last executing test programs: 8.369965514s ago: executing program 4 (id=1163): keyctl$reject(0x14, 0x0, 0x7, 0xfffffffffffffff7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x80002c1, 0x2, 0x0) io_setup(0xffffff05, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@multicast, @random='\x00\x00\x00 \x00', @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x20) tkill(r4, 0x13) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8002, 0x4a21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfd, 0x32}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2002000543}, {0x4, 0x7fffffff7fffffff}, {0x3, 0x1}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e26, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4010810}, 0x48080) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x4, &(0x7f0000000e40)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f0000000ec0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0xc, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x6b, 0x0}, 0x10) 7.965277506s ago: executing program 1 (id=1166): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000014c0)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000009600)={0x0, 0x21}, &(0x7f0000009640)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1018}, {0x1000}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR='H%IP']}]}}]}]}]}}]}, 0x64}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000009680)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f0000000e00)=@framed={{}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="0000000002000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000ec0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000086ddffff0000"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f00000006c0)='./bus\x00') syz_read_part_table(0x5c2, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 7.386194235s ago: executing program 4 (id=1168): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.207592883s ago: executing program 4 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000540)={0x0, 0x30b5, 0x80, 0x2, 0x377}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000007c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000940)=0x0) r9 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r9, r8, &(0x7f0000000980)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x548}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000c80)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r10 = syz_open_dev$usbfs(&(0x7f0000000440), 0x71, 0x101341) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000480)={0x80, 0x6, 0x2fe, 0xe5, 0xec, 0x0, 0x0}) 6.756927889s ago: executing program 1 (id=1173): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write(r0, &(0x7f0000000300)="89", 0x3f80) 6.74414972s ago: executing program 1 (id=1174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(r2, &(0x7f0000000100)=0xffffffffffffff9c, r1, 0x0, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x462, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x13}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r4, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80004704, 0x0, 0x0, 0xcd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffb, 0x1000, 0x0, 0x271}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x2, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x1, 0x3bf}}], 0x1, 0x0, 0x0) 6.722876993s ago: executing program 1 (id=1175): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0x4, 0x501000) read$usbfs(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) write(r1, &(0x7f0000000340)='1', 0x1) get_robust_list(0x0, 0x0, &(0x7f0000000a00)) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="b700000000000000bf1600000000000079615d0000000000150101000000000085000000c400000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_robust_list(r3, &(0x7f0000002c40)=&(0x7f0000002c00)={&(0x7f0000002b00)={&(0x7f0000002ac0)={&(0x7f0000002a80)}}, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={&(0x7f0000002b40)}}}, &(0x7f0000002c80)=0x18) set_robust_list(&(0x7f00000000c0)={0x0, 0xffffffffffffff2c, &(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}}}, 0x18) close(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x8112}, {r5, 0x4008}], 0x2, 0x0, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000300)={0x80, 0x8, 0x6, 0x0, 0xe, "bb02cbd8295a2547"}) 6.721768423s ago: executing program 1 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x17c) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='7', 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x80c42, 0x1ff) 6.314737344s ago: executing program 1 (id=1178): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x303800, 0x0) close(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000200)=ANY=[], 0x16) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r4, 0x400452c8, &(0x7f0000000440)="00fbff0220e2000000000000000053a90000910001") write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x36) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xa) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 5.266022731s ago: executing program 0 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x8a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000800)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0x14, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000fc0)={r6, 0x1}, 0xc) sendmmsg$unix(r4, &(0x7f0000000440), 0x2d, 0x20040040) connect$unix(r3, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f00000007c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73795ecd13329341e1b0ee45967374656d2ec32c2e2a5d2a2d212c232900"]) connect$unix(r7, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000900), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(r7, &(0x7f0000006940)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000001780)=[{&(0x7f0000000c80)=""/93}, {&(0x7f0000001500)=""/175}, {&(0x7f00000015c0)=""/142}, {&(0x7f0000001680)=""/52}, {&(0x7f00000016c0)=""/177}], 0x0, &(0x7f0000000600)=""/120, 0x79}, 0x3}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001280), 0x0, &(0x7f0000001f40)=""/23, 0x17}, 0xffffff81}, {{&(0x7f0000001f80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003240)}, 0x6e}, {{&(0x7f00000032c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000047c0)}, 0x7}, {{&(0x7f0000004880)=@un=@abs, 0x80, &(0x7f0000003000)=[{&(0x7f0000004900)=""/119, 0x7b}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/241, 0xf1}, {&(0x7f0000005a80)=""/156, 0x9c}, {&(0x7f0000005b40)=""/163, 0xa3}, {&(0x7f0000005c00)=""/187, 0x5f}, {&(0x7f0000005d00)=""/210, 0xda}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000580)=""/16}, {&(0x7f0000001340)=""/133}, {&(0x7f0000002000)=""/4096}], 0x8, &(0x7f0000005f40)=""/184, 0xb8}, 0x2}, {{&(0x7f0000006000)=@x25, 0x80, &(0x7f0000006200)=[{&(0x7f0000006080)=""/8, 0x8}, {&(0x7f00000060c0)=""/72, 0x48}, {&(0x7f0000006140)=""/186, 0xba}], 0x3, &(0x7f0000006240)=""/213, 0xd5}, 0xff}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000005c0)=""/41, 0x1f}], 0x2, &(0x7f0000000b80)=""/241, 0xf1}, 0x7ff}, {{&(0x7f0000006580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006600)=""/74, 0x4a}, {&(0x7f0000006680)=""/41, 0x29}, {&(0x7f00000066c0)=""/133, 0x85}, {&(0x7f0000006780)=""/246, 0xf6}], 0x4, &(0x7f00000068c0)=""/79, 0x5a}, 0x4}], 0x8, 0x102, 0x0) munmap(0xfffffffffffffffd, 0x1000) 5.017943637s ago: executing program 3 (id=1183): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000014c0)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000009600)={0x0, 0x21}, &(0x7f0000009640)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='H%IP']}]}}]}]}]}}]}, 0x5c}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000009680)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f0000000e00)=@framed={{}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="0000000002000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000ec0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000086ddffff0000"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f00000006c0)='./bus\x00') syz_read_part_table(0x5c2, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 4.380224332s ago: executing program 0 (id=1184): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() io_setup(0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x1) syz_create_resource$futex(&(0x7f00000046c0)=0x1) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000004700)={0x1, &(0x7f0000004740)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 4.260095365s ago: executing program 2 (id=1186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000980)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="0000f6631a005220", 0x8}], 0x1, 0x0, 0x0, 0x4}, 0x4000) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x4, 0x0}, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8410, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0xff, 0x2a9, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) truncate(&(0x7f0000000940)='./file1\x00', 0x3c4c) 4.00595756s ago: executing program 2 (id=1187): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000014c0)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000009600)={0x0, 0x21}, &(0x7f0000009640)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000009680)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f0000000e00)=@framed={{}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="0000000002000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000ec0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000086ddffff0000"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f00000006c0)='./bus\x00') syz_read_part_table(0x5c2, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 3.891938502s ago: executing program 3 (id=1188): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={0x0, 0xb1, 0x80000}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r2, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000240)="61df7105a7814ce4e1bbbc43de48", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3a) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000c80), 0x549400, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{&(0x7f00000009c0)=@l2tp6, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000b80)=""/110, 0x6e}, {&(0x7f0000000c00)=""/17, 0x11}, {&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/157, 0x9d}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/48, 0x30}], 0x6, &(0x7f0000001e40)=""/248, 0xf8}, 0x400}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001fc0)=""/146, 0x92}, {&(0x7f0000002080)=""/17, 0x11}, {&(0x7f00000020c0)=""/241, 0xfffffffffffffc57}, {&(0x7f00000021c0)=""/208, 0xd0}, {&(0x7f00000022c0)=""/52, 0x34}, {&(0x7f0000002300)=""/87, 0x57}], 0x6, &(0x7f0000002380)=""/116, 0x74}, 0x8}], 0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@random="a7fb82bd3379", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x8, 0x3a, 0xff, @private1, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x97}}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x0, 0x3}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7800, 0x8, 0x1, 0x3, {{0x2a, 0x4, 0x1, 0x3f, 0xa8, 0x65, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xeb, 0x0, 0x9, [0x8, 0x3, 0xff, 0x4, 0xb]}, @timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0x4, [{@private=0xa010101, 0x2}, {@remote, 0x8}, {@multicast1, 0x56a}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x8}]}, @timestamp_prespec={0x44, 0x34, 0xd0, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@remote, 0x2d}, {@remote, 0xb}, {@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xe}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x61b}]}, @timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0x8, [{@local, 0x10}, {@rand_addr=0x64010100, 0x10}]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@arena={0x21, 0x0, 0x0, 0x30, 0x20000, r8, 0x4, '\x00', r9, r7, 0x2, 0x2, 0x1}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@arena={0x21, 0x0, 0x0, 0x3e, 0x40400, r10, 0xe, '\x00', 0x0, r7, 0x4, 0x0, 0x3}, 0x50) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r11, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1804) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd50, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3c) 3.503043252s ago: executing program 0 (id=1189): mkdirat(0xffffffffffffff9c, 0x0, 0x1a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xe0400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x300000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x0, 0x7}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000500)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00Z[2)\x00\x00'], 0x20}}, 0x800) socket$inet(0x2, 0x4, 0x1) 3.044545429s ago: executing program 2 (id=1190): mkdirat(0xffffffffffffff9c, 0x0, 0x1a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xe0400, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x300000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x0, 0x7}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000500)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00Z[2)\x00\x00'], 0x20}}, 0x800) 3.043437529s ago: executing program 3 (id=1191): keyctl$reject(0x14, 0x0, 0x7, 0xfffffffffffffff7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x80002c1, 0x2, 0x0) io_setup(0xffffff05, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@multicast, @random='\x00\x00\x00 \x00', @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x20) tkill(r4, 0x13) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8002, 0x4a21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfd, 0x32}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2002000543}, {0x4, 0x7fffffff7fffffff}, {0x3, 0x1}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e26, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4010810}, 0x48080) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x4, &(0x7f0000000e40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0xc, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x6b, 0x0}, 0x10) 2.064838499s ago: executing program 4 (id=1192): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xf0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000140)='bdev\x00', 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.061956969s ago: executing program 3 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x244) r1 = openat(r0, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x19) write(r1, &(0x7f0000000840)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.95116392s ago: executing program 0 (id=1194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) 1.95105513s ago: executing program 2 (id=1195): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1123102, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x1b) 1.728111513s ago: executing program 0 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x8a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000800)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0x14, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000fc0)={r6, 0x1}, 0xc) sendmmsg$unix(r4, &(0x7f0000000440), 0x2d, 0x20040040) connect$unix(r3, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f00000007c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73795ecd13329341e1b0ee45967374656d2ec32c2e2a5d2a2d212c232900"]) connect$unix(r7, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000900), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(r7, &(0x7f0000006940)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000001780)=[{&(0x7f0000000c80)=""/93}, {&(0x7f0000001500)=""/175}, {&(0x7f00000015c0)=""/142}, {&(0x7f0000001680)=""/52}, {&(0x7f00000016c0)=""/177}], 0x0, &(0x7f0000000600)=""/120, 0x79}, 0x3}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001280), 0x0, &(0x7f0000001f40)=""/23, 0x17}, 0xffffff81}, {{&(0x7f0000001f80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003240)}, 0x6e}, {{&(0x7f00000032c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000047c0)}, 0x7}, {{&(0x7f0000004880)=@un=@abs, 0x80, &(0x7f0000003000)=[{&(0x7f0000004900)=""/119, 0x7b}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/241, 0xf1}, {&(0x7f0000005a80)=""/156, 0x9c}, {&(0x7f0000005b40)=""/163, 0xa3}, {&(0x7f0000005c00)=""/187, 0x5f}, {&(0x7f0000005d00)=""/210, 0xda}, {&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000580)=""/16}, {&(0x7f0000001340)=""/133}, {&(0x7f0000002000)=""/4096}], 0x8, &(0x7f0000005f40)=""/184, 0xb8}, 0x2}, {{&(0x7f0000006000)=@x25, 0x80, &(0x7f0000006200)=[{&(0x7f0000006080)=""/8, 0x8}, {&(0x7f00000060c0)=""/72, 0x48}, {&(0x7f0000006140)=""/186, 0xba}], 0x3, &(0x7f0000006240)=""/213, 0xd5}, 0xff}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000005c0)=""/41, 0x1f}], 0x2, &(0x7f0000000b80)=""/241, 0xf1}, 0x7ff}, {{&(0x7f0000006580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006600)=""/74, 0x4a}, {&(0x7f0000006680)=""/41, 0x29}, {&(0x7f00000066c0)=""/133, 0x85}, {&(0x7f0000006780)=""/246, 0xf6}], 0x4, &(0x7f00000068c0)=""/79, 0x5a}, 0x4}], 0x8, 0x102, 0x0) munmap(0xfffffffffffffffd, 0x1000) 1.593057607s ago: executing program 3 (id=1197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.492312187s ago: executing program 3 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x26) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x24, 0x2, 0x0, 