last executing test programs: 3m23.115443692s ago: executing program 3 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) getsockopt$sock_int(r0, 0x1, 0x4b, 0x0, &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r6 = socket$packet(0x11, 0x3, 0x300) close(0x3) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) write(r8, &(0x7f0000000480), 0xffffff4a) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000007}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x5e, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) fchdir(r0) write(r1, &(0x7f0000000000)='7', 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m22.263630643s ago: executing program 3 (id=48): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001980)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000019c0)={@loopback={0x0, 0x3fc}, 0x0, r1}) 3m22.205423214s ago: executing program 3 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace/events/sched/sched_switch/trigger\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = dup(r5) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) r8 = timerfd_create(0x0, 0x0) readv(r8, &(0x7f0000000000), 0x0) r9 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000002d80)=[{{&(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000340)="943dcbbebffd9f5a3e6ca4836617f4734284fed0ab1c6205bc28c4dd5b67def41b", 0x21}, {&(0x7f0000000380)="df81657c6d7655afa849eecc8c84b13398", 0x11}, {&(0x7f00000003c0)="770efe47ef1d0aa92fea9aaf839c7e", 0xf}, {&(0x7f00000004c0)="5a9a8d1227552ba79a29393a6764054fd52d51eaa00014b05a61566d5ff44597678925d037c30ba4009e1cc8d2ea6d166935bd8e8122693351667b2501ad56069ab3243cbbcf17d850cb6166ac6f5da8b51afd0ba5deb0ce516c8ce741a5c3e88400f051cdbbbcb8ef994db07611a211b4460cf5e0426562ac0e29a25b76a8a642a5755def84b69e57f47917c54d12731344ad471ac2972e634de359b7413e961727f2637557ec3e468cb5e395a3dee7e84e61c314034c3624f18894d01f66d854769ac98a3eb37fac449cc1dfda9f200cf361f0", 0xd4}, {&(0x7f00000005c0)="a09994ffa19a16f88a1c9db1145eeb94ebc9f7a2cad64bb3e442e867fb471f33760dba84d8c91c85a9722635c9cdca0474e15fcbceb1ac7920ea919d19b93d78ae3d24c193efd2738aa16f1c6cb0d3bb82ad872b5a2de8f3afa40169009a1509c9012327c67876c5bf6a3121199101614febd173b4bf79e590c2c24c58e9bda7dd9c415e5254f0ecc029", 0x8a}, {&(0x7f0000000680)="77597f132f5eb7fc836edf0048131a3905034318ddb2faea8fbc858c6d8d46c026cb057b1d469fc710d5196fd50cff31a8a9408b46c92fa401ad49792e1b33", 0x3f}, {&(0x7f00000006c0)="66401af457e1b99ce09f5c45b906b7bf67d30181efc5c8d48f374fbf554df346cade5766a6e6b20127a57247e2492dba4008156cbe98847033544602fe3a317fd0c01fff19199b7d91e67e5f8d796dc5d0d8d1e7c4f3f5ce710b49b2c3629c5235c0adaaa64b7ce06ae1998c4059eb6208d032a05d6b28f0191ea350a9918cfcc2777ee9412499abfa3767fcd6fa60cbc9b9948d0990d69b5f495f4d4b58cd2699bbfc99418ed5ef85c4075a4f2cc3c0ebfcfe6e6ef17e724e402a4fd573ad14654207d67cc5b65a3fc1ee7aab87408b0ad975", 0xd3}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="88d1ed471e5d95dd3cca", 0xa}, {&(0x7f0000002800)="69f3bf25c29d2b1e13648bbbc6f140b30f8cd4cb690431a5f1ae1e6fc05e338e83d17da9bd0052c3c1e91ce93a460fcea3396a007d1cd92ec90e42a1e512d17c7f4118f8b2de3c409f4d0d50632d917743ba482dd2e520bb5fa011a60cc5355e9e954ce0a67ba5373a514ecd9e406affa86bc5f53acd30b6bd4b10cc5eb7f71506f10038c4f5dab35db19a8ec0bd182b94869662c1da4d5f9696888cb00597f3abc67fbc588406a4a1b91b8a1c71b83bedacceebd106d5842538e62a1977e67ad759255dd57c537593087a8434d8a5078843b910aa0557afb6b15a0704db1f61bb45238d35bb4c6fa19c1dc2e1ca1e41ef4385ec", 0xf4}], 0xa}}, {{&(0x7f00000029c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002a00), 0x0, &(0x7f0000002cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1126}}], 0xc0}}], 0x2, 0x4008880) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) mount$overlay(0x0, &(0x7f0000000080)='./trace/events/sched/sched_switch/trigger\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './trace/events/sched/sched_switch/trigger'}}, {@default_permissions}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nfc\x00'}}, {@smackfstransmute}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, 'tracefs\x00'}}]}) write$input_event(r0, &(0x7f0000001780)={{}, 0x1f, 0x28e, 0x5}, 0x18) 3m20.966669424s ago: executing program 3 (id=53): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x3010050, &(0x7f0000000140)=ANY=[], 0x41, 0x14fe, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000001680)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001740)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001800)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001880), 0x651, 0x0) recvmmsg(r2, &(0x7f00000018c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000500"/24], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000019c0)={'veth0_to_team\x00', &(0x7f0000001a00)=@ethtool_channels={0x3c, 0x1ff, 0x0, 0x40000, 0x0, 0x2}}) io_uring_setup(0x71de, &(0x7f0000001880)={0x0, 0x411c, 0x0, 0xfffffffd, 0x108}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000001a40)=0x8, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000001a80)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000002b00)=0x2, 0x4) connect$inet(r5, &(0x7f0000002b40)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000002b80)=[@mss={0x2, 0x52}, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @timestamp, @sack_perm], 0x8) sendmsg(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002c40)="c8986d5d4000fd3374e15671de46ce993ae088c84f0cc1a1d48675f64443b0b9838879d94971c6f6297967d34628f4974fcf11bac2ead4e49f3a37504dec2845c6f070bfd38e76a711d6c43bdcaff878afd6e8395f65ffc0ece5366a", 0x5c}], 0x1}, 0x4000040) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002cc0), 0x4) 3m19.411696972s ago: executing program 3 (id=60): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@journal_path={'journal_path', 0x3d, './file1'}}]}, 0x1, 0x4c9, &(0x7f0000000b80)="$eJzs3M9rHFUcAPDv7CZp2sYm1lptbTVaxeKPpEl/2IMHFQVBBUEP9RiTtNZuG2kitCVoFKnngnfxKHj05M2LqAfxD1DwKIWiQWgqCJHZmUk3+yO/27TJ5wObfW/mzbz3Zt7bvJ23MwFsWr3pnySiKyJ+i4juLDo/QW/2NjM9OXxjenI4idnZt/5KqumuT08OF0mL7bbnkYOliNJnSbyQNOY7fvHSmaFKZfR8Hu+fOPtB//jFS8+ePjt0avTU6LnB48ePHB547tjg0XnbNdlVg61NlqX1ur73o7F9e15958obwyeuvPvTN+m+du/P1tfWY1E3GkrxWrNkvelR+3u2qn7dE0vO7O5wT004aVvHgrAs5YhIT1d7tf93RzlunrzueOXTdS0ccEul/5u2tF49NQtsYEmsdwmA9VH8o0+//xav+O82DT7uANdejOjIwzPTk8Mzc9cB2qKUL29vtXF59fn3RsSJqX+/TF+x3OsQAAArUB3bPFM3/qsqxe7qezbXsSOfQ+mJiHsjYmdE3BcRuyLi/ohq2gci4sFs49nuJebfWxdvHP+UrjYt8xpJx3/P14z9Zmrqn7/1lPNYuVr/9uTk6croofyYHIz2LWl8YIE8vn+5o+W62vFf+krzL8aCeQGutmUX6OZ2MjI0MbRWB+HaJxF725rVP5mbCUhbwJ6I2Lu8Xe8oAqef+npfq0SL138BazDPNPtVxJPZ+Z+KuvoXkhbzk2kbPzZ4tL8zKqOH+otW0ejnXy+/2Sr/VdV/DaTnf9v89l+XovufJJuvbY9KZfT8eP0eFj8Jl3//vOV3mmW0/zlp++9I3q7OWf/yXrbswtDExPmBiI7k9Wo87yydkS4fvLnthTxepE/rf/BA8/6/M98mrf9DEZE24v0ROx6OiEfysj8aEY9FxIEF6v/jS4+/v0D9k0hiXc//SNPPv7n235PUztevIFA+88N3rebtl3b+j8RU9bM2U/38W8RSC7jKwwcAAAB3hVJEdEVS6svCvV1RKvX1Zb/h3xXbSpWx8YmnT459eG4ku0egJ9pLxZWu7prroQPJVL7HLD6YXysu1h/Orxt/Ud5ajfcNj1VG1rnusNltn9//o+j/qT/X4PctwB2u9RTOArcGABtCff8vrVM5gNtvKb+j8V0ANqYm/b/ZMzSADcjzWmDzatb/P66LN4z/jRBgQ2js/380eWQdsBEZ/8Pmpf/D5qX/w6a0mvv6Vx4obhZYMHFRxIuXzsw2pOlc8h3+myVQPB7mVua1NW4uiVI10BV3QN1XEuguAp0LJI6Ib1edV3kNypz2mNt7fGoeOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAX+z8AAP//1Nnf4g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000023a000/0x1000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000011c0)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001200)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4150002800000000000000000100000100"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000651000/0x400000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x121242, 0x0) munlockall() mkdir(&(0x7f0000000780)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000001100)={0xc, 0xffffffffffffffff, 0x4, 0x40, 0x5, 0xfffffffffe000001}) r6 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000880)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 3m19.262853086s ago: executing program 3 (id=62): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x80000003, 0x1, 0x13, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000500)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) rmdir(&(0x7f0000000600)='./cgroup/../file0\x00') socket(0x10, 0x800, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x80800, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002", @ANYRES64, @ANYRES64], 0x0) syz_usb_ep_read(r6, 0x2, 0x1f, &(0x7f0000000040)=""/31) syz_usb_ep_write(r6, 0x81, 0xffffff87, &(0x7f0000000080)='USBS\x00\x00\x00\x00\x00\x00\x00\x00\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) 3m19.172835078s ago: executing program 32 (id=62): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x80000003, 0x1, 0x13, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000500)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) rmdir(&(0x7f0000000600)='./cgroup/../file0\x00') socket(0x10, 0x800, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x80800, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000200000040c605001000000000000109022000010100803209040000020806500007058102000200070502020002", @ANYRES64, @ANYRES64], 0x0) syz_usb_ep_read(r6, 0x2, 0x1f, &(0x7f0000000040)=""/31) syz_usb_ep_write(r6, 0x81, 0xffffff87, &(0x7f0000000080)='USBS\x00\x00\x00\x00\x00\x00\x00\x00\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) 1m13.881002303s ago: executing program 4 (id=493): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000002380)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x4, 