x2850 [ 33.719293][ T606] ? __nla_validate+0x60/0x60 [ 33.723947][ T606] ? __sprint_symbol+0x12d/0x2c0 [ 33.728875][ T606] ? kallsyms_lookup_buildid+0x4fb/0x660 [ 33.734567][ T606] ? put_dec_trunc8+0x229/0x370 [ 33.739397][ T606] ? put_dec+0xd7/0xe0 [ 33.743446][ T606] ? number+0xc99/0xef0 [ 33.747586][ T606] rtnl_setlink+0x350/0x4d0 [ 33.752065][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 33.757441][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 33.762618][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 33.767973][ T606] ? avc_denied+0x1b0/0x1b0 [ 33.772460][ T606] ? mutex_lock+0x9b/0x1c0 [ 33.776862][ T606] ? wait_for_completion_killable_timeout+0x10/0x10 [ 33.783431][ T606] ? ns_capable+0x8c/0xf0 [ 33.787738][ T606] ? netlink_net_capable+0x125/0x160 [ 33.793012][ T606] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 33.798212][ T606] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 33.803137][ T606] ? rtnetlink_bind+0x80/0x80 [ 33.807799][ T606] ? avc_has_perm_noaudit+0x398/0x5c0 [ 33.813165][ T606] ? memcpy+0x56/0x70 [ 33.817135][ T606] ? avc_has_perm_noaudit+0x313/0x5c0 [ 33.822490][ T606] ? arch_stack_walk+0xee/0x140 [ 33.827335][ T606] ? avc_denied+0x1b0/0x1b0 [ 33.831821][ T606] ? stack_trace_save+0xa6/0xf0 [ 33.836654][ T606] ? avc_has_perm+0x163/0x250 [ 33.841310][ T606] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 33.846660][ T606] ? vfs_writev+0x2df/0x570 [ 33.851147][ T606] ? selinux_nlmsg_lookup+0x3a4/0x440 [ 33.856588][ T606] netlink_rcv_skb+0x1e9/0x430 [ 33.861334][ T606] ? rtnetlink_bind+0x80/0x80 [ 33.866010][ T606] ? netlink_ack+0xb10/0xb10 [ 33.870585][ T606] ? _copy_from_iter+0x4a4/0x10a0 [ 33.875587][ T606] ? __netlink_lookup+0x387/0x3b0 [ 33.880591][ T606] rtnetlink_rcv+0x1c/0x20 [ 33.884987][ T606] netlink_unicast+0x86c/0xa30 [ 33.889737][ T606] netlink_sendmsg+0x879/0xb80 [ 33.894479][ T606] ? avc_denied+0x1b0/0x1b0 [ 33.898968][ T606] ? netlink_getsockopt+0x530/0x530 [ 33.904150][ T606] ? security_socket_sendmsg+0x82/0xa0 [ 33.909595][ T606] sock_write_iter+0x2a6/0x3a0 [ 33.914341][ T606] ? sock_read_iter+0x380/0x380 [ 33.919174][ T606] ? file_has_perm+0x52d/0x700 [ 33.923918][ T606] do_iter_readv_writev+0x477/0x5f0 [ 33.929098][ T606] ? generic_file_rw_checks+0x2a0/0x2a0 [ 33.934626][ T606] ? fsnotify_perm+0x67/0x5b0 [ 33.939287][ T606] ? security_file_permission+0x79/0xa0 [ 33.944813][ T606] ? security_file_permission+0x83/0xa0 [ 33.950339][ T606] do_iter_write+0x207/0x7b0 [ 33.954908][ T606] vfs_writev+0x2df/0x570 [ 33.959221][ T606] ? do_writev+0x2c0/0x2c0 [ 33.963616][ T606] ? __fget_files+0x2e1/0x340 [ 33.968269][ T606] ? __fdget_pos+0x1f7/0x380 [ 33.972838][ T606] ? do_writev+0x76/0x2c0 [ 33.977145][ T606] do_writev+0x14e/0x2c0 [ 33.981371][ T606] ? do_readv+0x450/0x450 [ 33.985677][ T606] ? __kasan_check_write+0x14/0x20 [ 33.990767][ T606] ? switch_fpu_return+0x15d/0x2c0 [ 33.995858][ T606] __x64_sys_writev+0x7d/0x90 [ 34.000519][ T606] x64_sys_call+0x974/0x9a0 [ 34.004999][ T606] do_syscall_64+0x4c/0xa0 [ 34.009397][ T606] ? clear_bhb_loop+0x50/0xa0 [ 34.014052][ T606] ? clear_bhb_loop+0x50/0xa0 [ 34.018708][ T606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.024579][ T606] RIP: 0033:0x7fb5eb1cbb19 [ 34.028974][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.048570][ T606] RSP: 002b:00007fb5e9c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 34.056979][ T606] RAX: ffffffffffffffda RBX: 00007fb5eb452090 RCX: 00007fb5eb1cbb19 [ 34.064941][ T606] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 34.072892][ T606] RBP: 00007fb5eb263b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.080846][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.088794][ T606] R13: 00007fb5eb452128 R14: 00007fb5eb452090 R15: 00007ffd32a236b8 [ 34.096758][ T606] [ 34.103130][ T616] F2FS-fs (loop3): invalid crc value [ 34.120722][ T629] fido_id[629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 34.125112][ T622] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 34.155104][ T622] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.185110][ T616] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.190289][ T606] syz.0.96 (606) used greatest stack depth: 20992 bytes left [ 34.201578][ T635] loop4: detected capacity change from 0 to 256 [ 34.222239][ T635] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 34.238012][ T616] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 34.270666][ T644] loop4: detected capacity change from 0 to 512 [ 34.404967][ T644] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 34.605687][ T644] loop4: detected capacity change from 0 to 512 [ 34.615327][ T644] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.108: inode has both inline data and extents flags [ 34.628730][ T644] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.108: couldn't read orphan inode 15 (err -117) [ 34.640895][ T644] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 34.672579][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.673022][ T651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 34.711017][ T654] loop5: detected capacity change from 0 to 512 [ 34.731161][ T657] loop4: detected capacity change from 0 to 512 [ 34.740080][ T654] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.763642][ T657] EXT4-fs (loop4): Ignoring removed bh option [ 34.779172][ T654] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 34.796971][ T657] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.111: corrupted in-inode xattr [ 34.798568][ T654] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.819556][ T657] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.111: couldn't read orphan inode 15 (err -117) [ 34.835721][ T657] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,errors=continue,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 34.912553][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 34.959152][ T668] loop5: detected capacity change from 0 to 128 [ 35.032620][ T6] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.038306][ T668] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.040986][ T6] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.041007][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.069284][ T668] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.096841][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.113952][ T672] loop0: detected capacity change from 0 to 1024 [ 35.132648][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.142425][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.152352][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 35.162402][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 35.242195][ T672] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.274150][ T672] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000008,grpquota,stripe=0x0000000000008000,debug_want_extra_isize=0x0000000000000080,delalloc,inlinecrypt,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 35.291914][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.312972][ T6] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.322018][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.331178][ T6] usb 3-1: config 0 descriptor?? [ 35.522598][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 35.533591][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 35.593237][ T6] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 35.607201][ T6] usb 3-1: USB disconnect, device number 6 [ 35.615225][ T6] usblp0: removed [ 35.634481][ T685] FAULT_INJECTION: forcing a failure. [ 35.634481][ T685] name failslab, interval 1, probability 5, space 0, times 10000 [ 35.647740][ T685] CPU: 1 PID: 685 Comm: syz.4.118 Not tainted syzkaller #0 [ 35.654945][ T685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.664996][ T685] Call Trace: [ 35.668268][ T685] [ 35.671194][ T685] __dump_stack+0x21/0x30 [ 35.675525][ T685] dump_stack_lvl+0x110/0x170 [ 35.680196][ T685] ? show_regs_print_info+0x20/0x20 [ 35.685388][ T685] dump_stack+0x15/0x20 [ 35.689537][ T685] should_fail+0x3ab/0x500 [ 35.693957][ T685] __should_failslab+0xa4/0xe0 [ 35.698716][ T685] should_failslab+0x9/0x20 [ 35.703218][ T685] slab_pre_alloc_hook+0x39/0xd0 [ 35.708157][ T685] ? security_inode_alloc+0x33/0x110 [ 35.713440][ T685] kmem_cache_alloc+0x44/0x260 [ 35.718205][ T685] security_inode_alloc+0x33/0x110 [ 35.723313][ T685] inode_init_always+0x72c/0x9b0 [ 35.728260][ T685] iget_locked+0x20d/0x850 [ 35.732672][ T685] kernfs_get_inode+0x4b/0x6d0 [ 35.737432][ T685] kernfs_iop_lookup+0x20f/0x310 [ 35.742371][ T685] __lookup_slow+0x2b8/0x410 [ 35.746976][ T685] ? lookup_one_len+0x2d0/0x2d0 [ 35.751824][ T685] ? down_read+0xab/0x100 [ 35.756150][ T685] ? handle_dots+0xe10/0xe10 [ 35.760739][ T685] lookup_slow+0x57/0x70 [ 35.764982][ T685] walk_component+0x326/0x460 [ 35.769660][ T685] link_path_walk+0x688/0xde0 [ 35.774340][ T685] ? handle_lookup_down+0x130/0x130 [ 35.779544][ T685] path_openat+0x282/0x2f80 [ 35.784050][ T685] ? __kasan_slab_alloc+0xc9/0xe0 [ 35.789086][ T685] ? __kasan_slab_alloc+0xb7/0xe0 [ 35.794115][ T685] ? slab_post_alloc_hook+0x4f/0x2b0 [ 35.799412][ T685] ? do_sys_openat2+0xeb/0x7f0 [ 35.804181][ T685] ? __x64_sys_openat+0x136/0x160 [ 35.809212][ T685] ? x64_sys_call+0x219/0x9a0 [ 35.813888][ T685] ? do_syscall_64+0x4c/0xa0 [ 35.818482][ T685] ? do_filp_open+0x400/0x400 [ 35.823167][ T685] do_filp_open+0x1df/0x400 [ 35.827670][ T685] ? vfs_tmpfile+0x2d0/0x2d0 [ 35.832271][ T685] do_sys_openat2+0x15e/0x7f0 [ 35.836955][ T685] ? __se_sys_futex+0x135/0x330 [ 35.841818][ T685] ? __fget_files+0x2e1/0x340 [ 35.846509][ T685] ? do_sys_open+0xe0/0xe0 [ 35.850947][ T685] ? __x64_sys_futex+0x100/0x100 [ 35.855896][ T685] __x64_sys_openat+0x136/0x160 [ 35.860755][ T685] x64_sys_call+0x219/0x9a0 [ 35.865263][ T685] do_syscall_64+0x4c/0xa0 [ 35.869685][ T685] ? clear_bhb_loop+0x50/0xa0 [ 35.874362][ T685] ? clear_bhb_loop+0x50/0xa0 [ 35.879043][ T685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.884938][ T685] RIP: 0033:0x7f11e6192b19 [ 35.889357][ T685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.908966][ T685] RSP: 002b:00007f11e4bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 35.917390][ T685] RAX: ffffffffffffffda RBX: 00007f11e6419090 RCX: 00007f11e6192b19 [ 35.925369][ T685] RDX: 0000000000000001 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 35.933342][ T685] RBP: 00007f11e622ab70 R08: 0000000000000000 R09: 0000000000000000 [ 35.941317][ T685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.949291][ T685] R13: 00007f11e6419128 R14: 00007f11e6419090 R15: 00007fff19c742a8 [ 35.957264][ T685] [ 35.987878][ T682] F2FS-fs (loop0): invalid crc value [ 36.002693][ T26] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 36.018547][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.019721][ T682] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.035785][ T26] usb 4-1: Product: syz [ 36.041304][ T26] usb 4-1: Manufacturer: syz [ 36.046377][ T26] usb 4-1: SerialNumber: syz [ 36.058656][ T682] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 36.063394][ T694] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 36.065497][ T682] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 36.187665][ T699] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.202545][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.252640][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.322784][ T26] r8152-cfgselector 4-1: Unknown version 0x6800 [ 36.353265][ T706] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.390350][ T706] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 36.407576][ T706] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.452548][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 36.492661][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 36.542613][ T26] r8152-cfgselector 4-1: Unknown version 0x0000 [ 36.555233][ T26] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 36.572638][ T6] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 36.581075][ T6] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 36.589876][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 36.599058][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.608855][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.618731][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.629101][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 36.639051][ T20] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 36.648188][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 36.658175][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.671191][ T6] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.680266][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.688929][ T6] usb 3-1: config 0 descriptor?? [ 36.812614][ T20] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 36.821706][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.829728][ T20] usb 5-1: Product: syz [ 36.833927][ T306] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 36.841412][ T20] usb 5-1: Manufacturer: syz [ 36.846004][ T20] usb 5-1: SerialNumber: syz [ 36.851101][ T20] usb 5-1: config 0 descriptor?? [ 36.953511][ T6] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.042121][ T716] set_capacity_and_notify: 2 callbacks suppressed [ 37.042139][ T716] loop3: detected capacity change from 0 to 1024 [ 37.043591][ T718] loop0: detected capacity change from 0 to 128 [ 37.072552][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 37.086387][ T716] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.089698][ T718] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 37.112301][ T718] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.124981][ T685] netlink: 'syz.4.118': attribute type 4 has an invalid length. [ 37.133843][ T685] FAULT_INJECTION: forcing a failure. [ 37.133843][ T685] name failslab, interval 1, probability 5, space 0, times 100 [ 37.143717][ T716] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000008,grpquota,stripe=0x0000000000008000,debug_want_extra_isize=0x0000000000000080,delalloc,inlinecrypt,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 