last executing test programs: 30.329881495s ago: executing program 1 (id=16): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 30.238000977s ago: executing program 1 (id=19): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbe}, [@ldst={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x22e, 0x10, &(0x7f0000000440), 0x1dd}, 0x48) 29.627154642s ago: executing program 1 (id=21): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000480)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 29.245932791s ago: executing program 1 (id=23): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8c16, &(0x7f0000000080)=ANY=[], 0x8, 0x2bf, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getpid() setns(0xffffffffffffffff, 0x24020000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000872000/0x1000)=nil) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='n', 0x1) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./tracing\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r3, &(0x7f0000000700)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/sched/filter\x00', 0x2240, 0x0) readv(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/115, 0x73}], 0x1) read$FUSE(r4, &(0x7f0000002a00)={0x2020}, 0x2020) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) open(0x0, 0x0, 0x44) 28.643208045s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r5, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r3, 0xffffffffffffffff, 0x0, 0xbc44) 27.689522877s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) 27.675648117s ago: executing program 32 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) 8.727774574s ago: executing program 3 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 7.060919183s ago: executing program 0 (id=103): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r1, r1, 0x0, 0x8000000f3aa6ea) 7.059871713s ago: executing program 3 (id=104): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000900)={0xffffffffffffffff, 0x7, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x11, &(0x7f0000000800)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000000c40)="$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") syz_open_procfs(0x0, &(0x7f0000001280)='mountinfo\x00') ppoll(&(0x7f0000000980)=[{r1, 0x3056}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000001300)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r9, 0xa1}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x4, 0x4d, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0x9, 0x1}}) 7.032601124s ago: executing program 4 (id=106): gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) socket$pptp(0x18, 0x1, 0x2) setpriority(0x2, 0xff, 0x0) 7.027771814s ago: executing program 2 (id=107): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) ioprio_get$pid(0x2, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x548) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, 0x0) timer_create(0x7, 0x0, &(0x7f0000000080)=0x0) timer_settime(r2, 0x0, &(0x7f0000000700), &(0x7f0000000740)) fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) 6.910593957s ago: executing program 2 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 5.92176037s ago: executing program 4 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1a7) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x40, 0x0) r0 = open$dir(&(0x7f00000006c0)='./mnt\x00', 0x0, 0x2) renameat2(r0, &(0x7f0000000700)='./dev\x00', r0, &(0x7f0000000740)='./mnt\x00', 0x4) 5.92166003s ago: executing program 5 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.299861138s ago: executing program 0 (id=110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x81, 0x3ff}) 4.299381278s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x0, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r3, 0xffffffffffffffff, 0x0, 0xbc44) 4.298862618s ago: executing program 3 (id=112): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200080, &(0x7f0000000140), 0x3, 0x573, &(0x7f00000009c0)="$eJzs3c9vHFcdAPDvjH/s5ledQA9QFRKgEFCVdbxpo6qXJhcQqiohKg6IQ2rsrWWyzobYKbWJhPs3gASCE/wJHJA4IPXEgRtHJA4IqRyQAkSgGEGlQTM7dtb2WN1k17vE/nykyfx48+b7njaz7+3b9bwAjq0LEbEZEdMR8VZEzJTHk3KJa90lP+/hg3sLWw/uLSSRZW/+PSnS82PRkyd3qrxmPSK+/pWIbyf7466ub9ycb7dbd8r92bWV27Or6xuXllfml1pLrVvN5tW5q5dfufJyc2h1Pb/yy/tfXn79G7/59ac++P3ml76fF+t0mdZbj2HqVn1qJ05uMiJeP4xgYzBRrqf3pTxfneHa4ZaHx5NGxMci4rPF/T8TE8X/TgDgKMuyn0Y207sPABx1+ef/0/UkbUREmpadgEZ3DO/ZOJm2O6tryYdZdmuxO1Z2NqbSt5fbrcvnan/8bnHyVJLvzxVpRXqx39yzfyUizkXEj2oniv3GQqe9OJ4uDwAce6eK78DK9j8i/lVL00ajr6wV3+oBAE+N+hhyAgDj1duK18ZYDgBgdHyKB4Djp4/2v/yyf/PQywIAjIbP/wBw/Gj/AeD4edz2328EAeCp9rU33siXbKt8/vXiO+t3pzrvXFpsrd5srNxdaCx07txuLHU6S8Uze1Z2ZT7Rs132Cdqdzu25l+Luu7NrrdW12dX1jRsrnbu31m4Uz/W+0Zoaae0AgCrnzr//hyQiNl89USzRM5eDthqOtnTcBQDGZuLRZuvU42bWQYCn2pPN9vWfoZcDGL2+mvCik/C7Qy8LMB6VD/OuV27u9pPHCOJ3xvB/5eInd43/n+lN29s32D/HM/A0M/4Px9fEE+V6bejlAEbvycb/gaMgy5K9c/5P7yQBAEfSAD/hy34wrE4IMFYfNZn3UL7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPmdER8J5K0UcwFnub/po1GxJmIOBtTydvL7dbliHgmzkfEVC3fnxt3oQGAAaV/Tcr5vy7OvHB6b+p08u9asY6I7/3szR+/O7+2dmcuP/6PneO17enDmo/yDTCvIADQn6zW54lF+90s1z0f5B8+uLewvRxWIavcvx4fllMRL2w9uFcs3ZTJyA9G1Iu+xMl/JjFZ5qlHxHMRMTGE+JvvRcQnquqfFGMjZ8uZT3vjRxn7zEjjp7vip0Vad513vj4+hLLAcfP+9Yi4VnX/pXGhWFff//XiHWpw9693L7b93rfVE3+yjDRRET+/5y/0G+Ol335138Fsppv2XsRzk1Xxk534yQHxX+gz/p+e//QPXzsgLft5xMWojt8ba3Zt5fbs6vrGpeWV+aXWUj2azatzVy+/cuXl5mwxRj27PVK9399effGZg8qW1//kAfHrlfWf3sn7+T7r/4v/vvWtzzzare2N/8XPVb/+z1bG78rbxC/sDpNFslkZf/7krw6cvjuPv3hA/T/q9X+xz/p/8JeNxT5PBQBGYHV94+Z8u926M9BGGlvZMK6zbyMvYn8nb3cXBwv65ziMWjzhxtTA1RnXxuROX3G4V/5mfsURVycdei0G2ng4qljje08CRuPRTT/ukgAAAAAAAAAAAAAAAAcZxZ8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHF3/CwAA//++MtQ/") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 4.298649818s ago: executing program 4 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xee00, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.175045071s ago: executing program 5 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.252922976s ago: executing program 0 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)}, 0x22}], 0x2, 0x200c2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0xffffffffffffffc4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x8, 0x0, 0x9, 0x8, 0x97, 0xbf, 0xc6, 0x81, 0xfe, 0xc, 0x0, 0x5, 0x27e7, 0x0, 0x2, 0x8, 0xff, '\x00', 0x61, 0x10000000000001}) 2.251669456s ago: executing program 2 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.249979886s ago: executing program 3 (id=116): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x1, 0x1, [@broadcast]}, 0x20000) syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000340)='./cgroup/../file0\x00', 0x810082, &(0x7f00000001c0), 0x1, 0xbaf, &(0x7f0000002f00)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9, 0xfffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) getdents(r2, &(0x7f0000003ac0)=""/4096, 0x1000) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x11, 0x1, 0x0, &(0x7f0000001400)) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) unshare(0x2020600) r4 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) r5 = epoll_create(0x45d) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) lseek(r6, 0x5, 0x1) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 2.249531076s ago: executing program 4 (id=117): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8c16, &(0x7f0000000080)=ANY=[], 0x8, 0x2bf, &(0x7f00000000c0)="$eJzs3cFrI1UYAPBv0uw06iFBvCiCA3rwVLZevTTKCmJPSgT1oMHdBUnCwi4ErGDc0/4FHv0//BO8ePE/ELwK3nYPlSeTmUnSbVrbTbpC/f1OX99733vfzJT0UPLNV69PRrfvZfHw8e/R6WTROoiDeJJFL1rR+CHaAQBcH09Sir/Ss2S2W9uvBgB4Hqq//5XLZeZXVRIAcMU++ezzj/qHh7c+LopOvNp9NB1kETF5NB1U8/278U2M407cjG4cR6SFKv7gw8Nb0S5KvXhrMpsOyszJl7/W+/f/jJjn70c3euvz94vKIv/Fproi+ndvND9045X1+e88nR+TWQzyePvNlfr3ohu/fR33Yhy3o8xd5n+/XxTvpx8ff/dFeUyZn7VisDtft5R21t/B7HL/HKmrn10qCQAAAAAAAAAAAAAAAAAAAACA62avKLKqfc+8f085NO+fM83jeD6/VzR6u4usyazpD5Q1Q1V/oNR0uJml+Knpr3OzKIpUL2z680wH7Xit7cUCAAAAAAAAAAAAAAAAAAAAUHrw7dFoOB6n+3VwZ6Og6QbQfK3/Wfc5WBl5I45Gw52zN9y9+Fmr3QbKWs9dHO18w6u4cPBCWc/Wd96NxcinUQXNg9nqWS+/V216NBoW9VRzk0fD7N/O6jS39+fVqTw2LSzNH9zxyV/s6CxKPZmVb+lu5C+tnfo7pfT04pRSOr343T+qZ1SPZPMWGxc7/UYdrL3AMuicfha/nL3hmR8ZOxt/6AAAAAAAAAAAAAAAAAAAAGstv/S7ZvLhuamtKysKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6z5fv/m6ATESdHTgWzOvm8NXWQx/0H//ElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wTwAAAP//4HhS9Q==") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getpid() setns(0xffffffffffffffff, 0x24020000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000872000/0x1000)=nil) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='n', 0x1) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./tracing\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r3, &(0x7f0000000700)='0\x00', 0x2) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/115, 0x73}], 0x1) 2.201798717s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x200}, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x2eaa4000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x68800, 0x1c) getdents64(r6, 0x0, 0x4f) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f0000000240)=""/159, 0x9f) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1018e58, &(0x7f0000000680)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@grpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000001ec0)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") mknod$loop(&(0x7f0000002500)='./file0\x00', 0x800, 0x1) 2.11763352s ago: executing program 4 (id=119): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000600040c01001c00128009000100626f6e64000000000c00028008000900f5"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) 2.025033692s ago: executing program 5 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.890163365s ago: executing program 0 (id=120): r0 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000200), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 1.887996985s ago: executing program 4 (id=121): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c65) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) close(0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 1.887826845s ago: executing program 33 (id=121): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c65) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) close(0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 1.639003671s ago: executing program 6 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x13}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880) 1.635157541s ago: executing program 5 