0x0, 0x308}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x88}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000b2f7000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002680)=@bpf_tracing={0x1a, 0xf, &(0x7f0000002740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000027c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000002340)={@multicast2, @loopback, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='off', 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000023c0), &(0x7f0000002400)=0x5) write(r5, &(0x7f0000000180)='on\n', 0x3) 1m13.311537647s ago: executing program 4 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x7, 0x1, 0x7, 0x40000000009, 0x40000000080a8c, 0x9], 0x6000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m13.17380335s ago: executing program 4 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000004c0)='./file0\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x5592, &(0x7f0000000900)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0xf0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b9862f000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m11.217133458s ago: executing program 4 (id=503): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x16) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) syz_mount_image$f2fs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x50, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/344], 0x4, 0x553a, &(0x7f0000000640)="$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") setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005b80)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000005bc0)='./mnt\x00', 0x0, 0x8410, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000005c80), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000005cc0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000005d00)=@arena={0x21, 0x0, 0x0, 0x30, 0x400, r3, 0x3, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000005c00), 0x59fc02, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000005c40)={0xffffffffffffaa72, 0x5, 0x80000000}) syz_mount_image$ext4(&(0x7f0000005d80)='ext4\x00', &(0x7f0000005dc0)='./file3\x00', 0x4010, &(0x7f0000005e00), 0x2, 0xbd8, &(0x7f0000005e40)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") openat(0xffffffffffffff9c, &(0x7f0000006a40)='./file1\x00', 0xa0242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000006a80)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000006ac0)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000006b00)='./file1\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x1) 1m10.114334375s ago: executing program 4 (id=511): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x9) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/18, 0x12}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pptp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0}}, 0x2004c8d4) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffff8, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f00000001c0)=0x7, 0x4) sendmmsg$inet(r7, &(0x7f0000000200)=[{{&(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2}}}], 0x20}}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000340)={0x4}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.837443623s ago: executing program 4 (id=516): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)="70bf", 0x2}], 0x2, 0xff, 0x3) write$selinux_create(r5, &(0x7f0000000280)=@access={'system_u:object_r:anacron_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfff}, 0x49) syz_ublk_add_dev(r3, 0x0, 0x0, r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r2, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m8.980968933s ago: executing program 33 (id=516): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)="70bf", 0x2}], 0x2, 0xff, 0x3) write$selinux_create(r5, &(0x7f0000000280)=@access={'system_u:object_r:anacron_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfff}, 0x49) syz_ublk_add_dev(r3, 0x0, 0x0, r4, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r2, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.126926691s ago: executing program 1 (id=704): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80003, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000019300)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019380), 0x0, 0x0) read$msr(r3, &(0x7f00000193c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f00000323c0)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000032400)={0x3, 0x0, &(0x7f0000032440)={&(0x7f0000032480)=ANY=[@ANYBLOB="0203000211000000000000000000000003000800800000007800000000000000000002000000000005000600000000000a00000000000000fc02000000b5d900000000000000000000000000000000000200010000000000000009000000006005000500000000000a000000"], 0x88}, 0x1, 0x7}, 0x0) 4.406995233s ago: executing program 1 (id=708): r0 = syz_open_procfs(0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x81b, &(0x7f0000000100)={0x0, 0x30b5, 0x400, 0x4001002, 0x372}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0x1, 0x3600, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)}], 0x1) 3.29896673s ago: executing program 6 (id=718): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x28, 0x10, 0x801, 0x8709d27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050805}, 0x0) 2.687179775s ago: executing program 5 (id=722): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000540)='7', 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) io_setup(0x43, &(0x7f0000000580)) 2.629579667s ago: executing program 6 (id=724): syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 2.373483762s ago: executing program 2 (id=726): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xb, &(0x7f0000002a80)) pipe2$9p(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x5) write$eventfd(0xffffffffffffffff, 0x0, 0x0) 2.341311683s ago: executing program 6 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 2.319401384s ago: executing program 2 (id=728): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2, 0x40000000}, 0x10) 2.255112176s ago: executing program 6 (id=729): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f0000000180)="fe", 0xfdef) read$watch_queue(r0, &(0x7f00000001c0)=""/221, 0xdd) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 2.254994996s ago: executing program 2 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) socket$inet(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='common_pid > 0', 0xe) 2.254874756s ago: executing program 1 (id=731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1008, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.107761919s ago: executing program 5 (id=733): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000009c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000a40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000000ac0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000b00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000b80)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f0000000c40), 0x10106, 0x2, 0x0) 1.921976483s ago: executing program 6 (id=734): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.909501464s ago: executing program 6 (id=735): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) 1.367572127s ago: executing program 2 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70"], 0xcc}}, 0x0) 1.284484469s ago: executing program 2 (id=741): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40a40, 0x1fb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) execve(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) 1.195532891s ago: executing program 2 (id=743): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fbb0f09040001"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0) 1.195455471s ago: executing program 0 (id=744): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) 1.193360601s ago: executing program 1 (id=745): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1, 0x6, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xfffffffb, 0x31b8}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xae, 0x4, 0x50, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8000, 0x0, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000700)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl2\x00', r0, 0x4, 0x9, 0x4, 0x4, 0x44, @mcast1, @mcast2, 0x40, 0x47, 0xc4, 0x400}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@remote, @multicast2}, &(0x7f00000008c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 1.107328213s ago: executing program 0 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000004400)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000004480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000004500)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000004600)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.107226323s ago: executing program 0 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) read(r0, &(0x7f0000000580), 0x1000) pread64$ublk_bdev(r0, &(0x7f00000006c0)=""/220, 0xdc, 0x4) read$msr(r0, &(0x7f00000005c0)=""/218, 0xda) 859.212659ms ago: executing program 1 (id=748): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c840, &(0x7f00000000c0)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000100)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000640)=@gcm_256={{0x303}, "a2f347d0d3ac14d1", "339fb82406f55fc3fc71adc3a4916ef854b0e86aa3eb73cb5aa571d8450d6f1f", "63f21813", "8a07deb7eddcefd9"}, 0x38) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000bc0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_mount_image$erofs(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x801, &(0x7f0000000700)=ANY=[], 0x2, 0x252, &(0x7f0000000740)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARkr3dPZU0gloqgpCIWh5mDTGTnNxdkTvwR7Cx8Q/wb7DWIoVY2NmIhZVFDAQstLRRcGR+Zed+rTm4zvcp5t68eTPvvZndN3ALgiD+Ww6+/tx/cXV5dRHALOZRNvpvfm7jOfZfXvolI77f9rA3uB4DIETeD/7hPwTw7ooPPNXLCvFLuOPzZs1V4QMVrbsFD+fM+G0wRDZWIdFiBoa7Rv3AkW3w4Bm71+Rr9zd4FssmkU0qmzog+uL/scuwBu1eemBOfO1ub7PBgWtMCTxraQ0vCevHasYKwdE6PAtG2BTtX4CDfXlCl5wtkOd15/mzXdmPjD6Gp/ZSksBDYg6mDoYVo19GGVEUVU03S5z8Twf5+r4+Nid/J9xKUbaV4o2YtnByqdDGJjHGxj74ztBbIzw+hDPEUBzGH3GsmIUQTyZJMBx3BNMQ7Dt/zFnSdHIXXnV4Vphr5ga9N0dsQm9z8RUwUYKs3cUJnZ7WMHOUl03SH4ZnHU77Ed1zNY8GbUJM0Zetm0NDn2Y4v2E1qLS7H6+boVN965zpfwuOhLDoIcnrJwuAs8aUQYjAuRVqna2HtXa3t7Sx1VjP1rPtNK1fjM/H8YW0pmqzbgvqX0XVpxmn/pX0lTFgJ52H2Gl0Oq1kB+i0ktD209eqdSruypvmdzXPU/XPw8JvIcz1UlJpl0fHo+6/sp7HVG/BHxs8QRAEQRAEQRAEQRAEQRBEAdXP+tf8dT03i6pnPoTpD1ViNEF6U034GwAA//89J0vl") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x184) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) umount2(&(0x7f0000000a80)='.