last executing test programs: 40.557925845s ago: executing program 2 (id=359): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/226) 40.030809576s ago: executing program 2 (id=364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40041}, 0x2400c800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x143042, 0x100) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fallocate(r4, 0x20, 0x0, 0x8000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4007c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 39.646675308s ago: executing program 2 (id=367): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[], 0xfc}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="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", 0x281}], 0x1}}], 0x3, 0x8008800) 38.606406389s ago: executing program 2 (id=376): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xcc04, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x43f, &(0x7f0000000240)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000000), 0x0, 0xfe37, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000f00)={{r0}, "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"}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) symlink(&(0x7f0000000680)='./file2\x00', &(0x7f00000006c0)='./file1\x00') close_range(r1, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b0a00fe0000ea4e5d0906000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x1, &(0x7f0000000080)={0xb, 0x7}, &(0x7f0000000180)) 37.668815674s ago: executing program 2 (id=385): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fstatfs(r0, &(0x7f0000000180)=""/226) 37.606831777s ago: executing program 2 (id=387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="0e0553078fdeecb7e7bbb14a8e24423bfe4dbeef66c60d4cb7677f23e2952aa3f1111af858f538b1d1f81b8ac663787e3b5139554c22093be29b314b", 0x3c}], 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x1) r5 = dup(r2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 22.611945671s ago: executing program 32 (id=387): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="0e0553078fdeecb7e7bbb14a8e24423bfe4dbeef66c60d4cb7677f23e2952aa3f1111af858f538b1d1f81b8ac663787e3b5139554c22093be29b314b", 0x3c}], 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x1) r5 = dup(r2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 11.790512392s ago: executing program 1 (id=546): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x4) r4 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x550b, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_usb_disconnect(0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000180)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.42792739s ago: executing program 1 (id=551): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0xf, 0x2, "5c80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000030c0)={0x34, &(0x7f0000002ec0)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.980499763s ago: executing program 0 (id=564): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000b40)={0x40, 0x18, 0x2, "896d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.834550449s ago: executing program 1 (id=571): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)='A') close_range(r0, 0xffffffffffffffff, 0x0) 5.638066081s ago: executing program 4 (id=572): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xd5faef5fef706c58) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="64009b37b0b2320d675d3849fd299110cfda1714930222e7f110ace0bc5fe88acecfb0f91e42bb4b9148555b012deb94b908126061d4954b2d7bed4fd2bd398dbd18389e1dc1175f3e47bddc1a2a6c0d6ae0df8add6125fd7f11eeb612e04d52964b65f34b1d788d2f7b8db7350a396b092501ec2d6e2e748804f040d8227fd288510f151ccffbe0935aabf572f44f4d27642c141f", 0x95}, {&(0x7f0000000140)="f68dceb25e1e7f772e42d4b0e40095d567c6c307a1ebb58a3cd3d5594def9eda6d41a15046f086e962aba71419734cb6e6ede091f06821bf6017aad211ea273b4cc15238bc8a648c2a5426fe92c5c05a43400f90e85b5405cc1087ad009c400650603fe41a6dad1f78dae5df0f917c0c12e4b934b22e43aad2caf20f54d30991551681cfcc3d235ea7905243a71f7df137acfe9817326c4b8be2116eee13c63c116a853aa6bc9318122d03527099d8287665b8a717fb1c79", 0xb8}, {&(0x7f0000000200)="4688f70adcb03c8f01e86490f2e9a34318cda9ee56bb0b10df38778499b3b8dc8167e47dd1817b69e7c963f22991", 0x2e}], 0x3, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfd9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x30}, 0x4080) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000003c0)=0x5, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000400)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000440)=0x1) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x8100, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000004c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip_tables_matches\x00') inotify_add_watch(r3, &(0x7f0000000540)='./file0\x00', 0x40000080) getpid() r6 = socket$key(0xf, 0x3, 0x2) io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f0000000580)="07c83f189d0044fb9e137c5d5c3e8a7a1f06af9a54ec3656f18546d45a692d4e21bc90807adb98def8ba057239e9858d2a7a745fcd00", 0x36, 0x7b1, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x69d3, r6, &(0x7f0000000600)="dc236dbfdca7cff5ff82f2553eddb85bcd79ae49fbad331e5bcff5ca820cc1b3c3dc9c5ac1661396313a3f9e8af3879d316c16c6f23d0ce39da40e7b975afe3891832f6f58cff02713b1ba6e91aae7", 0x4f, 0x6, 0x0, 0x2, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f00000006c0)="9c49641a0172fa94", 0x8, 0x16, 0x0, 0x1, r3}]) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000ac0)={0x44, 0x0, &(0x7f0000000940)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/157, 0x9d, 0x2, 0x21}, @fda={0x66646185, 0x7, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000900)={0x0, 0x28, 0x48}}}], 0xcb, 0x0, &(0x7f00000009c0)="85baf8200f562ec97b4c48b969975d7a97ae8b9f1cc19fe8c37371637dbfd4bbd5d14500c64f0ebca68308c509189a53df2ae5679e277da1e588b9bb35567da29db291b63a7c4b2e80c7ad31a328ffb3fa653666e6fc08034d85717a29b284b05ba4de20134b5d824f918c828ddfb52c0c3d23dcbd24c023c1147ac94f13cc20a0d2e7ec981954e5905fc7071f31c3f0674d42e7d427c344f521802b47ad868543a00401977418de717a92640a98bcbf1bad55faf24765014b274dd362cd2cf3c8b1f823a3f5b3c910776e"}) sendmsg$key(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x2, 0x10, 0xca, 0x8, 0x2d, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_key={0xa, 0x9, 0x218, 0x0, "22f7108be89b217eee39e2e4ec424b799beaee0dc23551baf3521deba51122eb6d1c7a7602b30450cae4aba0fbf6d298692a000980c9b317dfe0ef05699422929942cc"}, @sadb_x_sec_ctx={0x12, 0x18, 0x4, 0x3, 0x86, "b6bd6ea06c5e8008ff1cd749afa79854c2b5f2d2865a47243e064ede71c2b774524d8afc0d431929b3f9f57b1f4a4a077961333bba1b13b35ad3423c796fc20e0049d3c3773b471ed902eb04725343d302b68e8481bd5d4c6817f06a647ede030bac49b0fc3d2812884ea159097fc8576decdcf0cd88e471084c1ee13bf2a76c25c7d70ccda1"}, @sadb_x_sec_ctx={0x9, 0x18, 0xd, 0x51, 0x3d, "a04383358097c87242c13492a04c9119e1db9410dd2d639a4cec2f3abe0d50ce58a758a3a802fea9feb75cc35673552d7b3702d7c26151a9aec409d5db"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_lifetime={0x4, 0x2, 0x5, 0x0, 0x7fffffffffffffff, 0x6}, @sadb_x_nat_t_type={0x1, 0x14, 0xb}]}, 0x168}}, 0x40004) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) close(r3) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000d00)={'veth0_virt_wifi\x00', {0x2, 0x4e24, @loopback}}) getsockname$packet(r5, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e80)=0x14) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000f00)='bpf_lsm_xfrm_policy_clone_security\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x15, 0x16, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @ldst={0x3, 0x3, 0x4, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', r8, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x0, 0x10, 0x4, 0xd}, 0x10, r9, r5, 0x1, &(0x7f0000000f40)=[r5, r3, r5, r3, r3, r3], &(0x7f0000000f80)=[{0x0, 0x5, 0x6, 0x7}], 0x10, 0x657e}, 0x94) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) getpid() r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xdc, r11, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xdc}}, 0x10) sendto$inet6(r3, &(0x7f00000012c0), 0x0, 0x27e2588aa369eb86, &(0x7f0000001300)={0xa, 0x4e20, 0x7, @private2, 0x4}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.166252608s ago: executing program 3 (id=573): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xcc04, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x43f, &(0x7f0000000240)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) symlink(&(0x7f0000000680)='./file2\x00', &(0x7f00000006c0)='./file1\x00') close_range(r1, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b0a00fe0000ea4e5d0906000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x1, &(0x7f0000000080)={0xb, 0x7}, &(0x7f0000000180)) 4.80388863s ago: executing program 0 (id=574): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@rand_addr=0x64010102, 0x4e24, 0x3, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {0xfffffffffffffff9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0xfffffffc, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x7, 0x200}}, 0xe8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x9c9c04, 0x0, 0x4, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = userfaultfd(0x80001) readv(r2, &(0x7f0000000180), 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = openat$cgroup_int(r3, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 4.80374616s ago: executing program 4 (id=575): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="000000d0ffffff00b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 4.504987017s ago: executing program 0 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88580, 0x53) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x9) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/62, &(0x7f00000008c0)=""/86, 0x100000}) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c0", 0x1, 0x80c60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x44}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4, 0x4, 0xd, 0x2004c8, 0x8000000, 0x1, 0x200000002, 0x7, 0x100000000, 0x5, 0x0, 0x2, 0x77419ae8], 0x0, 0x200}) mmap(&(0x7f000020a000/0x1000)=nil, 0x1000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x26, 0x0, 0x2000000, 0x0, 0x400000000001c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x44101}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000500)) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/86) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.233886693s ago: executing program 3 (id=577): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.722750212s ago: executing program 4 (id=578): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x1000, 0x2, 0xffffffff, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000b40)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x80a0000, 0xffff1000, 0x3, 0x5, 0x2, 0xb, 0xd, 0x3, 0x0, 0x3e, 0x8, 0x1}, {0xe000, 0x58000, 0x0, 0x2, 0x3, 0x7, 0x7, 0xc9, 0x8, 0x6, 0x2}, {0x4000, 0x100000, 0xe, 0x2, 0x6e, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xb, 0x0, 0x80, 0xee, 0x0, 0x7, 0x1, 0x0, 0xe, 0x9}, {0x80a0000, 0x4, 0x0, 0xfa, 0x5, 0x6, 0x1, 0x1, 0x6, 0x86, 0xb, 0xff}, {0xdddd0000, 0xa000, 0xc, 0x7, 0x7, 0x13, 0x1c, 0x47, 0x30, 0x2, 0x8, 0xe5}, {0xd000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0xa, 0x4, 0x3, 0x7f, 0x2, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x0, 0xeeef0000, [0x5, 0x8001, 0x8, 0x1]}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000240)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000001}, 0x1c) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x40, 0x7, 0xf0, {0xf0, 0x3, "a687ba2f195b9b7f08f913415033e33fc110b6d0662ea3a69d7851197cf1c9a1542bff693bc55dffb6b17c031f639e1c30587691eda9b52ac67eb0b777b8556f03cd52390e0f3b3effffff7f00000000134e324c9217ed2ae0569419f88c47c0fffffffffffffff9e4d35df0fc5c4109aca7af7ccb5a2638e73131856eed7c97660b644d212e3b737774e53e1f14d2cf9ea5d80900a452c5de29230514411e4f35d1b72811ef8b14af616d3f3420ea31f9a0c37ed3f47da479706eb2a3ec2046ec3cdbe03e39f11936c12ad15c21cb79616d66812736601faf0e37a059c2374877d09b383baa4d237e61d4dc795d"}}, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x2, 0x3, 0x1, 0x5, 0x1df, 0x1000, 0x6}, {0x80000008, 0x6, 0x1, 0x100, 0x71b2, 0x5, 0x6}, {0x80000019, 0x1, 0x2, 0x98ae, 0x3e, 0x3, 0x4}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) wait4(r0, 0x0, 0x8, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) ptrace$setregs(0xf, r0, 0x4, &(0x7f00000000c0)="fbc9586e0310a89f0647feb6478e743ad0de2c638c73f71fcdaf5a") 3.580822411s ago: executing program 0 (id=579): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000009004714a03fa4dbb2fb3ac70000000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',privport,access=', @ANYRESDEC=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r7 = gettid() syz_clone(0x42164011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x2010014, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) 3.447073569s ago: executing program 5 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f0000001a00)={@void, @val={0x1, 0x83, 0x8, 0xe057, 0x19, 0xc}, @ipv6=@icmpv6={0x6, 0x6, "9e4dda", 0xf88, 0x3a, 0x0, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x73, 0x0, 0x0, 0xc4}, @dstopts], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x5, 0xf, "f771ec8581dd5facadfd059868a26d5714388c9056a42c6a25de589d72d1ca6140ecd5394a0450100fbf341678178f002b89e4460791a53d532c5eac2595ca9b5d70dd37ac082bd21c303878280eee78794767ec7ba5a534b715c1170edb539236d552b64d552a6a480aabe7c0982298060665e4a4573af726"}, {0x1, 0x1dd, "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"}]}}}}, 0xfba) 3.330472326s ago: executing program 0 (id=581): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0xf, 0x2, "5c80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000030c0)={0x34, &(0x7f0000002ec0)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.329581376s ago: executing program 5 (id=582): socket(0x21, 0xa, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getsig(0x4202, r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x48) clock_adjtime(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x4, 0x8, 0x6d01, 0x7, 0x100000000, 0x1, 0x4, 0x7a, 0xad, 0x5, 0x1, 0x10001, 0x3, 0x0, 0x4, 0xd1, 0x1, 0x1, 0x0, 0x2, 0x8, 0x8, 0x3, 0x8, 0x48b2}) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x4, @local, 0x7ffffffb}, 0x1c) mkdir(&(0x7f0000000340)='./file0\x00', 0x10b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, 0x15, 0x1) umount2(&(0x7f0000000440)='./file0\x00', 0xb) sendto$inet6(r3, 0x0, 0x0, 0x4008091, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() 3.227492561s ago: executing program 3 (id=592): r0 = open(0x0, 0x14507e, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r1 = syz_io_uring_setup(0x1eae, &(0x7f00000006c0)={0x0, 0x9d2b, 0x400, 0x2, 0x132}, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x1682, 0x0, 0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c696f636861727365743d63703836392c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703733372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636f6465706167653d3836312c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d6d61637475726b6973682c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c00e1d625f10b9ee0a39b75b922489840691b55fdd962d869c07e5720a738d425cd66a3c97ccd3f631568b5d6c3"], 0x6, 0x2d5, &(0x7f0000000680)="$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") unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000002, 0x0, 0x7, 0xfffffffffffffff9}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x9}, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x28008004) sendmmsg$inet6(r0, 0x0, 0x0, 0x45cc1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x1, 0x0, &(0x7f0000001a00)) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c0", 0x1, 0x80c60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="0000000002b401002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x26, 0x0, 0x2000000, 0x0, 0x400000000001c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x44101}) ioctl$KVM_RUN(r5, 0xae80, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000200100002020782500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.211228223s ago: executing program 1 (id=583): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)='A') close_range(r0, 0xffffffffffffffff, 0x0) 3.033952923s ago: executing program 3 (id=584): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)='A') close_range(r0, 0xffffffffffffffff, 0x0) 2.406843149s ago: executing program 5 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x900}, 0x94) 2.342762053s ago: executing program 5 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) 2.292516816s ago: executing program 5 (id=587): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xcc04, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x43f, &(0x7f0000000240)="$eJzs3M1vG0UbAPBn106/+yZvVT76AQQKouIjadJSeuACAokDSEhwKMeQpFWp26AmSLSqICBUjqgSd8QRib+AE1wQcELiCndUqUK5tHAyWns3sV07TVwnDvj3kzad2Z1onse7Y8/u1AlgYI1mP5KIPRHxW0QM16vNDUbr/9xeujr919LV6SSq1Tf/TGrtbi1dnS6aFr+3u6iUI9JPkzjUpt/5y1fOT1Uqs5fy+vjChffG5y9fefbchamzs2dnL06eOnXi+MTzJyef60meWV63Dn44d/jAq29ff3369PV3fvomKfJvyaNHRlc7+ES12uPu+mtvQzkp9zEQ1qVUH6YxVBv/w1GKlZM3HK980tfggA1VrVar93c+vFgF/sOS6HcEQH8UH/TZ/W+xbdLUY0u4+WL9BijL+3a+1Y+UI83bDLXc3/bSaEScXvz7y2yLjXkOAQDQ5Lts/vNMu/lfGo3Phf6Xr6GMRMT/I2JfRJyMiP0RcV9Ere0DEfHgOvtvXSS5c/6T3ugqsTXK5n8v5GtbzfO/YvYXI6W8treW/1By5lxl9lj+mhyNoe1ZfWKVPr5/+dfPOx1rnP9lW9Z/MRfM47hR3t78OzNTC1P3knOjmx9HHCy3yz9ZXglIIuJARBzsso9zT319uNOxu+e/ih6sM1W/iniyfv4XoyX/QrL6+uT4jqjMHhsvroo7/fzLtTc69X9P+fdAdv53tb3+l/MfSRrXa+fX38e13z/reE/T7fW/LXmrad8HUwsLlyYitiWv1YNe2V+6NNnSbnKlfZb/0SPtx/++WHklDkVEdhE/FBEPR8QjeeyPRsRjEXFklfx/fOnxd7vPf2Nl+c+s6/yvFLZF6572hdL5H75t6nRkPfln5/9ErXQ037OW97+1xNXd1QwAAAD/PmlE7IkkHVsup+nYWP3/8O+PXWllbn7h6TNz71+cqX9HYCSG0uJJ13DD89CJ/La+qE+21I/nz42/KO2s1cem5yoz/U4eBtzuDuM/80ep39EBG667dbS053EAm8/3NWFwGf8wuIx/GFxtxv/OfsQBbL52n/8f9SEOYPOVG37mfxMMGBDu/2FwGf8wuIx/GEjzO+PuX5JXaFPYsTXC6Fsh0i0RhsIGFfr9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAb/wQAAP//qRrmAA==") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) symlink(&(0x7f0000000680)='./file2\x00', &(0x7f00000006c0)='./file1\x00') close_range(r1, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b0a00fe0000ea4e5d0906000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x1, &(0x7f0000000080)={0xb, 0x7}, &(0x7f0000000180)) 1.01971648s ago: executing program 5 (id=588): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) pselect6(0x40, &(0x7f0000000440)={0x2, 0xffffffffffffffff, 0x10000, 0xffff, 0x200, 0x9, 0x3, 0xfffffffffffffffd}, &(0x7f0000000480)={0x9, 0x8, 0x2, 0x9, 0x2, 0x80000001, 0x80000000}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000061b4d47900000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000006209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x2, 0xffff1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f00000000c0)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x128, 0x0, 0x148, 0x0, 0x148, 0x338, 0x240, 0x240, 0x338, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{}, {0x2}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @common=@set={{}, {{0xffffffffffffffff, [0x3, 0x0, 0x3, 0x7, 0x3, 0x2], 0xf3, 0x1}}}]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x1, 0xfc3e, 0xfffffffd, 0x6, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x473) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, &(0x7f0000000080)="66660fe7afdaf52e0f01c2d7f30f01e80f20e06635000200000f22e00f38cd634b0f013beabd310d0066b8010000000f01c1360f01c8", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) 942.288645ms ago: executing program 4 (id=589): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)='\f79', 0x3}, {&(0x7f00000014c0)="6b0abe2ace2af0dab9", 0x9}], 0x2) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000400)=0x3, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400070000000000000070000400000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006272696467655f736c6176655f3000000500110001000000180016801400018010000600ffffffffe09017000a000400"], 0x54}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 941.944785ms ago: executing program 4 (id=590): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000140)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fstatfs(r1, &(0x7f0000000180)=""/226) 821.660322ms ago: executing program 1 (id=591): io_uring_setup(0x491b, &(0x7f0000000040)={0x0, 0xc8df, 0x8, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000e000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000300)=0xc, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xff7fffdffffffffe) r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x94000) syz_usb_disconnect(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000ac0), 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x2010002, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000200000000000000c1387878ad3a4c69da48c0f2d384fcdc757de3d836857591f00ee0e74ca44762a16bdae26d7fb01f1bfef38038f667fb695e0428689acd57636654008d4bd401413306e151b17757dcd82f3478f9", @ANYRES16=r9, @ANYBLOB="000127bd7000ffdbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c000600030000000000000008000500020000000c0006000300000003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c851}, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0xc0085504, &(0x7f0000000000)=0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 787.778834ms ago: executing program 3 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f0000001a00)={@void, @val={0x1, 0x83, 0x8, 0xe057, 0x19, 0xc}, @ipv6=@icmpv6={0x6, 0x6, "9e4dda", 0xf88, 0x3a, 0x0, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x73, 0x0, 0x0, 0xc4}, @dstopts], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x5, 0xf, "f771ec8581dd5facadfd059868a26d5714388c9056a42c6a25de589d72d1ca6140ecd5394a0450100fbf341678178f002b89e4460791a53d532c5eac2595ca9b5d70dd37ac082bd21c303878280eee78794767ec7ba5a534b715c1170edb539236d552b64d552a6a480aabe7c0982298060665e4a4573af726"}, {0x1, 0x1dd, "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"}]}}}}, 0xfba) 734.795517ms ago: executing program 4 (id=594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)='A') close_range(r0, 0xffffffffffffffff, 0x0) 686.52328ms ago: executing program 3 (id=595): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file0/file0\x00', 0x800020, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0], 0x3, 0x1506, &(0x7f0000004000)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@fat=@codepage={'codepage', 0x3d, '863'}}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@fat=@umask={'umask', 0x3d, 0xe3}}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@utf8}, {@utf8no}]}, 0x2a, 0x363, &(0x7f0000000380)="$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") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) readv(r3, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000700)=""/207, 0xcf}], 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25.759768ms ago: executing program 1 (id=596): socket(0x21, 0xa, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getsig(0x4202, r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x48) clock_adjtime(0x1, &(0x7f0000000480)={0xffffffffffffffff, 0x4, 0x8, 0x6d01, 0x7, 0x100000000, 0x1, 0x4, 0x7a, 0xad, 0x5, 0x1, 0x10001, 0x3, 0x0, 0x4, 0xd1, 0x1, 0x1, 0x0, 0x2, 0x8, 0x8, 0x3, 0x8, 0x48b2}) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x4, @local, 0x7ffffffb}, 0x1c) mkdir(&(0x7f0000000340)='./file0\x00', 0x10b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, 0x15, 0x1) umount2(&(0x7f0000000440)='./file0\x00', 0xb) sendto$inet6(r3, 0x0, 0x0, 0x4008091, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() 0s ago: executing program 0 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88420, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone3(&(0x7f0000000380)={0x80008000, 0x0, 0x0, 0x0, {}, &(0x7f0000000080)=""/227, 0xfffffffffffffe2e, 0x0, 0x0}, 0x58) io_setup(0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x70, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109025e0001010030000904005d0302060000042406"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) pipe(&(0x7f00000000c0)) r3 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_read_part_table(0x1063, &(0x7f0000000000)="$eJzsz7FNA0EQBdC/3OpgBdIVQCnUQS+EdEEPpBBRADkREgEluAEHa619dgm2g/eClXb+zEgTLurpu33k6yGpJbmf67F+c3hakpqXKal/v3drVmpKMq9Nw3yambK5LSMeptekve13trpsk/RlfH7+Hz977y3P72c9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1C4AAP//VywPxg==") syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000016c0)="$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") ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000001080)=0xeeee0000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000001) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c0000001400010025bd7000000000000a"], 0x7c}}, 0x8094) kernel console output (not intermixed with test programs): _pages.rst. [ 78.845515][ T285] EXT4-fs (loop1): unmounting filesystem. [ 78.913886][ T1438] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.962078][ T283] EXT4-fs (loop3): unmounting filesystem. [ 78.969875][ T1440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.027822][ T284] EXT4-fs (loop0): unmounting filesystem. [ 79.092817][ T1452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 79.120781][ T1450] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.137538][ T1454] binder: 1453:1454 ioctl c0306201 200000000640 returned -22 [ 79.146817][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 79.146834][ T28] audit: type=1400 audit(1769898481.309:266): avc: denied { read } for pid=1453 comm="syz.0.335" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.160795][ T1450] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 79.186821][ T28] audit: type=1400 audit(1769898481.309:267): avc: denied { open } for pid=1453 comm="syz.0.335" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.212187][ T1450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 79.260466][ T342] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 79.268452][ T1450] System zones: 0-2, 18-18, 34-34 [ 79.278557][ T28] audit: type=1400 audit(1769898481.309:268): avc: denied { ioctl } for pid=1453 comm="syz.0.335" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.291355][ T342] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 79.311917][ T28] audit: type=1400 audit(1769898481.309:269): avc: denied { set_context_mgr } for pid=1453 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 79.335315][ T1450] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.334: bad orphan inode 15 [ 79.345943][ T1450] ext4_test_bit(bit=14, block=18) = 1 [ 79.351561][ T1450] is_bad_inode(inode)=0 [ 79.356019][ T1450] NEXT_ORPHAN(inode)=2264924160 [ 79.361082][ T1450] max_ino=32 [ 79.364434][ T342] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 79.371905][ T1450] i_nlink=0 [ 79.376126][ T1450] EXT4-fs error (device loop3): ext4_do_update_inode:5269: inode #15: comm syz.3.334: corrupted inode contents [ 79.389822][ T1450] EXT4-fs error (device loop3): ext4_dirty_inode:6134: inode #15: comm syz.3.334: mark_inode_dirty error [ 79.401922][ T1450] EXT4-fs error (device loop3): ext4_do_update_inode:5269: inode #15: comm syz.3.334: corrupted inode contents [ 79.414142][ T291] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 79.423042][ T1450] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2968: inode #15: comm syz.3.334: mark_inode_dirty error [ 79.435689][ T1450] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #15: comm syz.3.334: mark inode dirty (error -117) [ 79.448788][ T1450] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 79.458032][ T1450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.468932][ T342] usb 3-1: USB disconnect, device number 7 [ 79.499169][ T283] EXT4-fs (loop3): unmounting filesystem. [ 79.517342][ T28] audit: type=1400 audit(1769898481.689:270): avc: denied { ioctl } for pid=1462 comm="syz.3.338" path="socket:[19351]" dev="sockfs" ino=19351 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.608457][ T291] usb 1-1: Using ep0 maxpacket: 32 [ 79.618450][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9921, setting to 1024 [ 79.618820][ T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 79.638586][ T291] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.647722][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.660373][ T291] usb 1-1: config 0 descriptor?? [ 79.666257][ T1454] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.674315][ T291] hub 1-1:0.0: USB hub found [ 79.683007][ T1467] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 79.704514][ T1467] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.711643][ T1467] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.339: bg 0: block 16: invalid block bitmap [ 79.724643][ T1467] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 79.734075][ T1467] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.339: attempt to clear invalid blocks 1669132790 len 1 [ 79.748239][ T1467] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.339: invalid indirect mapped block 4294967295 (level 1) [ 79.762832][ T1467] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.339: invalid indirect mapped block 4294967295 (level 2) [ 79.777613][ T1467] EXT4-fs (loop3): 1 truncate cleaned up [ 79.783616][ T1467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.793479][ T1467] EXT4-fs (loop3): unmounting filesystem. [ 79.808521][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 79.810238][ T285] EXT4-fs (loop1): unmounting filesystem. [ 79.817182][ T60] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 79.828105][ T60] usb 5-1: config 0 has no interface number 0 [ 79.834475][ T60] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 79.851404][ T1470] capability: warning: `syz.1.340' uses 32-bit capabilities (legacy support in use) [ 79.861836][ T60] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 79.875663][ T291] hub 1-1:0.0: 1 port detected [ 79.879245][ T28] audit: type=1400 audit(1769898482.049:271): avc: denied { create } for pid=1469 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.908603][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.927178][ T60] usb 5-1: Product: syz [ 79.932777][ T60] usb 5-1: Manufacturer: syz [ 80.008068][ T60] usb 5-1: SerialNumber: syz [ 80.018909][ T60] usb 5-1: config 0 descriptor?? [ 80.024712][ T1458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.233600][ T1458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.404014][ T1477] set_capacity_and_notify: 10 callbacks suppressed [ 80.404039][ T1477] loop2: detected capacity change from 0 to 4096 [ 80.439667][ T1477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.484491][ T291] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 80.491846][ T342] usb 1-1: USB disconnect, device number 16 [ 80.596709][ T1488] loop1: detected capacity change from 0 to 512 [ 80.616287][ T1488] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.625624][ T1490] loop2: detected capacity change from 0 to 256 [ 80.637622][ T1488] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 80.647506][ T1488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 80.655766][ T1488] System zones: 0-2, 18-18, 34-34 [ 80.662267][ T1488] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.348: bad orphan inode 15 [ 80.673054][ T348] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.680624][ T1490] loop2: detected capacity change from 0 to 256 [ 80.684928][ T348] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.689061][ T1488] ext4_test_bit(bit=14, block=18) = 1 [ 80.699654][ T348] Buffer I/O error on dev loop2, logical block 0, async page read [ 80.706445][ T1488] is_bad_inode(inode)=0 [ 80.715942][ T1488] NEXT_ORPHAN(inode)=2264924160 [ 80.721308][ T1488] max_ino=32 [ 80.724542][ T1488] i_nlink=0 [ 80.727998][ T1488] EXT4-fs error (device loop1): ext4_do_update_inode:5269: inode #15: comm syz.1.348: corrupted inode contents [ 80.734259][ T1490] FAT-fs (loop2): Directory bread(block 64) failed [ 80.746505][ T1490] FAT-fs (loop2): Directory bread(block 65) failed [ 80.753250][ T1490] FAT-fs (loop2): Directory bread(block 66) failed [ 80.759984][ T1490] FAT-fs (loop2): Directory bread(block 67) failed [ 80.768712][ T1490] FAT-fs (loop2): Directory bread(block 68) failed [ 80.775369][ T1490] FAT-fs (loop2): Directory bread(block 69) failed [ 80.783692][ T1488] EXT4-fs error (device loop1): ext4_dirty_inode:6134: inode #15: comm syz.1.348: mark_inode_dirty error [ 80.784470][ T1490] FAT-fs (loop2): Directory bread(block 70) failed [ 80.796836][ T291] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 80.803826][ T1488] EXT4-fs error (device loop1): ext4_do_update_inode:5269: inode #15: comm syz.1.348: corrupted inode contents [ 80.809742][ T1490] FAT-fs (loop2): Directory bread(block 71) failed [ 80.827909][ T1490] FAT-fs (loop2): Directory bread(block 72) failed [ 80.834996][ T1490] FAT-fs (loop2): Directory bread(block 73) failed [ 80.845719][ T1488] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2968: inode #15: comm syz.1.348: mark_inode_dirty error [ 80.863985][ T1488] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #15: comm syz.1.348: mark inode dirty (error -117) [ 80.930910][ T1488] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 80.975329][ T1494] loop1: detected capacity change from 0 to 4096 [ 81.001278][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.018502][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.054485][ T291] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.065924][ T291] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 81.083487][ T291] usb 4-1: Manufacturer: syz [ 81.101974][ T291] usb 4-1: config 0 descriptor?? [ 81.102105][ T1497] loop0: detected capacity change from 0 to 4096 [ 81.269115][ T60] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 81.295172][ T60] asix: probe of 5-1:0.188 failed with error -32 [ 81.934359][ T291] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 81.943422][ T291] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 81.951993][ T291] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 81.960443][ T291] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 81.968027][ T291] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 81.983878][ T291] usb 4-1: USB disconnect, device number 14 [ 82.296653][ T60] usb 5-1: USB disconnect, device number 15 [ 82.323691][ T1534] loop4: detected capacity change from 0 to 512 [ 82.337296][ T1516] loop0: detected capacity change from 0 to 2048 [ 82.337753][ T1534] EXT4-fs: Ignoring removed nobh option [ 82.352212][ T1516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.352168][ T28] audit: type=1400 audit(1769898484.529:272): avc: denied { mounton } for pid=1515 comm="syz.0.355" path="/syzcgroup/unified/syz0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 82.360554][ T1534] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.483976][ T1534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 82.492618][ T1534] System zones: 1-12 [ 82.518024][ T1534] EXT4-fs (loop4): 1 truncate cleaned up [ 82.570961][ T1538] loop3: detected capacity change from 0 to 4096 [ 82.637358][ T1546] loop2: detected capacity change from 0 to 512 [ 82.645530][ T1546] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.675467][ T1546] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 82.684934][ T1546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 82.707241][ T1546] System zones: 0-2, 18-18, 34-34 [ 82.737493][ T1546] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.359: bad orphan inode 15 [ 82.772312][ T1546] ext4_test_bit(bit=14, block=18) = 1 [ 82.777775][ T1546] is_bad_inode(inode)=0 [ 82.790435][ T1546] NEXT_ORPHAN(inode)=2264924160 [ 82.795565][ T1546] max_ino=32 [ 82.807806][ T1546] i_nlink=0 [ 82.818520][ T1546] EXT4-fs error (device loop2): ext4_do_update_inode:5269: inode #15: comm syz.2.359: corrupted inode contents [ 82.831143][ T401] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.853889][ T1551] FAT-fs (loop1): Directory bread(block 64) failed [ 82.866459][ T1546] EXT4-fs error (device loop2): ext4_dirty_inode:6134: inode #15: comm syz.2.359: mark_inode_dirty error [ 82.867599][ T1551] FAT-fs (loop1): Directory bread(block 65) failed [ 82.909931][ T1551] FAT-fs (loop1): Directory bread(block 66) failed [ 82.910878][ T1546] EXT4-fs error (device loop2): ext4_do_update_inode:5269: inode #15: comm syz.2.359: corrupted inode contents [ 82.924896][ T1551] FAT-fs (loop1): Directory bread(block 67) failed [ 82.958619][ T1546] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2968: inode #15: comm syz.2.359: mark_inode_dirty error [ 82.967254][ T1551] FAT-fs (loop1): Directory bread(block 68) failed [ 82.992681][ T1546] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #15: comm syz.2.359: mark inode dirty (error -117) [ 82.997361][ T1551] FAT-fs (loop1): Directory bread(block 69) failed [ 83.018092][ T1556] tipc: Started in network mode [ 83.029856][ T1546] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 83.038791][ T1551] FAT-fs (loop1): Directory bread(block 70) failed [ 83.039246][ T1556] tipc: Node identity , cluster identity 4711 [ 83.052062][ T1551] FAT-fs (loop1): Directory bread(block 71) failed [ 83.068482][ T1551] FAT-fs (loop1): Directory bread(block 72) failed [ 83.092250][ T1551] FAT-fs (loop1): Directory bread(block 73) failed [ 83.098432][ T1556] tipc: Failed to obtain node identity [ 83.114673][ T1556] tipc: Enabling of bearer rejected, failed to enable media [ 83.226182][ T1560] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.254412][ T1560] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.278116][ T1560] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.288485][ T1560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.319734][ T1560] EXT4-fs (loop2): 1 truncate cleaned up [ 83.390116][ T28] audit: type=1400 audit(1769898485.569:273): avc: denied { append } for pid=1559 comm="syz.2.364" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.578466][ T342] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 83.756797][ T1554] F2FS-fs (loop3): invalid crc value [ 83.772654][ T291] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 83.788727][ T1554] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 83.811398][ T342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.819684][ T342] usb 1-1: not running at top speed; connect to a high speed hub [ 83.827356][ T1554] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 83.831256][ T342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.845500][ T342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.868994][ T342] usb 1-1: string descriptor 0 read error: -22 [ 83.875266][ T342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.894632][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.905969][ T342] usb 1-1: 0:2 : does not exist [ 83.968815][ T291] usb 5-1: Using ep0 maxpacket: 32 [ 83.988841][ T291] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 83.997136][ T291] usb 5-1: config 0 has no interface number 0 [ 84.003599][ T291] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 84.015533][ T291] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 84.024761][ T291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.032879][ T291] usb 5-1: Product: syz [ 84.037167][ T291] usb 5-1: Manufacturer: syz [ 84.041870][ T291] usb 5-1: SerialNumber: syz [ 84.051647][ T291] usb 5-1: config 0 descriptor?? [ 84.057046][ T1567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 84.265725][ T1567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 84.288466][ T1260] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 84.307427][ T28] audit: type=1400 audit(1769898486.489:274): avc: denied { setopt } for pid=1563 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.328730][ T1595] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.335158][ T342] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 84.346197][ T1595] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 84.355686][ T1595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 84.364087][ T1595] System zones: 0-2, 18-18, 34-34 [ 84.366788][ T342] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 84.377021][ T1595] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.374: bad orphan inode 15 [ 84.387538][ T1595] ext4_test_bit(bit=14, block=18) = 1 [ 84.394561][ T342] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 84.398789][ T1595] is_bad_inode(inode)=0 [ 84.410459][ T1595] NEXT_ORPHAN(inode)=2264924160 [ 84.415435][ T1595] max_ino=32 [ 84.418904][ T1595] i_nlink=0 [ 84.422300][ T1595] EXT4-fs error (device loop3): ext4_do_update_inode:5269: inode #15: comm syz.3.374: corrupted inode contents [ 84.434563][ T1595] EXT4-fs error (device loop3): ext4_dirty_inode:6134: inode #15: comm syz.3.374: mark_inode_dirty error [ 84.447245][ T1595] EXT4-fs error (device loop3): ext4_do_update_inode:5269: inode #15: comm syz.3.374: corrupted inode contents [ 84.449513][ T342] usb 1-1: USB disconnect, device number 17 [ 84.460691][ T1595] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2968: inode #15: comm syz.3.374: mark_inode_dirty error [ 84.487120][ T1595] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #15: comm syz.3.374: mark inode dirty (error -117) [ 84.502104][ T1595] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 84.557494][ T1600] EXT4-fs: Ignoring removed nobh option [ 84.578817][ T1600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.598151][ T1600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 84.646741][ T1600] System zones: 1-12 [ 84.679184][ T1600] EXT4-fs (loop2): 1 truncate cleaned up [ 84.727948][ T1607] FAT-fs (loop1): Directory bread(block 64) failed [ 84.748487][ T1607] FAT-fs (loop1): Directory bread(block 65) failed [ 84.765832][ T1607] FAT-fs (loop1): Directory bread(block 66) failed [ 84.772584][ T1607] FAT-fs (loop1): Directory bread(block 67) failed [ 84.779433][ T1607] FAT-fs (loop1): Directory bread(block 68) failed [ 84.786084][ T1607] FAT-fs (loop1): Directory bread(block 69) failed [ 84.792875][ T1607] FAT-fs (loop1): Directory bread(block 70) failed [ 84.799608][ T1607] FAT-fs (loop1): Directory bread(block 71) failed [ 84.806283][ T1607] FAT-fs (loop1): Directory bread(block 72) failed [ 84.812939][ T1607] FAT-fs (loop1): Directory bread(block 73) failed [ 84.924147][ T1611] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.938899][ T1611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.960113][ T1598] F2FS-fs (loop3): old and new quota format mixing [ 84.975436][ T28] audit: type=1400 audit(1769898487.149:275): avc: denied { create } for pid=1608 comm="syz.0.380" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.030194][ T28] audit: type=1400 audit(1769898487.189:276): avc: denied { unlink } for pid=284 comm="syz-executor" name="file1" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.305609][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.313806][ T1621] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.321131][ T1621] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.328024][ T291] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 85.339369][ T291] asix: probe of 5-1:0.188 failed with error -32 [ 85.542750][ T28] audit: type=1326 audit(1769898487.719:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.2.387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10df59aeb9 code=0x0 [ 85.607019][ T1635] set_capacity_and_notify: 11 callbacks suppressed [ 85.607035][ T1635] loop1: detected capacity change from 0 to 4096 [ 85.644521][ T28] audit: type=1400 audit(1769898487.819:278): avc: denied { mounton } for pid=1624 comm="syz.2.387" path=2F70726F632F3234362F7461736B2F323437202864656C6574656429 dev="proc" ino=21720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 86.442245][ T342] usb 5-1: USB disconnect, device number 16 [ 86.527956][ T1651] loop1: detected capacity change from 0 to 4096 [ 86.555024][ T1655] loop4: detected capacity change from 0 to 256 [ 87.090161][ T342] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 87.279853][ T342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.290098][ T342] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.303163][ T342] usb 2-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 87.312286][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.321323][ T342] usb 2-1: config 0 descriptor?? [ 87.328461][ T769] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.328473][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 87.424391][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.651714][ T342] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 87.659265][ T1659] loop1: detected capacity change from 0 to 40427 [ 87.667793][ T1659] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.675879][ T1659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.685567][ T1659] F2FS-fs (loop1): invalid crc value [ 87.695685][ T1659] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.714470][ T1673] loop3: detected capacity change from 0 to 4096 [ 87.745255][ T1659] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.752754][ T1659] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.797253][ T28] audit: type=1400 audit(1769898489.969:279): avc: denied { watch watch_reads } for pid=1658 comm="syz.1.397" path="/79/file0" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.833060][ T291] usb 2-1: USB disconnect, device number 12 [ 87.858631][ T342] usb 1-1: Using ep0 maxpacket: 16 [ 87.865587][ T342] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.876579][ T342] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.883756][ T342] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 87.892978][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.901909][ T342] usb 1-1: config 0 descriptor?? [ 88.554772][ T342] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 88.563404][ T342] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 88.594904][ T342] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 88.604080][ T1688] loop1: detected capacity change from 0 to 4096 [ 88.613595][ T342] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 88.622813][ T28] audit: type=1400 audit(1769898490.799:280): avc: denied { read append } for pid=1689 comm="syz.3.406" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.650243][ T342] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 88.660278][ T342] hid-generic 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 88.673834][ T28] audit: type=1400 audit(1769898490.819:281): avc: denied { open } for pid=1689 comm="syz.3.406" path="/73/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.799864][ T1695] loop4: detected capacity change from 0 to 4096 [ 88.839011][ C1] usb 1-1: input irq status -75 received [ 88.884739][ T1700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.408'. [ 88.893790][ T1700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.408'. [ 89.040371][ T39] usb 1-1: USB disconnect, device number 18 [ 89.450222][ T1714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.523088][ T1716] loop3: detected capacity change from 0 to 512 [ 89.533184][ T1716] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.544179][ T1716] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.561894][ T1716] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.415: bg 0: block 248: padding at end of block bitmap is not set [ 89.582801][ T1719] FAULT_INJECTION: forcing a failure. [ 89.582801][ T1719] name failslab, interval 1, probability 0, space 0, times 0 [ 89.595431][ T1716] Quota error (device loop3): write_blk: dquota write failed [ 89.595485][ T1716] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 89.595538][ T1716] EXT4-fs error (device loop3): ext4_acquire_dquot:6798: comm syz.3.415: Failed to acquire dquot type 1 [ 89.603762][ T1719] CPU: 0 PID: 1719 Comm: syz.0.416 Tainted: G W syzkaller #0 [ 89.616364][ T1716] EXT4-fs (loop3): 1 truncate cleaned up [ 89.624092][ T1719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.624120][ T1719] Call Trace: [ 89.624132][ T1719] [ 89.624140][ T1719] __dump_stack+0x21/0x24 [ 89.659595][ T1719] dump_stack_lvl+0x110/0x170 [ 89.664323][ T1719] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.669400][ T1719] dump_stack+0x15/0x24 [ 89.673603][ T1719] should_fail_ex+0x3d4/0x520 [ 89.678511][ T1719] __should_failslab+0xac/0xf0 [ 89.678528][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 89.691078][ T1719] ? __se_sys_mount+0x153/0x390 [ 89.695999][ T1719] should_failslab+0x9/0x20 [ 89.700654][ T1719] __kmem_cache_alloc_node+0x3d/0x2c0 [ 89.706044][ T1719] ? __se_sys_mount+0x153/0x390 [ 89.710928][ T1719] kmalloc_trace+0x29/0xb0 [ 89.715363][ T1719] __se_sys_mount+0x153/0x390 [ 89.720062][ T1719] ? fput+0x154/0x1a0 [ 89.724324][ T1719] ? __x64_sys_mount+0xd0/0xd0 [ 89.729116][ T1719] ? __cfi_ksys_write+0x10/0x10 [ 89.734042][ T1719] __x64_sys_mount+0xbf/0xd0 [ 89.738663][ T1719] x64_sys_call+0x65d/0x9a0 [ 89.743288][ T1719] do_syscall_64+0x4c/0xa0 [ 89.748067][ T1719] ? clear_bhb_loop+0x30/0x80 [ 89.752766][ T1719] ? clear_bhb_loop+0x30/0x80 [ 89.757460][ T1719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.763381][ T1719] RIP: 0033:0x7f8339d9aeb9 [ 89.767845][ T1719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.787662][ T1719] RSP: 002b:00007f833acfc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.796145][ T1719] RAX: ffffffffffffffda RBX: 00007f833a015fa0 RCX: 00007f8339d9aeb9 [ 89.804126][ T1719] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 89.812110][ T1719] RBP: 00007f833acfc090 R08: 0000200000000040 R09: 0000000000000000 [ 89.820272][ T1719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.828260][ T1719] R13: 00007f833a016038 R14: 00007f833a015fa0 R15: 00007ffeca43c6d8 [ 89.836245][ T1719] [ 89.858403][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 89.864745][ T39] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 89.896412][ T39] usb 2-1: config 0 has no interface number 0 [ 89.914652][ T39] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 89.940311][ T39] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 89.954169][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.963928][ T39] usb 2-1: Product: syz [ 89.968242][ T39] usb 2-1: Manufacturer: syz [ 89.973356][ T39] usb 2-1: SerialNumber: syz [ 90.041982][ T39] usb 2-1: config 0 descriptor?? [ 90.048518][ T1712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.074215][ T1730] netlink: 100 bytes leftover after parsing attributes in process `syz.0.421'. [ 90.325016][ T1712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.421534][ T1723] loop3: detected capacity change from 0 to 32768 [ 90.587939][ T1739] loop3: detected capacity change from 0 to 128 [ 90.649010][ T1746] loop3: detected capacity change from 0 to 4096 [ 90.655845][ T1746] EXT4-fs: Ignoring removed orlov option [ 90.663168][ T1746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.672061][ T1746] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 90.682820][ T28] audit: type=1400 audit(1769898492.859:282): avc: denied { ioctl } for pid=1745 comm="syz.3.426" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.727794][ T1748] loop3: detected capacity change from 0 to 512 [ 90.735004][ T1748] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.747391][ T1748] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 90.762677][ T1748] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.427: bg 0: block 248: padding at end of block bitmap is not set [ 90.778200][ T1748] Quota error (device loop3): write_blk: dquota write failed [ 90.786465][ T1748] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.805156][ T1748] EXT4-fs error (device loop3): ext4_acquire_dquot:6798: comm syz.3.427: Failed to acquire dquot type 1 [ 90.817372][ T1748] EXT4-fs (loop3): 1 truncate cleaned up [ 90.860511][ T1751] loop4: detected capacity change from 0 to 256 [ 90.879036][ T1751] loop4: detected capacity change from 0 to 256 [ 90.899932][ T1751] FAT-fs (loop4): Directory bread(block 64) failed [ 90.906647][ T1751] FAT-fs (loop4): Directory bread(block 65) failed [ 90.918615][ T1751] FAT-fs (loop4): Directory bread(block 66) failed [ 90.928516][ T1751] FAT-fs (loop4): Directory bread(block 67) failed [ 90.935146][ T1751] FAT-fs (loop4): Directory bread(block 68) failed [ 90.949423][ T1751] FAT-fs (loop4): Directory bread(block 69) failed [ 90.956210][ T1751] FAT-fs (loop4): Directory bread(block 70) failed [ 90.963135][ T1751] FAT-fs (loop4): Directory bread(block 71) failed [ 90.971073][ T1751] FAT-fs (loop4): Directory bread(block 72) failed [ 90.977741][ T1751] FAT-fs (loop4): Directory bread(block 73) failed [ 91.096913][ T39] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 91.107399][ T39] asix: probe of 2-1:0.188 failed with error -61 [ 91.238487][ T342] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 91.419447][ T342] usb 4-1: Using ep0 maxpacket: 16 [ 91.426822][ T342] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.437924][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.444805][ T342] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 91.454034][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.462856][ T342] usb 4-1: config 0 descriptor?? [ 91.736445][ T28] audit: type=1400 audit(1769898493.909:283): avc: denied { bind } for pid=1762 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.858123][ T28] audit: type=1400 audit(1769898494.029:284): avc: denied { setopt } for pid=1764 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 91.879809][ T342] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 91.897702][ T342] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 91.908473][ T342] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 91.926195][ T342] hid-generic 0003:1E71:2009.0009: unknown main item tag 0x0 [ 91.947327][ T342] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 91.980157][ T1773] overlayfs: unrecognized mount option "\‰" or missing value [ 91.988082][ T28] audit: type=1400 audit(1769898494.159:285): avc: denied { watch watch_reads } for pid=1772 comm="syz.4.436" path="/88" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.022257][ T28] audit: type=1400 audit(1769898494.159:286): avc: denied { watch } for pid=1772 comm="syz.4.436" path="/88/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.081212][ T28] audit: type=1400 audit(1769898494.249:287): avc: denied { create } for pid=1781 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.101626][ T1782] binder: 1781:1782 ioctl 400c620e 2000000001c0 returned -22 [ 92.148737][ C0] usb 4-1: input irq status -75 received [ 92.360531][ T1475] usb 4-1: USB disconnect, device number 15 [ 92.501745][ T356] usb 2-1: USB disconnect, device number 13 [ 92.885665][ T1791] loop3: detected capacity change from 0 to 512 [ 92.892467][ T1791] EXT4-fs: Ignoring removed nobh option [ 92.898877][ T1791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.949881][ T356] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 92.958746][ T1791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 92.973378][ T1798] loop4: detected capacity change from 0 to 512 [ 92.978517][ T1791] System zones: 1-12 [ 92.985331][ T1791] EXT4-fs (loop3): 1 truncate cleaned up [ 93.018540][ T1798] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.444: inode has both inline data and extents flags [ 93.038856][ T1798] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.444: couldn't read orphan inode 15 (err -117) [ 93.128427][ T356] usb 2-1: Using ep0 maxpacket: 32 [ 93.134814][ T356] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 93.147637][ T356] usb 2-1: config 0 has no interface number 0 [ 93.173701][ T356] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 93.543966][ T356] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 93.553251][ T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.561586][ T356] usb 2-1: Product: syz [ 93.565850][ T356] usb 2-1: Manufacturer: syz [ 93.571013][ T356] usb 2-1: SerialNumber: syz [ 93.577835][ T356] usb 2-1: config 0 descriptor?? [ 93.583547][ T1789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.793330][ T1789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.890433][ T1823] FAULT_INJECTION: forcing a failure. [ 93.890433][ T1823] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.903778][ T1823] CPU: 1 PID: 1823 Comm: syz.0.450 Tainted: G W syzkaller #0 [ 93.907513][ T1824] netlink: 100 bytes leftover after parsing attributes in process `syz.3.449'. [ 93.912646][ T1823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.912662][ T1823] Call Trace: [ 93.912668][ T1823] [ 93.912675][ T1823] __dump_stack+0x21/0x24 [ 93.912710][ T1823] dump_stack_lvl+0x110/0x170 [ 93.912735][ T1823] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.912760][ T1823] ? _parse_integer+0x2a/0x40 [ 93.957209][ T1823] dump_stack+0x15/0x24 [ 93.961509][ T1823] should_fail_ex+0x3d4/0x520 [ 93.966311][ T1823] should_fail+0xb/0x10 [ 93.970607][ T1823] should_fail_usercopy+0x1a/0x20 [ 93.975688][ T1823] _copy_from_user+0x1e/0xc0 [ 93.980415][ T1823] ___sys_sendmsg+0x1c3/0x360 [ 93.985155][ T1823] ? __sys_sendmsg+0x290/0x290 [ 93.989973][ T1823] ? __kasan_check_write+0x14/0x20 [ 93.995128][ T1823] ? proc_fail_nth_write+0x180/0x200 [ 94.000465][ T1823] ? vfs_write+0xa2c/0xce0 [ 94.004934][ T1823] ? __fdget+0x19c/0x220 [ 94.009228][ T1823] __x64_sys_sendmsg+0x205/0x2d0 [ 94.014223][ T1823] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 94.019743][ T1823] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 94.025951][ T1823] x64_sys_call+0x171/0x9a0 [ 94.027407][ T1826] loop3: detected capacity change from 0 to 2048 [ 94.030583][ T1823] do_syscall_64+0x4c/0xa0 [ 94.030612][ T1823] ? clear_bhb_loop+0x30/0x80 [ 94.030633][ T1823] ? clear_bhb_loop+0x30/0x80 [ 94.050765][ T1823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.056828][ T1823] RIP: 0033:0x7f8339d9aeb9 [ 94.061282][ T1823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.080924][ T1823] RSP: 002b:00007f833acfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.089370][ T1823] RAX: ffffffffffffffda RBX: 00007f833a015fa0 RCX: 00007f8339d9aeb9 [ 94.097366][ T1823] RDX: 0000000000008094 RSI: 0000200000000080 RDI: 0000000000000003 [ 94.105362][ T1823] RBP: 00007f833acfc090 R08: 0000000000000000 R09: 0000000000000000 [ 94.113427][ T1823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.121518][ T1823] R13: 00007f833a016038 R14: 00007f833a015fa0 R15: 00007ffeca43c6d8 [ 94.129558][ T1823] [ 94.172063][ T1826] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.255882][ T1834] loop3: detected capacity change from 0 to 4096 [ 94.290079][ T1834] FAULT_INJECTION: forcing a failure. [ 94.290079][ T1834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.303683][ T1834] CPU: 1 PID: 1834 Comm: syz.3.453 Tainted: G W syzkaller #0 [ 94.312529][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.323144][ T1834] Call Trace: [ 94.326507][ T1834] [ 94.329469][ T1834] __dump_stack+0x21/0x24 [ 94.333869][ T1834] dump_stack_lvl+0x110/0x170 [ 94.338599][ T1834] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.343693][ T1834] dump_stack+0x15/0x24 [ 94.347892][ T1834] should_fail_ex+0x3d4/0x520 [ 94.352649][ T1834] should_fail+0xb/0x10 [ 94.356889][ T1834] should_fail_usercopy+0x1a/0x20 [ 94.362075][ T1834] _copy_from_user+0x1e/0xc0 [ 94.366815][ T1834] io_submit_one+0xd5/0x1950 [ 94.371478][ T1834] ? irqentry_exit+0x37/0x40 [ 94.376201][ T1834] ? exc_page_fault+0x5e/0xb0 [ 94.380976][ T1834] ? lookup_ioctx+0x2b0/0x2b0 [ 94.385883][ T1834] ? asm_exc_page_fault+0x27/0x30 [ 94.391061][ T1834] ? __get_user_4+0x1c/0x30 [ 94.395611][ T1834] ? lookup_ioctx+0x1ab/0x2b0 [ 94.400329][ T1834] __se_sys_io_submit+0x17b/0x3e0 [ 94.405405][ T1834] ? __x64_sys_io_submit+0x90/0x90 [ 94.410586][ T1834] ? ksys_write+0x1f4/0x250 [ 94.415159][ T1834] ? __cfi_ksys_write+0x10/0x10 [ 94.420043][ T1834] ? debug_smp_processor_id+0x17/0x20 [ 94.425546][ T1834] __x64_sys_io_submit+0x7b/0x90 [ 94.430520][ T1834] x64_sys_call+0x81d/0x9a0 [ 94.435148][ T1834] do_syscall_64+0x4c/0xa0 [ 94.439615][ T1834] ? clear_bhb_loop+0x30/0x80 [ 94.444331][ T1834] ? clear_bhb_loop+0x30/0x80 [ 94.449059][ T1834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.455011][ T1834] RIP: 0033:0x7f0cdc99aeb9 [ 94.459592][ T1834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.479423][ T1834] RSP: 002b:00007f0cdd7a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 94.487883][ T1834] RAX: ffffffffffffffda RBX: 00007f0cdcc15fa0 RCX: 00007f0cdc99aeb9 [ 94.495903][ T1834] RDX: 0000200000001d00 RSI: 0000000000000001 RDI: 00007f0cdd781000 [ 94.503929][ T1834] RBP: 00007f0cdd7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 94.511951][ T1834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.519961][ T1834] R13: 00007f0cdcc16038 R14: 00007f0cdcc15fa0 R15: 00007ffc92ef6078 [ 94.527972][ T1834] [ 94.694598][ T283] EXT4-fs unmount: 45 callbacks suppressed [ 94.694637][ T283] EXT4-fs (loop3): unmounting filesystem. [ 94.724127][ T291] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 94.749468][ T1840] loop3: detected capacity change from 0 to 512 [ 94.759801][ T1840] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.771258][ T1840] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.786350][ T1840] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.455: bg 0: block 248: padding at end of block bitmap is not set [ 94.801234][ T1840] __quota_error: 1 callbacks suppressed [ 94.801250][ T1840] Quota error (device loop3): write_blk: dquota write failed [ 94.814814][ T1840] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 94.825075][ T1840] EXT4-fs error (device loop3): ext4_acquire_dquot:6798: comm syz.3.455: Failed to acquire dquot type 1 [ 94.837088][ T1840] EXT4-fs (loop3): 1 truncate cleaned up [ 94.842888][ T1840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.869775][ T283] EXT4-fs (loop3): unmounting filesystem. [ 94.899757][ T1843] loop3: detected capacity change from 0 to 4096 [ 94.909338][ T291] usb 1-1: Using ep0 maxpacket: 16 [ 94.916224][ T291] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.927943][ T291] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.935361][ T291] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 94.937916][ T1843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.945339][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.969934][ T291] usb 1-1: config 0 descriptor?? [ 95.065396][ T283] EXT4-fs (loop3): unmounting filesystem. [ 95.097262][ T1846] EXT4-fs: Ignoring removed nobh option [ 95.106681][ T1846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.121139][ T1846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 95.133281][ T1849] capability: warning: `syz.3.457' uses deprecated v2 capabilities in a way that may be insecure [ 95.148604][ T1846] System zones: 1-12 [ 95.153444][ T1846] EXT4-fs (loop4): 1 truncate cleaned up [ 95.159489][ T1846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.168777][ T356] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 95.195878][ T356] asix: probe of 2-1:0.188 failed with error -32 [ 95.339489][ T286] EXT4-fs (loop4): unmounting filesystem. [ 95.355956][ T28] audit: type=1400 audit(1769898497.529:289): avc: denied { map } for pid=1854 comm="syz.4.460" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.356368][ T1857] binder: BINDER_SET_CONTEXT_MGR already set [ 95.384693][ T291] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.386556][ T1857] binder: 1854:1857 ioctl 4018620d 2000000002c0 returned -16 [ 95.400826][ T1857] binder: BINDER_SET_CONTEXT_MGR already set [ 95.406965][ T1857] binder: 1854:1857 ioctl 4018620d 2000000002c0 returned -16 [ 95.414601][ T1857] binder: BINDER_SET_CONTEXT_MGR already set [ 95.420696][ T1857] binder: 1854:1857 ioctl 4018620d 2000000002c0 returned -16 [ 95.428223][ T1857] binder: BINDER_SET_CONTEXT_MGR already set [ 95.434808][ T1857] binder: 1854:1857 ioctl 4018620d 2000000002c0 returned -16 [ 95.451199][ T1857] binder: BINDER_SET_CONTEXT_MGR already set [ 95.459625][ T1857] binder: 1854:1857 ioctl 4018620d 2000000002c0 returned -16 [ 95.741787][ T291] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.749470][ T291] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.756914][ T291] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.766553][ T291] hid-generic 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 95.787349][ T1864] set_capacity_and_notify: 1 callbacks suppressed [ 95.787367][ T1864] loop4: detected capacity change from 0 to 4096 [ 95.814553][ T1864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.861453][ T291] usb 1-1: USB disconnect, device number 19 [ 95.876053][ T1866] fido_id[1866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 96.243722][ T356] usb 2-1: USB disconnect, device number 14 [ 96.311209][ T1876] loop1: detected capacity change from 0 to 4096 [ 96.337167][ T1876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.652511][ T286] EXT4-fs (loop4): unmounting filesystem. [ 96.688069][ T1890] loop4: detected capacity change from 0 to 512 [ 96.695222][ T1890] EXT4-fs: Ignoring removed nobh option [ 96.701461][ T1890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.858412][ T1890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 96.867243][ T1890] System zones: 1-12 [ 96.877877][ T1890] EXT4-fs (loop4): 1 truncate cleaned up [ 96.885407][ T1890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.228303][ T285] EXT4-fs (loop1): unmounting filesystem. [ 97.349572][ T1898] loop1: detected capacity change from 0 to 4096 [ 97.378947][ T1898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.390668][ T1898] FAULT_INJECTION: forcing a failure. [ 97.390668][ T1898] name failslab, interval 1, probability 0, space 0, times 0 [ 97.480972][ T1898] CPU: 0 PID: 1898 Comm: syz.1.471 Tainted: G W syzkaller #0 [ 97.489944][ T1898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.500035][ T1898] Call Trace: [ 97.503342][ T1898] [ 97.506295][ T1898] __dump_stack+0x21/0x24 [ 97.510672][ T1898] dump_stack_lvl+0x110/0x170 [ 97.515403][ T1898] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.520523][ T1898] ? __cfi_handle_mm_fault+0x10/0x10 [ 97.525865][ T1898] ? down_read_trylock+0x27f/0x660 [ 97.531030][ T1898] dump_stack+0x15/0x24 [ 97.535236][ T1898] should_fail_ex+0x3d4/0x520 [ 97.539967][ T1898] ? io_submit_one+0x135/0x1950 [ 97.544860][ T1898] __should_failslab+0xac/0xf0 [ 97.549660][ T1898] should_failslab+0x9/0x20 [ 97.554193][ T1898] kmem_cache_alloc+0x3b/0x330 [ 97.559005][ T1898] ? __kasan_check_write+0x14/0x20 [ 97.564175][ T1898] io_submit_one+0x135/0x1950 [ 97.569021][ T1898] ? irqentry_exit+0x37/0x40 [ 97.573658][ T1898] ? exc_page_fault+0x5e/0xb0 [ 97.578464][ T1898] ? lookup_ioctx+0x2b0/0x2b0 [ 97.583180][ T1898] ? asm_exc_page_fault+0x27/0x30 [ 97.588266][ T1898] ? __get_user_4+0x1c/0x30 [ 97.592806][ T1898] ? lookup_ioctx+0x1ab/0x2b0 [ 97.597535][ T1898] __se_sys_io_submit+0x17b/0x3e0 [ 97.602769][ T1898] ? __x64_sys_io_submit+0x90/0x90 [ 97.607912][ T1898] ? ksys_write+0x1f4/0x250 [ 97.612705][ T1898] ? __cfi_ksys_write+0x10/0x10 [ 97.617601][ T1898] ? debug_smp_processor_id+0x17/0x20 [ 97.623009][ T1898] __x64_sys_io_submit+0x7b/0x90 [ 97.627980][ T1898] x64_sys_call+0x81d/0x9a0 [ 97.632693][ T1898] do_syscall_64+0x4c/0xa0 [ 97.637145][ T1898] ? clear_bhb_loop+0x30/0x80 [ 97.641853][ T1898] ? clear_bhb_loop+0x30/0x80 [ 97.646583][ T1898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.652537][ T1898] RIP: 0033:0x7f323e99aeb9 [ 97.657072][ T1898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.676884][ T1898] RSP: 002b:00007f323f837028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 97.685344][ T1898] RAX: ffffffffffffffda RBX: 00007f323ec15fa0 RCX: 00007f323e99aeb9 [ 97.693458][ T1898] RDX: 0000200000001d00 RSI: 0000000000000001 RDI: 00007f323f815000 [ 97.701563][ T1898] RBP: 00007f323f837090 R08: 0000000000000000 R09: 0000000000000000 [ 97.709566][ T1898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.717572][ T1898] R13: 00007f323ec16038 R14: 00007f323ec15fa0 R15: 00007ffcbd73fed8 [ 97.725624][ T1898] [ 97.776320][ T286] EXT4-fs (loop4): unmounting filesystem. [ 97.792428][ T1907] loop4: detected capacity change from 0 to 256 [ 97.801282][ T1907] exfat: Deprecated parameter 'namecase' [ 97.807046][ T1907] exfat: Deprecated parameter 'namecase' [ 97.813017][ T291] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 