37.147090][ T685] CPU: 1 PID: 685 Comm: syz.4.118 Not tainted syzkaller #0 [ 37.179319][ T685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.189383][ T685] Call Trace: [ 37.192668][ T685] [ 37.195604][ T685] __dump_stack+0x21/0x30 [ 37.199940][ T685] dump_stack_lvl+0x110/0x170 [ 37.204640][ T685] ? show_regs_print_info+0x20/0x20 [ 37.209851][ T685] dump_stack+0x15/0x20 [ 37.214012][ T685] should_fail+0x3ab/0x500 [ 37.218408][ T685] __should_failslab+0xa4/0xe0 [ 37.223147][ T685] should_failslab+0x9/0x20 [ 37.227627][ T685] slab_pre_alloc_hook+0x39/0xd0 [ 37.232547][ T685] __kmalloc+0x6d/0x2c0 [ 37.236691][ T685] ? tnode_new+0xc8/0x320 [ 37.241000][ T685] tnode_new+0xc8/0x320 [ 37.245130][ T685] resize+0x669/0x1d60 [ 37.249303][ T685] fib_remove_alias+0x4f0/0x730 [ 37.254143][ T685] fib_table_delete+0xd0c/0x1180 [ 37.259064][ T685] ? nexthop_get_nhc_lookup+0x820/0x820 [ 37.264590][ T685] ? kasan_set_track+0x5b/0x70 [ 37.269333][ T685] ? kasan_set_track+0x4a/0x70 [ 37.274072][ T685] ? kasan_set_free_info+0x23/0x40 [ 37.279159][ T685] ? ____kasan_slab_free+0x125/0x160 [ 37.284423][ T685] ? __kasan_slab_free+0x11/0x20 [ 37.289361][ T685] ? slab_free_freelist_hook+0xc2/0x190 [ 37.294910][ T685] ? kmem_cache_free+0x100/0x320 [ 37.299857][ T685] ? fib_new_table+0x10d/0x2b0 [ 37.302661][ T306] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.304612][ T685] fib_del_ifaddr+0x16fb/0x1c80 [ 37.304633][ T685] ? rtnl_setlink+0x350/0x4d0 [ 37.315622][ T306] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.320366][ T685] ? rtnetlink_rcv+0x1c/0x20 [ 37.320388][ T685] ? do_iter_write+0x207/0x7b0 [ 37.326062][ T306] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 37.334811][ T685] ? do_writev+0x14e/0x2c0 [ 37.334835][ T685] ? __x64_sys_writev+0x7d/0x90 [ 37.334849][ T685] ? do_syscall_64+0x4c/0xa0 [ 37.339726][ T306] usb 6-1: config 0 interface 0 has no altsetting 0 [ 37.344168][ T685] ? fib_modify_prefix_metric+0x800/0x800 [ 37.344192][ T685] ? __kasan_check_write+0x14/0x20 [ 37.344210][ T685] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 37.357431][ T306] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.361501][ T685] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 37.361529][ T685] ? __kasan_check_write+0x14/0x20 [ 37.366609][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.370916][ T685] ? rwsem_read_trylock+0x2af/0x640 [ 37.370942][ T685] ? down_read+0xab/0x100 [ 37.380992][ T306] usb 6-1: config 0 descriptor?? [ 37.383194][ T685] fib_inetaddr_event+0xc9/0x310 [ 37.383215][ T685] blocking_notifier_call_chain+0xba/0x140 [ 37.446593][ T685] __inet_del_ifa+0x81f/0xd90 [ 37.451268][ T685] ? rcu_gp_kthread_wake+0x90/0x90 [ 37.456377][ T685] ? ip_mc_destroy_dev+0x39a/0x3e0 [ 37.461484][ T685] inetdev_event+0x646/0x1060 [ 37.466158][ T685] ? devinet_exit_net+0x220/0x220 [ 37.471158][ T685] ? up_read+0x56/0x1d0 [ 37.475302][ T685] raw_notifier_call_chain+0x90/0x100 [ 37.480684][ T685] call_netdevice_notifiers_mtu+0x13b/0x1c0 [ 37.486556][ T685] ? dev_set_mtu_ext+0x640/0x640 [ 37.491471][ T685] ? cgw_notifier+0xd6/0x390 [ 37.496039][ T685] ? raw_notifier_call_chain+0xe9/0x100 [ 37.501564][ T685] dev_set_mtu_ext+0x474/0x640 [ 37.506304][ T685] ? __kasan_check_write+0x14/0x20 [ 37.511394][ T685] ? dev_validate_mtu+0x170/0x170 [ 37.516396][ T685] ? vprintk_default+0x26/0x30 [ 37.521134][ T685] do_setlink+0x8f4/0x2970 [ 37.525526][ T685] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 37.531654][ T685] ? __nla_validate_parse+0x1e07/0x2850 [ 37.537179][ T685] ? update_load_avg+0x442/0x1110 [ 37.542183][ T685] ? __nla_validate+0x60/0x60 [ 37.546838][ T685] rtnl_setlink+0x350/0x4d0 [ 37.551325][ T685] ? avc_has_perm_noaudit+0x398/0x5c0 [ 37.556677][ T685] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 37.561854][ T685] ? avc_has_perm_noaudit+0x313/0x5c0 [ 37.567206][ T685] ? avc_denied+0x1b0/0x1b0 [ 37.571695][ T685] ? mutex_lock+0x9b/0x1c0 [ 37.576092][ T685] ? wait_for_completion_killable_timeout+0x10/0x10 [ 37.582663][ T685] ? ns_capable+0x8c/0xf0 [ 37.586972][ T685] ? netlink_net_capable+0x125/0x160 [ 37.592241][ T685] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 37.597424][ T685] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 37.602345][ T685] ? rtnetlink_bind+0x80/0x80 [ 37.607005][ T685] ? avc_has_perm_noaudit+0x398/0x5c0 [ 37.612356][ T685] ? memcpy+0x56/0x70 [ 37.616321][ T685] ? avc_has_perm_noaudit+0x313/0x5c0 [ 37.621671][ T685] ? arch_stack_walk+0xee/0x140 [ 37.626503][ T685] ? avc_denied+0x1b0/0x1b0 [ 37.630986][ T685] ? stack_trace_save+0xa6/0xf0 [ 37.635820][ T685] ? avc_has_perm+0x163/0x250 [ 37.640476][ T685] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 37.645830][ T685] ? vfs_writev+0x2df/0x570 [ 37.650313][ T685] ? selinux_nlmsg_lookup+0x3a4/0x440 [ 37.655669][ T685] netlink_rcv_skb+0x1e9/0x430 [ 37.660416][ T685] ? rtnetlink_bind+0x80/0x80 [ 37.665074][ T685] ? netlink_ack+0xb10/0xb10 [ 37.669643][ T685] ? _copy_from_iter+0x4a4/0x10a0 [ 37.674647][ T685] ? __netlink_lookup+0x387/0x3b0 [ 37.679653][ T685] rtnetlink_rcv+0x1c/0x20 [ 37.684048][ T685] netlink_unicast+0x86c/0xa30 [ 37.688792][ T685] netlink_sendmsg+0x879/0xb80 [ 37.693535][ T685] ? avc_denied+0x1b0/0x1b0 [ 37.698021][ T685] ? netlink_getsockopt+0x530/0x530 [ 37.703200][ T685] ? security_socket_sendmsg+0x82/0xa0 [ 37.708640][ T685] sock_write_iter+0x2a6/0x3a0 [ 37.713389][ T685] ? sock_read_iter+0x380/0x380 [ 37.718221][ T685] ? file_has_perm+0x52d/0x700 [ 37.722965][ T685] do_iter_readv_writev+0x477/0x5f0 [ 37.728146][ T685] ? generic_file_rw_checks+0x2a0/0x2a0 [ 37.733676][ T685] ? fsnotify_perm+0x67/0x5b0 [ 37.738333][ T685] ? security_file_permission+0x79/0xa0 [ 37.743860][ T685] ? security_file_permission+0x83/0xa0 [ 37.749390][ T685] do_iter_write+0x207/0x7b0 [ 37.753962][ T685] vfs_writev+0x2df/0x570 [ 37.758277][ T685] ? do_writev+0x2c0/0x2c0 [ 37.762676][ T685] ? __fget_files+0x2e1/0x340 [ 37.767331][ T685] ? __fdget_pos+0x1f7/0x380 [ 37.771897][ T685] ? do_writev+0x76/0x2c0 [ 37.776206][ T685] do_writev+0x14e/0x2c0 [ 37.780426][ T685] ? do_readv+0x450/0x450 [ 37.784734][ T685] ? __kasan_check_write+0x14/0x20 [ 37.789824][ T685] ? switch_fpu_return+0x15d/0x2c0 [ 37.794916][ T685] __x64_sys_writev+0x7d/0x90 [ 37.799574][ T685] x64_sys_call+0x974/0x9a0 [ 37.804056][ T685] do_syscall_64+0x4c/0xa0 [ 37.808452][ T685] ? clear_bhb_loop+0x50/0xa0 [ 37.813114][ T685] ? clear_bhb_loop+0x50/0xa0 [ 37.817770][ T685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.823664][ T685] RIP: 0033:0x7f11e6192b19 [ 37.828061][ T685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.847649][ T685] RSP: 002b:00007f11e4bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 37.856048][ T685] RAX: ffffffffffffffda RBX: 00007f11e6419090 RCX: 00007f11e6192b19 [ 37.864003][ T685] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 37.871954][ T685] RBP: 00007f11e622ab70 R08: 0000000000000000 R09: 0000000000000000 [ 37.879907][ T685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.887857][ T685] R13: 00007f11e6419128 R14: 00007f11e6419090 R15: 00007fff19c742a8 [ 37.895816][ T685] [ 37.901176][ T685] FAULT_INJECTION: forcing a failure. [ 37.901176][ T685] name failslab, interval 1, probability 5, space 0, times 99 [ 37.913920][ T685] CPU: 1 PID: 685 Comm: syz.4.118 Not tainted syzkaller #0 [ 37.921114][ T685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.931150][ T685] Call Trace: [ 37.934414][ T685] [ 37.937326][ T685] __dump_stack+0x21/0x30 [ 37.941641][ T685] dump_stack_lvl+0x110/0x170 [ 37.946301][ T685] ? show_regs_print_info+0x20/0x20 [ 37.951482][ T685] dump_stack+0x15/0x20 [ 37.955617][ T685] should_fail+0x3ab/0x500 [ 37.960015][ T685] __should_failslab+0xa4/0xe0 [ 37.964760][ T685] should_failslab+0x9/0x20 [ 37.969242][ T685] slab_pre_alloc_hook+0x39/0xd0 [ 37.974162][ T685] ? __alloc_skb+0xe4/0x730 [ 37.978643][ T685] kmem_cache_alloc+0x44/0x260 [ 37.983387][ T685] __alloc_skb+0xe4/0x730 [ 37.987698][ T685] __neigh_notify+0x84/0x130 [ 37.992279][ T685] neigh_cleanup_and_release+0x2c/0x1a0 [ 37.997804][ T685] neigh_flush_dev+0x667/0x810 [ 38.002547][ T685] ? __kasan_check_write+0x14/0x20 [ 38.007643][ T685] __neigh_ifdown+0x3f/0x3a0 [ 38.012238][ T685] neigh_ifdown+0x1f/0x30 [ 38.016550][ T685] rt6_disable_ip+0x7b0/0x840 [ 38.021208][ T685] ? __kasan_check_write+0x14/0x20 [ 38.026299][ T685] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 38.031739][ T685] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 38.037525][ T685] ? pneigh_queue_purge+0x44d/0x4b0 [ 38.042704][ T685] ? fib6_ifdown+0x4e0/0x4e0 [ 38.047273][ T685] ? __kasan_check_read+0x11/0x20 [ 38.052279][ T685] addrconf_ifdown+0x144/0x1910 [ 38.057110][ T685] ? __neigh_ifdown+0x38d/0x3a0 [ 38.061939][ T685] ? addrconf_cleanup+0x1c0/0x1c0 [ 38.066945][ T685] ? __kasan_check_write+0x14/0x20 [ 38.072036][ T685] ? mutex_unlock+0x8f/0x230 [ 38.076609][ T685] ? __mutex_lock_slowpath+0x10/0x10 [ 38.081872][ T685] ? macsec_notify+0x10d/0x4c0 [ 38.086614][ T685] addrconf_notify+0x3bd/0xe00 [ 38.091359][ T685] raw_notifier_call_chain+0x90/0x100 [ 38.096711][ T685] call_netdevice_notifiers_mtu+0x13b/0x1c0 [ 38.102589][ T685] ? dev_set_mtu_ext+0x640/0x640 [ 38.107510][ T685] ? cgw_notifier+0xd6/0x390 [ 38.112079][ T685] ? raw_notifier_call_chain+0xe9/0x100 [ 38.117611][ T685] dev_set_mtu_ext+0x474/0x640 [ 38.122354][ T685] ? __kasan_check_write+0x14/0x20 [ 38.127453][ T685] ? dev_validate_mtu+0x170/0x170 [ 38.132465][ T685] ? vprintk_default+0x26/0x30 [ 38.137207][ T685] do_setlink+0x8f4/0x2970 [ 38.141605][ T685] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 38.147737][ T685] ? __nla_validate_parse+0x1e07/0x2850 [ 38.153264][ T685] ? update_load_avg+0x442/0x1110 [ 38.158274][ T685] ? __nla_validate+0x60/0x60 [ 38.162931][ T685] rtnl_setlink+0x350/0x4d0 [ 38.167413][ T685] ? avc_has_perm_noaudit+0x398/0x5c0 [ 38.172770][ T685] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 38.177947][ T685] ? avc_has_perm_noaudit+0x313/0x5c0 [ 38.183312][ T685] ? avc_denied+0x1b0/0x1b0 [ 38.187816][ T685] ? mutex_lock+0x9b/0x1c0 [ 38.192215][ T685] ? wait_for_completion_killable_timeout+0x10/0x10 [ 38.198783][ T685] ? ns_capable+0x8c/0xf0 [ 38.203092][ T685] ? netlink_net_capable+0x125/0x160 [ 38.208357][ T685] ? rtnl_dump_ifinfo+0x1460/0x1460 [ 38.213535][ T685] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 38.218451][ T685] ? rtnetlink_bind+0x80/0x80 [ 38.223105][ T685] ? avc_has_perm_noaudit+0x398/0x5c0 [ 38.228547][ T685] ? memcpy+0x56/0x70 [ 38.232513][ T685] ? avc_has_perm_noaudit+0x313/0x5c0 [ 38.237868][ T685] ? arch_stack_walk+0xee/0x140 [ 38.242701][ T685] ? avc_denied+0x1b0/0x1b0 [ 38.247182][ T685] ? stack_trace_save+0xa6/0xf0 [ 38.252013][ T685] ? avc_has_perm+0x163/0x250 [ 38.256669][ T685] ? avc_has_perm_noaudit+0x5c0/0x5c0 [ 38.262021][ T685] ? vfs_writev+0x2df/0x570 [ 38.266503][ T685] ? selinux_nlmsg_lookup+0x3a4/0x440 [ 38.271865][ T685] netlink_rcv_skb+0x1e9/0x430 [ 38.276623][ T685] ? rtnetlink_bind+0x80/0x80 [ 38.281289][ T685] ? netlink_ack+0xb10/0xb10 [ 38.285866][ T685] ? _copy_from_iter+0x4a4/0x10a0 [ 38.290886][ T685] ? __netlink_lookup+0x387/0x3b0 [ 38.295903][ T685] rtnetlink_rcv+0x1c/0x20 [ 38.300306][ T685] netlink_unicast+0x86c/0xa30 [ 38.305054][ T685] netlink_sendmsg+0x879/0xb80 [ 38.309800][ T685] ? avc_denied+0x1b0/0x1b0 [ 38.314284][ T685] ? netlink_getsockopt+0x530/0x530 [ 38.319465][ T685] ? security_socket_sendmsg+0x82/0xa0 [ 38.324903][ T685] sock_write_iter+0x2a6/0x3a0 [ 38.329651][ T685] ? sock_read_iter+0x380/0x380 [ 38.334483][ T685] ? file_has_perm+0x52d/0x700 [ 38.339232][ T685] do_iter_readv_writev+0x477/0x5f0 [ 38.344413][ T685] ? generic_file_rw_checks+0x2a0/0x2a0 [ 38.349941][ T685] ? fsnotify_perm+0x67/0x5b0 [ 38.354720][ T685] ? security_file_permission+0x79/0xa0 [ 38.360247][ T685] ? security_file_permission+0x83/0xa0 [ 38.365789][ T685] do_iter_write+0x207/0x7b0 [ 38.370359][ T685] vfs_writev+0x2df/0x570 [ 38.374673][ T685] ? do_writev+0x2c0/0x2c0 [ 38.379071][ T685] ? __fget_files+0x2e1/0x340 [ 38.383730][ T685] ? __fdget_pos+0x1f7/0x380 [ 38.388296][ T685] ? do_writev+0x76/0x2c0 [ 38.392606][ T685] do_writev+0x14e/0x2c0 [ 38.396829][ T685] ? do_readv+0x450/0x450 [ 38.401138][ T685] ? __kasan_check_write+0x14/0x20 [ 38.406235][ T685] ? switch_fpu_return+0x15d/0x2c0 [ 38.411326][ T685] __x64_sys_writev+0x7d/0x90 [ 38.415988][ T685] x64_sys_call+0x974/0x9a0 [ 38.420471][ T685] do_syscall_64+0x4c/0xa0 [ 38.424865][ T685] ? clear_bhb_loop+0x50/0xa0 [ 38.429524][ T685] ? clear_bhb_loop+0x50/0xa0 [ 38.434182][ T685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.440057][ T685] RIP: 0033:0x7f11e6192b19 [ 38.444451][ T685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.464036][ T685] RSP: 002b:00007f11e4bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 38.472428][ T685] RAX: ffffffffffffffda RBX: 00007f11e6419090 RCX: 00007f11e6192b19 [ 38.480379][ T685] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 000000000000000a [ 38.488328][ T685] RBP: 00007f11e622ab70 R08: 0000000000000000 R09: 0000000000000000 [ 38.496283][ T685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.504231][ T685] R13: 00007f11e6419128 R14: 00007f11e6419090 R15: 00007fff19c742a8 [ 38.512184][ T685] [ 38.522189][ T20] usb 3-1: USB disconnect, device number 7 [ 38.551034][ T20] usblp0: removed [ 38.561281][ T732] loop3: detected capacity change from 0 to 128 [ 38.586289][ T732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.602965][ T732] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.605716][ T734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 38.658826][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 38.658842][ T30] audit: type=1400 audit(1793848470.974:231): avc: denied { setopt } for pid=737 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.746632][ T747] loop0: detected capacity change from 0 to 512 [ 38.780666][ T747] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.842577][ T306] usbhid 6-1:0.0: can't add hid device: -71 [ 38.848682][ T306] usbhid: probe of 6-1:0.0 failed with error -71 [ 38.862357][ T747] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 38.862597][ T306] usb 6-1: USB disconnect, device number 3 [ 38.890390][ T747] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.963713][ T30] audit: type=1400 audit(1793848471.284:232): avc: denied { setopt } for pid=750 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.004492][ T30] audit: type=1400 audit(1793848471.284:233): avc: denied { write } for pid=750 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.259724][ T745] loop2: detected capacity change from 0 to 131072 [ 39.269684][ T745] F2FS-fs (loop2): invalid crc value [ 39.278095][ T745] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.311185][ T745] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 39.318180][ T745] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 39.411667][ T760] loop5: detected capacity change from 0 to 512 [ 39.441387][ T762] loop3: detected capacity change from 0 to 128 [ 39.454545][ T760] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 39.470086][ T762] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 39.472651][ T760] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.498310][ T762] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.522727][ T30] audit: type=1400 audit(1793848471.844:234): avc: denied { setattr } for pid=759 comm="syz.5.145" path="/25/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.575094][ T685] syz.4.118 (685) used greatest stack depth: 20864 bytes left [ 39.593974][ T6] usb 5-1: USB disconnect, device number 4 [ 39.605420][ T30] audit: type=1400 audit(1793848471.924:235): avc: denied { getopt } for pid=767 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.637640][ T30] audit: type=1400 audit(1793848471.954:236): avc: denied { execute } for pid=771 comm="syz.4.149" path="/22/file1" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.660238][ T30] audit: type=1400 audit(1793848471.954:237): avc: denied { append } for pid=773 comm="syz.5.150" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.698671][ T779] loop5: detected capacity change from 0 to 256 [ 39.717263][ T779] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.728252][ T779] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 39.738709][ T779] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 39.769184][ T781] loop4: detected capacity change from 0 to 1024 [ 39.775668][ T30] audit: type=1400 audit(1793848472.084:238): avc: denied { mounton } for pid=778 comm="syz.5.152" path="/29/file2/file0/bus" dev="loop5" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.808131][ T421] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 39.818903][ T421] exFAT-fs (loop5): Filesystem has been set read-only [ 39.826021][ T421] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 39.884479][ T781] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 39.898267][ T781] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 39.906004][ T26] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 39.914094][ T781] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,quota,,errors=continue. Quota mode: writeback. [ 40.097232][ T30] audit: type=1400 audit(1793848472.414:239): avc: denied { mounton } for pid=791 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 40.118982][ T30] audit: type=1400 audit(1793848472.424:240): avc: denied { create } for pid=791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.150813][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.157903][ T791] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.165487][ T791] device bridge_slave_0 entered promiscuous mode [ 40.173755][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.180834][ T791] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.188543][ T791] device bridge_slave_1 entered promiscuous mode [ 40.240536][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.247617][ T791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.254926][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.261954][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.269557][ T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.272621][ T26] usb 4-1: not running at top speed; connect to a high speed hub [ 40.300113][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.307967][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.315486][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.334768][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.343075][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.350096][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.357557][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.365877][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.372690][ T26] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 40.372938][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.391216][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.404322][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.419792][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.431185][ T791] device veth0_vlan entered promiscuous mode [ 40.438238][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.453968][ T791] device veth1_macvtap entered promiscuous mode [ 40.460843][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.470194][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.477811][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.492799][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.501217][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.512630][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 40.535806][ T800] loop6: detected capacity change from 0 to 128 [ 40.547345][ T26] usb 4-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40 [ 40.556414][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.566169][ T798] F2FS-fs (loop2): invalid crc value [ 40.571495][ T26] usb 4-1: Product: syz [ 40.577877][ T26] usb 4-1: Manufacturer: syz [ 40.583509][ T800] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 40.599996][ T26] usb 4-1: SerialNumber: syz [ 40.604883][ T800] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.617653][ T798] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.632670][ T20] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.643125][ T798] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 40.644114][ T20] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.650525][ T798] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 40.660338][ T20] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 40.681499][ T20] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.688331][ T20] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 40.697616][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.708934][ T20] usb 5-1: config 0 descriptor?? [ 40.804290][ T811] overlayfs: missing 'lowerdir' [ 40.942685][ T26] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.988419][ T26] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 