\x00', 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000fc0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 858.756219ms ago: executing program 0 (id=758): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x80003, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000019300)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019380), 0x0, 0x0) read$msr(r3, &(0x7f00000193c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f00000323c0)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000032400)={0x3, 0x0, &(0x7f0000032440)={&(0x7f0000032480)=ANY=[@ANYBLOB="0203000211000000000000000000000003000800800000007800000000000000000002000000000005000600000000000a00000000000000fc02000000b5d900000000000000000000000000000000000200010000000000000009000000006005000500000000000a000000"], 0x88}, 0x1, 0x7}, 0x0) 852.50742ms ago: executing program 5 (id=749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240)="b06b", 0x2, 0x20008005, &(0x7f0000001300)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 775.933921ms ago: executing program 5 (id=750): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) 748.380953ms ago: executing program 0 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) 13.38588ms ago: executing program 0 (id=752): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 13.266991ms ago: executing program 5 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount$9p_rdma(0x0, &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x3}}]}}) 13.17652ms ago: executing program 5 (id=754): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000001800)='7', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) 0s ago: executing program 1 (id=755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0000110000080000000060e70851"], 0xfce) kernel console output (not intermixed with test programs): cated to 1048576 [ 139.635328][ T527] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 139.669977][ T527] usb 6-1: config 3 has no interface number 0 [ 139.710746][ T527] usb 6-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.845350][ T527] usb 6-1: config 3 interface 61 has no altsetting 0 [ 140.839727][ T527] usb 6-1: string descriptor 0 read error: -71 [ 141.814216][ T527] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 142.007417][ T1970] loop4: detected capacity change from 0 to 16 [ 142.017013][ T1970] erofs: (device loop4): mounted with root inode @ nid 36. [ 142.025871][ T1966] syz.4.410: attempt to access beyond end of device [ 142.025871][ T1966] loop4: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 142.040169][ T1966] syz.4.410: attempt to access beyond end of device [ 142.040169][ T1966] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 142.053861][ T1966] syz.4.410: attempt to access beyond end of device [ 142.053861][ T1966] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 142.067626][ T1970] syz.4.410: attempt to access beyond end of device [ 142.067626][ T1970] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 142.081304][ T1970] syz.4.410: attempt to access beyond end of device [ 142.081304][ T1970] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 142.094982][ T1970] syz.4.410: attempt to access beyond end of device [ 142.094982][ T1970] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 142.108656][ T1970] syz.4.410: attempt to access beyond end of device [ 142.108656][ T1970] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 142.124931][ T1970] syz.4.410: attempt to access beyond end of device [ 142.124931][ T1970] loop4: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 142.700378][ T527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.785506][ T527] usb 6-1: can't set config #3, error -71 [ 142.816240][ T527] usb 6-1: USB disconnect, device number 6 [ 143.283177][ T1991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 143.490735][ T435] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.550727][ T527] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 143.569881][ T1997] loop0: detected capacity change from 0 to 40427 [ 143.587855][ T1997] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 143.631468][ T1997] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.660181][ T1997] F2FS-fs (loop0): invalid crc value [ 143.681949][ T435] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 143.691119][ T1997] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.720790][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.741718][ T527] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 143.774324][ T435] usb-storage 3-1:1.0: USB Mass Storage device detected [ 143.788036][ T527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.810926][ T1997] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 143.828301][ T527] usb-storage 6-1:1.0: USB Mass Storage device detected [ 143.845375][ T1997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 143.905544][ T1997] syz.0.419: attempt to access beyond end of device [ 143.905544][ T1997] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.142029][ T1997] syz.0.419: attempt to access beyond end of device [ 144.142029][ T1997] loop0: rw=2049, sector=77824, nr_sectors = 24 limit=40427 [ 144.180755][ T435] scsi host1: usb-storage 3-1:1.0 [ 144.236742][ T527] scsi host2: usb-storage 6-1:1.0 [ 144.280742][ T19] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 144.307583][ T1999] loop1: detected capacity change from 0 to 131072 [ 144.326775][ T1999] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 144.363607][ T1999] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.380112][ T527] usb 3-1: USB disconnect, device number 10 [ 144.391206][ T1999] F2FS-fs (loop1): invalid crc value [ 144.415007][ T1999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.426238][ T435] usb 6-1: USB disconnect, device number 7 [ 144.513524][ T1999] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.520710][ T1999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 144.529541][ T19] usb 5-1: config 3 has an invalid interface number: 61 but max is 0 [ 145.804305][ T19] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 146.662744][ T2019] loop0: detected capacity change from 0 to 16 [ 146.671753][ T2019] erofs: (device loop0): mounted with root inode @ nid 36. [ 146.693470][ T19] usb 5-1: config 3 has no interface number 0 [ 146.727933][ T19] usb 5-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.776856][ T19] usb 5-1: config 3 interface 61 has no altsetting 0 [ 146.814708][ T19] usb 5-1: string descriptor 0 read error: -22 [ 146.874310][ T19] usb 5-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 146.940843][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.968351][ T19] snd-usb-audio: probe of 5-1:3.61 failed with error -2 [ 148.840754][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.61/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.109706][ T2023] loop0: detected capacity change from 0 to 16 [ 149.117256][ T2023] erofs: (device loop0): mounted with root inode @ nid 36. [ 149.126527][ T2021] bio_check_eod: 94 callbacks suppressed [ 149.126539][ T2021] syz.0.424: attempt to access beyond end of device [ 149.126539][ T2021] loop0: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 149.146422][ T2021] syz.0.424: attempt to access beyond end of device [ 149.146422][ T2021] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 149.160148][ T2021] syz.0.424: attempt to access beyond end of device [ 149.160148][ T2021] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 149.173975][ T2023] syz.0.424: attempt to access beyond end of device [ 149.173975][ T2023] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 149.187651][ T2023] syz.0.424: attempt to access beyond end of device [ 149.187651][ T2023] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 149.201364][ T2023] syz.0.424: attempt to access beyond end of device [ 149.201364][ T2023] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 149.215044][ T2023] syz.0.424: attempt to access beyond end of device [ 149.215044][ T2023] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 