97.828595][ T285] EXT4-fs (loop1): unmounting filesystem. [ 97.832956][ T1907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 98.008470][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 98.015841][ T291] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 98.027698][ T291] usb 4-1: config 0 has no interface number 0 [ 98.034019][ T291] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 98.045923][ T291] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 98.055197][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.063330][ T291] usb 4-1: Product: syz [ 98.067611][ T291] usb 4-1: Manufacturer: syz [ 98.072451][ T291] usb 4-1: SerialNumber: syz [ 98.077825][ T291] usb 4-1: config 0 descriptor?? [ 98.084442][ T1900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.145266][ T1922] virtio-fs: tag not found [ 98.148564][ T6] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 98.158421][ T356] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 98.293417][ T1900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.338466][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 98.345132][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.353341][ T356] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.364919][ T356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.371702][ T356] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 98.371811][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 98.388958][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.397975][ T356] usb 2-1: config 0 descriptor?? [ 98.404145][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.415375][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.440517][ T6] usb 5-1: string descriptor 0 read error: -22 [ 98.446825][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.456064][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.472901][ T6] usb 5-1: 0:2 : does not exist [ 98.806291][ T356] hid-generic 0003:1E71:2009.000B: unknown main item tag 0x0 [ 98.814194][ T356] hid-generic 0003:1E71:2009.000B: unknown main item tag 0x0 [ 98.822043][ T356] hid-generic 0003:1E71:2009.000B: unknown main item tag 0x0 [ 98.830041][ T356] hid-generic 0003:1E71:2009.000B: unknown main item tag 0x0 [ 98.838771][ T356] hid-generic 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 98.875168][ T1907] device ip6tnl1 entered promiscuous mode [ 99.078608][ C0] usb 2-1: input irq status -75 received [ 99.287178][ T356] usb 2-1: USB disconnect, device number 15 [ 99.303772][ T291] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 99.314154][ T291] asix: probe of 4-1:0.188 failed with error -32 [ 99.498475][ T1475] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 99.678498][ T1475] usb 1-1: Using ep0 maxpacket: 32 [ 99.685515][ T1475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.696973][ T1475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.707119][ T1475] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.716251][ T1475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.725808][ T1475] usb 1-1: config 0 descriptor?? [ 99.732549][ T1475] hub 1-1:0.0: USB hub found [ 99.908816][ T6] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 99.919959][ T6] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 99.930391][ T6] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 99.934615][ T1475] hub 1-1:0.0: 1 port detected [ 99.946238][ T6] usb 5-1: USB disconnect, device number 17 [ 100.322935][ T356] usb 4-1: USB disconnect, device number 16 [ 100.345819][ T1935] loop3: detected capacity change from 0 to 512 [ 100.354688][ T1935] EXT4-fs: Ignoring removed nobh option [ 100.361427][ T1935] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.372737][ T1935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 100.380935][ T1935] System zones: 1-12 [ 100.386422][ T1935] EXT4-fs (loop3): 1 truncate cleaned up [ 100.392273][ T1935] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.526370][ T1942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 100.539001][ T1942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.487'. [ 100.604043][ T60] hub 1-1:0.0: activate --> -90 [ 100.680230][ T28] audit: type=1400 audit(1769898502.859:290): avc: denied { mounton } for pid=1945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 100.784369][ T1949] loop1: detected capacity change from 0 to 4096 [ 100.804529][ T1938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.816998][ T1949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.829907][ T1938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.851389][ T1949] FAULT_INJECTION: forcing a failure. [ 100.851389][ T1949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.974686][ T1949] CPU: 1 PID: 1949 Comm: syz.1.490 Tainted: G W syzkaller #0 [ 100.983529][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.993751][ T1949] Call Trace: [ 100.997077][ T1949] [ 101.000042][ T1949] __dump_stack+0x21/0x24 [ 101.004426][ T1949] dump_stack_lvl+0x110/0x170 [ 101.009243][ T1949] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.014587][ T1949] dump_stack+0x15/0x24 [ 101.018826][ T1949] should_fail_ex+0x3d4/0x520 [ 101.023953][ T1949] should_fail+0xb/0x10 [ 101.028182][ T1949] should_fail_usercopy+0x1a/0x20 [ 101.033251][ T1949] _copy_to_user+0x1e/0x90 [ 101.037725][ T1949] simple_read_from_buffer+0xe9/0x160 [ 101.043036][ T342] usb 1-1: USB disconnect, device number 20 [ 101.043149][ T1949] proc_fail_nth_read+0x1a6/0x220 [ 101.054225][ T1949] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.059825][ T1949] ? security_file_permission+0x94/0xb0 [ 101.065417][ T1949] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.071136][ T1949] vfs_read+0x27a/0x910 [ 101.075366][ T1949] ? __cfi_vfs_read+0x10/0x10 [ 101.080109][ T1949] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 101.086490][ T1949] ? irqentry_exit+0x37/0x40 [ 101.091426][ T1949] ? sysvec_reschedule_ipi+0x78/0x80 [ 101.096939][ T1949] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 101.102630][ T1949] ksys_read+0x149/0x250 [ 101.106926][ T1949] ? __cfi_ksys_read+0x10/0x10 [ 101.111740][ T1949] ? fpregs_restore_userregs+0x128/0x260 [ 101.117520][ T1949] __x64_sys_read+0x7b/0x90 [ 101.122341][ T1949] x64_sys_call+0x2f/0x9a0 [ 101.126824][ T1949] do_syscall_64+0x4c/0xa0 [ 101.131297][ T1949] ? clear_bhb_loop+0x30/0x80 [ 101.136081][ T1949] ? clear_bhb_loop+0x30/0x80 [ 101.140808][ T1949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.146764][ T1949] RIP: 0033:0x7f323e95b78e [ 101.151231][ T1949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.171197][ T1949] RSP: 002b:00007f323f836fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.179667][ T1949] RAX: ffffffffffffffda RBX: 00007f323f8376c0 RCX: 00007f323e95b78e [ 101.187870][ T1949] RDX: 000000000000000f RSI: 00007f323f8370a0 RDI: 0000000000000005 [ 101.196154][ T1949] RBP: 00007f323f837090 R08: 0000000000000000 R09: 0000000000000000 [ 101.204264][ T1949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.212356][ T1949] R13: 00007f323ec16038 R14: 00007f323ec15fa0 R15: 00007ffcbd73fed8 [ 101.220376][ T1949] [ 101.224243][ T1475] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 101.257323][ T1945] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.265237][ T1945] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.273244][ T1945] device bridge_slave_0 entered promiscuous mode [ 101.283444][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.290847][ T1945] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.298803][ T1945] device bridge_slave_1 entered promiscuous mode [ 101.352702][ T285] EXT4-fs (loop1): unmounting filesystem. [ 101.487161][ T283] EXT4-fs (loop3): unmounting filesystem. [ 101.745204][ T1964] loop3: detected capacity change from 0 to 512 [ 101.782851][ T1964] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.809941][ T1964] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 101.829231][ T1964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 101.843828][ T1964] System zones: 0-2, 18-18, 34-34 [ 101.845325][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.856252][ T1945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.860739][ T1964] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.494: bad orphan inode 15 [ 101.863947][ T1945] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.880607][ T1945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.893969][ T1964] ext4_test_bit(bit=14, block=18) = 1 [ 101.905751][ T1964] is_bad_inode(inode)=0 [ 101.915947][ T1964] NEXT_ORPHAN(inode)=2264924160 [ 101.927173][ T1964] max_ino=32 [ 101.935169][ T1964] i_nlink=0 [ 101.943934][ T1964] EXT4-fs error (device loop3): ext4_do_update_inode:5269: inode #15: comm syz.3.494: corrupted inode contents [ 101.968297][ T1964] EXT4-fs error (device loop3): ext4_dirty_inode:6134: inode #15: comm syz.3.494: mark_inode_dirty error [ 101.979989][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.989997][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.993484][ T1964] EXT4-fs error (device loop3): ext4_do_update_inode:5269: inode #15: comm syz.3.494: corrupted inode contents [ 102.009987][ T1964] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2968: inode #15: comm syz.3.494: mark_inode_dirty error [ 102.028896][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.039000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.043544][ T1964] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #15: comm syz.3.494: mark inode dirty (error -117) [ 102.059512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.069062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.084326][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.091473][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.128842][ T1964] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 102.138004][ T1964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.149319][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.189293][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.204195][ T283] EXT4-fs (loop3): unmounting filesystem. [ 102.227635][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.234798][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.296183][ T1982] loop3: detected capacity change from 0 to 512 [ 102.302901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.386611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.394330][ T28] audit: type=1400 audit(1769898504.569:291): avc: denied { setopt } for pid=1967 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.421850][ T1982] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.431730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.440505][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.605868][ T1982] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 102.662329][ T1982] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.497: bg 0: block 248: padding at end of block bitmap is not set [ 102.736393][ T1982] Quota error (device loop3): write_blk: dquota write failed [ 102.778451][ T1982] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 102.781486][ T342] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 102.803094][ T1982] EXT4-fs error (device loop3): ext4_acquire_dquot:6798: comm syz.3.497: Failed to acquire dquot type 1 [ 102.820369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.821598][ T1982] EXT4-fs (loop3): 1 truncate cleaned up [ 102.833312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.840929][ T1982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.856897][ T1945] device veth0_vlan entered promiscuous mode [ 102.872077][ T338] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.879700][ T452] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 102.897511][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.905718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.914595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.922410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.938254][ T1945] device veth1_macvtap entered promiscuous mode [ 102.947179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.955783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.964434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.979829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.988638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.997560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.006562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.018426][ T342] usb 1-1: Using ep0 maxpacket: 32 [ 103.026127][ T342] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 103.026439][ T28] audit: type=1400 audit(1769898505.199:292): avc: denied { mount } for pid=1945 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.043221][ T342] usb 1-1: config 0 has no interface number 0 [ 103.073285][ T28] audit: type=1400 audit(1769898505.239:293): avc: denied { mounton } for pid=1945 comm="syz-executor" path="/root/syzkaller.EPL24o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.094128][ T342] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.126840][ T342] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 103.136296][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.144668][ T342] usb 1-1: Product: syz [ 103.149417][ T342] usb 1-1: Manufacturer: syz [ 103.154103][ T342] usb 1-1: SerialNumber: syz [ 103.221147][ T342] usb 1-1: config 0 descriptor?? [ 103.238570][ T1978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.454312][ T1978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.528486][ T6] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 103.548413][ T19] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 103.719973][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.728330][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 103.736999][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.747250][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.757369][ T19] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 103.768640][ T19] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 103.778713][ T19] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 103.788136][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.797822][ T6] usb 5-1: string descriptor 0 read error: -22 [ 103.804988][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.814970][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.828675][ T6] usb 5-1: 0:2 : does not exist [ 104.006838][ T2000] loop5: detected capacity change from 0 to 4096 [ 104.019765][ T2000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.033154][ T19] usb 2-1: string descriptor 0 read error: -71 [ 104.499630][ T342] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.509919][ T342] asix: probe of 1-1:0.188 failed with error -32 [ 104.548073][ T2005] loop1: detected capacity change from 0 to 512 [ 104.554874][ T2005] EXT4-fs: Ignoring removed nobh option [ 104.561524][ T2005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.572469][ T2005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 104.580932][ T2005] System zones: 1-12 [ 104.585854][ T2005] EXT4-fs (loop1): 1 truncate cleaned up [ 104.591942][ T2005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.634767][ T1993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.645740][ T1993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.880750][ T1945] EXT4-fs (loop5): unmounting filesystem. [ 104.928491][ T769] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.934775][ T452] Bluetooth: hci0: command 0x1003 tx timeout [ 104.954850][ T283] EXT4-fs (loop3): unmounting filesystem. [ 104.999022][ T2013] FAULT_INJECTION: forcing a failure. [ 104.999022][ T2013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.038435][ T2013] CPU: 0 PID: 2013 Comm: syz.3.505 Tainted: G W syzkaller #0 [ 105.047277][ T2013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.057466][ T2013] Call Trace: [ 105.060782][ T2013] [ 105.063774][ T2013] __dump_stack+0x21/0x24 [ 105.068145][ T2013] dump_stack_lvl+0x110/0x170 [ 105.072947][ T2013] ? __cfi_dump_stack_lvl+0x8/0x8 [ 105.078011][ T2013] dump_stack+0x15/0x24 [ 105.082207][ T2013] should_fail_ex+0x3d4/0x520 [ 105.086929][ T2013] should_fail+0xb/0x10 [ 105.091123][ T2013] should_fail_usercopy+0x1a/0x20 [ 105.096185][ T2013] copyin+0x20/0xa0 [ 105.100030][ T2013] _copy_from_iter+0x3e2/0x1010 [ 105.104923][ T2013] ? __cfi__copy_from_iter+0x10/0x10 [ 105.110254][ T2013] ? __kasan_check_write+0x14/0x20 [ 105.115500][ T2013] ? __build_skb_around+0x24f/0x470 [ 105.120825][ T2013] ? __check_object_size+0x45a/0x600 [ 105.126166][ T2013] netlink_sendmsg+0x73b/0xbd0 [ 105.130985][ T2013] ? __cfi_netlink_sendmsg+0x10/0x10 [ 105.136327][ T2013] ? security_socket_sendmsg+0x93/0xb0 [ 105.141828][ T2013] ? __cfi_netlink_sendmsg+0x10/0x10 [ 105.147615][ T2013] ____sys_sendmsg+0x5cc/0x990 [ 105.152439][ T2013] ? __sys_sendmsg_sock+0x40/0x40 [ 105.157704][ T2013] ? import_iovec+0x7c/0xb0 [ 105.162287][ T2013] ___sys_sendmsg+0x2a2/0x360 [ 105.167015][ T2013] ? __sys_sendmsg+0x290/0x290 [ 105.171830][ T2013] ? __kasan_check_write+0x14/0x20 [ 105.176993][ T2013] ? proc_fail_nth_write+0x180/0x200 [ 105.182687][ T2013] ? vfs_write+0xa2c/0xce0 [ 105.187151][ T2013] ? __fdget+0x19c/0x220 [ 105.191434][ T2013] __x64_sys_sendmsg+0x205/0x2d0 [ 105.196426][ T2013] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 105.201928][ T2013] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 105.208040][ T2013] x64_sys_call+0x171/0x9a0 [ 105.212671][ T2013] do_syscall_64+0x4c/0xa0 [ 105.217132][ T2013] ? clear_bhb_loop+0x30/0x80 [ 105.221845][ T2013] ? clear_bhb_loop+0x30/0x80 [ 105.226555][ T2013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.232588][ T2013] RIP: 0033:0x7f0cdc99aeb9 [ 105.237042][ T2013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.256786][ T2013] RSP: 002b:00007f0cdd7a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.266203][ T2013] RAX: ffffffffffffffda RBX: 00007f0cdcc15fa0 RCX: 00007f0cdc99aeb9 [ 105.274347][ T2013] RDX: 0000000000008094 RSI: 0000200000000080 RDI: 0000000000000003 [ 105.282383][ T2013] RBP: 00007f0cdd7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 105.290409][ T2013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.298460][ T2013] R13: 00007f0cdcc16038 R14: 00007f0cdcc15fa0 R15: 00007ffc92ef6078 [ 105.306657][ T2013] [ 105.325304][ T6] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 105.332831][ T2015] loop4: detected capacity change from 0 to 512 [ 105.350010][ T6] usb 5-1: Warning! Unlikely big volume range (=24142), cval->res is probably wrong. [ 105.360604][ T6] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 3899/28041/1 [ 105.368971][ T2015] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.389889][ T6] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 105.398816][ T2015] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 105.412629][ T2015] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 105.423391][ T6] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 105.435833][ T2015] System zones: 0-2, 18-18, 34-34 [ 105.466573][ T2019] loop3: detected capacity change from 0 to 128 [ 105.473388][ T2015] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.506: bad orphan inode 15 [ 105.494813][ T19] usb 2-1: USB disconnect, device number 16 [ 105.501091][ T6] usb 5-1: USB disconnect, device number 18 [ 105.522533][ T966] usb 1-1: USB disconnect, device number 21 [ 105.524593][ T2011] loop5: detected capacity change from 0 to 40427 [ 105.559907][ T2011] F2FS-fs (loop5): invalid crc value [ 105.588478][ T2015] ext4_test_bit(bit=14, block=18) = 1 [ 105.594111][ T2015] is_bad_inode(inode)=0 [ 105.606813][ T2015] NEXT_ORPHAN(inode)=2264924160 [ 105.611956][ T2015] max_ino=32 [ 105.615195][ T2015] i_nlink=0 [ 105.620775][ T2011] F2FS-fs (loop5): Found nat_bits in checkpoint [ 105.634431][ T2015] EXT4-fs error (device loop4): ext4_do_update_inode:5269: inode #15: comm syz.4.506: corrupted inode contents [ 105.647893][ T285] EXT4-fs (loop1): unmounting filesystem. [ 105.656870][ T2015] EXT4-fs error (device loop4): ext4_dirty_inode:6134: inode #15: comm syz.4.506: mark_inode_dirty error [ 105.676667][ T2015] EXT4-fs error (device loop4): ext4_do_update_inode:5269: inode #15: comm syz.4.506: corrupted inode contents [ 105.689060][ T2015] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2968: inode #15: comm syz.4.506: mark_inode_dirty error [ 105.719300][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.777535][ T2015] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.506: mark inode dirty (error -117) [ 105.791013][ T2015] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 105.806521][ T2015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.890143][ T2011] F2FS-fs (loop5): Start checkpoint disabled! [ 106.007878][ T2011] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 106.166316][ T2011] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 106.191037][ T286] EXT4-fs (loop4): unmounting filesystem. [ 106.199011][ T2011] syz.5.504: attempt to access beyond end of device [ 106.199011][ T2011] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 106.226579][ T2011] netlink: 56 bytes leftover after parsing attributes in process `syz.5.504'. [ 106.331821][ T1981] kworker/u4:7: attempt to access beyond end of device [ 106.331821][ T1981] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 106.607077][ T2058] loop3: detected capacity change from 0 to 4096 [ 106.618019][ T2058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.118426][ T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.163572][ T28] audit: type=1400 audit(1769898509.339:294): avc: denied { append } for pid=2066 comm="syz.4.521" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.226922][ T28] audit: type=1400 audit(1769898509.399:295): avc: denied { listen } for pid=2069 comm="syz.1.522" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.308396][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 107.314759][ T19] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 107.349010][ T19] usb 6-1: config 0 has no interface number 0 [ 107.359712][ T19] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 107.378736][ T19] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 107.398033][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.407984][ T19] usb 6-1: Product: syz [ 107.412917][ T19] usb 6-1: Manufacturer: syz [ 107.417612][ T19] usb 6-1: SerialNumber: syz [ 107.426943][ T19] usb 6-1: config 0 descriptor?? [ 107.439797][ T2056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.482042][ T283] EXT4-fs (loop3): unmounting filesystem. [ 107.504904][ T2075] loop4: detected capacity change from 0 to 4096 [ 107.528178][ T2075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.539260][ T2080] loop3: detected capacity change from 0 to 512 [ 107.562113][ T2080] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.592931][ T2080] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 107.616221][ T286] EXT4-fs (loop4): unmounting filesystem. [ 107.623288][ T2080] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.526: bg 0: block 248: padding at end of block bitmap is not set [ 107.638890][ T342] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 107.658752][ T2080] Quota error (device loop3): write_blk: dquota write failed [ 107.669926][ T2056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.677821][ T2080] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 107.700292][ T2080] EXT4-fs error (device loop3): ext4_acquire_dquot:6798: comm syz.3.526: Failed to acquire dquot type 1 [ 107.712639][ T2080] EXT4-fs (loop3): 1 truncate cleaned up [ 107.718408][ T2080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.747403][ T2085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 107.756703][ T2085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.528'. [ 107.781509][ T283] EXT4-fs (loop3): unmounting filesystem. [ 107.808291][ T2090] loop3: detected capacity change from 0 to 4096 [ 107.820321][ T2090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.838440][ T342] usb 2-1: Using ep0 maxpacket: 32 [ 108.202546][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.220922][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.231429][ T342] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.240711][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.249469][ T342] usb 2-1: config 0 descriptor?? [ 108.255516][ T342] hub 2-1:0.0: USB hub found [ 108.456609][ T342] hub 2-1:0.0: 1 port detected [ 108.819121][ T283] EXT4-fs (loop3): unmounting filesystem. [ 108.925737][ T28] audit: type=1400 audit(1769898511.099:296): avc: denied { create } for pid=2105 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.955829][ T28] audit: type=1400 audit(1769898511.099:297): avc: denied { write } for pid=2105 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.975296][ T28] audit: type=1400 audit(1769898511.099:298): avc: denied { accept } for pid=2105 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.995159][ T19] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 109.005418][ T19] asix: probe of 6-1:0.188 failed with error -61 [ 109.013115][ T28] audit: type=1400 audit(1769898511.099:299): avc: denied { ioctl } for pid=2105 comm="syz.3.533" path="socket:[23575]" dev="sockfs" ino=23575 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.249545][ T19] hub 2-1:0.0: activate --> -90 [ 109.450527][ T2109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.459244][ T2109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.688501][ T1989] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 109.868526][ T1989] usb 5-1: Using ep0 maxpacket: 8 [ 109.875202][ T1989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.886697][ T1989] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.896042][ T1989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.911198][ T1989] usb 5-1: config 0 descriptor?? [ 109.961695][ T2123] loop3: detected capacity change from 0 to 4096 [ 109.976127][ T2123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.416380][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 110.432861][ T1989] usb 6-1: USB disconnect, device number 2 [ 110.499634][ T2132] loop5: detected capacity change from 0 to 512 [ 110.509026][ T2134] netlink: 100 bytes leftover after parsing attributes in process `syz.0.541'. [ 110.532969][ T2132] EXT4-fs: Ignoring removed nobh option [ 110.545417][ T2132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.557812][ T2132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 110.566113][ T2132] System zones: 1-12 [ 110.571006][ T2132] EXT4-fs (loop5): 1 truncate cleaned up [ 110.576884][ T2132] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 110.709091][ T2140] netlink: 100 bytes leftover after parsing attributes in process `syz.1.543'. [ 111.325089][ T342] usb 2-1: USB disconnect, device number 17 [ 111.331788][ T283] EXT4-fs (loop3): unmounting filesystem. [ 111.400018][ T1945] EXT4-fs (loop5): unmounting filesystem. [ 111.607745][ T2153] loop1: detected capacity change from 0 to 40427 [ 111.624098][ T2153] F2FS-fs (loop1): invalid crc value [ 111.834986][ T2153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.390055][ T39] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 112.482676][ T2153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.178573][ T28] audit: type=1400 audit(1769898514.969:300): avc: denied { setattr } for pid=2148 comm="syz.1.546" path="pipe:[14577]" dev="pipefs" ino=14577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 113.362640][ T342] usb 5-1: USB disconnect, device number 19 [ 113.669771][ T2153] syz.1.546 (2153) used greatest stack depth: 19808 bytes left [ 113.712997][ T285] syz-executor: attempt to access beyond end of device [ 113.712997][ T285] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 113.736527][ T2165] loop5: detected capacity change from 0 to 256 [ 113.755102][ T28] audit: type=1400 audit(1769898515.929:301): avc: denied { sqpoll } for pid=2157 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.778077][ T2167] loop4: detected capacity change from 0 to 256 [ 113.802987][ T2165] loop5: detected capacity change from 0 to 256 [ 113.809411][ T400] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.853782][ T2167] loop4: detected capacity change from 0 to 256 [ 113.860263][ T401] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.870826][ T2165] FAT-fs (loop5): Directory bread(block 64) failed [ 113.877412][ T2165] FAT-fs (loop5): Directory bread(block 65) failed [ 113.878779][ T401] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.893210][ T2165] FAT-fs (loop5): Directory bread(block 66) failed [ 113.910595][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.923723][ T401] Buffer I/O error on dev loop4, logical block 0, async page read [ 113.931587][ T39] usb 4-1: not running at top speed; connect to a high speed hub [ 113.931668][ T2165] FAT-fs (loop5): Directory bread(block 67) failed [ 113.932277][ T2165] FAT-fs (loop5): Directory bread(block 68) failed [ 113.953108][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.966216][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.980324][ T2165] FAT-fs (loop5): Directory bread(block 69) failed [ 113.988955][ T2165] FAT-fs (loop5): Directory bread(block 70) failed [ 113.997447][ T2165] FAT-fs (loop5): Directory bread(block 71) failed [ 114.004311][ T2165] FAT-fs (loop5): Directory bread(block 72) failed [ 114.004408][ T39] usb 4-1: string descriptor 0 read error: -22 [ 114.017438][ T2165] FAT-fs (loop5): Directory bread(block 73) failed [ 114.022736][ T2167] FAT-fs (loop4): Directory bread(block 64) failed [ 114.024892][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.034353][ T2167] FAT-fs (loop4): Directory bread(block 65) failed [ 114.047495][ T2167] FAT-fs (loop4): Directory bread(block 66) failed [ 114.054616][ T2167] FAT-fs (loop4): Directory bread(block 67) failed [ 114.061522][ T2167] FAT-fs (loop4): Directory bread(block 68) failed [ 114.062566][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.069540][ T2167] FAT-fs (loop4): Directory bread(block 69) failed [ 114.083405][ T2167] FAT-fs (loop4): Directory bread(block 70) failed [ 114.090270][ T2167] FAT-fs (loop4): Directory bread(block 71) failed [ 114.106129][ T2167] FAT-fs (loop4): Directory bread(block 72) failed [ 114.112511][ T39] usb 4-1: 0:2 : does not exist [ 114.117968][ T2167] FAT-fs (loop4): Directory bread(block 73) failed [ 114.188484][ T342] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 114.248432][ T356] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 114.296937][ T2176] loop5: detected capacity change from 0 to 512 [ 114.308592][ T2176] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.320213][ T2176] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 114.329551][ T2176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 114.337627][ T2176] System zones: 0-2, 18-18, 34-34 [ 114.345191][ T2176] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.553: bad orphan inode 15 [ 114.359935][ T2176] ext4_test_bit(bit=14, block=18) = 1 [ 114.365371][ T2176] is_bad_inode(inode)=0 [ 114.370148][ T342] usb 1-1: Using ep0 maxpacket: 16 [ 114.375615][ T2176] NEXT_ORPHAN(inode)=2264924160 [ 114.381080][ T2176] max_ino=32 [ 114.384409][ T2176] i_nlink=0 [ 114.390324][ T342] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.401890][ T2176] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #15: comm syz.5.553: corrupted inode contents [ 114.414387][ T342] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.421698][ T342] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 114.431522][ T2176] EXT4-fs error (device loop5): ext4_dirty_inode:6134: inode #15: comm syz.5.553: mark_inode_dirty error [ 114.443172][ T356] usb 2-1: Using ep0 maxpacket: 32 [ 114.448668][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.457731][ T356] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 114.470054][ T2176] EXT4-fs error (device loop5): ext4_do_update_inode:5269: inode #15: comm syz.5.553: corrupted inode contents [ 114.482198][ T342] usb 1-1: config 0 descriptor?? [ 114.487275][ T356] usb 2-1: config 0 has no interface number 0 [ 114.493987][ T356] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 114.506454][ T2176] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2968: inode #15: comm syz.5.553: mark_inode_dirty error [ 114.519165][ T2176] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #15: comm syz.5.553: mark inode dirty (error -117) [ 114.535769][ T2176] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 114.540043][ T356] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 114.550323][ T2176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 114.572365][ T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.598232][ T356] usb 2-1: Product: syz [ 114.608485][ T1945] EXT4-fs (loop5): unmounting filesystem. [ 114.614906][ T356] usb 2-1: Manufacturer: syz [ 114.631799][ T356] usb 2-1: SerialNumber: syz [ 114.643208][ T356] usb 2-1: config 0 descriptor?? [ 114.648606][ T2172] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 114.659570][ T2181] loop5: detected capacity change from 0 to 128 [ 114.690849][ T28] audit: type=1400 audit(1769898516.869:302): avc: denied { mounton } for pid=2180 comm="syz.5.554" path="/10/file1/file0" dev="loop5" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 114.730120][ T2181] device syzkaller0 entered promiscuous mode [ 114.857710][ T2172] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 114.896976][ T2185] loop5: detected capacity change from 0 to 4096 [ 114.917611][ T342] hid-generic 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 114.940336][ T2185] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.946037][ T39] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 114.969404][ T39] usb 4-1: Warning! Unlikely big volume range (=24142), cval->res is probably wrong. [ 114.988390][ T39] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 3899/28041/1 [ 115.000419][ T39] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.077304][ T2189] loop4: detected capacity change from 0 to 512 [ 115.085054][ T2189] EXT4-fs: Ignoring removed nobh option [ 115.092014][ T39] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 