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.533404353s ago: executing program 2 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 1.402198836s ago: executing program 3 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='3', 0x4e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.374469727s ago: executing program 6 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x13}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880) 1.312666849s ago: executing program 5 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 870.002159ms ago: executing program 0 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="34000000680001050000000000000000000000000000000008"], 0x34}}, 0x0) 869.727459ms ago: executing program 3 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x81, 0x3ff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 869.640669ms ago: executing program 6 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x13}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880) 63.552338ms ago: executing program 6 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x13}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880) 1.75552ms ago: executing program 0 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x3, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x0, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r3, 0xffffffffffffffff, 0x0, 0xbc44) 0s ago: executing program 5 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 22.308093][ T30] audit: type=1400 audit(1792103714.327:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.312483][ T277] cgroup: Unknown subsys name 'net' [ 22.331461][ T30] audit: type=1400 audit(1792103714.337:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.358599][ T30] audit: type=1400 audit(1792103714.357:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.358970][ T277] cgroup: Unknown subsys name 'devices' [ 22.531158][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.536782][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.647777][ T30] audit: type=1400 audit(1792103714.667:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.671470][ T30] audit: type=1400 audit(1792103714.667:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.696308][ T30] audit: type=1400 audit(1792103714.667:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.708446][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.728292][ T30] audit: type=1400 audit(1792103714.747:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.753735][ T30] audit: type=1400 audit(1792103714.747:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.780966][ T30] audit: type=1400 audit(1792103714.807:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.781242][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.806901][ T30] audit: type=1400 audit(1792103714.807:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.391000][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.398096][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.405815][ T285] device bridge_slave_0 entered promiscuous mode [ 23.414160][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.421412][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.428810][ T285] device bridge_slave_1 entered promiscuous mode [ 23.459471][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.466541][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.474028][ T286] device bridge_slave_0 entered promiscuous mode [ 23.481009][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.488062][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.495604][ T286] device bridge_slave_1 entered promiscuous mode [ 23.581086][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.588159][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.595726][ T287] device bridge_slave_0 entered promiscuous mode [ 23.621561][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.628626][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.636109][ T287] device bridge_slave_1 entered promiscuous mode [ 23.654868][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.662032][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.669640][ T288] device bridge_slave_0 entered promiscuous mode [ 23.690768][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.697846][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.705460][ T289] device bridge_slave_0 entered promiscuous mode [ 23.712252][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.719337][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.726687][ T288] device bridge_slave_1 entered promiscuous mode [ 23.749492][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.756561][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.764041][ T289] device bridge_slave_1 entered promiscuous mode [ 23.814006][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.821205][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828518][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.835583][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.890271][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.897441][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.904752][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.911897][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.947853][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.955122][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.962451][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.969504][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.995818][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.002893][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.010207][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.017279][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.025955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.033769][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.041220][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.048531][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.056053][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.063334][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.070876][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.078174][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.085580][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.131616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.139797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.147908][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.155166][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.162698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.170960][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.177983][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.195468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.203690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.211769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.219485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.227621][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.234696][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.250464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.257906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.265442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.273648][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.280733][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.288320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.296534][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.303572][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.311109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.319315][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.326353][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.333815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.341983][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.349000][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.382625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.401526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.410038][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.417071][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.425591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.433715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.441827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.449890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.457808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.465856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.473875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.482128][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.489177][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.496972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.505347][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.512384][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.519869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.528187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.536766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.555229][ T288] device veth0_vlan entered promiscuous mode [ 24.562888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.571140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.578581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.587138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.595248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.603389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.611521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.619720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.638683][ T287] device veth0_vlan entered promiscuous mode [ 24.648056][ T289] device veth0_vlan entered promiscuous mode [ 24.654714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.663242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.671546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.678924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.686579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.695129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.703626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.712108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.720082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.728113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.735780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.750095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.760732][ T286] device veth0_vlan entered promiscuous mode [ 24.771313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.779782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.787900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.795519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.804851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.813354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.822630][ T288] device veth1_macvtap entered promiscuous mode [ 24.831470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.839797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.855650][ T286] device veth1_macvtap entered promiscuous mode [ 24.864276][ T285] device veth0_vlan entered promiscuous mode [ 24.872458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.881002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.889460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.897178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.905652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.914128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.922596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.931267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.939504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.947582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.955194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.963952][ T287] device veth1_macvtap entered promiscuous mode [ 24.974966][ T289] device veth1_macvtap entered promiscuous mode [ 24.983861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.991540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.010623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.018947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.027496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.036016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.044607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.053038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.061505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.069976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.078227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.086513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.094934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.103399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.123294][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.131799][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.141022][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.159547][ T285] device veth1_macvtap entered promiscuous mode [ 25.178690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.188993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.202318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.269211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.278944][ T316] loop0: detected capacity change from 0 to 256 [ 25.287153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.309768][ T316] exfat: Deprecated parameter 'namecase' [ 25.315545][ T316] exfat: Deprecated parameter 'namecase' [ 25.341850][ T316] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 25.590752][ T332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.729960][ T337] FAULT_INJECTION: forcing a failure. [ 25.729960][ T337] name failslab, interval 1, probability 0, space 0, times 1 [ 25.743542][ T337] CPU: 0 PID: 337 Comm: syz.1.10 Not tainted syzkaller #0 [ 25.750694][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.760776][ T337] Call Trace: [ 25.764207][ T337] [ 25.767161][ T337] __dump_stack+0x21/0x30 [ 25.771535][ T337] dump_stack_lvl+0x110/0x170 [ 25.776249][ T337] ? show_regs_print_info+0x20/0x20 [ 25.781472][ T337] dump_stack+0x15/0x20 [ 25.785661][ T337] should_fail+0x3ab/0x500 [ 25.790523][ T337] __should_failslab+0xa4/0xe0 [ 25.795322][ T337] should_failslab+0x9/0x20 [ 25.799851][ T337] slab_pre_alloc_hook+0x39/0xd0 [ 25.804826][ T337] kmem_cache_alloc_trace+0x48/0x270 [ 25.810168][ T337] ? assoc_array_insert+0x90/0x3210 [ 25.815395][ T337] assoc_array_insert+0x90/0x3210 [ 25.820465][ T337] ? __kasan_check_write+0x14/0x20 [ 25.825605][ T337] ? restrict_link_reject+0x10/0x10 [ 25.830838][ T337] ? keyring_search_rcu+0x290/0x290 [ 25.836063][ T337] ? mutex_lock+0x9b/0x1c0 [ 25.840531][ T337] ? wait_for_completion_killable_timeout+0x10/0x10 [ 25.847150][ T337] __key_link_begin+0xe1/0x210 [ 25.851951][ T337] request_key_and_link+0x698/0x1120 [ 25.864478][ T337] ? key_task_permission+0x36d/0x4a0 [ 25.869811][ T337] ? complete_request_key+0xa0/0xa0 [ 25.875040][ T337] ? downgrade_write+0x440/0x440 [ 25.880009][ T337] ? asymmetric_key_cmp+0x250/0x250 [ 25.885246][ T337] ? keyring_search_rcu+0x290/0x290 [ 25.890485][ T337] __se_sys_request_key+0x293/0x350 [ 25.895717][ T337] ? __x64_sys_request_key+0xb0/0xb0 [ 25.901032][ T337] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 25.906706][ T337] __x64_sys_request_key+0x9b/0xb0 [ 25.911848][ T337] x64_sys_call+0x6f7/0x9a0 [ 25.916385][ T337] do_syscall_64+0x4c/0xa0 [ 25.920829][ T337] ? clear_bhb_loop+0x50/0xa0 [ 25.925543][ T337] ? clear_bhb_loop+0x50/0xa0 [ 25.930248][ T337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.936166][ T337] RIP: 0033:0x7f982a2fd559 [ 25.940695][ T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.960329][ T337] RSP: 002b:00007f9828d56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 25.968769][ T337] RAX: ffffffffffffffda RBX: 00007f982a584fa0 RCX: 00007f982a2fd559 [ 25.976751][ T337] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 25.984745][ T337] RBP: 00007f982a3948b0 R08: 0000000000000000 R09: 0000000000000000 [ 25.992729][ T337] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 26.000711][ T337] R13: 00007f982a585038 R14: 00007f982a584fa0 R15: 00007ffefb58a5f8 [ 26.008699][ T337] [ 26.136737][ T357] UDC core: couldn't find an available UDC or it's busy: -16 [ 26.197357][ T359] loop2: detected capacity change from 0 to 1024 [ 26.221173][ T359] EXT4-fs (loop2): Ignoring removed bh option [ 26.252515][ T359] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 26.396082][ T368] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 26.425118][ T368] kvm: pic: non byte read [ 26.433455][ T368] kvm: pic: level sensitive irq not supported [ 26.433891][ T368] kvm: pic: non byte read [ 26.447466][ T368] kvm: pic: level sensitive irq not supported [ 26.447830][ T368] kvm: pic: non byte read [ 26.460938][ T368] kvm: pic: level sensitive irq not supported [ 26.460998][ T368] kvm: pic: non byte read [ 26.474475][ T368] kvm: pic: level sensitive irq not supported [ 26.475387][ T368] kvm: pic: non byte read [ 26.488061][ T368] kvm: pic: level sensitive irq not supported [ 26.488361][ T368] kvm: pic: non byte read [ 26.499395][ T20] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.509271][ T368] kvm: pic: level sensitive irq not supported [ 26.509340][ T368] kvm: pic: non byte read [ 26.528431][ T368] kvm: pic: level sensitive irq not supported [ 26.529878][ T368] kvm: pic: non byte read [ 26.551055][ T368] kvm: pic: level sensitive irq not supported [ 26.551494][ T368] kvm: pic: non byte read [ 26.570507][ T368] kvm: pic: level sensitive irq not supported [ 26.572761][ T368] kvm: pic: non byte read [ 26.593432][ T368] kvm: pic: level sensitive irq not supported [ 26.849670][ T20] usb 1-1: not running at top speed; connect to a high speed hub [ 26.997551][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.022560][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.097429][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.189919][ T20] usb 1-1: Found UVC 1.00 device (046d:0825) [ 27.317026][ T382] loop1: detected capacity change from 0 to 256 [ 27.393438][ T20] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 27.467698][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 27.467738][ T30] audit: type=1400 audit(1792103719.487:146): avc: denied { mount } for pid=381 comm="syz.1.23" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.499446][ T20] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 27.670689][ T20] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 27.801992][ T20] usb 1-1: USB disconnect, device number 2 [ 27.812425][ T285] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 27.927915][ T285] FAT-fs (loop1): Filesystem has been set read-only [ 27.967643][ T30] audit: type=1400 audit(1792103719.717:147): avc: denied { mounton } for pid=381 comm="syz.1.23" path="/7/file0/tracing" dev="loop1" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 28.045087][ T285] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 28.094034][ T30] audit: type=1400 audit(1792103719.717:148): avc: denied { mount } for pid=381 comm="syz.1.23" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.116078][ T30] audit: type=1400 audit(1792103719.717:149): avc: denied { search } for pid=381 comm="syz.1.23" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 28.137523][ T30] audit: type=1400 audit(1792103719.717:150): avc: denied { write } for pid=381 comm="syz.1.23" name="filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 28.159680][ T30] audit: type=1400 audit(1792103719.717:151): avc: denied { open } for pid=381 comm="syz.1.23" path="/7/file0/tracing/events/sched/filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 28.184339][ T30] audit: type=1400 audit(1792103719.767:152): avc: denied { read } for pid=381 comm="syz.1.23" name="filter" dev="tracefs" ino=2480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 28.216761][ T30] audit: type=1400 audit(1792103719.837:153): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.325399][ T390] loop0: detected capacity change from 0 to 256 [ 28.392918][ T390] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 28.650101][ T30] audit: type=1400 audit(1792103720.677:154): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.683058][ T380] syz.3.22 (380) used greatest stack depth: 22144 bytes left [ 28.702001][ T285] syz-executor (285) used greatest stack depth: 22056 bytes left [ 28.756067][ T395] loop3: detected capacity change from 0 to 4096 [ 28.810516][ T30] audit: type=1400 audit(1792103720.837:155): avc: denied { mounton } for pid=394 comm="syz.3.28" path="/syzcgroup/unified/file0" dev="cgroup2" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 28.834291][ T395] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 28.892900][ T400] ======================================================= [ 28.892900][ T400] WARNING: The mand mount option has been deprecated and [ 