last executing test programs: 1m25.956237095s ago: executing program 0 (id=389): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0x67, 0x0, 0xfd, 0x6, 0x0, @empty, @remote}, {{0x0, 0x4e25, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x8, 0xfffc, 0x0, 0x0, {[@eol]}}, {"97f4ca28843054380b05f94bfa9aebe45ee0a223164d59e7c7b76d2f14d41c43326eb49b46f410074bd8d6d3f319c42cee677f3940e222d0d1f29f295ad308f4f24d3e457e0000000000e008"}}}}}}, 0x0) 1m24.192108577s ago: executing program 0 (id=396): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@empty, 0x4a, 0x1, 0x2, 0x0, 0x8, 0x7ee}, 0x20) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=@ethtool_sset_info={0x37, 0x7, 0x3, [0x7a8, 0x1, 0x9, 0x44b, 0x3, 0x3, 0xe6, 0xffa, 0x7]}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000008, &(0x7f0000000540)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@shortname_mixed}, {@numtail}, {@fat=@gid}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@rodir}, {@shortname_lower}, {@shortname_win95}, {@fat=@nocase}, {@fat=@errors_remount}]}, 0x1, 0x36a, &(0x7f0000001840)="$eJzs3U9oY0UYAPAvfWnSXdD2JgpC9CZo2e5NL7ZIFxZ7UQn+OYjB7aokVWix2B62rQfFo+BRT94U9OBBPIqgiDcPXl1BVsWD7m3BxZHkvSSvSdrtLnal+PtBk+nMfDPf+0PyGl6mLyxG+8J0XLx69UrMzFSiuvjYYlyrxFxk0bcb42oT6gCAk+FaSvFnyo22zUwOqdyGtACAY9R7/38pIhoxl9e8+fVh/ZN3fwA48Yq//08d1ueAzwEiXjuWlACAYzb2+f/9+5prvZ9q/9dq6a4AAOCkeurZ5x5fWol4stGYiVh7e7O52YxHhu1LF+OV6MRqnInZuB6RXyh0Hyq9x3PnV5bPNBqNnfhlLpoRMVUENvMrhaWsF1+PhZiNuSK+uNpIKWXnPltZXmj0RMTuTm/+WKtsNqfjdDH/j6djdXjh0R+k9xRxfmX5bKMYoLnWj9+J2BveqNDNfz5m4/sXB8Ok1L+DcWX50kI/6WH8ZrMeFwZ74cBPQAAAAAAAAAAAAAAAAAAAAAAA4JbMNwbmBuvnpO5zvlLO/PyE9t76OHl8sT7QXr4+UKqnSOmPNx5qvpPFvvWBRtfn2bSQIAAAAAAAAAAAAAAAAAAAAAxsbNWi1emsrm9sbbfLhZ31ja2piOjWvPrtJ1+divE+NyhU8ynqEYMpGsW02+1WyvqdUxYxHp51J+/XfPT5IONyn/pgKyamUT+4qdO5476f3x/W3Jv1R/572CeLyRuYldJ4dGTktTvzlG5mRw0KZ8s19fHZL6eUSjVvlcMvPT8+YFQiqjd/4LbbU3Fwn9QtfHPl5bv7e7/1Zco98ODs05ff+/C3dqvTnTl6R7C2vnE9tVuVfucjzF4Ml3qHYHhuVCIvVMpnQvWwAff217SyH35/5p53vzvaTkjlmte75/NInyzfnE9Hw2t5oZvmSNOpYfh0sRGd1ekJJ/+NCrdwTO/64IuPU/rp1yNPMTQ19rJR+XdefQAAAAAAAAAAAAAAAAAAgLLSd8ULxZd9pw+LeviJ488MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6f4f//LxX2dmOk5iiFv3YmRNVX1zciav/1ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/3TwAAAP//D7VfEw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") 1m23.332624006s ago: executing program 0 (id=399): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6000000, 0xffffffffffffffff, 0x6}, 0x70) 1m23.174178339s ago: executing program 0 (id=400): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) fremovexattr(r7, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$eJzs3W1rZFcdAPD/vcnsZndTM1WRtWBbbGVXdGeSxrZBpF1B9FVBre/XmExCyCQTMpO6CUVT/ACCiAp+AN8IfgBB+hFEKOh7UVHEbvWl7pU7c6NJZiaZTSaZNPn94GTOuQ/nf84lc+c+HO4N4Mp6PiLuR8RYRHw2IqaK6WmRYreT8uU+ePT2Qp6SyLI3/5FEUkzbqysvj0fErWK1iYj45tcivpN0x21u76zO1+u1zaJcba1tVJvbO/dW1uaXa8u19dnZmVfmXp17eW46K5yqn+WIeO0rf/nJD3/x1dd+8/nv/vHB3+5+L2/Wlz7RaXdELAxQzdiTxu3UXWpviz35Ntp80oousLw/pSfeMgAAjEJ+jP/RiPh0+/h/KsbaR3MAAADAZZK9Phn/TiIyAAAA4NJKI2IykrRSjAWYjDStVDpjeD8eN9N6o9n63FJja30xnxdRjlK6tFKvTRdjhctRSvLyTDHGdq/80qHybEQ8HRE/nrrRLlcWGvXFUV/8AAAAgCvi1nMHz///NZW2893uT5574wAAAIDhKfctAAAAAJeFU34AAAC4/Jz/AwAAwKX29TfeyFO29x7vxbe2t1Ybb91brDVXK2tbC5WFxuZGZbnRWG4/s2/tuPrqjcbGF2J962G1VWu2qs3tnQdrja311oOVA6/ABgAAAM7R08+9+4ckIna/eKOdongOIMABfx51A4BhGht1A4CRGR91A4CRKR27RO89xI0zaAswGskx87sH7xR7gN+eTXsAAIDhu/PJ7vv/14p5x18bAD7MjPUBgKvH/X+4ukonHQF4e9gtAUblI52P6/3m9314xwD3/zvXGLLsRA0DAACGZrKdkrRSHKdPRppWKhFPtV8LUEqWVuq16eL84PdTpet5eaa9ZnLsmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCPLksgAAACASy0i/WvSfpp/xJ2pFycPXh049Navn7/504fzrdbmTMS15P2pfNK1iGj9rJj+UuaVAAAAAHABdM7T43oU5/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEwfPHp7YS+dZ9y/fzkiyr3ij8dE+3MiShFx859JjO9bL4mIsSHE330nIm73ip/E4yzLykUresW/ccbxy+1N0zt+GhG3hhAfrrJ38/3P/V7fvzSeb3/2/v6NF+m0+u//0v/t/8b67H+eOlTu55n3flXtG/+diGfGe+9/9uInnfgHQuSFFwbs47e/tbPTc8a+KnvF3x+r2lrbqDa3d+6trM0v15Zr67OzM6/MvTr38tx0dWmlXiv+9gzzo0/9+vFR/b/ZJ375YP+7tv+LA/U+i/+89/DRxzqFUq/4d1/o/ft7u0/8tPjt+0yRz+ff2cvvdvL7PfvL3z17VP8Xe/c/mTim/3cH6n+8n33jB3/qOadrawAA56G5vbM6X6/XNo/ITAywzDlnXr8YzRhiJi5GM0aVyb7f+X88XT2nXL0rk51m9fEYQjOudX1Px+KkFSYRu3ldA/5DAgAAl8z/D/qPuoMEAAAAAAAAAAAAAAAAAAAAnKUTPpZsIiIGXvhwzN3RdBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA//9kR9Lv") r9 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) clock_adjtime(0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008e04"]) 1m22.830269466s ago: executing program 0 (id=402): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000009b80)=ANY=[@ANYBLOB='iocharset=macromanian,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1521, &(0x7f0000007640)="$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") (fail_nth: 61) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d8500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={{}, {r3, r4/1000+10000}}, 0x100) 1m22.172763599s ago: executing program 0 (id=406): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x101ff, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x1, 0x3, 0xf8, 0x5, 0x49, 0x3ff, 0x5, 0x3, 0x9, 0x8, 0x7, 0x69, 0x1000000003, 0xfffffffffffffffe, 0x2, 0x6, 0x27, 0x96, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6, 0x6, 0x5, 0x0, 0x3, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xffffffff, 0x2, 0x2, 0x40, 0x0, 0x9, 0x200000000000101, 0x2, 0x9, 0x66, 0x0, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfbfffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xfffffffffffffffc, 0x2, 0xfffffffffffffff9, 0x2, 0x5, 0x10fff, 0x6, 0x4, 0x9, 0x5, 0x0, 0x4, 0xfff, 0x5, 0x9, 0x8000, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x6, 0x200, 0x7, 0xe53f, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x3, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0xc6, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0xf, 0xfffffffffffffffe, 0xb692, 0x3ffc00003, 0xb, 0xe]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@nobh}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrquota}, {@user_xattr}]}, 0x3, 0x4e1, &(0x7f0000000a00)="$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") pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x8, 0x0, 0x180, 0x4, 0x2, 0xf1, 0x36fb, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x3, 0xbdb], 0xffff1001, 0x120182}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x43403d0e, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xfffffd, 0x68ff, 0x3, 0x9, 0x4, 0x3], 0x1, 0xa02}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m22.076456887s ago: executing program 32 (id=406): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x101ff, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x8, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x1, 0x3, 0xf8, 0x5, 0x49, 0x3ff, 0x5, 0x3, 0x9, 0x8, 0x7, 0x69, 0x1000000003, 0xfffffffffffffffe, 0x2, 0x6, 0x27, 0x96, 0xffffffff, 0x4, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6, 0x6, 0x5, 0x0, 0x3, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xffffffff, 0x2, 0x2, 0x40, 0x0, 0x9, 0x200000000000101, 0x2, 0x9, 0x66, 0x0, 0x7, 0x40000045, 0x6, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfbfffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xfffffffffffffffc, 0x2, 0xfffffffffffffff9, 0x2, 0x5, 0x10fff, 0x6, 0x4, 0x9, 0x5, 0x0, 0x4, 0xfff, 0x5, 0x9, 0x8000, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x2000000000003, 0xfffffffffffffffb, 0xf6, 0x8, 0x6, 0x200, 0x7, 0xe53f, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xfd1, 0x3, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0xc6, 0x8, 0x0, 0x53e0f0fe, 0xeb4, 0xf, 0xfffffffffffffffe, 0xb692, 0x3ffc00003, 0xb, 0xe]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@nobh}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrquota}, {@user_xattr}]}, 0x3, 0x4e1, &(0x7f0000000a00)="$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") pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x8, 0x0, 0x180, 0x4, 0x2, 0xf1, 0x36fb, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x3, 0xbdb], 0xffff1001, 0x120182}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x43403d0e, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xfffffd, 0x68ff, 0x3, 0x9, 0x4, 0x3], 0x1, 0xa02}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.845715411s ago: executing program 1 (id=710): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x542, 0x0) pwrite64(r0, &(0x7f00000002c0)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) fallocate(r0, 0x3, 0x5000024, 0xffff) 1.713211602s ago: executing program 1 (id=711): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000003c0)=0x5c) 1.635909138s ago: executing program 1 (id=712): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xe100, 0x0) 1.625197199s ago: executing program 1 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000005, 0x8, 0x40, 0x1, 0x5479, 0x1037, 0x100000000a, 0x0, 0x51, 0x0, 0x100000002, 0x1, 0x9, 0x5, 0x800000006a], 0x100000, 0x1c6202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.570649923s ago: executing program 3 (id=715): openat(0xffffffffffffff9c, 0x0, 0x197343, 0x122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) 1.554597175s ago: executing program 1 (id=716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 1.494850439s ago: executing program 1 (id=717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) unshare(0x68040200) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x100, 0x4, 0x0, 0x4, 0x0, 0xfffffffe, 0xa9, 0x2, 0x5, 0x4, 0x1000}) 1.342382022s ago: executing program 2 (id=720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.311862174s ago: executing program 2 (id=724): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0x10, 0x80002, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.260981418s ago: executing program 2 (id=725): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x141840, 0x9c37611dc13d0d83) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) fchown(r0, 0xffffffffffffffff, 0x0) 1.260710358s ago: executing program 2 (id=726): mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x200060000000000, 0x1000000000, 0x0, 0x41, 0x200002000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.170576346s ago: executing program 5 (id=730): syz_mount_image$exfat(0x0, &(0x7f0000000480)='./file0\x00', 0x3a6b407, 0x0, 0x0, 0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000001240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) 1.145723377s ago: executing program 5 (id=731): r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) 1.134796868s ago: executing program 2 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f22110f8800000f21003e0fc71df30fc770040f20e06635040000000f22e0ba6100b8ef00ef0f320f01c330b90e00"}], 0xaaaaaaaaaaaac71, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.093869792s ago: executing program 2 (id=733): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000d3b77402000000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.042774576s ago: executing program 5 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) 1.042620486s ago: executing program 5 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) chmod(0x0, 0x48) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x3, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x800000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0xda}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000002280)=""/4054, 0xfd6, 0xd33) 1.042443666s ago: executing program 5 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000001040)=ANY=[]) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000012c0)=0x80000001, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000000940)="2b20322a4843b397737ea49da6aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 948.498703ms ago: executing program 5 (id=737): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x0, 0x0, 0x5, "40820c9a95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 726.508691ms ago: executing program 3 (id=738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810410, &(0x7f00000016c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES8, @ANYRESDEC, @ANYRES8=r3, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES8=r2], 0x2, 0x1d6, &(0x7f0000000200)="$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") 653.140247ms ago: executing program 3 (id=739): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) 652.976218ms ago: executing program 3 (id=740): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000280)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 575.717304ms ago: executing program 3 (id=741): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000010c0)='./file0\x00', 0x800, &(0x7f0000001040)={[{@errors_remount}, {@bsdgroups}, {@oldalloc}, {@minixdf}, {@nojournal_checksum}, {@quota}, {@noauto_da_alloc}, {@grpquota}]}, 0x2, 0x46b, &(0x7f0000001100)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000006c0)={0x9b38, 0xb9ce, 0x1, 0x5}) 528.883267ms ago: executing program 3 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x107) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040890) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 370.77074ms ago: executing program 4 (id=743): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x6, @private=0xa010102, 0x4e20, 0x1, 'rr\x00', 0xa, 0xffffced9, 0xd77}, 0x2c) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 267.168939ms ago: executing program 4 (id=744): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000003900)={0x2020}, 0x2020) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 167.805806ms ago: executing program 4 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x81, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0xe, 0x9, 0xa, 0x5, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x3, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8001, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.04467ms ago: executing program 4 (id=746): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 571.86µs ago: executing program 4 (id=747): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="76329e147583ddd056dba56a5c1c3dd8", 0x0, 0xfffffe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x5) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r8) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x140010000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r9, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) 0s ago: executing program 4 (id=748): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000000)='./file2\x00', 0x149) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x24008800) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) kernel console output (not intermixed with test programs): 142.931583][ T1816] EXT4-fs (loop1): 1 truncate cleaned up [ 142.937312][ T1816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.059296][ T1816] netlink: 'syz.1.338': attribute type 27 has an invalid length. [ 143.158717][ T1379] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 143.312554][ T1816] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.319813][ T1816] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.456725][ T1379] usb 4-1: Using ep0 maxpacket: 16 [ 143.468418][ T1379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 143.498275][ T1379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.583654][ T1855] fuse: Unknown parameter '‘w#n' [ 143.605533][ T1379] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 143.659327][ T28] audit: type=1400 audit(1754863206.930:841): avc: denied { mounton } for pid=1845 comm="syz.2.350" path="/64/file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 143.694630][ T1816] device vlan1 left promiscuous mode [ 143.742998][ T1816] device macsec1 left promiscuous mode [ 