40.996931][ T26] usb 4-1: 2:1 : sample bitwidth 2 in over sample bytes 0 [ 41.004115][ T26] usb 4-1: 2:1 : unsupported sample bitwidth 2 in 0 bytes [ 41.038188][ T26] usb 4-1: USB disconnect, device number 5 [ 41.205288][ T821] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.212233][ T821] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 41.221716][ T821] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 41.232793][ T821] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,data_err=abort,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000017,usrjquota=./file0,,errors=continue. Quota mode: writeback. [ 41.263514][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.430424][ T60] usb 5-1: USB disconnect, device number 5 [ 41.463517][ T825] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.494380][ T825] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 41.511474][ T825] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.575116][ T831] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 41.589108][ T831] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.590980][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.606464][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.619179][ T829] device bridge_slave_0 entered promiscuous mode [ 41.628498][ T829] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.635700][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.643295][ T829] device bridge_slave_1 entered promiscuous mode [ 41.672364][ T842] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.723198][ T829] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.730291][ T829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.737576][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.744622][ T829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.781020][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.798955][ T593] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.811435][ T593] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.821201][ T846] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 41.836557][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.839445][ T846] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 41.845630][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.854563][ T848] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 41.859025][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.892949][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.901308][ T593] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.908369][ T593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.915910][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.924101][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.963414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.973142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.984661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.992171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.000541][ T45] device bridge_slave_1 left promiscuous mode [ 42.011414][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.019510][ T859] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.029479][ T45] device bridge_slave_0 left promiscuous mode [ 42.037749][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.050445][ T855] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 42.052018][ T854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.074012][ T854] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.086341][ T865] set_capacity_and_notify: 10 callbacks suppressed [ 42.086357][ T865] loop0: detected capacity change from 0 to 128 [ 42.104147][ T45] device veth1_macvtap left promiscuous mode [ 42.110197][ T45] device veth0_vlan left promiscuous mode [ 42.126838][ T859] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 42.156470][ T859] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.190080][ T865] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 42.205596][ T865] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.253603][ T829] device veth0_vlan entered promiscuous mode [ 42.274475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.284022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.295480][ T877] loop4: detected capacity change from 0 to 256 [ 42.295583][ T829] device veth1_macvtap entered promiscuous mode [ 42.312675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.324917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.329738][ T879] loop0: detected capacity change from 0 to 4096 [ 42.333493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.343704][ T877] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 42.362938][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.371637][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.397010][ T879] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 42.418114][ T879] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 42.439661][ T886] FAULT_INJECTION: forcing a failure. [ 42.439661][ T886] name failslab, interval 1, probability 5, space 0, times 98 [ 42.452362][ T886] CPU: 0 PID: 886 Comm: syz.4.189 Not tainted syzkaller #0 [ 42.459548][ T886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.469583][ T886] Call Trace: [ 42.472844][ T886] [ 42.475753][ T886] __dump_stack+0x21/0x30 [ 42.480070][ T886] dump_stack_lvl+0x110/0x170 [ 42.484730][ T886] ? show_regs_print_info+0x20/0x20 [ 42.489906][ T886] ? prandom_u32+0x24d/0x290 [ 42.494472][ T886] dump_stack+0x15/0x20 [ 42.498604][ T886] should_fail+0x3ab/0x500 [ 42.502996][ T886] __should_failslab+0xa4/0xe0 [ 42.507739][ T886] should_failslab+0x9/0x20 [ 42.512236][ T886] slab_pre_alloc_hook+0x39/0xd0 [ 42.517156][ T886] ? __sigqueue_alloc+0x137/0x210 [ 42.522158][ T886] kmem_cache_alloc+0x44/0x260 [ 42.526899][ T886] __sigqueue_alloc+0x137/0x210 [ 42.531729][ T886] __send_signal+0x21a/0xce0 [ 42.536294][ T886] do_notify_parent+0x6a3/0x830 [ 42.541125][ T886] ? complete_signal+0xd10/0xd10 [ 42.546042][ T886] release_task+0xe39/0x1210 [ 42.550617][ T886] do_exit+0x1a9c/0x29a0 [ 42.554836][ T886] ? put_task_struct+0x90/0x90 [ 42.559578][ T886] ? _kstrtoull+0x3bb/0x4c0 [ 42.564061][ T886] ? __kasan_check_write+0x14/0x20 [ 42.569155][ T886] ? _raw_spin_lock_irq+0x95/0xf0 [ 42.574158][ T886] do_group_exit+0x149/0x310 [ 42.578723][ T886] ? __kasan_check_write+0x14/0x20 [ 42.583810][ T886] ? recalc_sigpending+0x1ac/0x230 [ 42.588898][ T886] get_signal+0x64f/0x1430 [ 42.593292][ T886] arch_do_signal_or_restart+0xe2/0x1100 [ 42.598901][ T886] ? file_end_write+0x1b0/0x1b0 [ 42.603727][ T886] ? __fget_files+0x2e1/0x340 [ 42.608378][ T886] ? get_sigframe_size+0x10/0x10 [ 42.613292][ T886] ? __se_sys_futex+0x135/0x330 [ 42.618122][ T886] ? __kasan_check_write+0x14/0x20 [ 42.623211][ T886] ? __ia32_sys_read+0x90/0x90 [ 42.627952][ T886] exit_to_user_mode_loop+0xa7/0xe0 [ 42.633128][ T886] exit_to_user_mode_prepare+0x87/0xd0 [ 42.638567][ T886] syscall_exit_to_user_mode+0x1a/0x30 [ 42.644007][ T886] do_syscall_64+0x58/0xa0 [ 42.648401][ T886] ? clear_bhb_loop+0x50/0xa0 [ 