last executing test programs: 51.528042095s ago: executing program 1 (id=105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x1, 0x40, 0x4, 0x0, {{0x8, 0x4, 0x1, 0x10, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @multicast1, {[@ssrr={0x89, 0x0, 0xe5, [@local, @local]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000030600000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005002c0012800b00010062726964676500001c0002800c00220006000000000000000c00210001800000004bc25c"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711203000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)={0x3e8, &(0x7f0000000000)=[{0x2000, 0x5}]}) 49.48286574s ago: executing program 1 (id=124): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000500)=0x800, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x8, r2, &(0x7f0000000040)=0x6, 0x1000000, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet(0x2, 0x1, 0x0) getdents64(r2, &(0x7f0000000140)=""/115, 0x73) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0xffffdf40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) listen(r4, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$bind(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x26, 0x1, 0x0, 0xfffff030}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f00000000c0)) 49.346563977s ago: executing program 1 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7f) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x64) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00', 0xa}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) tee(r4, r0, 0x800, 0x8dd502df57d5505f) socket$inet6(0xa, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 49.303001879s ago: executing program 1 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) syz_io_uring_setup(0x3af6, &(0x7f0000000440)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102000000000000000002"], 0x1c}}, 0x0) (fail_nth: 2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$TCSBRKP(r4, 0x5425, 0x4) 48.078531892s ago: executing program 1 (id=133): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000100)=ANY=[@ANYBLOB="1b08aa568f768f", @ANYRESDEC, @ANYBLOB="2c756e695f786c6174653d302c666c7573682c636f6465706167653d3933322c73686f06746e616d653d77696e39352c696f636861727365743d63703836312c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c756e691f786c6174653d302c757466383d302c726f6469722c757466383d302c00"], 0x7f, 0x2b1, &(0x7f00000015c0)="$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") creat(&(0x7f0000000300)='./file1\x00', 0x1) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xc2000c89) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000002ac0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x81, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xbd, [@ms_header={0x7, 0x24, 0x1, 0xa, 0x7}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x60, 0x8, {0x4}}}]}}}}}]}}, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 47.563003348s ago: executing program 1 (id=134): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000500), 0x1, 0x56d, &(0x7f0000001580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) 47.447750304s ago: executing program 32 (id=134): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000500), 0x1, 0x56d, &(0x7f0000001580)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adMubTPz+cBp3zfnJO/75JznzXtyEhJA3xrO/hQiXoyIr5KIoxGR5OsGI185vLzd4uObE9mSxNLSx38mje2yevOxmvc7nFdeiIhfv4g4XVjfbm1+YbpcqaSzeX2kPnNtpDa/cObKTHkqnUqvjo2Pn3tzfOydt9/qWqyvXfz724/uv3/uy5OL3/z08NjdJM7HkXzd2jiewa21leEYzp+TYpx/asPR5X/daLMnJHvdAbZlIM/zYmRjwNEYyLMe+O/7PCKWgD6VyH/oU815QPPcvkvnwc+NR+8tnwCtj39w+b2RONA4Nzq0mDxxZpSd7w51of2sjZ//uHc3W6J770MAbOrW7Yg4Ozi4fvxL8vFv+852sM3TbRj/YPfcz+Y/r7ea/xRW5j/RYv5zuEXubsfm+V942IVm2srmf++2nP+uXLQaGshr/2vM+YrJ5SuVNBvb/h8Rp6K4P6uPbtDGucUHS+3WrZ3/ZUvWfnMumPfj4eD+J+8zWa6XnyXmtR7djnip5fw3Wdn/SYv9nz0fFzts40R675V26zaPf2ct/RDxasv9v3pFK9n4+uRI43gYaR4V6/1158Rv7drf6/iz/X9o4/iHkrXXa2tbb+P7A/+k7dY9EX90fvzvSz5plPflt90o1+uzoxH7kg/X3z62et9mvbl9Fv+pkxuPf6vH/y8rj3MwIj7tMP47x398+UAn8e/R/p/c0v7feuHBB5991679zsa/NxqlU/ktnYx/m/SrGNs+mgEAAAAAAKB3FSLiSCSF0kq5UCiVlj/fcTwOFSrVWv305erc1clofFd2KIqF5pXuo2s+DzGafx62WR97qj4eEcci4uuBg416aaJamdzr4AEAAAAAAAAAAAAAAAAAAKBHHG7z/f/M7wN73Ttgx/nJb+hfm+b/yq80JTveF2B3ef2H/iX/oX9tIf/372Q/gN3n9R/6l/yH/iX/oX/Jf+hf8h8AAAAAAAAAAAAAAAAAAAAAAAAAAAC66uKFC9mytPj45kRWn7w+PzddvX5mMq1Nl2bmJkoT1dlrpalqdaqSliaqM5s9XqVavTY6FnM3RupprT5Sm1+4NFOdu1q/dGWmPJVeSou7EhUAAAAAAAAAAAAAAAAAAAA8X2rzC9PlSiWdVeiZQhI90Y0OC4O90Q2FLhf2emQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFX/BgAA//+GvjcQ") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) 11.266092134s ago: executing program 5 (id=505): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84"], 0x84}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x8dff, 0x2c}, 0x44004) 8.672150757s ago: executing program 5 (id=516): syz_clone(0x2000000, &(0x7f0000000640), 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noload}]}, 0x14, 0x539, &(0x7f0000000500)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (fail_nth: 1) 8.60630384s ago: executing program 5 (id=517): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0x1, 0x548, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) link(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 8.573672602s ago: executing program 4 (id=520): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 7.225951451s ago: executing program 4 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 7.010290422s ago: executing program 4 (id=526): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000ac0)={'sit0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0xfffff004, 0x1, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 6.735344646s ago: executing program 3 (id=528): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee00}}, {@smackfstransmute}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '!+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsdef}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f0000000200)="4e54eb1c14d518b08b2b85b3a4906a3f0b8f50") r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x121202, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 6.734271726s ago: executing program 4 (id=529): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x40000, 0x1) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x20002, 0xbc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000004c0)={@mcast2, @mcast2, @mcast2, 0x40003, 0x6, 0x2005, 0x100, 0xffffffffffffefff, 0x415800c2}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) io_uring_setup(0x6430, 0x0) pipe(&(0x7f0000000040)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xd) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 6.628065601s ago: executing program 5 (id=531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000900"/20, @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/28], 0x50) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3e, &(0x7f0000000100)=0x3915, 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xca39, 0x7, 0xa, 0xffff, 0x71, "00000000e07000", 0x80000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004a5c13e1244de9cb4a792ca43833600000000b70400000800000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) syz_open_dev$vcsu(&(0x7f0000000040), 0x8224, 0x80000) 6.397304733s ago: executing program 0 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000080), 0x5005) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x2000000000000308, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1cbb}, 0x94) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000180)={0xced, 0x7, 0x4, 0x30, 0x200, 0x5}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r5, r5, 0x0, 0x1) creat(0x0, 0x1ed) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 2.231372316s ago: executing program 3 (id=539): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000018c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) r4 = dup(r2) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08f04600002400640000001190780000000000000000079b22b89f8c7c292f0c907801000000"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r7, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x23cb, &(0x7f0000000480)={0x0, 0xfb37, 0x2, 0xffffffff, 0x68}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000000c0601020000000000000000030900020073797a322b2cc80d898a0a0000000005000100070000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a32000000000900000073797a32000000000521c5d6942d30f3ef1af1a335ad3da579b8a41fa47aa722a79d38df8e4520f7b185e30d12b35e50995e5059c1b9b7e6e132c19210d3effe391ef3a86321728ad1c40fbe9073c227fd"], 0x68}, 0x1, 0x0, 0x0, 0x890}, 0xc042) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3a, &(0x7f0000001a00), 0x0, 0xfffffda6, 0x10, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xe, 0x7fff7ffc}]}) rt_sigsuspend(0xfffffffffffffffc, 0x8) 2.230912766s ago: executing program 5 (id=540): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 2.209911707s ago: executing program 5 (id=541): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d7374726963742c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c726f6469722c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d77696e39352c6572726f72733d72656d6f756e742d726f2c636f6465706167653d3836332c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c0062d6fd2a89e2aca5ccf6f29530d9b6c21d6649d162c50ed9b7138bdcd549ab6b69d0559b7227a5cb9711a3f072f63f72ac3620d96b0b8bd39edf6868223732981b1004a8139d5c768e33f8fa65cf12d619a373d748bdeb144ce2224f19fc053dc7075d53fc0d22500c479b9dbd94035c9f2dcfc6731caeb45f63c87dff51a54ed7fb05d253390e84c7f6699a268861ff1cdbc08954624090b95d9d6059f3c973acef3482c102f1ba79f3d0e2a7391f5daef89a118259c981cc5b93e835b06322885476c91fc39c56aa497b"], 0x1, 0x371, &(0x7f0000002980)="$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") r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009"], 0x0) r1 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101020825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908004006030825018203f30600"/168], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) 1.198009659s ago: executing program 0 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130702000000fc49f87691b1007f69dbdf00bb20010000000000000000000000ed8b014e2000010021060200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000fc32000000fe80000000000000000000000000001a000000000000000000000000000000000c00000000000000080000000000000000000000000000000000000000000000000000000000000043070000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd70000035000002000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000217d66d38547aa140db8a200000000c538c7cb7a1c00040002"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x39}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040004) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r5 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r5, 0x0, 0x2, 0x1f, &(0x7f0000000000)={[0x9]}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev(r6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000400)="63d9e724d17243994392608dadc0c06f8d59d3faeb728bad9a9b93991d872ef6558296dfe871453e1b5830ea8d5c98b3d169df63601a274ae21b854d9f2704288c41a5ebd05db1d9bf2973734fe2e0ab97de56474a9b58a8062506e39624018beb22a84cae7fa4dff4001b3559536ea1d781cd9dcb1ff227", 0x78}, {0x0}], 0x3, 0xffff, 0x4) pipe2$watch_queue(0x0, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r7 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x400) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x5607, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5c4, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x1f}, {0x48, 0x0, 0x0, 0x40}, {0x6, 0x1, 0x0, 0x3}]}, 0x10) 1.197409639s ago: executing program 4 (id=544): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f00000006c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@dots}, {@nodots}, {@fat=@gid}, {@fat=@time_offset={'time_offset', 0x3d, 0x1e5}}, {@fat=@time_offset={'time_offset', 0x3d, 0xa8}}, {@fat=@sys_immutable}, {@fat=@showexec}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x8c) 1.197089569s ago: executing program 3 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r2, @ANYRESOCT=r2, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r3, &(0x7f0000001600)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, 0x0, 0x0) 1.000356819s ago: executing program 3 (id=546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x90, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x2000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 910.136434ms ago: executing program 4 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '', [{0x20, '-+\xed'}], 0xa, "5292b5272c5825e71b28c934f0374fa7ea3c6b229cd1bc8cbaa170d894c451ee34968e448b6a0922a3601c6dcb07a70a550f25ab51"}, 0x3d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f0000ab7000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000569000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x20000}, 0x0, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) pread64(r0, &(0x7f0000000380)=""/159, 0x9f, 0x101) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000555000/0x400000)=nil) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 852.097697ms ago: executing program 3 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 815.800988ms ago: executing program 3 (id=549): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x7fff) accept4$inet6(r2, 0x0, 0x0, 0x800) shutdown(r2, 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2000000000000002, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x8000501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x16}]) r8 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000100)={0x20, 0x8, 0x4, "172ab212"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'bridge_slave_0\x00', 0x3}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1c8) quotactl_fd$Q_SYNC(r9, 0xffffffff80000100, 0x0, 0x0) 567.964491ms ago: executing program 0 (id=553): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x2001) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700103400004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 469.845236ms ago: executing program 0 (id=557): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c6500007466383d302c00ef7cf9c9e427ab131e48bcb8e8584feb067a2a04bfb53d8acd1a7464c88ceadeb81c1a0a30069011756aa4b047305d230985f1517f13617faa8a8ef798318c0f939dfef1d31c5b266caf9084e4e7cfde9ba9b1007b9c8f019de569c2c65df0fb1106c53f5ed1d67eb004830e465f1da48dfeca72541be2cfc1ae0fd7dd06a1119074aa25561765f678fa139276a5e1f014a4d913ed7e95e6f8e08e70f545dcb1e22102f460b9a944604469f45c4a950919a8cc48f0c9f09c972b639d01e1da6fbde3753f82286b3a0f3157d03502f3cad14f97d803a912d36677e0c9d9bd34983a71d5f5eeac6f1e3c03065350d8b41aef668369d0c2c082e9"], 0x1, 0x373, &(0x7f00000006c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000006840)=@vmx={0x2, 0x0, 0x2080, {0xa000, 0x3000, {0x1}, 0x1}, {"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", "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"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)="0f", 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x0, 0xfffb, 0x5}, 0x20) fsmount(r4, 0x0, 0x20) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r10, 0x0, 0x88) 384.157451ms ago: executing program 2 (id=560): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000100), 0x65, 0x101282) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x8001) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) (async, rerun: 64) syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2f}, @fragment={0x2c}]}}}}}}}, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x28) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}}, 0x68}}, 0x0) (async) madvise(&(0x7f0000a29000/0x2000)=nil, 0x2000, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) 315.678534ms ago: executing program 2 (id=561): r0 = socket(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x6, @local, 0x80000001}}, 0x0, 0x0, 0x1c, 0x0, "dd3bab831562eb7e9c5d43e92e59e1fb381dfee35b8b3cd31846c3df2566a50ed8875eb00a52071640310bdd6d5b97474f1c218421b0f5975b6eca04794f3c20d8371966e753ef15c3fea6d0aa3df807"}, 0xd8) mmap(&(0x7f0000373000/0x1000)=nil, 0x1000, 0xb635773f05ebbeeb, 0x8131, 0xffffffffffffffff, 0x8e31a000) 315.306444ms ago: executing program 2 (id=562): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 296.864845ms ago: executing program 2 (id=563): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) 265.106347ms ago: executing program 2 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="8000372409c910ce", 0x8, 0x40004800, &(0x7f0000000040)={0xa, 0x4e24, 0x10, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x4c, 0x31, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe02}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d64ab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3000000"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a8018"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xb, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3fb, 0x10ddc054ea75fd5, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4015}, 0x4040810) 214.362829ms ago: executing program 0 (id=565): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @multicast1}}}}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000002100)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x87f}, 0x1c) 198.13786ms ago: executing program 2 (id=566): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023883d90836f60a29665157023142f3f32404019efc51f7010301092224000101cec0150904bb0109050d0320000c003200"/66], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x8, &(0x7f0000000000)=@string={0x8, 0x3, "a43185cdb18e"}}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x4, [{0x0, 0x4}, {0xa, 0x1}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x62}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x4000}, 0x0) syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x5, 0x8]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) r2 = creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x30}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f8f800001e0106"], 0x154}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x10000}) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x2, 0x2, 0x2203, 0x401}) socket(0x1e, 0x1, 0x7fffffff) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(r2, &(0x7f0000006b40)) 87.798416ms ago: executing program 0 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) 0s ago: executing program 33 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) kernel console output (not intermixed with test programs): b 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.147395][ T287] EXT4-fs (loop2): unmounting filesystem. [ 30.193566][ T472] mmap: syz.3.43 (472) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.228823][ T473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 30.322813][ T467] loop4: detected capacity change from 0 to 40427 [ 30.342448][ T467] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 30.354029][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 30.360441][ T312] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.362336][ T467] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 30.384570][ T312] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.404030][ T312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.406959][ T467] F2FS-fs (loop4): invalid crc value [ 30.416447][ T467] F2FS-fs (loop4): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 30.422519][ T312] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 30.441450][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.450315][ T467] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.450824][ T312] usb 1-1: config 0 descriptor?? [ 30.500721][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 30.500756][ T28] audit: type=1400 audit(1777119792.089:181): avc: denied { setopt } for pid=475 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.529244][ T28] audit: type=1400 audit(1777119792.089:182): avc: denied { write } for pid=475 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.548788][ T467] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 30.556024][ T467] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.630834][ T489] netlink: 68 bytes leftover after parsing attributes in process `syz.2.47'. [ 30.673477][ T467] netlink: 'syz.4.41': attribute type 4 has an invalid length. [ 30.728133][ T467] netlink: 'syz.4.41': attribute type 4 has an invalid length. [ 30.881959][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.897922][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.926512][ T28] audit: type=1400 audit(1777119792.519:183): avc: denied { mounton } for pid=463 comm="syz.0.38" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.961613][ T312] usbhid 1-1:0.0: can't add hid device: -71 [ 30.979643][ T28] audit: type=1400 audit(1777119792.539:184): avc: denied { ioctl } for pid=463 comm="syz.0.38" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.004568][ T312] usbhid: probe of 1-1:0.0 failed with error -71 [ 31.005763][ T491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 31.012174][ T312] usb 1-1: USB disconnect, device number 3 [ 31.054193][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 31.172163][ T472] loop3: detected capacity change from 0 to 131072 [ 31.182020][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 31.194048][ T472] F2FS-fs (loop3): Test dummy encryption mode enabled [ 31.211534][ T472] F2FS-fs (loop3): invalid crc value [ 31.232075][ T472] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.283715][ T472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.344385][ T507] loop1: detected capacity change from 0 to 1024 [ 31.370618][ T472] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.379935][ T509] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.418898][ T507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.427731][ T507] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.467736][ T515] device erspan0 entered promiscuous mode [ 31.662851][ T523] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.53: bg 0: block 112: padding at end of block bitmap is not set [ 31.687700][ T28] audit: type=1400 audit(1777119793.279:185): avc: denied { name_bind } for pid=521 comm="syz.0.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 31.718212][ T523] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 31.730931][ T523] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.730931][ T523] [ 31.742742][ T525] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.53: lblock 0 mapped to illegal pblock 0 (length 1) [ 31.757012][ T525] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 31.769378][ T525] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.769378][ T525] [ 31.796681][ T526] loop0: detected capacity change from 0 to 512 [ 31.823945][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 31.833348][ T516] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.53: lblock 0 mapped to illegal pblock 0 (length 1) [ 31.848263][ T526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.893994][ T526] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.914512][ T530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.61'. [ 31.924493][ T526] EXT4-fs (loop0): 1 truncate cleaned up [ 31.932296][ T526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.942237][ T28] audit: type=1400 audit(1777119793.539:186): avc: denied { connect } for pid=529 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.007375][ T533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 32.016270][ T28] audit: type=1400 audit(1777119793.569:187): avc: denied { setattr } for pid=521 comm="syz.0.59" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.051857][ T495] F2FS-fs (loop4): Test dummy encryption mode enabled [ 32.074087][ T495] F2FS-fs (loop4): invalid crc value [ 32.099049][ T495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.226449][ T284] EXT4-fs (loop1): unmounting filesystem. [ 32.234791][ T495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.403639][ T550] EXT4-fs: dax option not supported [ 32.425192][ T28] audit: type=1400 audit(1777119794.019:188): avc: denied { setopt } for pid=549 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.462798][ T548] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 32.475079][ T285] EXT4-fs (loop0): unmounting filesystem. [ 32.518279][ T555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.568496][ T559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.580040][ T555] EXT4-fs (loop3): 1 truncate cleaned up [ 32.599149][ T555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 32.608960][ T559] EXT4-fs (loop1): 1 truncate cleaned up [ 32.626230][ T28] audit: type=1326 audit(1777119794.219:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.3.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30def9cdd9 code=0x0 [ 32.671072][ T559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.717170][ T28] audit: type=1400 audit(1777119794.309:190): avc: denied { execute } for pid=554 comm="syz.3.70" path="/sys/kernel/debug/binder/stats" dev="debugfs" ino=14358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 32.717238][ T565] __nla_validate_parse: 2 callbacks suppressed [ 32.717250][ T565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 32.756782][ T565] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 32.768579][ T565] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.775832][ T565] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.853786][ T573] set_capacity_and_notify: 4 callbacks suppressed [ 32.853805][ T573] loop0: detected capacity change from 0 to 1024 [ 32.893261][ T575] loop4: detected capacity change from 0 to 512 [ 32.901384][ T573] EXT4-fs: Ignoring removed oldalloc option [ 32.913960][ T573] EXT4-fs: Ignoring removed bh option [ 32.919799][ T573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.920084][ T575] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 32.939448][ T575] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 32.948402][ T575] EXT4-fs (loop4): 1 truncate cleaned up [ 32.955559][ T575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.965772][ T573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.990874][ T575] ext4: Unknown parameter '' [ 33.099829][ T583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.76'. [ 33.108686][ T583] netlink: 43 bytes leftover after parsing attributes in process `syz.2.76'. [ 33.117723][ T583] netlink: 'syz.2.76': attribute type 5 has an invalid length. [ 33.125414][ T583] netlink: 43 bytes leftover after parsing attributes in process `syz.2.76'. [ 33.135117][ T286] EXT4-fs (loop4): unmounting filesystem. [ 33.217134][ T590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 33.273961][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.289407][ T284] EXT4-fs (loop1): unmounting filesystem. [ 33.369594][ T283] EXT4-fs (loop3): unmounting filesystem. [ 33.406171][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 33.493175][ T615] loop9: detected capacity change from 0 to 7 [ 34.620941][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.635447][ T619] loop1: detected capacity change from 0 to 256 [ 34.642022][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.654369][ T619] FAT-fs (loop1): Unrecognized mount option "nonunonumtail=0" or missing value [ 34.685781][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.710956][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.733925][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.752081][ T311] usb 1-1: Product: syz [ 34.757040][ T311] usb 1-1: Manufacturer: syz [ 34.761650][ T311] usb 1-1: SerialNumber: syz [ 34.780720][ T311] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 34.793904][ T311] cdc_ncm 1-1:1.0: bind() failure [ 34.865260][ T627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 34.888260][ T613] loop3: detected capacity change from 0 to 40427 [ 34.905892][ T613] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 34.915727][ T613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 34.930679][ T621] loop4: detected capacity change from 0 to 40427 [ 34.934493][ T613] F2FS-fs (loop3): invalid crc value [ 34.942562][ T613] F2FS-fs (loop3): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 34.957010][ T621] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 34.973108][ T613] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.997647][ T621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 35.034338][ T621] F2FS-fs (loop4): invalid crc value [ 35.048656][ T613] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 35.056415][ T621] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 35.060983][ T613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.083237][ T637] loop1: detected capacity change from 0 to 256 [ 35.130220][ T613] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 35.150122][ T621] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 35.157354][ T621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.159926][ T640] loop1: detected capacity change from 0 to 512 [ 35.173730][ T613] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 35.184964][ T640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.220194][ T640] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.94: invalid indirect mapped block 9 (level 0) [ 35.264167][ T640] EXT4-fs (loop1): 1 truncate cleaned up [ 35.300253][ T640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.350373][ T645] loop3: detected capacity change from 0 to 512 [ 35.366223][ T640] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.94: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 35.414868][ T645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.435521][ T645] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.469161][ T640] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 35.505625][ T640] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.94: Deleting old file: nlink 6, error=-117 [ 35.520113][ T625] loop2: detected capacity change from 0 to 131072 [ 35.536770][ T625] F2FS-fs (loop2): invalid crc value [ 35.559069][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 35.559085][ T28] audit: type=1400 audit(1777119797.149:259): avc: denied { read } for pid=644 comm="syz.3.95" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.588508][ T28] audit: type=1400 audit(1777119797.169:260): avc: denied { setattr } for pid=644 comm="syz.3.95" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.589206][ T625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.631380][ T283] EXT4-fs (loop3): unmounting filesystem. [ 35.645598][ T284] EXT4-fs (loop1): unmounting filesystem. [ 35.751927][ T625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 35.829828][ T625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 35.849294][ T625] netlink: 7 bytes leftover after parsing attributes in process `syz.2.90'. [ 35.901509][ T670] FAT-fs (loop1): Unrecognized mount option "nonunonumtail=0" or missing value [ 36.033078][ T286] syz-executor: attempt to access beyond end of device [ 36.033078][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.225757][ T675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 36.283197][ T28] audit: type=1400 audit(1777119797.869:261): avc: denied { read } for pid=678 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 36.338334][ T28] audit: type=1400 audit(1777119797.929:262): avc: denied { unmount } for pid=678 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.363405][ T679] overlayfs: failed to clone upperpath [ 36.376480][ T679] overlayfs: failed to clone upperpath [ 36.444375][ T684] device veth1_macvtap left promiscuous mode [ 36.475594][ T665] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 36.484334][ T665] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 36.504787][ T349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.523478][ T665] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.563726][ T682] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 36.571537][ T682] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 36.580432][ T665] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 36.587905][ T682] F2FS-fs (loop4): invalid crc value [ 36.587893][ T665] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 36.607647][ T682] F2FS-fs (loop4): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 36.639230][ T682] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.688555][ T682] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 36.695805][ T682] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.706540][ T349] usb 2-1: Using ep0 maxpacket: 16 [ 36.721115][ T349] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.730852][ T311] usb 1-1: USB disconnect, device number 4 [ 36.732198][ T349] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.749942][ T349] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.752555][ T285] EXT4-fs (loop0): unmounting filesystem. [ 36.757604][ T682] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 36.771910][ T349] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 36.785594][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.797533][ T682] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 36.812076][ T349] usb 2-1: config 0 descriptor?? [ 36.858987][ T701] exfat: Unknown parameter 'utf' [ 37.073367][ T677] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 37.110086][ T706] FAT-fs (loop0): Directory bread(block 64) failed [ 37.116764][ T706] FAT-fs (loop0): Directory bread(block 65) failed [ 37.123423][ T706] FAT-fs (loop0): Directory bread(block 66) failed [ 37.130068][ T706] FAT-fs (loop0): Directory bread(block 67) failed [ 37.136753][ T706] FAT-fs (loop0): Directory bread(block 68) failed [ 37.143330][ T706] FAT-fs (loop0): Directory bread(block 69) failed [ 37.150629][ T706] FAT-fs (loop0): Directory bread(block 70) failed [ 37.157219][ T706] FAT-fs (loop0): Directory bread(block 71) failed [ 37.163983][ T706] FAT-fs (loop0): Directory bread(block 72) failed [ 37.170631][ T706] FAT-fs (loop0): Directory bread(block 73) failed [ 37.342021][ T708] capability: warning: `syz.4.113' uses 32-bit capabilities (legacy support in use) [ 37.388163][ T710] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.412998][ T710] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 37.433465][ T28] audit: type=1400 audit(1777119799.019:263): avc: denied { remount } for pid=696 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.511417][ T717] syz.2.118 (717): attempted to duplicate a private mapping with mremap. This is not supported. [ 37.558357][ T349] hid (null): unknown global tag 0xe [ 37.585334][ T28] audit: type=1400 audit(1777119799.179:264): avc: denied { audit_read } for pid=723 comm="syz.4.121" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.756295][ T28] audit: type=1400 audit(1777119799.349:265): avc: denied { read } for pid=723 comm="syz.4.121" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.785678][ T349] usb 2-1: USB disconnect, device number 3 [ 37.792545][ T28] audit: type=1400 audit(1777119799.349:266): avc: denied { open } for pid=723 comm="syz.4.121" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.819416][ T28] audit: type=1400 audit(1777119799.379:267): avc: denied { ioctl } for pid=723 comm="syz.4.121" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.904817][ T728] set_capacity_and_notify: 8 callbacks suppressed [ 37.904877][ T728] loop0: detected capacity change from 0 to 1024 [ 37.930310][ T728] EXT4-fs: Ignoring removed bh option [ 37.943086][ T728] EXT4-fs: Mount option(s) incompatible with ext3 [ 38.028961][ T28] audit: type=1400 audit(1777119799.619:268): avc: denied { ioctl } for pid=729 comm="syz.0.123" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17904 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.638119][ T748] FAULT_INJECTION: forcing a failure. [ 38.638119][ T748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.651883][ T748] CPU: 1 PID: 748 Comm: syz.4.130 Not tainted syzkaller #0 [ 38.659106][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 38.669184][ T748] Call Trace: [ 38.672475][ T748] [ 38.675416][ T748] __dump_stack+0x21/0x24 [ 38.679763][ T748] dump_stack_lvl+0x110/0x170 [ 38.684450][ T748] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.689488][ T748] dump_stack+0x15/0x24 [ 38.693654][ T748] should_fail_ex+0x3d4/0x520 [ 38.698351][ T748] should_fail+0xb/0x10 [ 38.702526][ T748] should_fail_usercopy+0x1a/0x20 [ 38.707570][ T748] _copy_to_user+0x1e/0x90 [ 38.712012][ T748] simple_read_from_buffer+0xe9/0x160 [ 38.717485][ T748] proc_fail_nth_read+0x1a6/0x220 [ 38.722527][ T748] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.728090][ T748] ? security_file_permission+0x94/0xb0 [ 38.733742][ T748] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.739301][ T748] vfs_read+0x27a/0x910 [ 38.743470][ T748] ? __cfi_vfs_read+0x10/0x10 [ 38.748156][ T748] ? __kasan_check_write+0x14/0x20 [ 38.753286][ T748] ? mutex_lock+0x93/0x1b0 [ 38.757718][ T748] ? __cfi_mutex_lock+0x10/0x10 [ 38.762584][ T748] ? __fdget_pos+0x2cd/0x380 [ 38.767189][ T748] ? ksys_read+0x71/0x250 [ 38.771528][ T748] ksys_read+0x149/0x250 [ 38.775781][ T748] ? __cfi_ksys_read+0x10/0x10 [ 38.780557][ T748] ? fpregs_restore_userregs+0x128/0x260 [ 38.786208][ T748] __x64_sys_read+0x7b/0x90 [ 38.790726][ T748] x64_sys_call+0x2f/0x9a0 [ 38.795163][ T748] do_syscall_64+0x4c/0xa0 [ 38.799604][ T748] ? clear_bhb_loop+0x30/0x80 [ 38.804300][ T748] ? clear_bhb_loop+0x30/0x80 [ 38.809000][ T748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.814995][ T748] RIP: 0033:0x7f6a4b55d60e [ 38.819605][ T748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.839220][ T748] RSP: 002b:00007f6a4c4bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.847654][ T748] RAX: ffffffffffffffda RBX: 00007f6a4c4be6c0 RCX: 00007f6a4b55d60e [ 38.855643][ T748] RDX: 000000000000000f RSI: 00007f6a4c4be0a0 RDI: 0000000000000006 [ 38.863622][ T748] RBP: 00007f6a4c4be090 R08: 0000000000000000 R09: 0000000000000000 [ 38.871605][ T748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.879586][ T748] R13: 00007f6a4b816038 R14: 00007f6a4b815fa0 R15: 00007ffd03122818 [ 38.887579][ T748] [ 38.911375][ T749] loop1: detected capacity change from 0 to 1024 [ 38.919147][ T749] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.213681][ T749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.227973][ T749] FAULT_INJECTION: forcing a failure. [ 39.227973][ T749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.241101][ T749] CPU: 1 PID: 749 Comm: syz.1.129 Not tainted syzkaller #0 [ 39.248310][ T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 39.258374][ T749] Call Trace: [ 39.261663][ T749] [ 39.264600][ T749] __dump_stack+0x21/0x24 [ 39.268940][ T749] dump_stack_lvl+0x110/0x170 [ 39.273617][ T749] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.278643][ T749] ? release_firmware_map_entry+0x190/0x190 [ 39.284542][ T749] dump_stack+0x15/0x24 [ 39.288699][ T749] should_fail_ex+0x3d4/0x520 [ 39.293384][ T749] should_fail+0xb/0x10 [ 39.297544][ T749] should_fail_usercopy+0x1a/0x20 [ 39.302692][ T749] _copy_from_user+0x1e/0xc0 [ 39.307289][ T749] iovec_from_user+0x1aa/0x2e0 [ 39.312053][ T749] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 39.318123][ T749] __import_iovec+0x71/0x470 [ 39.322709][ T749] import_iovec+0x7c/0xb0 [ 39.327040][ T749] ___sys_sendmsg+0x252/0x360 [ 39.331726][ T749] ? __sys_sendmsg+0x290/0x290 [ 39.336491][ T749] ? __cfi___switch_to+0x10/0x10 [ 39.341430][ T749] ? __fdget+0x19c/0x220 [ 39.345669][ T749] __x64_sys_sendmsg+0x205/0x2d0 [ 39.350603][ T749] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 39.356149][ T749] ? __kasan_check_write+0x14/0x20 [ 39.361271][ T749] ? fpregs_restore_userregs+0x128/0x260 [ 39.366910][ T749] ? switch_fpu_return+0xe/0x10 [ 39.371766][ T749] x64_sys_call+0x171/0x9a0 [ 39.376275][ T749] do_syscall_64+0x4c/0xa0 [ 39.380692][ T749] ? clear_bhb_loop+0x30/0x80 [ 39.385375][ T749] ? clear_bhb_loop+0x30/0x80 [ 39.390148][ T749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.396043][ T749] RIP: 0033:0x7f717f59cdd9 [ 39.400461][ T749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.420150][ T749] RSP: 002b:00007f7180506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.428583][ T749] RAX: ffffffffffffffda RBX: 00007f717f816180 RCX: 00007f717f59cdd9 [ 39.436562][ T749] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 39.444552][ T749] RBP: 00007f7180506090 R08: 0000000000000000 R09: 0000000000000000 [ 39.452573][ T749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.460549][ T749] R13: 00007f717f816218 R14: 00007f717f816180 R15: 00007ffe7ee03948 [ 39.468534][ T749] [ 39.517294][ T756] loop3: detected capacity change from 0 to 512 [ 39.709352][ T284] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 39.738155][ T756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.749793][ T762] __nla_validate_parse: 1 callbacks suppressed [ 39.749819][ T762] netlink: 68 bytes leftover after parsing attributes in process `syz.4.132'. [ 39.773811][ T762] loop4: detected capacity change from 0 to 256 [ 39.805255][ T762] FAT-fs (loop4): Directory bread(block 64) failed [ 39.811851][ T762] FAT-fs (loop4): Directory bread(block 65) failed [ 39.818552][ T762] FAT-fs (loop4): Directory bread(block 66) failed [ 39.825136][ T762] FAT-fs (loop4): Directory bread(block 67) failed [ 39.831778][ T762] FAT-fs (loop4): Directory bread(block 68) failed [ 39.838381][ T762] FAT-fs (loop4): Directory bread(block 69) failed [ 39.845078][ T762] FAT-fs (loop4): Directory bread(block 70) failed [ 39.851641][ T762] FAT-fs (loop4): Directory bread(block 71) failed [ 39.858389][ T762] FAT-fs (loop4): Directory bread(block 72) failed [ 39.864994][ T762] FAT-fs (loop4): Directory bread(block 73) failed [ 40.010506][ T756] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.092075][ T284] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 40.111729][ T756] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #2: comm syz.3.131: corrupted inode contents [ 40.138990][ T756] EXT4-fs error (device loop3): ext4_dirty_inode:6139: inode #2: comm syz.3.131: mark_inode_dirty error [ 40.151232][ T756] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #2: comm syz.3.131: corrupted inode contents [ 40.187061][ T284] EXT4-fs (loop1): unmounting filesystem. [ 40.192981][ T756] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.131: mark_inode_dirty error [ 40.516993][ T766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 40.526237][ T766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'. [ 40.535341][ T766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'. [ 40.601616][ T731] loop0: detected capacity change from 0 to 131072 [ 40.613543][ T731] F2FS-fs (loop0): invalid crc value [ 40.623910][ T731] F2FS-fs (loop0): invalid crc value [ 40.629280][ T731] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 40.646034][ T8] device bridge_slave_1 left promiscuous mode [ 40.654331][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.661968][ T8] device bridge_slave_0 left promiscuous mode [ 40.668516][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.689153][ T8] device veth1_macvtap left promiscuous mode [ 40.698473][ T8] device veth0_vlan left promiscuous mode [ 40.811798][ T283] EXT4-fs (loop3): unmounting filesystem. [ 40.946248][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.953326][ T767] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.974433][ T767] device bridge_slave_0 entered promiscuous mode [ 41.001416][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.024156][ T767] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.031850][ T767] device bridge_slave_1 entered promiscuous mode [ 41.054677][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 41.054692][ T28] audit: type=1400 audit(1777119802.649:282): avc: denied { bind } for pid=771 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.088368][ T772] netlink: 'syz.2.138': attribute type 4 has an invalid length. [ 41.112546][ T780] netlink: 'syz.2.138': attribute type 4 has an invalid length. [ 41.196489][ T28] audit: type=1400 audit(1777119802.789:283): avc: denied { write } for pid=785 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.219031][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.226139][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.233452][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.240542][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.240809][ T28] audit: type=1400 audit(1777119802.809:284): avc: denied { bind } for pid=785 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.266889][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.279032][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.386056][ T28] audit: type=1400 audit(1777119802.979:285): avc: denied { ioctl } for pid=787 comm="syz.3.144" path="socket:[18658]" dev="sockfs" ino=18658 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.428683][ T795] loop3: detected capacity change from 0 to 40427 [ 42.442955][ T795] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 42.450967][ T795] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.463649][ T795] F2FS-fs (loop3): invalid crc value [ 42.634947][ T795] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.731956][ T795] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 42.739167][ T795] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.829762][ T805] netlink: 68 bytes leftover after parsing attributes in process `syz.2.146'. [ 43.251966][ T769] loop4: detected capacity change from 0 to 131072 [ 43.292458][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.311670][ T769] F2FS-fs (loop4): Test dummy encryption mode enabled [ 43.326188][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.364470][ T769] F2FS-fs (loop4): invalid crc value [ 43.371318][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.386974][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.402540][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.409630][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.419951][ T769] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.431412][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.446037][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.480889][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.487984][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.519275][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.537700][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.548055][ T812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 43.563498][ T812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 43.603101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.617948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.733958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.750937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.766759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.776617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.788948][ T767] device veth0_vlan entered promiscuous mode [ 43.892163][ T767] device veth1_macvtap entered promiscuous mode [ 43.971587][ T822] overlayfs: failed to clone upperpath [ 44.124020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.149251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.166426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.175816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.186245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.199164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.209239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.220495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.229430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.247009][ T28] audit: type=1400 audit(1777119805.839:286): avc: denied { mounton } for pid=767 comm="syz-executor" path="/root/syzkaller.SrBLlZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.280141][ T825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 44.317862][ T834] FAULT_INJECTION: forcing a failure. [ 44.317862][ T834] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.336701][ T834] CPU: 1 PID: 834 Comm: syz.5.135 Not tainted syzkaller #0 [ 44.343949][ T834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 44.354032][ T834] Call Trace: [ 44.357343][ T834] [ 44.360388][ T834] __dump_stack+0x21/0x24 [ 44.364755][ T834] dump_stack_lvl+0x110/0x170 [ 44.369455][ T834] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.374508][ T834] ? kernel_text_address+0xa0/0xd0 [ 44.379655][ T834] dump_stack+0x15/0x24 [ 44.383838][ T834] should_fail_ex+0x3d4/0x520 [ 44.388558][ T834] should_fail_alloc_page+0x61/0x90 [ 44.393783][ T834] prepare_alloc_pages+0x148/0x600 [ 44.398932][ T834] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 44.404156][ T834] ? __stack_depot_save+0x36/0x480 [ 44.409295][ T834] __alloc_pages+0x15b/0x610 [ 44.413903][ T834] ? __cfi___alloc_pages+0x10/0x10 [ 44.419038][ T834] ? _parse_integer+0x2a/0x40 [ 44.423762][ T834] ? kstrtouint+0x74/0xe0 [ 44.428131][ T834] ? kstrtouint_from_user+0x113/0x170 [ 44.433538][ T834] __kmalloc_large_node+0xa1/0x1c0 [ 44.438686][ T834] ? iovec_from_user+0x86/0x2e0 [ 44.443559][ T834] __kmalloc+0xe0/0x1e0 [ 44.447836][ T834] iovec_from_user+0x86/0x2e0 [ 44.452542][ T834] ? __kasan_check_write+0x14/0x20 [ 44.457748][ T834] __import_iovec+0x71/0x470 [ 44.462365][ T834] import_iovec+0x7c/0xb0 [ 44.466717][ T834] do_preadv+0x1f7/0x390 [ 44.470990][ T834] ? vfs_writev+0x5f0/0x5f0 [ 44.475525][ T834] ? __kasan_check_write+0x14/0x20 [ 44.480660][ T834] ? fput+0x154/0x1a0 [ 44.484681][ T834] __x64_sys_preadv+0x9e/0xb0 [ 44.489386][ T834] x64_sys_call+0x370/0x9a0 [ 44.493928][ T834] do_syscall_64+0x4c/0xa0 [ 44.498368][ T834] ? clear_bhb_loop+0x30/0x80 [ 44.499023][ T831] loop4: detected capacity change from 0 to 40427 [ 44.503071][ T834] ? clear_bhb_loop+0x30/0x80 [ 44.514167][ T834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.520273][ T834] RIP: 0033:0x7f4eee39cdd9 [ 44.520924][ T831] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 44.524713][ T834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.524732][ T834] RSP: 002b:00007f4eef326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 44.524754][ T834] RAX: ffffffffffffffda RBX: 00007f4eee615fa0 RCX: 00007f4eee39cdd9 [ 44.524769][ T834] RDX: 00000000000003e8 RSI: 0000200000000300 RDI: 0000000000000003 [ 44.538684][ T831] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 44.551920][ T834] RBP: 00007f4eef326090 R08: 0000000000000006 R09: 0000000000000000 [ 44.551940][ T834] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 44.551951][ T834] R13: 00007f4eee616038 R14: 00007f4eee615fa0 R15: 00007ffdb156df18 [ 44.551967][ T834] [ 44.559766][ T28] audit: type=1326 audit(1777119806.009:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.2.157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7e079cdd9 code=0x0 [ 44.603501][ T831] F2FS-fs (loop4): invalid crc value [ 44.635280][ T847] FAULT_INJECTION: forcing a failure. [ 44.635280][ T847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.640584][ T831] F2FS-fs (loop4): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 44.664311][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.664520][ T847] CPU: 1 PID: 847 Comm: syz.3.160 Not tainted syzkaller #0 [ 44.673356][ T831] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.679090][ T847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 44.679104][ T847] Call Trace: [ 44.679109][ T847] [ 44.679116][ T847] __dump_stack+0x21/0x24 [ 44.679143][ T847] dump_stack_lvl+0x110/0x170 [ 44.679161][ T847] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.679183][ T847] dump_stack+0x15/0x24 [ 44.679201][ T847] should_fail_ex+0x3d4/0x520 [ 44.679228][ T847] should_fail+0xb/0x10 [ 44.679252][ T847] should_fail_usercopy+0x1a/0x20 [ 44.679269][ T847] _copy_from_user+0x1e/0xc0 [ 44.679293][ T847] __sys_bpf+0x2a0/0x850 [ 44.679312][ T847] ? bpf_link_show_fdinfo+0x330/0x330 [ 44.679334][ T847] ? __cfi_ksys_write+0x10/0x10 [ 44.679352][ T847] ? debug_smp_processor_id+0x17/0x20 [ 44.679380][ T847] __x64_sys_bpf+0x7c/0x90 [ 44.679405][ T847] x64_sys_call+0x488/0x9a0 [ 44.679426][ T847] do_syscall_64+0x4c/0xa0 [ 44.679443][ T847] ? clear_bhb_loop+0x30/0x80 [ 44.679468][ T847] ? clear_bhb_loop+0x30/0x80 [ 44.679491][ T847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.679514][ T847] RIP: 0033:0x7f30def9cdd9 [ 44.679530][ T847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.679546][ T847] RSP: 002b:00007f30dfdf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.679567][ T847] RAX: ffffffffffffffda RBX: 00007f30df215fa0 RCX: 00007f30def9cdd9 [ 44.679581][ T847] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 44.679593][ T847] RBP: 00007f30dfdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 44.679606][ T847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.679617][ T847] R13: 00007f30df216038 R14: 00007f30df215fa0 R15: 00007ffcbeaa40c8 [ 44.679634][ T847] [ 44.894835][ T831] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 44.901969][ T831] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.952325][ T831] netlink: 'syz.4.152': attribute type 4 has an invalid length. [ 44.968697][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.978013][ T831] netlink: 'syz.4.152': attribute type 4 has an invalid length. [ 44.988767][ T311] usb 1-1: config 1 interface 0 has no altsetting 0 [ 45.005685][ T311] usb 1-1: string descriptor 0 read error: -22 [ 45.024322][ T311] usb 1-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.40 [ 45.053921][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.103706][ T861] loop5: detected capacity change from 0 to 2048 [ 45.146329][ T861] loop5: p1 < > p4 [ 45.151627][ T861] loop5: p4 size 722688 extends beyond EOD, truncated [ 45.224405][ T865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 45.273829][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.284009][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.294183][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.328512][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.336270][ T867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 45.345146][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.364033][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.387338][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.406535][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.423630][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.440434][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.472254][ T311] usbhid 1-1:1.0: can't add hid device: -71 [ 45.495602][ T311] usbhid: probe of 1-1:1.0 failed with error -71 [ 45.505810][ T311] usb 1-1: USB disconnect, device number 5 [ 45.647326][ T851] loop3: detected capacity change from 0 to 131072 [ 45.661955][ T851] F2FS-fs (loop3): Test dummy encryption mode enabled [ 45.685289][ T851] F2FS-fs (loop3): invalid crc value [ 45.692265][ T851] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.729738][ T851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.763918][ T854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.875727][ T316] udevd[316]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 45.890607][ T308] udevd[308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 45.953922][ T854] usb 5-1: Using ep0 maxpacket: 8 [ 45.965461][ T854] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.986579][ T854] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.988668][ T888] FAULT_INJECTION: forcing a failure. [ 45.988668][ T888] name failslab, interval 1, probability 0, space 0, times 0 [ 45.998954][ T854] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.009081][ T888] CPU: 1 PID: 888 Comm: syz.3.173 Not tainted syzkaller #0 [ 46.009105][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.009115][ T888] Call Trace: [ 46.009121][ T888] [ 46.009128][ T888] __dump_stack+0x21/0x24 [ 46.028158][ T854] usb 5-1: config 0 interface 0 has no altsetting 0 [ 46.029174][ T888] dump_stack_lvl+0x110/0x170 [ 46.039530][ T854] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 46.042573][ T888] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.042601][ T888] dump_stack+0x15/0x24 [ 46.045842][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.049850][ T888] should_fail_ex+0x3d4/0x520 [ 46.049881][ T888] ? skb_clone+0x1f5/0x380 [ 46.057228][ T854] usb 5-1: config 0 descriptor?? [ 46.061135][ T888] __should_failslab+0xac/0xf0 [ 46.106192][ T888] should_failslab+0x9/0x20 [ 46.110718][ T888] kmem_cache_alloc+0x3b/0x330 [ 46.115506][ T888] skb_clone+0x1f5/0x380 [ 46.119773][ T888] packet_rcv+0x596/0x1390 [ 46.124215][ T888] ? __cfi_packet_rcv+0x10/0x10 [ 46.129094][ T888] __netif_receive_skb_core+0x285d/0x35d0 [ 46.134862][ T888] ? qdisc_run+0x240/0x240 [ 46.139290][ T888] ? x64_sys_call+0x27b/0x9a0 [ 46.143993][ T888] ? do_syscall_64+0x4c/0xa0 [ 46.148590][ T888] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.154666][ T888] ? tun_rx_batched+0x166/0x780 [ 46.159522][ T888] __netif_receive_skb+0x72/0x2a0 [ 46.164556][ T888] ? tun_rx_batched+0x166/0x780 [ 46.169496][ T888] netif_receive_skb+0x98/0x3e0 [ 46.174351][ T888] ? __cfi_netif_receive_skb+0x10/0x10 [ 46.179823][ T888] ? __kernel_text_address+0xd/0x30 [ 46.185052][ T888] ? kasan_save_alloc_info+0x25/0x30 [ 46.190361][ T888] ? tun_rx_batched+0x166/0x780 [ 46.195232][ T888] tun_rx_batched+0x1c4/0x780 [ 46.199927][ T888] ? pskb_may_pull+0x100/0x100 [ 46.204699][ T888] ? tun_get_user+0x2054/0x3470 [ 46.209553][ T888] tun_get_user+0x2534/0x3470 [ 46.214236][ T888] ? _parse_integer+0x2a/0x40 [ 46.218921][ T888] ? tun_do_read+0x1cf0/0x1cf0 [ 46.223711][ T888] ? __kasan_check_write+0x14/0x20 [ 46.228847][ T888] ? ref_tracker_alloc+0x31d/0x4a0 [ 46.233970][ T888] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 46.239526][ T888] ? avc_policy_seqno+0x1b/0x70 [ 46.244468][ T888] ? selinux_file_permission+0x2a5/0x510 [ 46.250108][ T888] tun_chr_write_iter+0x1fb/0x300 [ 46.255138][ T888] vfs_write+0x603/0xce0 [ 46.259379][ T888] ? __cfi_vfs_write+0x10/0x10 [ 46.264157][ T888] ? __fget_files+0x2d5/0x330 [ 46.268844][ T888] ? __fdget_pos+0x1f2/0x380 [ 46.273431][ T888] ? ksys_write+0x71/0x250 [ 46.277849][ T888] ksys_write+0x149/0x250 [ 46.282176][ T888] ? __cfi_ksys_write+0x10/0x10 [ 46.287027][ T888] ? debug_smp_processor_id+0x17/0x20 [ 46.292406][ T888] __x64_sys_write+0x7b/0x90 [ 46.296995][ T888] x64_sys_call+0x27b/0x9a0 [ 46.301504][ T888] do_syscall_64+0x4c/0xa0 [ 46.305926][ T888] ? clear_bhb_loop+0x30/0x80 [ 46.310608][ T888] ? clear_bhb_loop+0x30/0x80 [ 46.315288][ T888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.321180][ T888] RIP: 0033:0x7f30def5d60e [ 46.325601][ T888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.345213][ T888] RSP: 002b:00007f30dfdf1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.353624][ T888] RAX: ffffffffffffffda RBX: 00007f30dfdf26c0 RCX: 00007f30def5d60e [ 46.361594][ T888] RDX: 000000000000003e RSI: 0000200000000340 RDI: 00000000000000c8 [ 46.369569][ T888] RBP: 00007f30dfdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 46.377539][ T888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.385513][ T888] R13: 00007f30df216038 R14: 00007f30df215fa0 R15: 00007ffcbeaa40c8 [ 46.393488][ T888] [ 46.444455][ T895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 46.529823][ T28] audit: type=1400 audit(1777119808.119:288): avc: denied { ioctl } for pid=874 comm="syz.4.169" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.539453][ T897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 46.655786][ T890] loop3: detected capacity change from 0 to 40427 [ 46.667384][ T890] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 46.675398][ T890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 46.684768][ T890] F2FS-fs (loop3): invalid crc value [ 46.690823][ T890] F2FS-fs (loop3): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 46.712724][ T890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 46.765865][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x1 [ 46.774942][ T910] xt_hashlimit: size too large, truncated to 1048576 [ 46.791923][ T890] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 46.791955][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.801770][ T890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.816168][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.823148][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.845096][ T890] netlink: 'syz.3.174': attribute type 4 has an invalid length. [ 46.854334][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.865201][ T890] netlink: 'syz.3.174': attribute type 4 has an invalid length. [ 46.874711][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.881682][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.896411][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.923649][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.936722][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.943726][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.961360][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.981799][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 46.990442][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.017593][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.035983][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.043748][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.053922][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.062688][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.074091][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.083375][ T28] audit: type=1400 audit(1777119808.669:289): avc: denied { map } for pid=920 comm="syz.3.185" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.123929][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.134256][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.151403][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.158668][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.174001][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.181086][ T854] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 47.192080][ T854] lenovo 0003:17EF:60A4.0002: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0 [ 47.214533][ T926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 47.228064][ T854] usb 5-1: USB disconnect, device number 2 [ 47.304743][ T927] fido_id[927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 47.363514][ T933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 47.435641][ T913] loop5: detected capacity change from 0 to 40427 [ 47.454716][ T913] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 47.476894][ T913] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 47.498468][ T905] loop0: detected capacity change from 0 to 131072 [ 47.515129][ T905] F2FS-fs (loop0): Test dummy encryption mode enabled [ 47.524934][ T913] F2FS-fs (loop5): Found nat_bits in checkpoint [ 47.529278][ T905] F2FS-fs (loop0): invalid crc value [ 47.566238][ T913] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 47.573319][ T913] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 47.581455][ T905] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.620255][ T947] loop3: detected capacity change from 0 to 1024 [ 47.647398][ T947] EXT4-fs: Ignoring removed oldalloc option [ 47.662265][ T947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.671801][ T905] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.673696][ T28] audit: type=1400 audit(1777119809.249:290): avc: denied { ioctl } for pid=909 comm="syz.5.181" path="/5/file0/memory.events" dev="loop5" ino=10 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.719452][ T947] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 47.730035][ T947] EXT4-fs (loop3): group descriptors corrupted! [ 47.788014][ T946] loop4: detected capacity change from 0 to 40427 [ 47.807072][ T946] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 47.821121][ T946] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 47.845245][ T946] F2FS-fs (loop4): invalid crc value [ 47.851184][ T946] F2FS-fs (loop4): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 47.880299][ T946] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.963937][ T946] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 47.983993][ T946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.016748][ T946] netlink: 'syz.4.193': attribute type 4 has an invalid length. [ 48.037577][ T960] loop5: detected capacity change from 0 to 256 [ 48.043270][ T946] netlink: 'syz.4.193': attribute type 4 has an invalid length. [ 48.050278][ T960] FAT-fs (loop5): Unrecognized mount option "nonunonumtail=0" or missing value [ 48.133001][ T28] audit: type=1400 audit(1777119809.719:291): avc: denied { read write } for pid=966 comm="syz.5.199" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.156207][ T967] 9pnet_fd: Insufficient options for proto=fd [ 48.174007][ T28] audit: type=1400 audit(1777119809.749:292): avc: denied { open } for pid=966 comm="syz.5.199" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.214403][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 48.273804][ T972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.200'. [ 48.336931][ T28] audit: type=1400 audit(1777119809.929:293): avc: denied { read } for pid=978 comm="syz.2.203" path="socket:[19049]" dev="sockfs" ino=19049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.365352][ T965] loop0: detected capacity change from 0 to 40427 [ 48.373571][ T28] audit: type=1400 audit(1777119809.929:294): avc: denied { block_suspend } for pid=978 comm="syz.2.203" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.458121][ T985] loop4: detected capacity change from 0 to 512 [ 48.687938][ T986] loop3: detected capacity change from 0 to 1024 [ 48.726996][ T986] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.737227][ T965] F2FS-fs (loop0): fault_injection options not supported [ 48.745784][ T965] F2FS-fs (loop0): fault_type options not supported [ 48.771381][ T965] F2FS-fs (loop0): invalid crc value [ 48.791549][ T986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.820233][ T965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.911955][ T1006] loop5: detected capacity change from 0 to 256 [ 48.933389][ T1006] FAT-fs (loop5): Unrecognized mount option "nonunonumtail=0" or missing value [ 48.947677][ T965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.990007][ T28] audit: type=1400 audit(1777119810.579:295): avc: denied { read write } for pid=964 comm="syz.0.197" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.017503][ T965] syz.0.197: attempt to access beyond end of device [ 49.017503][ T965] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.031534][ T28] audit: type=1400 audit(1777119810.609:296): avc: denied { open } for pid=964 comm="syz.0.197" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.054563][ T28] audit: type=1400 audit(1777119810.609:297): avc: denied { ioctl } for pid=964 comm="syz.0.197" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.079206][ T999] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 49.091850][ T999] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 49.289437][ T1014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.215'. [ 49.366188][ T283] EXT4-fs (loop3): unmounting filesystem. [ 49.419757][ T1021] loop0: detected capacity change from 0 to 512 [ 49.446947][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 49.488880][ T1021] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 49.545991][ T43] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 49.607310][ T1043] loop3: detected capacity change from 0 to 4096 [ 49.654982][ T1043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.678221][ T1043] overlayfs: workdir and upperdir must be separate subtrees [ 49.823942][ T229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.882104][ T1045] loop0: detected capacity change from 0 to 40427 [ 49.893915][ T1045] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 49.910772][ T1045] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 49.926152][ T1045] F2FS-fs (loop0): invalid crc value [ 49.931525][ T1045] F2FS-fs (loop0): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 49.954622][ T1071] loop5: detected capacity change from 0 to 256 [ 49.974492][ T1045] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.975239][ T1071] FAT-fs (loop5): Directory bread(block 64) failed [ 49.987674][ T1071] FAT-fs (loop5): Directory bread(block 65) failed [ 49.995494][ T1071] FAT-fs (loop5): Directory bread(block 66) failed [ 50.002159][ T1071] FAT-fs (loop5): Directory bread(block 67) failed [ 50.012373][ T1071] FAT-fs (loop5): Directory bread(block 68) failed [ 50.021375][ T1071] FAT-fs (loop5): Directory bread(block 69) failed [ 50.026926][ T1045] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 50.028089][ T229] usb 5-1: Using ep0 maxpacket: 8 [ 50.040225][ T1071] FAT-fs (loop5): Directory bread(block 70) failed [ 50.046963][ T1071] FAT-fs (loop5): Directory bread(block 71) failed [ 50.047124][ T1045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.053723][ T1071] FAT-fs (loop5): Directory bread(block 72) failed [ 50.068531][ T1071] FAT-fs (loop5): Directory bread(block 73) failed [ 50.077779][ T229] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 50.097888][ T229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.108854][ T229] usb 5-1: config 0 has no interface number 0 [ 50.131382][ T229] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 50.154895][ T229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.171744][ T229] usb 5-1: Product: syz [ 50.181447][ T229] usb 5-1: Manufacturer: syz [ 50.186368][ T229] usb 5-1: SerialNumber: syz [ 50.194937][ T1077] loop5: detected capacity change from 0 to 256 [ 50.212491][ T229] usb 5-1: config 0 descriptor?? [ 50.218863][ T1077] FAT-fs (loop5): Unrecognized mount option "nonunonumtail=0" or missing value [ 50.229857][ T229] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 50.233254][ T1079] loop0: detected capacity change from 0 to 1024 [ 50.239062][ T229] usb 5-1: No valid video chain found. [ 50.245388][ T1079] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 50.261804][ T1079] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 50.284174][ T1079] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: comm syz.0.236: inode #63: comm syz.0.236: iget: illegal inode # [ 50.306546][ T1079] EXT4-fs (loop0): no journal found [ 50.312490][ T1079] EXT4-fs (loop0): can't get journal size [ 50.325014][ T1084] fuse: Bad value for 'fd' [ 50.326509][ T1079] EXT4-fs (loop0): failed to initialize system zone (-22) [ 50.337515][ T1079] EXT4-fs (loop0): mount failed [ 50.343310][ T283] EXT4-fs (loop3): unmounting filesystem. [ 50.348599][ T1087] fuse: Bad value for 'fd' [ 50.355820][ T1087] netlink: 'syz.2.241': attribute type 13 has an invalid length. [ 50.363656][ T1087] __nla_validate_parse: 1 callbacks suppressed [ 50.363672][ T1087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 50.387354][ T1090] erofs: (device loop5): mounted with root inode @ nid 36. [ 50.399150][ T1090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.242'. [ 50.436964][ T349] usb 5-1: USB disconnect, device number 3 [ 50.512405][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.244'. [ 50.542173][ T1091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 50.550835][ T1100] netlink: 164 bytes leftover after parsing attributes in process `syz.0.236'. [ 50.565575][ T1091] System zones: 1-20 [ 50.584892][ T1091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.622394][ T283] EXT4-fs (loop3): unmounting filesystem. [ 50.697430][ T1111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.736100][ T1118] device ip6gre1 entered promiscuous mode [ 50.765626][ T1111] EXT4-fs error (device loop3): ext4_iget_extra_inode:4758: inode #15: comm syz.3.248: corrupted in-inode xattr [ 50.804350][ T1120] FAT-fs (loop0): Unrecognized mount option "nonunonumtail=0" or missing value [ 50.821925][ T283] EXT4-fs (loop3): unmounting filesystem. [ 50.864215][ T312] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.914148][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 50.925898][ T1130] FAULT_INJECTION: forcing a failure. [ 50.925898][ T1130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.939216][ T1130] CPU: 1 PID: 1130 Comm: syz.0.257 Not tainted syzkaller #0 [ 50.945777][ T1133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.946531][ T1130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 50.946546][ T1130] Call Trace: [ 50.946552][ T1130] [ 50.946559][ T1130] __dump_stack+0x21/0x24 [ 50.961015][ T1133] overlayfs: failed to clone upperpath [ 50.963800][ T1130] dump_stack_lvl+0x110/0x170 [ 50.984444][ T1130] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.989488][ T1130] dump_stack+0x15/0x24 [ 50.993633][ T1130] should_fail_ex+0x3d4/0x520 [ 50.998307][ T1130] should_fail+0xb/0x10 [ 51.002463][ T1130] should_fail_usercopy+0x1a/0x20 [ 51.007492][ T1130] _copy_to_user+0x1e/0x90 [ 51.011900][ T1130] simple_read_from_buffer+0xe9/0x160 [ 51.017267][ T1130] proc_fail_nth_read+0x1a6/0x220 [ 51.022287][ T1130] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.027830][ T1130] ? security_file_permission+0x94/0xb0 [ 51.033372][ T1130] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.038952][ T1130] vfs_read+0x27a/0x910 [ 51.043120][ T1130] ? __cfi_vfs_read+0x10/0x10 [ 51.047794][ T1130] ? __kasan_check_write+0x14/0x20 [ 51.052954][ T1130] ? mutex_lock+0x93/0x1b0 [ 51.057367][ T1130] ? __cfi_mutex_lock+0x10/0x10 [ 51.062210][ T1130] ? __fdget_pos+0x2cd/0x380 [ 51.066793][ T1130] ? ksys_read+0x71/0x250 [ 51.071126][ T1130] ksys_read+0x149/0x250 [ 51.075389][ T1130] ? __cfi_ksys_read+0x10/0x10 [ 51.080172][ T1130] ? fput+0x154/0x1a0 [ 51.084166][ T1130] ? debug_smp_processor_id+0x17/0x20 [ 51.089537][ T1130] __x64_sys_read+0x7b/0x90 [ 51.094035][ T1130] x64_sys_call+0x2f/0x9a0 [ 51.098462][ T1130] do_syscall_64+0x4c/0xa0 [ 51.102878][ T1130] ? clear_bhb_loop+0x30/0x80 [ 51.107558][ T1130] ? clear_bhb_loop+0x30/0x80 [ 51.112238][ T1130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.118136][ T1130] RIP: 0033:0x7f0bf555d60e [ 51.122563][ T1130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.142166][ T1130] RSP: 002b:00007f0bf6509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.150583][ T1130] RAX: ffffffffffffffda RBX: 00007f0bf650a6c0 RCX: 00007f0bf555d60e [ 51.158575][ T1130] RDX: 000000000000000f RSI: 00007f0bf650a0a0 RDI: 0000000000000006 [ 51.166549][ T1130] RBP: 00007f0bf650a090 R08: 0000000000000000 R09: 0000000000000000 [ 51.174544][ T1130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.182514][ T1130] R13: 00007f0bf5816038 R14: 00007f0bf5815fa0 R15: 00007ffea06a5618 [ 51.190487][ T1130] [ 51.221833][ T1139] netlink: 76 bytes leftover after parsing attributes in process `syz.2.259'. [ 51.271376][ T1145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.280576][ T1145] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.304349][ T312] usb 6-1: Using ep0 maxpacket: 8 [ 51.318400][ T1154] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.265: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.334155][ T1154] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.265: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.345245][ T283] EXT4-fs (loop3): unmounting filesystem. [ 51.348742][ T1154] EXT4-fs error (device loop0): ext4_acquire_dquot:6822: comm syz.0.265: Failed to acquire dquot type 0 [ 51.359946][ T312] usb 6-1: config 6 has an invalid interface number: 220 but max is 0 [ 51.373346][ T312] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 51.373411][ T1154] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5935: Corrupt filesystem [ 51.384090][ T312] usb 6-1: config 6 has no interface number 0 [ 51.403091][ T1154] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.265: mark_inode_dirty error [ 51.424145][ T312] usb 6-1: config 6 interface 220 has no altsetting 0 [ 51.431184][ T1154] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 51.445219][ T1160] ext4: Unknown parameter 'fsmagic' [ 51.448457][ T1154] EXT4-fs (loop0): 1 orphan inode deleted [ 51.456587][ T1154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.462503][ T312] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 51.466757][ T1162] FAT-fs (loop3): Unrecognized mount option "nonunonumtail=0" or missing value [ 51.474587][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.494007][ T316] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.505542][ T312] usb 6-1: Product: syz [ 51.509843][ T312] usb 6-1: Manufacturer: syz [ 51.514908][ T312] usb 6-1: SerialNumber: syz [ 51.535117][ T285] EXT4-fs (loop0): unmounting filesystem. [ 51.546146][ T988] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.565865][ T988] __quota_error: 122 callbacks suppressed [ 51.565882][ T988] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 51.580893][ T988] EXT4-fs error (device loop0): ext4_release_dquot:6858: comm kworker/u4:6: Failed to release dquot type 0 [ 51.592731][ T285] EXT4-fs error (device loop0): __ext4_get_inode_loc:4515: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.606097][ T285] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5935: Corrupt filesystem [ 51.626061][ T285] EXT4-fs error (device loop0): ext4_quota_off:7128: inode #3: comm syz-executor: mark_inode_dirty error [ 51.647811][ T1167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.654590][ T1167] EXT4-fs: dax option not supported [ 51.732408][ T312] usb 6-1: USB disconnect, device number 2 [ 51.749744][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 51.870619][ T1175] process 'syz.3.270' launched './file0' with NULL argv: empty string added [ 51.907382][ T28] audit: type=1400 audit(1777119813.499:418): avc: denied { execute } for pid=1166 comm="syz.3.270" name="file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.930352][ T28] audit: type=1400 audit(1777119813.529:419): avc: denied { execute_no_trans } for pid=1166 comm="syz.3.270" path="/53/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.981112][ T28] audit: type=1400 audit(1777119813.559:420): avc: denied { sqpoll } for pid=1182 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.029102][ T28] audit: type=1400 audit(1777119813.619:421): avc: denied { read } for pid=1187 comm="syz.0.276" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.043145][ T1185] EXT4-fs: Ignoring removed nobh option [ 52.058915][ T1185] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.071979][ T28] audit: type=1400 audit(1777119813.619:422): avc: denied { open } for pid=1187 comm="syz.0.276" path="/46/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.097008][ T1185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 52.105005][ T1185] System zones: 1-12 [ 52.109793][ T1185] EXT4-fs (loop4): 1 truncate cleaned up [ 52.115716][ T1185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.124268][ T28] audit: type=1400 audit(1777119813.619:423): avc: denied { setattr } for pid=1187 comm="syz.0.276" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.285654][ T1192] raw_sendmsg: syz.4.275 forgot to set AF_INET. Fix it! [ 52.324879][ T1191] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 52.525571][ T1200] netlink: 68 bytes leftover after parsing attributes in process `syz.0.279'. [ 52.555568][ T1200] FAT-fs (loop0): Directory bread(block 64) failed [ 52.562180][ T1200] FAT-fs (loop0): Directory bread(block 65) failed [ 52.568989][ T1200] FAT-fs (loop0): Directory bread(block 66) failed [ 52.575571][ T1200] FAT-fs (loop0): Directory bread(block 67) failed [ 52.582281][ T1200] FAT-fs (loop0): Directory bread(block 68) failed [ 52.588911][ T1200] FAT-fs (loop0): Directory bread(block 69) failed [ 52.595640][ T1200] FAT-fs (loop0): Directory bread(block 70) failed [ 52.602227][ T1200] FAT-fs (loop0): Directory bread(block 71) failed [ 52.608924][ T1200] FAT-fs (loop0): Directory bread(block 72) failed [ 52.615509][ T1200] FAT-fs (loop0): Directory bread(block 73) failed [ 52.674421][ T1200] SELinux: failed to load policy [ 52.774279][ T312] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 52.938544][ T286] EXT4-fs (loop4): unmounting filesystem. [ 52.985087][ T312] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 4 [ 52.996555][ T312] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 53.011691][ T312] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 53.021874][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.031677][ T312] usb 6-1: Product: syz [ 53.036778][ T312] usb 6-1: Manufacturer: syz [ 53.041725][ T312] usb 6-1: SerialNumber: syz [ 53.075073][ T1207] netlink: 68 bytes leftover after parsing attributes in process `syz.4.280'. [ 53.163775][ T1207] FAT-fs (loop4): Directory bread(block 64) failed [ 53.170457][ T1207] FAT-fs (loop4): Directory bread(block 65) failed [ 53.177274][ T1207] FAT-fs (loop4): Directory bread(block 66) failed [ 53.183981][ T1207] FAT-fs (loop4): Directory bread(block 67) failed [ 53.190750][ T1207] FAT-fs (loop4): Directory bread(block 68) failed [ 53.197357][ T1207] FAT-fs (loop4): Directory bread(block 69) failed [ 53.204089][ T1207] FAT-fs (loop4): Directory bread(block 70) failed [ 53.210670][ T1207] FAT-fs (loop4): Directory bread(block 71) failed [ 53.217427][ T1207] FAT-fs (loop4): Directory bread(block 72) failed [ 53.224060][ T1207] FAT-fs (loop4): Directory bread(block 73) failed [ 53.411259][ T28] audit: type=1400 audit(1777119814.999:424): avc: denied { create } for pid=1208 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.460067][ T1206] SELinux: failed to load policy [ 53.465872][ T28] audit: type=1400 audit(1777119815.029:425): avc: denied { setattr } for pid=1196 comm="syz.5.278" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.489966][ T312] usb 6-1: Can't get UAC3 power state for id 10 [ 53.508752][ T312] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 53.521489][ T28] audit: type=1400 audit(1777119815.059:426): avc: denied { bind } for pid=1208 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.539355][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 53.545026][ T312] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 53.571882][ T312] usb 6-1: USB disconnect, device number 3 [ 53.608842][ T1222] set_capacity_and_notify: 14 callbacks suppressed [ 53.608862][ T1222] loop5: detected capacity change from 0 to 256 [ 53.634747][ T1222] FAT-fs (loop5): Unrecognized mount option "utf8=y" or missing value [ 53.759091][ T1232] loop5: detected capacity change from 0 to 256 [ 53.794340][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.082127][ T1242] loop4: detected capacity change from 0 to 256 [ 54.195735][ T1242] FAT-fs (loop4): Directory bread(block 64) failed [ 54.202376][ T1242] FAT-fs (loop4): Directory bread(block 65) failed [ 54.209074][ T1242] FAT-fs (loop4): Directory bread(block 66) failed [ 54.215631][ T1242] FAT-fs (loop4): Directory bread(block 67) failed [ 54.222366][ T1242] FAT-fs (loop4): Directory bread(block 68) failed [ 54.228978][ T1242] FAT-fs (loop4): Directory bread(block 69) failed [ 54.235607][ T1242] FAT-fs (loop4): Directory bread(block 70) failed [ 54.242193][ T1242] FAT-fs (loop4): Directory bread(block 71) failed [ 54.248876][ T1242] FAT-fs (loop4): Directory bread(block 72) failed [ 54.255448][ T1242] FAT-fs (loop4): Directory bread(block 73) failed [ 54.311063][ T1242] SELinux: failed to load policy [ 54.504742][ T19] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 54.695121][ T19] usb 4-1: No LPM exit latency info found, disabling LPM. [ 54.703790][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 54.732186][ T19] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 54.752513][ T19] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 54.953942][ T312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.135814][ T312] usb 6-1: config 0 has no interfaces? [ 55.144475][ T312] usb 6-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 55.153555][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.161901][ T312] usb 6-1: Product: syz [ 55.166203][ T312] usb 6-1: Manufacturer: syz [ 55.170824][ T312] usb 6-1: SerialNumber: syz [ 55.177004][ T1276] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 55.178384][ T312] usb 6-1: config 0 descriptor?? [ 55.212087][ T1279] loop4: detected capacity change from 0 to 256 [ 55.222841][ T1279] FAT-fs (loop4): Unrecognized mount option "nonunonumtail=0" or missing value [ 55.232397][ T1276] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 55.246157][ T1277] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 55.303239][ T1284] fuse: Bad value for 'fd' [ 55.396690][ T1262] __nla_validate_parse: 3 callbacks suppressed [ 55.396709][ T1262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.302'. [ 55.482140][ T1294] netlink: 68 bytes leftover after parsing attributes in process `syz.4.314'. [ 55.498013][ T1294] loop4: detected capacity change from 0 to 256 [ 55.586013][ T1294] FAT-fs (loop4): Directory bread(block 64) failed [ 55.592678][ T1294] FAT-fs (loop4): Directory bread(block 65) failed [ 55.599398][ T1294] FAT-fs (loop4): Directory bread(block 66) failed [ 55.605981][ T1294] FAT-fs (loop4): Directory bread(block 67) failed [ 55.612708][ T1294] FAT-fs (loop4): Directory bread(block 68) failed [ 55.619281][ T1294] FAT-fs (loop4): Directory bread(block 69) failed [ 55.625917][ T1294] FAT-fs (loop4): Directory bread(block 70) failed [ 55.632484][ T1294] FAT-fs (loop4): Directory bread(block 71) failed [ 55.639115][ T1294] FAT-fs (loop4): Directory bread(block 72) failed [ 55.645713][ T1294] FAT-fs (loop4): Directory bread(block 73) failed [ 55.691958][ T1294] SELinux: failed to load policy [ 55.968963][ T312] usb 6-1: USB disconnect, device number 4 [ 56.271931][ T1297] loop0: detected capacity change from 0 to 131072 [ 56.281938][ T1297] F2FS-fs (loop0): Test dummy encryption mode enabled [ 56.289320][ T1297] F2FS-fs (loop0): invalid crc value [ 56.297150][ T1297] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.331780][ T1297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.355410][ T1308] loop4: detected capacity change from 0 to 256 [ 56.362198][ T1308] exfat: Deprecated parameter 'namecase' [ 56.368836][ T1308] exfat: Deprecated parameter 'namecase' [ 56.376015][ T1308] exfat: Deprecated parameter 'namecase' [ 56.385506][ T1308] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 56.596059][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 56.596084][ T28] audit: type=1400 audit(1777119818.189:448): avc: denied { setopt } for pid=1312 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.636013][ T1314] x_tables: duplicate underflow at hook 2 [ 56.732529][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.322'. [ 56.854787][ T28] audit: type=1400 audit(1777119818.359:449): avc: denied { create } for pid=1312 comm="syz.2.321" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.863051][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.916005][ T1323] loop5: detected capacity change from 0 to 1024 [ 56.922481][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.931505][ T1323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.939448][ T1323] EXT4-fs: dax option not supported [ 56.944912][ T19] usb 4-1: can't set config #1, error -71 [ 56.950794][ T28] audit: type=1400 audit(1777119818.359:450): avc: denied { read } for pid=1312 comm="syz.2.321" name="file2" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.952908][ T19] usb 4-1: USB disconnect, device number 2 [ 56.983334][ T28] audit: type=1400 audit(1777119818.359:451): avc: denied { open } for pid=1312 comm="syz.2.321" path="/95/file2" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.007486][ T28] audit: type=1400 audit(1777119818.359:452): avc: denied { ioctl } for pid=1312 comm="syz.2.321" path="/95/file2" dev="tmpfs" ino=535 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.033942][ T28] audit: type=1400 audit(1777119818.479:453): avc: denied { unlink } for pid=287 comm="syz-executor" name="file2" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.034152][ T1328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.326'. [ 57.066681][ T308] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.169781][ T1321] loop3: detected capacity change from 0 to 40427 [ 57.179788][ T1321] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 57.188248][ T1321] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 57.365540][ T349] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 57.387098][ T1321] F2FS-fs (loop3): invalid crc value [ 57.393681][ T1321] F2FS-fs (loop3): Ignore s_resuid=15, s_resgid=0 w/o reserve_root and reserve_node [ 57.686480][ T1321] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.916125][ T349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.931351][ T349] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 57.942735][ T349] usb 1-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice= 0.40 [ 58.106293][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.114833][ T349] usb 1-1: Product: syz [ 58.119016][ T349] usb 1-1: Manufacturer: syz [ 58.123618][ T349] usb 1-1: SerialNumber: syz [ 58.181217][ T1349] netlink: 68 bytes leftover after parsing attributes in process `syz.4.329'. [ 58.202854][ T1349] loop4: detected capacity change from 0 to 256 [ 58.237705][ T1349] FAT-fs (loop4): Directory bread(block 64) failed [ 58.244355][ T1349] FAT-fs (loop4): Directory bread(block 65) failed [ 58.251024][ T1349] FAT-fs (loop4): Directory bread(block 66) failed [ 58.257673][ T1349] FAT-fs (loop4): Directory bread(block 67) failed [ 58.264856][ T1349] FAT-fs (loop4): Directory bread(block 68) failed [ 58.271437][ T1349] FAT-fs (loop4): Directory bread(block 69) failed [ 58.278234][ T1349] FAT-fs (loop4): Directory bread(block 70) failed [ 58.284929][ T1349] FAT-fs (loop4): Directory bread(block 71) failed [ 58.291680][ T1349] FAT-fs (loop4): Directory bread(block 72) failed [ 58.298339][ T1349] FAT-fs (loop4): Directory bread(block 73) failed [ 58.378308][ T1349] SELinux: failed to load policy [ 58.403985][ T28] audit: type=1400 audit(1777119819.969:454): avc: denied { load_policy } for pid=1342 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.531306][ T1321] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 58.549000][ T1321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.580305][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 58.637383][ T1321] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 58.657213][ T1321] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 58.771298][ T1366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 58.831139][ T1372] loop3: detected capacity change from 0 to 256 [ 59.025646][ T349] usb 1-1: USB disconnect, device number 6 [ 59.041778][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 59.294008][ T28] audit: type=1400 audit(1777119820.839:455): avc: denied { create } for pid=1387 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 59.397838][ T28] audit: type=1400 audit(1777119820.859:456): avc: denied { setopt } for pid=1387 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 59.439651][ T1345] loop5: detected capacity change from 0 to 131072 [ 59.447014][ T1345] F2FS-fs (loop5): Test dummy encryption mode enabled [ 59.465574][ T1345] F2FS-fs (loop5): invalid crc value [ 59.504743][ T1345] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.563960][ T1345] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 59.777380][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 59.844800][ T1402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 59.874381][ T1392] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 59.898925][ T28] audit: type=1400 audit(1777119821.489:457): avc: denied { read write } for pid=1403 comm="syz.4.351" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.923526][ T1392] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 59.952877][ T1406] loop4: detected capacity change from 0 to 256 [ 59.964514][ T1406] FAT-fs (loop4): Directory bread(block 64) failed [ 59.971173][ T1406] FAT-fs (loop4): Directory bread(block 65) failed [ 59.977818][ T1406] FAT-fs (loop4): Directory bread(block 66) failed [ 59.994380][ T1406] FAT-fs (loop4): Directory bread(block 67) failed [ 60.012299][ T1406] FAT-fs (loop4): Directory bread(block 68) failed [ 60.019059][ T1406] FAT-fs (loop4): Directory bread(block 69) failed [ 60.046140][ T1406] FAT-fs (loop4): Directory bread(block 70) failed [ 60.052722][ T1406] FAT-fs (loop4): Directory bread(block 71) failed [ 60.063153][ T1406] FAT-fs (loop4): Directory bread(block 72) failed [ 60.077285][ T1406] FAT-fs (loop4): Directory bread(block 73) failed [ 60.116533][ T1414] loop5: detected capacity change from 0 to 128 [ 60.356976][ T1406] xt_TCPMSS: Only works on TCP SYN packets [ 60.488929][ T1420] __nla_validate_parse: 1 callbacks suppressed [ 60.488947][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 60.590345][ T1428] loop3: detected capacity change from 0 to 512 [ 60.606260][ T1428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.617910][ T1428] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.360: bad orphan inode 131083 [ 60.628769][ T1428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.763555][ T283] EXT4-fs (loop3): unmounting filesystem. [ 60.781934][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 60.794625][ T291] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.314962][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.333883][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.343656][ T291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.383896][ T291] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.393285][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.409736][ T291] usb 5-1: config 0 descriptor?? [ 61.533011][ T1444] netlink: 'syz.2.364': attribute type 4 has an invalid length. [ 61.568228][ T1444] netlink: 'syz.2.364': attribute type 4 has an invalid length. [ 61.876282][ T1451] loop3: detected capacity change from 0 to 512 [ 61.891705][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 61.910886][ T1451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.941216][ T1451] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.366: bad orphan inode 131083 [ 61.952291][ T1451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 61.987590][ T291] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 62.011544][ T291] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 62.035371][ T1433] loop0: detected capacity change from 0 to 131072 [ 62.045687][ T1433] F2FS-fs (loop0): Test dummy encryption mode enabled [ 62.054321][ T1433] F2FS-fs (loop0): invalid crc value [ 62.105814][ T1433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.172547][ T1433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.218422][ T283] EXT4-fs (loop3): unmounting filesystem. [ 62.309502][ T1467] netlink: 'syz.5.371': attribute type 4 has an invalid length. [ 62.323922][ T1467] netlink: 17 bytes leftover after parsing attributes in process `syz.5.371'. [ 62.374953][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 63.511173][ T1496] loop5: detected capacity change from 0 to 256 [ 63.754899][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 63.754923][ T28] audit: type=1400 audit(1777119825.349:461): avc: denied { wake_alarm } for pid=1499 comm="syz.3.381" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.816063][ T1502] loop4: detected capacity change from 0 to 256 [ 63.962486][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 63.962757][ T28] audit: type=1400 audit(1777119825.549:462): avc: denied { create } for pid=1505 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 64.193259][ T1494] netlink: 'syz.2.378': attribute type 4 has an invalid length. [ 64.406010][ T1494] netlink: 'syz.2.378': attribute type 4 has an invalid length. [ 65.040989][ T24] usb 5-1: USB disconnect, device number 4 [ 65.206733][ T1527] loop3: detected capacity change from 0 to 8192 [ 65.230980][ T1527] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.454065][ T1498] loop5: detected capacity change from 0 to 131072 [ 65.468198][ T1498] F2FS-fs (loop5): Test dummy encryption mode enabled [ 65.475697][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 65.497542][ T1498] F2FS-fs (loop5): invalid crc value [ 65.527105][ T1498] F2FS-fs (loop5): Found nat_bits in checkpoint [ 65.533919][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.588027][ T1498] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 65.643146][ T1550] loop3: detected capacity change from 0 to 256 [ 65.662843][ T1550] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 65.687853][ T1550] syz.3.398: attempt to access beyond end of device [ 65.687853][ T1550] loop3: rw=0, sector=256, nr_sectors = 1 limit=256 [ 65.723797][ T1550] syz.3.398: attempt to access beyond end of device [ 65.723797][ T1550] loop3: rw=0, sector=256, nr_sectors = 1 limit=256 [ 65.737065][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 65.754139][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 65.762434][ T24] usb 5-1: config 0 has no interface number 0 [ 65.783297][ T1550] Buffer I/O error on dev loop3, logical block 256, async page read [ 65.791391][ T24] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 65.812549][ T1550] syz.3.398: attempt to access beyond end of device [ 65.812549][ T1550] loop3: rw=0, sector=256, nr_sectors = 1 limit=256 [ 65.825687][ T24] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 