28.892900][ T400] and is ignored by this kernel. Remove the mand [ 28.892900][ T400] option from the mount to silence this warning. [ 28.892900][ T400] ======================================================= [ 29.014516][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.021663][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.031294][ T322] udevd[322]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Not a directory [ 29.042686][ T398] device bridge_slave_0 entered promiscuous mode [ 29.049798][ T322] udevd[322]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 29.050533][ T313] udevd[313]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 29.065893][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.078524][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.088566][ T313] udevd[313]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 29.097996][ T398] device bridge_slave_1 entered promiscuous mode [ 29.108840][ T407] Zero length message leads to an empty skb [ 29.122352][ T322] udevd[322]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 29.140174][ T322] udevd[322]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 29.150564][ T322] udevd[322]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 29.188856][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.196081][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.203446][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.210523][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.246547][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.254560][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.262006][ T391] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.285408][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.303135][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.311587][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.318654][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.326414][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.335066][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.342167][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.448062][ T398] device veth0_vlan entered promiscuous mode [ 29.606227][ T391] usb 3-1: Using ep0 maxpacket: 16 [ 29.674892][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.739716][ T391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.763151][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.771352][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.778876][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.786391][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.794703][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.817677][ T383] device bridge_slave_1 left promiscuous mode [ 29.824775][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.832460][ T391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.853952][ T421] pit: kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 29.853952][ T391] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.875835][ T421] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 29.884466][ T391] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.893896][ T391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.902380][ T421] pit: kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 29.911523][ T391] usb 3-1: config 0 descriptor?? [ 29.918109][ T383] device bridge_slave_0 left promiscuous mode [ 29.918482][ T421] pit: kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 29.924585][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.934537][ T421] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 29.948556][ T421] pit: kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 29.958788][ T421] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 29.960852][ T383] device veth1_macvtap left promiscuous mode [ 29.968381][ T421] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 29.985007][ T421] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 29.986221][ T383] device veth0_vlan left promiscuous mode [ 30.051730][ T425] capability: warning: `syz.4.36' uses 32-bit capabilities (legacy support in use) [ 30.066327][ T425] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 30.174071][ T398] device veth1_macvtap entered promiscuous mode [ 30.214068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.226675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.235791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.244196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.252679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.261234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.269906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.279620][ T398] syz-executor (398) used greatest stack depth: 22016 bytes left [ 30.329844][ T437] loop0: detected capacity change from 0 to 1024 [ 30.337676][ T313] udevd[313]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 30.357250][ T437] EXT4-fs (loop0): Ignoring removed bh option [ 30.371219][ T437] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 30.435838][ T442] loop4: detected capacity change from 0 to 256 [ 30.453462][ T313] udevd[313]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 30.493291][ T391] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input4 [ 30.513121][ T442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 30.596387][ T391] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 30.672881][ T313] udevd[313]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 30.746452][ T391] usb 3-1: USB disconnect, device number 2 [ 30.829102][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.233539][ T452] loop2: detected capacity change from 0 to 4096 [ 31.289904][ T452] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 31.313432][ T452] EXT4-fs (loop2): Test dummy encryption mode enabled [ 31.315529][ T458] process 'syz.4.44' launched './file0' with NULL argv: empty string added [ 31.329016][ T452] EXT4-fs (loop2): Ignoring removed orlov option [ 31.349847][ T383] device bridge_slave_1 left promiscuous mode [ 31.356019][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.363558][ T452] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 31.389175][ T60] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 31.403006][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.411481][ T383] device bridge_slave_0 left promiscuous mode [ 31.418822][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.429912][ T452] EXT4-fs (loop2): shut down requested (1) [ 31.435810][ T60] usb 4-1: Product: syz [ 31.440068][ T60] usb 4-1: Manufacturer: syz [ 31.442479][ T383] device veth1_macvtap left promiscuous mode [ 31.444684][ T60] usb 4-1: SerialNumber: syz [ 31.451599][ T383] device veth0_vlan left promiscuous mode [ 31.655276][ T461] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.699149][ T391] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.319735][ T391] usb 5-1: unable to get BOS descriptor or descriptor too short [ 32.524418][ T391] usb 5-1: config 1 interface 0 has no altsetting 0 [ 32.689224][ T391] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 32.698462][ T391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.706751][ T391] usb 5-1: Product: syz [ 32.710999][ T391] usb 5-1: Manufacturer: syz [ 32.715814][ T391] usb 5-1: SerialNumber: syz [ 33.169128][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 33.169146][ T30] audit: type=1400 audit(1792103725.127:185): avc: denied { read } for pid=472 comm="syz.3.49" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.259723][ T483] loop3: detected capacity change from 0 to 2048 [ 33.271291][ T30] audit: type=1400 audit(1792103725.127:186): avc: denied { open } for pid=472 comm="syz.3.49" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.657831][ T492] FAULT_INJECTION: forcing a failure. [ 33.657831][ T492] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.677269][ T483] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.698154][ T483] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.748556][ T492] CPU: 0 PID: 492 Comm: syz.4.53 Not tainted syzkaller #0 [ 33.755721][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.765798][ T492] Call Trace: [ 33.769091][ T492] [ 33.772043][ T492] __dump_stack+0x21/0x30 [ 33.776438][ T492] dump_stack_lvl+0x110/0x170 [ 33.781173][ T492] ? show_regs_print_info+0x20/0x20 [ 33.786392][ T492] ? unwind_get_return_address+0x4d/0x90 [ 33.792054][ T492] ? stack_trace_save+0xf0/0xf0 [ 33.796968][ T492] dump_stack+0x15/0x20 [ 33.801206][ T492] should_fail+0x3ab/0x500 [ 33.805647][ T492] should_fail_alloc_page+0x55/0x80 [ 33.810869][ T492] prepare_alloc_pages+0x13f/0x590 [ 33.816026][ T492] ? __stack_depot_save+0x34/0x480 [ 33.821178][ T492] ? __alloc_pages_bulk+0xab0/0xab0 [ 33.826403][ T492] ? __kasan_slab_alloc+0xc9/0xe0 [ 33.831452][ T492] ? __kasan_slab_alloc+0xb7/0xe0 [ 33.836509][ T492] ? slab_post_alloc_hook+0x4f/0x2b0 [ 33.841820][ T492] __alloc_pages+0x11d/0x460 [ 33.846431][ T492] ? prep_new_page+0x110/0x110 [ 33.851220][ T492] __get_free_pages+0x10/0x30 [ 33.855923][ T492] kasan_populate_vmalloc_pte+0x29/0x120 [ 33.861593][ T492] __apply_to_page_range+0x8ca/0xc70 [ 33.866907][ T492] ? kasan_populate_vmalloc+0x70/0x70 [ 33.872316][ T492] ? kasan_populate_vmalloc+0x70/0x70 [ 33.877714][ T492] apply_to_page_range+0x3b/0x50 [ 33.882675][ T492] kasan_populate_vmalloc+0x60/0x70 [ 33.887905][ T492] alloc_vmap_area+0x193b/0x1a70 [ 33.892880][ T492] ? vm_map_ram+0xa70/0xa70 [ 33.897400][ T492] ? kmem_cache_alloc_trace+0x119/0x270 [ 33.903073][ T492] ? __get_vm_area_node+0x11d/0x350 [ 33.908332][ T492] __get_vm_area_node+0x14e/0x350 [ 33.913391][ T492] __vmalloc_node_range+0xe8/0xad0 [ 33.918553][ T492] ? copy_process+0x5e0/0x3230 [ 33.923346][ T492] ? slab_post_alloc_hook+0x6d/0x2b0 [ 33.928670][ T492] ? should_failslab+0x9/0x20 [ 33.933370][ T492] ? kmem_cache_alloc+0xf7/0x260 [ 33.938339][ T492] dup_task_struct+0x41e/0xc70 [ 33.943127][ T492] ? copy_process+0x5e0/0x3230 [ 33.947922][ T492] copy_process+0x5e0/0x3230 [ 33.952536][ T492] ? __kasan_check_write+0x14/0x20 [ 33.957670][ T492] ? proc_fail_nth_write+0x180/0x200 [ 33.962991][ T492] ? __pidfd_prepare+0x150/0x150 [ 33.968014][ T492] kernel_clone+0x233/0x960 [ 33.972554][ T492] ? create_io_thread+0x170/0x170 [ 33.977608][ T492] ? __kasan_check_write+0x14/0x20 [ 33.982749][ T492] ? mutex_unlock+0x8f/0x230 [ 33.987365][ T492] __x64_sys_clone+0x198/0x210 [ 33.992152][ T492] ? __kasan_check_write+0x14/0x20 [ 33.997289][ T492] ? __ia32_sys_vfork+0x130/0x130 [ 