143.771979][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.788030][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.795129][ T1835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.811916][ T1379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.817188][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.825163][ T1379] usb 4-1: config 0 descriptor?? [ 143.826972][ T1835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.850076][ T1835] device veth0_vlan left promiscuous mode [ 143.856481][ T1835] device veth0_vlan entered promiscuous mode [ 143.864548][ T1835] device veth1_macvtap left promiscuous mode [ 143.872489][ T1835] device veth1_macvtap entered promiscuous mode [ 143.881765][ T1854] loop4: detected capacity change from 0 to 256 [ 143.899850][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.912223][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.927439][ T1854] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 143.940254][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.948835][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.958824][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.967680][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.976282][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.984904][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.993327][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.002007][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.010485][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.018835][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 144.027054][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.035416][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 144.043628][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.052047][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.063300][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.075630][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.087736][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.236207][ T1379] playstation 0003:054C:0DF2.000F: item fetching failed at offset 4/5 [ 144.244633][ T1379] playstation 0003:054C:0DF2.000F: Parse failed [ 144.251098][ T1379] playstation: probe of 0003:054C:0DF2.000F failed with error -22 [ 144.341318][ T28] audit: type=1400 audit(1754863207.690:842): avc: denied { mount } for pid=1861 comm="syz.2.351" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.441193][ T288] usb 4-1: USB disconnect, device number 10 [ 144.468598][ T285] EXT4-fs (loop1): unmounting filesystem. [ 144.629048][ T1873] loop0: detected capacity change from 0 to 512 [ 144.655475][ T1873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.665640][ T1873] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.665808][ T28] audit: type=1400 audit(1754863208.020:843): avc: denied { create } for pid=1867 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 144.711055][ T283] EXT4-fs (loop0): unmounting filesystem. [ 144.907066][ T1881] loop0: detected capacity change from 0 to 512 [ 144.930676][ T1881] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.942778][ T1881] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.356: bg 0: block 248: padding at end of block bitmap is not set [ 144.977725][ T1881] Quota error (device loop0): write_blk: dquota write failed [ 144.985312][ T1881] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 144.995465][ T1881] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.356: Failed to acquire dquot type 1 [ 145.007623][ T1881] EXT4-fs (loop0): 1 truncate cleaned up [ 145.013649][ T1881] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.861657][ T283] EXT4-fs (loop0): unmounting filesystem. [ 145.886543][ T28] audit: type=1400 audit(1754863209.230:844): avc: denied { getopt } for pid=1898 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.199471][ T1843] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.389185][ T1843] usb 1-1: device descriptor read/64, error -71 [ 146.475158][ T1915] loop2: detected capacity change from 0 to 512 [ 146.482348][ T1915] EXT4-fs: journaled quota format not specified [ 146.495649][ T1906] loop3: detected capacity change from 0 to 40427 [ 146.536343][ T1916] loop1: detected capacity change from 0 to 4096 [ 146.615879][ T1916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.752800][ T1924] loop2: detected capacity change from 0 to 256 [ 146.760681][ T1924] exfat: Deprecated parameter 'utf8' [ 146.766151][ T1924] exfat: Deprecated parameter 'utf8' [ 146.772994][ T1843] usb 1-1: device descriptor read/64, error -71 [ 146.791511][ T1924] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 146.899200][ T28] audit: type=1400 audit(1754863210.210:845): avc: denied { accept } for pid=1913 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.009907][ T28] audit: type=1400 audit(1754863210.360:846): avc: denied { read } for pid=1927 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.040637][ T28] audit: type=1400 audit(1754863210.360:847): avc: denied { write } for pid=1927 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.096213][ T1926] loop4: detected capacity change from 0 to 40427 [ 147.107241][ T1926] F2FS-fs (loop4): invalid crc value [ 147.166102][ T1933] loop3: detected capacity change from 0 to 256 [ 147.172781][ T1933] /dev/loop3: Can't open blockdev [ 147.183072][ T1926] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.221280][ T1843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 147.298847][ T1933] loop3: detected capacity change from 0 to 512 [ 147.305379][ T1933] /dev/loop3: Can't open blockdev [ 147.459590][ T1933] ipt_REJECT: TCP_RESET invalid for non-tcp [ 147.585606][ T285] EXT4-fs (loop1): unmounting filesystem. [ 147.673387][ T1926] F2FS-fs (loop4): Start checkpoint disabled! [ 147.754859][ T1926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 148.066088][ T1940] loop1: detected capacity change from 0 to 256 [ 148.076173][ T1940] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.097274][ T1940] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 148.427971][ T1940] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 148.519205][ T1843] usb 1-1: device descriptor read/64, error -71 [ 148.764201][ T1955] loop3: detected capacity change from 0 to 4096 [ 148.803644][ T1955] /dev/loop3: Can't open blockdev [ 149.097124][ T1972] netlink: 'syz.0.382': attribute type 11 has an invalid length. [ 149.276186][ T1976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 149.299226][ T1976] netlink: 'syz.2.380': attribute type 2 has an invalid length. [ 149.380170][ T28] audit: type=1400 audit(1754863212.730:848): avc: denied { block_suspend } for pid=1978 comm="syz.0.383" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.847904][ T1981] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 149.920151][ T1981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.044393][ T28] audit: type=1400 audit(1754863213.390:849): avc: denied { ioctl } for pid=1983 comm="syz.2.384" path="socket:[21305]" dev="sockfs" ino=21305 ioctlcmd=0x4812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.127882][ T1989] loop2: detected capacity change from 0 to 512 [ 150.149174][ T28] audit: type=1400 audit(1754863213.430:850): avc: denied { write } for pid=1978 comm="syz.0.383" name="fib_triestat" dev="proc" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 150.173020][ T1989] EXT4-fs: Ignoring removed nobh option [ 150.190354][ T1989] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 150.209475][ T1989] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.386: attempt to clear invalid blocks 1 len 1 [ 150.224108][ T1989] EXT4-fs (loop2): Remounting filesystem read-only [ 150.230967][ T1989] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 150.246802][ T1989] EXT4-fs (loop2): Remounting filesystem read-only [ 150.253414][ T1989] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.386: invalid indirect mapped block 1819239214 (level 0) [ 150.267531][ T1989] EXT4-fs (loop2): Remounting filesystem read-only [ 150.279507][ T1989] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.386: invalid indirect mapped block 1819239214 (level 1) [ 150.293612][ T1989] EXT4-fs (loop2): Remounting filesystem read-only [ 150.300476][ T1989] EXT4-fs (loop2): 1 truncate cleaned up [ 150.306176][ T1989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.382271][ T1995] loop1: detected capacity change from 0 to 256 [ 150.388910][ T1995] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.406674][ T1995] FAT-fs (loop1): Directory bread(block 64) failed [ 150.413288][ T1995] FAT-fs (loop1): Directory bread(block 65) failed [ 150.420043][ T1995] FAT-fs (loop1): Directory bread(block 66) failed [ 150.426552][ T1995] FAT-fs (loop1): Directory bread(block 67) failed [ 150.434059][ T1995] FAT-fs (loop1): Directory bread(block 68) failed [ 150.441356][ T1995] FAT-fs (loop1): Directory bread(block 69) failed [ 150.447890][ T1995] FAT-fs (loop1): Directory bread(block 70) failed [ 150.454849][ T1995] FAT-fs (loop1): Directory bread(block 71) failed [ 150.461402][ T1995] FAT-fs (loop1): Directory bread(block 72) failed [ 150.467926][ T1995] FAT-fs (loop1): Directory bread(block 73) failed [ 150.578738][ T2015] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.386: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 150.669527][ T2015] EXT4-fs (loop2): Remounting filesystem read-only [ 150.989952][ T286] EXT4-fs (loop2): unmounting filesystem. [ 151.032407][ T28] audit: type=1400 audit(1754863214.380:851): avc: denied { read write } for pid=2022 comm="syz.2.391" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 151.414009][ T28] audit: type=1400 audit(1754863214.380:852): avc: denied { open } for pid=2022 comm="syz.2.391" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 151.438092][ T28] audit: type=1400 audit(1754863214.380:853): avc: denied { read } for pid=2022 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.352583][ T383] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.387037][ T28] audit: type=1400 audit(1754863215.320:854): avc: denied { create } for pid=2029 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.599171][ T2039] netlink: 96 bytes leftover after parsing attributes in process `syz.3.394'. [ 152.619310][ T28] audit: type=1400 audit(1754863215.350:855): avc: denied { setopt } for pid=2029 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.736882][ T2043] loop0: detected capacity change from 0 to 256 [ 152.777962][ T2043] FAT-fs (loop0): Directory bread(block 64) failed [ 152.784532][ T2043] FAT-fs (loop0): Directory bread(block 65) failed [ 152.791073][ T2043] FAT-fs (loop0): Directory bread(block 66) failed [ 152.797579][ T2043] FAT-fs (loop0): Directory bread(block 67) failed [ 152.804133][ T2043] FAT-fs (loop0): Directory bread(block 68) failed [ 152.810654][ T2043] FAT-fs (loop0): Directory bread(block 69) failed [ 152.817177][ T2043] FAT-fs (loop0): Directory bread(block 70) failed [ 152.823693][ T2043] FAT-fs (loop0): Directory bread(block 71) failed [ 152.830244][ T2043] FAT-fs (loop0): Directory bread(block 72) failed [ 152.836749][ T2043] FAT-fs (loop0): Directory bread(block 73) failed [ 152.875605][ T2030] loop1: detected capacity change from 0 to 40427 [ 152.954686][ T2030] F2FS-fs (loop1): invalid crc value [ 152.970686][ T2030] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.045771][ T2030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.353031][ T2055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=2055 comm=syz.3.398 [ 153.669184][ T1859] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 153.690994][ T2059] loop0: detected capacity change from 0 to 512 [ 153.729151][ T2059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.749227][ T2059] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 153.796822][ T2059] loop0: detected capacity change from 0 to 512 [ 153.821993][ T2059] EXT4-fs (loop0): 1 orphan inode deleted [ 153.827825][ T2059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.837148][ T2059] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.847848][ T377] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 153.857654][ T377] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 153.870904][ T1859] usb 2-1: not running at top speed; connect to a high speed hub [ 153.889523][ T1859] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.898529][ T1859] usb 2-1: config 1 has no interface number 1 [ 153.912355][ T1859] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.921458][ T1859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.929511][ T1859] usb 2-1: Product: syz [ 153.933718][ T1859] usb 2-1: Manufacturer: syz [ 153.938328][ T1859] usb 2-1: SerialNumber: syz [ 153.964001][ T2063] loop4: detected capacity change from 0 to 40427 [ 153.976441][ T2063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.998371][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.025623][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.044584][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.056579][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.084810][ T2063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.090047][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.120072][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.131677][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.167509][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.187833][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.200458][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.224107][ T1859] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 154.230264][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.249885][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.250823][ T1859] usb 2-1: USB disconnect, device number 11 [ 154.267315][ T283] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /86/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 154.299628][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.307063][ T2080] syz.4.401: attempt to access beyond end of device [ 154.307063][ T2080] loop4: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 154.311700][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.336283][ T2080] syz.4.401: attempt to access beyond end of device [ 154.336283][ T2080] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 154.338835][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.359211][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 154.362310][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.367631][ T1441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.379543][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.420917][ T2080] syz.4.401: attempt to access beyond end of device [ 154.420917][ T2080] loop4: rw=2049, sector=57344, nr_sectors = 744 limit=40427 [ 154.440532][ T283] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 154.519699][ T2086] bridge: RTM_NEWNEIGH with invalid ether address [ 154.526573][ T1417] udevd[1417]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.543962][ T377] tipc: Left network mode [ 154.548847][ T283] EXT4-fs (loop0): unmounting filesystem. [ 154.558638][ T634] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.571160][ T28] audit: type=1400 audit(1754863217.920:856): avc: denied { getopt } for pid=2081 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.610356][ T2063] syz.4.401: attempt to access beyond end of device [ 154.610356][ T2063] loop4: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 154.624519][ T2063] syz.4.401: attempt to access beyond end of device [ 154.624519][ T2063] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 154.638033][ T2063] syz.4.401: attempt to access beyond end of device [ 154.638033][ T2063] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 