42.653052][ T886] ? clear_bhb_loop+0x50/0xa0 [ 42.657712][ T886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.663600][ T886] RIP: 0033:0x7f11e6192b19 [ 42.667993][ T886] Code: Unable to access opcode bytes at RIP 0x7f11e6192aef. [ 42.675332][ T886] RSP: 002b:00007f11e4bea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.683728][ T886] RAX: fffffffffffffe00 RBX: 00007f11e6418fa8 RCX: 00007f11e6192b19 [ 42.691678][ T886] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11e6418fa8 [ 42.699624][ T886] RBP: 00007f11e6418fa0 R08: 0000000000000000 R09: 0000000000000000 [ 42.707571][ T886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.715518][ T886] R13: 00007f11e6419038 R14: 00007fff19c741c0 R15: 00007fff19c742a8 [ 42.723491][ T886] [ 42.726738][ T307] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 42.780860][ T891] loop4: detected capacity change from 0 to 4096 [ 42.796754][ T894] loop0: detected capacity change from 0 to 512 [ 42.825704][ T894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.836908][ T891] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 42.858856][ T894] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.188: invalid indirect mapped block 83886080 (level 1) [ 42.873184][ T894] EXT4-fs (loop0): Remounting filesystem read-only [ 42.879878][ T894] EXT4-fs (loop0): 1 orphan inode deleted [ 42.885644][ T894] EXT4-fs (loop0): 1 truncate cleaned up [ 42.891267][ T894] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,nodiscard,quota,. Quota mode: writeback. [ 42.972863][ T898] EXT4-fs error (device loop0): ext4_lookup:1860: inode #15: comm syz.0.188: iget: bad extra_isize 46 (inode size 256) [ 42.985563][ T898] EXT4-fs (loop0): Remounting filesystem read-only [ 43.075597][ T902] loop3: detected capacity change from 0 to 512 [ 43.104368][ T902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.115591][ T902] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.194658][ T910] loop3: detected capacity change from 0 to 128 [ 43.221317][ T910] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 43.240324][ T910] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.243868][ T307] usb 7-1: config 32 has an invalid descriptor of length 152, skipping remainder of the config [ 43.283604][ T307] usb 7-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.306408][ T307] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 43.315680][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.358616][ T916] ================================================================== [ 43.366704][ T916] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 43.374842][ T916] Read of size 4 at addr ffff888115a52470 by task syz.3.198/916 [ 43.382444][ T916] [ 43.384744][ T916] CPU: 0 PID: 916 Comm: syz.3.198 Not tainted syzkaller #0 [ 43.391913][ T916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.401947][ T916] Call Trace: [ 43.405200][ T916] [ 43.408110][ T916] __dump_stack+0x21/0x30 [ 43.412419][ T916] dump_stack_lvl+0x110/0x170 [ 43.417072][ T916] ? show_regs_print_info+0x20/0x20 [ 43.422260][ T916] ? load_image+0x3f0/0x3f0 [ 43.426740][ T916] print_address_description+0x7f/0x2c0 [ 43.432287][ T916] ? unaccount_page_cache_page+0x6f1/0x760 [ 43.438073][ T916] kasan_report+0x10f/0x150 [ 43.442566][ T916] ? unaccount_page_cache_page+0x6f1/0x760 [ 43.448371][ T916] __asan_report_load4_noabort+0x14/0x20 [ 43.453989][ T916] unaccount_page_cache_page+0x6f1/0x760 [ 43.459596][ T916] __delete_from_page_cache+0xbe/0x470 [ 43.465028][ T916] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 43.472028][ T916] ? __kasan_check_write+0x14/0x20 [ 43.477115][ T916] ? __kasan_check_read+0x11/0x20 [ 43.482116][ T916] ? workingset_eviction+0x402/0x9f0 [ 43.487374][ T916] __remove_mapping+0x601/0x990 [ 43.492205][ T916] ? remove_mapping+0xa0/0xa0 [ 43.496855][ T916] ? __kasan_check_read+0x11/0x20 [ 43.501849][ T916] shrink_page_list+0x2a24/0x5800 [ 43.506859][ T916] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 43.513004][ T916] ? __this_cpu_preempt_check+0x13/0x20 [ 43.518527][ T916] ? __mod_zone_page_state+0x8e/0xd0 [ 43.523790][ T916] ? isolate_lru_pages+0xff1/0x11f0 [ 43.528967][ T916] ? should_run_aging+0x410/0x410 [ 43.533968][ T916] ? cgroup_rstat_updated+0x80/0x360 [ 43.539250][ T916] ? _raw_spin_lock_irq+0x95/0xf0 [ 43.544254][ T916] ? __this_cpu_preempt_check+0x13/0x20 [ 43.549773][ T916] ? __count_memcg_events+0xad/0x120 [ 43.555033][ T916] shrink_lruvec+0x11eb/0x3b00 [ 43.559774][ T916] ? down_read_trylock+0x317/0x630 [ 43.564867][ T916] ? mem_cgroup_shrink_node+0x550/0x550 [ 43.570411][ T916] ? __kasan_check_write+0x14/0x20 [ 43.575531][ T916] ? _raw_spin_lock+0x94/0xf0 [ 43.580189][ T916] ? _raw_spin_trylock_bh+0x150/0x150 [ 43.585533][ T916] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 43.591316][ T916] ? inactive_is_low+0x160/0x2f0 [ 43.596229][ T916] ? css_next_descendant_pre+0x1e1/0x210 [ 43.601833][ T916] ? mem_cgroup_iter+0x465/0x6c0 [ 43.606750][ T916] shrink_node+0x11ee/0x2a40 [ 43.611318][ T916] ? finish_task_switch+0x16b/0x790 [ 43.616491][ T916] ? __schedule+0xbd7/0x14a0 [ 43.621065][ T916] ? allow_direct_reclaim+0x370/0x370 [ 43.626412][ T916] ? _raw_spin_lock_irq+0x95/0xf0 [ 43.631446][ T916] ? _raw_spin_lock_irqsave+0x130/0x130 [ 43.636968][ T916] do_try_to_free_pages+0x5a7/0x1580 [ 43.642230][ T916] ? try_to_free_pages+0x1010/0x1010 [ 43.647486][ T916] try_to_free_mem_cgroup_pages+0x261/0x610 [ 43.653356][ T916] ? shrink_lruvec+0x3b00/0x3b00 [ 43.658267][ T916] ? mutex_unlock+0x8f/0x230 [ 43.662835][ T916] mem_cgroup_force_empty_write+0x130/0x170 [ 43.668702][ T916] ? memcg_stat_show+0x1360/0x1360 [ 43.673785][ T916] cgroup_file_write+0x294/0x560 [ 43.678694][ T916] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.683773][ T916] ? mutex_lock+0x9b/0x1c0 [ 43.688165][ T916] ? wait_for_completion_killable_timeout+0x10/0x10 [ 43.694725][ T916] ? __kasan_check_write+0x14/0x20 [ 43.699824][ T916] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.704909][ T916] kernfs_fop_write_iter+0x2bd/0x400 [ 43.710178][ T916] vfs_write+0x831/0xfd0 [ 43.714394][ T916] ? file_end_write+0x1b0/0x1b0 [ 43.719222][ T916] ? wait_for_completion_killable_timeout+0x10/0x10 [ 43.725805][ T916] ? __fget_files+0x2e1/0x340 [ 43.730457][ T916] ? __fdget_pos+0x2d2/0x380 [ 43.735024][ T916] ? ksys_write+0x70/0x260 [ 43.739415][ T916] ksys_write+0x14a/0x260 [ 43.743716][ T916] ? __ia32_sys_read+0x90/0x90 [ 43.748454][ T916] ? __kasan_check_write+0x14/0x20 [ 43.753540][ T916] ? switch_fpu_return+0x15d/0x2c0 [ 43.758625][ T916] __x64_sys_write+0x7b/0x90 [ 43.763188][ T916] x64_sys_call+0x8ef/0x9a0 [ 43.767668][ T916] do_syscall_64+0x4c/0xa0 [ 43.772056][ T916] ? clear_bhb_loop+0x50/0xa0 [ 43.776706][ T916] ? clear_bhb_loop+0x50/0xa0 [ 43.781355][ T916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.787224][ T916] RIP: 0033:0x7fd5a59a3b19 [ 43.791616][ T916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.811195][ T916] RSP: 002b:00007fd5a43fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.819607][ T916] RAX: ffffffffffffffda RBX: 00007fd5a5c29fa0 RCX: 00007fd5a59a3b19 [ 43.827557][ T916] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 43.835506][ T916] RBP: 00007fd5a5a3bb70 R08: 0000000000000000 R09: 0000000000000000 [ 43.843457][ T916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.851402][ T916] R13: 00007fd5a5c2a038 R14: 00007fd5a5c29fa0 R15: 00007ffcd4a55328 [ 43.859353][ T916] [ 43.862349][ T916] [ 43.864647][ T916] Allocated by task 616: [ 43.868857][ T916] __kasan_kmalloc+0xd4/0x100 [ 43.873511][ T916] kmem_cache_alloc_trace+0x119/0x270 [ 43.878857][ T916] alloc_super+0x5e/0x840 [ 43.883163][ T916] sget+0x1e2/0x4c0 [ 43.886944][ T916] mount_bdev+0xec/0x3c0 [ 43.891159][ T916] f2fs_mount+0x34/0x40 [ 43.895289][ T916] legacy_get_tree+0xed/0x190 [ 43.899936][ T916] vfs_get_tree+0x89/0x260 [ 43.904330][ T916] do_new_mount+0x251/0xb40 [ 43.908812][ T916] path_mount+0x640/0xff0 [ 43.913114][ T916] __se_sys_mount+0x320/0x390 [ 43.917761][ T916] __x64_sys_mount+0xbf/0xd0 [ 43.922323][ T916] x64_sys_call+0x6bf/0x9a0 [ 43.926796][ T916] do_syscall_64+0x4c/0xa0 [ 43.931187][ T916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.937054][ T916] [ 43.939353][ T916] Freed by task 26: [ 43.943129][ T916] kasan_set_track+0x4a/0x70 [ 43.947692][ T916] kasan_set_free_info+0x23/0x40 [ 43.952603][ T916] ____kasan_slab_free+0x125/0x160 [ 43.957683][ T916] __kasan_slab_free+0x11/0x20 [ 43.962418][ T916] slab_free_freelist_hook+0xc2/0x190 [ 43.967760][ T916] kfree+0xc4/0x270 [ 43.971542][ T916] destroy_super_work+0x40/0x50 [ 43.976382][ T916] process_one_work+0x6c8/0xbb0 [ 43.981206][ T916] worker_thread+0xaa0/0x1250 [ 43.985857][ T916] kthread+0x3f5/0x4f0 [ 43.989902][ T916] ret_from_fork+0x1f/0x30 [ 43.994295][ T916] [ 43.996592][ T916] Last potentially related work creation: [ 44.002279][ T916] kasan_save_stack+0x3a/0x60 [ 44.006932][ T916] __kasan_record_aux_stack+0xd2/0x100 [ 44.012366][ T916] kasan_record_aux_stack_noalloc+0xb/0x10 [ 44.018149][ T916] insert_work+0x51/0x310 [ 44.022453][ T916] __queue_work+0x8e1/0xc60 [ 44.026932][ T916] queue_work_on+0xde/0x150 [ 44.031425][ T916] destroy_super_rcu+0xd1/0xe0 [ 44.036162][ T916] rcu_do_batch+0x4c1/0xbf0 [ 44.040646][ T916] rcu_core+0x4a3/0xef0 [ 44.044776][ T916] rcu_core_si+0x9/0x10 [ 44.048904][ T916] handle_softirqs+0x250/0x560 [ 44.053641][ T916] __irq_exit_rcu+0x52/0xf0 [ 44.058115][ T916] irq_exit_rcu+0x9/0x10 [ 44.062326][ T916] sysvec_apic_timer_interrupt+0x58/0xc0 [ 44.067930][ T916] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 44.073886][ T916] [ 44.076189][ T916] Second to last potentially related work creation: [ 44.082744][ T916] kasan_save_stack+0x3a/0x60 [ 44.087405][ T916] __kasan_record_aux_stack+0xd2/0x100 [ 44.092839][ T916] kasan_record_aux_stack_noalloc+0xb/0x10 [ 44.098623][ T916] call_rcu+0x10b/0xf60 [ 44.102864][ T916] __put_super+0x26b/0x2d0 [ 44.107266][ T916] deactivate_locked_super+0xd4/0x100 [ 44.112616][ T916] mount_bdev+0x2ab/0x3c0 [ 44.116928][ T916] f2fs_mount+0x34/0x40 [ 44.121060][ T916] legacy_get_tree+0xed/0x190 [ 44.125715][ T916] vfs_get_tree+0x89/0x260 [ 44.130122][ T916] do_new_mount+0x251/0xb40 [ 44.134597][ T916] path_mount+0x640/0xff0 [ 44.138898][ T916] __se_sys_mount+0x320/0x390 [ 44.143548][ T916] __x64_sys_mount+0xbf/0xd0 [ 44.148113][ T916] x64_sys_call+0x6bf/0x9a0 [ 44.152588][ T916] do_syscall_64+0x4c/0xa0 [ 44.156981][ T916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.162860][ T916] [ 44.165164][ T916] The buggy address belongs to the object at ffff888115a52000 [ 44.165164][ T916] which belongs to the cache kmalloc-2k of size 2048 [ 44.179202][ T916] The buggy address is located 1136 bytes inside of [ 44.179202][ T916] 2048-byte region [ffff888115a52000, ffff888115a52800) [ 44.192634][ T916] The buggy address belongs to the page: [ 44.198252][ T916] page:ffffea0004569400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115a50 [ 44.208468][ T916] head:ffffea0004569400 order:3 compound_mapcount:0 compound_pincount:0 [ 44.216768][ T916] flags: 0x4000000000010200(slab|head|zone=1) [ 44.222833][ T916] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043200 [ 44.231392][ T916] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 44.239943][ T916] page dumped because: kasan: bad access detected [ 44.246339][ T916] page_owner tracks the page as allocated [ 44.252045][ T916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 104, ts 4318367607, free_ts 0 [ 44.270070][ T916] post_alloc_hook+0x192/0x1b0 [ 44.274812][ T916] prep_new_page+0x1c/0x110 [ 44.279284][ T916] get_page_from_freelist+0x2d42/0x2dd0 [ 44.284821][ T916] __alloc_pages+0x1a2/0x460 [ 44.289384][ T916] new_slab+0xa0/0x4d0 [ 44.293425][ T916] ___slab_alloc+0x3ac/0x840 [ 44.297998][ T916] __slab_alloc+0x49/0x90 [ 44.302298][ T916] __kmalloc_track_caller+0x169/0x2c0 [ 44.307648][ T916] __alloc_skb+0x210/0x730 [ 44.312044][ T916] netlink_sendmsg+0x611/0xb80 [ 44.316801][ T916] ____sys_sendmsg+0x5be/0x8f0 [ 44.321536][ T916] ___sys_sendmsg+0x236/0x2e0 [ 44.326201][ T916] __x64_sys_sendmsg+0x201/0x2d0 [ 44.331115][ T916] x64_sys_call+0x4b/0x9a0 [ 44.335518][ T916] do_syscall_64+0x4c/0xa0 [ 44.339924][ T916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.345806][ T916] page_owner free stack trace missing [ 44.351174][ T916] [ 44.353489][ T916] Memory state around the buggy address: [ 44.359090][ T916] ffff888115a52300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.367137][ T916] ffff888115a52380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.375170][ T916] >ffff888115a52400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.383207][ T916] ^ [ 44.390912][ T916] ffff888115a52480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.398952][ T916] ffff888115a52500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.406987][ T916] ================================================================== [ 44.415022][ T916] Disabling lock debugging due to kernel taint [ 44.439201][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 44.439213][ T30] audit: type=1400 audit(1793848476.754:285): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.467322][ T30] audit: type=1400 audit(1793848476.754:286): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.501760][ T30] audit: type=1400 audit(1793848476.754:287): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.522581][ T307] usb 7-1: string descriptor 0 read error: -71 [ 44.523090][ T30] audit: type=1400 audit(1793848476.754:288): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.530548][ T307] hub 7-1:32.0: bad descriptor, ignoring hub [ 44.575062][ T30] audit: type=1400 audit(1793848476.754:289): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.595660][ T307] hub: probe of 7-1:32.0 failed with error -5 [ 44.603384][ T30] audit: type=1400 audit(1793848476.754:290): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.626440][ T30] audit: type=1400 audit(1793848476.754:291): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.651603][ T307] usb 7-1: USB disconnect, device number 2