34.002344][ T492] ? __kasan_check_write+0x14/0x20 [ 34.007479][ T492] ? switch_fpu_return+0x15d/0x2c0 [ 34.012621][ T492] x64_sys_call+0x41f/0x9a0 [ 34.017146][ T492] do_syscall_64+0x4c/0xa0 [ 34.021591][ T492] ? clear_bhb_loop+0x50/0xa0 [ 34.026286][ T492] ? clear_bhb_loop+0x50/0xa0 [ 34.030983][ T492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.036940][ T492] RIP: 0033:0x7fc8cd400559 [ 34.041381][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.061013][ T492] RSP: 002b:00007fc8cbe58fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 34.069453][ T492] RAX: ffffffffffffffda RBX: 00007fc8cd687fa0 RCX: 00007fc8cd400559 [ 34.077448][ T492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.085460][ T492] RBP: 00007fc8cd4978b0 R08: 0000000000000000 R09: 0000000000000000 [ 34.093458][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.101454][ T492] R13: 00007fc8cd688038 R14: 00007fc8cd687fa0 R15: 00007ffd5502f458 [ 34.109447][ T492] [ 34.117359][ T492] syz.4.53: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 34.129343][ T391] usbhid 5-1:1.0: can't add hid device: -71 [ 34.132612][ T30] audit: type=1400 audit(1792103726.147:187): avc: denied { create } for pid=482 comm="syz.3.51" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.148453][ T391] usbhid: probe of 5-1:1.0 failed with error -71 [ 34.161113][ T492] CPU: 0 PID: 492 Comm: syz.4.53 Not tainted syzkaller #0 [ 34.171276][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.179404][ T391] usb 5-1: USB disconnect, device number 2 [ 34.181349][ T492] Call Trace: [ 34.181356][ T492] [ 34.193387][ T492] __dump_stack+0x21/0x30 [ 34.197782][ T492] dump_stack_lvl+0x110/0x170 [ 34.202498][ T492] ? show_regs_print_info+0x20/0x20 [ 34.207725][ T492] ? pr_cont_kernfs_name+0xe3/0xf0 [ 34.212861][ T492] dump_stack+0x15/0x20 [ 34.217075][ T492] warn_alloc+0x1dc/0x200 [ 34.221430][ T492] ? slab_free_freelist_hook+0xc2/0x190 [ 34.227003][ T492] ? zone_watermark_ok_safe+0x270/0x270 [ 34.232609][ T492] ? __get_vm_area_node+0x163/0x350 [ 34.237929][ T492] ? __get_vm_area_node+0x163/0x350 [ 34.243148][ T492] __vmalloc_node_range+0x15e/0xad0 [ 34.248371][ T492] ? slab_post_alloc_hook+0x6d/0x2b0 [ 34.253680][ T492] ? should_failslab+0x9/0x20 [ 34.258382][ T492] ? kmem_cache_alloc+0xf7/0x260 [ 34.263348][ T492] dup_task_struct+0x41e/0xc70 [ 34.268150][ T492] ? copy_process+0x5e0/0x3230 [ 34.272958][ T492] copy_process+0x5e0/0x3230 [ 34.277621][ T492] ? __kasan_check_write+0x14/0x20 [ 34.280823][ T30] audit: type=1400 audit(1792103726.287:188): avc: denied { mounton } for pid=482 comm="syz.3.51" path="/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.282761][ T492] ? proc_fail_nth_write+0x180/0x200 [ 34.331826][ T492] ? __pidfd_prepare+0x150/0x150 [ 34.336796][ T492] kernel_clone+0x233/0x960 [ 34.341345][ T492] ? create_io_thread+0x170/0x170 [ 34.346403][ T492] ? __kasan_check_write+0x14/0x20 [ 34.351546][ T492] ? mutex_unlock+0x8f/0x230 [ 34.356177][ T492] __x64_sys_clone+0x198/0x210 [ 34.360972][ T492] ? __kasan_check_write+0x14/0x20 [ 34.366170][ T492] ? __ia32_sys_vfork+0x130/0x130 [ 34.371237][ T492] ? __kasan_check_write+0x14/0x20 [ 34.376378][ T492] ? switch_fpu_return+0x15d/0x2c0 [ 34.378527][ T30] audit: type=1400 audit(1792103726.287:189): avc: denied { write } for pid=482 comm="syz.3.51" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.381517][ T492] x64_sys_call+0x41f/0x9a0 [ 34.381539][ T492] do_syscall_64+0x4c/0xa0 [ 34.381558][ T492] ? clear_bhb_loop+0x50/0xa0 [ 34.381578][ T492] ? clear_bhb_loop+0x50/0xa0 [ 34.408903][ T30] audit: type=1400 audit(1792103726.297:190): avc: denied { add_name } for pid=482 comm="syz.3.51" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.411884][ T492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.411912][ T492] RIP: 0033:0x7fc8cd400559 [ 34.416609][ T30] audit: type=1400 audit(1792103726.297:191): avc: denied { setattr } for pid=482 comm="syz.3.51" name="work" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.421309][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.421327][ T492] RSP: 002b:00007fc8cbe58fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 34.421349][ T492] RAX: ffffffffffffffda RBX: 00007fc8cd687fa0 RCX: 00007fc8cd400559 [ 34.441584][ T30] audit: type=1400 audit(1792103726.297:192): avc: denied { remove_name } for pid=482 comm="syz.3.51" name="#3" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.447196][ T492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.451664][ T30] audit: type=1400 audit(1792103726.297:193): avc: denied { rename } for pid=482 comm="syz.3.51" name="#3" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.473101][ T492] RBP: 00007fc8cd4978b0 R08: 0000000000000000 R09: 0000000000000000 [ 34.473117][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.473128][ T492] R13: 00007fc8cd688038 R14: 00007fc8cd687fa0 R15: 00007ffd5502f458 [ 34.473146][ T492] [ 34.587747][ T492] Mem-Info: [ 34.590987][ T492] active_anon:87 inactive_anon:5390 isolated_anon:0 [ 34.590987][ T492] active_file:4909 inactive_file:13437 isolated_file:0 [ 34.590987][ T492] unevictable:0 dirty:269 writeback:0 [ 34.590987][ T492] slab_reclaimable:8204 slab_unreclaimable:71109 [ 34.590987][ T492] mapped:24381 shmem:459 pagetables:499 bounce:0 [ 34.590987][ T492] kernel_misc_reclaimable:0 [ 34.590987][ T492] free:1554865 free_pcp:25711 free_cma:0 [ 34.632462][ T492] Node 0 active_anon:348kB inactive_anon:21560kB active_file:19636kB inactive_file:53748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97524kB dirty:1076kB writeback:0kB shmem:1836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:3948kB pagetables:1996kB all_unreclaimable? no [ 34.663265][ T492] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982740kB mlocked:0kB bounce:0kB free_pcp:3968kB local_pcp:56kB free_cma:0kB [ 34.695097][ T492] lowmem_reserve[]: 0 3941 3941 [ 34.700772][ T30] audit: type=1400 audit(1792103726.297:194): avc: denied { unlink } for pid=482 comm="syz.3.51" name="#3" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.709921][ T492] Normal free:3240224kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:348kB inactive_anon:21560kB active_file:19636kB inactive_file:53748kB unevictable:0kB writepending:1076kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:99940kB local_pcp:47568kB free_cma:0kB [ 34.752231][ T492] lowmem_reserve[]: 0 0 0 [ 34.756637][ T492] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 34.777886][ T492] Normal: 1130*4kB (UME) 497*8kB (ME) 293*16kB (UM) 519*32kB (UME) 329*64kB (UM) 45*128kB (UM) 16*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 5*2048kB (UME) 772*4096kB (M) = 3240224kB [ 34.791240][ T313] udevd[313]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 34.821721][ T503] loop2: detected capacity change from 0 to 128 [ 34.834035][ T492] 18557 total pagecache pages [ 34.838886][ T492] 0 pages in swap cache [ 34.842354][ T313] udevd[313]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 34.850208][ T492] Swap cache stats: add 0, delete 0, find 0/0 [ 34.857766][ T492] Free swap = 124996kB [ 34.873730][ T492] Total swap = 124996kB [ 34.882784][ T492] 2097051 pages RAM [ 34.886670][ T492] 0 pages HighMem/MovableOnly [ 34.892417][ T503] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.895253][ T507] udevd[507]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 34.910444][ T503] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 34.926599][ T492] 342342 pages reserved [ 34.929677][ T503] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.930916][ T492] 0 pages cma reserved [ 34.980494][ T511] loop4: detected capacity change from 0 to 2048 [ 34.996792][ T503] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 35.002192][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 35.041208][ T511] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 35.042808][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 35.138983][ T511] loop4: p2 start 65535 is beyond EOD, truncated [ 35.145944][ T511] loop4: p3 start 458752 is beyond EOD, truncated [ 35.152626][ T511] loop4: p4 start 262144 is beyond EOD, truncated [ 35.159137][ T511] loop4: p5 start 65535 is beyond EOD, truncated [ 35.166526][ T313] udevd[313]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 35.169625][ T511] loop4: p6 start 65535 is beyond EOD, truncated [ 35.181739][ T511] loop4: p7 start 65535 is beyond EOD, truncated [ 35.188102][ T511] loop4: p8 start 65535 is beyond EOD, truncated [ 35.195451][ T313] udevd[313]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 35.204162][ T511] loop4: p9 start 65535 is beyond EOD, truncated [ 35.214289][ T511] loop4: p10 start 65535 is beyond EOD, truncated [ 35.221917][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4p1, 10) failed: Not a directory [ 35.229181][ T511] loop4: p11 start 65535 is beyond EOD, truncated [ 35.237354][ T511] loop4: p12 start 65535 is beyond EOD, truncated [ 35.246179][ T511] loop4: p13 start 65535 is beyond EOD, truncated [ 35.252691][ T511] loop4: p14 start 65535 is beyond EOD, truncated [ 35.259573][ T511] loop4: p15 start 65535 is beyond EOD, truncated [ 35.266132][ T511] loop4: p16 start 65535 is beyond EOD, truncated [ 35.272694][ T511] loop4: p17 start 65535 is beyond EOD, truncated [ 35.279262][ T511] loop4: p18 start 65535 is beyond EOD, truncated [ 35.285763][ T511] loop4: p19 start 65535 is beyond EOD, truncated [ 35.292492][ T511] loop4: p20 start 65535 is beyond EOD, truncated [ 35.301444][ T511] loop4: p21 start 65535 is beyond EOD, truncated [ 35.307926][ T511] loop4: p22 start 65535 is beyond EOD, truncated [ 35.314483][ T511] loop4: p23 start 65535 is beyond EOD, truncated [ 35.321040][ T511] loop4: p24 start 65535 is beyond EOD, truncated [ 35.327540][ T511] loop4: p25 start 65535 is beyond EOD, truncated [ 35.334138][ T511] loop4: p26 start 65535 is beyond EOD, truncated [ 35.340939][ T511] loop4: p27 start 65535 is beyond EOD, truncated [ 35.349488][ T511] loop4: p28 start 65535 is beyond EOD, truncated [ 35.356017][ T511] loop4: p29 start 65535 is beyond EOD, truncated [ 35.362573][ T511] loop4: p30 start 65535 is beyond EOD, truncated [ 35.369131][ T511] loop4: p31 start 65535 is beyond EOD, truncated [ 35.375598][ T511] loop4: p32 start 65535 is beyond EOD, truncated [ 35.382279][ T511] loop4: p33 start 65535 is beyond EOD, truncated [ 35.388755][ T511] loop4: p34 start 65535 is beyond EOD, truncated [ 35.395280][ T511] loop4: p35 start 65535 is beyond EOD, truncated [ 35.401938][ T511] loop4: p36 start 65535 is