149.231201][ T2023] syz.0.424: attempt to access beyond end of device [ 149.231201][ T2023] loop0: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 149.253789][ T19] usb 5-1: USB disconnect, device number 4 [ 149.453461][ T2038] loop4: detected capacity change from 0 to 512 [ 149.487273][ T2045] overlayfs: failed to set xattr on upper [ 149.494766][ T28] audit: type=1400 audit(1791955734.792:387): avc: denied { read write } for pid=2047 comm="syz.0.431" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 149.520139][ T19] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 149.545136][ T19] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.570121][ T2038] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.429: bad orphan inode 15 [ 149.622057][ T2038] ext4_test_bit(bit=14, block=5) = 0 [ 149.634850][ T28] audit: type=1400 audit(1791955734.812:388): avc: denied { open } for pid=2047 comm="syz.0.431" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 149.688337][ T2038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.764180][ T2027] loop5: detected capacity change from 0 to 40427 [ 149.864462][ T28] audit: type=1400 audit(1791955735.022:389): avc: denied { create } for pid=2055 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.896939][ T2027] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 151.802075][ T2053] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 152.031308][ T2060] loop2: detected capacity change from 0 to 8192 [ 152.053816][ T2027] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 152.070364][ T290] EXT4-fs (loop4): unmounting filesystem. [ 152.106221][ T2027] F2FS-fs (loop5): invalid crc value [ 152.117015][ T28] audit: type=1400 audit(1791955735.022:390): avc: denied { getopt } for pid=2055 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.210329][ T2027] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 152.230258][ T2065] device bridge5 entered promiscuous mode [ 152.237543][ T2065] x86: Booting SMP configuration: [ 152.243109][ T2065] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 152.343028][ T2076] loop1: detected capacity change from 0 to 4096 [ 152.349856][ T2076] ext4: Unknown parameter 'smackfsdef' [ 152.359963][ T28] audit: type=1400 audit(1791955737.572:391): avc: denied { map } for pid=2070 comm="syz.2.437" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.402814][ T313] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.419445][ T2073] loop2: detected capacity change from 0 to 512 [ 152.433277][ T2076] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 152.580958][ T2073] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.609735][ T2073] EXT4-fs (loop2): group descriptors corrupted! [ 152.664896][ T2081] netlink: 104 bytes leftover after parsing attributes in process `syz.1.438'. [ 152.946331][ T2081] loop1: detected capacity change from 0 to 256 [ 152.953914][ T2081] exfat: Bad value for 'uid' [ 152.981033][ T28] audit: type=1400 audit(1791955737.952:392): avc: denied { nlmsg_read } for pid=2075 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.222758][ T2092] loop1: detected capacity change from 0 to 16 [ 154.621418][ T2092] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.675033][ T2083] syz.1.441: attempt to access beyond end of device [ 154.675033][ T2083] loop1: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 154.689531][ T2083] syz.1.441: attempt to access beyond end of device [ 154.689531][ T2083] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 154.703631][ T2083] syz.1.441: attempt to access beyond end of device [ 154.703631][ T2083] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 154.717985][ T2092] syz.1.441: attempt to access beyond end of device [ 154.717985][ T2092] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 154.731975][ T2092] syz.1.441: attempt to access beyond end of device [ 154.731975][ T2092] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 154.746071][ T2092] syz.1.441: attempt to access beyond end of device [ 154.746071][ T2092] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 154.760073][ T2092] syz.1.441: attempt to access beyond end of device [ 154.760073][ T2092] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 154.796775][ T2092] syz.1.441: attempt to access beyond end of device [ 154.796775][ T2092] loop1: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 155.023394][ T28] audit: type=1400 audit(1791955740.312:393): avc: denied { search } for pid=2093 comm="syz.5.443" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.070904][ T28] audit: type=1400 audit(1791955740.312:394): avc: denied { read } for pid=2093 comm="syz.5.443" name="dynamic_events" dev="tracefs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.100304][ T2097] loop5: detected capacity change from 0 to 512 [ 155.138799][ T28] audit: type=1400 audit(1791955740.382:395): avc: denied { ioctl } for pid=2093 comm="syz.5.443" path="/57/tracefs/dynamic_events" dev="tracefs" ino=1038 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.141690][ T2097] EXT4-fs: Ignoring removed orlov option [ 155.169932][ T28] audit: type=1400 audit(1791955740.382:396): avc: denied { ioctl } for pid=2093 comm="syz.5.443" path="socket:[24651]" dev="sockfs" ino=24651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.189908][ T2097] EXT4-fs: Ignoring removed oldalloc option [ 155.194448][ T28] audit: type=1400 audit(1791955740.382:397): avc: denied { setopt } for pid=2093 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.217062][ T2097] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.220321][ T28] audit: type=1400 audit(1791955740.382:398): avc: denied { write } for pid=2093 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.233497][ T2097] EXT4-fs (loop5): failed to initialize system zone (-117) [ 155.261605][ T2097] EXT4-fs (loop5): mount failed [ 155.539665][ T2107] device bridge4 entered promiscuous mode [ 156.334670][ T19] smpboot: CPU 1 is now offline [ 156.343524][ T2112] x86: Booting SMP configuration: [ 157.808224][ T2112] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 157.990056][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.190801][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 158.197133][ T24] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 158.318623][ T24] usb 2-1: config 0 has no interface number 0 [ 158.328757][ T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 158.340214][ T24] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 158.366764][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 158.402363][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.563201][ T24] usb 2-1: Product: syz [ 158.615177][ T24] usb 2-1: Manufacturer: syz [ 158.671715][ T24] usb 2-1: SerialNumber: syz [ 158.732158][ T24] usb 2-1: config 0 descriptor?? [ 159.442399][ T24] usb 2-1: USB disconnect, device number 10 [ 159.493325][ T2153] loop1: detected capacity change from 0 to 512 [ 159.628189][ T28] audit: type=1400 audit(1791955744.912:399): avc: denied { mounton } for pid=2158 comm="syz.2.463" path="/sys" dev="proc" ino=4026531856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 159.707455][ T28] audit: type=1400 audit(1791955744.952:400): avc: denied { write } for pid=2158 comm="syz.2.463" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.749462][ T2163] loop5: detected capacity change from 0 to 512 [ 159.764613][ T2165] device bridge6 entered promiscuous mode [ 159.781929][ T28] audit: type=1400 audit(1791955744.952:401): avc: denied { associate } for pid=2158 comm="syz.2.463" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.809390][ T19] smpboot: CPU 1 is now offline [ 159.822589][ T2165] x86: Booting SMP configuration: [ 159.827664][ T2165] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 159.848547][ T2163] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.874632][ T2163] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.899486][ T2163] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.465: corrupted xattr block 33 [ 159.925643][ T28] audit: type=1400 audit(1791955745.212:402): avc: denied { append } for pid=2171 comm="syz.2.468" name="pfkey" dev="proc" ino=4026532701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 159.929326][ T2163] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop5 ino=15 [ 159.963510][ T2173] device veth0 entered promiscuous mode [ 160.043096][ T2163] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.465: corrupted xattr block 33 [ 160.105946][ T2163] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop5 ino=15 [ 160.120411][ T2163] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.465: corrupted xattr block 33 [ 160.132538][ T2163] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop5 ino=15 [ 160.142371][ T2163] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.465: corrupted xattr block 33 [ 160.154484][ T2163] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.465: corrupted xattr block 33 [ 160.166352][ T2163] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop5 ino=15 [ 160.179172][ T2162] device veth0 left promiscuous mode [ 160.184716][ T2133] loop0: detected capacity change from 0 to 131072 [ 160.191956][ T2133] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 160.228624][ T2133] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.556314][ T2133] F2FS-fs (loop0): invalid crc value [ 