65.835773][ T1550] Buffer I/O error on dev loop3, logical block 256, async page read [ 65.844625][ T1556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 65.857987][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 65.874583][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.882979][ T24] usb 5-1: Product: syz [ 65.891775][ T24] usb 5-1: Manufacturer: syz [ 65.899258][ T24] usb 5-1: SerialNumber: syz [ 65.904975][ T24] usb 5-1: config 0 descriptor?? [ 65.965351][ T1559] tipc: Enabling of bearer rejected, failed to enable media [ 65.995579][ T1563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 66.006087][ T28] audit: type=1400 audit(1777119827.589:463): avc: denied { getopt } for pid=1557 comm="syz.3.402" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.037037][ T1561] loop5: detected capacity change from 0 to 4096 [ 66.063020][ T1561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 66.078354][ T1561] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 66.088597][ T1561] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 66.098242][ T1561] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.399: Failed to acquire dquot type 0 [ 66.111290][ T28] audit: type=1400 audit(1777119827.699:464): avc: denied { setopt } for pid=1562 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.143443][ T767] EXT4-fs (loop5): unmounting filesystem. [ 66.188695][ T1565] loop0: detected capacity change from 0 to 40427 [ 66.199274][ T1565] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 66.208024][ T1565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.217008][ T1565] F2FS-fs (loop0): invalid crc value [ 66.223525][ T1565] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.246388][ T1565] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 66.253547][ T1565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.332099][ T1577] loop0: detected capacity change from 0 to 256 [ 66.356040][ T1577] FAT-fs (loop0): Directory bread(block 64) failed [ 66.362654][ T1577] FAT-fs (loop0): Directory bread(block 65) failed [ 66.364244][ T19] usb 5-1: USB disconnect, device number 5 [ 66.371187][ T1577] FAT-fs (loop0): Directory bread(block 66) failed [ 66.382217][ T1577] FAT-fs (loop0): Directory bread(block 67) failed [ 66.388962][ T1577] FAT-fs (loop0): Directory bread(block 68) failed [ 66.396796][ T1577] FAT-fs (loop0): Directory bread(block 69) failed [ 66.403806][ T1577] FAT-fs (loop0): Directory bread(block 70) failed [ 66.411447][ T1577] FAT-fs (loop0): Directory bread(block 71) failed [ 66.418124][ T1577] FAT-fs (loop0): Directory bread(block 72) failed [ 66.425124][ T1577] FAT-fs (loop0): Directory bread(block 73) failed [ 66.452256][ T1584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 66.536319][ T1589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 66.846299][ T28] audit: type=1400 audit(1777119828.439:465): avc: denied { execute } for pid=1594 comm="syz.3.413" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.913015][ T1606] 9pnet_fd: Insufficient options for proto=fd [ 66.980176][ T28] audit: type=1400 audit(1777119828.559:466): avc: denied { map } for pid=1595 comm="syz.5.412" path="socket:[22178]" dev="sockfs" ino=22178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.005093][ T1608] Disabled LAPIC found during irq injection [ 67.043141][ T28] audit: type=1400 audit(1777119828.609:467): avc: denied { mounton } for pid=1594 comm="syz.3.413" path="/82/file0" dev="tmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 67.538010][ T1622] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 67.839989][ T1627] netlink: 'syz.2.424': attribute type 4 has an invalid length. [ 67.849927][ T1627] netlink: 'syz.2.424': attribute type 4 has an invalid length. [ 67.858008][ T28] audit: type=1400 audit(1777119829.449:468): avc: denied { append } for pid=1625 comm="syz.5.423" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.994193][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 68.087428][ T1634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 68.175863][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 68.319731][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 68.426704][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.446089][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.464301][ T24] usb 5-1: Product: Ћ [ 68.468645][ T24] usb 5-1: Manufacturer: ь [ 68.473242][ T24] usb 5-1: SerialNumber: ꦊʌҒ䘔ꌣጸɴ噥嘄曢턹褁虮䣢ڀ懸鉡뎩偕எ瘲ꐄ [ 69.528095][ T1645] loop5: detected capacity change from 0 to 256 [ 69.543960][ T1645] FAT-fs (loop5): bogus number of FAT sectors [ 69.550087][ T1645] FAT-fs (loop5): Can't find a valid FAT filesystem [ 69.720048][ T1651] input: syz1 as /devices/virtual/input/input6 [ 69.744791][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 69.744821][ T28] audit: type=1400 audit(1777119831.339:473): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=962 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.776262][ T24] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 69.799010][ T24] usb 5-1: USB disconnect, device number 6 [ 69.806620][ T1655] loop5: detected capacity change from 0 to 256 [ 69.819870][ T28] audit: type=1400 audit(1777119831.339:474): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=962 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.844823][ T28] audit: type=1400 audit(1777119831.339:475): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=962 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.893875][ T1655] FAT-fs (loop5): Directory bread(block 64) failed [ 69.905871][ T1655] FAT-fs (loop5): Directory bread(block 65) failed [ 69.912764][ T1655] FAT-fs (loop5): Directory bread(block 66) failed [ 69.920900][ T1658] xt_hashlimit: size too large, truncated to 1048576 [ 69.929971][ T1655] FAT-fs (loop5): Directory bread(block 67) failed [ 69.945579][ T1655] FAT-fs (loop5): Directory bread(block 68) failed [ 69.952271][ T1655] FAT-fs (loop5): Directory bread(block 69) failed [ 69.960237][ T1655] FAT-fs (loop5): Directory bread(block 70) failed [ 69.970713][ T1655] FAT-fs (loop5): Directory bread(block 71) failed [ 69.984493][ T1655] FAT-fs (loop5): Directory bread(block 72) failed [ 69.991143][ T1655] FAT-fs (loop5): Directory bread(block 73) failed [ 70.067367][ T1660] syz.5.432: attempt to access beyond end of device [ 70.067367][ T1660] loop5: rw=1, sector=1192, nr_sectors = 96 limit=256 [ 70.097529][ T1660] syz.5.432: attempt to access beyond end of device [ 70.097529][ T1660] loop5: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 70.139872][ T28] audit: type=1400 audit(1777119831.729:476): avc: denied { connect } for pid=1661 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.151666][ T1660] syz.5.432: attempt to access beyond end of device [ 70.151666][ T1660] loop5: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 70.174690][ T28] audit: type=1400 audit(1777119831.769:477): avc: denied { read } for pid=1661 comm="syz.3.435" path="socket:[22611]" dev="sockfs" ino=22611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.215015][ T1662] loop3: detected capacity change from 0 to 4096 [ 70.221726][ T1662] EXT4-fs: Ignoring removed bh option [ 70.227905][ T1662] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 70.317049][ T1660] syz.5.432: attempt to access beyond end of device [ 70.317049][ T1660] loop5: rw=1, sector=1960, nr_sectors = 27640 limit=256 [ 70.343811][ T1660] syz.5.432: attempt to access beyond end of device [ 70.343811][ T1660] loop5: rw=1, sector=29600, nr_sectors = 1464 limit=256 [ 70.446190][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 70.468555][ T1673] loop0: detected capacity change from 0 to 128 [ 70.562095][ T28] audit: type=1400 audit(1777119832.129:478): avc: denied { mount } for pid=1666 comm="syz.3.437" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.313695][ T28] audit: type=1400 audit(1777119832.139:479): avc: denied { map } for pid=1666 comm="syz.3.437" path="pipe:[22414]" dev="pipefs" ino=22414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 71.360069][ T28] audit: type=1400 audit(1777119832.139:480): avc: denied { execute } for pid=1666 comm="syz.3.437" path="pipe:[22414]" dev="pipefs" ino=22414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 71.423060][ T1673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.435583][ T1679] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 71.438174][ T1673] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.476679][ T1679] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 71.477220][ T988] kworker/u4:6: attempt to access beyond end of device [ 71.477220][ T988] loop5: rw=1, sector=31064, nr_sectors = 2736 limit=256 [ 71.539461][ T1673] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.440: No space for directory leaf checksum. Please run e2fsck -D. [ 71.622427][ T1673] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.440: checksumming directory block 0 [ 71.637719][ T1673] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.440: No space for directory leaf checksum. Please run e2fsck -D. [ 71.669282][ T1673] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.440: checksumming directory block 0 [ 71.682649][ T28] audit: type=1400 audit(1777119833.279:481): avc: denied { create } for pid=1691 comm="syz.2.446" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.728733][ T28] audit: type=1400 audit(1777119833.299:482): avc: denied { read write } for pid=1691 comm="syz.2.446" name="file1" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.770048][ T1695] netlink: 68 bytes leftover after parsing attributes in process `syz.5.445'. [ 71.788370][ T1695] SELinux: failed to load policy [ 72.196420][ T1673] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.440: No space for directory leaf checksum. Please run e2fsck -D. [ 72.216668][ T1673] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.440: checksumming directory block 0 [ 72.230126][ T1698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 72.274714][ T285] EXT4-fs (loop0): unmounting filesystem. [ 72.334350][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 72.508788][ T1668] loop4: detected capacity change from 0 to 131072 [ 72.533454][ T1668] F2FS-fs (loop4): invalid crc value [ 72.585000][ T1668] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.615635][ T1708] loop0: detected capacity change from 0 to 40427 [ 72.623946][ T349] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.642416][ T1708] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 72.654027][ T1708] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 72.661547][ T1715] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 72.673914][ T1668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.683161][ T1715] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 72.705842][ T1708] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.798042][ T1721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 72.804912][ T1708] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 72.823925][ T1708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.833904][ T349] usb 4-1: Using ep0 maxpacket: 16 [ 72.855410][ T349] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 72.869424][ T349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.890198][ T349] usb 4-1: config 1 has no interface number 0 [ 72.906156][ T285] syz-executor: attempt to access beyond end of device [ 72.906156][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.934027][ T349] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 72.963916][ T349] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.994263][ T349] usb 4-1: config 1 interface 105 has no altsetting 0 [ 73.008386][ T349] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 73.033907][ T349] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 73.053914][ T349] usb 4-1: Product: syz [ 73.063929][ T349] usb 4-1: Manufacturer: syz [ 73.070910][ T349] usb 4-1: SerialNumber: syz [ 73.135672][ T1735] loop0: detected capacity change from 0 to 256 [ 73.146100][ T1737] loop4: detected capacity change from 0 to 512 [ 73.180949][ T1737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c028, mo2=0002] [ 73.189193][ T1737] System zones: 1-12 [ 73.194215][ T316] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.204367][ T1737] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.463: bg 0: block 288: padding at end of block bitmap is not set [ 73.237817][ T1737] EXT4-fs (loop4): Remounting filesystem read-only [ 73.245969][ T1737] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 73.255356][ T1737] EXT4-fs (loop4): Remounting filesystem read-only [ 73.262175][ T1737] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.463: attempt to clear invalid blocks 1024 len 1 [ 73.275627][ T1737] EXT4-fs (loop4): Remounting filesystem read-only [ 73.282354][ T1737] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.463: invalid indirect mapped block 1819239214 (level 0) [ 73.299734][ T349] aqc111: probe of 4-1:1.105 failed with error -22 [ 73.306727][ T1737] EXT4-fs (loop4): Remounting filesystem read-only [ 73.329631][ T1737] EXT4-fs (loop4): 1 truncate cleaned up [ 73.335537][ T1737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.415287][ T1711] loop5: detected capacity change from 0 to 131072 [ 73.428065][ T1711] F2FS-fs (loop5): invalid crc value [ 73.491917][ T1753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 73.494572][ T1711] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.513883][ T349] usb 4-1: USB disconnect, device number 3 [ 73.531440][ T1760] loop0: detected capacity change from 0 to 512 [ 73.556481][ T286] EXT4-fs (loop4): unmounting filesystem. [ 73.559674][ T1760] EXT4-fs: dax option not supported [ 73.588189][ T1711] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 73.634584][ T1711] netlink: 'syz.5.453': attribute type 5 has an invalid length. [ 73.645677][ T1711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.453'. [ 73.650268][ T1774] loop0: detected capacity change from 0 to 1024 [ 73.661433][ T1774] EXT4-fs: Ignoring removed bh option [ 73.692460][ T1774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.744450][ T285] EXT4-fs (loop0): unmounting filesystem. [ 73.986217][ T1777] loop4: detected capacity change from 0 to 40427 [ 73.996342][ T1777] F2FS-fs (loop4): invalid crc value [ 74.022843][ T1777] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 74.054732][ T1787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 74.079582][ T1777] F2FS-fs (loop4): Start checkpoint disabled! [ 74.087336][ T1777] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 74.111820][ T1777] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 74.429226][ T1817] input: syz1 as /devices/virtual/input/input7 [ 75.727084][ T1826] netlink: 68 bytes leftover after parsing attributes in process `syz.2.492'. [ 76.222799][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 76.265419][ T1833] loop4: detected capacity change from 0 to 256 [ 76.292492][ T1802] loop0: detected capacity change from 0 to 40427 [ 76.302701][ T1833] exfat: Unknown parameter 'time_uffset' [ 76.322151][ T1802] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 76.342017][ T1802] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.365945][ T1802] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.377406][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 76.377420][ T28] audit: type=1400 audit(1777119837.969:493): avc: denied { listen } for pid=1832 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.468508][ T1802] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.476203][ T1802] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.545993][ T1859] xt_hashlimit: size too large, truncated to 1048576 [ 76.623723][ T1863] netlink: 68 bytes leftover after parsing attributes in process `syz.3.506'. [ 76.639379][ T1863] loop3: detected capacity change from 0 to 256 [ 76.785772][ T1863] FAT-fs (loop3): Directory bread(block 64) failed [ 76.792412][ T1863] FAT-fs (loop3): Directory bread(block 65) failed [ 76.799104][ T1863] FAT-fs (loop3): Directory bread(block 66) failed [ 76.805695][ T1863] FAT-fs (loop3): Directory bread(block 67) failed [ 76.812334][ T1863] FAT-fs (loop3): Directory bread(block 68) failed [ 76.818912][ T1863] FAT-fs (loop3): Directory bread(block 