154.651586][ T2063] syz.4.401: attempt to access beyond end of device [ 154.651586][ T2063] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 154.676558][ T2063] syz.4.401: attempt to access beyond end of device [ 154.676558][ T2063] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 154.702662][ T28] audit: type=1400 audit(1754863218.050:857): avc: denied { create } for pid=2081 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.719326][ T2063] syz.4.401: attempt to access beyond end of device [ 154.719326][ T2063] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 154.759642][ T2080] syz.4.401: attempt to access beyond end of device [ 154.759642][ T2080] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 154.919094][ T28] audit: type=1400 audit(1754863218.260:858): avc: denied { mounton } for pid=2092 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 155.093231][ T2092] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.108282][ T2092] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.126098][ T2092] device bridge_slave_0 entered promiscuous mode [ 155.206987][ T2092] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.253072][ T2084] loop3: detected capacity change from 0 to 40427 [ 155.284751][ T2092] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.372505][ T2092] device bridge_slave_1 entered promiscuous mode [ 155.523599][ T377] device bridge_slave_1 left promiscuous mode [ 155.536780][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.570942][ T377] device bridge_slave_0 left promiscuous mode [ 155.588056][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.613244][ T377] device veth1_macvtap left promiscuous mode [ 155.628966][ T377] device veth0_vlan left promiscuous mode [ 155.761734][ T2108] device wireguard0 entered promiscuous mode [ 156.357185][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.367920][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.388731][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.482154][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.526789][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.533886][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.646724][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 156.655602][ T2129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 156.681873][ T2129] device wireguard0 entered promiscuous mode [ 156.698677][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.753494][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.773407][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.791879][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.798945][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.825208][ T2123] loop4: detected capacity change from 0 to 40427 [ 156.839485][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.854786][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.875525][ T2123] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.883899][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.898582][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.920395][ T2092] device veth0_vlan entered promiscuous mode [ 156.931769][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.942921][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.966145][ T2092] device veth1_macvtap entered promiscuous mode [ 156.976730][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.984477][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.991765][ T2123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.012011][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.020318][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.028525][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.051096][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.065854][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.089902][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.106992][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.136088][ T28] audit: type=1400 audit(1754863220.480:859): avc: denied { mounton } for pid=2092 comm="syz-executor" path="/root/syzkaller.d9OCLM/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 157.174809][ T2142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 157.183668][ T28] audit: type=1400 audit(1754863220.510:860): avc: denied { mount } for pid=2092 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.209254][ T28] audit: type=1400 audit(1754863220.510:861): avc: denied { mounton } for pid=2092 comm="syz-executor" path="/root/syzkaller.d9OCLM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 157.236376][ T28] audit: type=1400 audit(1754863220.510:862): avc: denied { mounton } for pid=2092 comm="syz-executor" path="/root/syzkaller.d9OCLM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 157.256145][ T2153] netlink: 'syz.5.419': attribute type 16 has an invalid length. [ 157.264407][ T28] audit: type=1400 audit(1754863220.510:863): avc: denied { mounton } for pid=2092 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 157.284239][ T2154] x_tables: duplicate underflow at hook 1 [ 157.295219][ T28] audit: type=1400 audit(1754863220.510:864): avc: denied { mounton } for pid=2092 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 157.325246][ T2153] overlayfs: null uuid detected in lower fs '/syz5', falling back to xino=off,index=off,nfs_export=off. [ 157.344341][ T28] audit: type=1400 audit(1754863220.680:865): avc: denied { write } for pid=2141 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.345788][ T2142] netlink: 'syz.1.417': attribute type 8 has an invalid length. [ 157.372711][ T2153] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 157.774272][ T2159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.894811][ T2151] loop1: detected capacity change from 0 to 40427 [ 157.922512][ T2151] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.974784][ T2151] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.155633][ T2177] input: syz1 as /devices/virtual/input/input21 [ 158.189966][ T2177] loop2: detected capacity change from 0 to 2048 [ 158.518703][ T2177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 158.541748][ T2185] loop4: detected capacity change from 0 to 128 [ 159.043972][ T286] EXT4-fs (loop2): unmounting filesystem. [ 159.095723][ T28] audit: type=1400 audit(1754863222.440:866): avc: denied { mount } for pid=2193 comm="syz.4.431" name="/" dev="ramfs" ino=21961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 159.196901][ T28] audit: type=1400 audit(1754863222.540:867): avc: denied { bind } for pid=2202 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.364037][ T2198] loop2: detected capacity change from 0 to 40427 [ 159.471724][ T2212] loop1: detected capacity change from 0 to 512 [ 159.521929][ T2198] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 159.597739][ T2198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 159.642643][ T2212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.651990][ T2212] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.866971][ T2198] F2FS-fs (loop2): invalid crc value [ 160.051749][ T2198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.513619][ T285] EXT4-fs (loop1): unmounting filesystem. [ 160.551687][ T2215] overlayfs: failed to resolve './file1': -2 [ 160.557907][ T2222] loop1: detected capacity change from 0 to 256 [ 160.569639][ T2222] FAT-fs (loop1): Unrecognized mount option "˙˙0xffffffffffffffff˙" or missing value [ 160.582801][ T28] audit: type=1400 audit(1754863223.930:868): avc: denied { mounton } for pid=2205 comm="syz.4.434" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 160.591064][ T2223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.632873][ T2198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 160.641268][ T2198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.649778][ T1417] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.677444][ T2222] loop1: detected capacity change from 0 to 128 [ 160.677489][ T1417] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.701527][ T2222] FAT-fs (loop1): Unrecognized mount option "esefree" or missing value [ 160.955290][ T2235] loop4: detected capacity change from 0 to 512 [ 161.025645][ T2235] EXT4-fs: Ignoring removed i_version option [ 161.123049][ T2235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.152051][ T2235] EXT4-fs (loop4): 1 truncate cleaned up [ 161.162215][ T2235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 161.369312][ T2239] loop1: detected capacity change from 0 to 512 [ 161.397568][ T2239] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.434902][ T2239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.463515][ T2239] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 163.118938][ T2250] random: crng reseeded on system resumption [ 163.130963][ T28] audit: type=1400 audit(1754863225.110:869): avc: denied { append } for pid=2247 comm="syz.3.443" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.311112][ T28] audit: type=1400 audit(1754863226.460:870): avc: denied { remount } for pid=2243 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 163.389171][ T28] audit: type=1400 audit(1754863226.460:871): avc: denied { ioctl } for pid=2243 comm="syz.5.442" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.611123][ T28] audit: type=1400 audit(1754863226.960:872): avc: denied { execute_no_trans } for pid=2256 comm="syz.3.445" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.816548][ T2265] loop5: detected capacity change from 0 to 512 [ 163.817347][ T2265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.817364][ T2265] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.866162][ T2265] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 163.885285][ T2265] EXT4-fs warning (device loop5): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.900400][ T2265] EXT4-fs (loop5): mount failed [ 163.909207][ T288] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.077681][ T287] EXT4-fs (loop4): unmounting filesystem. [ 164.119201][ T288] usb 3-1: Using ep0 maxpacket: 8 [ 164.120614][ T288] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.121317][ T288] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 28453, setting to 1024 [ 164.121345][ T288] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 164.121367][ T288] usb 3-1: config 12 interface 0 has no altsetting 0 [ 164.122770][ T288] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 164.122795][ T288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.122814][ T288] usb 3-1: Product: syz [ 164.122828][ T288] usb 3-1: Manufacturer: syz [ 164.122841][ T288] usb 3-1: SerialNumber: syz [ 164.146396][ T2263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.222098][ T2274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.411878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 164.413125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 164.514232][ T288] usb 3-1: selecting invalid altsetting 0 [ 164.522838][ T288] usb 3-1: USB disconnect, device number 12 [ 164.687798][ T2290] loop5: detected capacity change from 0 to 4096 [ 164.697866][ T2290] EXT4-fs (loop5): Test dummy encryption mode enabled [ 164.774943][ T2293] loop3: detected capacity change from 0 to 256 [ 164.797640][ T2290] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.873124][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.070454][ T439] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.205424][ T2298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.441705][ T2304] syz.2.457[2304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.441775][ T2304] syz.2.457[2304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.453834][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 166.472928][ T2304] syz.2.457[2304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.472999][ T2304] syz.2.457[2304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.566637][ T439] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.623423][ T439] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.677030][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.685410][ T439] usb 2-1: SerialNumber: syz [ 167.160067][ T2321] device bridge0 entered promiscuous mode [ 167.165854][ T2321] device macsec1 entered promiscuous mode [ 167.172063][ T2321] bridge0: port 3(macsec1) entered blocking state [ 167.178512][ T2321] bridge0: port 3(macsec1) entered disabled state [ 167.185760][ T2321] device bridge0 left promiscuous mode [ 167.261337][ T2316] loop5: detected capacity change from 0 to 40427 [ 167.299595][ T344] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.483635][ T28] audit: type=1401 audit(1754863230.810:873): op=setxattr invalid_context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loop5: detected capacity change from 0 to 256 [ 167.699610][ T2335] FAT-fs (loop5): Unrecognized mount option "sśortname=win95" or missing value [ 167.777826][ T2339] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 167.815804][ T2335] xt_bpf: check failed: parse error [ 167.827380][ T439] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 167.839254][ T439] usb 2-1: USB disconnect, device number 12 [ 167.888923][ T2332] loop2: detected capacity change from 0 to 40427 [ 167.910958][ T2332] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.951455][ T2332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.022671][ T2338] loop3: detected capacity change from 0 to 40427 [ 168.196445][ T2349] loop5: detected capacity change from 0 to 512 [ 168.204660][ T2349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.216615][ T2349] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.223454][ T2349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.309758][ T2349] EXT4-fs (loop5): 1 truncate cleaned up [ 168.315489][ T2349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.923471][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 169.954577][ T2332] bio_check_eod: 5072 callbacks suppressed [ 169.954591][ T2332] syz.2.465: attempt to access beyond end of device [ 169.954591][ T2332] loop2: rw=2049, sector=77824, nr_sectors = 3896 limit=40427 [ 169.978289][ T2332] syz.2.465: attempt to access beyond end of device [ 169.978289][ T2332] loop2: rw=2049, sector=81720, nr_sectors = 200 limit=40427 [ 170.000872][ T2332] syz.2.465: attempt to access beyond end of device [ 170.000872][ T2332] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 170.035903][ T2332] syz.2.465: attempt to access beyond end of device [ 170.035903][ T2332] loop2: rw=2049, sector=57344, nr_sectors = 496 limit=40427 [ 170.051595][ T2348] syz.2.465: attempt to access beyond end of device [ 170.051595][ T2348] loop2: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 170.069438][ T2348] syz.2.465: attempt to access beyond end of device [ 170.069438][ T2348] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 170.138148][ T2363] loop1: detected capacity change from 0 to 512 [ 170.149677][ T2348] syz.2.465: attempt to access beyond end of device [ 170.149677][ T2348] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 170.222633][ T2363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 170.231174][ T2348] syz.2.465: attempt to access beyond end of device [ 170.231174][ T2348] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 170.260231][ T2363] System zones: 1-12 [ 170.266742][ T2363] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.473: corrupted in-inode xattr [ 170.280237][ T2363] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.473: couldn't read orphan inode 15 (err -117) [ 170.348156][ T2348] syz.2.465: attempt to access beyond end of device [ 170.348156][ T2348] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 170.348244][ T2363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.361796][ T2348] syz.2.465: attempt to access beyond end of device [ 170.361796][ T2348] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 170.505518][ T285] EXT4-fs (loop1): unmounting filesystem. [ 170.727172][ T2353] loop4: detected capacity change from 0 to 40427 [ 170.773562][ T2353] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.924283][ T2353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.924897][ T28] audit: type=1400 audit(1754863234.270:874): avc: denied { unmount } for pid=2092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 170.957715][ T1843] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.978178][ T102] udevd[102]: worker [1417] terminated by signal 33 (Unknown signal 33) [ 170.994715][ T102] udevd[102]: worker [1417] failed while handling '/devices/virtual/block/loop4' [ 171.080772][ T28] audit: type=1400 audit(1754863234.430:875): avc: denied { setopt } for pid=2379 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.113399][ T2380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 171.149241][ T1843] usb 2-1: Using ep0 maxpacket: 8 [ 171.155335][ T1843] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 171.174582][ T1843] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 171.189185][ T1843] usb 2-1: config 0 has no interface number 0 [ 171.199320][ T1843] usb 2-1: config 0 interface 82 altsetting 0 endpoint 0xA has invalid maxpacket 27776, setting to 64 [ 171.224834][ T2384] loop3: detected capacity change from 0 to 512 [ 171.231991][ T1843] usb 2-1: config 0 interface 82 altsetting 0 endpoint 0x8 has invalid maxpacket 4128, setting to 64 [ 171.239903][ T2376] mmap: syz.5.477 (2376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.244216][ T1843] usb 2-1: config 0 interface 82 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.265285][ T2384] /dev/loop3: Can't open blockdev [ 171.336678][ T1843] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=3b.be [ 171.356273][ T1843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.364555][ T1843] usb 2-1: Product: syz [ 171.368789][ T1843] usb 2-1: Manufacturer: syz [ 171.373552][ T1843] usb 2-1: SerialNumber: syz [ 171.381477][ T1843] usb 2-1: config 0 descriptor?? [ 171.381560][ T344] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.402496][ T1843] rtl8150 2-1:0.82: couldn't find required endpoints [ 171.418986][ T1843] rtl8150: probe of 2-1:0.82 failed with error -5 [ 171.529221][ T28] audit: type=1400 audit(1754863234.800:876): avc: denied { connect } for pid=2385 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.655593][ T1843] usb 2-1: USB disconnect, device number 13 [ 171.660955][ T28] audit: type=1400 audit(1754863234.800:877): avc: denied { write } for pid=2385 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.701367][ T2392] loop3: detected capacity change from 0 to 128 [ 171.730535][ T344] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.740679][ T28] audit: type=1400 audit(1754863235.090:878): avc: denied { watch watch_reads } for pid=2391 comm="syz.3.481" path="/104" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 172.276731][ T2399] loop5: detected capacity change from 0 to 40427 [ 172.291392][ T2399] F2FS-fs (loop5): Found nat_bits in checkpoint [ 172.331278][ T2399] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.499209][ T1848] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.735102][ T2423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.844019][ T1848] usb 5-1: Using ep0 maxpacket: 16 [ 172.861295][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 172.892710][ T1848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.925146][ T1848] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 172.939158][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.959913][ T1848] usb 5-1: config 0 descriptor?? [ 173.007311][ T2421] loop3: detected capacity change from 0 to 40427 [ 173.308805][ T1843] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 173.371865][ T1848] playstation 0003:054C:0DF2.0010: item fetching failed at offset 4/5 [ 173.381288][ T1848] playstation 0003:054C:0DF2.0010: Parse failed [ 173.387691][ T1848] playstation: probe of 0003:054C:0DF2.0010 failed with error -22 [ 173.465918][ T2431] loop2: detected capacity change from 0 to 512 [ 173.473079][ T2431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.521415][ T2431] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.528239][ T2431] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.590513][ T1843] usb 4-1: not running at top speed; connect to a high speed hub [ 173.600173][ T1843] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.730392][ T1843] usb 4-1: config 1 has no interface number 1 [ 173.744915][ T2431] EXT4-fs (loop2): 1 truncate cleaned up [ 173.750781][ T2431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.902573][ T1843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.986253][ T1843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.025838][ T1843] usb 4-1: Product: syz [ 174.046643][ T1843] usb 4-1: Manufacturer: syz [ 174.071398][ T1843] usb 4-1: SerialNumber: syz [ 174.187869][ T1848] usb 5-1: USB disconnect, device number 12 [ 174.220908][ T2429] loop5: detected capacity change from 0 to 40427 [ 174.238518][ T2429] F2FS-fs (loop5): invalid crc value [ 174.253509][ T2429] F2FS-fs (loop5): Found nat_bits in checkpoint [ 174.293119][ T2429] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 174.349269][ T1844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 174.363363][ T286] EXT4-fs (loop2): unmounting filesystem. [ 174.461066][ T1843] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 174.471889][ T1843] usb 4-1: USB disconnect, device number 11 [ 174.528106][ T2447] overlayfs: './file0' not a directory [ 174.534969][ T1844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.546251][ T1844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.556026][ T1844] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.565403][ T1844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.582306][ T1844] usb 2-1: config 0 descriptor?? [ 174.609206][ T1379] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 174.821134][ T1379] usb 6-1: not running at top speed; connect to a high speed hub [ 174.831148][ T1379] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.840506][ T1379] usb 6-1: config 1 has no interface number 1 [ 174.850968][ T1844] usbhid 2-1:0.0: can't add hid device: -71 [ 174.857067][ T1844] usbhid: probe of 2-1:0.0 failed with error -71 [ 174.864056][ T1379] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.879094][ T1844] usb 2-1: USB disconnect, device number 14 [ 174.881435][ T2456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 174.885327][ T1379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.894232][ T2456] device bridge_slave_1 left promiscuous mode [ 174.906799][ T1379] usb 6-1: Product: syz [ 174.908218][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.912290][ T1379] usb 6-1: Manufacturer: syz [ 174.923984][ T1379] usb 6-1: SerialNumber: syz [ 174.924209][ T2456] device bridge_slave_0 left promiscuous mode [ 174.934893][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.212633][ T2466] loop3: detected capacity change from 0 to 512 [ 175.222595][ T2466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.230659][ T2466] /dev/loop3: Can't open blockdev [ 175.792451][ T102] udevd[102]: worker [757] terminated by signal 33 (Unknown signal 33) [ 176.146716][ T102] udevd[102]: worker [757] failed while handling '/devices/virtual/block/loop3' [ 176.179987][ T2480] tmpfs: Unknown parameter 'nr_inxdes' [ 176.236597][ T1379] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 176.255288][ T1379] usb 6-1: USB disconnect, device number 2 [ 176.271319][ T28] audit: type=1400 audit(1754863239.620:879): avc: denied { ioctl } for pid=2486 comm="syz.3.507" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 176.361695][ T2488] loop1: detected capacity change from 0 to 512 [ 176.369795][ T2488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.378682][ T2488] EXT4-fs (loop1): Test dummy encryption mode enabled [ 176.385567][ T2488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.500938][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.568027][ T2488] EXT4-fs (loop1): 1 truncate cleaned up [ 176.573777][ T2488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.236806][ T28] audit: type=1400 audit(1754863240.580:880): avc: denied { bind } for pid=2490 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.265011][ T2495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 177.287469][ T285] EXT4-fs (loop1): unmounting filesystem. [ 177.464386][ T28] audit: type=1400 audit(1754863240.580:881): avc: denied { connect } for pid=2490 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.513580][ T2493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 177.546364][ T2469] loop4: detected capacity change from 0 to 40427 [ 177.580765][ T2506] netlink: 80 bytes leftover after parsing attributes in process `syz.2.513'. [ 177.688845][ T2508] loop1: detected capacity change from 0 to 256 [ 177.718175][ T2508] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 178.006345][ T2508] 9pnet_fd: Insufficient options for proto=fd [ 178.019991][ T2508] ipt_REJECT: TCP_RESET invalid for non-tcp [ 178.134935][ T2469] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.539218][ T2469] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.578077][ T102] udevd[102]: worker [344] terminated by signal 33 (Unknown signal 33) [ 178.596522][ T102] udevd[102]: worker [344] failed while handling '/devices/virtual/block/loop4' [ 178.989698][ T2527] device bridge0 entered promiscuous mode [ 178.995815][ T2527] device macsec1 entered promiscuous mode [ 179.006470][ T2527] bridge0: port 3(macsec1) entered blocking state [ 179.012983][ T2527] bridge0: port 3(macsec1) entered disabled state [ 179.274517][ T2527] device bridge0 left promiscuous mode [ 179.420764][ T28] audit: type=1400 audit(1754863242.770:882): avc: denied { validate_trans } for pid=2534 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.115128][ T2545] overlayfs: unrecognized mount option "fsmagic=0x00000000e0000000" or missing value [ 180.669417][ T28] audit: type=1400 audit(1754863243.110:883): avc: denied { mounton } for pid=2536 comm="syz.2.521" path="/98/file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 180.719195][ T1844] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.728766][ T2552] loop1: detected capacity change from 0 to 512 [ 180.731901][ T2550] fuse: Unknown parameter 'I۱Ţ\6El#ő?˙$MKöíĽÓs‚ľ˘Í/¤¨Ně?©ŮĺČ}jĚFÉoŽ sv§$Ýľľăvś鿾0x0000000000000004' [ 180.735865][ T28] audit: type=1400 audit(1754863244.070:884): avc: denied { ioctl } for pid=2549 comm="syz.5.524" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 180.771928][ T2552] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 180.782177][ T287] bio_check_eod: 7234 callbacks suppressed [ 180.782190][ T287] syz-executor: attempt to access beyond end of device [ 180.782190][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.800293][ T2550] loop5: detected capacity change from 0 to 1024 [ 180.809481][ T2550] EXT4-fs: Ignoring removed i_version option [ 180.815773][ T2552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 180.840602][ T2552] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.525: corrupted in-inode xattr [ 180.845196][ T2550] EXT4-fs (loop5): Test dummy encryption mode enabled [ 180.859396][ T2552] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.525: couldn't read orphan inode 15 (err -117) [ 180.873997][ T2552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.892647][ T285] EXT4-fs (loop1): unmounting filesystem. [ 180.898100][ T2556] loop2: detected capacity change from 0 to 1024 [ 180.918977][ T2550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 180.928979][ T2559] input: syz1 as /devices/virtual/input/input22 [ 180.938693][ T2556] EXT4-fs: Ignoring removed nobh option [ 180.948772][ T1844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.959405][ T2556] EXT4-fs: Ignoring removed bh option [ 180.969337][ T1844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.982058][ T2559] loop1: detected capacity change from 0 to 2048 [ 181.004447][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 181.010282][ T1844] usb 4-1: Product: syz [ 181.010998][ T2556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.014453][ T1844] usb 4-1: Manufacturer: syz [ 181.028504][ T1844] usb 4-1: SerialNumber: syz [ 181.043704][ T2559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.171112][ T28] audit: type=1400 audit(1754863244.520:885): avc: denied { create } for pid=2568 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 182.232372][ T28] audit: type=1400 audit(1754863245.570:886): avc: denied { append } for pid=2555 comm="syz.2.527" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.293518][ T285] EXT4-fs (loop1): unmounting filesystem. [ 182.416407][ T286] EXT4-fs (loop2): unmounting filesystem. [ 182.604307][ T2597] loop2: detected capacity change from 0 to 1024 [ 182.616258][ T2597] EXT4-fs: Ignoring removed bh option [ 182.634901][ T2597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.742865][ T2596] loop4: detected capacity change from 0 to 40427 [ 182.753400][ T2596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.797230][ T2596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.089173][ T712] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 183.123881][ T2596] syz.4.536: attempt to access beyond end of device [ 183.123881][ T2596] loop4: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 183.142155][ T2596] syz.4.536: attempt to access beyond end of device [ 183.142155][ T2596] loop4: rw=2049, sector=79880, nr_sectors = 2040 limit=40427 [ 183.164721][ T2596] syz.4.536: attempt to access beyond end of device [ 183.164721][ T2596] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 183.190642][ T1844] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 183.198160][ T1844] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 183.201073][ T2610] syz.4.536: attempt to access beyond end of device [ 183.201073][ T2610] loop4: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 183.217757][ T2610] syz.4.536: attempt to access beyond end of device [ 183.217757][ T2610] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 183.231222][ T2610] syz.4.536: attempt to access beyond end of device [ 183.231222][ T2610] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 183.231409][ T2596] syz.4.536: attempt to access beyond end of device [ 183.231409][ T2596] loop4: rw=2049, sector=57344, nr_sectors = 13976 limit=40427 [ 183.244683][ T2610] syz.4.536: attempt to access beyond end of device [ 183.244683][ T2610] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 183.292087][ T2611] syz.4.536: attempt to access beyond end of device [ 183.292087][ T2611] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 183.305525][ T712] usb 2-1: Using ep0 maxpacket: 16 [ 183.311838][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 183.329226][ T712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.346028][ T712] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 183.355219][ T712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.371176][ T712] usb 2-1: config 0 descriptor?? [ 183.395935][ T1844] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 183.423143][ T28] audit: type=1400 audit(1754863246.770:887): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.431368][ T1844] usb 4-1: USB disconnect, device number 12 [ 183.460909][ T28] audit: type=1400 audit(1754863246.770:888): avc: denied { read } for pid=141 comm="dhcpcd" name="n16" dev="tmpfs" ino=6516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.493358][ T1844] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 183.520269][ T28] audit: type=1400 audit(1754863246.770:889): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.544301][ T286] EXT4-fs (loop2): unmounting filesystem. [ 183.550970][ T28] audit: type=1400 audit(1754863246.770:890): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.574546][ T28] audit: type=1400 audit(1754863246.870:891): avc: denied { read } for pid=2614 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.601233][ T28] audit: type=1400 audit(1754863246.870:892): avc: denied { open } for pid=2614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.626435][ T28] audit: type=1400 audit(1754863246.870:893): avc: denied { getattr } for pid=2614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.682242][ T28] audit: type=1400 audit(1754863246.990:894): avc: denied { write } for pid=2613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.705803][ T28] audit: type=1400 audit(1754863246.990:895): avc: denied { add_name } for pid=2613 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.799395][ T712] playstation 0003:054C:0DF2.0011: item fetching failed at offset 4/5 [ 183.818271][ T712] playstation 0003:054C:0DF2.0011: Parse failed [ 183.824774][ T712] playstation: probe of 0003:054C:0DF2.0011 failed with error -22 [ 183.889207][ T221] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.010131][ T2646] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 184.089211][ T221] usb 3-1: Using ep0 maxpacket: 16 [ 184.122210][ T221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 184.181742][ T221] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.201743][ T221] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 184.213931][ T221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.227291][ T221] usb 3-1: config 0 descriptor?? [ 184.232872][ T1844] usb 2-1: USB disconnect, device number 15 [ 184.418030][ T2654] loop3: detected capacity change from 0 to 512 [ 184.424719][ T2654] /dev/loop3: Can't open blockdev [ 184.430489][ T2654] netlink: 'syz.3.542': attribute type 13 has an invalid length. [ 184.439385][ T2654] gretap0: refused to change device tx_queue_len [ 184.445922][ T2654] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.663220][ T221] playstation 0003:054C:0DF2.0012: item fetching failed at offset 4/5 [ 184.671600][ T221] playstation 0003:054C:0DF2.0012: Parse failed [ 184.677976][ T221] playstation: probe of 0003:054C:0DF2.0012 failed with error -22 [ 184.867240][ T1844] usb 3-1: USB disconnect, device number 13 [ 184.979192][ T221] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 185.160301][ T221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 1 [ 185.172583][ T221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.182641][ T221] usb 2-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00 [ 185.191706][ T221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.200294][ T221] usb 2-1: config 0 descriptor?? [ 185.436765][ T2672] input: syz1 as /devices/virtual/input/input23 [ 185.461320][ T2672] loop5: detected capacity change from 0 to 2048 [ 185.472436][ T2672] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.439617][ T221] usbhid 2-1:0.0: can't add hid device: -71 [ 186.445784][ T221] usbhid: probe of 2-1:0.0 failed with error -71 [ 186.453404][ T221] usb 2-1: USB disconnect, device number 16 [ 186.654963][ T2689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 187.470955][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 187.909076][ T2695] loop3: detected capacity change from 0 to 512 [ 187.915676][ T2695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.922450][ T2695] /dev/loop3: Can't open blockdev [ 189.620327][ T45] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 189.647176][ T1379] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 189.658074][ T453] Bluetooth: hci0: sending frame failed (-49) [ 189.664218][ T1441] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 189.748901][ T2711] FAULT_INJECTION: forcing a failure. [ 189.748901][ T2711] name failslab, interval 1, probability 0, space 0, times 0 [ 189.770427][ T2713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 189.950097][ T2711] CPU: 1 PID: 2711 Comm: syz.3.559 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 189.959859][ T2711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.969917][ T2711] Call Trace: [ 189.973199][ T2711] [ 189.976140][ T2711] __dump_stack+0x21/0x24 [ 189.980493][ T2711] dump_stack_lvl+0xee/0x150 [ 189.985105][ T2711] ? __cfi_dump_stack_lvl+0x8/0x8 [ 189.990135][ T2711] ? __local_bh_enable_ip+0x6a/0x80 [ 189.995337][ T2711] ? release_sock+0x169/0x1c0 [ 190.000021][ T2711] dump_stack+0x15/0x24 [ 190.004182][ T2711] should_fail_ex+0x3d4/0x520 [ 190.008866][ T2711] __should_failslab+0xac/0xf0 [ 190.013631][ T2711] should_failslab+0x9/0x20 [ 190.018150][ T2711] kmem_cache_alloc_node+0x42/0x340 [ 190.023357][ T2711] ? __alloc_skb+0xea/0x4b0 [ 190.027874][ T2711] __alloc_skb+0xea/0x4b0 [ 190.032207][ T2711] ? netlink_autobind+0x168/0x1a0 [ 190.037244][ T2711] netlink_sendmsg+0x626/0xbc0 [ 190.042025][ T2711] ? __kasan_check_read+0x11/0x20 [ 190.047083][ T2711] ? __cfi_netlink_sendmsg+0x10/0x10 [ 190.052377][ T2711] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 190.058461][ T2711] ? security_socket_sendmsg+0x93/0xb0 [ 190.063935][ T2711] ? __cfi_netlink_sendmsg+0x10/0x10 [ 190.069242][ T2711] ____sys_sendmsg+0x5a9/0x990 [ 190.074039][ T2711] ? __sys_sendmsg_sock+0x40/0x40 [ 190.079084][ T2711] ? import_iovec+0x7c/0xb0 [ 190.083592][ T2711] ___sys_sendmsg+0x21c/0x290 [ 190.088265][ T2711] ? __sys_sendmsg+0x270/0x270 [ 190.093040][ T2711] ? __fdget+0x19c/0x220 [ 190.097294][ T2711] __x64_sys_sendmsg+0x1f0/0x2c0 [ 190.102233][ T2711] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 190.107707][ T2711] ? __kasan_check_write+0x14/0x20 [ 190.112864][ T2711] ? fpregs_restore_userregs+0x128/0x260 [ 190.118517][ T2711] ? switch_fpu_return+0xe/0x10 [ 190.123379][ T2711] x64_sys_call+0x171/0x9a0 [ 190.127919][ T2711] do_syscall_64+0x4c/0xa0 [ 190.132364][ T2711] ? clear_bhb_loop+0x30/0x80 [ 190.137057][ T2711] ? clear_bhb_loop+0x30/0x80 [ 190.141747][ T2711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.147652][ T2711] RIP: 0033:0x7fc512b8ebe9 [ 190.152098][ T2711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.171709][ T2711] RSP: 002b:00007fc513a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.180126][ T2711] RAX: ffffffffffffffda RBX: 00007fc512db5fa0 RCX: 00007fc512b8ebe9 [ 190.188102][ T2711] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000006 [ 190.196078][ T2711] RBP: 00007fc513a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.204055][ T2711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.212031][ T2711] R13: 00007fc512db6038 R14: 00007fc512db5fa0 R15: 00007ffdb64b3aa8 [ 190.220034][ T2711] [ 190.554536][ T1379] usb 3-1: Using ep0 maxpacket: 16 [ 190.561975][ T1379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 190.640718][ T1379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.649830][ T2700] loop5: detected capacity change from 0 to 40427 [ 190.679669][ T2700] F2FS-fs (loop5): invalid crc value [ 190.710886][ T1379] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 190.794678][ T2726] loop3: detected capacity change from 0 to 4096 [ 190.801308][ T2726] /dev/loop3: Can't open blockdev [ 190.939407][ T1379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.984352][ T2700] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.703100][ T2733] tipc: Started in network mode [ 191.755665][ T2733] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 191.840000][ T2733] tipc: Enabled bearer , priority 10 [ 192.549422][ T1379] usb 3-1: config 0 descriptor?? [ 192.555127][ T2740] loop2: detected capacity change from 0 to 1024 [ 192.561528][ T1379] usb 3-1: can't set config #0, error -71 [ 192.568016][ T1379] usb 3-1: USB disconnect, device number 14 [ 192.574284][ T2740] EXT4-fs: Ignoring removed i_version option [ 192.581252][ T2601] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.601829][ T2740] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.680907][ T2740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.808738][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 192.808754][ T28] audit: type=1400 audit(1754863256.150:904): avc: denied { getopt } for pid=2746 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.810400][ T2722] overlayfs: unrecognized mount option "subj_user={#" or missing value [ 192.841619][ T28] audit: type=1326 audit(1754863256.190:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef3d8ebe9 code=0x7ffc0000 [ 192.865804][ T28] audit: type=1326 audit(1754863256.190:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef3d8ebe9 code=0x7ffc0000 [ 192.890307][ T28] audit: type=1326 audit(1754863256.190:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ef3d8ebe9 code=0x7ffc0000 [ 192.913667][ T28] audit: type=1326 audit(1754863256.190:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef3d8ebe9 code=0x7ffc0000 [ 192.937048][ T2747] device sit0 entered promiscuous mode [ 192.945243][ T286] EXT4-fs (loop2): unmounting filesystem. [ 192.956280][ T2747] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 192.959934][ T28] audit: type=1326 audit(1754863256.190:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2738 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef3d8ebe9 code=0x7ffc0000 [ 192.964210][ T2747] netlink: 9 bytes leftover after parsing attributes in process `syz.3.568'. [ 192.987327][ T1859] tipc: Node number set to 4269801491 [ 193.266841][ T28] audit: type=1326 audit(1754863256.300:910): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2751 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4dd8ebe9 code=0x7ffc0000 [ 193.290531][ T28] audit: type=1326 audit(1754863256.300:911): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2751 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4c4dd8ebe9 code=0x7ffc0000 [ 193.314191][ T28] audit: type=1326 audit(1754863256.300:912): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2751 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4dd8ebe9 code=0x7ffc0000 [ 193.548846][ T2763] loop2: detected capacity change from 0 to 512 [ 193.557086][ T2763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.583893][ T2763] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.590772][ T2763] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.796218][ T2763] EXT4-fs (loop2): 1 truncate cleaned up [ 193.802040][ T2763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.544654][ T1859] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.563902][ T2769] fuse: Unknown parameter '01777777777777777777777000000000000000000040000000000000000000000000000000000000004' [ 194.619237][ T286] EXT4-fs (loop2): unmounting filesystem. [ 194.658716][ T2778] syz.2.577 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.691966][ T2766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.574'. [ 194.701809][ T28] audit: type=1400 audit(1754863258.050:913): avc: denied { setopt } for pid=2765 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.729191][ T1859] usb 4-1: Using ep0 maxpacket: 16 [ 194.735416][ T1859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 194.746569][ T1859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.755917][ T2771] loop5: detected capacity change from 0 to 512 [ 194.769163][ T1859] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 194.770723][ T2771] EXT4-fs: dax option not supported [ 194.778270][ T1859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.806657][ T1859] usb 4-1: config 0 descriptor?? [ 194.813281][ T2783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 194.849589][ T2785] loop2: detected capacity change from 0 to 128 [ 194.859687][ T2785] FAT-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 194.914612][ T2785] loop2: detected capacity change from 0 to 128 [ 194.940520][ T2785] FAT-fs (loop2): Unrecognized mount option "dont_measure" or missing value [ 195.298359][ T2793] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.579664][ T2794] netlink: 'syz.5.582': attribute type 3 has an invalid length. [ 195.587806][ T2794] netlink: 'syz.5.582': attribute type 3 has an invalid length. [ 195.980480][ T1859] playstation 0003:054C:0DF2.0013: item fetching failed at offset 4/5 [ 195.988818][ T1859] playstation 0003:054C:0DF2.0013: Parse failed [ 195.995125][ T1859] playstation: probe of 0003:054C:0DF2.0013 failed with error -22 [ 196.004107][ T1859] usb 4-1: USB disconnect, device number 13 [ 196.264226][ T2812] loop5: detected capacity change from 0 to 16 [ 196.493959][ T2814] netlink: 'syz.4.587': attribute type 7 has an invalid length. [ 196.827812][ T2816] FAULT_INJECTION: forcing a failure. [ 196.827812][ T2816] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.840993][ T2816] CPU: 0 PID: 2816 Comm: syz.2.589 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 196.850709][ T2816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.860773][ T2816] Call Trace: [ 196.864053][ T2816] [ 196.866983][ T2816] __dump_stack+0x21/0x24 [ 196.871326][ T2816] dump_stack_lvl+0xee/0x150 [ 196.875941][ T2816] ? __cfi_dump_stack_lvl+0x8/0x8 [ 196.880975][ T2816] ? _parse_integer+0x2a/0x40 [ 196.885660][ T2816] dump_stack+0x15/0x24 [ 196.889824][ T2816] should_fail_ex+0x3d4/0x520 [ 196.894525][ T2816] should_fail+0xb/0x10 [ 196.898683][ T2816] should_fail_usercopy+0x1a/0x20 [ 196.903710][ T2816] _copy_from_user+0x1e/0xc0 [ 196.908303][ T2816] ___sys_sendmsg+0x155/0x290 [ 196.912980][ T2816] ? __sys_sendmsg+0x270/0x270 [ 196.917745][ T2816] ? __kasan_record_aux_stack+0xb6/0xc0 [ 196.923305][ T2816] ? __kasan_check_write+0x14/0x20 [ 196.928420][ T2816] ? proc_fail_nth_write+0x17a/0x1f0 [ 196.933708][ T2816] ? vfs_write+0x9d6/0xca0 [ 196.938136][ T2816] ? __fdget+0x19c/0x220 [ 196.942387][ T2816] __x64_sys_sendmsg+0x1f0/0x2c0 [ 196.947327][ T2816] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 196.952791][ T2816] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 196.958869][ T2816] x64_sys_call+0x171/0x9a0 [ 196.963375][ T2816] do_syscall_64+0x4c/0xa0 [ 196.967800][ T2816] ? clear_bhb_loop+0x30/0x80 [ 196.972481][ T2816] ? clear_bhb_loop+0x30/0x80 [ 196.977164][ T2816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.983057][ T2816] RIP: 0033:0x7f9ef3d8ebe9 [ 196.987473][ T2816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.007080][ T2816] RSP: 002b:00007f9ef4c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.015493][ T2816] RAX: ffffffffffffffda RBX: 00007f9ef3fb6180 RCX: 00007f9ef3d8ebe9 [ 197.023469][ T2816] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 197.031441][ T2816] RBP: 00007f9ef4c61090 R08: 0000000000000000 R09: 0000000000000000 [ 197.039411][ T2816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.047393][ T2816] R13: 00007f9ef3fb6218 R14: 00007f9ef3fb6180 R15: 00007ffc9a66f118 [ 197.055383][ T2816] [ 197.376181][ T2819] loop1: detected capacity change from 0 to 512 [ 197.658083][ T2826] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.861553][ T2819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.870580][ T2819] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.883463][ T2819] netlink: 'syz.1.586': attribute type 13 has an invalid length. [ 197.892179][ T2819] gretap0: refused to change device tx_queue_len [ 197.898721][ T2819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.913508][ T2601] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.979114][ T2829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 198.153032][ T285] EXT4-fs (loop1): unmounting filesystem. [ 198.417725][ T2834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.596'. [ 