160.586338][ T621] EXT4-fs (loop5): unmounting filesystem. [ 160.680839][ T2133] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.912971][ T2133] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.920187][ T2133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 164.691124][ T2192] loop4: detected capacity change from 0 to 16 [ 164.700989][ T2197] loop2: detected capacity change from 0 to 16 [ 164.751142][ T2197] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.770896][ T2192] erofs: (device loop4): mounted with root inode @ nid 36. [ 166.432979][ T2193] syz.2.474: attempt to access beyond end of device [ 166.432979][ T2193] loop2: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 166.448003][ T2193] syz.2.474: attempt to access beyond end of device [ 166.448003][ T2193] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 166.462713][ T2193] syz.2.474: attempt to access beyond end of device [ 166.462713][ T2193] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 166.478175][ T2197] syz.2.474: attempt to access beyond end of device [ 166.478175][ T2197] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 166.492747][ T2197] syz.2.474: attempt to access beyond end of device [ 166.492747][ T2197] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 166.507814][ T2197] syz.2.474: attempt to access beyond end of device [ 166.507814][ T2197] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 166.522656][ T2197] syz.2.474: attempt to access beyond end of device [ 166.522656][ T2197] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 166.661800][ T2197] syz.2.474: attempt to access beyond end of device [ 166.661800][ T2197] loop2: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 167.108569][ T2190] syz.4.473: attempt to access beyond end of device [ 167.108569][ T2190] loop4: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 167.122849][ T2190] syz.4.473: attempt to access beyond end of device [ 167.122849][ T2190] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 167.379710][ T2204] loop0: detected capacity change from 0 to 16 [ 169.215472][ T2204] erofs: (device loop0): mounted with root inode @ nid 36. [ 169.342899][ T2211] device bridge7 entered promiscuous mode [ 169.396419][ T2209] smpboot: CPU 1 is now offline [ 169.440068][ T2217] x86: Booting SMP configuration: [ 169.485879][ T28] audit: type=1400 audit(1791955754.772:403): avc: denied { ioctl } for pid=2212 comm="syz.4.478" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 169.560651][ T2217] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 169.593575][ T2225] loop4: detected capacity change from 0 to 512 [ 169.621016][ T2225] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 169.658199][ T2220] xt_hashlimit: size too large, truncated to 1048576 [ 169.984608][ T2247] FAULT_INJECTION: forcing a failure. [ 169.984608][ T2247] name failslab, interval 1, probability 0, space 0, times 0 [ 170.088909][ T2247] CPU: 1 PID: 2247 Comm: syz.5.489 Not tainted syzkaller #0 [ 170.096275][ T2247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.106354][ T2247] Call Trace: [ 170.109653][ T2247] [ 170.112606][ T2247] __dump_stack+0x21/0x24 [ 170.116972][ T2247] dump_stack_lvl+0x110/0x170 [ 170.121690][ T2247] ? __cfi_dump_stack_lvl+0x8/0x8 [ 170.126760][ T2247] dump_stack+0x15/0x24 [ 170.130960][ T2247] should_fail_ex+0x3bf/0x510 [ 170.135670][ T2247] ? security_inode_alloc+0x33/0x120 [ 170.140991][ T2247] __should_failslab+0xac/0xf0 [ 170.145791][ T2247] should_failslab+0x9/0x20 [ 170.150316][ T2247] kmem_cache_alloc+0x3b/0x320 [ 170.155109][ T2247] security_inode_alloc+0x33/0x120 [ 170.160253][ T2247] inode_init_always+0x6ee/0x950 [ 170.165225][ T2247] iget_locked+0x1f3/0x840 [ 170.169677][ T2247] kernfs_get_inode+0x4b/0x6e0 [ 170.174478][ T2247] kernfs_iop_lookup+0x20f/0x310 [ 170.179461][ T2247] __lookup_slow+0x2d5/0x410 [ 170.184102][ T2247] ? lookup_one_len+0x2e0/0x2e0 [ 170.188984][ T2247] ? down_read+0xa6/0xf0 [ 170.193248][ T2247] ? __cfi_down_read+0x10/0x10 [ 170.198044][ T2247] lookup_slow+0x57/0x70 [ 170.202314][ T2247] link_path_walk+0x984/0xeb0 [ 170.207012][ T2247] ? handle_lookup_down+0x130/0x130 [ 170.212236][ T2247] path_openat+0x27f/0x2f30 [ 170.216762][ T2247] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 170.222851][ T2247] ? irqentry_exit+0x37/0x40 [ 170.227471][ T2247] ? do_filp_open+0x420/0x420 [ 170.232172][ T2247] ? do_filp_open+0x184/0x420 [ 170.236874][ T2247] ? kasan_check_range+0x1c4/0x2a0 [ 170.242017][ T2247] do_filp_open+0x1ee/0x420 [ 170.246542][ T2247] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 170.252640][ T2247] ? __cfi_do_filp_open+0x10/0x10 [ 170.257699][ T2247] ? alloc_fd+0x4c1/0x570 [ 170.262101][ T2247] do_sys_openat2+0x15e/0x820 [ 170.266803][ T2247] ? __kasan_check_write+0x14/0x20 [ 170.271932][ T2247] ? do_sys_open+0xe0/0xe0 [ 170.276365][ T2247] ? ksys_write+0x1fa/0x260 [ 170.280890][ T2247] __x64_sys_openat+0x136/0x160 [ 170.285796][ T2247] x64_sys_call+0x783/0x9a0 [ 170.290313][ T2247] do_syscall_64+0x4c/0xa0 [ 170.294748][ T2247] ? clear_bhb_loop+0x30/0x80 [ 170.299433][ T2247] ? clear_bhb_loop+0x30/0x80 [ 170.304130][ T2247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.310031][ T2247] RIP: 0033:0x7f3a7679e2d9 [ 170.314451][ T2247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.334066][ T2247] RSP: 002b:00007f3a77593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.342490][ T2247] RAX: ffffffffffffffda RBX: 00007f3a76a26090 RCX: 00007f3a7679e2d9 [ 170.350473][ T2247] RDX: 0000000000000000 RSI: 0000200000001a00 RDI: ffffffffffffff9c [ 170.358474][ T2247] RBP: 00007f3a77593090 R08: 0000000000000000 R09: 0000000000000000 [ 170.366455][ T2247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.374444][ T2247] R13: 00007f3a76a26128 R14: 00007f3a76a26090 R15: 00007ffefe3ff548 [ 170.382438][ T2247] [ 170.562088][ T2240] loop1: detected capacity change from 0 to 40427 [ 170.593809][ T2240] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 170.626384][ T2240] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 170.648061][ T2259] loop5: detected capacity change from 0 to 16 [ 170.721453][ T2259] erofs: (device loop5): mounted with root inode @ nid 36. [ 170.945351][ T2240] F2FS-fs (loop1): invalid crc value [ 171.157239][ T2240] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.425612][ T2265] device bridge5 entered promiscuous mode [ 171.482293][ T2240] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.489407][ T2240] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.591746][ T2240] bio_check_eod: 189 callbacks suppressed [ 171.591758][ T2240] syz.1.486: attempt to access beyond end of device [ 171.591758][ T2240] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.616402][ T2209] smpboot: CPU 1 is now offline [ 171.626486][ T2267] x86: Booting SMP configuration: [ 171.644922][ T28] audit: type=1400 audit(1791955756.932:404): avc: denied { getopt } for pid=2268 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.718424][ T2267] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 171.726962][ T2272] loop0: detected capacity change from 0 to 256 [ 171.821136][ T2272] exfat: Bad value for 'uid' [ 171.865153][ T313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.877397][ T28] audit: type=1400 audit(1791955757.162:405): avc: denied { setattr } for pid=2268 comm="syz.0.494" name="ptmx" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 172.140906][ T2287] syz.1.486: attempt to access beyond end of device [ 172.140906][ T2287] loop1: rw=2049, sector=77824, nr_sectors = 32 limit=40427 [ 172.194331][ T2229] loop2: detected capacity change from 0 to 131072 [ 172.226905][ T2229] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 172.255940][ T2229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 172.290912][ T2229] F2FS-fs (loop2): invalid crc value [ 172.340162][ T2229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.418848][ T2285] loop4: detected capacity change from 0 to 40427 [ 172.437228][ T2285] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 172.450941][ T2285] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 172.459876][ T2285] F2FS-fs (loop4): invalid crc value [ 172.493372][ T2229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 172.500451][ T2229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 172.534533][ T2285] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.066248][ T2285] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 173.095182][ T432] kworker/u4:4: attempt to access beyond end of device [ 173.095182][ T432] loop1: rw=1, sector=77856, nr_sectors = 4064 limit=40427 [ 173.128150][ T2285] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 173.467935][ T432] kworker/u4:4: attempt to access beyond end of device [ 173.467935][ T432] loop1: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 173.806259][ T432] kworker/u4:4: attempt to access beyond end of device [ 173.806259][ T432] loop1: rw=1, sector=57344, nr_sectors = 3480 limit=40427 [ 173.904564][ T432] kworker/u4:4: attempt to access beyond end of device [ 173.904564][ T432] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 174.191871][ T28] audit: type=1400 audit(1791955759.482:406): avc: denied { load_policy } for pid=2315 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 174.225534][ T2322] xt_hashlimit: size too large, truncated to 1048576 [ 174.295431][ T2323] loop0: detected capacity change from 0 to 16 [ 174.305292][ T2323] erofs: (device loop0): mounted with root inode @ nid 36. [ 174.327749][ T2320] syz.0.506: attempt to access beyond end of device [ 174.327749][ T2320] loop0: rw=524288, sector=1342179456, nr_sectors = 256 limit=16 [ 174.331051][ T2313] syz.0.506: attempt to access beyond end of device [ 174.331051][ T2313] loop0: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 174.342147][ T2320] syz.0.506: attempt to access beyond end of device [ 174.342147][ T2320] loop0: rw=0, sector=1342179576, nr_sectors = 32 limit=16 [ 174.356238][ T2313] syz.0.506: attempt to access beyond end of device [ 174.356238][ T2313] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 174.421313][ T2316] loop1: detected capacity change from 0 to 512 [ 174.454825][ T2318] SELinux: ebitmap: truncated map [ 174.463194][ T2316] ext4: Unknown parameter 'fowner' [ 174.514074][ T2318] SELinux: failed to load policy [ 174.521725][ T313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.628107][ T2317] loop4: detected capacity change from 0 to 40427 [ 174.650798][ T2317] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 174.667824][ T2327] device bridge2 entered promiscuous mode [ 174.669269][ T2317] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.689941][ T19] smpboot: CPU 1 is now offline [ 174.702904][ T2327] x86: Booting SMP configuration: [ 174.707969][ T2327] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 174.725037][ T2317] F2FS-fs (loop4): fault_type options not supported [ 174.733818][ T2317] F2FS-fs (loop4): fault_injection options not supported [ 174.750271][ T2317] F2FS-fs (loop4): Image doesn't support compression [ 174.769235][ T2317] F2FS-fs (loop4): invalid crc value [ 174.775711][ T2330] capability: warning: `syz.1.508' uses 32-bit capabilities (legacy support in use) [ 174.788059][ T2317] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.860211][ T2330] SELinux: failed to load policy [ 174.881996][ T2317] F2FS-fs (loop4): Start checkpoint disabled! [ 174.900582][ T2317] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 174.917469][ T2317] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.927847][ T2317] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 175.178598][ T2347] loop5: detected capacity change from 0 to 512 [ 175.180456][ T28] audit: type=1400 audit(1791955760.462:407): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.388890][ T2343] loop0: detected capacity change from 0 to 40427 [ 175.439998][ T2343] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 175.712014][ T28] audit: type=1400 audit(1791955760.992:408): avc: denied { bind } for pid=2346 comm="syz.5.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.753550][ T2354] netlink: 'syz.5.514': attribute type 50 has an invalid length. [ 175.817654][ T2343] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.979385][ T28] audit: type=1400 audit(1791955761.022:409): avc: denied { name_bind } for pid=2346 comm="syz.5.514" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.009593][ T2343] F2FS-fs (loop0): invalid crc value [ 176.109997][ T2343] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.235576][ T28] audit: type=1400 audit(1791955761.022:410): avc: denied { node_bind } for pid=2346 comm="syz.5.514" saddr=ff05::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 176.316144][ T2343] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.339114][ T2179] device bridge_slave_1 left promiscuous mode [ 176.353760][ T2179] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.364869][ T2343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.399522][ T2179] device bridge_slave_0 left promiscuous mode [ 176.448948][ T2179] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.514026][ T2179] device veth1_macvtap left promiscuous mode [ 176.542285][ T2179] device veth0_vlan left promiscuous mode [ 176.797771][ T2343] bio_check_eod: 92 callbacks suppressed [ 176.797791][ T2343] syz.0.512: attempt to access beyond end of device [ 176.797791][ T2343] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.947689][ T2366] loop1: detected capacity change from 0 to 128 [ 176.959152][ T2209] smpboot: CPU 1 is now offline [ 176.973266][ T2364] x86: Booting SMP configuration: [ 177.003881][ T2364] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 177.022787][ T2366] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.061057][ T2366] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.084147][ T28] audit: type=1400 audit(1791955762.362:411): avc: denied { mount } for pid=2365 comm="syz.1.519" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 177.109798][ T2366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 177.204868][ T2363] device bridge2 entered promiscuous mode [ 177.351624][ T2367] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.379233][ T2378] netlink: 100 bytes leftover after parsing attributes in process `syz.1.519'. [ 177.391595][ T2367] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.427847][ T2367] device bridge_slave_0 entered promiscuous mode [ 177.459624][ T2367] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.474380][ T2345] loop2: detected capacity change from 0 to 131072 [ 177.491170][ T2367] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.512074][ T2345] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 177.538534][ T2367] device bridge_slave_1 entered promiscuous mode [ 177.556565][ T2345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 177.594555][ T2345] F2FS-fs (loop2): invalid crc value [ 177.641373][ T2345] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.690751][ T2209] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 177.793958][ T2345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.819391][ T2345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 177.846253][ T2367] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.853430][ T2367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.860777][ T2367] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.867830][ T2367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.911239][ T2209] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 177.923964][ T2209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.006323][ T2209] usb-storage 6-1:1.0: USB Mass Storage device detected [ 178.095571][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.103910][ T28] audit: type=1400 audit(1791955763.402:412): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.131167][ T434] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.152018][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.160232][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.187363][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.189791][ T2388] xt_hashlimit: size too large, truncated to 1048576 [ 178.205107][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.215787][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.222892][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.273846][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.294336][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.301633][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.326282][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.334667][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.351356][ T2343] syz.0.512: attempt to access beyond end of device [ 178.351356][ T2343] loop0: rw=2049, sector=77824, nr_sectors = 32 limit=40427 [ 178.354088][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.384359][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.399662][ T2367] device veth0_vlan entered promiscuous mode [ 178.406874][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.414628][ T2209] scsi host1: usb-storage 6-1:1.0 [ 178.427821][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.442563][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.450298][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.458344][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.467240][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.476329][ T2367] device veth1_macvtap entered promiscuous mode [ 178.496834][ T2179] kworker/u4:10: attempt to access beyond end of device [ 178.496834][ T2179] loop0: rw=1, sector=77856, nr_sectors = 4064 limit=40427 [ 178.508311][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.521464][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.535582][ T2179] kworker/u4:10: attempt to access beyond end of device [ 178.535582][ T2179] loop0: rw=1, sector=49152, nr_sectors = 2096 limit=40427 [ 178.541963][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.571442][ T2179] kworker/u4:10: attempt to access beyond end of device [ 178.571442][ T2179] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 178.600481][ T28] audit: type=1400 audit(1791955763.882:413): avc: denied { mount } for pid=2367 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.625541][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.634625][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.670098][ T2393] loop6: detected capacity change from 0 to 512 [ 178.739189][ T2393] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 178.756037][ T2393] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.794270][ T28] audit: type=1400 audit(1791955764.082:414): avc: denied { remount } for pid=2392 