last executing test programs: 3m46.642973131s ago: executing program 3 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) syz_mount_image$exfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x2000084c, &(0x7f0000000980)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001140)="$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") lchown(&(0x7f0000000f40)='./file0\x00', 0x0, 0xffffffffffffffff) dup2(r0, r0) 3m46.086820667s ago: executing program 3 (id=400): mmap(&(0x7f00006cc000/0x4000)=nil, 0x4000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f000000b6c0)={0xffffffffffffffff}) listen(r0, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000000c0)={[{@uni_xlate}, {@numtail}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@fat=@quiet}, {@numtail}, {@rodir}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x3, 0x282, &(0x7f0000001180)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x0, 0x80}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f00000006c0)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x4000087, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000840)=0x1b, 0x4) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x2808080, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c726f6469722c756d61736b3d30303030303030303030303030303030303030303030302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c696f636861727365743d63703433372c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c00c44f9a285a9d2d2f525c4d36d56f0c654dd61ca6977699de8edce3ef08458a8db895162e8a"], 0x1, 0x2ae, &(0x7f0000000a00)="$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") r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x1, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) openat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) 3m44.514221798s ago: executing program 3 (id=401): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2200002, &(0x7f0000000980)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000a40)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000fc0)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r2, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001200)={r1, r0}, 0xc) sendmmsg$unix(r4, &(0x7f0000001240), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001280)=0x2) recvmmsg(r3, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/139, 0x8b}, {&(0x7f0000002600)=""/134, 0x86}, {&(0x7f00000026c0)=""/136, 0x88}, {&(0x7f0000002780)=""/55, 0x37}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/90, 0x5a}], 0xa, &(0x7f00000029c0)=""/184, 0xb8}, 0x358c0a4b}, {{&(0x7f0000002a80)=@in6, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/88, 0x58}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/139, 0x8b}, {&(0x7f0000003c40)=""/62, 0x3e}], 0x4, &(0x7f0000003cc0)=""/187, 0xbb}, 0x8}], 0x2, 0x2100, 0x0) pwritev(r4, &(0x7f0000001300), 0x0, 0x8, 0x5) set_tid_address(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="340000001800010000000000000000401d012600080005000806f90515000300030000200503000054831bdbae1d82b304000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001440)={0x0, 0x500, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100070d00000000007e0000000d297c419756ff2efbd8e231060e080076b9", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) fchown(r0, 0xffffffffffffffff, 0xee01) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001500)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m43.749851746s ago: executing program 3 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa240, 0x0) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f00000003c0)='./file2\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfd, 0x1501, &(0x7f0000000480)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") syz_mount_image$exfat(0x0, &(0x7f00000019c0)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) mount$incfs(&(0x7f0000001a40)='.\x00', &(0x7f0000001a80)='./bus\x00', &(0x7f0000001ac0), 0xc002, 0x0) chdir(&(0x7f0000001b00)='./bus\x00') mount$overlay(0x0, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x2000008, &(0x7f0000001bc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'pim6reg1\x00'}) mount$incfs(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000140)={[{@rlog_pages={'rlog_pages', 0x3d, 0x403}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x49}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x18, r2, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 3m43.583214763s ago: executing program 3 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x801c0, 0x189) fcntl$setsig(r4, 0xa, 0x21) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bind$unix(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m43.402966581s ago: executing program 3 (id=410): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r0, 0x0, 0x20000014) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000208610500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYBLOB], 0x80}}, 0x800) r1 = syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0xa00c, &(0x7f0000000480)=ANY=[], 0x0, 0x24a, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000780)='./bus\x00') creat(0x0, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ec0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r4, &(0x7f0000001040), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000001080), 0x80002c1, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) pread64(r5, &(0x7f0000001d40)=""/4096, 0x1000, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) close(0x3) 3m43.401986661s ago: executing program 32 (id=410): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r0, 0x0, 0x20000014) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000208610500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYBLOB], 0x80}}, 0x800) r1 = syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0xa00c, &(0x7f0000000480)=ANY=[], 0x0, 0x24a, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000780)='./bus\x00') creat(0x0, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ec0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r4, &(0x7f0000001040), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000001080), 0x80002c1, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) pread64(r5, &(0x7f0000001d40)=""/4096, 0x1000, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) close(0x3) 17.889568195s ago: executing program 4 (id=1751): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000001200)='\v', 0x1) connect$unix(r5, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, 0x0, 0x5005) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r8 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r7, r8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 14.779479173s ago: executing program 2 (id=1765): syz_mount_image$f2fs(&(0x7f0000005f80), &(0x7f0000000040)='./proc/devices\x00', 0x0, &(0x7f0000006000)=ANY=[@ANYRESHEX], 0x1, 0x1060c, &(0x7f0000006040)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x211008a, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000016900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000016940)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000016980)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000169c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000016a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000016a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000016ac0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000016b00), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000016b80)='./proc\x00', &(0x7f0000016bc0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000016c00)='./proc/devices\x00', 0x2402, 0x0) read$FUSE(r3, &(0x7f0000016c40)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000018c80)=0x2) listen(0xffffffffffffffff, 0x6) r4 = creat(&(0x7f0000018cc0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r4, &(0x7f0000018d00)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd0000003800000045030000080000000500200001000500090000010000000003000000040000000500000006000000800000"], 0x58) inotify_add_watch(0xffffffffffffffff, &(0x7f0000018d80)='./file0\x00', 0x5000a61) close(r4) execve(&(0x7f0000018dc0)='./file0\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000018e00)='/proc/partitions\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000018e80)=""/120, 0x78) 14.443638807s ago: executing program 0 (id=1766): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/108, 0x6c}, 0x10001}], 0x2, 0x40000002, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.291231008s ago: executing program 4 (id=1768): socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000af00)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16, @ANYRES32=r0]) 11.188256489s ago: executing program 1 (id=1769): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f000000aec0), 0x42082, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f000000af40), 0x102, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16=r2, @ANYRES32=r1]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f000000afc0)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f000000b000)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4058040, &(0x7f000000b040)={0x11, 0x1, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11.18095072s ago: executing program 4 (id=1770): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x9, 0x8, 0x9f, 0x3}]}) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000e0180c200000e08004503005cffff0000002f9078000000e0e0000001248022eb00000000000a0004100008e0000086eb88a888be0800000010fe00000100000000000000280022eb00000000200000000200000002000009000000000800655800000000"], 0x0) r4 = socket$inet6(0xa, 0x3, 0xffffffff) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000340)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 11.166346691s ago: executing program 1 (id=1771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004300)={0x90, 0x0, 0x1, {0x6, 0x1, 0x4000000000007, 0x6, 0x1, 0x10005, {0x2, 0xfffffbffefffff81, 0x9, 0x9, 0x98000000000000, 0x9, 0x10000, 0x7, 0x7fe, 0x1000, 0xa, r1, r2, 0x0, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 9.586851622s ago: executing program 1 (id=1773): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000044c0)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff00080006"], 0x44}}, 0x2040800) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r5, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r8, 0x0, 0x4000) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000040)={0xa, {0x2, 0x5, 0x8}}, 0xa) 9.548665246s ago: executing program 4 (id=1774): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2200002, &(0x7f0000000980)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001200)={r0}, 0xc) sendmmsg$unix(r2, &(0x7f0000001240), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/139, 0x8b}, {&(0x7f0000002600)=""/134, 0x86}, {&(0x7f00000026c0)=""/136, 0x88}, {&(0x7f0000002780)=""/55, 0x37}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/90, 0x5a}], 0xa, &(0x7f00000029c0)=""/184, 0xb8}, 0x358c0a4b}, {{&(0x7f0000002a80)=@in6, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/88, 0x58}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/139, 0x8b}, {&(0x7f0000003c40)=""/62, 0x3e}], 0x4, &(0x7f0000003cc0)=""/187, 0xbb}, 0x8}], 0x2, 0x2100, 0x0) pwritev(r2, &(0x7f0000001300), 0x0, 0x8, 0x5) set_tid_address(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="340000001800010000000000000000401d012600080005000806f90515000300030000200503000054831bdbae1d82b304000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001440)={0x0, 0x500, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100070d00000000007e0000000d297c419756ff2efbd8e231060e080076b9", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001500)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.801838652s ago: executing program 2 (id=1776): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, 0x0, 0x5005) r5 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) r6 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r5, r6, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 8.800014442s ago: executing program 5 (id=1777): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000001200)='\v', 0x1) connect$unix(r5, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, 0x0, 0x5005) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r8 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r7, r8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 8.713180401s ago: executing program 0 (id=1778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12019802020000482505a1a440000102030109023b0001011080b5090400b6030206000005240f01040004c9b23832262f1040880000070007000c0905820210008004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0xf, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 5.240690476s ago: executing program 0 (id=1779): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@abs, 0x6e) chdir(0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000dc0)='./file0\x00', 0x80c01, 0x0, 0x9, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x3412332, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000e80)='ext4\x00', &(0x7f0000000ec0)='./file1\x00', 0x200000, &(0x7f0000000f00)={[{@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001500)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x203a075, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x3a08082, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x509342, 0x4) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000001640)={0x0, 0x0, "016044be9e05141d45d14a8cba2f3f08"}) bind$inet6(0xffffffffffffffff, &(0x7f0000001680)={0xa, 0x4e22, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0xf}, 0xbfb3, 0x0, &(0x7f0000000040)={0x60, 0xf, 0x25, 0x3, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fffffff, 0x0, 0x0}) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) 4.481924683s ago: executing program 5 (id=1780): socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000af00)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16, @ANYRES32=r0]) 4.464107545s ago: executing program 5 (id=1781): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f000000af00)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f000000af40), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16=r1, @ANYRES32]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f000000afc0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000b000)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4058040, &(0x7f000000b040)={0x11, 0x1, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.373651294s ago: executing program 2 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000fffff0000500b5340a580300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff10001d800c0000800500140000000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001640), 0xffffffffffffff97, 0x10, &(0x7f0000001680), 0xffffffffffffffc2}, 0x48) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$loop(&(0x7f0000000500), 0x8, 0x40000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x5, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.370444754s ago: executing program 1 (id=1783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004300)={0x90, 0x0, 0x1, {0x6, 0x1, 0x4000000000007, 0x6, 0x1, 0x10005, {0x2, 0xfffffbffefffff81, 0x9, 0x9, 0x98000000000000, 0x9, 0x10000, 0x7, 0x7fe, 0x1000, 0xa, r1, r2, 0x0, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 4.060604546s ago: executing program 5 (id=1784): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000340)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0xce22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r1, 0x0) listen(0xffffffffffffffff, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) 2.477189058s ago: executing program 1 (id=1785): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000002680)={0x28, 0x2, 0x0, {0x2, 0x1e5b, 0x7}}, 0x28) 2.472187898s ago: executing program 4 (id=1786): syz_mount_image$f2fs(&(0x7f0000005f80), &(0x7f0000000040)='./proc/devices\x00', 0x0, &(0x7f0000006000)=ANY=[@ANYRESHEX], 0x1, 0x1060c, &(0x7f0000006040)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x211008a, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000016900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000016940)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000016980)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000169c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000016a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000016a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000016ac0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000016b00), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000016b80)='./proc\x00', &(0x7f0000016bc0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000016c00)='./proc/devices\x00', 0x2402, 0x0) read$FUSE(r3, &(0x7f0000016c40)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000018c80)=0x2) listen(0xffffffffffffffff, 0x6) r4 = creat(&(0x7f0000018cc0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r4, &(0x7f0000018d00)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd0000003800000045030000080000000500200001000500090000010000000003000000040000000500000006000000800000"], 0x58) inotify_add_watch(0xffffffffffffffff, &(0x7f0000018d80)='./file0\x00', 0x5000a61) close(r4) execve(&(0x7f0000018dc0)='./file0\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000018e00)='/proc/partitions\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000018e80)=""/120, 0x78) 2.459454079s ago: executing program 2 (id=1787): syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x203}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x10b481) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x4010, 0x0) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000407b06032300010000000109022700010100803209"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffe1, &(0x7f00000001c0)=ANY=[]) syz_read_part_table(0x104f, &(0x7f0000000a80)="$eJzsz72pAkEUBeBzH/NWMbEKczvQIjSxmg2sxiqsyBaU3fUHzEWE70tm7j3MgQlf9Zf1a5hPx7l2SbZJ+qTqkV7TksxW1Q+rRRuXLZe3xmF+vuly6MbL5vg/9aVleQ8r+9MHvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+MWAAD//8UcCHM=") setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001b00)={0x5, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r7, &(0x7f00000006c0)=0x700, 0xfdef) bind$inet6(r6, &(0x7f0000000280)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f00000005c0)={@desc={0x1, 0x0, @desc3}}) 2.458318079s ago: executing program 5 (id=1788): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4020400) r2 = openat(0xffffffffffffff9c, 0x0, 0x2060, 0x100) fcntl$setlease(r2, 0x400, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x501, 0x1001, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x77cd}]}}]}, 0x38}}, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000940)='./dm0\x00', 0x6180, r1) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000980)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000009c0), 0x0, 0x1000) 1.586596758s ago: executing program 1 (id=1789): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12019802020000482505a1a440000102030109023b0001011080b5090400b6030206000005240f01040004c9b23832262f1040880000070007000c0905820210008004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0xf, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.583067779s ago: executing program 5 (id=1790): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r2, &(0x7f0000001200)='\v', 0x1) connect$unix(r4, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000440)={0x7, 0x47, 0x1}, 0x7) r7 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r6, r7, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 1.500202697s ago: executing program 0 (id=1791): socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000af00)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f000000af80)=ANY=[@ANYRES16, @ANYRES32=r0]) 1.440359444s ago: executing program 0 (id=1792): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = io_uring_setup(0x3585, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000800)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f00000002c0)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) open(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x36) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) dup(0xffffffffffffffff) creat(0x0, 0x8) r3 = openat(r2, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000780)='\f', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmmsg(r3, &(0x7f00000015c0)=[{{&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0xcc, 0x3, "c0ac9bc13502a9560391e10ae1122a4a81a539362ab6146685573d6096b9ebdd4835c5dc94478dd434a3147413c03e68bc62f786810850ef9f5362102fd0f2", 0x6}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000001180)=[{0xf0, 0x111, 0x20000000, "4f9777dc7b026dfaaaab72bfd497498753e7da04f64b9a623ed2b9066f2509b7276ba69a4c92fbc25230a8c3d9d1e1232918c130058cdce7b7542d4b848ae12dab213e9548949d392d0259b41a454b5edbed3468f328759485dbd57e330a29484409992e0a91f997d07fa3b23ff63cfe153a4ca33449b48f0300eb939da4f3ce302b0939afeecad17ae3a6a99eb6dbcb2710c5e666d621bce0d1aecac1d45abba3241e99d04d5ca68ae25af41300079f08784dd4716dfc48ff1e1fcf6ea462df9df987b27e71181bac65343704bf1f3a18a3976d576ec4927f895f"}, {0x60, 0x10d, 0x1000, "9da9c2a82ce06ae719f267b4e4085a930d83a244cf065b2fea909daee7dd8cc80d974fb9ca9a7bd5ca4399dae0bbfd84178d9045955f45ca2948b8721b21dd81033fd2f3ab775c6250fa76794ffcb64f"}, {0x78, 0x10d, 0x100, "16cd9097ceafafad2834e9a5efc9cdeb18dd1e201b700facf19291789936b858c826b21528826776e7139a53971beaf60367f44f7abe2ee6b6081b0ec780878e9cd7202e3c428aa4ad9ea6f3892c64e9478a07fd30612f8ddb1d4cd57e62ae58e8"}, {0xe0, 0x109, 0xba84, "89cc63e18f2a5771090fc1c59b1d879b83cdcc6270aac3b2caa75d54ba14cc6ab757b298106f1598ad178a9f035700aab43d8c8c8d90fdd12bf7a0ae1df6db860587c0fb75c7b65e552228f3ff7f23f7d2f91277ad54b91f647ad1afb2337c71a78ffa07d74ab2d186e380afe15a2281f97199a7dacd4c536dd9ddec1affcc5d2c86dc60463d65365874b3c74c02a35d86a820ef41c055fe2187373076e8d1ba00f84bc700c66fa4ab986689c4f58741aa671b4a19cbc6e2cf8188dc19cb8110bd4e14c11454fb3b6d"}, {0xa8, 0x116, 0x4, "62b6a2aa67f1bf87ea3f37e042b79328b408e6916fd6283880d49eaa6afa32dc28402a33bae3a82168aab06b96164c11141d2ae8e5f4c4b2b6571948daf7945d5d7860a9fa234805fec3b157d33fb71680f174abaf46674b5122ea3fd6a466467c698a52bb414ccd666a2a68c5911b14ad486e61ac9cedccfa69c01bf91fd6d41da1ffa9115269232f9307f870cb43660ec0ad73d9"}, {0x38, 