0x1, [@nested={0x1f, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a5"]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 1.090847428s ago: executing program 2 (id=1199): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000980)={0x0, 0x989680}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, &(0x7f0000000a00)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x800714, &(0x7f00000003c0)={[{@test_dummy_encryption}]}, 0xfe, 0x4da, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x42, 0x0) 11.526199ms ago: executing program 4 (id=1200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.712128ms ago: executing program 2 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1/file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000480)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0) 1.141989ms ago: executing program 4 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x202001, 0x0) mkdir(&(0x7f0000000bc0)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc\x00', 0x0, 0x4) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001140)='dummy_udc.0\n', 0xc) 0s ago: executing program 0 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000540)={0x0, 0x30b5, 0x80, 0x2, 0x377}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000007c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000900)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000940)=0x0) r9 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r9, r8, &(0x7f0000000980)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x548}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000c80)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r10 = syz_open_dev$usbfs(&(0x7f0000000440), 0x71, 0x101341) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000480)={0x80, 0x6, 0x2fe, 0xe5, 0xec, 0x0, 0x0}) kernel console output (not intermixed with test programs): endpoint 0xB has invalid wMaxPacketSize 0 [ 141.636161][ T6] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.645991][ T6] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.659021][ T6] usb 3-1: config 0 interface 125 has no altsetting 0 [ 141.665803][ T6] usb 3-1: config 0 interface 125 has no altsetting 2 [ 141.673940][ T6] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 141.683015][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.691009][ T6] usb 3-1: Product: syz [ 141.695157][ T6] usb 3-1: Manufacturer: syz [ 141.699728][ T6] usb 3-1: SerialNumber: syz [ 141.704950][ T6] usb 3-1: config 0 descriptor?? [ 141.913788][ T6] usb 3-1: USB disconnect, device number 13 [ 141.982815][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 141.982842][ T28] audit: type=1400 audit(1793740172.621:292): avc: denied { rename } for pid=2742 comm="syz.0.692" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.064210][ T2750] loop4: detected capacity change from 0 to 16 [ 142.072790][ T2750] erofs: (device loop4): mounted with root inode @ nid 36. [ 142.118650][ T2750] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 142.660230][ T28] audit: type=1400 audit(1793740173.291:293): avc: denied { remount } for pid=2767 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.733949][ T635] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 143.083725][ T635] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 143.093716][ T635] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 143.104753][ T635] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 143.114282][ T635] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 143.132495][ T103] udevd[103]: worker [2649] terminated by signal 7 (Bus error) [ 143.141950][ T635] usb 4-1: USB disconnect, device number 13 [ 143.148532][ T103] udevd[103]: worker [2649] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.184' [ 143.160224][ T2770] device-mapper: table: 252:3: ram4 too small for target: start=4096, len=18014398509481983, dev_size=16384 [ 143.171958][ T2770] device-mapper: core: Cannot calculate initial queue limits [ 143.179570][ T2770] device-mapper: ioctl: unable to set up device queue for new table. [ 143.188165][ T103] udevd[103]: worker [2650] terminated by signal 7 (Bus error) [ 143.197874][ T28] audit: type=1400 audit(1793740173.831:294): avc: denied { ioctl } for pid=2780 comm="syz.4.705" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 143.202755][ T103] udevd[103]: worker [2650] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.125' [ 143.814510][ T2796] loop2: detected capacity change from 0 to 16 [ 143.974999][ T2796] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.017028][ T2796] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 144.608340][ T293] usb 2-1: USB disconnect, device number 9 [ 144.649492][ T2802] FAULT_INJECTION: forcing a failure. [ 144.649492][ T2802] name failslab, interval 1, probability 0, space 0, times 0 [ 144.671095][ T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.682007][ T2802] CPU: 0 PID: 2802 Comm: syz.2.712 Not tainted syzkaller #0 [ 144.689318][ T2802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.699381][ T2802] Call Trace: [ 144.702666][ T2802] [ 144.705731][ T2802] __dump_stack+0x21/0x24 [ 144.710339][ T2802] dump_stack_lvl+0x110/0x170 [ 144.715026][ T2802] ? __cfi_dump_stack_lvl+0x8/0x8 [ 144.720057][ T2802] ? call_usermodehelper_exec+0x304/0x4c0 [ 144.725785][ T2802] dump_stack+0x15/0x24 [ 144.729950][ T2802] should_fail_ex+0x3bf/0x510 [ 144.734641][ T2802] __should_failslab+0xac/0xf0 [ 144.739415][ T2802] should_failslab+0x9/0x20 [ 144.743920][ T2802] kmem_cache_alloc_node+0x42/0x330 [ 144.746761][ T2797] EXT4-fs error: 105 callbacks suppressed [ 144.746773][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 144.749127][ T2802] ? __alloc_skb+0xe8/0x4a0 [ 144.754995][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 144.765661][ T2802] __alloc_skb+0xe8/0x4a0 [ 144.765690][ T2802] netlink_ack+0x373/0x1160 [ 144.765711][ T2802] ? __cfi___request_module+0x10/0x10 [ 144.770596][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 144.781014][ T2802] ? __kasan_check_write+0x14/0x20 [ 144.781040][ T2802] ? mutex_unlock+0x8f/0x230 [ 144.815715][ T2802] ? __cfi_netlink_ack+0x10/0x10 [ 144.818848][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 144.820661][ T2802] ? mutex_lock+0x93/0x1b0 [ 144.831777][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 144.835870][ T2802] ? __cfi_mutex_lock+0x10/0x10 [ 144.846847][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 144.851508][ T2802] nfnetlink_rcv+0x1f4f/0x2360 [ 144.867077][ T2802] ? __kernel_text_address+0xd/0x30 [ 144.872299][ T2802] ? __stack_depot_save+0x36/0x490 [ 144.877413][ T2802] ? kasan_save_alloc_info+0x1f/0x30 [ 144.882679][ T2802] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 144.887774][ T2802] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 144.893645][ T2802] ? __alloc_skb+0x226/0x4a0 [ 144.898215][ T2802] ? netlink_sendmsg+0x635/0xbd0 [ 144.903133][ T2802] ? ____sys_sendmsg+0x5fb/0x9c0 [ 144.908043][ T2802] ? ___sys_sendmsg+0x2a2/0x360 [ 144.912875][ T2802] ? do_syscall_64+0x4c/0xa0 [ 144.917467][ T2802] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.923542][ T2802] ? selinux_nlmsg_lookup+0x2f9/0x440 [ 144.928918][ T2802] ? selinux_netlink_send+0x75f/0x830 [ 144.934299][ T2802] ? __cfi_selinux_netlink_send+0x10/0x10 [ 144.940028][ T2802] ? _copy_from_iter+0x574/0xfe0 [ 144.944979][ T2802] ? __netlink_lookup+0x387/0x3b0 [ 144.950012][ T2802] netlink_unicast+0x8c1/0xa60 [ 144.954779][ T2802] netlink_sendmsg+0x8b9/0xbd0 [ 144.959550][ T2802] ? __cfi_netlink_sendmsg+0x10/0x10 [ 144.964840][ T2802] ? security_socket_sendmsg+0x93/0xb0 [ 144.970302][ T2802] ? __cfi_netlink_sendmsg+0x10/0x10 [ 144.975588][ T2802] ____sys_sendmsg+0x5fb/0x9c0 [ 144.981047][ T2802] ? __sys_sendmsg_sock+0x40/0x40 [ 144.986076][ T2802] ? import_iovec+0x7c/0xb0 [ 144.990581][ T2802] ___sys_sendmsg+0x2a2/0x360 [ 144.995253][ T2802] ? __sys_sendmsg+0x290/0x290 [ 145.000011][ T2802] ? security_file_alloc+0x33/0x130 [ 145.005213][ T2802] ? percpu_counter_add_batch+0x13c/0x160 [ 145.010933][ T2802] ? __fdget+0x19c/0x220 [ 145.015170][ T2802] __x64_sys_sendmsg+0x20d/0x2e0 [ 145.020101][ T2802] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 145.025553][ T2802] ? __kasan_check_write+0x14/0x20 [ 145.030664][ T2802] ? fpregs_restore_userregs+0x128/0x260 [ 145.036296][ T2802] ? switch_fpu_return+0xe/0x10 [ 145.041145][ T2802] x64_sys_call+0x171/0x9a0 [ 145.045643][ T2802] do_syscall_64+0x4c/0xa0 [ 145.050055][ T2802] ? clear_bhb_loop+0x30/0x80 [ 145.054734][ T2802] ? clear_bhb_loop+0x30/0x80 [ 145.059409][ T2802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.065299][ T2802] RIP: 0033:0x7fbbd439fb19 [ 145.069708][ T2802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.089319][ T2802] RSP: 002b:00007fbbd2df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.097728][ T2802] RAX: ffffffffffffffda RBX: 00007fbbd4625fa0 RCX: 00007fbbd439fb19 [ 145.105699][ T2802] RDX: 0000000004000000 RSI: 0000200000000640 RDI: 0000000000000005 [ 145.113667][ T2802] RBP: 00007fbbd4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 145.121628][ T2802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.129590][ T2802] R13: 00007fbbd4626038 R14: 00007fbbd4625fa0 R15: 00007ffc5b04d188 [ 145.137560][ T2802] [ 145.175125][ T2798] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.709: Detected aborted journal [ 145.186683][ T2798] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.709: Detected aborted journal [ 145.198146][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 145.209288][ T2797] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.710: Detected aborted journal [ 145.305656][ T2798] EXT4-fs: 85 callbacks suppressed [ 145.305682][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.322669][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.347895][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.355452][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.364921][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.378618][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.385275][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.614599][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.782950][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 145.802816][ T2811] loop0: detected capacity change from 0 to 512 [ 146.129280][ T2797] EXT4-fs (sda1): Remounting filesystem read-only [ 146.173235][ T2811] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.201812][ T2811] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.709: inode has both inline data and extents flags [ 146.236313][ T2811] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.709: couldn't read orphan inode 15 (err -117) [ 146.271040][ T28] audit: type=1400 audit(1793740176.891:295): avc: denied { bind } for pid=2820 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.293810][ T2811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.340163][ T28] audit: type=1400 audit(1793740176.891:296): avc: denied { connect } for pid=2820 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.507523][ T288] EXT4-fs (loop0): unmounting filesystem. [ 146.613864][ T2837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.622404][ T2837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.671029][ T59] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 146.701075][ T293] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.759818][ T28] audit: type=1400 audit(1793740177.391:297): avc: denied { read write } for pid=2840 comm="syz.3.725" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.784600][ T28] audit: type=1400 audit(1793740177.391:298): avc: denied { open } for pid=2840 comm="syz.3.725" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.808471][ T28] audit: type=1400 audit(1793740177.391:299): avc: denied { ioctl } for pid=2840 comm="syz.3.725" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.838333][ T28] audit: type=1400 audit(1793740177.471:300): avc: denied { bind } for pid=2846 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.861055][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 146.861182][ T6] usb 5-1: device not accepting address 14, error -71 [ 146.874183][ T59] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.882411][ T59] usb 3-1: config 0 has no interface number 0 [ 146.888492][ T59] usb 3-1: config 0 interface 184 has no altsetting 0 [ 146.897177][ T59] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.906356][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.911040][ T293] usb 2-1: Using ep0 maxpacket: 32 [ 146.914395][ T59] usb 3-1: Product: syz [ 146.923595][ T59] usb 3-1: Manufacturer: syz [ 146.926848][ T293] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 146.928195][ T59] usb 3-1: SerialNumber: syz [ 146.938657][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.944713][ T59] usb 3-1: config 0 descriptor?? [ 146.954926][ T293] usb 2-1: Product: syz [ 146.955581][ T59] smsc75xx v1.0.0 [ 146.959085][ T293] usb 2-1: Manufacturer: syz [ 146.967495][ T293] usb 2-1: SerialNumber: syz [ 146.972725][ T293] usb 2-1: config 0 descriptor?? [ 146.982680][ T103] udevd[103]: worker [2785] terminated by signal 7 (Bus error) [ 146.990307][ T103] udevd[103]: worker [2785] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 147.171120][ T2859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.175124][ T103] udevd[103]: worker [2786] terminated by signal 7 (Bus error) [ 147.179653][ T2859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.195086][ T103] udevd[103]: worker [2786] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0' [ 147.210695][ T103] udevd[103]: worker [2790] terminated by signal 7 (Bus error) [ 147.218433][ T103] udevd[103]: worker [2790] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 147.218689][ T989] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.271032][ T6] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 147.411036][ T989] usb 4-1: Using ep0 maxpacket: 8 [ 147.418396][ T989] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.427514][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.435608][ T989] usb 4-1: Product: syz [ 147.439823][ T989] usb 4-1: Manufacturer: syz [ 147.444441][ T989] usb 4-1: SerialNumber: syz [ 147.449484][ T989] usb 4-1: config 0 descriptor?? [ 147.461030][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 147.467172][ T6] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 147.475363][ T6] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.485115][ T6] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.494861][ T6] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.504783][ T6] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.517739][ T6] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.529983][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.556991][ T59] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 147.567887][ T59] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.708514][ T2864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.717231][ T2864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.725793][ T2864] netlink: 'syz.0.734': attribute type 4 has an invalid length. [ 148.251777][ T28] audit: type=1400 audit(1793740178.891:301): avc: denied { watch } for pid=2871 comm="syz.0.736" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.435922][ T2881] loop0: detected capacity change from 0 to 40427 [ 148.445778][ T2881] F2FS-fs (loop0): invalid crc value [ 148.452467][ T2881] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.481461][ T2881] F2FS-fs (loop0): Start checkpoint disabled! [ 148.487992][ T2881] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 148.495577][ T2881] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 148.523948][ T401] kworker/u4:6: attempt to access beyond end of device [ 148.523948][ T401] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 149.248434][ T309] usb 2-1: USB disconnect, device number 10 [ 149.380276][ T59] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 149.391313][ T59] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 149.401600][ T59] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 149.411246][ T59] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 149.430679][ T59] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 149.440419][ T59] usb 3-1: USB disconnect, device number 14 [ 149.446554][ T103] udevd[103]: worker [2784] terminated by signal 7 (Bus error) [ 149.454484][ T103] udevd[103]: worker [2784] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 149.475639][ T989] usb 5-1: USB disconnect, device number 15 [ 149.765216][ T103] udevd[103]: worker [2860] terminated by signal 7 (Bus error) [ 149.773304][ T103] udevd[103]: worker [2860] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.184' [ 149.837083][ T2904] EXT4-fs error: 73 callbacks suppressed [ 149.837109][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 149.856323][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 149.883364][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 149.908750][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 149.923384][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 149.970180][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 149.993433][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 150.006215][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 