198.771172][ T2841] input: syz1 as /devices/virtual/input/input24 [ 198.818935][ T2843] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.333892][ T2834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 199.364987][ T2838] tipc: Started in network mode [ 199.378572][ T2838] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 199.392159][ T2847] loop1: detected capacity change from 0 to 512 [ 199.398717][ T2847] FAT-fs (loop1): Unrecognized mount option "nzs" or missing value [ 199.442228][ T2838] tipc: Enabling of bearer rejected, failed to enable media [ 199.469194][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 199.469208][ T28] audit: type=1400 audit(1754863262.810:918): avc: denied { bind } for pid=2846 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.628410][ T2864] loop4: detected capacity change from 0 to 512 [ 199.637893][ T2864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.647891][ T2864] EXT4-fs (loop4): Test dummy encryption mode enabled [ 199.654733][ T2864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.773144][ T2864] EXT4-fs (loop4): 1 truncate cleaned up [ 199.778934][ T2864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.395513][ T287] EXT4-fs (loop4): unmounting filesystem. [ 200.459289][ T712] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.679231][ T288] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.686855][ T1859] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.789139][ T712] usb 4-1: Using ep0 maxpacket: 32 [ 200.795284][ T712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.806728][ T712] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 200.815782][ T712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.823808][ T712] usb 4-1: Product: syz [ 200.827964][ T712] usb 4-1: Manufacturer: syz [ 200.832561][ T712] usb 4-1: SerialNumber: syz [ 200.837625][ T712] usb 4-1: config 0 descriptor?? [ 200.843338][ T712] usb 4-1: bad CDC descriptors [ 200.848232][ T712] usb 4-1: unsupported MDLM descriptors [ 200.869155][ T1859] usb 6-1: Using ep0 maxpacket: 16 [ 200.875473][ T288] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.882216][ T1859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 200.893430][ T288] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 200.902585][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.910639][ T1859] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.923932][ T1859] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 200.933221][ T288] usb 2-1: config 0 descriptor?? [ 200.938212][ T1859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.947602][ T1859] usb 6-1: config 0 descriptor?? [ 201.317604][ T2881] input: syz1 as /devices/virtual/input/input25 [ 201.337803][ T2881] loop4: detected capacity change from 0 to 2048 [ 201.348401][ T288] zeroplus 0003:0C12:0005.0014: unknown main item tag 0x0 [ 201.357127][ T1859] playstation 0003:054C:0DF2.0015: item fetching failed at offset 4/5 [ 201.371406][ T1859] playstation 0003:054C:0DF2.0015: Parse failed [ 201.388376][ T288] zeroplus 0003:0C12:0005.0014: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 201.409556][ T1859] playstation: probe of 0003:054C:0DF2.0015 failed with error -22 [ 201.410760][ T2881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.417485][ T288] zeroplus 0003:0C12:0005.0014: no inputs found [ 201.553115][ T2862] netlink: 'syz.1.603': attribute type 15 has an invalid length. [ 201.568820][ T1859] usb 6-1: USB disconnect, device number 3 [ 201.732413][ T2862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 201.860422][ T288] usb 2-1: USB disconnect, device number 17 [ 202.199668][ T287] EXT4-fs (loop4): unmounting filesystem. [ 202.246042][ T2894] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 202.246042][ T2894] cct.usage_percpu_sys' [ 202.248510][ T28] audit: type=1400 audit(1754863265.590:919): avc: denied { nlmsg_read } for pid=2896 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.353715][ T28] audit: type=1400 audit(1754863265.700:920): avc: denied { ioctl } for pid=2898 comm="syz.4.608" path="socket:[24002]" dev="sockfs" ino=24002 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.404544][ T2902] 9pnet_fd: Insufficient options for proto=fd [ 202.581186][ T2907] loop1: detected capacity change from 0 to 40427 [ 202.595189][ T2907] F2FS-fs (loop1): invalid crc value [ 202.610426][ T2907] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.644791][ T2907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.659259][ T1379] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.699153][ T1859] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.839668][ T1379] usb 6-1: Using ep0 maxpacket: 32 [ 202.846021][ T1379] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.856404][ T1379] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.869598][ T1379] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.878636][ T1379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.889146][ T1859] usb 5-1: Using ep0 maxpacket: 16 [ 202.891695][ T1379] usb 6-1: config 0 descriptor?? [ 202.895613][ T1859] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.910366][ T1859] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.910372][ T1379] hub 6-1:0.0: bad descriptor, ignoring hub [ 202.910396][ T1859] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 202.916963][ T1379] hub: probe of 6-1:0.0 failed with error -5 [ 202.917299][ T1379] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 202.923375][ T1859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.939220][ T1848] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 202.961281][ T1859] usb 5-1: config 0 descriptor?? [ 203.169227][ T1379] usb 4-1: USB disconnect, device number 14 [ 203.170460][ T2909] loop4: detected capacity change from 0 to 128 [ 203.196062][ T2916] loop2: detected capacity change from 0 to 4096 [ 203.202904][ T2916] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.209692][ T1848] usb 2-1: not running at top speed; connect to a high speed hub [ 203.218241][ T2916] EXT4-fs (loop2): Test dummy encryption mode enabled [ 203.230068][ T1848] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.241805][ T2916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.242771][ T1848] usb 2-1: config 1 has no interface number 1 [ 203.290685][ T1848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.312604][ T1848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.322188][ T1848] usb 2-1: Product: syz [ 203.384441][ T1848] usb 2-1: Manufacturer: syz [ 203.389315][ T1848] usb 2-1: SerialNumber: syz [ 203.453864][ T2922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.462417][ T2922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.550547][ T1859] usbhid 5-1:0.0: can't add hid device: -71 [ 204.556567][ T1859] usbhid: probe of 5-1:0.0 failed with error -71 [ 204.567256][ T1859] usb 5-1: USB disconnect, device number 13 [ 206.126210][ T286] EXT4-fs (loop2): unmounting filesystem. [ 206.133717][ T1848] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 206.166045][ T1848] usb 2-1: USB disconnect, device number 18 [ 206.231738][ T2931] loop3: detected capacity change from 0 to 512 [ 206.249934][ T2931] /dev/loop3: Can't open blockdev [ 206.384972][ T2937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 206.619300][ T221] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.189155][ T221] usb 4-1: Using ep0 maxpacket: 16 [ 208.205389][ T221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 208.250062][ T221] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.350641][ T221] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 208.379277][ T221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.859838][ T221] usb 4-1: config 0 descriptor?? [ 208.865206][ T1848] usb 6-1: USB disconnect, device number 4 [ 209.622777][ T2956] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 209.632816][ T2958] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 209.893624][ T2960] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 209.903875][ T221] usbhid 4-1:0.0: can't add hid device: -71 [ 209.909890][ T221] usbhid: probe of 4-1:0.0 failed with error -71 [ 209.932152][ T221] usb 4-1: USB disconnect, device number 15 [ 209.959216][ T28] audit: type=1400 audit(1754863273.300:921): avc: denied { nlmsg_write } for pid=2959 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 210.025404][ T2970] incfs: Backing dir is not set, filesystem can't be mounted. [ 210.033475][ T2970] incfs: mount failed -2 [ 210.824468][ T28] audit: type=1400 audit(1754863274.170:922): avc: denied { map } for pid=2975 comm="syz.1.630" path="socket:[24954]" dev="sockfs" ino=24954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.865654][ T2981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 210.896396][ T2981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 210.921237][ T28] audit: type=1326 audit(1754863274.200:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc512b8ebe9 code=0x0 [ 210.979199][ T28] audit: type=1400 audit(1754863274.200:924): avc: denied { read } for pid=2975 comm="syz.1.630" path="socket:[24954]" dev="sockfs" ino=24954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.031992][ T28] audit: type=1400 audit(1754863274.240:925): avc: denied { transfer } for pid=2980 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 211.152264][ T2985] device veth0 entered promiscuous mode [ 211.159890][ T2992] netlink: 156 bytes leftover after parsing attributes in process `syz.4.633'. [ 211.166585][ T2988] binder: 2987:2988 ioctl c0306201 200000000180 returned -11 [ 211.171642][ T2985] device macsec2 entered promiscuous mode [ 211.183264][ T2985] device veth0 left promiscuous mode [ 212.296173][ T2999] loop5: detected capacity change from 0 to 40427 [ 212.308476][ T2995] loop3: detected capacity change from 0 to 40427 [ 212.316534][ T2999] F2FS-fs (loop5): fault_injection options not supported [ 212.323878][ T2999] F2FS-fs (loop5): heap/no_heap options were deprecated [ 213.159487][ T3011] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.214865][ T2854] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.252823][ T3020] loop5: detected capacity change from 0 to 512 [ 214.263183][ T3021] loop1: detected capacity change from 0 to 256 [ 214.278700][ T3020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.288147][ T3021] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 214.303839][ T3020] EXT4-fs (loop5): Test dummy encryption mode enabled [ 214.315757][ T28] audit: type=1400 audit(1754863277.660:926): avc: denied { associate } for pid=3016 comm="syz.1.640" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 214.339268][ T1859] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 214.368616][ T3020] EXT4-fs (loop5): 1 truncate cleaned up [ 214.375643][ T3020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.551417][ T1859] usb 3-1: Using ep0 maxpacket: 16 [ 214.661080][ T3038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.642'. [ 214.840994][ T1859] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 214.850173][ T1859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.858214][ T1859] usb 3-1: Product: syz [ 214.862468][ T1859] usb 3-1: Manufacturer: syz [ 214.867110][ T1859] usb 3-1: SerialNumber: syz [ 214.879306][ T1859] usb 3-1: config 0 descriptor?? [ 214.888352][ T1859] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 214.897810][ T1859] usb 3-1: Detected FT232H [ 214.989184][ T439] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.086511][ T1859] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 215.143575][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 215.160350][ T3041] loop5: detected capacity change from 0 to 256 [ 215.175735][ T3041] FAT-fs (loop5): Unrecognized mount option "˙˙0xffffffffffffffff˙" or missing value [ 215.189138][ T439] usb 4-1: Using ep0 maxpacket: 8 [ 215.195362][ T439] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 215.228399][ T439] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 215.228862][ T3044] loop1: detected capacity change from 0 to 512 [ 215.238353][ T439] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 215.260576][ T3041] loop5: detected capacity change from 0 to 128 [ 215.267825][ T28] audit: type=1326 audit(1754863278.610:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.291089][ T439] usb 4-1: string descriptor 0 read error: -71 [ 215.297309][ T439] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.302225][ T3041] FAT-fs (loop5): Unrecognized mount option "esefree" or missing value [ 215.319766][ T3044] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.648: casefold flag without casefold feature [ 215.341242][ T439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.352840][ T3044] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.648: couldn't read orphan inode 15 (err -117) [ 215.364861][ T28] audit: type=1326 audit(1754863278.610:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.398448][ T439] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 215.418400][ T439] usb 4-1: no configuration chosen from 1 choice [ 215.425338][ T3044] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.437741][ T439] usb 4-1: USB disconnect, device number 16 [ 215.457889][ T28] audit: type=1326 audit(1754863278.610:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.554477][ T1859] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 215.582276][ T28] audit: type=1326 audit(1754863278.610:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.605728][ T28] audit: type=1326 audit(1754863278.610:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.629743][ T28] audit: type=1326 audit(1754863278.610:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.653127][ T28] audit: type=1326 audit(1754863278.610:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 215.683375][ T28] audit: type=1326 audit(1754863278.610:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.3.