beyond EOD, truncated [ 35.410480][ T511] loop4: p37 start 65535 is beyond EOD, truncated [ 35.416958][ T511] loop4: p38 start 65535 is beyond EOD, truncated [ 35.423571][ T511] loop4: p39 start 65535 is beyond EOD, truncated [ 35.430090][ T511] loop4: p40 start 65535 is beyond EOD, truncated [ 35.436596][ T511] loop4: p41 start 65535 is beyond EOD, truncated [ 35.443211][ T511] loop4: p42 start 65535 is beyond EOD, truncated [ 35.449749][ T511] loop4: p43 start 65535 is beyond EOD, truncated [ 35.456216][ T511] loop4: p44 start 65535 is beyond EOD, truncated [ 35.462991][ T511] loop4: p45 start 65535 is beyond EOD, truncated [ 35.471162][ T511] loop4: p46 start 65535 is beyond EOD, truncated [ 35.477666][ T511] loop4: p47 start 65535 is beyond EOD, truncated [ 35.484268][ T511] loop4: p48 start 65535 is beyond EOD, truncated [ 35.490833][ T511] loop4: p49 start 65535 is beyond EOD, truncated [ 35.497306][ T511] loop4: p50 start 65535 is beyond EOD, truncated [ 35.504126][ T511] loop4: p51 start 65535 is beyond EOD, truncated [ 35.512692][ T511] loop4: p52 start 65535 is beyond EOD, truncated [ 35.519318][ T511] loop4: p53 start 65535 is beyond EOD, truncated [ 35.525797][ T511] loop4: p54 start 65535 is beyond EOD, truncated [ 35.532312][ T511] loop4: p55 start 65535 is beyond EOD, truncated [ 35.538803][ T511] loop4: p56 start 65535 is beyond EOD, truncated [ 35.545507][ T511] loop4: p57 start 65535 is beyond EOD, truncated [ 35.552142][ T511] loop4: p58 start 65535 is beyond EOD, truncated [ 35.560896][ T511] loop4: p59 start 65535 is beyond EOD, truncated [ 35.567466][ T511] loop4: p60 start 65535 is beyond EOD, truncated [ 35.573968][ T511] loop4: p61 start 65535 is beyond EOD, truncated [ 35.580779][ T511] loop4: p62 start 65535 is beyond EOD, truncated [ 35.587288][ T511] loop4: p63 start 65535 is beyond EOD, truncated [ 35.593792][ T511] loop4: p64 start 65535 is beyond EOD, truncated [ 35.600375][ T511] loop4: p65 start 65535 is beyond EOD, truncated [ 35.606847][ T511] loop4: p66 start 65535 is beyond EOD, truncated [ 35.613491][ T511] loop4: p67 start 65535 is beyond EOD, truncated [ 35.621781][ T511] loop4: p68 start 65535 is beyond EOD, truncated [ 35.628286][ T511] loop4: p69 start 65535 is beyond EOD, truncated [ 35.634808][ T511] loop4: p70 start 65535 is beyond EOD, truncated [ 35.641380][ T511] loop4: p71 start 65535 is beyond EOD, truncated [ 35.647849][ T511] loop4: p72 start 65535 is beyond EOD, truncated [ 35.654397][ T511] loop4: p73 start 65535 is beyond EOD, truncated [ 35.661014][ T511] loop4: p74 start 65535 is beyond EOD, truncated [ 35.669266][ T511] loop4: p75 start 65535 is beyond EOD, truncated [ 35.675743][ T511] loop4: p76 start 65535 is beyond EOD, truncated [ 35.682438][ T511] loop4: p77 start 65535 is beyond EOD, truncated [ 35.689107][ T511] loop4: p78 start 65535 is beyond EOD, truncated [ 35.695601][ T511] loop4: p79 start 65535 is beyond EOD, truncated [ 35.702246][ T511] loop4: p80 start 65535 is beyond EOD, truncated [ 35.708957][ T511] loop4: p81 start 65535 is beyond EOD, truncated [ 35.717494][ T511] loop4: p82 start 65535 is beyond EOD, truncated [ 35.724102][ T511] loop4: p83 start 65535 is beyond EOD, truncated [ 35.730686][ T511] loop4: p84 start 65535 is beyond EOD, truncated [ 35.737181][ T511] loop4: p85 start 65535 is beyond EOD, truncated [ 35.743773][ T511] loop4: p86 start 65535 is beyond EOD, truncated [ 35.754945][ T511] loop4: p87 start 65535 is beyond EOD, truncated [ 35.771613][ T511] loop4: p88 start 65535 is beyond EOD, truncated [ 35.781384][ T511] loop4: p89 start 65535 is beyond EOD, truncated [ 35.794915][ T511] loop4: p90 start 65535 is beyond EOD, truncated [ 35.809097][ T511] loop4: p91 start 65535 is beyond EOD, truncated [ 35.815630][ T511] loop4: p92 start 65535 is beyond EOD, truncated [ 35.822401][ T511] loop4: p93 start 65535 is beyond EOD, truncated [ 35.828885][ T511] loop4: p94 start 65535 is beyond EOD, truncated [ 35.835386][ T511] loop4: p95 start 65535 is beyond EOD, truncated [ 35.842158][ T511] loop4: p96 start 65535 is beyond EOD, truncated [ 35.848603][ T511] loop4: p97 start 65535 is beyond EOD, truncated [ 35.855098][ T511] loop4: p98 start 65535 is beyond EOD, truncated [ 35.866175][ T511] loop4: p99 start 65535 is beyond EOD, truncated [ 35.872985][ T511] loop4: p100 start 65535 is beyond EOD, truncated [ 35.880292][ T511] loop4: p101 start 65535 is beyond EOD, truncated [ 35.887073][ T511] loop4: p102 start 65535 is beyond EOD, truncated [ 35.893705][ T511] loop4: p103 start 65535 is beyond EOD, truncated [ 35.901549][ T511] loop4: p104 start 65535 is beyond EOD, truncated [ 35.908492][ T511] loop4: p105 start 65535 is beyond EOD, truncated [ 35.915091][ T511] loop4: p106 start 65535 is beyond EOD, truncated [ 35.921768][ T511] loop4: p107 start 65535 is beyond EOD, truncated [ 35.928565][ T511] loop4: p108 start 65535 is beyond EOD, truncated [ 35.980367][ T60] rtl8150 4-1:1.0: couldn't reset the device [ 35.986473][ T60] rtl8150: probe of 4-1:1.0 failed with error -5 [ 36.109116][ T511] loop4: p109 start 65535 is beyond EOD, truncated [ 36.120594][ T511] loop4: p110 start 65535 is beyond EOD, truncated [ 36.180777][ T511] loop4: p111 start 65535 is beyond EOD, truncated [ 36.234437][ T511] loop4: p112 start 65535 is beyond EOD, truncated [ 36.284140][ T511] loop4: p113 start 65535 is beyond EOD, truncated [ 36.671834][ T511] loop4: p114 start 65535 is beyond EOD, truncated [ 36.790277][ T511] loop4: p115 start 65535 is beyond EOD, truncated [ 36.826031][ T511] loop4: p116 start 65535 is beyond EOD, truncated [ 36.862588][ T511] loop4: p117 start 65535 is beyond EOD, truncated [ 36.898512][ T511] loop4: p118 start 65535 is beyond EOD, truncated [ 36.987227][ T511] loop4: p119 start 65535 is beyond EOD, truncated [ 37.020610][ T511] loop4: p120 start 65535 is beyond EOD, truncated [ 37.027171][ T511] loop4: p121 start 65535 is beyond EOD, truncated [ 37.044122][ T511] loop4: p122 start 65535 is beyond EOD, truncated [ 37.056077][ T511] loop4: p123 start 65535 is beyond EOD, truncated [ 37.062816][ T511] loop4: p124 start 65535 is beyond EOD, truncated [ 37.069757][ T511] loop4: p125 start 65535 is beyond EOD, truncated [ 37.076289][ T511] loop4: p126 start 65535 is beyond EOD, truncated [ 37.083111][ T511] loop4: p127 start 65535 is beyond EOD, truncated [ 37.091019][ T511] loop4: p128 start 65535 is beyond EOD, truncated [ 37.097661][ T511] loop4: p129 start 65535 is beyond EOD, truncated [ 37.104413][ T511] loop4: p130 start 65535 is beyond EOD, truncated [ 37.111129][ T511] loop4: p131 start 65535 is beyond EOD, truncated [ 37.117657][ T511] loop4: p132 start 65535 is beyond EOD, truncated [ 37.124433][ T511] loop4: p133 start 65535 is beyond EOD, truncated [ 37.131081][ T511] loop4: p134 start 65535 is beyond EOD, truncated [ 37.137676][ T511] loop4: p135 start 65535 is beyond EOD, truncated [ 37.145589][ T511] loop4: p136 start 65535 is beyond EOD, truncated [ 37.152688][ T511] loop4: p137 start 65535 is beyond EOD, truncated [ 37.159366][ T511] loop4: p138 start 65535 is beyond EOD, truncated [ 37.165969][ T511] loop4: p139 start 65535 is beyond EOD, truncated [ 37.172676][ T511] loop4: p140 start 65535 is beyond EOD, truncated [ 37.182905][ T511] loop4: p141 start 65535 is beyond EOD, truncated [ 37.189646][ T511] loop4: p142 start 65535 is beyond EOD, truncated [ 37.196256][ T511] loop4: p143 start 65535 is beyond EOD, truncated [ 37.202979][ T511] loop4: p144 start 65535 is beyond EOD, truncated [ 37.209818][ T511] loop4: p145 start 65535 is beyond EOD, truncated [ 37.216357][ T511] loop4: p146 start 65535 is beyond EOD, truncated [ 37.223135][ T511] loop4: p147 start 65535 is beyond EOD, truncated [ 37.229785][ T511] loop4: p148 start 65535 is beyond EOD, truncated [ 37.236384][ T511] loop4: p149 start 65535 is beyond EOD, truncated [ 37.243235][ T511] loop4: p150 start 65535 is beyond EOD, truncated [ 37.250866][ T511] loop4: p151 start 65535 is beyond EOD, truncated [ 37.257394][ T511] loop4: p152 start 65535 is beyond EOD, truncated [ 37.264325][ T511] loop4: p153 start 65535 is beyond EOD, truncated [ 37.271001][ T511] loop4: p154 start 65535 is beyond EOD, truncated [ 37.277608][ T511] loop4: p155 start 65535 is beyond EOD, truncated [ 37.284448][ T60] usb 4-1: USB disconnect, device number 2 [ 37.292171][ T511] loop4: p156 start 65535 is beyond EOD, truncated [ 37.298717][ T511] loop4: p157 start 65535 is beyond EOD, truncated [ 37.305437][ T511] loop4: p158 start 65535 is beyond EOD, truncated [ 37.312084][ T511] loop4: p159 start 65535 is beyond EOD, truncated [ 37.318807][ T511] loop4: p160 start 65535 is beyond EOD, truncated [ 37.325408][ T511] loop4: p161 start 65535 is beyond EOD, truncated [ 37.332058][ T511] loop4: p162 start 65535 is beyond EOD, truncated [ 37.338557][ T511] loop4: p163 start 65535 is beyond EOD, truncated [ 37.345125][ T511] loop4: p164 start 65535 is beyond EOD, truncated [ 37.351703][ T511] loop4: p165 start 65535 is beyond EOD, truncated [ 37.358353][ T511] loop4: p166 start 65535 is beyond EOD, truncated [ 37.365692][ T511] loop4: p167 start 65535 is beyond EOD, truncated [ 37.372514][ T511] loop4: p168 start 65535 is beyond EOD, truncated [ 37.379100][ T511] loop4: p169 start 65535 is beyond EOD, truncated [ 37.385662][ T511] loop4: p170 start 65535 is beyond EOD, truncated [ 37.392229][ T511] loop4: p171 start 65535 is beyond EOD, truncated [ 37.398806][ T511] loop4: p172 start 65535 is beyond EOD, truncated [ 37.405552][ T511] loop4: p173 start 65535 is beyond EOD, truncated [ 37.412117][ T511] loop4: p174 start 65535 is beyond EOD, truncated [ 37.418636][ T511] loop4: p175 start 65535 is beyond EOD, truncated [ 37.425238][ T511] loop4: p176 start 65535 is beyond EOD, truncated [ 37.431800][ T511] loop4: p177 start 65535 is beyond EOD, truncated [ 37.438319][ T511] loop4: p178 start 65535 is beyond EOD, truncated [ 37.444913][ T511] loop4: p179 start 65535 is beyond EOD, truncated [ 37.451501][ T511] loop4: p180 start 65535 is beyond EOD, truncated [ 37.458050][ T511] loop4: p181 start 65535 is beyond EOD, truncated [ 37.464639][ T511] loop4: p182 start 65535 is beyond EOD, truncated [ 37.471249][ T511] loop4: p183 start 65535 is beyond EOD, truncated [ 37.477809][ T511] loop4: p184 start 65535 is beyond EOD, truncated [ 37.484408][ T511] loop4: p185 start 65535 is beyond EOD, truncated [ 37.490995][ T511] loop4: p186 start 65535 is beyond EOD, truncated [ 37.497640][ T511] loop4: p187 start 65535 is beyond EOD, truncated [ 37.504248][ T511] loop4: p188 start 65535 is beyond EOD, truncated [ 37.510834][ T511] loop4: p189 start 65535 is beyond EOD, truncated [ 37.517378][ T511] loop4: p190 start 65535 is beyond EOD, truncated [ 37.523960][ T511] loop4: p191 start 65535 is beyond EOD, truncated [ 37.530492][ T511] loop4: p192 start 65535 is beyond EOD, truncated [ 37.536987][ T511] loop4: p193 start 65535 is beyond EOD, truncated [ 37.543734][ T511] loop4: p194 start 65535 is beyond EOD, truncated [ 37.550333][ T511] loop4: p195 start 65535 is beyond EOD, truncated [ 37.556890][ T511] loop4: p196 start 65535 is beyond EOD, truncated [ 37.563471][ T511] loop4: p197 start 65535 is beyond EOD, truncated [ 37.570051][ T511] loop4: p198 start 65535 is beyond EOD, truncated [ 37.576567][ T511] loop4: p199 start 65535 is beyond EOD, truncated [ 37.583107][ T511] loop4: p200 start 65535 is beyond EOD, truncated [ 37.589696][ T511] loop4: p201 start 65535 is beyond EOD, truncated [ 37.596199][ T511] loop4: p202 start 65535 is beyond EOD, truncated [ 37.602733][ T511] loop4: p203 start 65535 is beyond EOD, truncated [ 37.609323][ T511] loop4: p204 start 65535 is beyond EOD, truncated [ 37.616041][ T511] loop4: p205 start 65535 is beyond EOD, truncated [ 37.622602][ T511] loop4: p206 start 65535 is beyond EOD, truncated [ 37.629174][ T511] loop4: p207 start 65535 is beyond EOD, truncated [ 37.635730][ T511] loop4: p208 start 65535 is beyond EOD, truncated [ 37.642312][ T511] loop4: p209 start 65535 is beyond EOD, truncated [ 37.648833][ T511] loop4: p210 start 65535 is beyond EOD, truncated [ 37.655405][ T511] loop4: p211 start 65535 is beyond EOD, truncated [ 37.662011][ T511] loop4: p212 start 65535 is beyond EOD, truncated [ 37.668636][ T511] loop4: p213 start 65535 is beyond EOD, truncated [ 37.675327][ T511] loop4: p214 start 65535 is beyond EOD, truncated [ 37.681959][ T511] loop4: p215 start 65535 is beyond EOD, truncated [ 37.688483][ T511] loop4: p216 start 65535 is beyond EOD, truncated [ 37.689348][ T60] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 37.695040][ T511] loop4: p217 start 65535 is beyond EOD, truncated [ 37.709244][ T511] loop4: p218 start 65535 is beyond EOD, truncated [ 37.715787][ T511] loop4: p219 start 65535 is beyond EOD, truncated [ 37.722375][ T511] loop4: p220 start 65535 is beyond EOD, truncated [ 37.728903][ T511] loop4: p221 start 65535 is beyond EOD, truncated [ 37.735457][ T511] loop4: p222 start 65535 is beyond EOD, truncated [ 37.741992][ T511] loop4: p223 start 65535 is beyond EOD, truncated [ 37.748491][ T511] loop4: p224 start 65535 is beyond EOD, truncated [ 37.755024][ T511] loop4: p225 start 65535 is beyond EOD, truncated [ 37.761562][ T511] loop4: p226 start 65535 is beyond EOD, truncated [ 37.768056][ T511] loop4: p227 start 65535 is beyond EOD, truncated [ 37.774608][ T511] loop4: p228 start 65535 is beyond EOD, truncated [ 37.781137][ T511] loop4: p229 start 65535 is beyond EOD, truncated [ 37.787649][ T511] loop4: p230 start 65535 is beyond EOD, truncated [ 37.794183][ T511] loop4: p231 start 65535 is beyond EOD, truncated [ 37.800799][ T511] loop4: p232 start 65535 is beyond EOD, truncated [ 37.807323][ T511] loop4: p233 start 65535 is beyond EOD, truncated [ 37.813880][ T511] loop4: p234 start 65535 is beyond EOD, truncated [ 37.821144][ T511] loop4: p235 start 65535 is beyond EOD, truncated [ 37.827658][ T511] loop4: p236 start 65535 is beyond EOD, truncated [ 37.834405][ T511] loop4: p237 start 65535 is beyond EOD, truncated [ 37.841033][ T511] loop4: p238 start 65535 is beyond EOD, truncated [ 37.847552][ T511] loop4: p239 start 65535 is beyond EOD, truncated [ 37.854133][ T511] loop4: p240 start 65535 is beyond EOD, truncated [ 37.860787][ T511] loop4: p241 start 65535 is beyond EOD, truncated [ 37.867377][ T511] loop4: p242 start 65535 is beyond EOD, truncated [ 37.874052][ T511] loop4: p243 start 65535 is beyond EOD, truncated [ 37.881878][ T511] loop4: p244 start 65535 is beyond EOD, truncated [ 37.889755][ T511] loop4: p245 start 65535 is beyond EOD, truncated [ 37.896361][ T511] loop4: p246 start 65535 is beyond EOD, truncated [ 37.903027][ T511] loop4: p247 start 65535 is beyond EOD, truncated [ 37.909776][ T511] loop4: p248 start 65535 is beyond EOD, truncated [ 37.916371][ T511] loop4: p249 start 65535 is beyond EOD, truncated [ 37.923014][ T511] loop4: p250 start 65535 is beyond EOD, truncated [ 37.929589][ T511] loop4: p251 start 65535 is beyond EOD, truncated [ 37.938698][ T511] loop4: p252 start 65535 is beyond EOD, truncated [ 37.946517][ T511] loop4: p253 start 65535 is beyond EOD, truncated [ 37.953886][ T511] loop4: p254 start 65535 is beyond EOD, truncated [ 37.960660][ T511] loop4: p255 start 65535 is beyond EOD, truncated [ 38.019129][ T60] usb 4-1: not running at top speed; connect to a high speed hub [ 38.041509][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 38.070529][ T542] loop4: detected capacity change from 0 to 512 [ 38.076823][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 38.109144][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.129182][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 38.145276][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 38.158586][ T542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 38.166605][ T542] System zones: 1-12 [ 38.180784][ T60] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 38.190759][ T542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.68: missing EA_INODE flag [ 38.209076][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.217637][ T542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.68: error while reading EA inode 12 err=-117 [ 38.233189][ T542] EXT4-fs (loop4): 1 orphan inode deleted [ 38.238986][ T542] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 38.828633][ T26] usb 4-1: USB disconnect, device number 3 [ 40.453319][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 40.453334][ T30] audit: type=1400 audit(1792103732.477:209): avc: denied { read write } for pid=560 comm="syz.3.75" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.484775][ T562] device-mapper: table: 253:0: : unknown target type [ 40.491528][ T562] device-mapper: ioctl: error adding target to table [ 40.508411][ T30] audit: type=1400 audit(1792103732.507:210): avc: denied { open } for pid=560 comm="syz.3.75" path="/14/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.532915][ T30] audit: type=1400 audit(1792103732.507:211): avc: denied { ioctl } for pid=560 comm="syz.3.75" path="/14/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 41.806127][ T30] audit: type=1400 audit(1792103733.827:212): avc: denied { prog_run } for pid=580 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.863659][ T30] audit: type=1400 audit(1792103733.867:213): avc: denied { create } for pid=583 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.894034][ T30] audit: type=1400 audit(1792103733.867:214): avc: denied { write } for pid=583 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.914138][ T30] audit: type=1400 audit(1792103733.867:215): avc: denied { nlmsg_write } for pid=583 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.934623][ T30] audit: type=1400 audit(1792103733.937:216): avc: denied { write } for pid=573 comm="syz.3.77" name="tcp6" dev="proc" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.099103][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.469147][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.479288][ T60] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 42.488317][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.497059][ T60] usb 1-1: config 0 descriptor?? [ 43.018515][ T594] loop3: detected capacity change from 0 to 128 [ 43.030503][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 43.116689][ T594] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 43.133344][ T594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.144395][ T594] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.159525][ T30] audit: type=1400 audit(1792103735.187:217): avc: denied { create } for pid=593 comm="syz.3.83" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.169037][ C0] sched: RT throttling activated [ 44.223890][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 44.234387][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 44.489572][ T30] audit: type=1400 audit(1792103736.517:218): avc: denied { create } for pid=611 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.014062][ T26] usb 1-1: USB disconnect, device number 3 [ 45.807262][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 45.807278][ T30] audit: type=1400 audit(1792103737.827:222): avc: denied { setopt } for pid=621 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.834712][ T30] audit: type=1400 audit(1792103737.827:223): avc: denied { name_bind } for pid=621 comm="syz.2.92" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.062959][ T30] audit: type=1400 audit(1792103738.057:224): avc: denied { read } for pid=632 comm="syz.4.95" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.087080][ T634] input: syz0 as /devices/virtual/input/input5 [ 46.194822][ T30] audit: type=1400 audit(1792103738.057:225): avc: denied { open } for pid=632 comm="syz.4.95" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.232639][ T30] audit: type=1400 audit(1792103738.067:226): avc: denied { ioctl } for pid=632 comm="syz.4.95" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.257534][ T30] audit: type=1400 audit(1792103738.197:227): avc: denied { read } for pid=623 comm="syz.3.93" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.288216][ T636] loop4: detected capacity change from 0 to 512 [ 46.311510][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 46.350274][ T636] EXT4-fs (loop4): Ignoring removed nobh option [ 46.358674][ T636] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.96: invalid indirect mapped block 256 (level 2) [ 46.372277][ T636] EXT4-fs (loop4): 2 truncates cleaned up [ 46.378060][ T636] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 46.559113][ T30] audit: type=1400 audit(1792103738.567:228): avc: denied { read write } for pid=635 comm="syz.4.96" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.581652][ T30] audit: type=1400 audit(1792103738.567:229): avc: denied { open } for pid=635 comm="syz.4.96" path="/21/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.132801][ T635] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.96: bg 0: block 5: invalid block bitmap [ 47.145353][ T635] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 47.157643][ T635] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.157643][ T635] [ 47.167307][ T635] EXT4-fs (loop4): Total free blocks count 0 [ 47.173326][ T635] EXT4-fs (loop4): Free/Dirty block details [ 47.179308][ T635] EXT4-fs (loop4): free_blocks=0 [ 47.184273][ T635] EXT4-fs (loop4): dirty_blocks=33 [ 47.189408][ T635] EXT4-fs (loop4): Block reservation details [ 47.195392][ T635] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 47.340881][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 47.350579][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 47.735529][ T651] loop4: detected capacity change from 0 to 512 [ 47.811660][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 47.846292][ T651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 47.863171][ T651] System zones: 1-12 [ 47.867832][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.100: missing EA_INODE flag [ 47.880502][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.100: error while reading EA inode 12 err=-117 [ 47.894119][ T651] EXT4-fs (loop4): 1 orphan inode deleted [ 47.900098][ T651] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 48.850959][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 48.860799][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 49.525515][ T680] loop3: detected capacity change from 0 to 1024 [ 49.538254][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 49.570066][ T680] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.580992][ T680] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 49.593287][ T680] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.104: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.611417][ T680] EXT4-fs (loop3): no journal found [ 49.616659][ T680] EXT4-fs (loop3): can't get journal size [ 50.486539][ T680] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.104: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 50.504534][ T680] EXT4-fs (loop3): failed to initialize system zone (-117) [ 50.511845][ T680] EXT4-fs (loop3): mount failed [ 50.591566][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 50.602680][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 50.664438][ T30] audit: type=1400 audit(1792103742.687:230): avc: denied { write } for pid=665 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 52.164858][ T694] loop3: detected capacity change from 0 to 512 [ 52.231528][ T699] fuse: Bad value for 'fd' [ 52.236977][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 52.250257][ T30] audit: type=1400 audit(1792103744.277:231): avc: denied { unlink } for pid=693 comm="syz.4.113" name="#5" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.371786][ T694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.383536][ T694] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.428765][ T694] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.112: path /21/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 53.380857][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 53.391099][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 54.214056][ T714] loop4: detected capacity change from 0 to 256 [ 54.227151][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 54.289778][ T289] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 54.297451][ T289] FAT-fs (loop4): Filesystem has been set read-only [ 54.304374][ T30] audit: type=1400 audit(1792103746.297:232): avc: denied { mount } for pid=712 comm="syz.4.117" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.342583][ T713] loop3: detected capacity change from 0 to 4096 [ 54.350385][ T289] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 54.360225][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 54.389767][ T30] audit: type=1400 audit(1792103746.317:233): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.415857][ T713] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 54.442727][ T715] kvm: pic: non byte write [ 54.478376][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 54.508595][ T507] udevd[507]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 54.571981][ T726] loop0: detected capacity change from 0 to 512 [ 54.603973][ T507] udevd[507]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 54.674728][ T726] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.120: iget: bad i_size value: 38620345925642 [ 54.701916][ T726] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.120: couldn't read orphan inode 15 (err -117) [ 54.729254][ T726] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.760575][ T30] audit: type=1400 audit(1792103746.787:234): avc: denied { append } for pid=725 comm="syz.0.120" path="/24/file0/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.995385][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 55.026160][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 55.075219][ T735] FAULT_INJECTION: forcing a failure. [ 55.075219][ T735] name fail_futex, interval 1, probability 0, space 0, times 1 [ 55.143008][ T735] CPU: 1 PID: 735 Comm: syz.3.123 Not tainted syzkaller #0 [ 55.150289][ T735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.160374][ T735] Call Trace: [ 55.163675][ T735] [ 55.166633][ T735] __dump_stack+0x21/0x30 [ 55.170988][ T735] dump_stack_lvl+0x110/0x170 [ 55.175697][ T735] ? show_regs_print_info+0x20/0x20 [ 55.180920][ T735] ? irqentry_exit+0x37/0x40 [ 55.185526][ T735] dump_stack+0x15/0x20 [ 55.189701][ T735] should_fail+0x3ab/0x500 [ 55.194140][ T735] get_futex_key+0x143/0xb60 [ 55.198765][ T735] ? _raw_spin_unlock_irqrestore+0x56/0x80 [ 55.204596][ T735] ? bsearch+0x92/0xb0 [ 55.208737][ T735] ? futex_wait_restart+0x250/0x250 [ 55.213956][ T735] ? search_extable+0x8c/0xd0 [ 55.218656][ T735] futex_wake+0x133/0x8f0 [ 55.223016][ T735] ? strncpy_from_user+0x201/0x2d0 [ 55.228187][ T735] ? futex_wait+0x8f0/0x8f0 [ 55.232722][ T735] ? kernelmode_fixup_or_oops+0x85/0xd0 [ 55.238293][ T735] ? __bad_area_nosemaphore+0xb5/0x470 [ 55.243770][ T735] do_futex+0xd8d/0x2800 [ 55.248037][ T735] ? bad_area+0x74/0x90 [ 55.252211][ T735] ? do_user_addr_fault+0x103d/0x11c0 [ 55.257606][ T735] ? futex_exit_release+0x1e0/0x1e0 [ 55.262832][ T735] ? do_kern_addr_fault+0x80/0x80 [ 55.267904][ T735] ? proc_fail_nth_read+0x220/0x220 [ 55.273135][ T735] ? security_file_permission+0x79/0xa0 [ 55.278710][ T735] ? irqentry_exit+0x37/0x40 [ 55.283323][ T735] ? exc_page_fault+0x5e/0xb0 [ 55.288020][ T735] ? asm_exc_page_fault+0x27/0x30 [ 55.293070][ T735] ? strncpy_from_user+0x2a9/0x2d0 [ 55.298226][ T735] __se_sys_futex+0x135/0x330 [ 55.302934][ T735] ? __x64_sys_futex+0x100/0x100 [ 55.307894][ T735] ? ksys_write+0x1fa/0x260 [ 55.312424][ T735] ? __ia32_sys_read+0x90/0x90 [ 55.317293][ T735] __x64_sys_futex+0xe5/0x100 [ 55.321987][ T735] x64_sys_call+0x251/0x9a0 [ 55.326552][ T735] do_syscall_64+0x4c/0xa0 [ 55.330992][ T735] ? clear_bhb_loop+0x50/0xa0 [ 55.335716][ T735] ? clear_bhb_loop+0x50/0xa0 [ 55.340406][ T735] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.346307][ T735] RIP: 0033:0x7fcf81cd7559 [ 55.350727][ T735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.370340][ T735] RSP: 002b:00007fcf807300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.378763][ T735] RAX: ffffffffffffffda RBX: 00007fcf81f5efa8 RCX: 00007fcf81cd7559 [ 55.386740][ T735] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf81f5efac [ 55.394718][ T735] RBP: 00007fcf81f5efa0 R08: 0002570f448f73e6 R09: 0000000000000000 [ 55.402698][ T735] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 55.410685][ T735] R13: 00007fcf81f5f038 R14: 00007fffa6569a90 R15: 00007fffa6569b78 [ 55.418684][ T735] [ 55.471171][ T383] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 55.485430][ T8] device bridge_slave_1 left promiscuous mode [ 55.491686][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.499355][ T383] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.519564][ T8] device bridge_slave_0 left promiscuous mode [ 55.525881][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.549378][ T383] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.549378][ T383] [ 55.560113][ T8] device veth1_macvtap left promiscuous mode [ 55.566171][ T8] device veth0_vlan left promiscuous mode [ 55.569457][ T383] EXT4-fs (loop0): Total free blocks count 0 [ 55.577997][ T383] EXT4-fs (loop0): Free/Dirty block details [ 55.589095][ T383] EXT4-fs (loop0): free_blocks=0 [ 55.594069][ T383] EXT4-fs (loop0): dirty_blocks=13128 [ 55.612694][ T383] EXT4-fs (loop0): Block reservation details [ 55.618717][ T383] EXT4-fs (loop0): i_reserved_data_blocks=13128 [ 55.638715][ T383] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 55.651611][ T383] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.651611][ T383] [ 56.142184][ T749] loop3: detected capacity change from 0 to 256 [ 56.157202][ T507] udevd[507]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 56.220481][ T749] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 56.254974][ T322] udevd[322]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 56.321017][ T507] udevd[507]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=30 state=3 status=67 (errno 9: Bad file descriptor) [ 56.536838][ T30] audit: type=1400 audit(1792103748.557:235): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14557]" dev="pipefs" ino=14557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 58.050873][ T8] device bridge_slave_1 left promiscuous mode [ 58.056997][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.064565][ T8] device bridge_slave_0 left promiscuous mode [ 58.070834][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.078782][ T8] device bridge_slave_1 left promiscuous mode [ 58.084989][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.092589][ T8] device bridge_slave_0 left promiscuous mode [ 58.098692][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.106848][ T8] device veth1_macvtap left promiscuous mode [ 58.112919][ T8] device veth0_vlan left promiscuous mode [ 58.118954][ T8] device veth1_macvtap left promiscuous mode [ 58.124998][ T8] device veth0_vlan left promiscuous mode [ 59.479685][ T8] device bridge_slave_1 left promiscuous mode [ 59.485815][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.493380][ T8] device bridge_slave_0 left promiscuous mode [ 59.499598][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.507435][ T8] device veth1_macvtap left promiscuous mode [ 59.513461][ T8] device veth0_vlan left promiscuous mode