0x110, 0x8, "00122383afe7088aa3a0eaf9feb9ee50df5d3a5a56ab35ecabf6ae4b3849731dc22cfdef000e"}, {0xa0, 0x10f, 0x4, "03b3fcc56399ce27e3671b06857fa1dd8414d49716286f46143b53088f612166649f61a65c0b772ec752056284f42cde2c95c45326eee6e5426f6d4df17c1181f9e5146d6ee25be1fbc5fc6b0341588523bf82b7963e980b12de709e6c9683d751fd44b03ae0ac76399902e169c35f3dff273d9f915ecd085f054e72043ede5f88acd7378e8fb12b6413c54438e570"}], 0x428}}], 0x1, 0x20000091) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000900)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000c80)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.281242749s ago: executing program 0 (id=1793): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x4, &(0x7f0000001040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001300), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, 0x0, 0x5005) r5 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x1) r6 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000b40)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c0) close_range(r5, r6, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x100c2, 0x21, 0x10}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000a40)=0xc) 304.312369ms ago: executing program 4 (id=1794): mmap(&(0x7f00006cc000/0x4000)=nil, 0x4000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f000000b6c0)={0xffffffffffffffff}) listen(r0, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000000c0)={[{@uni_xlate}, {@numtail}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@fat=@quiet}, {@numtail}, {@rodir}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x3, 0x282, &(0x7f0000001180)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x497803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f00000006c0)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x4000087, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000840)=0x1b, 0x4) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x2808080, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c726f6469722c756d61736b3d30303030303030303030303030303030303030303030302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c696f636861727365743d63703433372c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c00c44f9a285a9d2d2f525c4d36d56f0c654dd61ca6977699de8edce3ef08458a8db895162e8a"], 0x1, 0x2ae, &(0x7f0000000a00)="$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") r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x1, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) openat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x20, 0x3, 0x3d0, 0x0, 0xa, 0x148, 0x0, 0x10, 0x338, 0x2a8, 0x2a8, 0x338, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {0xff}}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x6, 0x1, 0x3}, {0x0, 0x4, 0x7}, {0x0, 0x0, 0x7}, 0xb, 0x4}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x430) 297.45365ms ago: executing program 2 (id=1795): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004300)={0x90, 0x0, 0x1, {0x6, 0x1, 0x4000000000007, 0x6, 0x1, 0x10005, {0x2, 0xfffffbffefffff81, 0x9, 0x9, 0x98000000000000, 0x9, 0x10000, 0x7, 0x7fe, 0x1000, 0xa, r1, r2, 0x0, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 0s ago: executing program 2 (id=1796): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x2200002, &(0x7f0000000980)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000001000)='net/fib_trie\x00') socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000010c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001200)={r0}, 0xc) sendmmsg$unix(r2, &(0x7f0000001240), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x2) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/139, 0x8b}, {&(0x7f0000002600)=""/134, 0x86}, {&(0x7f00000026c0)=""/136, 0x88}, {&(0x7f0000002780)=""/55, 0x37}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/90, 0x5a}], 0xa, &(0x7f00000029c0)=""/184, 0xb8}, 0x358c0a4b}, {{&(0x7f0000002a80)=@in6, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/88, 0x58}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/139, 0x8b}, {&(0x7f0000003c40)=""/62, 0x3e}], 0x4, &(0x7f0000003cc0)=""/187, 0xbb}, 0x8}], 0x2, 0x2100, 0x0) pwritev(r2, &(0x7f0000001300), 0x0, 0x8, 0x5) set_tid_address(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="340000001800010000000000000000401d012600080005000806f90515000300030000200503000054831bdbae1d82b304000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001440)={0x0, 0x500, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100070d00000000007e0000000d297c419756ff2efbd8e231060e080076b9", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001500)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000800), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x702, 0x36, 0x0, &(0x7f00000008c0)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): USB device number 28 using dummy_hcd [ 195.796833][ T2266] loop0: detected capacity change from 0 to 256 [ 195.922371][ T2268] loop1: detected capacity change from 0 to 33792 [ 195.930895][ T2268] ext4: Unknown parameter 'fowner' [ 195.986014][ T313] I/O error, dev loop1, sector 33664 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.609953][ T757] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 197.070946][ T2283] incfs: Can't find or create .index dir in ./file0 [ 197.077657][ T2283] incfs: mount failed -22 [ 198.044800][ T2289] loop5: detected capacity change from 0 to 33792 [ 198.075301][ T28] audit: type=1400 audit(2000000004.759:294): avc: denied { mount } for pid=2290 comm="syz.2.538" name="/" dev="ramfs" ino=26042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 198.078441][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-diskseq/529.tmp-b7:5' failed: Read-only file system [ 198.117049][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 198.163448][ T2293] loop4: detected capacity change from 0 to 256 [ 198.203255][ T757] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 198.211358][ T2289] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.374797][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/530.tmp-b7:4' failed: Read-only file system [ 198.453807][ T757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.472731][ T2289] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 198.524521][ T757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.701554][ T757] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 198.732758][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/530.tmp-b7:4' failed: Read-only file system [ 198.834305][ T757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.959603][ T757] usb 2-1: config 0 descriptor?? [ 199.153993][ T2298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.537'. [ 199.220039][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/526.tmp-b7:0' failed: Read-only file system [ 199.356754][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/526.tmp-b7:0' failed: Read-only file system [ 199.596245][ T757] usbhid 2-1:0.0: can't add hid device: -71 [ 199.616688][ T757] usbhid: probe of 2-1:0.0 failed with error -71 [ 199.667314][ T757] usb 2-1: USB disconnect, device number 38 [ 199.809258][ T1831] EXT4-fs (loop5): unmounting filesystem. [ 199.837373][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-diskseq/529.tmp-b7:5' failed: Read-only file system [ 199.895236][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-diskseq/529.tmp-b7:5' failed: Read-only file system [ 200.061742][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/530.tmp-b7:4' failed: Read-only file system [ 200.083798][ T292] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 200.090731][ T309] usb 1-1: USB disconnect, device number 23 [ 200.098562][ T292] usb 5-1: Failed to suspend device, error -71 [ 200.104512][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/530.tmp-b7:4' failed: Read-only file system [ 200.105514][ T292] usb 5-1: USB disconnect, device number 28 [ 200.487611][ T757] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 201.418602][ T757] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.426979][ T757] usb 6-1: not running at top speed; connect to a high speed hub [ 202.419792][ T757] usb 6-1: config 2 has an invalid interface number: 212 but max is 1 [ 202.428311][ T757] usb 6-1: config 2 has an invalid interface number: 226 but max is 1 [ 202.436825][ T757] usb 6-1: config 2 has no interface number 0 [ 202.443912][ T757] usb 6-1: config 2 has no interface number 1 [ 202.457296][ T2342] loop1: detected capacity change from 0 to 33792 [ 202.475633][ T2342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.497314][ T757] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 202.509769][ T757] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 202.521091][ T757] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 202.532822][ T757] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 202.537626][ T2342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.544152][ T757] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 202.563236][ T757] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.576939][ T757] usb 6-1: config 2 interface 212 has no altsetting 0 [ 202.684797][ T757] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 202.705665][ T757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.758860][ T757] usb 6-1: Product: syz [ 202.781951][ T292] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 202.787648][ T757] usb 6-1: Manufacturer: syz [ 202.805681][ T757] usb 6-1: SerialNumber: syz [ 202.881503][ T2350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 202.935618][ T757] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input5 [ 202.951949][ T370] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 202.983295][ T292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.988676][ T757] usb 6-1: USB disconnect, device number 5 [ 203.005128][ T292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.263310][ T370] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.411610][ T292] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.417693][ T370] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.424789][ T292] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 203.438708][ T370] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.458093][ T370] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 203.467937][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.486333][ T292] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 203.496498][ T370] usb 1-1: config 0 descriptor?? [ 203.515648][ T292] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 203.546676][ T289] EXT4-fs (loop1): unmounting filesystem. [ 203.553099][ T292] usb 5-1: config 1 interface 1 has no altsetting 0 [ 203.571358][ T292] usb 5-1: string descriptor 0 read error: -22 [ 203.583872][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/534.tmp-b7:1' failed: Read-only file system [ 203.587833][ T292] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 203.625734][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/534.tmp-b7:1' failed: Read-only file system [ 203.633162][ T292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.469224][ T292] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 204.493611][ T292] usb 5-1: USB disconnect, device number 29 [ 204.863709][ T2365] loop5: detected capacity change from 0 to 33792 [ 204.873700][ T2365] EXT4-fs: Ignoring removed oldalloc option [ 204.880200][ T2365] EXT4-fs: Ignoring removed oldalloc option [ 204.983543][ T2365] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.774625][ T2365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 205.794035][ T28] audit: type=1400 audit(2000000012.479:295): avc: denied { mounton } for pid=2360 comm="syz.5.555" path="/syzcgroup/unified/syz5/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.820329][ T2362] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 205.822954][ T2373] loop1: detected capacity change from 0 to 256 [ 205.828023][ T2362] SELinux: failed to load policy [ 205.853342][ T370] usbhid 1-1:0.0: can't add hid device: -71 [ 205.860640][ T370] usbhid: probe of 1-1:0.0 failed with error -71 [ 205.874758][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-diskseq/536.tmp-b7:5' failed: Read-only file system [ 205.907877][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/537.tmp-b7:1' failed: Read-only file system [ 205.920149][ T370] usb 1-1: USB disconnect, device number 24 [ 205.932141][ T28] audit: type=1400 audit(2000000012.509:296): avc: denied { load_policy } for pid=2360 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 206.005783][ T28] audit: type=1400 audit(2000000012.529:297): avc: denied { mounton } for pid=2360 comm="syz.5.555" path="/syzcgroup/unified/syz5/file1/proc" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 206.019352][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 206.043714][ T2379] device syzkaller0 entered promiscuous mode [ 206.057737][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-diskseq/536.tmp-b7:5' failed: Read-only file system [ 206.070233][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 206.079251][ T2379] tipc: Enabled bearer , priority 0 [ 206.090520][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/537.tmp-b7:1' failed: Read-only file system [ 206.178366][ T2381] loop1: detected capacity change from 0 to 33792 [ 206.187774][ T2381] ext4: Unknown parameter 'fowner' [ 206.394083][ T2377] tipc: Resetting bearer [ 206.488974][ T2377] tipc: Disabling bearer [ 206.740248][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/537.tmp-b7:1' failed: Read-only file system [ 207.003449][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/539.tmp-b7:1' failed: Read-only file system [ 207.126009][ T28] audit: type=1400 audit(2000000013.809:298): avc: denied { create } for pid=2389 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 207.203806][ T2395] incfs: Can't find or create .incomplete dir in ./file0 [ 207.211106][ T2395] incfs: mount failed -22 [ 207.233298][ T28] audit: type=1400 audit(2000000013.809:299): avc: denied { sys_admin } for pid=2389 comm="syz.1.563" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 207.466242][ T28] audit: type=1400 audit(2000000014.029:300): avc: denied { ioctl } for pid=2389 comm="syz.1.563" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27385 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.984753][ T2398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 209.951996][ T292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 210.016824][ T2412] loop0: detected capacity change from 0 to 33280 [ 210.062670][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/541.tmp-b7:0' failed: Read-only file system [ 210.076712][ T2412] EXT4-fs (loop0): Test dummy encryption mode enabled [ 210.180444][ T2412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.569: inode #1: comm syz.0.569: iget: illegal inode # [ 210.195624][ T2412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.569: error while reading EA inode 1 err=-117 [ 210.213164][ T2412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.569: inode #1: comm syz.0.569: iget: illegal inode # [ 210.229687][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 210.233437][ T2412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.569: error while reading EA inode 1 err=-117 [ 210.241096][ T292] usb 6-1: Using ep0 maxpacket: 32 [ 210.259076][ T2412] EXT4-fs (loop0): 1 orphan inode deleted [ 210.265202][ T2412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.275609][ T292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.297994][ T292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.308266][ T292] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.317620][ T292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.318320][ T2412] EXT4-fs: Ignoring sb option on remount [ 210.332745][ T2412] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 210.337217][ T292] usb 6-1: config 0 descriptor?? [ 210.357095][ T292] hub 6-1:0.0: USB hub found [ 210.359012][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/541.tmp-b7:0' failed: Read-only file system [ 210.373064][ T2412] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 210.381853][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 210.406464][ T287] EXT4-fs (loop0): unmounting filesystem. [ 210.416435][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 210.435117][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/541.tmp-b7:0' failed: Read-only file system [ 210.485753][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/541.tmp-b7:0' failed: Read-only file system [ 210.550770][ T292] hub 6-1:0.0: 1 port detected [ 210.790200][ T2424] loop1: detected capacity change from 0 to 33792 [ 210.798317][ T2424] EXT4-fs: Ignoring removed oldalloc option [ 210.804347][ T2424] EXT4-fs: Ignoring removed oldalloc option [ 211.093619][ T2424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.209396][ T2424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.249279][ T2424] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 211.257299][ T2424] SELinux: failed to load policy [ 211.604028][ T2429] fuse: Unknown parameter 'group_id00000000000000000000' [ 211.613480][ T2431] loop0: detected capacity change from 0 to 256 [ 211.645900][ T356] udevd[356]: symlink '../../loop1' '/dev/disk/by-diskseq/543.tmp-b7:1' failed: Read-only file system [ 211.646367][ T354] udevd[354]: symlink '../../loop0' '/dev/disk/by-diskseq/544.tmp-b7:0' failed: Read-only file system [ 211.693014][ T354] udevd[354]: symlink '../../loop0' '/dev/disk/by-diskseq/544.tmp-b7:0' failed: Read-only file system [ 211.738316][ T28] audit: type=1400 audit(2000000018.419:301): avc: denied { write } for pid=2434 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.849772][ T2439] loop0: detected capacity change from 0 to 33792 [ 211.857761][ T2439] ext4: Unknown parameter 'fowner' [ 213.155657][ T28] audit: type=1400 audit(2000000019.839:302): avc: denied { bind } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.233138][ T28] audit: type=1400 audit(2000000019.869:303): avc: denied { listen } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.296208][ T28] audit: type=1400 audit(2000000019.869:304): avc: denied { setopt } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.317129][ T2449] x_tables: duplicate underflow at hook 1 [ 213.324036][ T2448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'. [ 213.411440][ T28] audit: type=1400 audit(2000000019.869:305): avc: denied { getopt } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.467331][ T28] audit: type=1400 audit(2000000019.869:306): avc: denied { connect } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.468243][ T356] I/O error, dev loop0, sector 33664 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.495361][ T28] audit: type=1400 audit(2000000019.869:307): avc: denied { accept } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.518084][ T292] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 213.529374][ T292] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 213.536841][ T28] audit: type=1400 audit(2000000019.889:308): avc: denied { listen } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.592701][ T292] usbhid 6-1:0.0: can't add hid device: -32 [ 213.609886][ T292] usbhid: probe of 6-1:0.0 failed with error -32 [ 213.636639][ T28] audit: type=1400 audit(2000000019.949:309): avc: denied { write } for pid=2446 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.822968][ T2460] fuse: Bad value for 'fd' [ 215.159519][ T2471] fuse: Unknown parameter 'group_id00000000000000000000' [ 215.172010][ T315] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 215.232046][ T309] usb 6-1: USB disconnect, device number 6 [ 215.244992][ T2452] loop4: detected capacity change from 0 to 131072 [ 215.265106][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-diskseq/536.tmp-b7:5' failed: Read-only file system [ 215.277584][ T313] udevd[313]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 215.500753][ T2474] fuse: Bad value for 'fd' [ 215.505947][ T356] I/O error, dev loop4, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.521417][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/548.tmp-b7:4' failed: Read-only file system [ 215.536110][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/548.tmp-b7:4' failed: Read-only file system [ 215.547236][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 215.553643][ T2478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.587'. [ 215.562013][ T1218] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 215.568998][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.655079][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/548.tmp-b7:4' failed: Read-only file system [ 215.680541][ T356] udevd[356]: symlink '../../loop4' '/dev/disk/by-diskseq/548.tmp-b7:4' failed: Read-only file system [ 216.286174][ T1218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.291233][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.306973][ T315] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.316723][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.324907][ T1218] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.325873][ T315] usb 1-1: config 0 descriptor?? [ 216.340978][ T315] hub 1-1:0.0: USB hub found [ 216.352121][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.371624][ T1218] usb 2-1: config 0 descriptor?? [ 216.584535][ T1218] usbhid 2-1:0.0: can't add hid device: -71 [ 216.590763][ T1218] usbhid: probe of 2-1:0.0 failed with error -71 [ 216.623085][ T1218] usb 2-1: USB disconnect, device number 39 [ 217.062693][ T315] hub 1-1:0.0: 1 port detected [ 217.141969][ T309] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.171968][ T1218] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 217.220691][ T2491] loop0: detected capacity change from 0 to 256 [ 217.224238][ T2493] loop4: detected capacity change from 0 to 256 [ 217.239259][ T313] udevd[313]: symlink '../../loop0' '/dev/disk/by-diskseq/550.tmp-b7:0' failed: Read-only file system [ 217.254978][ T313] udevd[313]: symlink '../../loop0' '/dev/disk/by-diskseq/550.tmp-b7:0' failed: Read-only file system [ 217.282559][ T354] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.297837][ T354] udevd[354]: symlink '../../loop4' '/dev/disk/by-diskseq/551.tmp-b7:4' failed: Read-only file system [ 217.312748][ T313] udevd[313]: symlink '../../loop4' '/dev/disk/by-diskseq/551.tmp-b7:4' failed: Read-only file system [ 217.324665][ T309] usb 6-1: Using ep0 maxpacket: 32 [ 217.331082][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.352772][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.367302][ T309] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.378924][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.383322][ T1218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.388950][ T309] usb 6-1: config 0 descriptor?? [ 217.400556][ T1218] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 217.406177][ T309] hub 6-1:0.0: USB hub found [ 217.418470][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.430838][ T1218] usb 2-1: config 0 descriptor?? [ 217.478142][ T2495] loop4: detected capacity change from 0 to 33792 [ 217.486320][ T2495] ext4: Unknown parameter 'fowner' [ 218.046269][ T2469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.058234][ T2469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.155159][ T358] I/O error, dev loop4, sector 33664 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.156617][ T309] hub 6-1:0.0: 1 port detected [ 218.252358][ T1218] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 218.260121][ T1218] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 218.262914][ T315] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 218.289956][ T390] usb 1-1: Failed to suspend device, error -71 [ 218.292856][ T315] usb 1-1: USB disconnect, device number 25 [ 218.499832][ T2501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 218.560964][ T315] usb 2-1: USB disconnect, device number 40 [ 218.561031][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 219.484150][ T347] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 219.542182][ T860] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 219.722046][ T860] usb 5-1: Using ep0 maxpacket: 32 [ 219.729193][ T860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.820835][ T860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.956102][ T860] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.072670][ T860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.098033][ T2516] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.183281][ T860] usb 5-1: config 0 descriptor?? [ 220.246340][ T860] hub 5-1:0.0: USB hub found [ 220.436792][ T860] hub 5-1:0.0: 1 port detected [ 220.642976][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 221.081175][ T2530] loop4: detected capacity change from 0 to 256 [ 221.107421][ T313] udevd[313]: symlink '../../loop4' '/dev/disk/by-diskseq/556.tmp-b7:4' failed: Read-only file system [ 221.263936][ T368] usb 6-1: USB disconnect, device number 7 [ 222.413456][ T860] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 222.420313][ T313] udevd[313]: symlink '../../loop1' '/dev/disk/by-diskseq/543.tmp-b7:1' failed: Read-only file system [ 222.426511][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-diskseq/536.tmp-b7:5' failed: Read-only file system [ 222.893393][ T356] udevd[356]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 223.081479][ T313] udevd[313]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 223.546330][ T2559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.625906][ T2560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 223.635982][ T2563] fuse: Bad value for 'user_id' [ 223.655262][ T2565] loop0: detected capacity change from 0 to 256 [ 223.670617][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/557.tmp-b7:0' failed: Read-only file system [ 224.804289][ T313] udevd[313]: symlink '../../loop0' '/dev/disk/by-diskseq/557.tmp-b7:0' failed: Read-only file system [ 224.949878][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/557.tmp-b7:0' failed: Read-only file system [ 225.040527][ T356] udevd[356]: symlink '../../loop0' '/dev/disk/by-diskseq/558.tmp-b7:0' failed: Read-only file system [ 225.057086][ T309] usb 5-1: USB disconnect, device number 30 [ 225.097477][ T313] udevd[313]: symlink '../../loop4' '/dev/disk/by-diskseq/556.tmp-b7:4' failed: Read-only file system [ 225.184058][ T370] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 228.626492][ T2602] loop4: detected capacity change from 0 to 256 [ 229.689308][ T2620] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 229.708874][ T2622] loop4: detected capacity change from 0 to 34816 [ 229.747107][ T2622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.765119][ T2622] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.805132][ T2622] EXT4-fs (loop4): shut down requested (2) [ 229.834178][ T2622] EXT4-fs (loop4): unmounting filesystem. [ 229.862078][ T370] usb 1-1: device not accepting address 26, error -71 [ 229.978869][ T2631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 230.911157][ T2643] loop0: detected capacity change from 0 to 33280 [ 230.944560][ T28] audit: type=1400 audit(2000000037.629:310): avc: denied { getopt } for pid=2644 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.948705][ T2643] EXT4-fs: Ignoring removed orlov option [ 231.002110][ T309] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 231.054332][ T2643] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)! [ 231.065054][ T2643] EXT4-fs (loop0): group descriptors corrupted! [ 231.092004][ T347] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 231.160276][ T2649] fuse: Bad value for 'fd' [ 231.363191][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.381943][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.391828][ T309] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.421945][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.442361][ T309] usb 5-1: config 0 descriptor?? [ 231.522017][ T347] usb 2-1: Using ep0 maxpacket: 32 [ 231.538593][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.553103][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.562942][ T347] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.572049][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.588925][ T347] usb 2-1: config 0 descriptor?? [ 231.595774][ T347] hub 2-1:0.0: USB hub found [ 231.794554][ T315] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 231.803296][ T347] hub 2-1:0.0: 1 port detected [ 233.092045][ T309] usbhid 5-1:0.0: can't add hid device: -71 [ 233.098118][ T309] usbhid: probe of 5-1:0.0 failed with error -71 [ 233.122744][ T309] usb 5-1: USB disconnect, device number 31 [ 233.188553][ T315] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 233.208728][ T315] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 233.221683][ T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.233965][ T315] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 233.243200][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.253000][ T2651] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 233.260299][ T2651] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 233.268862][ T315] pl2303 1-1:1.0: pl2303 converter detected [ 233.275274][ T347] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 233.286082][ T2673] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 233.303419][ T315] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 233.631951][ T309] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 233.831940][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 233.853938][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.869144][ T309] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 233.891949][ T309] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 233.904831][ T2681] loop0: detected capacity change from 0 to 8192 [ 233.922147][ T309] usb 5-1: config 4 has no interface number 0 [ 233.933729][ T309] usb 5-1: string descriptor 0 read error: -22 [ 233.939957][ T309] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 233.953896][ T2682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.642'. [ 233.962346][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.974158][ T309] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 233.984249][ T309] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 233.991445][ T309] usb 5-1: No streaming interface found for terminal 65535. [ 234.696948][ T1273] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 234.768994][ T28] audit: type=1400 audit(2000000041.449:311): avc: denied { connect } for pid=2693 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.771461][ T390] tipc: Subscription rejected, illegal request [ 234.788534][ T28] audit: type=1400 audit(2000000041.449:312): avc: denied { write } for pid=2693 comm="syz.2.646" path="socket:[28178]" dev="sockfs" ino=28178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.819649][ T28] audit: type=1400 audit(2000000041.489:313): avc: denied { read } for pid=2693 comm="syz.2.646" path="socket:[28178]" dev="sockfs" ino=28178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.001147][ T370] usb 1-1: USB disconnect, device number 28 [ 235.019136][ T370] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 235.029548][ T370] pl2303 1-1:1.0: device disconnected [ 235.081602][ T2700] syz.0.648 uses obsolete (PF_INET,SOCK_PACKET) [ 235.089410][ T28] audit: type=1400 audit(2000000041.779:314): avc: denied { bind } for pid=2699 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.311385][ T1273] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 235.550997][ T2705] fuse: Bad value for 'fd' [ 236.832090][ T368] usb 5-1: USB disconnect, device number 32 [ 237.122026][ T309] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 237.423174][ T309] usb 6-1: config index 0 descriptor too short (expected 65403, got 24) [ 237.431592][ T309] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 237.441888][ T309] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.456373][ T309] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 237.465486][ T309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.473541][ T309] usb 6-1: Product: syz [ 237.474905][ T2724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.654'. [ 237.477785][ T309] usb 6-1: Manufacturer: syz [ 237.491473][ T309] usb 6-1: SerialNumber: syz [ 237.498581][ T309] rtl8150 6-1:1.0: couldn't find required endpoints [ 237.505428][ T309] rtl8150: probe of 6-1:1.0 failed with error -5 [ 237.704827][ T19] usb 6-1: USB disconnect, device number 8 [ 238.466403][ T368] usb 2-1: USB disconnect, device number 41 [ 238.543015][ T309] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 238.562144][ T2732] 9pnet_fd: Insufficient options for proto=fd [ 239.553493][ T2739] fuse: Bad value for 'fd' [ 239.810682][ T2743] loop4: detected capacity change from 0 to 33280 [ 239.822294][ T2744] incfs: mount failed -22 [ 239.828577][ T2743] EXT4-fs: Ignoring removed bh option [ 239.852190][ T2743] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 239.870556][ T2740] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 239.886962][ T2744] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 239.892105][ T309] usb 1-1: Using ep0 maxpacket: 8 [ 239.894797][ T2744] SELinux: failed to load policy [ 239.905649][ T309] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.931963][ T309] usb 1-1: config 179 has no interface number 0 [ 239.948514][ T309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.011993][ T309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.031991][ T309] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.042392][ T309] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.115094][ T2752] fuse: Bad value for 'fd' [ 240.291987][ T309] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.301066][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.313576][ T2726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 240.732492][ T1273] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 240.786152][ T24] usb 1-1: USB disconnect, device number 29 [ 242.367702][ T1273] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 242.406665][ T1273] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 242.426725][ T1273] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.462990][ T1273] usb 6-1: New USB device found, idVendor=04d1, idProduct=0082, bcdDevice= 1.00 [ 242.487493][ T1273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.511936][ T1273] usb 6-1: Product: syz [ 242.521583][ T1273] usb 6-1: Manufacturer: syz [ 242.540890][ T1273] usb 6-1: SerialNumber: syz [ 243.397340][ T2750] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 243.422019][ T2750] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 243.744137][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 243.758281][ T1273] cdc_acm: probe of 6-1:1.1 failed with error -12 [ 244.411968][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 244.423967][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.404843][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.425332][ T28] audit: type=1400 audit(2000000052.109:315): avc: denied { connect } for pid=2772 comm="syz.0.666" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.456667][ T2654] usb 6-1: USB disconnect, device number 9 [ 245.457799][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.476083][ T2775] loop0: detected capacity change from 0 to 33280 [ 245.488316][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.495218][ T2775] EXT4-fs: Ignoring removed bh option [ 245.510270][ T24] usb 1-1: config 0 descriptor?? [ 245.512695][ T2775] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 245.521922][ T24] usb 1-1: can't set config #0, error -71 [ 245.539952][ T24] usb 1-1: USB disconnect, device number 30 [ 245.612728][ T2781] FAULT_INJECTION: forcing a failure. [ 245.612728][ T2781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.679658][ T2781] CPU: 1 PID: 2781 Comm: syz.5.669 Not tainted syzkaller #0 [ 245.687006][ T2781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 245.697073][ T2781] Call Trace: [ 245.700359][ T2781] [ 245.703299][ T2781] __dump_stack+0x21/0x24 [ 245.707797][ T2781] dump_stack_lvl+0x110/0x170 [ 245.712499][ T2781] ? __cfi_dump_stack_lvl+0x8/0x8 [ 245.717536][ T2781] dump_stack+0x15/0x24 [ 245.721746][ T2781] should_fail_ex+0x3bf/0x510 [ 245.726534][ T2781] should_fail+0xb/0x10 [ 245.730697][ T2781] should_fail_usercopy+0x1a/0x20 [ 245.735727][ T2781] _copy_from_user+0x1e/0xc0 [ 245.740453][ T2781] bpf_prog_test_run_skb+0x263/0x18a0 [ 245.746020][ T2781] ? __fget_files+0x2d1/0x330 [ 245.750730][ T2781] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 245.756527][ T2781] bpf_prog_test_run+0x3b4/0x5c0 [ 245.761510][ T2781] ? bpf_prog_query+0x270/0x270 [ 245.766351][ T2781] ? selinux_bpf+0xce/0xf0 [ 245.770836][ T2781] ? security_bpf+0x93/0xb0 [ 245.775365][ T2781] __sys_bpf+0x5ee/0x850 [ 245.779641][ T2781] ? bpf_link_show_fdinfo+0x330/0x330 [ 245.785019][ T2781] ? __cfi_ksys_write+0x10/0x10 [ 245.789952][ T2781] ? debug_smp_processor_id+0x17/0x20 [ 245.795319][ T2781] __x64_sys_bpf+0x7c/0x90 [ 245.799745][ T2781] x64_sys_call+0x488/0x9a0 [ 245.804276][ T2781] do_syscall_64+0x4c/0xa0 [ 245.808699][ T2781] ? clear_bhb_loop+0x30/0x80 [ 245.813508][ T2781] ? clear_bhb_loop+0x30/0x80 [ 245.818212][ T2781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.824096][ T2781] RIP: 0033:0x7f24419a8fd9 [ 245.828528][ T2781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.848129][ T2781] RSP: 002b:00007f2442925028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.856658][ T2781] RAX: ffffffffffffffda RBX: 00007f2441c25fa0 RCX: 00007f24419a8fd9 [ 245.864625][ T2781] RDX: 0000000000000048 RSI: 0000200000006440 RDI: 000000000000000a [ 245.872871][ T2781] RBP: 00007f2442925090 R08: 0000000000000000 R09: 0000000000000000 [ 245.880831][ T2781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.888797][ T2781] R13: 00007f2441c26038 R14: 00007f2441c25fa0 R15: 00007ffe910fda88 [ 245.896763][ T2781] [ 246.004179][ T2782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.668'. [ 246.473452][ T2795] loop4: detected capacity change from 0 to 33280 [ 246.520729][ T2795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.540074][ T2795] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.617196][ T28] audit: type=1400 audit(2000000053.299:316): avc: denied { bind } for pid=2794 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.640040][ T28] audit: type=1400 audit(2000000053.299:317): avc: denied { name_bind } for pid=2794 comm="syz.4.672" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 246.660877][ T28] audit: type=1400 audit(2000000053.299:318): avc: denied { node_bind } for pid=2794 comm="syz.4.672" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 246.763171][ T2806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.673'. [ 246.837233][ T309] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 246.897357][ T2824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.677'. [ 247.622977][ T290] EXT4-fs (loop4): unmounting filesystem. [ 247.724475][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.739366][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.750621][ T309] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 247.759927][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.771768][ T309] usb 1-1: config 0 descriptor?? [ 247.900372][ T2836] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 247.908051][ T2836] SELinux: failed to load policy [ 247.923508][ T2832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.682'. [ 247.947401][ T19] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 248.011673][ T2835] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 248.201961][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 248.208242][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.241936][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.251844][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.281935][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.290695][ T19] usb 2-1: config 0 descriptor?? [ 248.312801][ T19] hub 2-1:0.0: USB hub found [ 248.388228][ T309] usbhid 1-1:0.0: can't add hid device: -71 [ 248.401992][ T309] usbhid: probe of 1-1:0.0 failed with error -71 [ 248.422020][ T309] usb 1-1: USB disconnect, device number 31 [ 248.497501][ T19] hub 2-1:0.0: 1 port detected [ 248.668289][ T2845] fuse: Bad value for 'fd' [ 248.673134][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 248.682089][ T2845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.685'. [ 248.690982][ T2845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.685'. [ 249.030285][ T2853] fuse: Bad value for 'fd' [ 249.535670][ T2861] loop4: detected capacity change from 0 to 33280 [ 249.545015][ T2861] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.556630][ T2861] EXT4-fs (loop4): mount failed [ 249.591982][ T2654] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 249.596819][ T2864] loop4: detected capacity change from 0 to 256 [ 249.642390][ T2588] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.829356][ T2869] loop4: detected capacity change from 0 to 33792 [ 249.837444][ T2869] ext4: Unknown parameter 'fowner' [ 250.439020][ T2654] usb 1-1: Using ep0 maxpacket: 32 [ 250.730167][ T19] usb 2-1: USB disconnect, device number 42 [ 250.736164][ T309] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 250.819274][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.842039][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.851867][ T2654] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.871160][ T2882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.692'. [ 250.885373][ T2654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.050464][ T28] audit: type=1400 audit(2000000057.729:319): avc: denied { create } for pid=2878 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 251.070774][ T2887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 251.081424][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 251.100107][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 251.117254][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 251.149345][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 251.174464][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 251.200075][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 251.226666][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 251.354923][ T2654] usb 1-1: config 0 descriptor?? [ 251.372642][ T2654] hub 1-1:0.0: USB hub found [ 251.390608][ T28] audit: type=1400 audit(2000000058.069:320): avc: denied { write } for pid=2893 comm="syz.5.696" name="igmp" dev="proc" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 251.573280][ T2654] hub 1-1:0.0: 1 port detected [ 251.698768][ T2898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.698'. [ 251.752002][ T757] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 251.821585][ T2902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'. [ 251.983108][ T757] usb 6-1: Using ep0 maxpacket: 32 [ 251.991436][ T757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.992621][ T28] audit: type=1400 audit(2000000058.679:321): avc: denied { write } for pid=2903 comm="syz.1.701" name="file2" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 252.002740][ T757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.031968][ T28] audit: type=1400 audit(2000000058.719:322): avc: denied { ioctl } for pid=2903 comm="syz.1.701" path="/126/file2" dev="tmpfs" ino=731 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 252.104035][ T757] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.117800][ T757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.223480][ T2911] loop0: detected capacity change from 0 to 256 [ 253.269389][ T757] usb 6-1: config 0 descriptor?? [ 253.315952][ T2654] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 253.333111][ T757] hub 6-1:0.0: USB hub found [ 253.396823][ T2920] random: crng reseeded on system resumption [ 253.477392][ T757] hub 6-1:0.0: 1 port detected [ 253.599795][ T2927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.706'. [ 253.614925][ T360] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 254.321982][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 254.329662][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.407226][ T28] audit: type=1326 audit(2000000061.089:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2931 comm="syz.0.707" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34885a8fd9 code=0x7ffc0000 [ 254.432012][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.449567][ T360] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.451971][ T28] audit: type=1326 audit(2000000061.089:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2931 comm="syz.0.707" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34885a8fd9 code=0x7ffc0000 [ 254.470997][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.495321][ T360] usb 2-1: config 0 descriptor?? [ 254.502736][ T24] usb 1-1: USB disconnect, device number 32 [ 254.511221][ T360] hub 2-1:0.0: USB hub found [ 254.523082][ T28] audit: type=1326 audit(2000000061.089:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2931 comm="syz.0.707" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34885a8fd9 code=0x7ffc0000 [ 254.548196][ T28] audit: type=1326 audit(2000000061.089:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2931 comm="syz.0.707" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34885a8fd9 code=0x7ffc0000 [ 254.582034][ T28] audit: type=1326 audit(2000000061.089:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2931 comm="syz.0.707" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f34885a8fd9 code=0x7ffc0000 [ 254.608485][ T28] audit: type=1326 audit(2000000061.089:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2931 comm="syz.0.707" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34885a8fd9 code=0x7ffc0000 [ 254.646215][ T2936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'. [ 254.704025][ T360] hub 2-1:0.0: 1 port detected [ 255.572873][ T757] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 256.471505][ T2952] loop0: detected capacity change from 0 to 33280 [ 256.519588][ T2952] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.533758][ T2952] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.537022][ T2920] Restarting kernel threads ... [ 256.549079][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 256.549095][ T28] audit: type=1400 audit(2000000063.239:405): avc: denied { setattr } for pid=2951 comm="syz.0.714" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.644609][ T360] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 256.654006][ T2920] done. [ 256.931661][ T2956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.934395][ T2654] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 256.952668][ T2956] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.714: iget: bad i_size value: 2533274857506816 [ 256.967434][ T2956] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.714: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 256.970454][ T28] audit: type=1400 audit(2000000063.649:406): avc: denied { create } for pid=2951 comm="syz.0.714" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.344929][ T287] EXT4-fs (loop0): unmounting filesystem. [ 257.377665][ T28] audit: type=1400 audit(2000000064.059:407): avc: denied { mounton } for pid=2963 comm="syz.0.716" path="/150/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 257.377878][ T2964] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.735246][ T28] audit: type=1400 audit(2000000064.409:408): avc: denied { read } for pid=2963 comm="syz.0.716" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 257.764565][ T28] audit: type=1400 audit(2000000064.409:409): avc: denied { open } for pid=2963 comm="syz.0.716" path="/150/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 257.942067][ T39] usb 2-1: USB disconnect, device number 43 [ 258.048288][ T2654] hub 6-1:0.0: hub_ext_port_status failed (err = 0) [ 258.081219][ T60] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 258.162071][ T2984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.721'. [ 258.274896][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.475074][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.582891][ T60] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.980913][ T60] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 259.004903][ T60] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 259.022134][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.037614][ T60] usb 5-1: Product: syz [ 259.045788][ T60] usb 5-1: Manufacturer: syz [ 259.054562][ T60] usb 5-1: SerialNumber: syz [ 259.132321][ T2990] loop0: detected capacity change from 0 to 36864 [ 259.157382][ T2588] I/O error, dev loop0, sector 36736 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.298965][ T2992] kvm: pic: single mode not supported [ 259.306399][ T2971] loop4: detected capacity change from 0 to 33280 [ 259.319026][ T2971] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.336783][ T2971] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.717: corrupted in-inode xattr [ 259.363282][ T2971] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.717: couldn't read orphan inode 15 (err -117) [ 259.422063][ T2996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.722'. [ 259.521354][ T2971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.539613][ T2971] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.717: corrupted in-inode xattr [ 259.556386][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.564508][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 259.572256][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 259.579561][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 259.587197][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 259.594755][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 259.602297][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 259.610599][ T2971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.611976][ T1273] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 259.632796][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 259.645181][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.658906][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 259.672707][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.683292][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.691693][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.700272][ T315] ip6_tunnel: K xmit: Local address not yet configured! [ 260.483930][ T290] EXT4-fs (loop4): unmounting filesystem. [ 260.542802][ T60] usb 5-1: USB disconnect, device number 33 [ 260.562003][ T1273] usb 2-1: Using ep0 maxpacket: 16 [ 260.567430][ T360] usb 6-1: USB disconnect, device number 10 [ 260.575620][ T1273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.586336][ T1273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.824124][ T1273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.139790][ T2666] udevd[2666]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.486985][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.495498][ T1273] usb 2-1: Product: syz [ 261.499723][ T1273] usb 2-1: Manufacturer: syz [ 261.504575][ T1273] usb 2-1: SerialNumber: syz [ 261.942097][ T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 262.063015][ T1273] usb 2-1: 0:2 : does not exist [ 262.071130][ T1273] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 262.087427][ T1273] usb 2-1: USB disconnect, device number 44 [ 262.161967][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 262.168269][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.179218][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.189012][ T60] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.198218][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.207875][ T3027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 262.217195][ T60] usb 6-1: config 0 descriptor?? [ 262.224659][ T60] hub 6-1:0.0: USB hub found [ 262.292539][ T2666] udevd[2666]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.424862][ T60] hub 6-1:0.0: 1 port detected [ 262.582981][ T3029] loop0: detected capacity change from 0 to 33280 [ 262.602208][ T3029] EXT4-fs: Ignoring removed bh option [ 262.633892][ T3029] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 263.594065][ T28] audit: type=1400 audit(2000000070.259:410): avc: denied { create } for pid=3045 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 263.636999][ T28] audit: type=1400 audit(2000000070.319:411): avc: denied { setattr } for pid=3053 comm="syz.1.740" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.648398][ T309] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 263.684340][ T309] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.820586][ T60] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 263.922822][ T3065] fuse: Bad value for 'rootmode' [ 264.132016][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 264.133585][ T28] audit: type=1400 audit(2000000070.819:412): avc: denied { read } for pid=3047 comm="syz.4.739" path="socket:[30221]" dev="sockfs" ino=30221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 264.342267][ T3076] loop4: detected capacity change from 0 to 33792 [ 264.366407][ T3076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.396972][ T3076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 264.461955][ T315] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 264.561374][ T3080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 264.656450][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 264.666945][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.678118][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.688057][ T315] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.697638][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.011565][ T315] usb 1-1: config 0 descriptor?? [ 265.172175][ T60] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 265.184612][ T315] hub 1-1:0.0: USB hub found [ 265.190592][ T60] usb 6-1: device reset changed ep0 maxpacket size! [ 265.202394][ T60] usb 6-1: USB disconnect, device number 11 [ 265.231981][ T290] EXT4-fs (loop4): unmounting filesystem. [ 265.256541][ T3093] loop4: detected capacity change from 0 to 33280 [ 265.259374][ T3090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.749'. [ 265.265039][ T3093] EXT4-fs: Ignoring removed bh option [ 265.284382][ T3093] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 265.365712][ T315] hub 1-1:0.0: 1 port detected [ 265.603996][ T60] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 265.864838][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.981079][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.002005][ T60] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 266.011088][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.032650][ T60] usb 6-1: config 0 descriptor?? [ 266.119678][ T3102] loop0: detected capacity change from 0 to 256 [ 267.102812][ T315] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 267.116891][ T3109] fuse: Bad value for 'rootmode' [ 267.196395][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 267.224895][ T60] usbhid: probe of 6-1:0.0 failed with error -71 [ 267.300384][ T60] usb 6-1: USB disconnect, device number 12 [ 267.491961][ T757] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 267.682050][ T757] usb 5-1: Using ep0 maxpacket: 32 [ 267.688473][ T757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.699461][ T757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.709268][ T757] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.718387][ T757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.750500][ T757] usb 5-1: config 0 descriptor?? [ 267.765574][ T757] hub 5-1:0.0: USB hub found [ 268.029176][ T757] hub 5-1:0.0: 1 port detected [ 268.142493][ T60] usb 1-1: USB disconnect, device number 33 [ 269.475434][ T3111] loop4: detected capacity change from 0 to 256 [ 269.602814][ T757] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 269.674277][ T3140] incfs: mount failed -22 [ 269.679648][ T3140] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 269.687280][ T3140] SELinux: failed to load policy [ 269.711972][ T315] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 269.901970][ T315] usb 6-1: Using ep0 maxpacket: 32 [ 269.908319][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.942230][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.972478][ T315] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 270.001602][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.067034][ T315] usb 6-1: config 0 descriptor?? [ 270.074510][ T315] hub 6-1:0.0: USB hub found [ 270.275263][ T315] hub 6-1:0.0: 1 port detected [ 271.570736][ T60] usb 5-1: USB disconnect, device number 34 [ 272.892171][ T757] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 272.982009][ T309] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 273.054582][ T315] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 273.192039][ T757] usb 5-1: Using ep0 maxpacket: 32 [ 273.314546][ T757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.332109][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 273.392441][ T757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.395521][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.402832][ T757] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.415598][ T309] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.432489][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.457795][ T309] usb 2-1: config 0 descriptor?? [ 273.489270][ T757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.500903][ T757] usb 5-1: config 0 descriptor?? [ 273.506886][ T757] hub 5-1:0.0: USB hub found [ 273.550667][ T3169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.770'. [ 273.708554][ T757] hub 5-1:0.0: 1 port detected [ 274.529988][ T360] usb 6-1: USB disconnect, device number 13 [ 274.562363][ T309] usbhid 2-1:0.0: can't add hid device: -71 [ 274.569953][ T309] usbhid: probe of 2-1:0.0 failed with error -71 [ 274.583355][ T309] usb 2-1: USB disconnect, device number 45 [ 274.752239][ T3180] loop4: detected capacity change from 0 to 256 [ 275.839017][ T39] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 276.079634][ T3190] random: crng reseeded on system resumption [ 276.106249][ T3190] Restarting kernel threads ... done. [ 276.262000][ T39] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 276.336175][ T3195] loop0: detected capacity change from 0 to 256 [ 276.401991][ T309] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 276.461949][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 276.468296][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.480078][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.491509][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.500970][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.545200][ T39] usb 6-1: config 0 descriptor?? [ 276.561780][ T39] hub 6-1:0.0: USB hub found [ 277.147105][ T39] hub 6-1:0.0: 1 port detected [ 277.331762][ T1218] usb 5-1: USB disconnect, device number 35 [ 277.347508][ T3199] loop4: detected capacity change from 0 to 33792 [ 277.368823][ T3199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.381970][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 277.388309][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.406010][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.530280][ T309] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.539445][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.674299][ T309] usb 2-1: config 0 descriptor?? [ 277.682610][ T3199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.710158][ T309] hub 2-1:0.0: USB hub found [ 278.698647][ T309] hub 2-1:0.0: 1 port detected [ 278.758259][ T3210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.778'. [ 278.812837][ T39] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 278.997513][ T1218] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 279.536654][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.636409][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.966171][ T290] EXT4-fs (loop4): unmounting filesystem. [ 279.972267][ T1218] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 279.982539][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.040919][ T3225] loop4: detected capacity change from 0 to 33792 [ 280.069136][ T309] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 280.071605][ T1218] usb 1-1: config 0 descriptor?? [ 280.095742][ T3225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.152628][ T3228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.783'. [ 280.164438][ T757] usb 6-1: USB disconnect, device number 14 [ 280.192534][ T3225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 280.835041][ T3235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 281.050811][ T1218] usbhid 1-1:0.0: can't add hid device: -71 [ 281.062008][ T1218] usbhid: probe of 1-1:0.0 failed with error -71 [ 281.069727][ T1218] usb 1-1: USB disconnect, device number 34 [ 282.067019][ T290] EXT4-fs (loop4): unmounting filesystem. [ 282.079495][ T3245] loop0: detected capacity change from 0 to 256 [ 283.277781][ T309] usb 2-1: USB disconnect, device number 46 [ 284.446865][ T370] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 285.442622][ T3280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.799'. [ 285.481775][ T370] usb 5-1: Using ep0 maxpacket: 32 [ 285.493632][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.504709][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.514612][ T370] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.523720][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.532356][ T370] usb 5-1: config 0 descriptor?? [ 285.538586][ T370] hub 5-1:0.0: USB hub found [ 285.544212][ T3283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.796'. [ 286.077056][ T2654] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 286.100548][ T370] hub 5-1:0.0: 1 port detected [ 286.263166][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.274190][ T2654] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.283338][ T2654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.400928][ T309] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.493632][ T2654] usb 1-1: config 0 descriptor?? [ 286.685300][ T3292] loop4: detected capacity change from 0 to 256 [ 287.484593][ T2654] usbhid 1-1:0.0: can't add hid device: -71 [ 287.491713][ T2654] usbhid: probe of 1-1:0.0 failed with error -71 [ 287.501748][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.514015][ T2654] usb 1-1: USB disconnect, device number 35 [ 287.519993][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.530512][ T309] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 287.540920][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.553258][ T309] usb 6-1: config 0 descriptor?? [ 287.608046][ T370] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 287.699347][ T3295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 287.931963][ T2654] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 288.362502][ T309] usbhid 6-1:0.0: can't add hid device: -71 [ 288.370879][ T309] usbhid: probe of 6-1:0.0 failed with error -71 [ 288.379236][ T309] usb 6-1: USB disconnect, device number 15 [ 288.429506][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.461839][ T2654] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 288.477016][ T3299] fuse: Unknown parameter 'user_i00000000000000000000' [ 288.516248][ T2654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.535654][ T2654] usb 1-1: config 0 descriptor?? [ 288.541674][ T347] usb 5-1: USB disconnect, device number 36 [ 288.553360][ T2654] usb 1-1: can't set config #0, error -71 [ 288.605793][ T2654] usb 1-1: USB disconnect, device number 36 [ 290.076013][ T3320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'. [ 290.342002][ T3271] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 291.017914][ T3325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'. [ 291.054880][ T3271] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.074784][ T3271] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.092006][ T347] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 291.112584][ T3271] usb 6-1: config 0 interface 0 has no altsetting 0 [ 291.119216][ T3271] usb 6-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 291.142121][ T3271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.147217][ T2654] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 291.158849][ T3271] usb 6-1: config 0 descriptor?? [ 291.501957][ T2654] usb 1-1: Using ep0 maxpacket: 32 [ 291.507215][ T347] usb 5-1: Using ep0 maxpacket: 32 [ 291.514039][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.531889][ T2654] usb 1-1: device descriptor read/all, error -71 [ 291.538793][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.559285][ T347] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 291.571420][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.583570][ T347] usb 5-1: config 0 descriptor?? [ 291.590483][ T347] usb 5-1: can't set config #0, error -71 [ 291.600082][ T347] usb 5-1: USB disconnect, device number 37 [ 291.620683][ T3271] hid (null): bogus close delimiter [ 291.630317][ T3271] wacom 0003:056A:00BB.0009: bogus close delimiter [ 291.641961][ T3271] wacom 0003:056A:00BB.0009: item 0 4 2 10 parsing failed [ 291.655416][ T3271] wacom 0003:056A:00BB.0009: parse failed [ 291.666321][ T3271] wacom: probe of 0003:056A:00BB.0009 failed with error -22 [ 291.892077][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 291.992910][ T3340] fuse: Unknown parameter 'user_i00000000000000000000' [ 292.282093][ T3271] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 292.360074][ T347] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 292.483094][ T3271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.494138][ T3271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.503978][ T3271] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 292.513781][ T3271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.656376][ T3271] usb 2-1: config 0 descriptor?? [ 292.738723][ T347] usb 5-1: Using ep0 maxpacket: 32 [ 292.745147][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.756181][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.766004][ T347] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.775122][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.783990][ T347] usb 5-1: config 0 descriptor?? [ 292.790124][ T347] hub 5-1:0.0: USB hub found [ 292.960231][ T360] usb 6-1: USB disconnect, device number 16 [ 292.992811][ T347] hub 5-1:0.0: 1 port detected [ 293.595900][ T3271] usbhid 2-1:0.0: can't add hid device: -71 [ 293.632379][ T3362] loop0: detected capacity change from 0 to 33792 [ 293.652532][ T3271] usbhid: probe of 2-1:0.0 failed with error -71 [ 