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc512b8ebe9 code=0x7ffc0000 [ 216.927289][ T3059] xt_CT: No such helper "netbios-ns" [ 217.245296][ T28] audit: type=1400 audit(1754863280.590:935): avc: denied { bind } for pid=3062 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.276648][ T1379] usb 3-1: USB disconnect, device number 15 [ 217.344423][ T3065] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 217.435693][ T1379] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 217.542004][ T3067] loop3: detected capacity change from 0 to 512 [ 217.554751][ T3067] /dev/loop3: Can't open blockdev [ 217.574242][ T1379] ftdi_sio 3-1:0.0: device disconnected [ 217.589767][ T3068] loop2: detected capacity change from 0 to 1024 [ 217.599979][ T3067] loop3: detected capacity change from 0 to 512 [ 217.657052][ T3052] loop4: detected capacity change from 0 to 40427 [ 217.686704][ T3052] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.749144][ T3052] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.809906][ T285] EXT4-fs (loop1): unmounting filesystem. [ 217.872249][ T3070] loop2: detected capacity change from 0 to 40427 [ 217.988024][ T3052] bio_check_eod: 1639 callbacks suppressed [ 217.988044][ T3052] syz.4.650: attempt to access beyond end of device [ 217.988044][ T3052] loop4: rw=2049, sector=77824, nr_sectors = 2064 limit=40427 [ 218.029583][ T3052] syz.4.650: attempt to access beyond end of device [ 218.029583][ T3052] loop4: rw=2049, sector=79888, nr_sectors = 2032 limit=40427 [ 218.142930][ T3078] syz.4.650: attempt to access beyond end of device [ 218.142930][ T3078] loop4: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 218.163042][ T3052] syz.4.650: attempt to access beyond end of device [ 218.163042][ T3052] loop4: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 218.203972][ T3052] syz.4.650: attempt to access beyond end of device [ 218.203972][ T3052] loop4: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 218.221552][ T3078] syz.4.650: attempt to access beyond end of device [ 218.221552][ T3078] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 218.237174][ T3078] syz.4.650: attempt to access beyond end of device [ 218.237174][ T3078] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 218.268524][ T3095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.658'. [ 218.609094][ T3052] syz.4.650: attempt to access beyond end of device [ 218.609094][ T3052] loop4: rw=2049, sector=57344, nr_sectors = 1792 limit=40427 [ 218.629203][ T28] audit: type=1400 audit(1754863281.880:936): avc: denied { connect } for pid=3079 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.872479][ T3094] syz.4.650: attempt to access beyond end of device [ 218.872479][ T3094] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 219.230727][ T3051] syz.4.650: attempt to access beyond end of device [ 219.230727][ T3051] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 219.419815][ T3093] loop3: detected capacity change from 0 to 40427 [ 219.530775][ T2855] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.668389][ T3104] loop4: detected capacity change from 0 to 1024 [ 219.676651][ T3104] EXT4-fs: Ignoring removed i_version option [ 219.774874][ T3104] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.663: Invalid block bitmap block 0 in block_group 0 [ 219.789310][ T3104] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.663: Failed to acquire dquot type 0 [ 219.802439][ T3104] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.663: Freeing blocks not in datazone - block = 0, count = 4096 [ 219.816976][ T3104] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.663: Invalid inode bitmap blk 0 in block_group 0 [ 219.830107][ T634] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 0 [ 219.842217][ T3104] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 219.851966][ T3104] EXT4-fs (loop4): 1 orphan inode deleted [ 219.857780][ T3104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.968677][ T3104] usb usb1: usbfs: process 3104 (syz.4.663) did not claim interface 0 before use [ 220.703876][ T3093] loop3: detected capacity change from 0 to 1024 [ 220.736403][ T3093] EXT4-fs: Ignoring removed bh option [ 220.743034][ T3093] /dev/loop3: Can't open blockdev [ 220.845034][ T287] EXT4-fs (loop4): unmounting filesystem. [ 221.831239][ T3119] FAULT_INJECTION: forcing a failure. [ 221.831239][ T3119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.845180][ T3119] CPU: 0 PID: 3119 Comm: syz.4.667 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 221.854914][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.864970][ T3119] Call Trace: [ 221.868245][ T3119] [ 221.871191][ T3119] __dump_stack+0x21/0x24 [ 221.875587][ T3119] dump_stack_lvl+0xee/0x150 [ 221.880203][ T3119] ? __cfi_dump_stack_lvl+0x8/0x8 [ 221.885250][ T3119] dump_stack+0x15/0x24 [ 221.889421][ T3119] should_fail_ex+0x3d4/0x520 [ 221.894115][ T3119] should_fail+0xb/0x10 [ 221.898283][ T3119] should_fail_usercopy+0x1a/0x20 [ 221.903330][ T3119] copyin+0x20/0xa0 [ 221.907160][ T3119] _copy_from_iter+0x3e2/0xfd0 [ 221.911935][ T3119] ? __cfi__copy_from_iter+0x10/0x10 [ 221.917229][ T3119] ? __kasan_check_write+0x14/0x20 [ 221.922355][ T3119] ? __build_skb_around+0x24f/0x470 [ 221.927580][ T3119] ? check_stack_object+0x81/0x140 [ 221.932716][ T3119] ? __check_object_size+0x45a/0x600 [ 221.938022][ T3119] netlink_sendmsg+0x72c/0xbc0 [ 221.942807][ T3119] ? __cfi_netlink_sendmsg+0x10/0x10 [ 221.948108][ T3119] ? security_socket_sendmsg+0x93/0xb0 [ 221.953582][ T3119] ? __cfi_netlink_sendmsg+0x10/0x10 [ 221.958873][ T3119] ____sys_sendmsg+0x5a9/0x990 [ 221.963782][ T3119] ? __sys_sendmsg_sock+0x40/0x40 [ 221.968879][ T3119] ? import_iovec+0x7c/0xb0 [ 221.973378][ T3119] ___sys_sendmsg+0x21c/0x290 [ 221.978057][ T3119] ? __sys_sendmsg+0x270/0x270 [ 221.982818][ T3119] ? __kasan_check_write+0x14/0x20 [ 221.987926][ T3119] ? proc_fail_nth_write+0x17a/0x1f0 [ 221.993196][ T3119] ? vfs_write+0x9d6/0xca0 [ 221.997608][ T3119] ? __fdget+0x19c/0x220 [ 222.001848][ T3119] __x64_sys_sendmsg+0x1f0/0x2c0 [ 222.006809][ T3119] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 222.012275][ T3119] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 222.018353][ T3119] x64_sys_call+0x171/0x9a0 [ 222.022870][ T3119] do_syscall_64+0x4c/0xa0 [ 222.027308][ T3119] ? clear_bhb_loop+0x30/0x80 [ 222.031987][ T3119] ? clear_bhb_loop+0x30/0x80 [ 222.036669][ T3119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.042576][ T3119] RIP: 0033:0x7ff02a18ebe9 [ 222.047004][ T3119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.066702][ T3119] RSP: 002b:00007ff02afdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.075116][ T3119] RAX: ffffffffffffffda RBX: 00007ff02a3b5fa0 RCX: 00007ff02a18ebe9 [ 222.083090][ T3119] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 222.091061][ T3119] RBP: 00007ff02afdd090 R08: 0000000000000000 R09: 0000000000000000 [ 222.099027][ T3119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.107000][ T3119] R13: 00007ff02a3b6038 R14: 00007ff02a3b5fa0 R15: 00007ffe01e541e8 [ 222.114981][ T3119] [ 222.124410][ T3123] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 222.413647][ T3125] loop5: detected capacity change from 0 to 512 [ 222.420374][ T3125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.441692][ T3125] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.448524][ T3125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.500598][ T3125] EXT4-fs (loop5): 1 truncate cleaned up [ 222.506332][ T3125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 222.565149][ T1844] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 222.961262][ T3131] loop1: detected capacity change from 0 to 512 [ 222.967822][ T3131] EXT4-fs: Ignoring removed bh option [ 223.206693][ T3135] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.458695][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 223.469204][ T1844] usb 4-1: Using ep0 maxpacket: 16 [ 223.479106][ T1844] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 223.538677][ T1844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.545794][ T3131] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 223.547266][ T1844] usb 4-1: Product: syz [ 223.560644][ T1844] usb 4-1: Manufacturer: syz [ 223.562626][ T3131] EXT4-fs (loop1): 1 truncate cleaned up [ 223.565307][ T1844] usb 4-1: SerialNumber: syz [ 223.571218][ T3131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.576651][ T1844] usb 4-1: config 0 descriptor?? [ 223.678979][ T1844] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 223.742387][ T3139] loop5: detected capacity change from 0 to 2048 [ 223.766351][ T3139] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.783029][ T1844] usb 4-1: Detected FT232H [ 223.790989][ T1844] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 223.791341][ T285] EXT4-fs (loop1): unmounting filesystem. [ 223.870954][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 223.870968][ T28] audit: type=1326 audit(1754863287.210:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3147 comm="syz.4.676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02a18ebe9 code=0x0 [ 223.877652][ T3139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 224.417603][ T3152] loop1: detected capacity change from 0 to 256 [ 224.427832][ T3152] FAT-fs (loop1): Unrecognized mount option "18446744073709551615˙˙˙" or missing value [ 224.629985][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 224.773609][ T1844] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 224.929849][ T3161] loop2: detected capacity change from 0 to 2048 [ 224.970029][ T3161] Alternate GPT is invalid, using primary GPT. [ 224.976270][ T3161] loop2: p1 p2 p3 [ 225.071587][ T3167] input: syz1 as /devices/virtual/input/input26 [ 225.086032][ T3167] loop5: detected capacity change from 0 to 2048 [ 225.115006][ T3167] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.221019][ T3175] loop4: detected capacity change from 0 to 512 [ 225.230371][ T3175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.419569][ T3175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 225.466154][ T3175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.681: bg 0: block 248: padding at end of block bitmap is not set [ 225.484850][ T3175] Quota error (device loop4): write_blk: dquota write failed [ 225.493295][ T3175] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 225.503905][ T3175] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.681: Failed to acquire dquot type 1 [ 225.583942][ T3175] EXT4-fs (loop4): 1 truncate cleaned up [ 225.593756][ T3175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.001724][ T1844] usb 4-1: USB disconnect, device number 17 [ 226.021788][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 226.030212][ T1844] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 226.077816][ T3185] loop3: detected capacity change from 0 to 512 [ 226.098853][ T1844] ftdi_sio 4-1:0.0: device disconnected [ 226.127528][ T3185] /dev/loop3: Can't open blockdev [ 226.235360][ T3190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3190 comm=syz.2.682 [ 226.660184][ T287] EXT4-fs (loop4): unmounting filesystem. [ 226.851586][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 228.737785][ T3212] loop5: detected capacity change from 0 to 1024 [ 228.744482][ T3212] EXT4-fs: Ignoring removed i_version option [ 229.103512][ T3214] netlink: 'syz.2.689': attribute type 7 has an invalid length. [ 229.278107][ T3215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 230.176715][ T3212] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.690: Invalid block bitmap block 0 in block_group 0 [ 230.190901][ T3212] Quota error (device loop5): write_blk: dquota write failed [ 230.198444][ T3212] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 230.208503][ T3212] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.690: Failed to acquire dquot type 0 [ 230.220340][ T3212] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.690: Freeing blocks not in datazone - block = 0, count = 4096 [ 230.234469][ T3212] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.690: Invalid inode bitmap blk 0 in block_group 0 [ 230.247587][ T1442] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 230.256916][ T3212] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 230.266320][ T3212] EXT4-fs (loop5): 1 orphan inode deleted [ 230.272168][ T3212] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 230.330569][ T1442] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:8: Failed to release dquot type 0 [ 230.553501][ T3218] netlink: 'syz.1.692': attribute type 15 has an invalid length. [ 231.142657][ T3224] loop3: detected capacity change from 0 to 16 [ 231.149617][ T3224] /dev/loop3: Can't open blockdev [ 231.168958][ T3207] loop4: detected capacity change from 0 to 40427 [ 231.206915][ T2092] EXT4-fs (loop5): unmounting filesystem. [ 231.223751][ T3207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 231.249253][ T1859] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 231.254678][ T3207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 231.339774][ T3234] syz.5.697 uses obsolete (PF_INET,SOCK_PACKET) [ 231.355782][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.368901][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.381899][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.395036][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.408167][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.421227][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.434306][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.447518][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.460737][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.473912][ T3234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3234 comm=syz.5.697 [ 231.492019][ T1844] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 231.689162][ T1844] usb 2-1: Using ep0 maxpacket: 16 [ 231.699010][ T1844] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 231.708506][ T1844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.716842][ T1844] usb 2-1: Product: syz [ 231.729137][ T1844] usb 2-1: Manufacturer: syz [ 231.738633][ T1859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 231.739332][ T1844] usb 2-1: SerialNumber: syz [ 231.745321][ T1859] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 231.758900][ T1859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.764700][ T1844] usb 2-1: config 0 descriptor?? [ 231.766952][ T712] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 231.780653][ T1859] usb 3-1: config 0 descriptor?? [ 231.787403][ T1844] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 231.796361][ T1844] usb 2-1: Detected FT232H [ 231.927303][ T287] bio_check_eod: 2 callbacks suppressed [ 231.927318][ T287] syz-executor: attempt to access beyond end of device [ 231.927318][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.979190][ T712] usb 4-1: Using ep0 maxpacket: 16 [ 231.981272][ T1844] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 231.988287][ T712] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 232.000752][ T712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.008770][ T712] usb 4-1: Product: syz [ 232.013129][ T712] usb 4-1: Manufacturer: syz [ 232.017748][ T712] usb 4-1: SerialNumber: syz [ 232.023193][ T712] usb 4-1: config 0 descriptor?? [ 232.029154][ T712] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 232.036940][ T712] usb 4-1: Detected FT232H [ 232.189019][ T1859] zeroplus 0003:0C12:0005.0016: unknown main item tag 0x0 [ 232.211363][ T1859] zeroplus 0003:0C12:0005.0016: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.2-1/input0 [ 232.222822][ T1859] zeroplus 0003:0C12:0005.0016: no inputs found [ 232.230506][ T712] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 232.273164][ T1379] kernel read not supported for file inotify (pid: 1379 comm: kworker/1:9) [ 232.283825][ T28] audit: type=1400 audit(1754863295.630:938): avc: denied { map } for pid=3245 comm="syz.5.700" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 232.398065][ T3220] netlink: 'syz.2.693': attribute type 15 has an invalid length. [ 232.412246][ T1844] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.427830][ T1859] usb 3-1: USB disconnect, device number 16 [ 233.547356][ T712] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 233.829132][ T712] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 233.939192][ T1859] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 234.040318][ T712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.050252][ T712] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.063087][ T712] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 234.072190][ T712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.080962][ T712] usb 6-1: config 0 descriptor?? [ 234.120286][ T1859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.131303][ T1859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.141138][ T1859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.154163][ T1859] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.165872][ T1859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.174796][ T1859] usb 3-1: config 0 descriptor?? [ 234.495576][ T712] logitech 0003:046D:C29C.0017: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 234.591196][ T1859] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 234.598651][ T1859] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 234.606421][ T1859] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 