115.102127][ T2189] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.117584][ T2189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 115.126757][ T2189] System zones: 1-12 [ 115.129076][ T39] usb 4-1: USB disconnect, device number 17 [ 115.136884][ T2189] EXT4-fs (loop4): 1 truncate cleaned up [ 115.143008][ T2189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.393812][ T1989] usb 1-1: USB disconnect, device number 22 [ 115.482178][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.625023][ T2196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.758778][ T1945] EXT4-fs (loop5): unmounting filesystem. [ 115.825228][ T2200] loop3: detected capacity change from 0 to 512 [ 115.841599][ T2200] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 115.870345][ T2204] loop5: detected capacity change from 0 to 256 [ 115.908724][ T2204] exfat: Deprecated parameter 'utf8' [ 115.914278][ T2204] exfat: Deprecated parameter 'utf8' [ 115.960747][ T28] audit: type=1400 audit(1769898518.139:303): avc: denied { write } for pid=2205 comm="syz.0.561" name="softnet_stat" dev="proc" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 115.963294][ T2206] netlink: 100 bytes leftover after parsing attributes in process `syz.0.561'. [ 115.986327][ T2204] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 116.007155][ T356] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 116.024909][ T356] asix: probe of 2-1:0.188 failed with error -61 [ 116.113133][ T286] EXT4-fs (loop4): unmounting filesystem. [ 116.195626][ T2214] netlink: 'syz.4.565': attribute type 3 has an invalid length. [ 116.368882][ T356] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.478514][ T6] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 116.498477][ T39] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 116.548445][ T356] usb 6-1: Using ep0 maxpacket: 32 [ 116.555237][ T356] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.564150][ T356] usb 6-1: config 0 has no interface number 0 [ 116.573040][ T356] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.582839][ T356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.591011][ T356] usb 6-1: Product: syz [ 116.595326][ T356] usb 6-1: Manufacturer: syz [ 116.600465][ T356] usb 6-1: SerialNumber: syz [ 116.613766][ T356] usb 6-1: config 0 descriptor?? [ 116.621109][ T356] smsc95xx v2.0.0 [ 116.670467][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.679088][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 116.679595][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 116.691041][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.705238][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.715519][ T39] usb 5-1: config 3 has an invalid interface number: 47 but max is 1 [ 116.723724][ T39] usb 5-1: config 3 has no interface number 0 [ 116.728231][ T6] usb 1-1: string descriptor 0 read error: -22 [ 116.730319][ T39] usb 5-1: config 3 interface 1 has no altsetting 0 [ 116.730339][ T39] usb 5-1: config 3 interface 47 has no altsetting 0 [ 116.750397][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.760704][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.770001][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 116.779288][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.783888][ T6] usb 1-1: 0:2 : does not exist [ 116.792575][ T39] usb 5-1: Product: syz [ 116.796786][ T39] usb 5-1: Manufacturer: syz [ 116.801832][ T39] usb 5-1: SerialNumber: syz [ 116.835916][ T356] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 116.876547][ T356] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 116.894576][ T356] usb 6-1: USB disconnect, device number 3 [ 116.924213][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.941216][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 116.953115][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.965368][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 116.974847][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.983571][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.992468][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.001505][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.012425][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.090326][ T2225] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.098558][ T2225] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.107678][ T2225] F2FS-fs (loop3): invalid crc value [ 117.115085][ T2225] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.154034][ T2225] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.161375][ T2225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.193308][ T2225] ------------[ cut here ]------------ [ 117.198890][ T2225] WARNING: CPU: 0 PID: 2225 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 117.208456][ T2225] Modules linked in: [ 117.212408][ T2225] CPU: 0 PID: 2225 Comm: syz.3.568 Tainted: G W syzkaller #0 [ 117.221283][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.231481][ T2225] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 117.237196][ T2225] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e a0 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 72 5e ff <0f> 0b e9 17 ff ff ff e8 0b 72 5e ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 117.237723][ T1989] usb 2-1: USB disconnect, device number 18 [ 117.256917][ T2225] RSP: 0018:ffffc90000cafb20 EFLAGS: 00010283 [ 117.256952][ T2225] RAX: ffffffff8212f9f9 RBX: 1ffff11022fb8ef4 RCX: 0000000000080000 [ 117.256968][ T2225] RDX: ffffc900026fe000 RSI: 0000000000001dd8 RDI: 0000000000001dd9 [ 117.256982][ T2225] RBP: ffffc90000cafb50 R08: ffff888133a15a5f R09: 1ffff11026742b4b [ 117.256997][ T2225] R10: dffffc0000000000 R11: ffffed1026742b4c R12: ffff888117dc7770 [ 117.257012][ T2225] R13: 0000000000000000 R14: ffff888133a159b8 R15: ffff888117dc77a0 [ 117.257025][ T2225] FS: 00007f0cdd7a36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 117.257061][ T2225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.257077][ T2225] CR2: 00007f95e485d000 CR3: 0000000146613000 CR4: 00000000003506b0 [ 117.257095][ T2225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.257108][ T2225] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 117.257121][ T2225] Call Trace: [ 117.257127][ T2225] [ 117.257137][ T2225] ovl_do_remove+0x717/0xac0 [ 117.257169][ T2225] ? ovl_set_redirect+0x6c0/0x6c0 [ 117.257214][ T2225] ? selinux_inode_rmdir+0x22/0x30 [ 117.257239][ T2225] ovl_rmdir+0x1a/0x20 [ 117.257260][ T2225] vfs_rmdir+0x393/0x500 [ 117.257286][ T2225] incfs_kill_sb+0x105/0x220 [ 117.257311][ T2225] deactivate_locked_super+0xb5/0x120 [ 117.257365][ T2225] deactivate_super+0xaf/0xe0 [ 117.266938][ T2234] overlayfs: unrecognized mount option "uuid=null" or missing value [ 117.269931][ T2225] cleanup_mnt+0x474/0x500 [ 117.406835][ T2225] __cleanup_mnt+0x19/0x20 [ 117.411348][ T2225] task_work_run+0x1e1/0x250 [ 117.415990][ T2225] ? __cfi_task_work_run+0x10/0x10 [ 117.421279][ T2225] ? __x64_sys_umount+0x12d/0x170 [ 117.426353][ T2225] ? __cfi___x64_sys_umount+0x10/0x10 [ 117.431812][ T2225] exit_to_user_mode_loop+0x9b/0xb0 [ 117.437055][ T2225] exit_to_user_mode_prepare+0x87/0xd0 [ 117.442604][ T2225] syscall_exit_to_user_mode+0x1a/0x30 [ 117.448138][ T2225] do_syscall_64+0x58/0xa0 [ 117.452841][ T2225] ? clear_bhb_loop+0x30/0x80 [ 117.457602][ T2225] ? clear_bhb_loop+0x30/0x80 [ 117.462352][ T2225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.468335][ T2225] RIP: 0033:0x7f0cdc99aeb9 [ 117.473147][ T2225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.493544][ T2225] RSP: 002b:00007f0cdd7a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.502348][ T2225] RAX: 0000000000000000 RBX: 00007f0cdcc15fa0 RCX: 00007f0cdc99aeb9 [ 117.510391][ T2225] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000002c0 [ 117.518418][ T2225] RBP: 00007f0cdca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 117.526487][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.534549][ T2225] R13: 00007f0cdcc16038 R14: 00007f0cdcc15fa0 R15: 00007ffc92ef6078 [ 117.542695][ T2225] [ 117.545873][ T2225] ---[ end trace 0000000000000000 ]--- [ 117.553427][ T2225] ------------[ cut here ]------------ [ 117.559093][ T2225] WARNING: CPU: 1 PID: 2225 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 117.568690][ T2225] Modules linked in: [ 117.572635][ T2225] CPU: 1 PID: 2225 Comm: syz.3.568 Tainted: G W syzkaller #0 [ 117.581535][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.588651][ T28] audit: type=1400 audit(1769898519.769:304): avc: denied { write } for pid=2237 comm="syz.4.572" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.591894][ T2225] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 117.620041][ T2225] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e a0 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 72 5e ff <0f> 0b e9 17 ff ff ff e8 0b 72 5e ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 117.639751][ T2225] RSP: 0018:ffffc90000cafb20 EFLAGS: 00010287 [ 117.645918][ T2225] RAX: ffffffff8212f9f9 RBX: 1ffff11022fb8ef4 RCX: 0000000000080000 [ 117.654040][ T2225] RDX: ffffc900026fe000 RSI: 0000000000059573 RDI: 0000000000059574 [ 117.662101][ T2225] RBP: ffffc90000cafb50 R08: ffff888133a15a5f R09: 1ffff11026742b4b [ 117.670271][ T2225] R10: dffffc0000000000 R11: ffffed1026742b4c R12: ffff888117dc7770 [ 117.678295][ T2225] R13: 0000000000000000 R14: ffff888133a159b8 R15: ffff888117dc77a0 [ 117.687560][ T2225] FS: 00007f0cdd7a36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 117.696778][ T2225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.703444][ T2225] CR2: 00007f2d4d5e2c98 CR3: 0000000146613000 CR4: 00000000003506a0 [ 117.711569][ T2225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.719601][ T2225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.727698][ T2225] Call Trace: [ 117.731099][ T2225] [ 117.734069][ T2225] ovl_do_remove+0x717/0xac0 [ 117.738774][ T2225] ? ovl_set_redirect+0x6c0/0x6c0 [ 117.743866][ T2225] ? selinux_inode_rmdir+0x22/0x30 [ 117.749099][ T2225] ovl_rmdir+0x1a/0x20 [ 117.753219][ T2225] vfs_rmdir+0x393/0x500 [ 117.757534][ T2225] incfs_kill_sb+0x198/0x220 [ 117.762259][ T2225] deactivate_locked_super+0xb5/0x120 [ 117.767703][ T2225] deactivate_super+0xaf/0xe0 [ 117.772530][ T2225] cleanup_mnt+0x474/0x500 [ 117.776996][ T2225] __cleanup_mnt+0x19/0x20 [ 117.781503][ T2225] task_work_run+0x1e1/0x250 [ 117.786257][ T2225] ? __cfi_task_work_run+0x10/0x10 [ 117.791493][ T2225] ? __x64_sys_umount+0x12d/0x170 [ 117.796571][ T2225] ? __cfi___x64_sys_umount+0x10/0x10 [ 117.802042][ T2225] exit_to_user_mode_loop+0x9b/0xb0 [ 117.807176][ T6] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 117.807287][ T2225] exit_to_user_mode_prepare+0x87/0xd0 [ 117.820462][ T2225] syscall_exit_to_user_mode+0x1a/0x30 [ 117.821951][ T6] usb 1-1: Warning! Unlikely big volume range (=28041), cval->res is probably wrong. [ 117.825977][ T2225] do_syscall_64+0x58/0xa0 [ 117.826008][ T2225] ? clear_bhb_loop+0x30/0x80 [ 117.836623][ T356] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 117.840382][ T2225] ? clear_bhb_loop+0x30/0x80 [ 117.857814][ T2225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.863838][ T2225] RIP: 0033:0x7f0cdc99aeb9 [ 117.863845][ T6] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/28041/1 [ 117.867378][ T6] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 117.868296][ T2225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.903646][ T2225] RSP: 002b:00007f0cdd7a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.912224][ T6] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 117.919613][ T2225] RAX: 0000000000000000 RBX: 00007f0cdcc15fa0 RCX: 00007f0cdc99aeb9 [ 117.927626][ T2225] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000002c0 [ 117.935761][ T2225] RBP: 00007f0cdca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 117.943216][ T6] usb 1-1: USB disconnect, device number 23 [ 117.943878][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.957896][ T2225] R13: 00007f0cdcc16038 R14: 00007f0cdcc15fa0 R15: 00007ffc92ef6078 [ 117.966153][ T2225] [ 117.969338][ T2225] ---[ end trace 0000000000000000 ]--- [ 117.975231][ T39] snd-usb-audio: probe of 5-1:3.1 failed with error -22 [ 117.988394][ T39] snd-usb-audio: probe of 5-1:3.47 failed with error -22 [ 118.004759][ T39] usb 5-1: USB disconnect, device number 20 [ 118.029810][ T356] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.040330][ T356] usb 6-1: not running at top speed; connect to a high speed hub [ 118.055663][ T356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.066736][ T356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.079292][ T356] usb 6-1: string descriptor 0 read error: -22 [ 118.085565][ T356] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.095013][ T356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.105890][ T356] usb 6-1: 0:2 : does not exist [ 118.128580][ T1989] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 118.179016][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.217608][ T2240] EXT4-fs: Ignoring removed nobh option [ 118.223905][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.47/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.240326][ T2240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.255003][ T2240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 118.263342][ T2240] System zones: 1-12 [ 118.268637][ T2240] EXT4-fs (loop3): 1 truncate cleaned up [ 118.274470][ T2240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 118.313209][ T2229] EXT4-fs: Ignoring removed i_version option [ 118.329287][ T2229] EXT4-fs: Ignoring removed bh option [ 118.359921][ T1989] usb 2-1: Using ep0 maxpacket: 16 [ 118.378864][ T1989] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.389919][ T1989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.396575][ T1989] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 118.405836][ T1989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.479082][ T2229] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.485660][ T1989] usb 2-1: config 0 descriptor?? [ 118.489312][ T2229] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.540146][ T28] audit: type=1400 audit(1769898520.719:305): avc: denied { ioctl } for pid=2228 comm="syz.5.570" path="/16/bus/file1" dev="loop5" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.566915][ T2229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.586558][ T2229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.900132][ T1989] hid-generic 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 118.937514][ T283] EXT4-fs (loop3): unmounting filesystem. [ 119.365316][ T356] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 119.374654][ T39] usb 2-1: USB disconnect, device number 19 [ 119.381613][ T356] usb 6-1: Warning! Unlikely big volume range (=24142), cval->res is probably wrong. [ 119.391486][ T356] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 3899/28041/1 [ 119.410951][ T356] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 119.421215][ T356] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 119.433593][ T356] usb 6-1: USB disconnect, device number 4 [ 119.597899][ T2268] 9pnet_fd: Insufficient options for proto=fd [ 119.638826][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.673738][ T2270] overlayfs: failed to resolve '/t': -2 [ 119.724330][ T1945] EXT4-fs (loop5): unmounting filesystem. [ 119.744590][ T2272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.808528][ T1989] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 119.889672][ T2274] set_capacity_and_notify: 3 callbacks suppressed [ 119.889693][ T2274] loop3: detected capacity change from 0 to 256 [ 119.907172][ T2274] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.048596][ T1989] usb 5-1: Using ep0 maxpacket: 32 [ 120.082634][ T1989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.095417][ T1989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.106724][ T1989] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.117508][ T1989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.271806][ T1989] usb 5-1: config 0 descriptor?? [ 120.323047][ T1989] hub 5-1:0.0: USB hub found [ 120.378522][ T6] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 120.458539][ T356] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 120.530706][ T1989] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 120.568422][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 120.575845][ T6] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 120.584205][ T6] usb 1-1: config 0 has no interface number 0 [ 120.590509][ T966] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 120.598883][ T6] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 120.611129][ T6] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 120.620515][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.628694][ T6] usb 1-1: Product: syz [ 120.632944][ T6] usb 1-1: Manufacturer: syz [ 120.637662][ T6] usb 1-1: SerialNumber: syz [ 120.643568][ T6] usb 1-1: config 0 descriptor?? [ 120.649014][ T2276] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.658428][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 120.665253][ T356] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.676455][ T356] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.683428][ T356] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 120.692659][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.708619][ T356] usb 2-1: config 0 descriptor?? [ 120.752802][ T1989] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1 [ 120.764322][ T1989] hid-generic: probe of 0003:046D:C31C.000E failed with error -22 [ 120.788434][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 120.796654][ T966] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.801714][ T2289] overlayfs: failed to set xattr on upper [ 120.808794][ T966] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.815284][ T2289] overlayfs: ...falling back to index=off,metacopy=off. [ 120.821515][ T966] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 120.827897][ T2289] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 120.839159][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.859833][ T966] usb 4-1: config 0 descriptor?? [ 120.864430][ T2276] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.877223][ T1945] ------------[ cut here ]------------ [ 120.883217][ T1945] WARNING: CPU: 0 PID: 1945 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 120.893293][ T1945] Modules linked in: [ 120.897345][ T1945] CPU: 0 PID: 1945 Comm: syz-executor Tainted: G W syzkaller #0 [ 120.906942][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.917209][ T1945] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 120.923055][ T1945] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e a0 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 72 5e ff <0f> 0b e9 17 ff ff ff e8 0b 72 5e ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 120.943098][ T1945] RSP: 0018:ffffc900012d7b20 EFLAGS: 00010293 [ 120.949310][ T1945] RAX: ffffffff8212f9f9 RBX: 1ffff11026706e4a RCX: ffff888115bee540 [ 120.954161][ T2262] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.957523][ T1945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.957546][ T1945] RBP: ffffc900012d7b50 R08: ffff8881338a446f R09: 1ffff1102671488d [ 120.981730][ T1945] R10: dffffc0000000000 R11: ffffed102671488e R12: ffff888133837220 [ 120.989828][ T1945] R13: 0000000000000000 R14: ffff8881338a43c8 R15: ffff888133837250 [ 120.998219][ T1945] FS: 00005555560e9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 121.007372][ T1945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.014115][ T1945] CR2: 0000555556114988 CR3: 0000000142270000 CR4: 00000000003526b0 [ 121.022364][ T1945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.030789][ T1945] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 121.038894][ T1945] Call Trace: [ 121.042218][ T1945] [ 121.045249][ T1945] ovl_do_remove+0x717/0xac0 [ 121.050112][ T1945] ? ovl_set_redirect+0x6c0/0x6c0 [ 121.055393][ T1945] ? selinux_inode_rmdir+0x22/0x30 [ 121.060875][ T1945] ovl_rmdir+0x1a/0x20 [ 121.065100][ T1945] vfs_rmdir+0x393/0x500 [ 121.069589][ T1945] incfs_kill_sb+0x105/0x220 [ 121.074512][ T1945] deactivate_locked_super+0xb5/0x120 [ 121.080087][ T1945] deactivate_super+0xaf/0xe0 [ 121.084909][ T1945] cleanup_mnt+0x474/0x500 [ 121.089090][ T1989] usb 5-1: USB disconnect, device number 21 [ 121.089500][ T1945] __cleanup_mnt+0x19/0x20 [ 121.100161][ T1945] task_work_run+0x1e1/0x250 [ 121.104807][ T1945] ? __cfi_task_work_run+0x10/0x10 [ 121.110015][ T1945] ? __x64_sys_umount+0x12d/0x170 [ 121.115633][ T1945] ? __cfi___x64_sys_umount+0x10/0x10 [ 121.121112][ T1945] exit_to_user_mode_loop+0x9b/0xb0 [ 121.126612][ T1945] exit_to_user_mode_prepare+0x87/0xd0 [ 121.132657][ T1945] syscall_exit_to_user_mode+0x1a/0x30 [ 121.138163][ T1945] do_syscall_64+0x58/0xa0 [ 121.142674][ T1945] ? clear_bhb_loop+0x30/0x80 [ 121.147397][ T1945] ? clear_bhb_loop+0x30/0x80 [ 121.152311][ T1945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.158409][ T1945] RIP: 0033:0x7f5d9fd9c117 [ 121.162887][ T1945] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 121.183134][ T1945] RSP: 002b:00007ffc92342f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 121.191790][ T1945] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5d9fd9c117 [ 121.200457][ T1945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc92343000 [ 121.208515][ T1945] RBP: 00007ffc92343000 R08: 00007ffc92344000 R09: 00000000ffffffff [ 121.216704][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc92344090 [ 121.224907][ T1945] R13: 00007f5d9fe0471f R14: 000000000001d820 R15: 00007ffc923440d0 [ 121.233076][ T1945] [ 121.236401][ T1945] ---[ end trace 0000000000000000 ]--- [ 121.242629][ T1945] ------------[ cut here ]------------ [ 121.248277][ T1945] WARNING: CPU: 1 PID: 1945 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 121.251679][ T356] hid-generic 0003:1E71:2009.000F: unknown main item tag 0x0 [ 121.257947][ T1945] Modules linked in: [ 121.257969][ T1945] CPU: 1 PID: 1945 Comm: syz-executor Tainted: G W syzkaller #0 [ 121.267276][ T356] hid-generic 0003:1E71:2009.000F: unknown main item tag 0x0 [ 121.269473][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.269496][ T1945] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 121.280347][ T356] hid-generic 0003:1E71:2009.000F: unknown main item tag 0x0 [ 121.286139][ T1945] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0e a0 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 72 5e ff <0f> 0b e9 17 ff ff ff e8 0b 72 5e ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 121.297187][ T356] hid-generic 0003:1E71:2009.000F: unknown main item tag 0x0 [ 121.302098][ T1945] RSP: 0018:ffffc900012d7b20 EFLAGS: 00010293 [ 121.302124][ T1945] RAX: ffffffff8212f9f9 RBX: 1ffff11026706e4a RCX: ffff888115bee540 [ 121.337630][ T356] hid-generic 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 121.342997][ T1945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.343016][ T1945] RBP: ffffc900012d7b50 R08: ffff8881338a446f R09: 1ffff1102671488d [ 121.343031][ T1945] R10: dffffc0000000000 R11: ffffed102671488e R12: ffff888133837220 [ 121.343048][ T1945] R13: 0000000000000000 R14: ffff8881338a43c8 R15: ffff888133837250 [ 121.395427][ T1945] FS: 00005555560e9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 121.404614][ T1945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.411506][ T1945] CR2: 0000001b2e91fff8 CR3: 0000000142270000 CR4: 00000000003526a0 [ 121.419723][ T1945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.427746][ T1945] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.435833][ T1945] Call Trace: [ 121.439178][ T1945] [ 121.442166][ T1945] ovl_do_remove+0x717/0xac0 [ 121.446810][ T1945] ? ovl_set_redirect+0x6c0/0x6c0 [ 121.451947][ T1945] ? selinux_inode_rmdir+0x22/0x30 [ 121.457292][ T1945] ovl_rmdir+0x1a/0x20 [ 121.461459][ T1945] vfs_rmdir+0x393/0x500 [ 121.465754][ T1945] incfs_kill_sb+0x198/0x220 [ 121.470432][ T1945] deactivate_locked_super+0xb5/0x120 [ 121.476067][ T1945] deactivate_super+0xaf/0xe0 [ 121.480842][ T1945] cleanup_mnt+0x474/0x500 [ 121.485307][ T1945] __cleanup_mnt+0x19/0x20 [ 121.489824][ T1945] task_work_run+0x1e1/0x250 [ 121.494477][ T1945] ? __cfi_task_work_run+0x10/0x10 [ 121.499713][ T1945] ? __x64_sys_umount+0x12d/0x170 [ 121.504796][ T1945] ? __cfi___x64_sys_umount+0x10/0x10 [ 121.510549][ T1945] exit_to_user_mode_loop+0x9b/0xb0 [ 121.516058][ T1945] exit_to_user_mode_prepare+0x87/0xd0 [ 121.521602][ T1945] syscall_exit_to_user_mode+0x1a/0x30 [ 121.527135][ T1945] do_syscall_64+0x58/0xa0 [ 121.531640][ T1945] ? clear_bhb_loop+0x30/0x80 [ 121.536377][ T1945] ? clear_bhb_loop+0x30/0x80 [ 121.541184][ T1945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.547660][ T1945] RIP: 0033:0x7f5d9fd9c117 [ 121.552323][ T1945] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 121.572336][ T1945] RSP: 002b:00007ffc92342f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 121.580814][ T1945] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5d9fd9c117 [ 121.589131][ T1945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc92343000 [ 121.597462][ T1945] RBP: 00007ffc92343000 R08: 00007ffc92344000 R09: 00000000ffffffff [ 121.601208][ C0] usb 2-1: input irq status -75 received [ 121.605735][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc92344090 [ 121.619357][ T1945] R13: 00007f5d9fe0471f R14: 000000000001d820 R15: 00007ffc923440d0 [ 121.627556][ T1945] [ 121.630938][ T1945] ---[ end trace 0000000000000000 ]--- [ 121.638640][ T966] hid-generic 0003:1E71:2009.0010: unknown main item tag 0x0 [ 121.646188][ T966] hid-generic 0003:1E71:2009.0010: unknown main item tag 0x0 [ 121.654206][ T966] hid-generic 0003:1E71:2009.0010: unknown main item tag 0x0 [ 121.663083][ T966] hid-generic 0003:1E71:2009.0010: unknown main item tag 0x0 [ 121.670842][ T966] hid-generic 0003:1E71:2009.0010: unknown main item tag 0x0 [ 121.679842][ T966] hid-generic 0003:1E71:2009.0010: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 121.694473][ T2295] loop5: detected capacity change from 0 to 512 [ 121.701624][ T2295] EXT4-fs: Ignoring removed nobh option [ 121.709678][ T2295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.721679][ T2295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0082] [ 121.730101][ T2295] System zones: 1-12 [ 121.735460][ T2295] EXT4-fs (loop5): 1 truncate cleaned up [ 121.741943][ T2295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 121.811144][ T291] usb 2-1: USB disconnect, device number 20 [ 121.836383][ T356] usb 4-1: USB disconnect, device number 18 [ 121.937575][ T6] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 121.947952][ T6] asix: probe of 1-1:0.188 failed with error -61 [ 122.151628][ T1945] EXT4-fs (loop5): unmounting filesystem. [ 122.172368][ T2302] binder: 2301:2302 ioctl c0306201 200000000640 returned -22 [ 122.221757][ T2306] loop4: detected capacity change from 0 to 512 [ 122.232879][ T2306] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.242791][ T2306] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 122.252313][ T2306] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 122.260452][ T2306] System zones: 0-2, 18-18, 34-34 [ 122.266482][ T2306] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.590: bad orphan inode 15 [ 122.276967][ T2306] ext4_test_bit(bit=14, block=18) = 1 [ 122.282446][ T2306] is_bad_inode(inode)=0 [ 122.286603][ T2306] NEXT_ORPHAN(inode)=2264924160 [ 122.291807][ T2306] max_ino=32 [ 122.295038][ T2306] i_nlink=0 [ 122.298619][ T2306] EXT4-fs error (device loop4): ext4_do_update_inode:5269: inode #15: comm syz.4.590: corrupted inode contents [ 122.310706][ T2306] EXT4-fs error (device loop4): ext4_dirty_inode:6134: inode #15: comm syz.4.590: mark_inode_dirty error [ 122.322546][ T2306] EXT4-fs error (device loop4): ext4_do_update_inode:5269: inode #15: comm syz.4.590: corrupted inode contents [ 122.334971][ T2306] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2968: inode #15: comm syz.4.590: mark_inode_dirty error [ 122.349655][ T2306] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.590: mark inode dirty (error -117) [ 122.362723][ T2306] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 122.372287][ T2306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.397172][ T286] EXT4-fs (loop4): unmounting filesystem. [ 122.415449][ T2311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.448766][ T1475] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.493347][ T2315] loop3: detected capacity change from 0 to 256 [ 122.538955][ T400] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.547551][ T2315] loop3: detected capacity change from 0 to 256 [ 122.549116][ T400] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.564293][ T400] Buffer I/O error on dev loop3, logical block 0, async page read [ 122.577406][ T2315] FAT-fs (loop3): Directory bread(block 64) failed [ 122.584142][ T2315] FAT-fs (loop3): Directory bread(block 65) failed [ 122.591109][ T2315] FAT-fs (loop3): Directory bread(block 66) failed [ 122.597950][ T2315] FAT-fs (loop3): Directory bread(block 67) failed [ 122.605064][ T2315] FAT-fs (loop3): Directory bread(block 68) failed [ 122.613752][ T2315] FAT-fs (loop3): Directory bread(block 69) failed [ 122.620754][ T2315] FAT-fs (loop3): Directory bread(block 70) failed [ 122.627613][ T2315] FAT-fs (loop3): Directory bread(block 71) failed [ 122.635100][ T2315] FAT-fs (loop3): Directory bread(block 72) failed [ 122.641856][ T1475] usb 6-1: Using ep0 maxpacket: 32 [ 122.647657][ T2315] FAT-fs (loop3): Directory bread(block 73) failed [ 122.655471][ T1475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9921, setting to 1024 [ 122.667360][ T1475] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.676753][ T1475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.686055][ T1475] usb 6-1: config 0 descriptor?? [ 122.688546][ T356] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 122.693812][ T2302] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 122.709572][ T1475] hub 6-1:0.0: USB hub found [ 123.056437][ T1475] hub 6-1:0.0: 1 port detected [ 123.098455][ T356] usb 5-1: Using ep0 maxpacket: 16 [ 123.105022][ T356] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.116200][ T356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.123041][ T356] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 123.132381][ T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.145404][ T356] usb 5-1: config 0 descriptor?? [ 123.160616][ T966] usb 1-1: USB disconnect, device number 24 [ 123.258480][ T1539] ------------[ cut here ]------------ [ 123.264821][ T1539] kernel BUG at fs/buffer.c:2714! [ 123.270929][ T1539] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 123.277234][ T1539] CPU: 1 PID: 1539 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 123.286226][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.296331][ T1539] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 123.301842][ T1539] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 e1 e7 ff e9 b0 fe ff ff e8 1e b4 a2 ff 0f 0b e8 17 b4 a2 ff <0f> 0b e8 10 b4 a2 ff 0f 0b e8 09 b4 a2 ff 0f 0b e8 02 b4 a2 ff 0f [ 123.321669][ T1539] RSP: 0018:ffffc90000a27ca0 EFLAGS: 00010293 [ 123.327797][ T1539] RAX: ffffffff81ceb7f9 RBX: 0000000000000000 RCX: ffff888112d10000 [ 123.335809][ T1539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.343848][ T1539] RBP: ffffc90000a27cf0 R08: ffff888117ca50af R09: 1ffff11022f94a15 [ 123.351860][ T1539] R10: dffffc0000000000 R11: ffffed1022f94a16 R12: 0000000000000000 [ 123.360024][ T1539] R13: 1ffff11022f94a15 R14: ffff888117ca50a8 R15: 0000000000003801 [ 123.368041][ T1539] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 123.377028][ T1539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.383662][ T1539] CR2: 00007f323f815ff8 CR3: 00000001092c8000 CR4: 00000000003526a0 [ 123.391946][ T1539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.400054][ T1539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.408071][ T1539] Call Trace: [ 123.411414][ T1539] [ 123.414478][ T1539] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 123.420498][ T1539] submit_bh+0x1f/0x30 [ 123.424635][ T1539] write_mmp_block_thawed+0x397/0x510 [ 123.430175][ T1539] ? __cfi_schedule_timeout+0x10/0x10 [ 123.435613][ T1539] ? read_mmp_block+0x720/0x720 [ 123.440540][ T1539] ? __cfi_process_timeout+0x10/0x10 [ 123.445948][ T1539] write_mmp_block+0x138/0x2b0 [ 123.450856][ T1539] kmmpd+0x3ce/0x950 [ 123.454806][ T1539] kthread+0x281/0x320 [ 123.459039][ T1539] ? __cfi_kmmpd+0x10/0x10 [ 123.463503][ T1539] ? __cfi_kthread+0x10/0x10 [ 123.468133][ T1539] ret_from_fork+0x1f/0x30 [ 123.472598][ T1539] [ 123.475646][ T1539] Modules linked in: [ 123.495091][ T1539] ---[ end trace 0000000000000000 ]--- [ 123.500871][ T1539] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 123.506560][ T1539] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 e1 e7 ff e9 b0 fe ff ff e8 1e b4 a2 ff 0f 0b e8 17 b4 a2 ff <0f> 0b e8 10 b4 a2 ff 0f 0b e8 09 b4 a2 ff 0f 0b e8 02 b4 a2 ff 0f [ 123.527569][ T1539] RSP: 0018:ffffc90000a27ca0 EFLAGS: 00010293 [ 123.534277][ T1539] RAX: ffffffff81ceb7f9 RBX: 0000000000000000 RCX: ffff888112d10000 [ 123.542650][ T1539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.551007][ T1539] RBP: ffffc90000a27cf0 R08: ffff888117ca50af R09: 1ffff11022f94a15 [ 123.559347][ T1539] R10: dffffc0000000000 R11: ffffed1022f94a16 R12: 0000000000000000 [ 123.567448][ T1539] R13: 1ffff11022f94a15 R14: ffff888117ca50a8 R15: 0000000000003801 [ 123.575931][ T1539] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 123.585425][ T1539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.592540][ T1539] CR2: 0000001b2eb12ff8 CR3: 000000010f906000 CR4: 00000000003526b0 [ 123.601011][ T1539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.609279][ T1539] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 123.617519][ T1539] Kernel panic - not syncing: Fatal exception [ 123.624210][ T1539] Kernel Offset: disabled [ 123.628571][ T1539] Rebooting in 86400 seconds..