293.652736][ T3362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.660727][ T3271] usb 2-1: USB disconnect, device number 47 [ 293.693792][ T3362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.877234][ T3366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.823'. [ 293.916263][ T3367] loop4: detected capacity change from 0 to 256 [ 294.877896][ T3378] fuse: Bad value for 'fd' [ 294.961846][ T287] EXT4-fs (loop0): unmounting filesystem. [ 295.200308][ T19] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 295.254333][ T501] usb 5-1: Failed to suspend device, error -71 [ 295.261331][ T19] usb 5-1: USB disconnect, device number 38 [ 295.282395][ T3388] fuse: Unknown parameter 'user_id00000000000000000000' [ 296.489569][ T39] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 296.723800][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.787718][ T39] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 296.828785][ T39] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 296.841982][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.871958][ T19] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 297.051947][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 297.059721][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.084503][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.103785][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 297.119840][ T3385] loop0: detected capacity change from 0 to 8192 [ 297.126348][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.141751][ T19] usb 5-1: config 0 descriptor?? [ 297.148360][ T19] hub 5-1:0.0: USB hub found [ 297.192820][ T3379] usb 1-1: USB disconnect, device number 39 [ 297.348835][ T19] hub 5-1:0.0: 1 port detected [ 297.741967][ T347] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 297.942116][ T347] usb 2-1: Using ep0 maxpacket: 32 [ 298.016856][ T3413] loop4: detected capacity change from 0 to 256 [ 298.969167][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.980362][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.990505][ T347] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.004151][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.014826][ T347] usb 2-1: config 0 descriptor?? [ 299.021033][ T347] hub 2-1:0.0: USB hub found [ 299.052931][ T19] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 299.101989][ T309] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 299.118553][ T3416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.836'. [ 299.375666][ T347] hub 2-1:0.0: 1 port detected [ 299.542084][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 299.548595][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.559926][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.570131][ T309] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.752424][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.761500][ T309] usb 1-1: config 0 descriptor?? [ 299.768045][ T309] hub 1-1:0.0: USB hub found [ 300.742525][ T360] usb 5-1: USB disconnect, device number 39 [ 300.828209][ T309] hub 1-1:0.0: 1 port detected [ 300.964413][ T347] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 301.311888][ T3428] loop0: detected capacity change from 0 to 256 [ 301.318897][ T360] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 301.501967][ T360] usb 5-1: Using ep0 maxpacket: 32 [ 301.508495][ T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.519540][ T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.529461][ T360] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 301.538587][ T360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.547558][ T360] usb 5-1: config 0 descriptor?? [ 301.553832][ T360] hub 5-1:0.0: USB hub found [ 301.755271][ T360] hub 5-1:0.0: 1 port detected [ 301.902346][ T3432] fuse: Unknown parameter 'user_id00000000000000000000' [ 301.982067][ T1218] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 302.012422][ T39] usb 2-1: USB disconnect, device number 48 [ 302.075248][ T347] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 302.293317][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.304372][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.314286][ T1218] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 302.323422][ T1218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.333336][ T1218] usb 6-1: config 0 descriptor?? [ 302.333450][ T3437] loop4: detected capacity change from 0 to 256 [ 302.482835][ T39] usb 1-1: USB disconnect, device number 40 [ 303.074598][ T1218] usbhid 6-1:0.0: can't add hid device: -71 [ 303.083537][ T1218] usbhid: probe of 6-1:0.0 failed with error -71 [ 303.097264][ T1218] usb 6-1: USB disconnect, device number 17 [ 303.143274][ T360] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 305.006686][ T3458] loop4: detected capacity change from 0 to 33792 [ 305.050903][ T3458] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.092842][ T360] usb 5-1: USB disconnect, device number 40 [ 305.188148][ T3467] fuse: Unknown parameter 'user_id00000000000000000000' [ 305.222220][ T3458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 305.370228][ T3475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.849'. [ 306.354467][ T360] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 306.373213][ T290] EXT4-fs (loop4): unmounting filesystem. [ 306.551997][ T360] usb 6-1: Using ep0 maxpacket: 32 [ 306.574882][ T360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.601990][ T360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.611819][ T360] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.641990][ T360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.665347][ T360] usb 6-1: config 0 descriptor?? [ 306.682062][ T360] hub 6-1:0.0: USB hub found [ 306.873184][ T360] hub 6-1:0.0: 1 port detected [ 306.880518][ T3461] loop0: detected capacity change from 0 to 131072 [ 308.533359][ T360] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 308.550706][ T3495] loop4: detected capacity change from 0 to 33280 [ 308.567902][ T3495] EXT4-fs: Ignoring removed bh option [ 308.581959][ T389] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 308.593736][ T3495] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 308.702055][ T309] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 308.788752][ T3498] random: crng reseeded on system resumption [ 308.792059][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 308.801290][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.812427][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.822577][ T389] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 308.828574][ T3498] Restarting kernel threads ... done. [ 308.831748][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.836046][ T389] usb 2-1: config 0 descriptor?? [ 308.859639][ T389] hub 2-1:0.0: USB hub found [ 308.901983][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 308.908369][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.919798][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.930690][ T309] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 308.939999][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.953556][ T309] usb 1-1: config 0 descriptor?? [ 308.960482][ T309] hub 1-1:0.0: USB hub found [ 309.053430][ T389] hub 2-1:0.0: 1 port detected [ 310.393450][ T309] hub 1-1:0.0: 1 port detected [ 310.504088][ T1273] usb 6-1: USB disconnect, device number 18 [ 311.257376][ T3512] loop0: detected capacity change from 0 to 256 [ 311.370117][ T1273] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 311.602948][ T3379] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 312.141987][ T1273] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 312.321974][ T1273] usb 5-1: Using ep0 maxpacket: 32 [ 312.328416][ T1273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.361498][ T1273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.372736][ T1273] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.382462][ T1273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.383017][ T28] audit: type=1400 audit(2000000119.039:413): avc: denied { getopt } for pid=3526 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 312.404720][ T1273] usb 5-1: config 0 descriptor?? [ 312.422176][ T3379] usb 2-1: USB disconnect, device number 49 [ 312.437649][ T28] audit: type=1326 audit(2000000119.109:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.464721][ T1273] hub 5-1:0.0: USB hub found [ 312.464813][ T28] audit: type=1326 audit(2000000119.109:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.497209][ T28] audit: type=1326 audit(2000000119.109:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.525060][ T28] audit: type=1326 audit(2000000119.109:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.552394][ T28] audit: type=1326 audit(2000000119.109:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.577792][ T28] audit: type=1326 audit(2000000119.109:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.601935][ T28] audit: type=1326 audit(2000000119.109:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.626341][ T28] audit: type=1326 audit(2000000119.109:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.633037][ T1273] hub 5-1:0.0: 1 port detected [ 312.652823][ T28] audit: type=1326 audit(2000000119.109:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.868" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24419a8fd9 code=0x7ffc0000 [ 312.746141][ T3543] Illegal XDP return value 4294967294 on prog (id 280) dev syz_tun, expect packet loss! [ 312.988061][ T3579] capability: warning: `syz.0.892' uses 32-bit capabilities (legacy support in use) [ 313.012301][ T3379] usb 1-1: USB disconnect, device number 41 [ 313.115095][ T3603] netlink: 40 bytes leftover after parsing attributes in process `syz.5.903'. [ 313.263943][ T3610] loop4: detected capacity change from 0 to 256 [ 314.003420][ T1273] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 314.163838][ T3623] loop0: detected capacity change from 0 to 128 [ 314.269674][ T3651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.925'. [ 314.385672][ T3683] tmpfs: Unsupported parameter 'mpol' [ 314.513647][ T3698] xt_hashlimit: size too large, truncated to 1048576 [ 314.620728][ T3703] netlink: 'syz.1.950': attribute type 2 has an invalid length. [ 314.663122][ T3709] 8021q: VLANs not supported on sit0 [ 314.834470][ T3746] overlayfs: failed to clone upperpath [ 314.913230][ T3770] FAULT_INJECTION: forcing a failure. [ 314.913230][ T3770] name failslab, interval 1, probability 0, space 0, times 0 [ 314.926387][ T3770] CPU: 1 PID: 3770 Comm: syz.0.981 Not tainted syzkaller #0 [ 314.933703][ T3770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 314.944030][ T3770] Call Trace: [ 314.947320][ T3770] [ 314.950259][ T3770] __dump_stack+0x21/0x24 [ 314.954698][ T3770] dump_stack_lvl+0x110/0x170 [ 314.959440][ T3770] ? __cfi_dump_stack_lvl+0x8/0x8 [ 314.964499][ T3770] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 314.970247][ T3770] dump_stack+0x15/0x24 [ 314.974437][ T3770] should_fail_ex+0x3bf/0x510 [ 314.979181][ T3770] __should_failslab+0xac/0xf0 [ 314.984084][ T3770] should_failslab+0x9/0x20 [ 314.988703][ T3770] slab_pre_alloc_hook+0x30/0x1d0 [ 314.993865][ T3770] kmem_cache_alloc_lru+0x49/0x280 [ 314.999003][ T3770] ? __d_alloc+0x34/0x6d0 [ 315.003436][ T3770] __d_alloc+0x34/0x6d0 [ 315.008031][ T3770] d_alloc_pseudo+0x1d/0x70 [ 315.012526][ T3770] alloc_file_pseudo+0xe0/0x200 [ 315.017450][ T3770] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 315.022945][ T3770] ? alloc_anon_inode+0x225/0x300 [ 315.028081][ T3770] ? memcpy+0x56/0x70 [ 315.032069][ T3770] ? security_inode_init_security_anon+0x95/0xc0 [ 315.038546][ T3770] __anon_inode_getfile+0x22f/0x350 [ 315.043887][ T3770] ? anon_inode_getfile+0x180/0x180 [ 315.049111][ T3770] ? __kasan_check_write+0x14/0x20 [ 315.054263][ T3770] ? percpu_ref_init+0x23f/0x340 [ 315.059317][ T3770] anon_inode_getfile_secure+0x3b/0x50 [ 315.064777][ T3770] io_uring_create+0x91b/0xde1 [ 315.069722][ T3770] __x64_sys_io_uring_setup+0x21b/0x230 [ 315.075587][ T3770] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 315.081741][ T3770] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 315.087807][ T3770] x64_sys_call+0x4ab/0x9a0 [ 315.092309][ T3770] do_syscall_64+0x4c/0xa0 [ 315.096713][ T3770] ? clear_bhb_loop+0x30/0x80 [ 315.101384][ T3770] ? clear_bhb_loop+0x30/0x80 [ 315.106067][ T3770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.112044][ T3770] RIP: 0033:0x7f34885a8fd9 [ 315.116458][ T3770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.136060][ T3770] RSP: 002b:00007f3489396fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 315.144477][ T3770] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34885a8fd9 [ 315.152439][ T3770] RDX: 0000200000000600 RSI: 0000000000000000 RDI: 000000000000001d [ 315.160411][ T3770] RBP: 00007f3488637fed R08: 0000000000000000 R09: 0000000000000000 [ 315.168489][ T3770] R10: 0000200000000640 R11: 0000000000000206 R12: 0000200000000600 [ 315.176461][ T3770] R13: 0000200000000640 R14: 0000000000000000 R15: 00007ffe6dab17c8 [ 315.184448][ T3770] [ 315.275412][ T3802] xt_hashlimit: size too large, truncated to 1048576 [ 315.342074][ T1273] usb 5-1: USB disconnect, device number 41 [ 315.371662][ T3818] FAULT_INJECTION: forcing a failure. [ 315.371662][ T3818] name failslab, interval 1, probability 0, space 0, times 0 [ 315.426367][ T3818] CPU: 0 PID: 3818 Comm: syz.4.1003 Not tainted syzkaller #0 [ 315.433793][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 315.444132][ T3818] Call Trace: [ 315.447429][ T3818] [ 315.450371][ T3818] __dump_stack+0x21/0x24 [ 315.454719][ T3818] dump_stack_lvl+0x110/0x170 [ 315.459417][ T3818] ? __cfi_dump_stack_lvl+0x8/0x8 [ 315.464553][ T3818] dump_stack+0x15/0x24 [ 315.468722][ T3818] should_fail_ex+0x3bf/0x510 [ 315.473431][ T3818] ? create_new_namespaces+0x34/0x660 [ 315.478832][ T3818] __should_failslab+0xac/0xf0 [ 315.483701][ T3818] should_failslab+0x9/0x20 [ 315.488217][ T3818] kmem_cache_alloc+0x3b/0x320 [ 315.493159][ T3818] create_new_namespaces+0x34/0x660 [ 315.498384][ T3818] __se_sys_setns+0x2c2/0x1180 [ 315.503525][ T3818] ? __x64_sys_setns+0x70/0x70 [ 315.508415][ T3818] ? __x64_sys_pwritev+0x1d9/0x2b0 [ 315.513541][ T3818] ? fpregs_restore_userregs+0x128/0x260 [ 315.519560][ T3818] __x64_sys_setns+0x5b/0x70 [ 315.524355][ T3818] x64_sys_call+0x672/0x9a0 [ 315.529054][ T3818] do_syscall_64+0x4c/0xa0 [ 315.533668][ T3818] ? clear_bhb_loop+0x30/0x80 [ 315.538458][ T3818] ? clear_bhb_loop+0x30/0x80 [ 315.543446][ T3818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.549367][ T3818] RIP: 0033:0x7f32e43a8fd9 [ 315.553789][ T3818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.573527][ T3818] RSP: 002b:00007f32e52ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 315.582059][ T3818] RAX: ffffffffffffffda RBX: 00007f32e4625fa0 RCX: 00007f32e43a8fd9 [ 315.590485][ T3818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 315.598558][ T3818] RBP: 00007f32e4437fed R08: 0000000000000000 R09: 0000000000000000 [ 315.607843][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.615820][ T3818] R13: 00007f32e4626038 R14: 00007f32e4625fa0 R15: 00007ffc188220c8 [ 315.624382][ T3818] [ 315.646656][ T3836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1013'. [ 315.680057][ T3845] FAULT_INJECTION: forcing a failure. [ 315.680057][ T3845] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.711709][ T3845] CPU: 1 PID: 3845 Comm: syz.1.1017 Not tainted syzkaller #0 [ 315.713729][ T3853] loop0: detected capacity change from 0 to 512 [ 315.719215][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 315.719233][ T3845] Call Trace: [ 315.719240][ T3845] [ 315.719248][ T3845] __dump_stack+0x21/0x24 [ 315.746088][ T3845] dump_stack_lvl+0x110/0x170 [ 315.750784][ T3845] ? __cfi_dump_stack_lvl+0x8/0x8 [ 315.755827][ T3845] ? __kasan_check_write+0x14/0x20 [ 315.761141][ T3845] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 315.767163][ T3845] dump_stack+0x15/0x24 [ 315.771335][ T3845] should_fail_ex+0x3bf/0x510 [ 315.776031][ T3845] should_fail_alloc_page+0x61/0x90 [ 315.781342][ T3845] prepare_alloc_pages+0x131/0x570 [ 315.786469][ T3845] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 315.791683][ T3845] ? kasan_set_track+0x60/0x70 [ 315.796512][ T3845] ? kasan_save_alloc_info+0x1f/0x30 [ 315.802081][ T3845] ? __kasan_slab_alloc+0x72/0x80 [ 315.803081][ T3853] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 315.807123][ T3845] ? slab_post_alloc_hook+0x4f/0x2d0 [ 315.807161][ T3845] __alloc_pages+0x15b/0x610 [ 315.827180][ T3845] ? __cfi___alloc_pages+0x10/0x10 [ 315.832325][ T3845] ? __kasan_check_write+0x14/0x20 [ 315.837456][ T3845] ? _raw_spin_lock+0x94/0xf0 [ 315.842180][ T3845] ? __cfi__raw_spin_lock+0x10/0x10 [ 315.847411][ T3845] __get_free_pages+0xe/0x30 [ 315.852021][ T3845] kasan_populate_vmalloc_pte+0x29/0x120 [ 315.855629][ T3863] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 315.857670][ T3845] __apply_to_page_range+0x8db/0xc80 [ 315.870651][ T3845] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 315.876913][ T3845] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 315.883180][ T3845] apply_to_page_range+0x3b/0x50 [ 315.888155][ T3845] kasan_populate_vmalloc+0x60/0x70 [ 315.893483][ T3845] alloc_vmap_area+0x1789/0x18c0 [ 315.898453][ T3845] ? vm_map_ram+0x930/0x930 [ 315.902983][ T3845] ? __kasan_kmalloc+0x95/0xb0 [ 315.907766][ T3845] ? kmalloc_node_trace+0x3d/0xb0 [ 315.912810][ T3845] __get_vm_area_node+0x160/0x360 [ 315.917861][ T3845] __vmalloc_node_range+0x326/0x1440 [ 315.923191][ T3845] ? queue_stack_map_alloc+0xc3/0x200 [ 315.928927][ T3845] ? avc_has_perm_noaudit+0x30a/0x490 [ 315.935034][ T3845] ? selinux_capable+0x2b6/0x3b0 [ 315.940006][ T3845] ? __cfi___vmalloc_node_range+0x10/0x10 [ 315.945920][ T3845] ? avc_has_perm+0x163/0x250 [ 315.950626][ T3845] ? cap_capable+0x1a6/0x230 [ 315.955244][ T3845] bpf_map_area_alloc+0xd7/0xe0 [ 315.960326][ T3845] ? queue_stack_map_alloc+0xc3/0x200 [ 315.965989][ T3845] queue_stack_map_alloc+0xc3/0x200 [ 315.967262][ T3873] loop4: detected capacity change from 0 to 256 [ 315.971305][ T3845] map_create+0x467/0xcf0 [ 315.971337][ T3845] __sys_bpf+0x34e/0x850 [ 315.986378][ T3845] ? bpf_link_show_fdinfo+0x330/0x330 [ 315.991779][ T3845] ? fpregs_restore_userregs+0x128/0x260 [ 315.997424][ T3845] __x64_sys_bpf+0x7c/0x90 [ 316.001833][ T3845] x64_sys_call+0x488/0x9a0 [ 316.006517][ T3845] do_syscall_64+0x4c/0xa0 [ 316.011014][ T3845] ? clear_bhb_loop+0x30/0x80 [ 316.015686][ T3845] ? clear_bhb_loop+0x30/0x80 [ 316.020400][ T3845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.026281][ T3845] RIP: 0033:0x7fb29e3a8fd9 [ 316.030701][ T3845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.051018][ T3845] RSP: 002b:00007fb29f208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.059888][ T3845] RAX: ffffffffffffffda RBX: 00007fb29e625fa0 RCX: 00007fb29e3a8fd9 [ 316.068195][ T3845] RDX: 0000000000000048 RSI: 0000200000000a00 RDI: 0000000000000000 [ 316.076679][ T3845] RBP: 00007fb29e437fed R08: 0000000000000000 R09: 0000000000000000 [ 316.084666][ T3845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.092625][ T3845] R13: 00007fb29e626038 R14: 00007fb29e625fa0 R15: 00007fff708bd928 [ 316.101457][ T3845] [ 316.108215][ T3866] overlayfs: failed to verify upper (221/file1, ino=1264, err=-116) [ 316.115225][ T3873] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.127673][ T3866] overlayfs: failed to verify index dir 'upper' xattr [ 316.135938][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 316.156301][ T3866] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 316.193470][ T3880] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.208069][ T3885] FAULT_INJECTION: forcing a failure. [ 316.208069][ T3885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.229864][ T3885] CPU: 1 PID: 3885 Comm: syz.0.1037 Not tainted syzkaller #0 [ 316.237418][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 316.247582][ T3885] Call Trace: [ 316.247595][ T3885] [ 316.247603][ T3885] __dump_stack+0x21/0x24 [ 316.247630][ T3885] dump_stack_lvl+0x110/0x170 [ 316.247649][ T3885] ? __cfi_dump_stack_lvl+0x8/0x8 [ 316.247669][ T3885] dump_stack+0x15/0x24 [ 316.247686][ T3885] should_fail_ex+0x3bf/0x510 [ 316.247708][ T3885] should_fail+0xb/0x10 [ 316.247727][ T3885] should_fail_usercopy+0x1a/0x20 [ 316.247746][ T3885] _copy_from_user+0x1e/0xc0 [ 316.247764][ T3885] strndup_user+0xb6/0x150 [ 316.295269][ T3885] __se_sys_add_key+0x1c0/0x410 [ 316.300330][ T3885] ? __x64_sys_add_key+0xd0/0xd0 [ 316.305294][ T3885] ? xfd_validate_state+0x70/0x150 [ 316.310517][ T3885] ? __kasan_check_write+0x14/0x20 [ 316.315825][ T3885] ? fpregs_restore_userregs+0x128/0x260 [ 316.321487][ T3885] __x64_sys_add_key+0xbf/0xd0 [ 316.326537][ T3885] x64_sys_call+0x6aa/0x9a0 [ 316.332103][ T3885] do_syscall_64+0x4c/0xa0 [ 316.336625][ T3885] ? clear_bhb_loop+0x30/0x80 [ 316.341581][ T3885] ? clear_bhb_loop+0x30/0x80 [ 316.346716][ T3885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.352722][ T3885] RIP: 0033:0x7f34885a8fd9 [ 316.357150][ T3885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.376852][ T3885] RSP: 002b:00007f3489397028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 316.385276][ T3885] RAX: ffffffffffffffda RBX: 00007f3488825fa0 RCX: 00007f34885a8fd9 [ 316.393433][ T3885] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000340 [ 316.401505][ T3885] RBP: 00007f3488637fed R08: 00000000305f7e1d R09: 0000000000000000 [ 316.409491][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.417909][ T3885] R13: 00007f3488826038 R14: 00007f3488825fa0 R15: 00007ffe6dab17c8 [ 316.425928][ T3885] [ 316.521430][ T3923] 0: reclassify loop, rule prio 0, protocol 03 [ 317.497936][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 317.497950][ T28] audit: type=1400 audit(2000000124.179:455): avc: denied { connect } for pid=3959 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.557646][ T28] audit: type=1400 audit(2000000124.209:456): avc: denied { read } for pid=3959 comm="syz.1.1070" laddr=fe80::1094:18ff:febe:bd7 lport=2 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.589229][ T28] audit: type=1400 audit(2000000124.259:457): avc: denied { map } for pid=3982 comm="syz.2.1082" path="socket:[33931]" dev="sockfs" ino=33931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 317.594125][ T3977] device vlan2 entered promiscuous mode [ 317.629007][ T3977] device syz_tun entered promiscuous mode [ 317.749348][ T28] audit: type=1400 audit(2000000124.429:458): avc: denied { mounton } for pid=4019 comm="syz.5.1100" path="/169/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 317.802913][ T4035] raw_sendmsg: syz.5.1107 forgot to set AF_INET. Fix it! [ 317.851471][ T28] audit: type=1400 audit(2000000124.529:459): avc: denied { sqpoll } for pid=4051 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 317.910021][ T28] audit: type=1400 audit(2000000124.589:460): avc: denied { shutdown } for pid=4067 comm="syz.5.