234.613849][ T1859] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 234.621302][ T1859] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 234.628695][ T1859] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 234.636451][ T1859] plantronics 0003:047F:FFFF.0018: unbalanced collection at end of report description [ 234.646437][ T1859] plantronics 0003:047F:FFFF.0018: parse failed [ 234.652840][ T1859] plantronics: probe of 0003:047F:FFFF.0018 failed with error -22 [ 234.793618][ T1859] usb 3-1: USB disconnect, device number 17 [ 234.894095][ T712] logitech 0003:046D:C29C.0017: no inputs found [ 234.902015][ T712] usb 6-1: USB disconnect, device number 5 [ 234.922612][ T3278] fido_id[3278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 234.946237][ T288] usb 2-1: USB disconnect, device number 19 [ 234.953358][ T288] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.970273][ T288] ftdi_sio 2-1:0.0: device disconnected [ 234.984056][ T3282] loop1: detected capacity change from 0 to 512 [ 234.995430][ T3282] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.710: casefold flag without casefold feature [ 235.008273][ T3282] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.710: couldn't read orphan inode 15 (err -117) [ 235.020233][ T3282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.034075][ T3282] EXT4-fs (loop1): shut down requested (1) [ 235.041024][ T28] audit: type=1400 audit(1754863298.390:939): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 235.062924][ T28] audit: type=1400 audit(1754863298.390:940): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.084526][ T28] audit: type=1400 audit(1754863298.390:941): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.085131][ T285] EXT4-fs (loop1): unmounting filesystem. [ 235.106123][ T28] audit: type=1400 audit(1754863298.390:942): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.139304][ T28] audit: type=1400 audit(1754863298.390:943): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.159891][ T28] audit: type=1400 audit(1754863298.390:944): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.219939][ T1379] usb 4-1: USB disconnect, device number 18 [ 235.237999][ T1379] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 235.248872][ T1379] ftdi_sio 4-1:0.0: device disconnected [ 235.485033][ T3310] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 235.564961][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 235.564976][ T28] audit: type=1326 audit(1754863298.910:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3324 comm="syz.4.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff02a18ebe9 code=0x0 [ 235.594153][ T288] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 235.627581][ T28] audit: type=1400 audit(1754863298.970:947): avc: denied { connect } for pid=3329 comm="syz.5.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.651884][ T28] audit: type=1400 audit(1754863299.000:948): avc: denied { remount } for pid=3331 comm="syz.5.730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 235.799155][ T288] usb 2-1: Using ep0 maxpacket: 32 [ 235.805595][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.817205][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.827197][ T288] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 235.836648][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.849226][ T288] usb 2-1: config 0 descriptor?? [ 236.009132][ T712] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 236.100992][ T3350] loop3: detected capacity change from 0 to 16 [ 236.107730][ T3350] /dev/loop3: Can't open blockdev [ 236.140708][ T3354] loop3: detected capacity change from 0 to 512 [ 236.147290][ T3354] EXT4-fs: Ignoring removed nobh option [ 236.153087][ T1379] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.160723][ T3354] /dev/loop3: Can't open blockdev [ 236.190157][ T712] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 236.204661][ T712] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.213787][ T712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 236.221796][ T712] usb 3-1: SerialNumber: syz [ 236.250899][ T3356] loop3: detected capacity change from 0 to 512 [ 236.257878][ T3356] EXT4-fs: Ignoring removed oldalloc option [ 236.259053][ T288] savu 0003:1E7D:2D5A.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 236.264178][ T3356] /dev/loop3: Can't open blockdev [ 236.349163][ T1379] usb 6-1: Using ep0 maxpacket: 16 [ 236.355461][ T1379] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 236.364356][ T1379] usb 6-1: config 0 has no interface number 0 [ 236.370562][ T1379] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 236.380400][ T1379] usb 6-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 236.391600][ T1379] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 236.409532][ T28] audit: type=1400 audit(1754863299.760:949): avc: denied { create } for pid=3357 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 236.431033][ T1379] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 236.440251][ T1379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.448521][ T28] audit: type=1400 audit(1754863299.760:950): avc: denied { write } for pid=3357 comm="syz.3.742" path="socket:[25811]" dev="sockfs" ino=25811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 236.476406][ T1379] usb 6-1: Product: syz [ 236.480980][ T1379] usb 6-1: Manufacturer: syz [ 236.485635][ T1379] usb 6-1: SerialNumber: syz [ 236.491042][ T1379] usb 6-1: config 0 descriptor?? [ 236.496342][ T3348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 236.503633][ T3348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 236.513078][ T288] usb 2-1: USB disconnect, device number 20 [ 236.557520][ T3365] loop4: detected capacity change from 0 to 256 [ 236.567294][ T3365] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.578156][ T3365] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 236.588194][ T3365] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 236.606813][ T28] audit: type=1400 audit(1754863299.950:951): avc: denied { mounton } for pid=3364 comm="syz.4.744" path="/proc/494/task" dev="proc" ino=25815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 236.629502][ T28] audit: type=1400 audit(1754863299.950:952): avc: denied { associate } for pid=3364 comm="syz.4.744" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 236.666559][ T3368] kvm: pic: single mode not supported [ 236.666571][ T3368] kvm: pic: level sensitive irq not supported [ 236.672182][ T3368] kvm: pic: non byte read [ 236.683048][ T3368] kvm: pic: non byte read [ 236.687624][ T3368] kvm: pic: non byte read [ 236.692530][ T3368] kvm: pic: non byte read [ 236.697164][ T3368] kvm: pic: non byte read [ 236.701714][ T3368] kvm: pic: non byte read [ 236.706224][ T3368] kvm: pic: non byte read [ 236.710868][ T3368] kvm: pic: non byte read [ 236.715391][ T3368] kvm: pic: non byte read [ 236.801001][ T3375] loop4: detected capacity change from 0 to 512 [ 236.807877][ T3375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.821406][ T3375] EXT4-fs (loop4): 1 truncate cleaned up [ 236.827169][ T3375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.844759][ T3375] ================================================================== [ 236.852870][ T3375] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 236.860597][ T3375] Read of size 18446744073709551572 at addr ffff88810fbf6050 by task syz.4.748/3375 [ 236.869972][ T3375] [ 236.872290][ T3375] CPU: 0 PID: 3375 Comm: syz.4.748 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 236.881999][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.892048][ T3375] Call Trace: [ 236.895321][ T3375] [ 236.898251][ T3375] __dump_stack+0x21/0x24 [ 236.902600][ T3375] dump_stack_lvl+0xee/0x150 [ 236.907244][ T3375] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.912360][ T3375] ? ext4_xattr_block_set+0x9dc/0x3270 [ 236.917831][ T3375] ? __vfs_setxattr+0x3f2/0x440 [ 236.922678][ T3375] ? ext4_xattr_set_entry+0x979/0x21d0 [ 236.928167][ T3375] print_address_description+0x71/0x210 [ 236.933749][ T3375] print_report+0x4a/0x60 [ 236.938085][ T3375] kasan_report+0x122/0x150 [ 236.942584][ T3375] ? ext4_xattr_set_entry+0x979/0x21d0 [ 236.948044][ T3375] ? ext4_xattr_set_entry+0x979/0x21d0 [ 236.953497][ T3375] kasan_check_range+0x280/0x290 [ 236.958438][ T3375] memmove+0x2d/0x70 [ 236.962332][ T3375] ext4_xattr_set_entry+0x979/0x21d0 [ 236.967642][ T3375] ext4_xattr_block_set+0xada/0x3270 [ 236.972928][ T3375] ? dquot_free_inode+0x75f/0x940 [ 236.977961][ T3375] ? __kasan_check_write+0x14/0x20 [ 236.983071][ T3375] ? iput+0x620/0x670 [ 236.987062][ T3375] ? ext4_xattr_block_find+0x310/0x310 [ 236.992538][ T3375] ext4_xattr_set_handle+0xbd5/0x12b0 [ 236.997915][ T3375] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 237.003737][ T3375] ? __kasan_check_read+0x11/0x20 [ 237.008760][ T3375] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 237.014449][ T3375] ext4_xattr_set+0x22a/0x320 [ 237.019152][ T3375] ? __cfi_ext4_xattr_set+0x10/0x10 [ 237.024371][ T3375] ? selinux_inode_setxattr+0x5aa/0xba0 [ 237.029926][ T3375] ext4_xattr_trusted_set+0x3c/0x50 [ 237.035131][ T3375] ? __cfi_ext4_xattr_trusted_set+0x10/0x10 [ 237.041033][ T3375] __vfs_setxattr+0x3f2/0x440 [ 237.045713][ T3375] __vfs_setxattr_noperm+0x12a/0x5e0 [ 237.050997][ T3375] __vfs_setxattr_locked+0x212/0x230 [ 237.056287][ T3375] vfs_setxattr+0x168/0x2f0 [ 237.060808][ T3375] ? __cfi_vfs_setxattr+0x10/0x10 [ 237.065825][ T3375] ? copy_user_enhanced_fast_string+0xa/0x40 [ 237.071811][ T3375] setxattr+0x2b2/0x2d0 [ 237.075973][ T3375] ? path_setxattr+0x280/0x280 [ 237.080739][ T3375] ? __mnt_want_write+0x1e6/0x260 [ 237.085768][ T3375] ? mnt_want_write+0x220/0x300 [ 237.090611][ T3375] path_setxattr+0x142/0x280 [ 237.095226][ T3375] ? simple_xattr_list_add+0x120/0x120 [ 237.100699][ T3375] ? __kasan_check_write+0x14/0x20 [ 237.105825][ T3375] ? fpregs_restore_userregs+0x128/0x260 [ 237.111508][ T3375] __x64_sys_lsetxattr+0xc2/0xe0 [ 237.116450][ T3375] x64_sys_call+0x8b7/0x9a0 [ 237.120952][ T3375] do_syscall_64+0x4c/0xa0 [ 237.125370][ T3375] ? clear_bhb_loop+0x30/0x80 [ 237.130052][ T3375] ? clear_bhb_loop+0x30/0x80 [ 237.134742][ T3375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.140647][ T3375] RIP: 0033:0x7ff02a18ebe9 [ 237.145052][ T3375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.164646][ T3375] RSP: 002b:00007ff02afdd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 237.173051][ T3375] RAX: ffffffffffffffda RBX: 00007ff02a3b5fa0 RCX: 00007ff02a18ebe9 [ 237.181024][ T3375] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000100 [ 237.188988][ T3375] RBP: 00007ff02a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 237.196955][ T3375] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 237.204920][ T3375] R13: 00007ff02a3b6038 R14: 00007ff02a3b5fa0 R15: 00007ffe01e541e8 [ 237.212902][ T3375] [ 237.215931][ T3375] [ 237.218289][ T3375] Allocated by task 3375: [ 237.222610][ T3375] kasan_set_track+0x4b/0x70 [ 237.227199][ T3375] kasan_save_alloc_info+0x25/0x30 [ 237.232308][ T3375] __kasan_kmalloc+0x95/0xb0 [ 237.236895][ T3375] __kmalloc_node_track_caller+0xb1/0x1e0 [ 237.242614][ T3375] kmemdup+0x2b/0x60 [ 237.246515][ T3375] ext4_xattr_block_set+0x9dc/0x3270 [ 237.251813][ T3375] ext4_xattr_set_handle+0xbd5/0x12b0 [ 237.257187][ T3375] ext4_xattr_set+0x22a/0x320 [ 237.261862][ T3375] ext4_xattr_trusted_set+0x3c/0x50 [ 237.267062][ T3375] __vfs_setxattr+0x3f2/0x440 [ 237.271763][ T3375] __vfs_setxattr_noperm+0x12a/0x5e0 [ 237.277061][ T3375] __vfs_setxattr_locked+0x212/0x230 [ 237.282349][ T3375] vfs_setxattr+0x168/0x2f0 [ 237.286859][ T3375] setxattr+0x2b2/0x2d0 [ 237.291067][ T3375] path_setxattr+0x142/0x280 [ 237.295665][ T3375] __x64_sys_lsetxattr+0xc2/0xe0 [ 237.300609][ T3375] x64_sys_call+0x8b7/0x9a0 [ 237.305123][ T3375] do_syscall_64+0x4c/0xa0 [ 237.309558][ T3375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.315455][ T3375] [ 237.317777][ T3375] The buggy address belongs to the object at ffff88810fbf6000 [ 237.317777][ T3375] which belongs to the cache kmalloc-1k of size 1024 [ 237.331822][ T3375] The buggy address is located 80 bytes inside of [ 237.331822][ T3375] 1024-byte region [ffff88810fbf6000, ffff88810fbf6400) [ 237.345098][ T3375] [ 237.347417][ T3375] The buggy address belongs to the physical page: [ 237.353846][ T3375] page:ffffea00043efc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fbf0 [ 237.364094][ T3375] head:ffffea00043efc00 order:3 compound_mapcount:0 compound_pincount:0 [ 237.372525][ T3375] flags: 0x4000000000010200(slab|head|zone=1) [ 237.378658][ T3375] raw: 4000000000010200 ffffea0004801e00 dead000000000002 ffff888100043080 [ 237.387246][ T3375] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 237.395912][ T3375] page dumped because: kasan: bad access detected [ 237.402341][ T3375] page_owner tracks the page as allocated [ 237.408053][ T3375] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, tgid 283 (syz-executor), ts 26339032050, free_ts 26334427236 [ 237.429316][ T3375] post_alloc_hook+0x1f5/0x210 [ 237.434075][ T3375] prep_new_page+0x1c/0x110 [ 237.438582][ T3375] get_page_from_freelist+0x2c7b/0x2cf0 [ 237.444162][ T3375] __alloc_pages+0x1c3/0x450 [ 237.448767][ T3375] alloc_slab_page+0x6e/0xf0 [ 237.453383][ T3375] new_slab+0x98/0x3d0 [ 237.457467][ T3375] ___slab_alloc+0x6f6/0xb50 [ 237.462089][ T3375] __slab_alloc+0x5e/0xa0 [ 237.466421][ T3375] __kmem_cache_alloc_node+0x203/0x2c0 [ 237.471870][ T3375] __kmalloc_node_track_caller+0xa0/0x1e0 [ 237.477602][ T3375] __alloc_skb+0x236/0x4b0 [ 237.482013][ T3375] alloc_uevent_skb+0x85/0x240 [ 237.486772][ T3375] kobject_uevent_net_broadcast+0x1b4/0x5b0 [ 237.492664][ T3375] kobject_uevent_env+0x54f/0x730 [ 237.497686][ T3375] kobject_uevent+0x1d/0x30 [ 237.502199][ T3375] net_rx_queue_update_kobjects+0x249/0x4d0 [ 237.508103][ T3375] page last free stack trace: [ 237.512778][ T3375] free_unref_page_prepare+0x742/0x750 [ 237.518265][ T3375] free_unref_page+0x8f/0x530 [ 237.522939][ T3375] __free_pages+0x67/0x100 [ 237.527362][ T3375] __free_slab+0xca/0x1a0 [ 237.531682][ T3375] __unfreeze_partials+0x160/0x190 [ 237.536805][ T3375] put_cpu_partial+0xa9/0x100 [ 237.541558][ T3375] __slab_free+0x1c4/0x280 [ 237.545965][ T3375] ___cache_free+0xbf/0xd0 [ 237.550376][ T3375] qlist_free_all+0xc6/0x140 [ 237.554950][ T3375] kasan_quarantine_reduce+0x14a/0x170 [ 237.560415][ T3375] __kasan_slab_alloc+0x24/0x80 [ 237.565271][ T3375] slab_post_alloc_hook+0x4f/0x2d0 [ 237.570403][ T3375] __kmem_cache_alloc_node+0x192/0x2c0 [ 237.575861][ T3375] kmalloc_trace+0x29/0xb0 [ 237.580283][ T3375] ref_tracker_alloc+0x139/0x430 [ 237.585215][ T3375] netdev_queue_update_kobjects+0x185/0x470 [ 237.591099][ T3375] [ 237.593426][ T3375] Memory state around the buggy address: [ 237.599043][ T3375] ffff88810fbf5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.607096][ T3375] ffff88810fbf5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.615148][ T3375] >ffff88810fbf6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.623237][ T3375] ^ [ 237.629916][ T3375] ffff88810fbf6080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.637968][ T3375] ffff88810fbf6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.646030][ T3375] ================================================================== [ 237.654719][ T3375] Disabling lock debugging due to kernel taint [ 237.684276][ T287] EXT4-fs (loop4): unmounting filesystem. [ 237.686978][ T712] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 237.867357][ T712] usb 3-1: USB disconnect, device number 18 [ 237.873614][ T712] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 238.880875][ T1859] usb 6-1: USB disconnect, device number 6