150.018482][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 150.219156][ T989] usb 4-1: USB disconnect, device number 14 [ 150.386490][ T2904] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.744: Detected aborted journal [ 150.397446][ T2904] EXT4-fs: 55 callbacks suppressed [ 150.397468][ T2904] EXT4-fs (sda1): Remounting filesystem read-only [ 150.446785][ T2904] EXT4-fs (sda1): Remounting filesystem read-only [ 150.454605][ T2904] EXT4-fs (sda1): Remounting filesystem read-only [ 150.462361][ T2904] EXT4-fs (sda1): Remounting filesystem read-only [ 150.542004][ T2913] EXT4-fs (sda1): Remounting filesystem read-only [ 150.549650][ T2912] EXT4-fs (sda1): Remounting filesystem read-only [ 150.556987][ T2911] EXT4-fs (sda1): Remounting filesystem read-only [ 150.567751][ T2912] EXT4-fs (sda1): Remounting filesystem read-only [ 150.569542][ T2916] EXT4-fs (sda1): Remounting filesystem read-only [ 150.575402][ T2917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.589375][ T2917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.597939][ T2913] EXT4-fs (sda1): Remounting filesystem read-only [ 151.189856][ T28] audit: type=1400 audit(1793740181.821:302): avc: denied { mount } for pid=2935 comm="syz.0.753" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.197332][ T2936] loop0: detected capacity change from 0 to 2048 [ 151.230794][ T2936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.239886][ T2936] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.322408][ T28] audit: type=1400 audit(1793740181.961:303): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.343263][ T288] EXT4-fs (loop0): unmounting filesystem. [ 151.642141][ T2950] loop2: detected capacity change from 0 to 16 [ 152.439978][ T2950] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.456349][ T2948] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 153.678764][ T2970] loop3: detected capacity change from 0 to 256 [ 154.886066][ T2984] EXT4-fs error: 99 callbacks suppressed [ 154.886080][ T2984] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.766: Detected aborted journal [ 154.903778][ T2985] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.767: Detected aborted journal [ 154.926189][ T2985] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.767: Detected aborted journal [ 154.930847][ T2984] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.766: Detected aborted journal [ 154.952774][ T2988] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.776: Detected aborted journal [ 154.964972][ T2988] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.776: Detected aborted journal [ 154.976287][ T2988] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.776: Detected aborted journal [ 155.052584][ T2993] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.768: Detected aborted journal [ 155.053783][ T2994] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.769: Detected aborted journal [ 155.064247][ T2993] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.768: Detected aborted journal [ 155.078392][ T2997] loop1: detected capacity change from 0 to 256 [ 155.401106][ T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 155.424856][ T3001] EXT4-fs: 103 callbacks suppressed [ 155.424875][ T3001] EXT4-fs (sda1): Remounting filesystem read-only [ 155.436724][ T3001] EXT4-fs (sda1): Remounting filesystem read-only [ 155.443478][ T3001] EXT4-fs (sda1): Remounting filesystem read-only [ 155.447527][ T2995] loop0: detected capacity change from 0 to 40427 [ 155.459108][ T2995] F2FS-fs (loop0): invalid crc value [ 155.474054][ T3001] EXT4-fs (sda1): Remounting filesystem read-only [ 155.481107][ T293] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.489066][ T2995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.501336][ T3001] EXT4-fs (sda1): Remounting filesystem read-only [ 155.518413][ T3001] EXT4-fs (sda1): Remounting filesystem read-only [ 155.521631][ T2995] F2FS-fs (loop0): Start checkpoint disabled! [ 155.532511][ T2995] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 155.540040][ T2995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 155.549778][ T2993] EXT4-fs (sda1): Remounting filesystem read-only [ 155.556414][ T2993] EXT4-fs (sda1): Remounting filesystem read-only [ 155.563087][ T2993] EXT4-fs (sda1): Remounting filesystem read-only [ 155.577399][ T2993] EXT4-fs (sda1): Remounting filesystem read-only [ 155.592116][ T6] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 155.602759][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 155.612132][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.643528][ T405] kworker/u4:8: attempt to access beyond end of device [ 155.643528][ T405] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 155.682100][ T293] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 155.701085][ T293] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 155.720268][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.822670][ T6] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 155.869305][ T103] udevd[103]: worker [2991] terminated by signal 7 (Bus error) [ 155.882587][ T103] udevd[103]: worker [2991] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 156.080391][ T59] usb 3-1: USB disconnect, device number 15 [ 156.140850][ T103] udevd[103]: worker [2893] terminated by signal 7 (Bus error) [ 156.180767][ T293] cdc_acm 4-1:1.0: ttyACM1: USB ACM device [ 156.186235][ T103] udevd[103]: worker [2893] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 156.214385][ T103] udevd[103]: worker [2895] terminated by signal 7 (Bus error) [ 156.223156][ T103] udevd[103]: worker [2895] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 156.239948][ T103] udevd[103]: worker [2990] terminated by signal 7 (Bus error) [ 156.251973][ T103] udevd[103]: worker [2990] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 156.276357][ T989] usb 4-1: USB disconnect, device number 15 [ 156.294074][ T103] udevd[103]: worker [2992] terminated by signal 7 (Bus error) [ 156.306508][ T103] udevd[103]: worker [2992] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 158.739391][ T3040] loop1: detected capacity change from 0 to 40427 [ 158.930945][ T3040] F2FS-fs (loop1): invalid crc value [ 158.979843][ T3040] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.023514][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 159.039705][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.056314][ T3040] F2FS-fs (loop1): Start checkpoint disabled! [ 159.069030][ T3040] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 159.077384][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 159.088793][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.105315][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 159.113277][ T3040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 159.137500][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.149592][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.162031][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.195191][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.208520][ T621] kworker/u4:11: attempt to access beyond end of device [ 159.208520][ T621] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 159.226114][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.232316][ T3066] Write-error on swap-device (8:0:787806) Nov 3 21:09:49 [ 159.239879][ T3062] overlayfs: missing 'lowerdir' syzkaller kern.a[ 159.246394][ T3066] Write-error on swap-device (8:0:787814) lert kernel: [ 159.232316][ T3066] Write-error on swap-device (8:0:787806) [ 159.261207][ T3066] Write-error on swap-device (8:0:787822) [ 159.266770][ T3054] loop2: detected capacity change from 0 to 40427 [ 159.267105][ T3066] Write-error on swap-device (8:0:787830) Nov 3 21:09:49 [ 159.280010][ T3062] Write-error on swap-device (8:0:787838) syzkaller kern.a[ 159.287098][ T3066] Write-error on swap-device (8:0:787846) lert kernel: [ [ 159.292820][ T3054] F2FS-fs (loop2): invalid crc value [ 159.295213][ T3066] Write-error on swap-device (8:0:787854) 159.246394][ T30[ 159.306877][ T3062] Write-error on swap-device (8:0:787790) 66] Write-error on swap-device (8:0:787814) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.261207][ T3066][ 159.324099][ T3062] Write-error on swap-device (8:0:787798) Write-error on swap-device (8:0:787822) Nov 3 21:09:49 syzkal[ 159.335184][ T3062] Write-error on swap-device (8:0:788318) ler kern.alert kernel: [ 159.267105][ T3066] Wr[ 159.344473][ T3054] F2FS-fs (loop2): Found nat_bits in checkpoint ite-error on swap-device (8:0:787830) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.280010][ T3062] Write-error on swap-device (8:0:787838) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.287098][ T3066] Write-error on swap-device (8:0:787846) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.295213][ T3066] Write-error on swap-device (8:0:787854) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.306877][ T3062] Write-error on swap-device (8:0:787790) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.324099][ T3062] Write-error on swap-device (8:0:787798) Nov 3 21:09:49 syzkaller kern.alert kernel: [ 159.335184][ T3062] Write-error on swap-device (8:0:788318) [ 159.411877][ T3054] F2FS-fs (loop2): Start checkpoint disabled! [ 159.422609][ T3054] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 159.511005][ T3075] loop1: detected capacity change from 0 to 16 [ 159.642922][ T3075] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.670951][ T3075] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 159.824332][ T3054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 159.884928][ T3079] loop3: detected capacity change from 0 to 256 [ 159.892204][ T3053] EXT4-fs error: 130 callbacks suppressed [ 159.892236][ T3053] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.782: Detected aborted journal [ 160.017208][ T3077] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.787: Detected aborted journal [ 160.030102][ T3065] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.786: Detected aborted journal [ 160.093610][ T3077] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.787: Detected aborted journal [ 160.337219][ T3070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.785: Detected aborted journal [ 160.484421][ T3070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.785: Detected aborted journal [ 160.491108][ T3077] EXT4-fs: 93 callbacks suppressed [ 160.491121][ T3077] EXT4-fs (sda1): Remounting filesystem read-only [ 160.495316][ T3070] EXT4-fs (sda1): Remounting filesystem read-only [ 160.500445][ T3077] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.787: Detected aborted journal [ 160.522085][ T3053] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.782: Detected aborted journal [ 160.535049][ T3053] EXT4-fs (sda1): Remounting filesystem read-only [ 160.541519][ T3053] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.782: Detected aborted journal [ 160.552407][ T3053] EXT4-fs (sda1): Remounting filesystem read-only [ 160.558416][ T3080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.788: Detected aborted journal [ 160.575794][ T3053] EXT4-fs (sda1): Remounting filesystem read-only [ 160.582624][ T3053] EXT4-fs (sda1): Remounting filesystem read-only [ 160.582825][ T3065] EXT4-fs (sda1): Remounting filesystem read-only [ 160.601647][ T3080] EXT4-fs (sda1): Remounting filesystem read-only [ 160.606906][ T3065] EXT4-fs (sda1): Remounting filesystem read-only [ 160.608884][ T3077] EXT4-fs (sda1): Remounting filesystem read-only [ 160.651745][ T401] kworker/u4:6: attempt to access beyond end of device [ 160.651745][ T401] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 161.772792][ T3098] loop1: detected capacity change from 0 to 256 [ 162.051095][ T59] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 162.234880][ T3110] loop4: detected capacity change from 0 to 16 [ 162.242713][ T3110] erofs: (device loop4): mounted with root inode @ nid 36. [ 162.251935][ T3110] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 162.327817][ T3102] loop1: detected capacity change from 0 to 40427 [ 162.351580][ T3102] F2FS-fs (loop1): invalid crc value [ 162.352976][ T59] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 162.374253][ T59] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 162.393169][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.403854][ T3102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.437203][ T3102] F2FS-fs (loop1): Start checkpoint disabled! [ 162.444466][ T3102] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 162.452152][ T3102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 163.168369][ T59] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 163.181857][ T103] udevd[103]: worker [2894] terminated by signal 7 (Bus error) [ 163.189628][ T103] udevd[103]: worker [2894] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 163.203606][ T59] usb 3-1: USB disconnect, device number 16 [ 163.216278][ T103] udevd[103]: worker [3133] terminated by signal 7 (Bus error) [ 163.224039][ T103] udevd[103]: worker [3133] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 163.236772][ T103] udevd[103]: worker [3019] terminated by signal 7 (Bus error) [ 163.240231][ T404] kworker/u4:7: attempt to access beyond end of device [ 163.240231][ T404] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 163.244810][ T103] udevd[103]: worker [3019] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 163.335704][ T103] udevd[103]: worker [3137] terminated by signal 7 (Bus error) [ 163.343684][ T103] udevd[103]: worker [3137] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 163.601590][ T103] udevd[103]: worker [3020] terminated by signal 7 (Bus error) [ 163.614363][ T103] udevd[103]: worker [3020] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 164.793235][ T3170] loop1: detected capacity change from 0 to 256 [ 165.071314][ T3165] EXT4-fs error: 101 callbacks suppressed [ 165.071338][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.137014][ T3172] loop3: detected capacity change from 0 to 512 [ 165.159171][ T3172] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.167792][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 165.196263][ T3169] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.813: Detected aborted journal [ 165.278413][ T3172] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.811: inode has both inline data and extents flags [ 165.292690][ T3172] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.811: couldn't read orphan inode 15 (err -117) [ 165.305376][ T3172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.315685][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.327810][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.339408][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.351231][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.363185][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.375722][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.390673][ T3165] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.811: Detected aborted journal [ 165.545328][ T3165] EXT4-fs: 101 callbacks suppressed [ 165.545357][ T3165] EXT4-fs (sda1): Remounting filesystem read-only [ 165.633901][ T3178] EXT4-fs (sda1): Remounting filesystem read-only [ 165.661371][ T3169] EXT4-fs (sda1): Remounting filesystem read-only [ 165.667937][ T3169] EXT4-fs (sda1): Remounting filesystem read-only [ 165.681976][ T3178] EXT4-fs (sda1): Remounting filesystem read-only [ 165.690338][ T292] EXT4-fs (loop3): unmounting filesystem. [ 165.702755][ T3163] EXT4-fs (sda1): Remounting filesystem read-only [ 165.709402][ T3169] EXT4-fs (sda1): Remounting filesystem read-only [ 165.713197][ T3178] EXT4-fs (sda1): Remounting filesystem read-only [ 165.716225][ T3163] EXT4-fs (sda1): Remounting filesystem read-only [ 165.733345][ T3169] EXT4-fs (sda1): Remounting filesystem read-only [ 166.411695][ T6] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 167.195181][ T3181] loop3: detected capacity change from 0 to 40427 [ 167.205122][ T3181] F2FS-fs (loop3): invalid crc value [ 167.211360][ T3181] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.236189][ T3181] F2FS-fs (loop3): Start checkpoint disabled! [ 167.243307][ T3181] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 167.251425][ T3181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 167.263757][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.274790][ T6] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 167.286580][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.295880][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.304102][ T6] usb 3-1: Product: syz [ 167.306423][ T1000] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.316343][ T6] usb 3-1: Manufacturer: syz [ 167.320944][ T6] usb 3-1: SerialNumber: syz [ 167.338963][ T405] kworker/u4:8: attempt to access beyond end of device [ 167.338963][ T405] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 167.342799][ T6] cdc_mbim 3-1:1.0: skipping garbage [ 167.639600][ T1000] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 167.687375][ T6] cdc_mbim 3-1:1.0: bind() failure [ 167.693353][ T6] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 167.706351][ T1000] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 167.715570][ T1000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.725719][ T6] cdc_ncm 3-1:1.1: bind() failure [ 167.745314][ T6] usb 3-1: USB disconnect, device number 17 [ 168.257139][ T3225] loop3: detected capacity change from 0 to 512 [ 168.776780][ T3225] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.786841][ T1000] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 168.814240][ T103] udevd[103]: worker [3146] terminated by signal 7 (Bus error) [ 168.823324][ T3225] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.826: inode has both inline data and extents flags [ 168.836764][ T3225] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.826: couldn't read orphan inode 15 (err -117) [ 168.849508][ T3225] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.872895][ T103] udevd[103]: worker [3146] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 168.887160][ T103] udevd[103]: worker [3221] terminated by signal 7 (Bus error) [ 168.894838][ T103] udevd[103]: worker [3221] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 168.915961][ T103] udevd[103]: worker [3219] terminated by signal 7 (Bus error) [ 168.925636][ T103] udevd[103]: worker [3219] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 168.941296][ T103] udevd[103]: worker [3220] terminated by signal 7 (Bus error) [ 168.949021][ T103] udevd[103]: worker [3220] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/tty/ttyACM0' [ 169.015709][ T1943] usb 5-1: USB disconnect, device number 16 [ 169.039892][ T103] udevd[103]: worker [3238] terminated by signal 7 (Bus error) [ 169.047806][ T103] udevd[103]: worker [3238] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 169.115212][ T292] EXT4-fs (loop3): unmounting filesystem. [ 169.134610][ T3247] loop3: detected capacity change from 0 to 16 [ 169.155183][ T3247] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.755068][ T3254] loop1: detected capacity change from 0 to 512 [ 169.764956][ T3254] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.913276][ T3254] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.829: inode has both inline data and extents flags [ 169.927096][ T3254] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.829: couldn't read orphan inode 15 (err -117) [ 169.939607][ T3254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.082489][ T3256] EXT4-fs error: 105 callbacks suppressed [ 170.082547][ T3256] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.833: Detected aborted journal [ 170.255843][ T3248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.831: Detected aborted journal [ 170.255871][ T3244] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.829: Detected aborted journal [ 170.278214][ T3256] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.833: Detected aborted journal [ 170.282150][ T3261] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.834: Detected aborted journal [ 170.290940][ T3248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.831: Detected aborted journal [ 170.304941][ T3256] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.833: Detected aborted journal [ 170.325126][ T3248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.831: Detected aborted journal [ 170.338397][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 170.350649][ T3248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.831: Detected aborted journal [ 170.374012][ T290] EXT4-fs (loop1): unmounting filesystem. [ 170.622183][ T3267] EXT4-fs: 105 callbacks suppressed [ 170.622209][ T3267] EXT4-fs (sda1): Remounting filesystem read-only [ 170.640100][ T3267] EXT4-fs (sda1): Remounting filesystem read-only [ 170.648148][ T3267] EXT4-fs (sda1): Remounting filesystem read-only [ 170.774792][ T3273] EXT4-fs (sda1): Remounting filesystem read-only [ 170.812152][ T1943] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.828877][ T3273] EXT4-fs (sda1): Remounting filesystem read-only [ 170.939561][ T3262] loop4: detected capacity change from 0 to 40427 [ 170.952920][ T3265] EXT4-fs (sda1): Remounting filesystem read-only [ 170.962929][ T3275] EXT4-fs (sda1): Remounting filesystem read-only [ 170.969454][ T3262] F2FS-fs (loop4): invalid crc value [ 170.974869][ T3275] EXT4-fs (sda1): Remounting filesystem read-only [ 170.978798][ T3262] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.018256][ T3262] F2FS-fs (loop4): Start checkpoint disabled! [ 171.024920][ T3262] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 171.032674][ T3262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 171.040610][ T3261] EXT4-fs (sda1): Remounting filesystem read-only [ 171.047125][ T3275] EXT4-fs (sda1): Remounting filesystem read-only [ 171.072124][ T1943] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 171.080046][ T621] kworker/u4:11: attempt to access beyond end of device [ 171.080046][ T621] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 171.081363][ T1943] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 171.104688][ T1943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.198441][ T1943] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 172.397222][ T3288] loop3: detected capacity change from 0 to 512 [ 172.721701][ T3288] EXT4-fs (loop3): Test dummy encryption mode enabled [ 172.783437][ T3288] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.841: inode has both inline data and extents flags [ 172.916937][ T3288] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.841: couldn't read orphan inode 15 (err -117) [ 172.928940][ T3288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.996637][ T309] usb 2-1: USB disconnect, device number 11 [ 173.163523][ T292] EXT4-fs (loop3): unmounting filesystem. [ 173.311101][ T1943] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.502818][ T1943] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 173.530528][ T1943] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 173.585945][ T1943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.869039][ T1943] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 173.885720][ T103] udevd[103]: worker [3307] terminated by signal 7 (Bus error) [ 173.928431][ T103] udevd[103]: worker [3307] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 173.943208][ T103] udevd[103]: worker [3309] terminated by signal 7 (Bus error) [ 173.950794][ T103] udevd[103]: worker [3309] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/tty/ttyACM0' [ 173.977288][ T103] udevd[103]: worker [3306] terminated by signal 7 (Bus error) [ 174.001867][ T103] udevd[103]: worker [3306] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 174.032322][ T103] udevd[103]: worker [3322] terminated by signal 7 (Bus error) [ 174.045737][ T103] udevd[103]: worker [3322] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 174.070790][ T1943] usb 3-1: USB disconnect, device number 18 [ 174.136160][ T3333] loop4: detected capacity change from 0 to 256 [ 174.281589][ T3330] loop0: detected capacity change from 0 to 40427 [ 174.293670][ T3330] F2FS-fs (loop0): invalid crc value [ 174.302156][ T3330] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.340388][ T3330] F2FS-fs (loop0): Start checkpoint disabled! [ 174.347413][ T3330] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 174.355099][ T3330] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 174.398135][ T28] audit: type=1400 audit(1793740205.031:304): avc: denied { getopt } for pid=3336 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.427097][ T8] kworker/u4:0: attempt to access beyond end of device [ 174.427097][ T8] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 175.266279][ T3349] EXT4-fs error: 97 callbacks suppressed [ 175.266307][ T3349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal [ 175.341138][ T3354] loop2: detected capacity change from 0 to 512 [ 175.351133][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 175.642384][ T3356] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.858: Detected aborted journal [ 175.678460][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 175.691526][ T3354] EXT4-fs (loop2): Test dummy encryption mode enabled [ 175.781512][ T3341] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.852: Detected aborted journal [ 175.797777][ T3354] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.856: inode has both inline data and extents flags [ 175.811529][ T3354] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.856: couldn't read orphan inode 15 (err -117) [ 175.823689][ T3354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.833736][ T3349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal [ 175.844893][ T3349] EXT4-fs: 68 callbacks suppressed [ 175.844911][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.857448][ T3349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal [ 175.868431][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.875642][ T3349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal [ 175.886530][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.894139][ T3349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal [ 175.905029][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.912415][ T3349] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.856: Detected aborted journal [ 175.923297][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.930953][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.941673][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.954742][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.961915][ T3349] EXT4-fs (sda1): Remounting filesystem read-only [ 175.975350][ T3356] EXT4-fs (sda1): Remounting filesystem read-only [ 176.109791][ T289] EXT4-fs (loop2): unmounting filesystem. [ 176.361145][ T1000] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 176.592700][ T1000] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 176.850633][ T1000] usb 5-1: config 127 has no interface number 0 [ 177.025897][ T3379] loop3: detected capacity change from 0 to 256 [ 177.085475][ T1000] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 177.096646][ T1000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.108805][ T1000] usb 5-1: Product: syz [ 177.114055][ T1000] usb 5-1: Manufacturer: syz [ 177.121768][ T1000] usb 5-1: SerialNumber: syz [ 177.622893][ T3392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.640245][ T3392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.661575][ T3381] loop1: detected capacity change from 0 to 40427 [ 177.688017][ T3381] F2FS-fs (loop1): invalid crc value [ 177.730203][ T3359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.739753][ T3359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.743779][ T3381] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.762397][ T1000] asix: probe of 5-1:127.57 failed with error -22 [ 177.771234][ T1000] usb 5-1: USB disconnect, device number 17 [ 177.777327][ T103] udevd[103]: worker [3325] terminated by signal 7 (Bus error) [ 177.785934][ T103] udevd[103]: worker [3325] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 177.786852][ T3381] F2FS-fs (loop1): Start checkpoint disabled! [ 177.802681][ T3381] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 177.810052][ T3381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 177.841050][ T1943] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 178.052690][ T1943] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 178.089612][ T1943] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 178.099544][ T1943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.105234][ T620] kworker/u4:10: attempt to access beyond end of device [ 178.105234][ T620] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 178.190237][ T28] audit: type=1400 audit(1793740208.821:305): avc: denied { create } for pid=3406 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.313574][ T1943] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 178.518512][ T1943] usb 3-1: USB disconnect, device number 19 [ 178.885607][ T3417] loop4: detected capacity change from 0 to 512 [ 178.895866][ T3417] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.238229][ T103] udevd[103]: worker [3414] terminated by signal 7 (Bus error) [ 179.252863][ T3417] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.871: inode has both inline data and extents flags [ 179.266596][ T3417] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.871: couldn't read orphan inode 15 (err -117) [ 179.279664][ T3417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.467956][ T103] udevd[103]: worker [3414] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 179.494224][ T291] EXT4-fs (loop4): unmounting filesystem. [ 179.858977][ T3435] loop0: detected capacity change from 0 to 256 [ 180.430473][ T3438] EXT4-fs error: 113 callbacks suppressed [ 180.430497][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.465558][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.476973][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.488305][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.499921][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.511344][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.522752][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.534156][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.546051][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.565469][ T3438] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.877: Detected aborted journal [ 180.880160][ T3468] EXT4-fs: 116 callbacks suppressed [ 180.880195][ T3468] EXT4-fs (sda1): Remounting filesystem read-only [ 180.915101][ T3438] EXT4-fs (sda1): Remounting filesystem read-only [ 180.988238][ T3470] EXT4-fs (sda1): Remounting filesystem read-only [ 181.090159][ T3470] EXT4-fs (sda1): Remounting filesystem read-only [ 181.095327][ T3468] EXT4-fs (sda1): Remounting filesystem read-only [ 181.170947][ T3480] EXT4-fs (sda1): Remounting filesystem read-only [ 181.180075][ T3451] cgroup: fork rejected by pids controller in /syz3 [ 181.181825][ T3480] EXT4-fs (sda1): Remounting filesystem read-only [ 181.289330][ T3470] EXT4-fs (sda1): Remounting filesystem read-only [ 181.299288][ T3470] EXT4-fs (sda1): Remounting filesystem read-only [ 181.307042][ T3470] EXT4-fs (sda1): Remounting filesystem read-only [ 181.569111][ T3491] loop0: detected capacity change from 0 to 512 [ 181.832148][ T3491] EXT4-fs (loop0): Test dummy encryption mode enabled [ 182.012928][ T3491] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.884: inode has both inline data and extents flags [ 182.026898][ T3491] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.884: couldn't read orphan inode 15 (err -117) [ 182.039530][ T3491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.225590][ T3456] loop2: detected capacity change from 0 to 40427 [ 182.241858][ T3456] F2FS-fs (loop2): invalid crc value [ 182.274263][ T288] EXT4-fs (loop0): unmounting filesystem. [ 182.280832][ T3456] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.341126][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 182.364821][ T3456] F2FS-fs (loop2): Start checkpoint disabled! [ 182.367536][ T3505] loop0: detected capacity change from 0 to 256 [ 182.371430][ T3456] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 182.385953][ T3456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 182.408930][ T3502] 9pnet_fd: Insufficient options for proto=fd [ 182.439818][ T28] audit: type=1400 audit(1793740213.071:306): avc: denied { bind } for pid=3501 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.464154][ T28] audit: type=1400 audit(1793740213.091:307): avc: denied { name_bind } for pid=3501 comm="syz.1.889" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 182.604811][ T28] audit: type=1400 audit(1793740213.091:308): avc: denied { node_bind } for pid=3501 comm="syz.1.889" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 182.628967][ T3509] tc_dump_action: action bad kind [ 182.635225][ T28] audit: type=1400 audit(1793740213.101:309): avc: denied { read } for pid=3501 comm="syz.1.889" path="socket:[32154]" dev="sockfs" ino=32154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.642406][ T621] kworker/u4:11: attempt to access beyond end of device [ 182.642406][ T621] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 182.702202][ T6] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 182.711445][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 182.720521][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.940672][ T6] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 182.953770][ T103] udevd[103]: worker [3413] terminated by signal 7 (Bus error) [ 182.961627][ T103] udevd[103]: worker [3413] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 183.178860][ T3525] loop3: detected capacity change from 0 to 256 [ 183.180404][ T6] usb 5-1: USB disconnect, device number 18 [ 183.193791][ T103] udevd[103]: worker [3412] terminated by signal 7 (Bus error) [ 183.211538][ T103] udevd[103]: worker [3412] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 183.242695][ T103] udevd[103]: worker [3484] terminated by signal 7 (Bus error) [ 183.305087][ T3534] loop3: detected capacity change from 0 to 2048 [ 183.316010][ T103] udevd[103]: worker [3484] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 183.344859][ T103] udevd[103]: worker [3529] terminated by signal 7 (Bus error) [ 183.355080][ T3534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.364419][ T103] udevd[103]: worker [3529] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 183.533368][ T3534] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.710927][ T3540] loop2: detected capacity change from 0 to 40427 [ 183.721707][ T3540] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0xf2000410) [ 183.740216][ T3540] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 183.758962][ T3540] F2FS-fs (loop2): invalid crc value [ 183.774381][ T292] EXT4-fs (loop3): unmounting filesystem. [ 183.775756][ T3540] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 183.818817][ T3540] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 183.826189][ T3540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.149559][ T3553] loop0: detected capacity change from 0 to 512 [ 184.396396][ T3553] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.565242][ T3553] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.898: inode has both inline data and extents flags [ 184.578942][ T3553] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.898: couldn't read orphan inode 15 (err -117) [ 184.593837][ T3553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.854378][ T3558] loop1: detected capacity change from 0 to 2048 [ 184.854711][ T288] EXT4-fs (loop0): unmounting filesystem. [ 184.887004][ T3558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.898163][ T3558] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.953403][ T3567] loop2: detected capacity change from 0 to 256 [ 185.275270][ T28] audit: type=1400 audit(1793740215.911:310): avc: denied { wake_alarm } for pid=3571 comm="syz.2.908" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.300549][ T3574] selinuxfs: Unknown parameter '%(' [ 185.323844][ T290] EXT4-fs (loop1): unmounting filesystem. [ 185.361577][ T28] audit: type=1400 audit(1793740215.991:311): avc: denied { write } for pid=3571 comm="syz.2.908" name="ip6_flowlabel" dev="proc" ino=4026532445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 185.432212][ T3561] loop4: detected capacity change from 0 to 40427 [ 185.445892][ T3561] F2FS-fs (loop4): invalid crc value [ 185.457322][ T3583] EXT4-fs error: 116 callbacks suppressed [ 185.457334][ T3583] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.912: Detected aborted journal [ 185.478156][ T3561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.516723][ T3583] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.912: Detected aborted journal [ 185.532047][ T3561] F2FS-fs (loop4): Start checkpoint disabled! [ 185.541468][ T3561] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 185.550802][ T3588] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.913: Detected aborted journal [ 185.562372][ T3561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 185.570150][ T3560] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.902: Detected aborted journal [ 185.570304][ T3588] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.913: Detected aborted journal [ 185.585778][ T3573] loop0: detected capacity change from 0 to 40427 [ 185.598859][ T3588] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.913: Detected aborted journal [ 185.610048][ T3573] F2FS-fs (loop0): invalid crc value [ 185.615706][ T3588] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.913: Detected aborted journal [ 185.619020][ T3560] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.902: Detected aborted journal [ 185.637907][ T3560] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.902: Detected aborted journal [ 185.638607][ T3573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.653543][ T3560] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.902: Detected aborted journal [ 185.685118][ T3573] F2FS-fs (loop0): Start checkpoint disabled! [ 185.712954][ T3573] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 185.775072][ T3594] erofs: (device loop1): mounted with root inode @ nid 36. [ 185.796019][ T3594] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 185.842045][ T3573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 185.891444][ T3595] EXT4-fs: 105 callbacks suppressed [ 185.891466][ T3595] EXT4-fs (sda1): Remounting filesystem read-only [ 185.971631][ T3572] EXT4-fs (sda1): Remounting filesystem read-only [ 185.991297][ T280] EXT4-fs (sda1): Remounting filesystem read-only [ 186.033285][ T3595] EXT4-fs (sda1): Remounting filesystem read-only [ 186.045966][ T3572] EXT4-fs (sda1): Remounting filesystem read-only [ 186.227935][ T3572] EXT4-fs (sda1): Remounting filesystem read-only [ 186.511470][ T3588] EXT4-fs (sda1): Remounting filesystem read-only [ 186.711085][ T3588] EXT4-fs (sda1): Remounting filesystem read-only [ 186.821412][ T10] kworker/u4:1: attempt to access beyond end of device [ 186.821412][ T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 186.872859][ T3599] EXT4-fs (sda1): Remounting filesystem read-only [ 186.884522][ T3599] EXT4-fs (sda1): Remounting filesystem read-only [ 186.941894][ T234] kworker/u4:3: attempt to access beyond end of device [ 186.941894][ T234] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.498315][ T3614] set_capacity_and_notify: 1 callbacks suppressed [ 187.498339][ T3614] loop0: detected capacity change from 0 to 512 [ 188.062056][ T3614] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.087890][ T3614] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.917: inode has both inline data and extents flags [ 188.102312][ T3614] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.917: couldn't read orphan inode 15 (err -117) [ 188.116479][ T3614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.231700][ T309] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 188.515661][ T288] EXT4-fs (loop0): unmounting filesystem. [ 188.832096][ T309] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 188.842046][ T309] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 188.852727][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.063596][ T309] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 189.102819][ T103] udevd[103]: worker [3603] terminated by signal 7 (Bus error) [ 189.125287][ T103] udevd[103]: worker [3603] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 189.249432][ T3656] loop2: detected capacity change from 0 to 512 [ 190.058736][ T3656] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.069328][ T635] usb 5-1: USB disconnect, device number 19 [ 190.079776][ T3656] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.931: inode has both inline data and extents flags [ 190.093730][ T3656] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.931: couldn't read orphan inode 15 (err -117) [ 190.113196][ T3656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.133687][ T103] udevd[103]: worker [3528] terminated by signal 7 (Bus error) [ 190.144178][ T103] udevd[103]: worker [3528] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 190.150226][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 190.155883][ T103] udevd[103]: worker [3541] terminated by signal 7 (Bus error) [ 190.174195][ T3666] loop1: detected capacity change from 0 to 16 [ 190.180943][ T3662] loop3: detected capacity change from 0 to 16 [ 190.188953][ T3662] erofs: (device loop3): mounted with root inode @ nid 36. [ 190.196404][ T3666] erofs: (device loop1): erofs_read_inode: unsupported chunk format 411 of nid 36 [ 190.200216][ T103] udevd[103]: worker [3541] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 190.243528][ T103] udevd[103]: worker [3664] terminated by signal 7 (Bus error) [ 190.286946][ T103] udevd[103]: worker [3664] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1' [ 190.316239][ T103] udevd[103]: worker [3663] terminated by signal 7 (Bus error) [ 190.325023][ T289] EXT4-fs (loop2): unmounting filesystem. [ 190.335322][ T103] udevd[103]: worker [3663] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 190.445695][ T3677] loop0: detected capacity change from 0 to 2048 [ 190.525435][ T3681] EXT4-fs error: 78 callbacks suppressed [ 190.525453][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.542031][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.553520][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.554127][ T3684] loop2: detected capacity change from 0 to 16 [ 190.670352][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.779073][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.791498][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.804919][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.816159][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.827531][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.839210][ T3681] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.938: Detected aborted journal [ 190.908155][ T3681] EXT4-fs: 68 callbacks suppressed [ 190.908171][ T3681] EXT4-fs (sda1): Remounting filesystem read-only [ 190.920316][ T3681] EXT4-fs (sda1): Remounting filesystem read-only [ 190.927406][ T3681] EXT4-fs (sda1): Remounting filesystem read-only [ 190.933939][ T3681] EXT4-fs (sda1): Remounting filesystem read-only [ 190.943551][ T3684] erofs: (device loop2): mounted with root inode @ nid 36. [ 190.953385][ T3678] EXT4-fs (sda1): Remounting filesystem read-only [ 190.969619][ T3678] EXT4-fs (sda1): Remounting filesystem read-only [ 190.976229][ T3678] EXT4-fs (sda1): Remounting filesystem read-only [ 190.983759][ T3678] EXT4-fs (sda1): Remounting filesystem read-only [ 190.991604][ T3678] EXT4-fs (sda1): Remounting filesystem read-only [ 191.001108][ T3678] EXT4-fs (sda1): Remounting filesystem read-only [ 191.123920][ T3677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.206570][ T3677] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.456783][ T3703] loop4: detected capacity change from 0 to 512 [ 192.678993][ T3703] EXT4-fs (loop4): Test dummy encryption mode enabled [ 192.698330][ T3703] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.939: inode has both inline data and extents flags [ 192.711585][ T3703] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.939: couldn't read orphan inode 15 (err -117) [ 192.725724][ T3703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.726253][ T3709] loop3: detected capacity change from 0 to 256 [ 192.785091][ T288] EXT4-fs (loop0): unmounting filesystem. [ 193.715987][ T291] EXT4-fs (loop4): unmounting filesystem. [ 193.795734][ T3727] loop3: detected capacity change from 0 to 256 [ 194.696736][ T309] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 194.835343][ T3747] loop1: detected capacity change from 0 to 2048 [ 194.861412][ T3747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.895220][ T3747] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.922342][ T309] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 194.943057][ T309] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 194.958029][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.071046][ T293] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.105445][ T290] EXT4-fs (loop1): unmounting filesystem. [ 195.139362][ T3754] loop0: detected capacity change from 0 to 256 [ 195.224901][ T309] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 195.231745][ T3750] loop4: detected capacity change from 0 to 40427 [ 195.236922][ T103] udevd[103]: worker [3679] terminated by signal 7 (Bus error) [ 195.239694][ T3750] F2FS-fs (loop4): invalid crc value [ 195.246366][ T103] udevd[103]: worker [3679] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 195.263657][ T3750] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.265991][ T293] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 195.292138][ T103] udevd[103]: worker [3668] terminated by signal 7 (Bus error) [ 195.299848][ T293] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 195.309291][ T103] udevd[103]: worker [3668] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 195.321724][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.331298][ T3750] F2FS-fs (loop4): Start checkpoint disabled! [ 195.332747][ T103] udevd[103]: worker [3670] terminated by signal 7 (Bus error) [ 195.345129][ T3750] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 195.345988][ T103] udevd[103]: worker [3670] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 195.371100][ T3750] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 195.385976][ T103] udevd[103]: worker [3542] terminated by signal 7 (Bus error) [ 195.401045][ T1000] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.403783][ T103] udevd[103]: worker [3542] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 195.436502][ T556] usb 3-1: USB disconnect, device number 20 [ 195.439340][ T103] udevd[103]: worker [3660] terminated by signal 7 (Bus error) [ 195.466725][ T103] udevd[103]: worker [3660] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/tty/ttyACM0' [ 195.479799][ T342] kworker/u4:4: attempt to access beyond end of device [ 195.479799][ T342] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 195.541813][ T3744] EXT4-fs error: 117 callbacks suppressed [ 195.541831][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.560972][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.572684][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.584615][ T293] cdc_acm 4-1:1.0: ttyACM1: USB ACM device [ 195.586560][ T3755] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.956: Detected aborted journal [ 195.595107][ T293] usb 4-1: USB disconnect, device number 16 [ 195.606815][ T1000] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 195.624225][ T1000] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 195.633314][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.793769][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.805512][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.819022][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.831281][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 195.845312][ T3744] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.952: Detected aborted journal [ 195.846760][ T3751] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.954: Detected aborted journal [ 195.873325][ T1000] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 196.022601][ T3755] EXT4-fs: 110 callbacks suppressed [ 196.022619][ T3755] EXT4-fs (sda1): Remounting filesystem read-only [ 196.073081][ T3751] EXT4-fs (sda1): Remounting filesystem read-only [ 196.085773][ T3751] EXT4-fs (sda1): Remounting filesystem read-only [ 196.092570][ T3751] EXT4-fs (sda1): Remounting filesystem read-only [ 196.151656][ T3751] EXT4-fs (sda1): Remounting filesystem read-only [ 196.151923][ T3775] EXT4-fs (sda1): Remounting filesystem read-only [ 196.164961][ T3777] EXT4-fs (sda1): Remounting filesystem read-only [ 196.171998][ T3775] EXT4-fs (sda1): Remounting filesystem read-only [ 196.179410][ T3777] EXT4-fs (sda1): Remounting filesystem read-only [ 196.188920][ T3777] EXT4-fs (sda1): Remounting filesystem read-only [ 196.457184][ T3779] loop2: detected capacity change from 0 to 40427 [ 196.482210][ T3779] F2FS-fs (loop2): invalid crc value [ 196.490398][ T3779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.772818][ T3779] F2FS-fs (loop2): Start checkpoint disabled! [ 196.784024][ T3779] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 196.791525][ T3779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 196.879080][ T621] kworker/u4:11: attempt to access beyond end of device [ 196.879080][ T621] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 197.102442][ T3795] loop2: detected capacity change from 0 to 16 [ 197.110208][ T3795] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.128847][ T3795] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 198.414219][ T3791] loop3: detected capacity change from 0 to 40427 [ 198.454613][ T3791] F2FS-fs (loop3): invalid crc value [ 198.476209][ T3791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.556201][ T3791] F2FS-fs (loop3): Start checkpoint disabled! [ 198.570053][ T3791] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 198.586834][ T3791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 198.664763][ T342] kworker/u4:4: attempt to access beyond end of device [ 198.664763][ T342] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 198.678883][ T59] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 198.772722][ T3816] loop3: detected capacity change from 0 to 256 [ 198.922065][ T59] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 198.931324][ T59] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 198.940361][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.182726][ T59] cdc_acm 3-1:1.0: ttyACM1: USB ACM device [ 199.375533][ T59] usb 3-1: USB disconnect, device number 21 [ 200.691645][ T3857] EXT4-fs error: 91 callbacks suppressed [ 200.691660][ T3857] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.991: Detected aborted journal [ 200.709190][ T3858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.980: Detected aborted journal [ 200.709565][ T3857] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.991: Detected aborted journal [ 200.723113][ T3840] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.975: Detected aborted journal [ 200.769725][ T3858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.980: Detected aborted journal [ 200.787366][ T3858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.980: Detected aborted journal [ 200.793304][ T3861] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.981: Detected aborted journal [ 200.808764][ T3858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.980: Detected aborted journal [ 200.813875][ T3861] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.981: Detected aborted journal [ 200.820888][ T3862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.993: Detected aborted journal [ 200.878515][ T3860] loop3: detected capacity change from 0 to 2048 [ 200.906967][ T3860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 200.917374][ T3860] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.204549][ T1000] usb 2-1: USB disconnect, device number 12 [ 201.221461][ T3858] EXT4-fs: 84 callbacks suppressed [ 201.221477][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.223095][ T3873] EXT4-fs (sda1): Remounting filesystem read-only [ 201.259793][ T3873] EXT4-fs (sda1): Remounting filesystem read-only [ 201.268896][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.286016][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.303493][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.319564][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.333453][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.347371][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.362428][ T3858] EXT4-fs (sda1): Remounting filesystem read-only [ 201.433005][ T292] EXT4-fs (loop3): unmounting filesystem. [ 201.459204][ T3876] loop3: detected capacity change from 0 to 256 [ 201.671136][ T1000] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 202.042997][ T1000] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 202.089371][ T3892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.099396][ T1000] usb 2-1: config 127 has no interface number 0 [ 202.175257][ T1000] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 202.209996][ T3892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.279589][ T1000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.443388][ T1000] usb 2-1: Product: syz [ 202.453499][ T1000] usb 2-1: Manufacturer: syz [ 202.470432][ T1000] usb 2-1: SerialNumber: syz [ 202.495735][ T103] udevd[103]: worker [3837] terminated by signal 7 (Bus error) [ 202.508378][ T103] udevd[103]: worker [3837] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 202.753133][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.761886][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.770664][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.779179][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.788041][ T1000] asix: probe of 2-1:127.57 failed with error -22 [ 202.800822][ T1000] usb 2-1: USB disconnect, device number 13 [ 202.807587][ T103] udevd[103]: worker [3917] terminated by signal 7 (Bus error) [ 202.815325][ T103] udevd[103]: worker [3917] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:127.57' [ 202.879974][ T3919] loop2: detected capacity change from 0 to 16 [ 202.888714][ T3919] erofs: (device loop2): mounted with root inode @ nid 36. [ 202.909743][ T3919] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 203.555398][ T3925] loop1: detected capacity change from 0 to 256 [ 203.898776][ T3931] loop1: detected capacity change from 0 to 512 [ 203.931442][ T3931] EXT4-fs (loop1): Test dummy encryption mode enabled [ 203.938249][ T3931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.134862][ T3931] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1001: bad orphan inode 131083 [ 204.181399][ T3931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.281033][ T309] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.368296][ T3956] loop2: detected capacity change from 0 to 256 [ 205.471027][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 205.477971][ T309] usb 2-1: config 0 has no interfaces? [ 205.485101][ T309] usb 2-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 205.494331][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.502469][ T309] usb 2-1: Product: syz [ 205.506690][ T309] usb 2-1: Manufacturer: syz [ 205.511450][ T309] usb 2-1: SerialNumber: syz [ 205.521092][ T989] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 205.526992][ T309] r8152-cfgselector 2-1: config 0 descriptor?? [ 205.571044][ T59] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 205.666492][ T3967] loop2: detected capacity change from 0 to 256 [ 205.712073][ T989] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 205.721233][ T989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 205.730292][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.735911][ T3930] EXT4-fs error: 114 callbacks suppressed [ 205.735925][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.755153][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.762069][ T59] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 205.766704][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.785292][ T59] usb 5-1: config 127 has no interface number 0 [ 205.792414][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.793935][ T59] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 205.803704][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.823689][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.826431][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.835184][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.842755][ T59] usb 5-1: Product: syz [ 205.854255][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.858118][ T59] usb 5-1: Manufacturer: syz [ 205.873714][ T59] usb 5-1: SerialNumber: syz [ 205.878725][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.884425][ T103] udevd[103]: worker [3836] terminated by signal 7 (Bus error) [ 205.890668][ T3930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1001: Detected aborted journal [ 205.897701][ T103] udevd[103]: worker [3836] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 205.909568][ T3931] overlayfs: upper fs needs to support d_type. [ 205.925996][ T3931] overlayfs: failed to resolve './file0': -2 [ 205.940665][ T989] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 205.946635][ T309] r8152-cfgselector 2-1: Unknown version 0x0000 [ 205.953563][ T309] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 206.142378][ T556] usb 4-1: USB disconnect, device number 17 [ 206.156547][ T3961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.165086][ T3961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.173711][ T3961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.182173][ T3961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.191094][ T59] asix: probe of 5-1:127.57 failed with error -22 [ 206.198376][ T103] udevd[103]: worker [3834] terminated by signal 7 (Bus error) [ 206.208054][ T103] udevd[103]: worker [3834] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 206.218258][ T59] usb 5-1: USB disconnect, device number 20 [ 206.226141][ T103] udevd[103]: worker [3916] terminated by signal 7 (Bus error) [ 206.233882][ T103] udevd[103]: worker [3916] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 206.257922][ T3930] EXT4-fs: 103 callbacks suppressed [ 206.257936][ T3930] EXT4-fs (sda1): Remounting filesystem read-only [ 206.268796][ T3981] EXT4-fs (sda1): Remounting filesystem read-only [ 206.270630][ T3930] EXT4-fs (sda1): Remounting filesystem read-only [ 206.277116][ T3981] EXT4-fs (sda1): Remounting filesystem read-only [ 206.291088][ T3960] EXT4-fs (sda1): Remounting filesystem read-only [ 206.301431][ T3930] EXT4-fs (sda1): Remounting filesystem read-only [ 206.302006][ T3960] EXT4-fs (sda1): Remounting filesystem read-only [ 206.312388][ T3981] EXT4-fs (sda1): Remounting filesystem read-only [ 206.332134][ T3981] EXT4-fs (sda1): Remounting filesystem read-only [ 206.359384][ T3994] EXT4-fs (sda1): Remounting filesystem read-only [ 206.600545][ T290] EXT4-fs (loop1): unmounting filesystem. [ 207.044365][ T4006] loop1: detected capacity change from 0 to 512 [ 207.800503][ T4006] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.825979][ T4006] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1015: inode has both inline data and extents flags [ 207.839665][ T4006] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1015: couldn't read orphan inode 15 (err -117) [ 207.851620][ T4006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.230777][ T290] EXT4-fs (loop1): unmounting filesystem. [ 208.265876][ T4032] loop1: detected capacity change from 0 to 512 [ 208.284385][ T4032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.1025: missing EA_INODE flag [ 208.296332][ T4032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1025: error while reading EA inode 2 err=-117 [ 208.309585][ T4032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1025: inode #3584: comm syz.1.1025: iget: illegal inode # [ 208.325343][ T4032] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1025: error while reading EA inode 3584 err=-117 [ 208.404830][ T4032] EXT4-fs (loop1): 1 orphan inode deleted [ 208.410834][ T4032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.477338][ T28] audit: type=1400 audit(1793740239.111:312): avc: denied { name_bind } for pid=4031 comm="syz.1.1025" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 208.731058][ T59] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.968853][ T4053] loop0: detected capacity change from 0 to 16 [ 208.975919][ T4053] erofs: (device loop0): mounted with root inode @ nid 36. [ 208.985053][ T4053] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 209.684558][ T4068] loop4: detected capacity change from 0 to 512 [ 210.191888][ T4068] EXT4-fs (loop4): Test dummy encryption mode enabled [ 210.346471][ T4068] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1037: inode has both inline data and extents flags [ 210.381462][ T4068] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1037: couldn't read orphan inode 15 (err -117) [ 210.395167][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.404128][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.412987][ T4068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.593211][ T291] EXT4-fs (loop4): unmounting filesystem. [ 210.798950][ T4090] EXT4-fs error: 90 callbacks suppressed [ 210.798967][ T4090] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1046: Detected aborted journal [ 210.816804][ T4090] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1046: Detected aborted journal [ 210.837089][ T4092] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1047: Detected aborted journal [ 211.008643][ T4087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1045: Detected aborted journal [ 211.036919][ T4087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1045: Detected aborted journal [ 211.048372][ T4087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1045: Detected aborted journal [ 211.050031][ T4092] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1047: Detected aborted journal [ 211.059833][ T4087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1045: Detected aborted journal [ 211.082242][ T4087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1045: Detected aborted journal [ 211.093560][ T4087] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1045: Detected aborted journal [ 211.375230][ T28] audit: type=1400 audit(1793740242.011:313): avc: denied { rmdir } for pid=290 comm="syz-executor" name="myproc" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 211.386541][ T4098] EXT4-fs: 78 callbacks suppressed [ 211.386555][ T4098] EXT4-fs (sda1): Remounting filesystem read-only [ 211.419870][ T290] EXT4-fs (loop1): unmounting filesystem. [ 211.436416][ T4099] EXT4-fs (sda1): Remounting filesystem read-only [ 211.436826][ T4098] EXT4-fs (sda1): Remounting filesystem read-only [ 211.443813][ T4099] EXT4-fs (sda1): Remounting filesystem read-only [ 211.456806][ T4099] EXT4-fs (sda1): Remounting filesystem read-only [ 211.464866][ T4099] EXT4-fs (sda1): Remounting filesystem read-only [ 211.521324][ T4099] EXT4-fs (sda1): Remounting filesystem read-only [ 211.546890][ T4098] EXT4-fs (sda1): Remounting filesystem read-only [ 211.567668][ T4103] EXT4-fs (sda1): Remounting filesystem read-only [ 211.575242][ T4103] EXT4-fs (sda1): Remounting filesystem read-only [ 212.652730][ T4118] loop4: detected capacity change from 0 to 512 [ 212.979157][ T4118] EXT4-fs (loop4): Test dummy encryption mode enabled [ 213.367716][ T4118] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1052: inode has both inline data and extents flags [ 213.369231][ T4128] loop1: detected capacity change from 0 to 128 [ 213.387642][ T4118] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1052: couldn't read orphan inode 15 (err -117) [ 213.399963][ T4118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.469312][ T4132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.478468][ T4132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.836140][ T291] EXT4-fs (loop4): unmounting filesystem. [ 214.001724][ T4144] futex_wake_op: syz.4.1062 tries to shift op by 144; fix this program [ 214.173798][ T4146] loop3: detected capacity change from 0 to 256 [ 214.524151][ T4146] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.537414][ T4146] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 214.548389][ T4146] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 214.750189][ T4156] loop2: detected capacity change from 0 to 16 [ 214.759582][ T4156] erofs: (device loop2): mounted with root inode @ nid 36. [ 214.770908][ T4156] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 215.693121][ T4175] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 215.738357][ T4175] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 215.987684][ T4164] EXT4-fs error: 112 callbacks suppressed [ 215.987701][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.005310][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.016399][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.027555][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.038635][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.049789][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.061466][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.073832][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.085732][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.096851][ T4164] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1071: Detected aborted journal [ 216.380214][ T4181] loop2: detected capacity change from 0 to 512 [ 216.800875][ T4181] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.916009][ T4183] EXT4-fs: 100 callbacks suppressed [ 216.916074][ T4183] EXT4-fs (sda1): Remounting filesystem read-only [ 216.933927][ T4184] EXT4-fs (sda1): Remounting filesystem read-only [ 216.967087][ T4181] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1072: inode has both inline data and extents flags [ 216.980830][ T4181] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1072: couldn't read orphan inode 15 (err -117) [ 216.994016][ T4181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 217.004550][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 217.011871][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 217.021281][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 217.031546][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 217.043929][ T28] audit: type=1400 audit(1793740247.681:314): avc: denied { create } for pid=4171 comm="syz.2.1072" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 217.055208][ T4183] EXT4-fs (sda1): Remounting filesystem read-only [ 217.071812][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 217.090879][ T4187] EXT4-fs (sda1): Remounting filesystem read-only [ 217.095875][ T4175] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 217.098340][ T4187] EXT4-fs (sda1): Remounting filesystem read-only [ 217.112703][ T4189] futex_wake_op: syz.3.1076 tries to shift op by 144; fix this program [ 217.122341][ T28] audit: type=1400 audit(1793740247.711:315): avc: denied { read write open } for pid=4171 comm="syz.2.1072" path="/204/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 217.209575][ T4175] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 217.219669][ T4175] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 217.253020][ T4192] loop0: detected capacity change from 0 to 256 [ 217.260251][ T4192] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.260875][ T289] EXT4-fs (loop2): unmounting filesystem. [ 217.285089][ T4192] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 217.319430][ T4192] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 217.397185][ T4204] loop2: detected capacity change from 0 to 16 [ 218.440292][ T4204] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.456919][ T4201] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 218.534124][ T4213] loop4: detected capacity change from 0 to 256 [ 219.171511][ T4230] loop2: detected capacity change from 0 to 512 [ 219.782517][ T4230] EXT4-fs (loop2): Test dummy encryption mode enabled [ 219.869707][ T4230] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1088: inode has both inline data and extents flags [ 219.883161][ T4230] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1088: couldn't read orphan inode 15 (err -117) [ 219.895578][ T4230] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.201848][ T289] EXT4-fs (loop2): unmounting filesystem. [ 220.221063][ T556] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.324358][ T4245] loop0: detected capacity change from 0 to 256 [ 220.333393][ T4246] futex_wake_op: syz.1.1091 tries to shift op by 144; fix this program [ 220.346048][ T4245] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.377859][ T4245] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 220.389362][ T4245] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 220.899836][ T4259] loop0: detected capacity change from 0 to 256 [ 221.023896][ T4269] EXT4-fs error: 93 callbacks suppressed [ 221.023912][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1101: Detected aborted journal [ 221.041051][ T556] usb 2-1: device not accepting address 16, error -71 [ 221.049091][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1101: Detected aborted journal [ 221.121247][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1101: Detected aborted journal [ 221.132513][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1101: Detected aborted journal [ 221.145665][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1101: Detected aborted journal [ 221.159245][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1101: Detected aborted journal [ 221.191632][ T4272] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1102: Detected aborted journal [ 221.209518][ T4272] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1102: Detected aborted journal [ 221.220975][ T4273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.229693][ T4273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.235650][ T4274] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1103: Detected aborted journal [ 221.249154][ T4274] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1103: Detected aborted journal [ 221.942208][ T4287] EXT4-fs: 93 callbacks suppressed [ 221.942256][ T4287] EXT4-fs (sda1): Remounting filesystem read-only [ 222.009364][ T4287] EXT4-fs (sda1): Remounting filesystem read-only [ 222.108286][ T4274] EXT4-fs (sda1): Remounting filesystem read-only [ 222.134042][ T4276] EXT4-fs (sda1): Remounting filesystem read-only [ 222.174152][ T4287] EXT4-fs (sda1): Remounting filesystem read-only [ 222.241869][ T4294] EXT4-fs (sda1): Remounting filesystem read-only [ 222.254771][ T4294] EXT4-fs (sda1): Remounting filesystem read-only [ 222.273149][ T4295] futex_wake_op: syz.2.1106 tries to shift op by 144; fix this program [ 222.296106][ T280] EXT4-fs (sda1): Remounting filesystem read-only [ 222.309382][ T4296] EXT4-fs (sda1): Remounting filesystem read-only [ 222.321529][ T4297] EXT4-fs (sda1): Remounting filesystem read-only [ 222.966081][ T4322] loop4: detected capacity change from 0 to 256 [ 223.340446][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.350134][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.412605][ T4342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.421250][ T4342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.247390][ T4350] futex_wake_op: syz.1.1124 tries to shift op by 144; fix this program [ 224.345217][ T4362] device syzkaller1 entered promiscuous mode [ 224.733897][ T635] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 224.941027][ T635] usb 3-1: Using ep0 maxpacket: 16 [ 224.947323][ T635] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.958471][ T635] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.971507][ T635] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.978426][ T635] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 224.989010][ T635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.002723][ T635] usb 3-1: config 0 descriptor?? [ 225.007993][ T103] udevd[103]: worker [3993] terminated by signal 7 (Bus error) [ 225.015662][ T103] udevd[103]: worker [3993] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 225.444999][ T635] input: HID 045e:00f9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:00F9.0007/input/input6 [ 225.521107][ T1000] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 225.577168][ T635] microsoft 0003:045E:00F9.0007: input,hidraw0: USB HID v0.00 Joystick [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 225.762860][ T1000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.801163][ T635] usb 3-1: USB disconnect, device number 22 [ 225.810795][ T103] udevd[103]: worker [3984] terminated by signal 7 (Bus error) [ 225.886916][ T1000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.922164][ T103] udevd[103]: worker [3984] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 226.046719][ T103] udevd[103]: worker [3992] terminated by signal 7 (Bus error) [ 226.048278][ T4381] EXT4-fs error: 122 callbacks suppressed [ 226.048292][ T4381] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1133: Detected aborted journal [ 226.060741][ T103] udevd[103]: worker [3992] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 226.071252][ T1000] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.083223][ T4381] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1133: Detected aborted journal [ 226.095582][ T1000] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 226.115150][ T1000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.125365][ T1000] usb 5-1: config 0 descriptor?? [ 226.131459][ T3991] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 226.149690][ T3991] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 226.161470][ T3991] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 226.179683][ T4385] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 226.191198][ T4385] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 226.205098][ T4386] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 226.213257][ T4387] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1134: Detected aborted journal [ 226.228207][ T4386] udevd[4386]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 226.228711][ T4387] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1134: Detected aborted journal [ 226.248877][ T103] udevd[103]: worker [4385] terminated by signal 7 (Bus error) [ 226.250302][ T4389] loop1: detected capacity change from 0 to 256 [ 226.256600][ T103] udevd[103]: worker [4385] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 226.597944][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.604882][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.611800][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.618677][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.625566][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.632461][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.639319][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.646264][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.653168][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.660029][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.666914][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.673815][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.680672][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.687558][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.694537][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.701429][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.708309][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.715202][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.722099][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.728970][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.735851][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.742822][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.749722][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.756664][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.763628][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.770523][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.777542][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.784466][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.791368][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.798249][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.805143][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.812080][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.818981][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.825890][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.832785][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.839658][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.846552][ T635] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 226.854164][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.861122][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.868026][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.875044][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.881962][ T1000] acrux 0003:1A34:0802.0008: unknown main item tag 0x0 [ 226.890704][ T1000] acrux 0003:1A34:0802.0008: hidraw0: USB HID v0.0a Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 226.901801][ T1000] acrux 0003:1A34:0802.0008: no inputs found [ 226.907823][ T1000] acrux 0003:1A34:0802.0008: Failed to enable force feedback support, error: -19 [ 226.984673][ T103] udevd[103]: worker [3985] terminated by signal 7 (Bus error) [ 226.986620][ T1000] usb 5-1: USB disconnect, device number 21 [ 226.992451][ T4370] EXT4-fs: 103 callbacks suppressed [ 226.992463][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.010523][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.023817][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.031608][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.052955][ T635] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 227.061262][ T635] usb 3-1: config 127 has no interface number 0 [ 227.064758][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.068986][ T635] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 227.074076][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.083293][ T635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.090418][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.097628][ T635] usb 3-1: Product: syz [ 227.108120][ T635] usb 3-1: Manufacturer: syz [ 227.113722][ T4370] EXT4-fs (sda1): Remounting filesystem read-only [ 227.117220][ T635] usb 3-1: SerialNumber: syz [ 227.121155][ T4403] EXT4-fs (sda1): Remounting filesystem read-only [ 227.132493][ T4403] EXT4-fs (sda1): Remounting filesystem read-only [ 227.389811][ T4398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.398315][ T4398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.407709][ T635] asix: probe of 3-1:127.57 failed with error -22 [ 227.422515][ T635] usb 3-1: USB disconnect, device number 23 [ 227.427469][ T4420] futex_wake_op: syz.0.1142 tries to shift op by 144; fix this program [ 227.460707][ T4424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.469188][ T4424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.516064][ T4446] FAULT_INJECTION: forcing a failure. [ 228.516064][ T4446] name failslab, interval 1, probability 0, space 0, times 0 [ 228.644261][ T4446] CPU: 1 PID: 4446 Comm: syz.1.1151 Not tainted syzkaller #0 [ 228.651683][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 228.661738][ T4446] Call Trace: [ 228.665014][ T4446] [ 228.667939][ T4446] __dump_stack+0x21/0x24 [ 228.672293][ T4446] dump_stack_lvl+0x110/0x170 [ 228.676962][ T4446] ? __cfi_dump_stack_lvl+0x8/0x8 [ 228.681979][ T4446] ? do_new_mount+0x251/0xb40 [ 228.686654][ T4446] ? x64_sys_call+0x65d/0x9a0 [ 228.691335][ T4446] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.697400][ T4446] dump_stack+0x15/0x24 [ 228.701549][ T4446] should_fail_ex+0x3bf/0x510 [ 228.706231][ T4446] __should_failslab+0xac/0xf0 [ 228.710993][ T4446] should_failslab+0x9/0x20 [ 228.715498][ T4446] slab_pre_alloc_hook+0x30/0x1d0 [ 228.720524][ T4446] kmem_cache_alloc_lru+0x49/0x280 [ 228.725632][ T4446] ? new_inode_pseudo+0x8f/0x1f0 [ 228.730571][ T4446] new_inode_pseudo+0x8f/0x1f0 [ 228.735332][ T4446] new_inode+0x28/0x1e0 [ 228.740102][ T4446] ? binderfs_binder_device_create+0x149/0xa60 [ 228.746271][ T4446] ? kmalloc_trace+0x40/0xb0 [ 228.750866][ T4446] binderfs_binder_device_create+0x15e/0xa60 [ 228.756850][ T4446] binderfs_fill_super+0xabc/0xff0 [ 228.761971][ T4446] ? __cfi_binderfs_fill_super+0x10/0x10 [ 228.767610][ T4446] ? register_shrinker_prepared+0xd7/0x100 [ 228.773427][ T4446] ? sget_fc+0x6e3/0x770 [ 228.777677][ T4446] get_tree_nodev+0xc4/0x170 [ 228.782266][ T4446] ? __cfi_binderfs_fill_super+0x10/0x10 [ 228.787896][ T4446] binderfs_fs_context_get_tree+0x1c/0x20 [ 228.793604][ T4446] vfs_get_tree+0x9a/0x270 [ 228.798041][ T4446] do_new_mount+0x251/0xb40 [ 228.802545][ T4446] ? security_capable+0x99/0xc0 [ 228.807405][ T4446] path_mount+0x640/0xfd0 [ 228.811746][ T4446] __se_sys_mount+0x320/0x390 [ 228.816430][ T4446] ? __x64_sys_mount+0xd0/0xd0 [ 228.821197][ T4446] __x64_sys_mount+0xbf/0xd0 [ 228.825791][ T4446] x64_sys_call+0x65d/0x9a0 [ 228.830298][ T4446] do_syscall_64+0x4c/0xa0 [ 228.834716][ T4446] ? clear_bhb_loop+0x30/0x80 [ 228.839400][ T4446] ? clear_bhb_loop+0x30/0x80 [ 228.844081][ T4446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.849983][ T4446] RIP: 0033:0x7f29d1f9fb19 [ 228.855398][ T4446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.875194][ T4446] RSP: 002b:00007f29d2e72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.883633][ T4446] RAX: ffffffffffffffda RBX: 00007f29d2225fa0 RCX: 00007f29d1f9fb19 [ 228.893009][ T4446] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000 [ 228.900991][ T4446] RBP: 00007f29d2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 228.908970][ T4446] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 228.916945][ T4446] R13: 00007f29d2226038 R14: 00007f29d2225fa0 R15: 00007fff24ecf188 [ 228.924927][ T4446] [ 229.008761][ T4453] futex_wake_op: syz.0.1154 tries to shift op by 144; fix this program [ 229.044328][ T4459] loop0: detected capacity change from 0 to 256 [ 231.084997][ T4502] EXT4-fs error: 118 callbacks suppressed [ 231.085015][ T4502] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1168: Detected aborted journal [ 231.111874][ T4502] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1168: Detected aborted journal [ 231.131933][ T4504] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1169: Detected aborted journal [ 231.152275][ T4504] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1169: Detected aborted journal [ 231.168834][ T4503] futex_wake_op: syz.4.1168 tries to shift op by 144; fix this program [ 231.177865][ T4482] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1164: Detected aborted journal [ 231.206746][ T4502] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1168: Detected aborted journal [ 231.217848][ T4482] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1164: Detected aborted journal [ 231.229131][ T4502] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1168: Detected aborted journal [ 231.266600][ T4507] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1170: Detected aborted journal [ 231.281537][ T4507] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1170: Detected aborted journal [ 231.609252][ T293] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 231.751733][ T4524] FAULT_INJECTION: forcing a failure. [ 231.751733][ T4524] name failslab, interval 1, probability 0, space 0, times 0 [ 231.764483][ T4524] CPU: 1 PID: 4524 Comm: syz.1.1176 Not tainted syzkaller #0 [ 231.771862][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.781900][ T4524] Call Trace: [ 231.785162][ T4524] [ 231.788076][ T4524] __dump_stack+0x21/0x24 [ 231.792390][ T4524] dump_stack_lvl+0x110/0x170 [ 231.797049][ T4524] ? __cfi_dump_stack_lvl+0x8/0x8 [ 231.802052][ T4524] ? __kasan_kmalloc+0x95/0xb0 [ 231.806803][ T4524] dump_stack+0x15/0x24 [ 231.810938][ T4524] should_fail_ex+0x3bf/0x510 [ 231.815598][ T4524] __should_failslab+0xac/0xf0 [ 231.820349][ T4524] should_failslab+0x9/0x20 [ 231.824839][ T4524] kmem_cache_alloc_node+0x42/0x330 [ 231.830471][ T4524] ? alloc_vmap_area+0x68d/0x18c0 [ 231.835498][ T4524] alloc_vmap_area+0x68d/0x18c0 [ 231.840336][ T4524] ? vm_map_ram+0x930/0x930 [ 231.844822][ T4524] ? __kasan_kmalloc+0x95/0xb0 [ 231.849575][ T4524] ? kmalloc_node_trace+0x3d/0xb0 [ 231.854584][ T4524] __get_vm_area_node+0x160/0x360 [ 231.859594][ T4524] __vmalloc_node_range+0x326/0x1440 [ 231.864863][ T4524] ? copy_process+0x5e7/0x3500 [ 231.869617][ T4524] ? dup_task_struct+0x5a/0x900 [ 231.874448][ T4524] ? kasan_save_alloc_info+0x1f/0x30 [ 231.879805][ T4524] ? __kasan_slab_alloc+0x72/0x80 [ 231.884821][ T4524] ? __cfi___vmalloc_node_range+0x10/0x10 [ 231.890522][ T4524] ? __slab_alloc+0x6b/0xa0 [ 231.895013][ T4524] ? arch_dup_task_struct+0x42/0xc0 [ 231.900202][ T4524] ? memcpy+0x56/0x70 [ 231.904164][ T4524] dup_task_struct+0x3ca/0x900 [ 231.908907][ T4524] ? copy_process+0x5e7/0x3500 [ 231.913658][ T4524] copy_process+0x5e7/0x3500 [ 231.918237][ T4524] ? __cfi_futex_wake+0x10/0x10 [ 231.923069][ T4524] ? idle_dummy+0x10/0x10 [ 231.927384][ T4524] kernel_clone+0x22f/0x7f0 [ 231.931875][ T4524] ? __cfi_kernel_clone+0x10/0x10 [ 231.936887][ T4524] ? __kasan_check_write+0x14/0x20 [ 231.941985][ T4524] ? mutex_unlock+0x8f/0x230 [ 231.946557][ T4524] __x64_sys_clone+0x193/0x200 [ 231.951308][ T4524] ? __cfi___x64_sys_clone+0x10/0x10 [ 231.956580][ T4524] ? __kasan_check_write+0x14/0x20 [ 231.961672][ T4524] ? fpregs_restore_userregs+0x128/0x260 [ 231.967288][ T4524] ? switch_fpu_return+0xe/0x10 [ 231.972120][ T4524] x64_sys_call+0x990/0x9a0 [ 231.976609][ T4524] do_syscall_64+0x4c/0xa0 [ 231.981008][ T4524] ? clear_bhb_loop+0x30/0x80 [ 231.985669][ T4524] ? clear_bhb_loop+0x30/0x80 [ 231.990328][ T4524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.996203][ T4524] RIP: 0033:0x7f29d1f9fb19 [ 232.000597][ T4524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.020184][ T4524] RSP: 002b:00007f29d2e71fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 232.028578][ T4524] RAX: ffffffffffffffda RBX: 00007f29d2225fa0 RCX: 00007f29d1f9fb19 [ 232.036529][ T4524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.044480][ T4524] RBP: 00007f29d2037b70 R08: 0000000000000000 R09: 0000000000000000 [ 232.052431][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.060383][ T4524] R13: 00007f29d2226038 R14: 00007f29d2225fa0 R15: 00007fff24ecf188 [ 232.068338][ T4524] [ 232.071420][ T293] usb 3-1: device descriptor read/64, error -71 [ 232.081487][ T4523] EXT4-fs: 99 callbacks suppressed [ 232.081500][ T4523] EXT4-fs (sda1): Remounting filesystem read-only [ 232.093874][ T4523] EXT4-fs (sda1): Remounting filesystem read-only [ 232.102878][ T4527] EXT4-fs (sda1): Remounting filesystem read-only [ 232.106660][ T4523] EXT4-fs (sda1): Remounting filesystem read-only [ 232.129142][ T4527] EXT4-fs (sda1): Remounting filesystem read-only [ 232.135641][ T4527] EXT4-fs (sda1): Remounting filesystem read-only [ 232.141890][ T4523] EXT4-fs (sda1): Remounting filesystem read-only [ 232.157797][ T4527] EXT4-fs (sda1): Remounting filesystem read-only [ 232.180970][ T4527] EXT4-fs (sda1): Remounting filesystem read-only [ 232.188399][ T4530] EXT4-fs (sda1): Remounting filesystem read-only [ 233.195195][ T293] usb 3-1: device descriptor read/64, error -71 [ 233.364926][ T4541] futex_wake_op: syz.3.1181 tries to shift op by 144; fix this program [ 233.471022][ T293] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 233.641031][ T293] usb 3-1: device descriptor read/64, error -71 [ 233.931037][ T293] usb 3-1: device descriptor read/64, error -71 [ 234.051093][ T293] usb usb3-port1: attempt power cycle [ 234.285281][ T4554] loop2: detected capacity change from 0 to 256 [ 236.265648][ T4569] EXT4-fs error: 76 callbacks suppressed [ 236.265675][ T4569] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1191: Detected aborted journal [ 236.407987][ T4576] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1193: Detected aborted journal [ 236.433935][ T4577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1192: Detected aborted journal [ 236.446191][ T4576] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1193: Detected aborted journal [ 236.462204][ T4577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1192: Detected aborted journal [ 236.465846][ T4580] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1195: Detected aborted journal [ 236.473693][ T4577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1192: Detected aborted journal [ 236.495899][ T4581] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1194: Detected aborted journal [ 236.496951][ T4576] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1193: Detected aborted journal [ 236.520425][ T4581] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1194: Detected aborted journal [ 236.561086][ T4578] FAULT_INJECTION: forcing a failure. [ 236.561086][ T4578] name failslab, interval 1, probability 0, space 0, times 0 [ 236.603468][ T4578] CPU: 0 PID: 4578 Comm: syz.3.1193 Not tainted syzkaller #0 [ 236.611049][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.621101][ T4578] Call Trace: [ 236.624380][ T4578] [ 236.627307][ T4578] __dump_stack+0x21/0x24 [ 236.631636][ T4578] dump_stack_lvl+0x110/0x170 [ 236.636311][ T4578] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.641338][ T4578] dump_stack+0x15/0x24 [ 236.645493][ T4578] should_fail_ex+0x3bf/0x510 [ 236.650165][ T4578] __should_failslab+0xac/0xf0 [ 236.654937][ T4578] should_failslab+0x9/0x20 [ 236.659445][ T4578] __kmem_cache_alloc_node+0x3d/0x2d0 [ 236.665869][ T4578] ? sk_prot_alloc+0xed/0x320 [ 236.670571][ T4578] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 236.676640][ T4578] ? sk_prot_alloc+0xed/0x320 [ 236.681373][ T4578] __kmalloc+0xa4/0x1e0 [ 236.685534][ T4578] sk_prot_alloc+0xed/0x320 [ 236.690053][ T4578] ? _raw_read_lock_irqsave+0x94/0xf0 [ 236.695430][ T4578] sk_alloc+0x3b/0x460 [ 236.699505][ T4578] netlink_create+0x3c2/0x640 [ 236.704186][ T4578] ? __cfi_nfnetlink_bind+0x10/0x10 [ 236.709386][ T4578] ? __cfi_nfnetlink_unbind+0x10/0x10 [ 236.714763][ T4578] __sock_create+0x39e/0x7c0 [ 236.720006][ T4578] __sys_socket+0xcd/0x1a0 [ 236.724706][ T4578] __x64_sys_socket+0x7a/0x90 [ 236.729398][ T4578] x64_sys_call+0x449/0x9a0 [ 236.733914][ T4578] do_syscall_64+0x4c/0xa0 [ 236.738341][ T4578] ? clear_bhb_loop+0x30/0x80 [ 236.743029][ T4578] ? clear_bhb_loop+0x30/0x80 [ 236.747717][ T4578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.753618][ T4578] RIP: 0033:0x7f623eb9fb19 [ 236.758034][ T4578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.777730][ T4578] RSP: 002b:00007f623f9d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 236.786150][ T4578] RAX: ffffffffffffffda RBX: 00007f623ee25fa0 RCX: 00007f623eb9fb19 [ 236.794130][ T4578] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 236.802108][ T4578] RBP: 00007f623ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 236.810081][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.818054][ T4578] R13: 00007f623ee26038 R14: 00007f623ee25fa0 R15: 00007ffd67e32508 [ 236.826033][ T4578] [ 237.261050][ T635] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 237.295964][ T4577] EXT4-fs: 78 callbacks suppressed [ 237.295980][ T4577] EXT4-fs (sda1): Remounting filesystem read-only [ 237.307685][ T4577] EXT4-fs (sda1): Remounting filesystem read-only [ 237.362587][ T4580] EXT4-fs (sda1): Remounting filesystem read-only [ 237.383348][ T4599] EXT4-fs (sda1): Remounting filesystem read-only [ 237.401125][ T4577] EXT4-fs (sda1): Remounting filesystem read-only [ 237.402150][ T4599] EXT4-fs (sda1): Remounting filesystem read-only [ 237.414114][ T4577] EXT4-fs (sda1): Remounting filesystem read-only [ 237.516017][ T635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.534301][ T635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.544279][ T635] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 237.553360][ T635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.561951][ T635] usb 4-1: config 0 descriptor?? [ 237.639404][ T4599] EXT4-fs (sda1): Remounting filesystem read-only [ 237.649382][ T4599] EXT4-fs (sda1): Remounting filesystem read-only [ 237.657205][ T4599] EXT4-fs (sda1): Remounting filesystem read-only [ 237.944260][ T4603] loop2: detected capacity change from 0 to 512 [ 237.955010][ T4603] EXT4-fs (loop2): Test dummy encryption mode enabled [ 238.133407][ T4603] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1199: inode has both inline data and extents flags [ 238.147463][ T4603] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1199: couldn't read orphan inode 15 (err -117) [ 238.160348][ T4603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.210202][ T635] savu 0003:1E7D:2D5A.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 238.413517][ T4607] binder_alloc: binder_alloc_mmap_handler: 4606 200000ffd000-200001000000 already mapped failed -16 [ 238.435351][ T4608] udevd[4608]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 238.449863][ T289] EXT4-fs (loop2): unmounting filesystem. [ 238.476181][ T635] usb 4-1: USB disconnect, device number 18 [ 238.492382][ T635] ================================================================== [ 238.500455][ T635] BUG: KASAN: use-after-free in roccat_disconnect+0x22d/0x240 [ 238.507920][ T635] Read of size 4 at addr ffff888132290008 by task kworker/1:5/635 [ 238.515807][ T635] [ 238.518124][ T635] CPU: 1 PID: 635 Comm: kworker/1:5 Not tainted syzkaller #0 [ 238.525491][ T635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.535546][ T635] Workqueue: usb_hub_wq hub_event [ 238.540585][ T635] Call Trace: [ 238.543858][ T635] [ 238.546791][ T635] __dump_stack+0x21/0x24 [ 238.551121][ T635] dump_stack_lvl+0x110/0x170 [ 238.555797][ T635] ? __cfi_dump_stack_lvl+0x8/0x8 [ 238.560826][ T635] ? __cfi__printk+0x8/0x8 [ 238.565251][ T635] ? kfree_const+0x39/0x40 [ 238.569669][ T635] ? roccat_disconnect+0x22d/0x240 [ 238.574780][ T635] print_address_description+0x71/0x200 [ 238.580336][ T635] print_report+0x4a/0x60 [ 238.584671][ T635] kasan_report+0x122/0x150 [ 238.589184][ T635] ? roccat_disconnect+0x22d/0x240 [ 238.594304][ T635] __asan_report_load4_noabort+0x14/0x20 [ 238.599934][ T635] roccat_disconnect+0x22d/0x240 [ 238.604876][ T635] savu_remove+0xec/0x170 [ 238.609219][ T635] ? __cfi_savu_remove+0x10/0x10 [ 238.614165][ T635] hid_device_remove+0x292/0x3c0 [ 238.619113][ T635] ? __cfi_hid_device_remove+0x10/0x10 [ 238.624571][ T635] device_release_driver_internal+0x486/0x7e0 [ 238.630649][ T635] device_release_driver+0x19/0x20 [ 238.635768][ T635] bus_remove_device+0x2f0/0x350 [ 238.640719][ T635] device_del+0x63c/0xe50 [ 238.645060][ T635] ? __cfi_device_del+0x10/0x10 [ 238.649916][ T635] ? __kasan_check_write+0x14/0x20 [ 238.655035][ T635] ? _raw_spin_lock_irq+0x95/0xf0 [ 238.660067][ T635] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 238.665619][ T635] hid_destroy_device+0x6a/0x110 [ 238.670567][ T635] usbhid_disconnect+0x9f/0xc0 [ 238.675341][ T635] usb_unbind_interface+0x223/0x8b0 [ 238.680555][ T635] ? kernfs_remove_by_name_ns+0x120/0x160 [ 238.686284][ T635] ? __cfi_usb_unbind_interface+0x10/0x10 [ 238.692007][ T635] device_release_driver_internal+0x4e4/0x7e0 [ 238.698084][ T635] device_release_driver+0x19/0x20 [ 238.703210][ T635] bus_remove_device+0x2f0/0x350 [ 238.708157][ T635] device_del+0x63c/0xe50 [ 238.712502][ T635] ? __cfi_device_del+0x10/0x10 [ 238.717397][ T635] ? device_unregister+0x27/0x40 [ 238.722341][ T635] usb_disable_device+0x3a8/0x750 [ 238.727379][ T635] usb_disconnect+0x32d/0x880 [ 238.732064][ T635] hub_event+0x1a66/0x4310 [ 238.736494][ T635] ? kthread_data+0x50/0xc0 [ 238.741002][ T635] ? __cfi_hub_event+0x10/0x10 [ 238.745768][ T635] ? __schedule+0xcbb/0x1700 [ 238.750360][ T635] process_one_work+0x717/0xc30 [ 238.755210][ T635] worker_thread+0xa4d/0x11d0 [ 238.759906][ T635] kthread+0x281/0x320 [ 238.763972][ T635] ? __cfi_worker_thread+0x10/0x10 [ 238.769087][ T635] ? __cfi_kthread+0x10/0x10 [ 238.773680][ T635] ret_from_fork+0x1f/0x30 [ 238.778102][ T635] [ 238.781116][ T635] [ 238.783436][ T635] Allocated by task 635: [ 238.787673][ T635] kasan_set_track+0x4b/0x70 [ 238.792267][ T635] kasan_save_alloc_info+0x1f/0x30 [ 238.797384][ T635] __kasan_kmalloc+0x95/0xb0 [ 238.801979][ T635] kmalloc_trace+0x40/0xb0 [ 238.806392][ T635] roccat_connect+0x5c/0x4b0 [ 238.810983][ T635] savu_probe+0x1ba/0x360 [ 238.815313][ T635] hid_device_probe+0x273/0x410 [ 238.820164][ T635] really_probe+0x2d7/0x9a0 [ 238.824676][ T635] __driver_probe_device+0x193/0x270 [ 238.829963][ T635] driver_probe_device+0x54/0x3e0 [ 238.834990][ T635] __device_attach_driver+0x2e9/0x4a0 [ 238.840368][ T635] bus_for_each_drv+0x192/0x220 [ 238.845218][ T635] __device_attach+0x2b0/0x420 [ 238.849985][ T635] device_initial_probe+0x1a/0x20 [ 238.855017][ T635] bus_probe_device+0xc0/0x1f0 [ 238.859785][ T635] device_add+0xb0b/0xec0 [ 238.864119][ T635] hid_add_device+0x3b8/0x580 [ 238.868797][ T635] usbhid_probe+0xc12/0xff0 [ 238.873305][ T635] usb_probe_interface+0x621/0xb30 [ 238.878421][ T635] really_probe+0x2d7/0x9a0 [ 238.882929][ T635] __driver_probe_device+0x193/0x270 [ 238.888217][ T635] driver_probe_device+0x54/0x3e0 [ 238.893251][ T635] __device_attach_driver+0x2e9/0x4a0 [ 238.898623][ T635] bus_for_each_drv+0x192/0x220 [ 238.903472][ T635] __device_attach+0x2b0/0x420 [ 238.908235][ T635] device_initial_probe+0x1a/0x20 [ 238.913261][ T635] bus_probe_device+0xc0/0x1f0 [ 238.918024][ T635] device_add+0xb0b/0xec0 [ 238.922353][ T635] usb_set_configuration+0x1a01/0x1f70 [ 238.927816][ T635] usb_generic_driver_probe+0x91/0x150 [ 238.933276][ T635] usb_probe_device+0x154/0x260 [ 238.938130][ T635] really_probe+0x2d7/0x9a0 [ 238.942649][ T635] __driver_probe_device+0x193/0x270 [ 238.947938][ T635] driver_probe_device+0x54/0x3e0 [ 238.952969][ T635] __device_attach_driver+0x2e9/0x4a0 [ 238.958349][ T635] bus_for_each_drv+0x192/0x220 [ 238.963195][ T635] __device_attach+0x2b0/0x420 [ 238.967965][ T635] device_initial_probe+0x1a/0x20 [ 238.972991][ T635] bus_probe_device+0xc0/0x1f0 [ 238.977751][ T635] device_add+0xb0b/0xec0 [ 238.982079][ T635] usb_new_device+0x9f4/0x1500 [ 238.986931][ T635] hub_event+0x27fb/0x4310 [ 238.991354][ T635] process_one_work+0x717/0xc30 [ 238.996220][ T635] worker_thread+0xa4d/0x11d0 [ 239.000893][ T635] kthread+0x281/0x320 [ 239.004960][ T635] ret_from_fork+0x1f/0x30 [ 239.009384][ T635] [ 239.011712][ T635] Freed by task 4596: [ 239.015684][ T635] kasan_set_track+0x4b/0x70 [ 239.020285][ T635] kasan_save_free_info+0x2b/0x40 [ 239.025309][ T635] ____kasan_slab_free+0x132/0x180 [ 239.030426][ T635] __kasan_slab_free+0x11/0x20 [ 239.035196][ T635] slab_free_freelist_hook+0xc2/0x190 [ 239.040575][ T635] __kmem_cache_free+0xb7/0x1b0 [ 239.045435][ T635] kfree+0x6f/0xf0 [ 239.049154][ T635] roccat_release+0x2bc/0x380 [ 239.053832][ T635] __fput+0x1fd/0x8f0 [ 239.057816][ T635] ____fput+0x15/0x20 [ 239.061805][ T635] task_work_run+0x1e1/0x250 [ 239.066399][ T635] exit_to_user_mode_loop+0x9b/0xb0 [ 239.071601][ T635] exit_to_user_mode_prepare+0x87/0xd0 [ 239.077064][ T635] syscall_exit_to_user_mode+0x1a/0x30 [ 239.082529][ T635] do_syscall_64+0x58/0xa0 [ 239.086944][ T635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.092841][ T635] [ 239.095155][ T635] The buggy address belongs to the object at ffff888132290000 [ 239.095155][ T635] which belongs to the cache kmalloc-512 of size 512 [ 239.109204][ T635] The buggy address is located 8 bytes inside of [ 239.109204][ T635] 512-byte region [ffff888132290000, ffff888132290200) [ 239.122309][ T635] [ 239.124629][ T635] The buggy address belongs to the physical page: [ 239.131030][ T635] page:ffffea0004c8a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x132290 [ 239.141299][ T635] head:ffffea0004c8a400 order:2 compound_mapcount:0 compound_pincount:0 [ 239.149628][ T635] flags: 0x4000000000010200(slab|head|zone=1) [ 239.155818][ T635] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 239.164402][ T635] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 239.172974][ T635] page dumped because: kasan: bad access detected [ 239.179390][ T635] page_owner tracks the page as allocated [ 239.185095][ T635] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 292, tgid 292 (syz-executor), ts 20182841043, free_ts 0 [ 239.205414][ T635] post_alloc_hook+0x1f5/0x210 [ 239.210191][ T635] prep_new_page+0x1c/0x110 [ 239.214699][ T635] get_page_from_freelist+0x2ca9/0x2d20 [ 239.220253][ T635] __alloc_pages+0x1fa/0x610 [ 239.224952][ T635] alloc_slab_page+0x6e/0xf0 [ 239.229547][ T635] new_slab+0x98/0x3e0 [ 239.233617][ T635] ___slab_alloc+0x70f/0xb70 [ 239.238231][ T635] __slab_alloc+0x5e/0xa0 [ 239.242568][ T635] __kmem_cache_alloc_node+0x204/0x2d0 [ 239.248029][ T635] __kmalloc+0xa4/0x1e0 [ 239.252188][ T635] __register_sysctl_table+0x947/0xe50 [ 239.257653][ T635] register_net_sysctl+0x23f/0x250 [ 239.262775][ T635] __addrconf_sysctl_register+0x277/0x3e0 [ 239.268510][ T635] addrconf_sysctl_register+0x147/0x1a0 [ 239.274069][ T635] ipv6_add_dev+0xbf5/0x1130 [ 239.278666][ T635] addrconf_notify+0x6d0/0xe30 [ 239.283441][ T635] page_owner free stack trace missing [ 239.288810][ T635] [ 239.291129][ T635] Memory state around the buggy address: [ 239.296752][ T635] ffff88813228ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 239.304807][ T635] ffff88813228ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 239.312863][ T635] >ffff888132290000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.320915][ T635] ^ [ 239.325240][ T635] ffff888132290080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.333295][ T635] ffff888132290100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 239.341346][ T635] ================================================================== Nov 3 21:11:09 [ 239.358087][ T635] Disabling lock debugging due to kernel taint syzkaller kern.alert kernel: [ 239.179390][ T635] page_owner tracks the page as allocated Nov 3 21:11:09 syzkaller kern.alert kernel: [ 239.185095][ T635] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 292, tgid 292 (syz-executor), ts 20182841043, free_ts Nov 3 21:11:09 syzkaller kern.alert kernel: [ 239.283441][ T635] page_owner free stack trace missing [ 242.375141][ T103] EXT4-fs error: 74 callbacks suppressed [ 242.375160][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 242.397756][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 242.409350][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 242.420885][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 242.432626][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 242.444353][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0