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.982285][ T4087] device syzkaller0 entered promiscuous mode [ 318.117927][ T4114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=4114 comm=syz.2.1144 [ 318.194072][ T4126] loop0: detected capacity change from 0 to 512 [ 318.220786][ T28] audit: type=1400 audit(2000000380.956:461): avc: denied { mount } for pid=4125 comm="syz.0.1151" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 318.280644][ T28] audit: type=1400 audit(2000000380.996:462): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 318.404444][ T4149] overlayfs: failed to clone lowerpath [ 318.417673][ T4149] overlayfs: failed to clone lowerpath [ 318.549069][ T28] audit: type=1400 audit(2000000381.286:463): avc: denied { read write } for pid=4161 comm="syz.4.1165" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 318.616316][ T28] audit: type=1400 audit(2000000381.286:464): avc: denied { open } for pid=4161 comm="syz.4.1165" path="/191/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 318.692952][ T4173] option changes via remount are deprecated (pid=4172 comm=syz.4.1170) [ 318.711634][ T4173] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 318.723990][ T4175] TCP: TCP_TX_DELAY enabled [ 318.780482][ T4183] ip_tables: iptables: counters copy to user failed while replacing table [ 319.294297][ T4206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1183'. [ 319.962006][ T3379] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 320.032028][ T370] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 320.092007][ T1273] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 320.164790][ T3379] usb 6-1: Using ep0 maxpacket: 32 [ 320.242531][ T370] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.260695][ T370] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.275987][ T370] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.283007][ T1273] usb 5-1: Using ep0 maxpacket: 32 [ 320.289123][ T370] usb 2-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 320.354497][ T3379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.365659][ T3379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.369298][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.375855][ T3379] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.383529][ T1273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.392629][ T3379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.411015][ T1273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.412235][ T3379] usb 6-1: config 0 descriptor?? [ 320.428230][ T3379] hub 6-1:0.0: USB hub found [ 320.465828][ T370] usb 2-1: config 0 descriptor?? [ 320.470944][ T1273] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.480408][ T1273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.495143][ T1273] usb 5-1: config 0 descriptor?? [ 320.502832][ T1273] hub 5-1:0.0: USB hub found [ 320.793454][ T1273] hub 5-1:0.0: 1 port detected [ 320.798640][ T3379] hub 6-1:0.0: 1 port detected [ 320.999552][ T370] hid (null): bogus close delimiter [ 321.006875][ T370] wacom 0003:056A:00BB.000A: bogus close delimiter [ 321.013604][ T370] wacom 0003:056A:00BB.000A: item 0 4 2 10 parsing failed [ 321.020977][ T370] wacom 0003:056A:00BB.000A: parse failed [ 321.026811][ T370] wacom: probe of 0003:056A:00BB.000A failed with error -22 [ 321.392060][ T4244] loop4: detected capacity change from 0 to 256 [ 322.644798][ T370] usb 2-1: USB disconnect, device number 50 [ 322.683165][ T3379] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 322.683179][ T1273] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 322.841032][ T4253] xt_hashlimit: size too large, truncated to 1048576 [ 322.934090][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 322.934107][ T28] audit: type=1400 audit(2000000385.676:466): avc: denied { remount } for pid=4251 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 322.960769][ T4255] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 322.972731][ T4255] overlayfs: failed to set xattr on upper [ 323.009020][ T28] audit: type=1400 audit(2000000385.696:467): avc: denied { mounton } for pid=4251 comm="syz.1.1197" path="/215/file0/file0" dev="ramfs" ino=34376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 323.047968][ T4259] FAULT_INJECTION: forcing a failure. [ 323.047968][ T4259] name failslab, interval 1, probability 0, space 0, times 0 [ 323.085391][ T4259] CPU: 1 PID: 4259 Comm: syz.1.1200 Not tainted syzkaller #0 [ 323.092903][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 323.102964][ T4259] Call Trace: [ 323.106253][ T4259] [ 323.109274][ T4259] __dump_stack+0x21/0x24 [ 323.113624][ T4259] dump_stack_lvl+0x110/0x170 [ 323.118332][ T4259] ? __cfi_dump_stack_lvl+0x8/0x8 [ 323.123377][ T4259] ? release_sock+0x169/0x1c0 [ 323.128169][ T4259] dump_stack+0x15/0x24 [ 323.132332][ T4259] should_fail_ex+0x3bf/0x510 [ 323.137021][ T4259] __should_failslab+0xac/0xf0 [ 323.141796][ T4259] should_failslab+0x9/0x20 [ 323.146305][ T4259] kmem_cache_alloc_node+0x42/0x330 [ 323.151609][ T4259] ? __alloc_skb+0xe8/0x4a0 [ 323.156215][ T4259] __alloc_skb+0xe8/0x4a0 [ 323.160560][ T4259] netlink_sendmsg+0x635/0xbd0 [ 323.165417][ T4259] ? cgroup_rstat_updated+0xf0/0x360 [ 323.170783][ T4259] ? __cfi_netlink_sendmsg+0x10/0x10 [ 323.176092][ T4259] ? security_socket_sendmsg+0x93/0xb0 [ 323.181566][ T4259] __sys_sendto+0x4ac/0x660 [ 323.186179][ T4259] ? __cfi___sys_sendto+0x10/0x10 [ 323.191262][ T4259] ? do_user_addr_fault+0x9a5/0x1030 [ 323.196578][ T4259] __x64_sys_sendto+0xe5/0x100 [ 323.201921][ T4259] x64_sys_call+0x83/0x9a0 [ 323.206402][ T4259] do_syscall_64+0x4c/0xa0 [ 323.210826][ T4259] ? clear_bhb_loop+0x30/0x80 [ 323.215517][ T4259] ? clear_bhb_loop+0x30/0x80 [ 323.220212][ T4259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.226439][ T4259] RIP: 0033:0x7fb29e36980e [ 323.231002][ T4259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 323.250699][ T4259] RSP: 002b:00007fb29f206e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 323.259141][ T4259] RAX: ffffffffffffffda RBX: 00007fb29f2086c0 RCX: 00007fb29e36980e [ 323.267107][ T4259] RDX: 0000000000000020 RSI: 00007fb29f207000 RDI: 0000000000000005 [ 323.275072][ T4259] RBP: 0000000000000000 R08: 00007fb29f206f04 R09: 000000000000000c [ 323.283058][ T4259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 323.291026][ T4259] R13: 00007fb29f206f58 R14: 00007fb29f207000 R15: 0000000000000000 [ 323.299000][ T4259] [ 323.303184][ T28] audit: type=1400 audit(2000000385.746:468): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 323.342394][ T3379] usb 5-1: USB disconnect, device number 42 [ 323.378397][ T4265] loop0: detected capacity change from 0 to 256 [ 323.414917][ T4265] FAT-fs (loop0): Directory bread(block 64) failed [ 323.423144][ T4265] FAT-fs (loop0): Directory bread(block 65) failed [ 323.430498][ T4265] FAT-fs (loop0): Directory bread(block 66) failed [ 323.435579][ T4274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1206'. [ 323.443309][ T4265] FAT-fs (loop0): Directory bread(block 67) failed [ 323.448615][ T4274] FAULT_INJECTION: forcing a failure. [ 323.448615][ T4274] name failslab, interval 1, probability 0, space 0, times 0 [ 323.462122][ T4265] FAT-fs (loop0): Directory bread(block 68) failed [ 323.467925][ T4274] CPU: 1 PID: 4274 Comm: syz.4.1206 Not tainted syzkaller #0 [ 323.481685][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 323.482002][ T4265] FAT-fs (loop0): Directory bread(block 69) failed [ 323.492473][ T4274] Call Trace: [ 323.492489][ T4274] [ 323.492497][ T4274] __dump_stack+0x21/0x24 [ 323.492523][ T4274] dump_stack_lvl+0x110/0x170 [ 323.492539][ T4274] ? __cfi_dump_stack_lvl+0x8/0x8 [ 323.492556][ T4274] ? selinux_kernfs_init_security+0x143/0x450 [ 323.492583][ T4274] dump_stack+0x15/0x24 [ 323.502730][ T4265] FAT-fs (loop0): Directory bread(block 70) failed [ 323.503574][ T4274] should_fail_ex+0x3bf/0x510 [ 323.506566][ T4265] FAT-fs (loop0): Directory bread(block 71) failed [ 323.510964][ T4274] ? __kernfs_new_node+0xe1/0x670 [ 323.516079][ T4265] FAT-fs (loop0): Directory bread(block 72) failed [ 323.521277][ T4274] __should_failslab+0xac/0xf0 [ 323.527990][ T4265] FAT-fs (loop0): Directory bread(block 73) failed [ 323.531950][ T4274] should_failslab+0x9/0x20 [ 323.531976][ T4274] kmem_cache_alloc+0x3b/0x320 [ 323.531998][ T4274] __kernfs_new_node+0xe1/0x670 [ 323.532016][ T4274] ? clear_nonspinnable+0x60/0x60 [ 323.592735][ T4274] ? rwsem_write_trylock+0x136/0x300 [ 323.598041][ T4274] ? kernfs_new_node+0x260/0x260 [ 323.603026][ T4274] ? up_write+0x7b/0x290 [ 323.607386][ T4274] kernfs_new_node+0x150/0x260 [ 323.608557][ T4265] syz.0.1203: attempt to access beyond end of device [ 323.608557][ T4265] loop0: rw=2049, sector=1224, nr_sectors = 256 limit=256 [ 323.612165][ T4274] __kernfs_create_file+0x4e/0x270 [ 323.626444][ T4265] syz.0.1203: attempt to access beyond end of device [ 323.626444][ T4265] loop0: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 323.631086][ T4274] sysfs_add_file_mode_ns+0x1ce/0x270 [ 323.631121][ T4274] sysfs_merge_group+0x180/0x320 [ 323.646183][ T4265] syz.0.1203: attempt to access beyond end of device [ 323.646183][ T4265] loop0: rw=2049, sector=1864, nr_sectors = 576 limit=256 [ 323.650553][ T4274] ? __cfi_sysfs_merge_group+0x10/0x10 [ 323.650589][ T4274] dpm_sysfs_add+0xe0/0x290 [ 323.660370][ T4265] syz.0.1203: attempt to access beyond end of device [ 323.660370][ T4265] loop0: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 323.669192][ T4274] device_add+0x691/0xec0 [ 323.675385][ T4277] syz.0.1203: attempt to access beyond end of device [ 323.675385][ T4277] loop0: rw=2049, sector=1228, nr_sectors = 4 limit=256 [ 323.679327][ T4274] netdev_register_kobject+0x18e/0x330 [ 323.693617][ T4277] Buffer I/O error on dev loop0, logical block 307, lost async page write [ 323.697350][ T4274] ? raw_notifier_call_chain+0xfa/0x110 [ 323.697385][ T4274] register_netdevice+0xec9/0x1550 [ 323.718768][ T4277] syz.0.1203: attempt to access beyond end of device [ 323.718768][ T4277] loop0: rw=2049, sector=1232, nr_sectors = 4 limit=256 [ 323.724884][ T4274] ? __cfi_register_netdevice+0x10/0x10 [ 323.724920][ T4274] ? netif_inherit_tso_max+0x168/0x270 [ 323.737476][ T4277] Buffer I/O error on dev loop0, logical block 308, lost async page write [ 323.749310][ T4274] veth_newlink+0x66a/0xd60 [ 323.775678][ T4274] ? __cfi_veth_newlink+0x10/0x10 [ 323.780746][ T4274] ? rtnl_create_link+0x86e/0xaf0 [ 323.785911][ T4274] ? __cfi_veth_newlink+0x10/0x10 [ 323.790958][ T4274] rtnl_newlink+0x14dc/0x20d0 [ 323.795659][ T4274] ? memcpy+0x56/0x70 [ 323.799775][ T4274] ? rtnl_newlink+0x4e1/0x20d0 [ 323.804556][ T4274] ? __cfi_rtnl_newlink+0x10/0x10 [ 323.809589][ T4274] ? selinux_capable+0x2b6/0x3b0 [ 323.814520][ T4274] ? __cfi_selinux_capable+0x10/0x10 [ 323.819824][ T4274] ? __cfi_mutex_lock+0x10/0x10 [ 323.824866][ T4274] ? ns_capable+0x8c/0xf0 [ 323.829237][ T4274] ? netlink_net_capable+0x125/0x160 [ 323.834526][ T4274] ? __cfi_rtnl_newlink+0x10/0x10 [ 323.839558][ T4274] rtnetlink_rcv_msg+0xb28/0xde0 [ 323.844580][ T4274] ? 0xffffffffa0000a10 [ 323.848730][ T4274] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 323.854185][ T4274] ? __kernel_text_address+0xd/0x30 [ 323.859395][ T4274] ? avc_has_perm_noaudit+0x390/0x490 [ 323.864802][ T4274] ? memcpy+0x56/0x70 [ 323.868798][ T4274] ? avc_has_perm_noaudit+0x30a/0x490 [ 323.874180][ T4274] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 323.879921][ T4274] ? kasan_save_alloc_info+0x1f/0x30 [ 323.885215][ T4274] ? avc_has_perm+0x163/0x250 [ 323.889892][ T4274] ? __alloc_skb+0x226/0x4a0 [ 323.894491][ T4274] ? netlink_sendmsg+0x635/0xbd0 [ 323.899439][ T4274] ? ____sys_sendmsg+0x5fb/0x9c0 [ 323.904390][ T4274] ? __cfi_avc_has_perm+0x10/0x10 [ 323.909418][ T4274] ? selinux_nlmsg_lookup+0x38f/0x440 [ 323.914783][ T4274] netlink_rcv_skb+0x200/0x450 [ 323.919550][ T4274] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 323.925011][ T4274] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 323.930305][ T4274] ? __netlink_lookup+0x387/0x3b0 [ 323.935347][ T4274] rtnetlink_rcv+0x1c/0x20 [ 323.939776][ T4274] netlink_unicast+0x8c1/0xa60 [ 323.944539][ T4274] netlink_sendmsg+0x8b9/0xbd0 [ 323.949492][ T4274] ? __cfi_netlink_sendmsg+0x10/0x10 [ 323.954982][ T4274] ? security_socket_sendmsg+0x93/0xb0 [ 323.960458][ T4274] ? __cfi_netlink_sendmsg+0x10/0x10 [ 323.965736][ T4274] ____sys_sendmsg+0x5fb/0x9c0 [ 323.970504][ T4274] ? __sys_sendmsg_sock+0x40/0x40 [ 323.975514][ T4274] ? import_iovec+0x7c/0xb0 [ 323.980014][ T4274] ___sys_sendmsg+0x2a2/0x360 [ 323.984680][ T4274] ? __sys_sendmsg+0x290/0x290 [ 323.989522][ T4274] ? security_file_alloc+0x33/0x130 [ 323.994746][ T4274] ? percpu_counter_add_batch+0x13c/0x160 [ 324.000488][ T4274] ? __fdget+0x19c/0x220 [ 324.004744][ T4274] __x64_sys_sendmsg+0x20d/0x2e0 [ 324.009950][ T4274] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 324.015615][ T4274] ? __kasan_check_write+0x14/0x20 [ 324.020873][ T4274] ? fpregs_restore_userregs+0x128/0x260 [ 324.026601][ T4274] ? switch_fpu_return+0xe/0x10 [ 324.031462][ T4274] x64_sys_call+0x171/0x9a0 [ 324.035972][ T4274] do_syscall_64+0x4c/0xa0 [ 324.040386][ T4274] ? clear_bhb_loop+0x30/0x80 [ 324.045061][ T4274] ? clear_bhb_loop+0x30/0x80 [ 324.049766][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.056498][ T4274] RIP: 0033:0x7f32e43a8fd9 [ 324.061272][ T4274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.081397][ T4274] RSP: 002b:00007f32e52ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.089897][ T4274] RAX: ffffffffffffffda RBX: 00007f32e4625fa0 RCX: 00007f32e43a8fd9 [ 324.097859][ T4274] RDX: 0000000000000000 RSI: 0000200000005d00 RDI: 0000000000000004 [ 324.105919][ T4274] RBP: 00007f32e4437fed R08: 0000000000000000 R09: 0000000000000000 [ 324.114075][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.122065][ T4274] R13: 00007f32e4626038 R14: 00007f32e4625fa0 R15: 00007ffc188220c8 [ 324.130528][ T4274] [ 324.142624][ T43] kworker/u4:2: attempt to access beyond end of device [ 324.142624][ T43] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 324.156540][ T43] Buffer I/O error on dev loop0, logical block 306, lost async page write [ 324.167612][ T43] kworker/u4:2: attempt to access beyond end of device [ 324.167612][ T43] loop0: rw=1, sector=1228, nr_sectors = 4 limit=256 [ 324.203223][ T43] Buffer I/O error on dev loop0, logical block 307, lost async page write [ 324.213021][ T4281] 0: reclassify loop, rule prio 0, protocol 03 [ 324.282101][ T3379] usb 6-1: USB disconnect, device number 19 [ 324.291221][ T28] audit: type=1400 audit(2000000387.026:469): avc: denied { append } for pid=4300 comm="syz.0.1218" name="trace_pipe_raw" dev="tracefs" ino=8117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 324.315666][ T4297] FAULT_INJECTION: forcing a failure. [ 324.315666][ T4297] name failslab, interval 1, probability 0, space 0, times 0 [ 324.329581][ T4297] CPU: 1 PID: 4297 Comm: syz.5.1216 Not tainted syzkaller #0 [ 324.336973][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 324.347118][ T4297] Call Trace: [ 324.350403][ T4297] [ 324.353395][ T4297] __dump_stack+0x21/0x24 [ 324.357741][ T4297] dump_stack_lvl+0x110/0x170 [ 324.362529][ T4297] ? __cfi_dump_stack_lvl+0x8/0x8 [ 324.367674][ T4297] dump_stack+0x15/0x24 [ 324.371851][ T4297] should_fail_ex+0x3bf/0x510 [ 324.376642][ T4297] __should_failslab+0xac/0xf0 [ 324.381454][ T4297] should_failslab+0x9/0x20 [ 324.385973][ T4297] __kmem_cache_alloc_node+0x3d/0x2d0 [ 324.391366][ T4297] ? alloc_fdtable+0xcd/0x2e0 [ 324.396198][ T4297] ? alloc_fdtable+0xcd/0x2e0 [ 324.400904][ T4297] kmalloc_trace+0x29/0xb0 [ 324.406043][ T4297] alloc_fdtable+0xcd/0x2e0 [ 324.410570][ T4297] dup_fd+0x693/0x8c0 [ 324.414568][ T4297] ? copy_fs_struct+0x4c/0x220 [ 324.419468][ T4297] ksys_unshare+0x440/0x850 [ 324.424422][ T4297] ? __cfi_ksys_unshare+0x10/0x10 [ 324.430073][ T4297] ? fpregs_restore_userregs+0x128/0x260 [ 324.435981][ T4297] __x64_sys_unshare+0x38/0x40 [ 324.441120][ T4297] x64_sys_call+0x767/0x9a0 [ 324.446190][ T4297] do_syscall_64+0x4c/0xa0 [ 324.450653][ T4297] ? clear_bhb_loop+0x30/0x80 [ 324.455427][ T4297] ? clear_bhb_loop+0x30/0x80 [ 324.461122][ T4297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.467463][ T4297] RIP: 0033:0x7f24419a8fd9 [ 324.472075][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.493682][ T4297] RSP: 002b:00007f2442925028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 324.503425][ T4297] RAX: ffffffffffffffda RBX: 00007f2441c25fa0 RCX: 00007f24419a8fd9 [ 324.511622][ T4297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000680 [ 324.520298][ T4297] RBP: 00007f2441a37fed R08: 0000000000000000 R09: 0000000000000000 [ 324.528800][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.537264][ T4297] R13: 00007f2441c26038 R14: 00007f2441c25fa0 R15: 00007ffe910fda88 [ 324.545356][ T4297] [ 324.604361][ T4310] FAULT_INJECTION: forcing a failure. [ 324.604361][ T4310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.634111][ T4310] CPU: 1 PID: 4310 Comm: syz.0.1220 Not tainted syzkaller #0 [ 324.634137][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 324.634148][ T4310] Call Trace: [ 324.634154][ T4310] [ 324.634162][ T4310] __dump_stack+0x21/0x24 [ 324.634195][ T4310] dump_stack_lvl+0x110/0x170 [ 324.634214][ T4310] ? __cfi_dump_stack_lvl+0x8/0x8 [ 324.634231][ T4310] ? asm_exc_page_fault+0x27/0x30 [ 324.634254][ T4310] dump_stack+0x15/0x24 [ 324.634269][ T4310] should_fail_ex+0x3bf/0x510 [ 324.634289][ T4310] should_fail_alloc_page+0x61/0x90 [ 324.634314][ T4310] prepare_alloc_pages+0x131/0x570 [ 324.634340][ T4310] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 324.634367][ T4310] __alloc_pages+0x15b/0x610 [ 324.634392][ T4310] ? __cfi___alloc_pages+0x10/0x10 [ 324.634413][ T4310] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 324.634435][ T4310] ? up_write+0x7b/0x290 [ 324.634458][ T4310] ? __anon_vma_prepare+0x38b/0x410 [ 324.634577][ T4310] __folio_alloc+0x12/0x40 [ 324.634603][ T4310] handle_mm_fault+0x1989/0x26b0 [ 324.634626][ T4310] ? __cfi_handle_mm_fault+0x10/0x10 [ 324.634643][ T4310] ? down_read_trylock+0x27f/0x660 [ 324.634671][ T4310] ? lock_mm_and_find_vma+0x9e/0x320 [ 324.634693][ T4310] ? do_user_addr_fault+0x338/0x1030 [ 324.634719][ T4310] do_user_addr_fault+0x61e/0x1030 [ 324.634747][ T4310] exc_page_fault+0x51/0xb0 [ 324.634771][ T4310] asm_exc_page_fault+0x27/0x30 [ 324.634792][ T4310] RIP: 0033:0x7f3488453fd8 [ 324.634808][ T4310] Code: 40 00 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 4c 89 44 24 d0 48 8b 74 24 e8 4c 8b 44 24 d0 48 8b 4c 24 d8 <81> 4e 08 00 0c 00 00 48 8b 54 24 e0 48 8b 7c 24 f0 e9 c2 fe ff ff [ 324.634824][ T4310] RSP: 002b:00007f3489397018 EFLAGS: 00010212 [ 324.634842][ T4310] RAX: 00007f3488453fb0 RBX: 00007f3488825fa0 RCX: 0000200000000600 [ 324.634856][ T4310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001d [ 324.634868][ T4310] RBP: 00007f3488637fed R08: 0000200000000640 R09: 0000000000000000 [ 324.634883][ T4310] R10: 000000000000001d R11: 0000000000000000 R12: 0000000000000000 [ 324.634895][ T4310] R13: 00007f3488826038 R14: 00007f3488825fa0 R15: 00007ffe6dab17c8 [ 324.634925][ T4310] [ 324.635171][ T4310] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 326.704024][ T4317] tty tty22: ldisc open failed (-12), clearing slot 21 [ 326.712155][ T4321] tty tty1: ldisc open failed (-12), clearing slot 0 [ 326.923099][ T4356] FAULT_INJECTION: forcing a failure. [ 326.923099][ T4356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.944480][ T4356] CPU: 1 PID: 4356 Comm: syz.4.1238 Not tainted syzkaller #0 [ 326.951907][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 326.961980][ T4356] Call Trace: [ 326.965272][ T4356] [ 326.968216][ T4356] __dump_stack+0x21/0x24 [ 326.973884][ T4356] dump_stack_lvl+0x110/0x170 [ 326.978773][ T4356] ? __cfi_dump_stack_lvl+0x8/0x8 [ 326.984015][ T4356] ? asm_exc_page_fault+0x27/0x30 [ 326.989195][ T4356] dump_stack+0x15/0x24 [ 326.993474][ T4356] should_fail_ex+0x3bf/0x510 [ 326.998645][ T4356] should_fail_alloc_page+0x61/0x90 [ 327.003877][ T4356] prepare_alloc_pages+0x131/0x570 [ 327.009029][ T4356] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 327.014799][ T4356] __alloc_pages+0x15b/0x610 [ 327.019545][ T4356] ? __cfi___alloc_pages+0x10/0x10 [ 327.024699][ T4356] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 327.032095][ T4356] ? up_write+0x7b/0x290 [ 327.036370][ T4356] ? __anon_vma_prepare+0x38b/0x410 [ 327.041592][ T4356] __folio_alloc+0x12/0x40 [ 327.046025][ T4356] handle_mm_fault+0x1989/0x26b0 [ 327.050974][ T4356] ? __cfi_handle_mm_fault+0x10/0x10 [ 327.056259][ T4356] ? down_read_trylock+0x27f/0x660 [ 327.061421][ T4356] ? lock_mm_and_find_vma+0x9e/0x320 [ 327.066721][ T4356] ? do_user_addr_fault+0x338/0x1030 [ 327.072019][ T4356] do_user_addr_fault+0x61e/0x1030 [ 327.077151][ T4356] exc_page_fault+0x51/0xb0 [ 327.081675][ T4356] asm_exc_page_fault+0x27/0x30 [ 327.086546][ T4356] RIP: 0033:0x7f32e4253fd8 [ 327.090979][ T4356] Code: 40 00 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 4c 89 44 24 d0 48 8b 74 24 e8 4c 8b 44 24 d0 48 8b 4c 24 d8 <81> 4e 08 00 0c 00 00 48 8b 54 24 e0 48 8b 7c 24 f0 e9 c2 fe ff ff [ 327.110685][ T4356] RSP: 002b:00007f32e52ca018 EFLAGS: 00010212 [ 327.116774][ T4356] RAX: 00007f32e4253fb0 RBX: 00007f32e4625fa0 RCX: 0000200000000600 [ 327.126067][ T4356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001d [ 327.137143][ T4356] RBP: 00007f32e4437fed R08: 0000200000000640 R09: 0000000000000000 [ 327.145140][ T4356] R10: 000000000000001d R11: 0000000000000000 R12: 0000000000000000 [ 327.153306][ T4356] R13: 00007f32e4626038 R14: 00007f32e4625fa0 R15: 00007ffc188220c8 [ 327.161306][ T4356] [ 327.171845][ T4356] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 327.398499][ T4370] xt_hashlimit: size too large, truncated to 1048576 [ 327.410331][ T4368] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.700884][ T4380] FAULT_INJECTION: forcing a failure. [ 327.700884][ T4380] name failslab, interval 1, probability 0, space 0, times 0 [ 328.110894][ T4380] CPU: 1 PID: 4380 Comm: syz.0.1250 Not tainted syzkaller #0 [ 328.118329][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 328.128498][ T4380] Call Trace: [ 328.131784][ T4380] [ 328.134715][ T4380] __dump_stack+0x21/0x24 [ 328.139137][ T4380] dump_stack_lvl+0x110/0x170 [ 328.143830][ T4380] ? __cfi_dump_stack_lvl+0x8/0x8 [ 328.148863][ T4380] ? avc_has_perm+0x163/0x250 [ 328.153546][ T4380] dump_stack+0x15/0x24 [ 328.157707][ T4380] should_fail_ex+0x3bf/0x510 [ 328.162390][ T4380] __should_failslab+0xac/0xf0 [ 328.167181][ T4380] should_failslab+0x9/0x20 [ 328.171687][ T4380] __kmem_cache_alloc_node+0x3d/0x2d0 [ 328.177071][ T4380] ? kernfs_fop_open+0x35d/0xb80 [ 328.182017][ T4380] ? __cfi_selinux_file_open+0x10/0x10 [ 328.187497][ T4380] ? kernfs_fop_open+0x35d/0xb80 [ 328.192460][ T4380] kmalloc_trace+0x29/0xb0 [ 328.196892][ T4380] kernfs_fop_open+0x35d/0xb80 [ 328.201665][ T4380] do_dentry_open+0x885/0x11f0 [ 328.206438][ T4380] ? __cfi_kernfs_fop_open+0x10/0x10 [ 328.211739][ T4380] vfs_open+0x73/0x80 [ 328.215732][ T4380] path_openat+0x2699/0x2f30 [ 328.220339][ T4380] ? do_filp_open+0x420/0x420 [ 328.225029][ T4380] do_filp_open+0x1ee/0x420 [ 328.229542][ T4380] ? __cfi_do_filp_open+0x10/0x10 [ 328.234582][ T4380] ? alloc_fd+0x4c1/0x570 [ 328.238923][ T4380] do_sys_openat2+0x15e/0x820 [ 328.243785][ T4380] ? __se_sys_futex+0x136/0x310 [ 328.248900][ T4380] ? do_sys_open+0xe0/0xe0 [ 328.253541][ T4380] ? __this_cpu_preempt_check+0x13/0x20 [ 328.259108][ T4380] ? xfd_validate_state+0x70/0x150 [ 328.264235][ T4380] __x64_sys_openat+0x136/0x160 [ 328.269139][ T4380] x64_sys_call+0x783/0x9a0 [ 328.274264][ T4380] do_syscall_64+0x4c/0xa0 [ 328.278691][ T4380] ? clear_bhb_loop+0x30/0x80 [ 328.283383][ T4380] ? clear_bhb_loop+0x30/0x80 [ 328.289993][ T4380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.295913][ T4380] RIP: 0033:0x7f34885a8fd9 [ 328.300469][ T4380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.320090][ T4380] RSP: 002b:00007f3489397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 328.328695][ T4380] RAX: ffffffffffffffda RBX: 00007f3488825fa0 RCX: 00007f34885a8fd9 [ 328.337201][ T4380] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 328.345237][ T4380] RBP: 00007f3488637fed R08: 0000000000000000 R09: 0000000000000000 [ 328.354231][ T4380] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 328.363977][ T4380] R13: 00007f3488826038 R14: 00007f3488825fa0 R15: 00007ffe6dab17c8 [ 328.372066][ T4380] [ 328.539330][ T4400] loop0: detected capacity change from 0 to 512 [ 328.835007][ T4436] sch_fq: defrate 30669 ignored. [ 328.986919][ T4469] loop4: detected capacity change from 0 to 512 [ 329.012092][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 329.073928][ T4483] netlink: 976 bytes leftover after parsing attributes in process `syz.4.1294'. [ 329.292300][ T4523] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1312'. [ 329.302195][ T28] audit: type=1400 audit(2000000904.139:470): avc: denied { create } for pid=4524 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 329.370674][ T4536] ip_tables: iptables: counters copy to user failed while replacing table [ 329.448784][ T4558] overlayfs: failed to clone upperpath [ 329.479774][ T4565] overlayfs: failed to clone upperpath [ 329.536633][ T4583] loop0: detected capacity change from 0 to 512 [ 329.586056][ T4590] loop0: detected capacity change from 0 to 2048 [ 329.596392][ T4594] loop4: detected capacity change from 0 to 16 [ 329.605845][ T4594] erofs: (device loop4): mounted with root inode @ nid 36. [ 329.615631][ T4594] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 329.624848][ T4594] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 329.634259][ T4594] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 329.643383][ T4594] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 329.654357][ T28] audit: type=1400 audit(2000000904.499:471): avc: denied { setattr } for pid=4593 comm="syz.4.1346" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.660141][ T4590] loop0: p1 p2 p3 [ 329.691890][ T4599] device syzkaller0 entered promiscuous mode [ 329.720926][ T28] audit: type=1400 audit(2000000904.559:472): avc: denied { setattr } for pid=4587 comm="syz.0.1343" name="loop0p1" dev="devtmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 329.745209][ T28] audit: type=1400 audit(2000000904.589:473): avc: denied { read write } for pid=4587 comm="syz.0.1343" name="loop0p1" dev="devtmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 329.781395][ T28] audit: type=1400 audit(2000000904.589:474): avc: denied { open } for pid=4587 comm="syz.0.1343" path="/dev/loop0p1" dev="devtmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 330.240189][ T4642] loop0: detected capacity change from 0 to 8192 [ 330.294380][ T4642] loop0: p1[EZD] p4 [ 330.298876][ T4642] loop0: p1 start 262144 is beyond EOD, truncated [ 330.305776][ T4642] loop0: p4 size 32769 extends beyond EOD, truncated [ 330.391114][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 330.435893][ T28] audit: type=1326 audit(2000000905.279:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4648 comm="syz.4.1370" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32e43a8fd9 code=0x0 [ 330.574540][ T4670] FAULT_INJECTION: forcing a failure. [ 330.574540][ T4670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.589955][ T4670] CPU: 0 PID: 4670 Comm: syz.0.1379 Not tainted syzkaller #0 [ 330.597459][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 330.607616][ T4670] Call Trace: [ 330.610911][ T4670] [ 330.613864][ T4670] __dump_stack+0x21/0x24 [ 330.618443][ T4670] dump_stack_lvl+0x110/0x170 [ 330.623332][ T4670] ? __cfi_dump_stack_lvl+0x8/0x8 [ 330.628740][ T4670] ? vfs_writev+0x464/0x5f0 [ 330.633885][ T4670] ? __kasan_slab_free+0x11/0x20 [ 330.638951][ T4670] dump_stack+0x15/0x24 [ 330.643132][ T4670] should_fail_ex+0x3bf/0x510 [ 330.647838][ T4670] should_fail+0xb/0x10 [ 330.652030][ T4670] should_fail_usercopy+0x1a/0x20 [ 330.657110][ T4670] _copy_from_user+0x1e/0xc0 [ 330.661719][ T4670] get_timespec64+0x93/0x1b0 [ 330.666330][ T4670] ? __cfi_get_timespec64+0x10/0x10 [ 330.671547][ T4670] ? __se_sys_futex+0x136/0x310 [ 330.676439][ T4670] __x64_sys_utimensat+0x16d/0x240 [ 330.681657][ T4670] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 330.687312][ T4670] ? __kasan_check_write+0x14/0x20 [ 330.690931][ T4612] syz.1.1354 (4612) used greatest stack depth: 18504 bytes left [ 330.692438][ T4670] ? fpregs_restore_userregs+0x128/0x260 [ 330.692468][ T4670] ? switch_fpu_return+0xe/0x10 [ 330.692487][ T4670] x64_sys_call+0x3e0/0x9a0 [ 330.692508][ T4670] do_syscall_64+0x4c/0xa0 [ 330.719465][ T4670] ? clear_bhb_loop+0x30/0x80 [ 330.724166][ T4670] ? clear_bhb_loop+0x30/0x80 [ 330.728884][ T4670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.734882][ T4670] RIP: 0033:0x7f34885a8fd9 [ 330.739309][ T4670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.758925][ T4670] RSP: 002b:00007f3489397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 330.767363][ T4670] RAX: ffffffffffffffda RBX: 00007f3488825fa0 RCX: 00007f34885a8fd9 [ 330.775349][ T4670] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: ffffffffffffffff [ 330.783339][ T4670] RBP: 00007f3488637fed R08: 0000000000000000 R09: 0000000000000000 [ 330.791505][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.799518][ T4670] R13: 00007f3488826038 R14: 00007f3488825fa0 R15: 00007ffe6dab17c8 [ 330.807526][ T4670] [ 330.989197][ T4723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1400'. [ 331.246273][ T4750] overlayfs: failed to clone upperpath [ 331.281078][ T28] audit: type=1400 audit(2000000906.119:476): avc: denied { map } for pid=4758 comm="syz.1.1421" path="/244/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=8117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 331.449568][ T28] audit: type=1400 audit(2000000906.289:477): avc: denied { read } for pid=4799 comm="syz.2.1440" path="socket:[36235]" dev="sockfs" ino=36235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.608913][ T28] audit: type=1400 audit(2000000906.449:478): avc: denied { ioctl } for pid=4837 comm="syz.2.1457" path="socket:[36269]" dev="sockfs" ino=36269 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 331.654048][ T4845] overlayfs: failed to clone upperpath [ 331.905323][ T28] audit: type=1400 audit(2000000906.749:479): avc: denied { remount } for pid=4890 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 331.952384][ T4899] sch_fq: defrate 30669 ignored. [ 332.504885][ T4933] Invalid ELF header type: 2 != 1 [ 332.670049][ T4948] xt_hashlimit: max too large, truncated to 1048576 [ 332.672380][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 332.702180][ T4946] device bridge_slave_1 left promiscuous mode [ 332.709710][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.714894][ T4950] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 332.726425][ T4950] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 332.738228][ T4950] overlayfs: missing 'lowerdir' [ 332.746035][ T4946] device bridge_slave_0 left promiscuous mode [ 332.756536][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.912217][ T4956] device syzkaller0 entered promiscuous mode [ 333.058778][ T4976] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.075971][ T4976] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 333.088328][ T4976] overlayfs: missing 'lowerdir' [ 333.091287][ T4981] overlayfs: failed to clone upperpath [ 333.174396][ T4992] device syzkaller0 entered promiscuous mode [ 333.298622][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 333.344901][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'. [ 333.774646][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 334.084528][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.091773][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.113359][ T5072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 334.132593][ T5072] device bridge_slave_1 left promiscuous mode [ 334.138806][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.150675][ T5072] device bridge_slave_0 left promiscuous mode [ 334.163177][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.255768][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 334.295159][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 334.312013][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1571'. [ 334.380944][ T5117] FAULT_INJECTION: forcing a failure. [ 334.380944][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 334.403136][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 334.442997][ T5117] CPU: 1 PID: 5117 Comm: syz.5.1578 Not tainted syzkaller #0 [ 334.450408][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 334.460477][ T5117] Call Trace: [ 334.463962][ T5117] [ 334.466909][ T5117] __dump_stack+0x21/0x24 [ 334.471271][ T5117] dump_stack_lvl+0x110/0x170 [ 334.476561][ T5117] ? __cfi_dump_stack_lvl+0x8/0x8 [ 334.481623][ T5117] dump_stack+0x15/0x24 [ 334.485887][ T5117] should_fail_ex+0x3bf/0x510 [ 334.490626][ T5117] __should_failslab+0xac/0xf0 [ 334.495421][ T5117] should_failslab+0x9/0x20 [ 334.499941][ T5117] slab_pre_alloc_hook+0x30/0x1d0 [ 334.505044][ T5117] ? __slab_alloc+0x6b/0xa0 [ 334.509563][ T5117] kmem_cache_alloc_lru+0x49/0x280 [ 334.514698][ T5117] ? proc_alloc_inode+0x2a/0xc0 [ 334.519714][ T5117] proc_alloc_inode+0x2a/0xc0 [ 334.524662][ T5117] ? __cfi_proc_alloc_inode+0x10/0x10 [ 334.530051][ T5117] new_inode_pseudo+0x70/0x1f0 [ 334.534821][ T5117] new_inode+0x28/0x1e0 [ 334.538978][ T5117] ? d_alloc_parallel+0x112b/0x1280 [ 334.544170][ T5117] proc_pid_make_inode+0x24/0x1c0 [ 334.549347][ T5117] proc_fdinfo_instantiate+0x4f/0x1f0 [ 334.554715][ T5117] proc_lookupfd_common+0x157/0x270 [ 334.559905][ T5117] ? __cfi_proc_fdinfo_instantiate+0x10/0x10 [ 334.565881][ T5117] ? tid_fd_revalidate+0x340/0x340 [ 334.570982][ T5117] ? down_read+0xa6/0xf0 [ 334.576609][ T5117] ? __cfi_down_read+0x10/0x10 [ 334.581632][ T5117] proc_lookupfdinfo+0x24/0x30 [ 334.586478][ T5117] ? __cfi_proc_lookupfdinfo+0x10/0x10 [ 334.592207][ T5117] path_openat+0x13fe/0x2f30 [ 334.596881][ T5117] ? do_filp_open+0x420/0x420 [ 334.601784][ T5117] do_filp_open+0x1ee/0x420 [ 334.606429][ T5117] ? __cfi_do_filp_open+0x10/0x10 [ 334.611455][ T5117] ? __cfi_kfree_link+0x10/0x10 [ 334.616830][ T5117] ? alloc_fd+0x4c1/0x570 [ 334.621157][ T5117] do_sys_openat2+0x15e/0x820 [ 334.625867][ T5117] ? __se_sys_futex+0x136/0x310 [ 334.630906][ T5117] ? do_sys_open+0xe0/0xe0 [ 334.635456][ T5117] ? __this_cpu_preempt_check+0x13/0x20 [ 334.641779][ T5117] ? xfd_validate_state+0x70/0x150 [ 334.646974][ T5117] __x64_sys_openat+0x136/0x160 [ 334.651867][ T5117] x64_sys_call+0x783/0x9a0 [ 334.656863][ T5117] do_syscall_64+0x4c/0xa0 [ 334.661293][ T5117] ? clear_bhb_loop+0x30/0x80 [ 334.666089][ T5117] ? clear_bhb_loop+0x30/0x80 [ 334.670768][ T5117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.676931][ T5117] RIP: 0033:0x7f244196980e [ 334.681438][ T5117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 334.701562][ T5117] RSP: 002b:00007f2442924ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.710066][ T5117] RAX: ffffffffffffffda RBX: 00007f24429256c0 RCX: 00007f244196980e [ 334.719085][ T5117] RDX: 0000000000000002 RSI: 00007f2442924f90 RDI: ffffffffffffff9c [ 334.727168][ T5117] RBP: 00007f2441a37fed R08: 0000000000000000 R09: 0000000000000000 [ 334.735146][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.743117][ T5117] R13: 00007f2441c26038 R14: 00007f2441c25fa0 R15: 00007ffe910fda88 [ 334.751098][ T5117] [ 334.968190][ T5141] device syzkaller0 entered promiscuous mode [ 335.096376][ T5147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'. [ 335.267357][ T5165] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1600'. [ 335.329489][ T5171] loop0: detected capacity change from 0 to 16 [ 335.337812][ T5176] overlayfs: conflicting options: userxattr,redirect_dir=off [ 335.354078][ T5171] erofs: (device loop0): mounted with root inode @ nid 36. [ 335.402784][ T5191] FAULT_INJECTION: forcing a failure. [ 335.402784][ T5191] name failslab, interval 1, probability 0, space 0, times 0 [ 335.409658][ T5195] overlayfs: missing 'lowerdir' [ 335.421365][ T5191] CPU: 1 PID: 5191 Comm: syz.0.1611 Not tainted syzkaller #0 [ 335.421436][ T5193] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 335.428772][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 335.428793][ T5191] Call Trace: [ 335.428802][ T5191] [ 335.428809][ T5191] __dump_stack+0x21/0x24 [ 335.428834][ T5191] dump_stack_lvl+0x110/0x170 [ 335.428850][ T5191] ? __cfi_dump_stack_lvl+0x8/0x8 [ 335.444213][ T5197] FAULT_INJECTION: forcing a failure. [ 335.444213][ T5197] name failslab, interval 1, probability 0, space 0, times 0 [ 335.448118][ T5191] dump_stack+0x15/0x24 [ 335.485867][ T5191] should_fail_ex+0x3bf/0x510 [ 335.490730][ T5191] __should_failslab+0xac/0xf0 [ 335.495495][ T5191] should_failslab+0x9/0x20 [ 335.500090][ T5191] __kmem_cache_alloc_node+0x3d/0x2d0 [ 335.505478][ T5191] ? kvmalloc_node+0x28a/0x460 [ 335.510285][ T5191] ? kvmalloc_node+0x28a/0x460 [ 335.515046][ T5191] __kmalloc_node+0xa2/0x1e0 [ 335.519630][ T5191] kvmalloc_node+0x28a/0x460 [ 335.524246][ T5191] ? __cfi_kvmalloc_node+0x10/0x10 [ 335.529360][ T5191] keyctl_update_key+0x61/0x120 [ 335.534230][ T5191] __se_sys_keyctl+0x33c/0xe10 [ 335.538997][ T5191] ? __x64_sys_keyctl+0xd0/0xd0 [ 335.543842][ T5191] ? do_futex+0x2e2/0x430 [ 335.548162][ T5191] ? __cfi___sys_sendto+0x10/0x10 [ 335.553188][ T5191] ? __cfi_do_futex+0x10/0x10 [ 335.557858][ T5191] ? __se_sys_futex+0x136/0x310 [ 335.562703][ T5191] ? __this_cpu_preempt_check+0x13/0x20 [ 335.568245][ T5191] ? xfd_validate_state+0x70/0x150 [ 335.573351][ T5191] ? __kasan_check_write+0x14/0x20 [ 335.578466][ T5191] ? fpregs_restore_userregs+0x128/0x260 [ 335.584123][ T5191] __x64_sys_keyctl+0xbf/0xd0 [ 335.588807][ T5191] x64_sys_call+0x71a/0x9a0 [ 335.593323][ T5191] do_syscall_64+0x4c/0xa0 [ 335.597745][ T5191] ? clear_bhb_loop+0x30/0x80 [ 335.602438][ T5191] ? clear_bhb_loop+0x30/0x80 [ 335.607119][ T5191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.613043][ T5191] RIP: 0033:0x7f34885a8fd9 [ 335.617484][ T5191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.637081][ T5191] RSP: 002b:00007f3489397028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 335.645602][ T5191] RAX: ffffffffffffffda RBX: 00007f3488825fa0 RCX: 00007f34885a8fd9 [ 335.653630][ T5191] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000002 [ 335.661611][ T5191] RBP: 00007f3488637fed R08: 0000000000000000 R09: 0000000000000000 [ 335.670631][ T5191] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 335.678617][ T5191] R13: 00007f3488826038 R14: 00007f3488825fa0 R15: 00007ffe6dab17c8 [ 335.686595][ T5191] [ 335.690561][ T5197] CPU: 1 PID: 5197 Comm: syz.4.1613 Not tainted syzkaller #0 [ 335.697955][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 335.708021][ T5197] Call Trace: [ 335.711308][ T5197] [ 335.714227][ T5197] __dump_stack+0x21/0x24 [ 335.718554][ T5197] dump_stack_lvl+0x110/0x170 [ 335.723221][ T5197] ? __cfi_dump_stack_lvl+0x8/0x8 [ 335.728237][ T5197] dump_stack+0x15/0x24 [ 335.732383][ T5197] should_fail_ex+0x3bf/0x510 [ 335.737098][ T5197] ? security_file_alloc+0x33/0x130 [ 335.742289][ T5197] __should_failslab+0xac/0xf0 [ 335.747049][ T5197] should_failslab+0x9/0x20 [ 335.751554][ T5197] kmem_cache_alloc+0x3b/0x320 [ 335.756317][ T5197] ? __alloc_file+0x28/0x2a0 [ 335.761020][ T5197] security_file_alloc+0x33/0x130 [ 335.766105][ T5197] __alloc_file+0xb5/0x2a0 [ 335.770528][ T5197] alloc_empty_file+0x97/0x180 [ 335.775898][ T5197] path_openat+0xf4/0x2f30 [ 335.780777][ T5197] ? kasan_set_track+0x60/0x70 [ 335.785637][ T5197] ? kasan_set_track+0x4b/0x70 [ 335.790420][ T5197] ? __kasan_slab_alloc+0x72/0x80 [ 335.795446][ T5197] ? slab_post_alloc_hook+0x4f/0x2d0 [ 335.800733][ T5197] ? kmem_cache_alloc+0x166/0x320 [ 335.805835][ T5197] ? getname_flags+0xba/0x510 [ 335.810506][ T5197] ? getname+0x19/0x20 [ 335.814569][ T5197] ? do_sys_openat2+0xeb/0x820 [ 335.819420][ T5197] ? __x64_sys_openat+0x136/0x160 [ 335.824443][ T5197] ? x64_sys_call+0x783/0x9a0 [ 335.829118][ T5197] ? do_syscall_64+0x4c/0xa0 [ 335.833800][ T5197] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.841182][ T5197] ? do_filp_open+0x420/0x420 [ 335.846075][ T5197] do_filp_open+0x1ee/0x420 [ 335.850584][ T5197] ? __cfi_do_filp_open+0x10/0x10 [ 335.855610][ T5197] ? alloc_fd+0x4c1/0x570 [ 335.859934][ T5197] do_sys_openat2+0x15e/0x820 [ 335.864614][ T5197] ? __se_sys_futex+0x136/0x310 [ 335.869750][ T5197] ? do_sys_open+0xe0/0xe0 [ 335.874212][ T5197] ? __this_cpu_preempt_check+0x13/0x20 [ 335.879840][ T5197] ? xfd_validate_state+0x70/0x150 [ 335.884947][ T5197] __x64_sys_openat+0x136/0x160 [ 335.889795][ T5197] x64_sys_call+0x783/0x9a0 [ 335.894296][ T5197] do_syscall_64+0x4c/0xa0 [ 335.898735][ T5197] ? clear_bhb_loop+0x30/0x80 [ 335.903408][ T5197] ? clear_bhb_loop+0x30/0x80 [ 335.908600][ T5197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.914493][ T5197] RIP: 0033:0x7f32e436980e [ 335.918903][ T5197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.938963][ T5197] RSP: 002b:00007f32e52c9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.947471][ T5197] RAX: ffffffffffffffda RBX: 00007f32e52ca6c0 RCX: 00007f32e436980e [ 335.955533][ T5197] RDX: 0000000000000002 RSI: 00007f32e52c9f90 RDI: ffffffffffffff9c [ 335.963934][ T5197] RBP: 00007f32e4437fed R08: 0000000000000000 R09: 0000000000000000 [ 335.972423][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.980477][ T5197] R13: 00007f32e4626038 R14: 00007f32e4625fa0 R15: 00007ffc188220c8 [ 335.988446][ T5197] [ 336.011989][ T5201] netlink: 'syz.1.1617': attribute type 8 has an invalid length. [ 336.135444][ T5225] FAULT_INJECTION: forcing a failure. [ 336.135444][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 336.166365][ T5225] CPU: 0 PID: 5225 Comm: syz.1.1630 Not tainted syzkaller #0 [ 336.173796][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 336.183859][ T5225] Call Trace: [ 336.187141][ T5225] [ 336.190073][ T5225] __dump_stack+0x21/0x24 [ 336.194406][ T5225] dump_stack_lvl+0x110/0x170 [ 336.199102][ T5225] ? __cfi_dump_stack_lvl+0x8/0x8 [ 336.204116][ T5225] ? pcpu_memcg_post_alloc_hook+0x17e/0x270 [ 336.210007][ T5225] dump_stack+0x15/0x24 [ 336.214156][ T5225] should_fail_ex+0x3bf/0x510 [ 336.218836][ T5225] __should_failslab+0xac/0xf0 [ 336.223627][ T5225] should_failslab+0x9/0x20 [ 336.228132][ T5225] __kmem_cache_alloc_node+0x3d/0x2d0 [ 336.234040][ T5225] ? selinux_tun_dev_alloc_security+0x51/0x140 [ 336.240312][ T5225] ? selinux_tun_dev_alloc_security+0x51/0x140 [ 336.246743][ T5225] kmalloc_trace+0x29/0xb0 [ 336.251195][ T5225] selinux_tun_dev_alloc_security+0x51/0x140 [ 336.261193][ T5225] security_tun_dev_alloc_security+0x73/0xa0 [ 336.267210][ T5225] tun_net_init+0x1a7/0x530 [ 336.272180][ T5225] register_netdevice+0x42d/0x1550 [ 336.277356][ T5225] ? dev_addr_mod+0x2f3/0x3b0 [ 336.282034][ T5225] ? __cfi_register_netdevice+0x10/0x10 [ 336.287715][ T5225] ? tun_net_initialize+0x154/0x430 [ 336.292943][ T5225] ? tun_setup+0x2b0/0x2b0 [ 336.297398][ T5225] tun_set_iff+0x831/0xee0 [ 336.301913][ T5225] __tun_chr_ioctl+0x88c/0x1ef0 [ 336.307030][ T5225] ? tun_flow_create+0x320/0x320 [ 336.311971][ T5225] ? __kasan_check_write+0x14/0x20 [ 336.317106][ T5225] tun_chr_ioctl+0x2a/0x40 [ 336.321630][ T5225] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 336.326741][ T5225] __se_sys_ioctl+0x12f/0x1b0 [ 336.331510][ T5225] __x64_sys_ioctl+0x7b/0x90 [ 336.336121][ T5225] x64_sys_call+0x58b/0x9a0 [ 336.340726][ T5225] do_syscall_64+0x4c/0xa0 [ 336.345158][ T5225] ? clear_bhb_loop+0x30/0x80 [ 336.349851][ T5225] ? clear_bhb_loop+0x30/0x80 [ 336.354532][ T5225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.360425][ T5225] RIP: 0033:0x7fb29e3a8fd9 [ 336.364944][ T5225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.384637][ T5225] RSP: 002b:00007fb29f208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.394096][ T5225] RAX: ffffffffffffffda RBX: 00007fb29e625fa0 RCX: 00007fb29e3a8fd9 [ 336.402770][ T5225] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 336.410928][ T5225] RBP: 00007fb29e437fed R08: 0000000000000000 R09: 0000000000000000 [ 336.418961][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.427014][ T5225] R13: 00007fb29e626038 R14: 00007fb29e625fa0 R15: 00007fff708bd928 [ 336.435344][ T5225] [ 336.536753][ T5226] syz.4.1623 (5226): drop_caches: 2 [ 336.549430][ T5233] syz.4.1623 (5233): drop_caches: 2 [ 336.881836][ T2654] smpboot: CPU 1 is now offline [ 336.990716][ T5279] loop4: detected capacity change from 0 to 512 [ 337.016204][ T5279] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 337.046238][ T5279] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 337.163007][ T5305] cgroup: Unexpected value for 'all' [ 337.559981][ T5357] loop0: detected capacity change from 0 to 33792 [ 337.590748][ T5357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.647845][ T5357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.751862][ T5366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1691'. [ 338.465155][ T287] EXT4-fs (loop0): unmounting filesystem. [ 338.475069][ T5365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'. [ 338.532492][ T347] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 338.675005][ T5374] loop4: detected capacity change from 0 to 256 [ 338.721951][ T347] usb 6-1: Using ep0 maxpacket: 32 [ 338.734637][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.781986][ T2654] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 338.790935][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.391966][ T347] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.415410][ T347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.394611][ T347] usb 6-1: config 0 descriptor?? [ 341.413499][ T2654] usb 1-1: Using ep0 maxpacket: 32 [ 341.418889][ T347] usb 6-1: can't set config #0, error -71 [ 341.425555][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.593776][ T5378] incfs: mount failed -22 [ 341.619763][ T347] usb 6-1: USB disconnect, device number 20 [ 341.648715][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.681417][ T2654] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.703283][ T2654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.722248][ T2654] usb 1-1: config 0 descriptor?? [ 341.737771][ T2654] usb 1-1: can't set config #0, error -71 [ 341.757417][ T2654] usb 1-1: USB disconnect, device number 42 [ 342.001951][ T309] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 342.124337][ T2654] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 342.191959][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 342.199987][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.218225][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.898578][ T309] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 342.918318][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.934801][ T309] usb 2-1: config 0 descriptor?? [ 342.944092][ T309] hub 2-1:0.0: USB hub found [ 342.981956][ T2654] usb 1-1: Using ep0 maxpacket: 32 [ 342.992449][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.006342][ T2654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.016444][ T2654] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.025931][ T2654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.037507][ T2654] usb 1-1: config 0 descriptor?? [ 343.046485][ T2654] hub 1-1:0.0: USB hub found [ 343.122693][ T5399] loop4: detected capacity change from 0 to 33792 [ 343.142905][ T5399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 343.155134][ T309] hub 2-1:0.0: 1 port detected [ 343.245406][ T2654] hub 1-1:0.0: 1 port detected [ 343.261866][ T5399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.033789][ T5409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1705'. [ 344.356803][ T290] EXT4-fs (loop4): unmounting filesystem. [ 344.470769][ T5417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1708'. [ 344.647046][ T5411] loop0: detected capacity change from 0 to 256 [ 344.741955][ T19] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 344.961235][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 344.973788][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.427646][ T309] usb 2-1: USB disconnect, device number 51 [ 349.394996][ T2654] usb 1-1: USB disconnect, device number 43 [ 349.515259][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.559705][ T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.283107][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.304966][ T19] usb 6-1: config 0 descriptor?? [ 350.316433][ T19] usb 6-1: can't set config #0, error -71 [ 351.024640][ T19] usb 6-1: USB disconnect, device number 21 [ 351.236775][ T5451] loop0: detected capacity change from 0 to 33792 [ 351.285877][ T5451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.342203][ T5451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.402065][ T19] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 352.110395][ T5458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1718'. [ 352.463193][ T287] EXT4-fs (loop0): unmounting filesystem. [ 352.491998][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 352.518434][ T19] usb 6-1: device descriptor read/all, error -71 [ 353.368735][ T5471] fuse: Unknown parameter '0x0000000000000003' [ 354.202003][ T3379] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 354.210780][ T309] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 355.405419][ T3379] usb 1-1: Using ep0 maxpacket: 32 [ 355.411728][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 355.422837][ T3379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.430995][ T309] usb 5-1: unable to read config index 0 descriptor/all [ 357.504181][ T5493] loop0: detected capacity change from 0 to 33792 [ 360.412645][ T309] usb 5-1: can't read configurations, error -71 [ 360.426421][ T3379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.736437][ T5503] fuse: Unknown parameter '0x0000000000000003' [ 360.754534][ T5505] loop4: detected capacity change from 0 to 256 [ 360.779048][ T3379] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.859744][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.878288][ T3379] usb 1-1: config 0 descriptor?? [ 360.888846][ T3379] usb 1-1: can't set config #0, error -71 [ 360.897167][ T3379] usb 1-1: USB disconnect, device number 44 [ 362.766502][ T19] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 362.847931][ T3379] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 365.421033][ T19] usb 2-1: device descriptor read/all, error -71 [ 365.836554][ T6] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 366.623393][ T3379] usb 1-1: device not accepting address 45, error -71 [ 366.646905][ T5539] fuse: Unknown parameter '0x0000000000000003' [ 367.217788][ T5550] incfs: mount failed -22 [ 367.223121][ T5550] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 367.231349][ T5550] SELinux: failed to load policy [ 367.944673][ T5549] EXT4-fs: error -4 creating inode table initialization thread [ 367.954946][ T5549] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 369.332013][ T315] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 369.350269][ T5577] fuse: Unknown parameter '0x0000000000000003' [ 369.532145][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 369.539870][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.552968][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.310741][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.320169][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.332338][ T315] usb 5-1: config 0 descriptor?? [ 370.340352][ T315] hub 5-1:0.0: USB hub found [ 370.372023][ T3379] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 370.380275][ T6] usb 6-1: device descriptor read/64, error -71 [ 370.540607][ T315] hub 5-1:0.0: 1 port detected [ 370.573066][ T3379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.583922][ T3379] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 370.594210][ T3379] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 370.604435][ T3379] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.617868][ T3379] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 370.627544][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.639072][ T5569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.647091][ T5569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.655479][ T3379] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 370.681996][ T6] usb 6-1: Using ep0 maxpacket: 32 [ 370.688884][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.700295][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.710419][ T6] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.720193][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.731403][ T6] usb 6-1: config 0 descriptor?? [ 370.737798][ T6] hub 6-1:0.0: USB hub found [ 370.821976][ T19] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 370.882805][ T5569] loop0: detected capacity change from 0 to 8192 [ 370.919417][ T3379] usb 1-1: USB disconnect, device number 46 [ 370.937879][ T6] hub 6-1:0.0: 1 port detected [ 371.012093][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 371.018815][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.056923][ T5588] loop4: detected capacity change from 0 to 256 [ 371.077108][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.107983][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 371.126552][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.149447][ T19] usb 2-1: config 0 descriptor?? [ 371.164058][ T19] hub 2-1:0.0: USB hub found [ 371.397137][ T19] hub 2-1:0.0: 1 port detected [ 374.572841][ T19] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 374.580827][ T19] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 374.592478][ T6] usb 6-1: USB disconnect, device number 24 [ 374.598887][ T315] usb 5-1: USB disconnect, device number 45 [ 374.722479][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 374.732131][ T5609] fuse: Unknown parameter '0x0000000000000003' [ 374.742394][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 376.195759][ T5617] fuse: Unknown parameter 'grou00000000000000000000' [ 376.232450][ T19] usb 2-1: USB disconnect, device number 54 [ 376.335589][ T5622] loop4: detected capacity change from 0 to 33792 [ 377.066877][ T5622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 377.153525][ T5622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 379.398723][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1774'. [ 380.397164][ T6] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 380.404894][ T315] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 381.522402][ T5651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1782'. [ 381.534376][ T5653] fuse: Unknown parameter 'fd0x0000000000000003' [ 383.415824][ T5660] fuse: Unknown parameter 'grou00000000000000000000' [ 384.244214][ T5656] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 384.251816][ T5656] SELinux: failed to load policy [ 384.259045][ T290] EXT4-fs (loop4): unmounting filesystem. [ 384.414983][ T5677] loop0: detected capacity change from 0 to 33280 [ 384.436059][ T5677] EXT4-fs: Ignoring removed bh option [ 384.453520][ T5677] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 384.571987][ T3379] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 384.703622][ T5670] loop4: detected capacity change from 0 to 131072 [ 384.762014][ T315] usb 6-1: device descriptor read/64, error -71 [ 384.769447][ T3379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.468755][ T3379] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.488354][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.510047][ T3379] usb 2-1: config 0 descriptor?? [ 385.521959][ T6] usb 1-1: device descriptor read/64, error -71 [ 385.587001][ T5682] loop4: detected capacity change from 0 to 256 [ 385.595757][ T5684] fuse: Unknown parameter 'fd0x0000000000000003' [ 385.981142][ T3379] usbhid 2-1:0.0: can't add hid device: -71 [ 385.997469][ T3379] usbhid: probe of 2-1:0.0 failed with error -71 [ 386.004691][ T315] usb 6-1: Using ep0 maxpacket: 32 [ 386.014118][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.029950][ T3379] usb 2-1: USB disconnect, device number 55 [ 386.036828][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.050764][ T315] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 386.060756][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.071966][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 386.078402][ T5689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 386.091466][ T315] usb 6-1: config 0 descriptor?? [ 386.100133][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.112225][ T315] hub 6-1:0.0: USB hub found [ 386.124150][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.146918][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 386.166815][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.190978][ T6] usb 1-1: config 0 descriptor?? [ 386.203723][ T6] hub 1-1:0.0: USB hub found [ 386.299030][ T315] hub 6-1:0.0: 1 port detected [ 386.403849][ T6] hub 1-1:0.0: 1 port detected [ 408.372198][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 486.141927][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 486.149100][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5689 [ 486.156406][ C0] (detected by 0, t=10002 jiffies, g=31281, q=206 ncpus=1) [ 486.163734][ C0] task:syz.2.1796 state:R running task stack:23952 pid:5689 ppid:291 flags:0x00004000 [ 486.174528][ C0] Call Trace: [ 486.177867][ C0] [ 486.180702][ C0] sched_show_task+0x391/0x550 [ 486.185502][ C0] ? __kasan_check_write+0x14/0x20 [ 486.190616][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 486.196985][ C0] ? __cfi_sched_show_task+0x10/0x10 [ 486.202301][ C0] ? wq_watchdog_touch+0x100/0x190 [ 486.207736][ C0] print_other_cpu_stall+0xd8d/0x10c0 [ 486.213288][ C0] ? print_cpu_stall+0x590/0x590 [ 486.218372][ C0] ? cpufreq_acct_update_power+0xc0/0x450 [ 486.224239][ C0] rcu_sched_clock_irq+0x7bc/0x1310 [ 486.229544][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 486.235183][ C0] ? debug_smp_processor_id+0x17/0x20 [ 486.240560][ C0] ? hrtimer_run_queues+0x166/0x420 [ 486.245778][ C0] update_process_times+0x148/0x1b0 [ 486.251081][ C0] tick_sched_timer+0x17c/0x240 [ 486.255970][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 486.261358][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 486.266725][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 486.271849][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 486.277932][ C0] hrtimer_interrupt+0x3ad/0x8c0 [ 486.282901][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 486.288890][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 486.294544][ C0] [ 486.297526][ C0] [ 486.300456][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 486.306438][ C0] RIP: 0010:kasan_check_range+0x2b/0x2a0 [ 486.312237][ C0] Code: 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02 00 00 49 89 f8 49 c1 e8 2f <41> 81 f8 ff ff 01 00 0f 82 09 02 00 00 49 bd 01 00 00 00 00 fc ff [ 486.332335][ C0] RSP: 0018:ffffc900036df948 EFLAGS: 00000a06 [ 486.339124][ C0] RAX: ffffffff84186f01 RBX: ffffc900036dfa88 RCX: ffffffff84186f5d [ 486.347098][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888112186540 [ 486.355182][ C0] RBP: ffffc900036df970 R08: 000000000001ffff R09: 1ffff11022430ca8 [ 486.363245][ C0] R10: dffffc0000000000 R11: ffffed1022430ca9 R12: ffff888112186540 [ 486.371483][ C0] R13: 0000000000000000 R14: 1ffff920006dbf51 R15: 1ffff11022430ca8 [ 486.379789][ C0] ? bpf_test_timer_continue+0xb1/0x4a0 [ 486.385428][ C0] ? bpf_test_timer_continue+0x10d/0x4a0 [ 486.391073][ C0] __kasan_check_read+0x11/0x20 [ 486.395919][ C0] bpf_test_timer_continue+0x10d/0x4a0 [ 486.401425][ C0] bpf_test_run+0x456/0x940 [ 486.405968][ C0] ? dst_hold+0xc0/0xc0 [ 486.410899][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 486.416451][ C0] ? bpf_prog_test_run_skb+0x7e5/0x18a0 [ 486.422565][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 486.428994][ C0] bpf_prog_test_run_skb+0xd64/0x18a0 [ 486.434754][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 486.441101][ C0] bpf_prog_test_run+0x3b4/0x5c0 [ 486.446431][ C0] ? bpf_prog_query+0x270/0x270 [ 486.451826][ C0] ? selinux_bpf+0xce/0xf0 [ 486.459112][ C0] ? security_bpf+0x93/0xb0 [ 486.467051][ C0] __sys_bpf+0x5ee/0x850 [ 486.472474][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 486.478897][ C0] ? tick_program_event+0xa3/0x120 [ 486.484444][ C0] ? handle_softirqs+0x541/0x5f0 [ 486.490159][ C0] __x64_sys_bpf+0x7c/0x90 [ 486.494584][ C0] x64_sys_call+0x488/0x9a0 [ 486.499126][ C0] do_syscall_64+0x4c/0xa0 [ 486.504359][ C0] ? clear_bhb_loop+0x30/0x80 [ 486.510160][ C0] ? clear_bhb_loop+0x30/0x80 [ 486.518029][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.524826][ C0] RIP: 0033:0x7f083c7a8fd9 [ 486.529338][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.550779][ C0] RSP: 002b:00007f083d6ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.559392][ C0] RAX: ffffffffffffffda RBX: 00007f083ca26090 RCX: 00007f083c7a8fd9 [ 486.567808][ C0] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 486.576777][ C0] RBP: 00007f083c837fed R08: 0000000000000000 R09: 0000000000000000 [ 486.586088][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.594233][ C0] R13: 00007f083ca26128 R14: 00007f083ca26090 R15: 00007ffc7f0115b8 [ 486.603446][ C0] [ 486.606484][ C0] rcu: rcu_preempt kthread starved for 9970 jiffies! g31281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 486.618128][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 486.629050][ C0] rcu: RCU grace-period kthread stack dump: [ 486.635129][ C0] task:rcu_preempt state:R running task stack:28320 pid:14 ppid:2 flags:0x00004000 [ 486.646349][ C0] Call Trace: [ 486.649826][ C0] [ 486.652814][ C0] __schedule+0xcb3/0x1700 [ 486.657870][ C0] ? release_firmware_map_entry+0x190/0x190 [ 486.666113][ C0] ? __mod_timer+0x865/0xc00 [ 486.673336][ C0] schedule+0xbd/0x170 [ 486.677789][ C0] schedule_timeout+0x159/0x340 [ 486.684130][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 486.691484][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 486.697404][ C0] ? __cfi_process_timeout+0x10/0x10 [ 486.702895][ C0] ? prepare_to_swait_event+0x30f/0x330 [ 486.708586][ C0] rcu_gp_fqs_loop+0x2ed/0x1100 [ 486.713477][ C0] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 486.720255][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 486.726168][ C0] ? rcu_gp_init+0xf30/0xf30 [ 486.730789][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 486.736670][ C0] ? finish_swait+0x185/0x1c0 [ 486.741494][ C0] rcu_gp_kthread+0x99/0x390 [ 486.746094][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 486.751318][ C0] ? try_to_wake_up+0x622/0x1250 [ 486.756263][ C0] ? __kasan_check_read+0x11/0x20 [ 486.761388][ C0] ? __kthread_parkme+0x13a/0x180 [ 486.766443][ C0] kthread+0x281/0x320 [ 486.770544][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 486.775832][ C0] ? __cfi_kthread+0x10/0x10 [ 486.780596][ C0] ret_from_fork+0x1f/0x30 [ 486.785194][ C0] [ 486.788375][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 486.794793][ C0] CPU: 0 PID: 5689 Comm: syz.2.1796 Not tainted syzkaller #0 [ 486.802397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 486.812452][ C0] RIP: 0010:kasan_check_range+0x2b/0x2a0 [ 486.818110][ C0] Code: 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d 02 00 00 49 89 f8 49 c1 e8 2f <41> 81 f8 ff ff 01 00 0f 82 09 02 00 00 49 bd 01 00 00 00 00 fc ff [ 486.838567][ C0] RSP: 0018:ffffc900036df948 EFLAGS: 00000a06 [ 486.845593][ C0] RAX: ffffffff84186f01 RBX: ffffc900036dfa88 RCX: ffffffff84186f5d [ 486.853571][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888112186540 [ 486.861741][ C0] RBP: ffffc900036df970 R08: 000000000001ffff R09: 1ffff11022430ca8 [ 486.869811][ C0] R10: dffffc0000000000 R11: ffffed1022430ca9 R12: ffff888112186540 [ 486.877844][ C0] R13: 0000000000000000 R14: 1ffff920006dbf51 R15: 1ffff11022430ca8 [ 486.886034][ C0] FS: 00007f083d6ee6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 486.894978][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.901582][ C0] CR2: 00007ffc18820ce0 CR3: 000000011b49d000 CR4: 00000000003506b0 [ 486.909575][ C0] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 486.917568][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 486.925602][ C0] Call Trace: [ 486.928893][ C0] [ 486.931823][ C0] __kasan_check_read+0x11/0x20 [ 486.936797][ C0] bpf_test_timer_continue+0x10d/0x4a0 [ 486.942323][ C0] bpf_test_run+0x456/0x940 [ 486.946832][ C0] ? dst_hold+0xc0/0xc0 [ 486.951010][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 486.956260][ C0] ? bpf_prog_test_run_skb+0x7e5/0x18a0 [ 486.961883][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 486.967284][ C0] bpf_prog_test_run_skb+0xd64/0x18a0 [ 486.972680][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 486.978501][ C0] bpf_prog_test_run+0x3b4/0x5c0 [ 486.983447][ C0] ? bpf_prog_query+0x270/0x270 [ 486.988360][ C0] ? selinux_bpf+0xce/0xf0 [ 486.992795][ C0] ? security_bpf+0x93/0xb0 [ 486.997305][ C0] __sys_bpf+0x5ee/0x850 [ 487.001550][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 487.006924][ C0] ? tick_program_event+0xa3/0x120 [ 487.012062][ C0] ? handle_softirqs+0x541/0x5f0 [ 487.017012][ C0] __x64_sys_bpf+0x7c/0x90 [ 487.021422][ C0] x64_sys_call+0x488/0x9a0 [ 487.025937][ C0] do_syscall_64+0x4c/0xa0 [ 487.030361][ C0] ? clear_bhb_loop+0x30/0x80 [ 487.035034][ C0] ? clear_bhb_loop+0x30/0x80 [ 487.040364][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.046371][ C0] RIP: 0033:0x7f083c7a8fd9 [ 487.050922][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.070740][ C0] RSP: 002b:00007f083d6ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.079415][ C0] RAX: ffffffffffffffda RBX: 00007f083ca26090 RCX: 00007f083c7a8fd9 [ 487.087394][ C0] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 487.095361][ C0] RBP: 00007f083c837fed R08: 0000000000000000 R09: 0000000000000000 [ 487.104006][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.112005][ C0] R13: 00007f083ca26128 R14: 00007f083ca26090 R15: 00007ffc7f0115b8 [ 487.119977][ C0] [ 567.092030][ C0] ip6_tunnel: K xmit: Local address not yet configured!