69) failed [ 76.825724][ T1863] FAT-fs (loop3): Directory bread(block 70) failed [ 76.832288][ T1863] FAT-fs (loop3): Directory bread(block 71) failed [ 76.838942][ T1863] FAT-fs (loop3): Directory bread(block 72) failed [ 76.845525][ T1863] FAT-fs (loop3): Directory bread(block 73) failed [ 76.907415][ T1863] SELinux: failed to load policy [ 78.451548][ T1871] netlink: 68 bytes leftover after parsing attributes in process `syz.4.507'. [ 78.690451][ T1871] loop4: detected capacity change from 0 to 256 [ 78.731060][ T1871] FAT-fs (loop4): Directory bread(block 64) failed [ 78.737781][ T1871] FAT-fs (loop4): Directory bread(block 65) failed [ 78.744499][ T1871] FAT-fs (loop4): Directory bread(block 66) failed [ 78.751312][ T1871] FAT-fs (loop4): Directory bread(block 67) failed [ 78.757983][ T1871] FAT-fs (loop4): Directory bread(block 68) failed [ 78.764556][ T1871] FAT-fs (loop4): Directory bread(block 69) failed [ 78.771208][ T1871] FAT-fs (loop4): Directory bread(block 70) failed [ 78.777783][ T1871] FAT-fs (loop4): Directory bread(block 71) failed [ 78.784441][ T1871] FAT-fs (loop4): Directory bread(block 72) failed [ 78.791010][ T1871] FAT-fs (loop4): Directory bread(block 73) failed [ 78.932242][ T1869] SELinux: failed to load policy [ 78.958777][ T1878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 79.023573][ T1885] loop3: detected capacity change from 0 to 512 [ 79.068654][ T1895] loop5: detected capacity change from 0 to 512 [ 79.079924][ T28] audit: type=1400 audit(1777119840.669:494): avc: denied { read } for pid=1891 comm="syz.0.515" path="socket:[23185]" dev="sockfs" ino=23185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.115930][ T1885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.116042][ T1895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.125283][ T1885] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.135540][ T1895] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.155463][ T1895] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 79.159253][ T1885] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 79.174726][ T767] EXT4-fs (loop5): unmounting filesystem. [ 79.182798][ T283] EXT4-fs (loop3): unmounting filesystem. [ 79.240198][ T1908] loop5: detected capacity change from 0 to 512 [ 79.241384][ T1909] netlink: 'syz.4.520': attribute type 4 has an invalid length. [ 79.249574][ T1913] loop3: detected capacity change from 0 to 512 [ 79.257404][ T1908] EXT4-fs: Ignoring removed bh option [ 79.280045][ T1913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.385765][ T1913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.402250][ T1920] loop0: detected capacity change from 0 to 1024 [ 80.409315][ T1913] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.558947][ T1920] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.582584][ T1920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.642974][ T28] audit: type=1400 audit(1777119842.179:495): avc: denied { append } for pid=1910 comm="syz.3.518" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.666240][ T1908] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.675518][ T1908] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 80.704657][ T1920] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.522: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 80.749288][ T1927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 80.754262][ T1920] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.522: couldn't read orphan inode 11 (err -117) [ 80.779502][ T1920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.787013][ T1936] netlink: 92 bytes leftover after parsing attributes in process `syz.2.525'. [ 80.797559][ T28] audit: type=1400 audit(1777119842.389:496): avc: denied { create } for pid=1910 comm="syz.3.518" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 81.063517][ T28] audit: type=1400 audit(1777119842.649:497): avc: denied { append } for pid=1940 comm="syz.2.530" name="file0" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.086253][ T1941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 81.096334][ T283] EXT4-fs (loop3): unmounting filesystem. [ 81.114325][ T285] EXT4-fs (loop0): unmounting filesystem. [ 81.131691][ T1949] fuse: Bad value for 'fd' [ 81.175093][ T28] audit: type=1400 audit(1777119842.769:498): avc: denied { mounton } for pid=1950 comm="syz.0.527" path="/proc/246/task" dev="proc" ino=23830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 81.241109][ T28] audit: type=1400 audit(1777119842.829:499): avc: denied { ioctl } for pid=1952 comm="syz.2.533" path="socket:[23287]" dev="sockfs" ino=23287 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.248033][ T1959] loop0: detected capacity change from 0 to 256 [ 81.288079][ T1959] FAT-fs (loop0): Directory bread(block 64) failed [ 81.294771][ T1959] FAT-fs (loop0): Directory bread(block 65) failed [ 81.301400][ T1959] FAT-fs (loop0): Directory bread(block 66) failed [ 81.308574][ T1959] FAT-fs (loop0): Directory bread(block 67) failed [ 81.315655][ T1959] FAT-fs (loop0): Directory bread(block 68) failed [ 81.322293][ T1959] FAT-fs (loop0): Directory bread(block 69) failed [ 81.328958][ T1959] FAT-fs (loop0): Directory bread(block 70) failed [ 81.335553][ T1959] FAT-fs (loop0): Directory bread(block 71) failed [ 81.342160][ T1959] FAT-fs (loop0): Directory bread(block 72) failed [ 81.348735][ T1959] FAT-fs (loop0): Directory bread(block 73) failed [ 81.409756][ T1962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 81.423886][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.200707][ T1969] loop0: detected capacity change from 0 to 40427 [ 85.219661][ T1969] F2FS-fs (loop0): fault_injection options not supported [ 85.231226][ T1969] F2FS-fs (loop0): invalid crc value [ 85.389779][ T1969] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.475046][ T1969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.490402][ T28] audit: type=1400 audit(1777119847.079:500): avc: denied { create } for pid=1977 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 85.543164][ T28] audit: type=1400 audit(1777119847.109:501): avc: denied { write } for pid=1977 comm="syz.3.539" path="socket:[23317]" dev="sockfs" ino=23317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 85.575295][ T1981] loop5: detected capacity change from 0 to 256 [ 85.664375][ T1981] FAT-fs (loop5): Directory bread(block 64) failed [ 85.671176][ T1981] FAT-fs (loop5): Directory bread(block 65) failed [ 85.678128][ T1981] FAT-fs (loop5): Directory bread(block 66) failed [ 85.684892][ T1981] FAT-fs (loop5): Directory bread(block 67) failed [ 85.691464][ T1981] FAT-fs (loop5): Directory bread(block 68) failed [ 85.698582][ T1981] FAT-fs (loop5): Directory bread(block 69) failed [ 86.434168][ T285] syz-executor: attempt to access beyond end of device [ 86.434168][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.463066][ T1990] loop4: detected capacity change from 0 to 512 [ 86.497070][ T1981] FAT-fs (loop5): Directory bread(block 70) failed [ 86.585730][ T1981] FAT-fs (loop5): Directory bread(block 71) failed [ 86.592640][ T1981] FAT-fs (loop5): Directory bread(block 72) failed [ 86.599383][ T1981] FAT-fs (loop5): Directory bread(block 73) failed [ 86.678707][ T1990] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.793966][ T24] usb 4-1: device not accepting address 4, error -71 [ 86.850768][ T988] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.916353][ T2000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 86.937683][ T1998] loop4: detected capacity change from 0 to 2048 [ 86.984355][ T1998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.993601][ T2004] loop3: detected capacity change from 0 to 512 [ 87.011472][ T1998] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 87.034301][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.052302][ T2004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.085248][ T2004] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.549: bad orphan inode 131083 [ 87.104088][ T2004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.173473][ T2017] overlayfs: failed to clone upperpath [ 87.249731][ T2028] loop0: detected capacity change from 0 to 512 [ 87.251520][ T2030] netlink: 'syz.2.558': attribute type 7 has an invalid length. [ 87.259552][ T2028] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.273905][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 87.275595][ T2030] netlink: 'syz.2.558': attribute type 8 has an invalid length. [ 87.280818][ T28] audit: type=1400 audit(1777119848.849:502): avc: denied { write } for pid=2003 comm="syz.3.549" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 87.325469][ T39] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 87.328462][ T28] audit: type=1400 audit(1777119848.849:503): avc: denied { open } for pid=2003 comm="syz.3.549" path="/103/bus/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 87.340675][ T39] usb 6-1: config 0 has no interface number 0 [ 87.363147][ T39] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 87.370722][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 87.373950][ T39] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.393438][ T2035] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 87.402704][ T39] usb 6-1: config 0 interface 196 has no altsetting 0 [ 87.406400][ T2035] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 87.425271][ T39] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 87.426223][ T28] audit: type=1400 audit(1777119849.019:504): avc: denied { mount } for pid=2027 comm="syz.0.557" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.438259][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.464770][ T39] usb 6-1: Product: syz [ 87.469356][ T39] usb 6-1: Manufacturer: syz [ 87.469451][ T2028] VFS: Mount too revealing [ 87.474086][ T39] usb 6-1: SerialNumber: syz [ 87.491803][ T39] usb 6-1: config 0 descriptor?? [ 87.502975][ T1981] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 87.518535][ T285] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 87.529516][ T285] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 87.546901][ T2049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 87.558525][ T2049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.589869][ T28] audit: type=1326 audit(1777119849.179:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2050 comm="syz.2.566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7e079cdd9 code=0x0 [ 87.715632][ T1981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.729384][ T1981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.737170][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.738663][ T28] audit: type=1400 audit(1777119849.339:506): avc: denied { mounton } for pid=1980 comm="syz.5.541" path="/61/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 87.767531][ T8] ------------[ cut here ]------------ [ 87.773029][ T8] kernel BUG at fs/ext4/inode.c:2761! [ 87.785626][ T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 87.785799][ T39] ipheth 6-1:0.196: Unable to find endpoints [ 87.791726][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 87.804988][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.815059][ T8] Workqueue: writeback wb_workfn (flush-7:4) [ 87.821057][ T8] RIP: 0010:ext4_writepages+0x30c2/0x30e0 [ 87.826792][ T8] Code: a7 84 ff 84 db 75 31 e8 9c a4 84 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 10 4c 8b 6c 24 40 e9 08 d3 ff ff e8 7e a4 84 ff <0f> 0b e8 77 a4 84 ff e8 de aa 13 ff eb 93 e8 6b a4 84 ff e8 d2 aa [ 87.846402][ T8] RSP: 0018:ffffc90000087100 EFLAGS: 00010293 [ 87.852474][ T8] RAX: ffffffff81ecd202 RBX: 000000c410000000 RCX: ffff888100298000 [ 87.860532][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 87.868499][ T8] RBP: ffffc90000087470 R08: ffff88813940786f R09: 1ffff11027280f0d [ 87.876470][ T8] R10: dffffc0000000000 R11: ffffed1027280f0e R12: dffffc0000000000 [ 87.884441][ T8] R13: ffff888119eb2000 R14: 0000008000000000 R15: 1ffff92000010e4c [ 87.892414][ T8] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 87.901338][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.907929][ T8] CR2: 0000000000000000 CR3: 0000000121716000 CR4: 00000000003506b0 [ 87.915899][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.923866][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.931842][ T8] Call Trace: [ 87.935134][ T8] [ 87.938081][ T8] ? enqueue_task_fair+0xbee/0x1d40 [ 87.943289][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 87.948611][ T8] ? __cfi____update_load_sum+0x10/0x10 [ 87.954175][ T8] ? __cfi____update_load_sum+0x10/0x10 [ 87.959727][ T8] ? enqueue_task_fair+0xbee/0x1d40 [ 87.964925][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 87.970215][ T8] do_writepages+0x3a4/0x5f0 [ 87.974830][ T8] ? update_load_avg+0x4bf/0x13f0 [ 87.979860][ T8] ? __cfi_do_writepages+0x10/0x10 [ 87.984967][ T8] ? kvm_sched_clock_read+0x18/0x40 [ 87.990171][ T8] ? sched_clock+0x9/0x10 [ 87.994501][ T8] ? sched_clock_cpu+0x6e/0x260 [ 87.999403][ T8] ? __kasan_check_write+0x14/0x20 [ 88.004512][ T8] ? _raw_spin_lock+0x94/0xf0 [ 88.009189][ T8] __writeback_single_inode+0xc6/0xad0 [ 88.014652][ T8] ? inode_io_list_move_locked+0x366/0x3d0 [ 88.020457][ T8] writeback_sb_inodes+0xa10/0x15d0 [ 88.025656][ T8] ? unwind_next_frame+0x3d5/0x700 [ 88.030765][ T8] ? queue_io+0x4c0/0x4c0 [ 88.035099][ T8] ? __kasan_check_read+0x11/0x20 [ 88.040123][ T8] ? queue_io+0x382/0x4c0 [ 88.044466][ T8] wb_writeback+0x40b/0x9d0 [ 88.048991][ T8] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 88.054992][ T8] ? set_worker_desc+0x1ba/0x1f0 [ 88.059957][ T8] ? __kasan_check_write+0x14/0x20 [ 88.065075][ T8] ? kvm_sched_clock_read+0x18/0x40 [ 88.070276][ T8] ? sched_clock+0x9/0x10 [ 88.074606][ T8] ? sched_clock_cpu+0x6e/0x260 [ 88.079455][ T8] wb_workfn+0x378/0xeb0 [ 88.083702][ T8] ? __cfi_wb_workfn+0x10/0x10 [ 88.088463][ T8] ? kthread_data+0x50/0xc0 [ 88.092963][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 88.097809][ T8] ? finish_task_switch+0x16b/0x7b0 [ 88.103035][ T8] ? __switch_to_asm+0x3a/0x60 [ 88.107807][ T8] ? __schedule+0xbae/0x1500 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.112395][ T8] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 88.117943][ T8] process_one_work+0x71f/0xc40 [ 88.122799][ T8] worker_thread+0xa29/0x11e0 [ 88.127476][ T8] kthread+0x281/0x320 [ 88.131568][ T8] ? __cfi_worker_thread+0x10/0x10 [ 88.136680][ T8] ? __cfi_kthread+0x10/0x10 [ 88.141273][ T8] ret_from_fork+0x1f/0x30 [ 88.145691][ T8] [ 88.148710][ T8] Modules linked in: [ 88.208903][ T28] audit: type=1400 audit(1777119849.749:507): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14588]" dev="pipefs" ino=14588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 88.217629][ T8] ---[ end trace 0000000000000000 ]--- [ 88.251609][ T8] RIP: 0010:ext4_writepages+0x30c2/0x30e0 [ 88.263954][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 88.264174][ T8] Code: a7 84 ff 84 db 75 31 e8 9c a4 84 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 10 4c 8b 6c 24 40 e9 08 d3 ff ff e8 7e a4 84 ff <0f> 0b e8 77 a4 84 ff e8 de aa 13 ff eb 93 e8 6b a4 84 ff e8 d2 aa [ 88.324342][ T8] RSP: 0018:ffffc90000087100 EFLAGS: 00010293 [ 88.330524][ T8] RAX: ffffffff81ecd202 RBX: 000000c410000000 RCX: ffff888100298000 [ 88.338820][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 88.348428][ T8] RBP: ffffc90000087470 R08: ffff88813940786f R09: 1ffff11027280f0d [ 88.356702][ T8] R10: dffffc0000000000 R11: ffffed1027280f0e R12: dffffc0000000000 [ 88.365444][ T8] R13: ffff888119eb2000 R14: 0000008000000000 R15: 1ffff92000010e4c [ 88.373475][ T8] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.390809][ T24] usb 4-1: device descriptor read/all, error -71 [ 88.399997][ T2004] EXT4-fs (loop3): unmounting filesystem. [ 88.405776][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.412386][ T8] CR2: 000055b5a89d7af8 CR3: 000000010ffdb000 CR4: 00000000003506a0 [ 88.421780][ T24] usb usb4-port1: attempt power cycle [ 88.427649][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.436230][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.448460][ T8] Kernel panic - not syncing: Fatal exception [ 88.454663][ T8] Kernel Offset: disabled [ 88.458980][ T8] Rebooting in 86400 seconds..