comm="syz.6.517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.794478][ T2393] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 178.823640][ T2393] EXT4-fs: Cannot change journaled quota options when quota turned on [ 178.842075][ T2367] EXT4-fs (loop6): unmounting filesystem. [ 180.372897][ T2408] loop6: detected capacity change from 0 to 16 [ 181.079759][ T2409] loop2: detected capacity change from 0 to 512 [ 181.091387][ T2409] EXT4-fs: Ignoring removed i_version option [ 181.524529][ T2408] erofs: (device loop6): mounted with root inode @ nid 36. [ 181.599428][ T2409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.612898][ T2397] syz.6.524: attempt to access beyond end of device [ 181.612898][ T2397] loop6: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 181.627177][ T2397] syz.6.524: attempt to access beyond end of device [ 181.627177][ T2397] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 181.640945][ T2397] syz.6.524: attempt to access beyond end of device [ 181.640945][ T2397] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 181.654794][ T2403] syz.6.524: attempt to access beyond end of device [ 181.654794][ T2403] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 181.668636][ T2403] syz.6.524: attempt to access beyond end of device [ 181.668636][ T2403] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 181.810857][ T2409] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.522: invalid indirect mapped block 32768 (level 2) [ 181.824526][ T2409] EXT4-fs (loop2): Remounting filesystem read-only [ 181.831474][ T2409] EXT4-fs (loop2): 1 orphan inode deleted [ 181.837245][ T2409] EXT4-fs (loop2): 1 truncate cleaned up [ 181.842966][ T2409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.851999][ T6] usb 6-1: USB disconnect, device number 8 [ 181.860797][ T481] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 182.077368][ T2421] loop6: detected capacity change from 0 to 16 [ 182.114494][ T2421] erofs: (device loop6): mounted with root inode @ nid 36. [ 182.124277][ T2415] bio_check_eod: 86 callbacks suppressed [ 182.124296][ T2415] syz.6.527: attempt to access beyond end of device [ 182.124296][ T2415] loop6: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 182.144432][ T2415] syz.6.527: attempt to access beyond end of device [ 182.144432][ T2415] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 182.158184][ T2415] syz.6.527: attempt to access beyond end of device [ 182.158184][ T2415] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 182.218081][ T2416] syz.6.527: attempt to access beyond end of device [ 182.218081][ T2416] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 182.231853][ T2416] syz.6.527: attempt to access beyond end of device [ 182.231853][ T2416] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 182.245610][ T2416] syz.6.527: attempt to access beyond end of device [ 182.245610][ T2416] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 182.259342][ T2416] syz.6.527: attempt to access beyond end of device [ 182.259342][ T2416] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 182.627109][ T2416] syz.6.527: attempt to access beyond end of device [ 182.627109][ T2416] loop6: rw=524288, sector=1342177528, nr_sectors = 2056 limit=16 [ 182.641659][ T2416] syz.6.527: attempt to access beyond end of device [ 182.641659][ T2416] loop6: rw=524288, sector=1342179584, nr_sectors = 248 limit=16 [ 185.189931][ T2422] loop0: detected capacity change from 0 to 16 [ 185.204509][ T2422] erofs: (device loop0): mounted with root inode @ nid 36. [ 185.373739][ T2417] syz.0.528: attempt to access beyond end of device [ 185.373739][ T2417] loop0: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 185.705823][ T291] EXT4-fs (loop2): unmounting filesystem. [ 186.732279][ T2433] loop2: detected capacity change from 0 to 16 [ 186.741772][ T2433] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.796443][ T2437] loop6: detected capacity change from 0 to 1024 [ 186.811827][ T2437] EXT4-fs (loop6): INFO: recovery required on readonly filesystem [ 186.824910][ T2437] EXT4-fs (loop6): write access will be enabled during recovery [ 186.842876][ T2437] EXT4-fs (loop6): barriers disabled [ 186.855400][ T2437] JBD2: no valid journal superblock found [ 186.869403][ T2437] EXT4-fs (loop6): error loading journal [ 186.953917][ T28] audit: type=1400 audit(1791955772.242:415): avc: denied { ioctl } for pid=2436 comm="syz.6.534" path="socket:[25791]" dev="sockfs" ino=25791 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.988338][ T2435] loop0: detected capacity change from 0 to 40427 [ 187.005002][ T2435] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 187.020083][ T2435] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 187.028964][ T2435] F2FS-fs (loop0): invalid crc value [ 187.035791][ T2435] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.075827][ T2435] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 187.083034][ T2435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 187.142301][ T2444] xt_hashlimit: size too large, truncated to 1048576 [ 187.162536][ T2435] bio_check_eod: 20 callbacks suppressed [ 187.162555][ T2435] syz.0.533: attempt to access beyond end of device [ 187.162555][ T2435] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.260915][ T6] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 187.362187][ T2431] loop1: detected capacity change from 0 to 131072 [ 187.369382][ T2431] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 187.378079][ T2431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.405250][ T2431] F2FS-fs (loop1): invalid crc value [ 187.429627][ T2431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.452219][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 187.476653][ T6] usb 7-1: not running at top speed; connect to a high speed hub [ 187.516905][ T2448] syz.0.533: attempt to access beyond end of device [ 187.516905][ T2448] loop0: rw=2049, sector=77824, nr_sectors = 24 limit=40427 [ 187.530928][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.554596][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.575852][ T2431] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 187.576165][ T6] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 187.586345][ T2431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 187.613099][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.631024][ T6] usb 7-1: Product: syz [ 187.636836][ T6] usb 7-1: Manufacturer: syz [ 187.641893][ T6] usb 7-1: SerialNumber: syz [ 187.676541][ T434] kworker/u4:5: attempt to access beyond end of device [ 187.676541][ T434] loop0: rw=1, sector=77848, nr_sectors = 4072 limit=40427 [ 187.715685][ T434] kworker/u4:5: attempt to access beyond end of device [ 187.715685][ T434] loop0: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 187.760217][ T434] kworker/u4:5: attempt to access beyond end of device [ 187.760217][ T434] loop0: rw=1, sector=57344, nr_sectors = 6928 limit=40427 [ 187.777688][ T434] kworker/u4:5: attempt to access beyond end of device [ 187.777688][ T434] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 187.840735][ T481] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 187.866064][ T6] usb 7-1: 0:1 : does not exist [ 187.908681][ T6] usb 7-1: USB disconnect, device number 2 [ 188.062157][ T481] usb 3-1: config 3 has an invalid interface number: 61 but max is 0 [ 188.070403][ T481] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 188.081192][ T481] usb 3-1: config 3 has no interface number 0 [ 188.087317][ T481] usb 3-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.100419][ T481] usb 3-1: config 3 interface 61 has no altsetting 0 [ 188.109469][ T481] usb 3-1: string descriptor 0 read error: -22 [ 188.115770][ T481] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 188.124914][ T481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.164290][ T481] snd-usb-audio: probe of 3-1:3.61 failed with error -2 [ 188.184857][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.61/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 188.260788][ T508] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.378667][ T2468] loop5: detected capacity change from 0 to 512 [ 188.387289][ T2468] EXT4-fs: Ignoring removed i_version option [ 188.460772][ T1808] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 188.470920][ T508] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 188.480341][ T508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.489148][ T2468] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 188.547177][ T2468] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.540: invalid indirect mapped block 32768 (level 2) [ 188.560808][ T2468] EXT4-fs (loop5): Remounting filesystem read-only [ 188.567506][ T2468] EXT4-fs (loop5): 1 orphan inode deleted [ 188.573297][ T2468] EXT4-fs (loop5): 1 truncate cleaned up [ 188.578973][ T2468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 188.583423][ T508] usb-storage 1-1:1.0: USB Mass Storage device detected [ 188.603195][ T2453] FAULT_INJECTION: forcing a failure. [ 188.603195][ T2453] name failslab, interval 1, probability 0, space 0, times 0 [ 188.615857][ T2453] CPU: 1 PID: 2453 Comm: syz.2.536 Not tainted syzkaller #0 [ 188.623182][ T2453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.633291][ T2453] Call Trace: [ 188.636590][ T2453] [ 188.639547][ T2453] __dump_stack+0x21/0x24 [ 188.643943][ T2453] dump_stack_lvl+0x110/0x170 [ 188.648670][ T2453] ? __cfi_dump_stack_lvl+0x8/0x8 [ 188.653736][ T2453] dump_stack+0x15/0x24 [ 188.657927][ T2453] should_fail_ex+0x3bf/0x510 [ 188.662646][ T2453] ? __sigqueue_alloc+0x13f/0x210 [ 188.667734][ T2453] __should_failslab+0xac/0xf0 [ 188.672542][ T2453] should_failslab+0x9/0x20 [ 188.677077][ T2453] kmem_cache_alloc+0x3b/0x320 [ 188.681880][ T2453] __sigqueue_alloc+0x13f/0x210 [ 188.686773][ T2453] __send_signal_locked+0x19d/0xb70 [ 188.692015][ T2453] send_signal_locked+0x416/0x580 [ 188.697081][ T2453] force_sig_info_to_task+0x2e5/0x3b0 [ 188.702495][ T2453] force_sig_fault+0xd9/0x130 [ 188.707216][ T2453] ? __cfi_force_sig_fault+0x10/0x10 [ 188.712559][ T2453] ? page_fault_oops+0x8b0/0x8b0 [ 188.717570][ T2453] ? down_read_trylock+0x27f/0x660 [ 188.722727][ T2453] ? find_vma+0x89/0xd0 [ 188.726922][ T2453] __bad_area_nosemaphore+0x303/0x630 [ 188.732334][ T2453] bad_area_nosemaphore+0x2d/0x40 [ 188.737419][ T2453] do_user_addr_fault+0xd10/0x1030 [ 188.742570][ T2453] ? debug_smp_processor_id+0x17/0x20 [ 188.748010][ T2453] exc_page_fault+0x51/0xb0 [ 188.752548][ T2453] asm_exc_page_fault+0x27/0x30 [ 188.757428][ T2453] RIP: 0033:0x7ff8fab89161 [ 188.761903][ T2453] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 188.781539][ T2453] RSP: 002b:00007ff8fba66f48 EFLAGS: 00010283 [ 188.787642][ T2453] RAX: 0000000000000000 RBX: 00007ff8fba67014 RCX: 0000000000000000 [ 188.795665][ T2453] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 188.803770][ T2453] RBP: 0000000000000004 R08: 000000000000000f R09: 0000000000000000 [ 188.811786][ T2453] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 188.819801][ T2453] R13: 00007ff8fba66fb0 R14: 00007ff8fae25fa0 R15: 0000000000000000 [ 188.827808][ T2453] [ 188.851350][ T481] usb 3-1: USB disconnect, device number 11 [ 188.922345][ T1808] usb 2-1: config 3 has an invalid interface number: 61 but max is 0 [ 188.930496][ T1808] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 188.940686][ T1808] usb 2-1: config 3 has no interface number 0 [ 188.946818][ T1808] usb 2-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.959830][ T1808] usb 2-1: config 3 interface 61 has no altsetting 0 [ 188.968439][ T1808] usb 2-1: string descriptor 0 read error: -22 [ 188.974981][ T1808] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 188.985675][ T1808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.013390][ T1808] snd-usb-audio: probe of 2-1:3.61 failed with error -2 [ 189.465476][ T2477] loop6: detected capacity change from 0 to 16 [ 189.498942][ T2477] erofs: (device loop6): mounted with root inode @ nid 36. [ 189.778482][ T2471] syz.6.541: attempt to access beyond end of device [ 189.778482][ T2471] loop6: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 189.793914][ T2471] syz.6.541: attempt to access beyond end of device [ 189.793914][ T2471] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 189.809684][ T2471] syz.6.541: attempt to access beyond end of device [ 189.809684][ T2471] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 189.826078][ T2477] syz.6.541: attempt to access beyond end of device [ 189.826078][ T2477] loop6: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 190.934852][ T621] EXT4-fs (loop5): unmounting filesystem. [ 190.970192][ T508] scsi host1: usb-storage 1-1:1.0 [ 190.980518][ T1808] usb 2-1: USB disconnect, device number 11 [ 190.987575][ T888] usb 1-1: USB disconnect, device number 9 [ 191.020895][ T481] smpboot: CPU 1 is now offline [ 191.035583][ T2482] x86: Booting SMP configuration: [ 191.040643][ T2482] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 191.182372][ T2487] loop6: detected capacity change from 0 to 512 [ 191.209974][ T2479] loop5: detected capacity change from 0 to 40427 [ 191.214892][ T2487] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 191.225704][ T2487] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.241001][ T2479] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 191.269495][ T2479] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 191.295050][ T2492] loop0: detected capacity change from 0 to 16 [ 191.304950][ T2492] erofs: (device loop0): mounted with root inode @ nid 36. [ 191.332360][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.61/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 191.363006][ T2479] F2FS-fs (loop5): invalid crc value [ 191.380576][ T2487] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.544: corrupted inode contents [ 191.392782][ T2487] EXT4-fs (loop6): Remounting filesystem read-only [ 191.399359][ T2487] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.544: mark_inode_dirty error [ 191.411319][ T2487] EXT4-fs (loop6): Remounting filesystem read-only [ 191.417980][ T2487] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.544: corrupted inode contents [ 191.430271][ T2487] EXT4-fs (loop6): Remounting filesystem read-only [ 191.437368][ T2487] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.544: mark_inode_dirty error [ 191.449118][ T2487] EXT4-fs (loop6): Remounting filesystem read-only [ 191.490064][ T2367] EXT4-fs (loop6): unmounting filesystem. [ 191.504800][ T2479] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.534467][ T2503] xt_hashlimit: size too large, truncated to 1048576 [ 191.615292][ T2507] loop2: detected capacity change from 0 to 16 [ 191.625667][ T2507] erofs: (device loop2): mounted with root inode @ nid 36. [ 191.682129][ T2479] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 191.690764][ T2479] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 191.853061][ T2505] loop6: detected capacity change from 0 to 40427 [ 191.868940][ T2505] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 191.880327][ T2505] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 191.896933][ T2505] F2FS-fs (loop6): invalid crc value [ 191.919480][ T2505] F2FS-fs (loop6): Found nat_bits in checkpoint [ 191.990875][ T2505] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 191.999063][ T2505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 192.321039][ T2510] bio_check_eod: 110 callbacks suppressed [ 192.321073][ T2510] syz.5.542: attempt to access beyond end of device [ 192.321073][ T2510] loop5: rw=2049, sector=77824, nr_sectors = 32 limit=40427 [ 192.330848][ T435] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 192.376919][ T28] audit: type=1400 audit(1791955777.662:416): avc: denied { ioctl } for pid=2519 comm="syz.2.551" path="socket:[25886]" dev="sockfs" ino=25886 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.379939][ T2520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.551'. [ 192.450857][ T2518] syz.6.548: attempt to access beyond end of device [ 192.450857][ T2518] loop6: rw=2049, sector=45104, nr_sectors = 24 limit=40427 [ 192.470818][ T2520] netlink: 43 bytes leftover after parsing attributes in process `syz.2.551'. [ 192.489931][ T2520] netlink: 'syz.2.551': attribute type 5 has an invalid length. [ 192.498010][ T2520] netlink: 43 bytes leftover after parsing attributes in process `syz.2.551'. [ 192.582658][ T481] smpboot: CPU 1 is now offline [ 192.604994][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.613621][ T2524] x86: Booting SMP configuration: [ 192.618674][ T2524] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 192.648029][ T2179] kworker/u4:10: attempt to access beyond end of device [ 192.648029][ T2179] loop5: rw=1, sector=77856, nr_sectors = 4064 limit=40427 [ 192.671157][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.684228][ T2179] kworker/u4:10: attempt to access beyond end of device [ 192.684228][ T2179] loop5: rw=1, sector=49152, nr_sectors = 3808 limit=40427 [ 192.699948][ T435] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 192.707770][ T2179] kworker/u4:10: attempt to access beyond end of device [ 192.707770][ T2179] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 192.709328][ T435] usb 1-1: can't read configurations, error -71 [ 192.738924][ T2522] loop1: detected capacity change from 0 to 40427 [ 192.778535][ T2522] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 192.794592][ T2522] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.813330][ T2522] F2FS-fs (loop1): invalid crc value [ 192.833334][ T2522] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.886870][ T2522] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 192.894797][ T2522] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.950387][ T2522] syz.1.552: attempt to access beyond end of device [ 192.950387][ T2522] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.139285][ T2540] loop5: detected capacity change from 0 to 512 [ 193.148061][ T2540] EXT4-fs: Ignoring removed i_version option [ 193.156206][ T2540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.293339][ T2540] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.554: invalid indirect mapped block 32768 (level 2) [ 193.307721][ T2540] EXT4-fs (loop5): Remounting filesystem read-only [ 193.315070][ T2540] EXT4-fs (loop5): 1 orphan inode deleted [ 193.320994][ T2540] EXT4-fs (loop5): 1 truncate cleaned up [ 193.326727][ T2540] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 193.446572][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 193.700556][ T6] usb 7-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 193.709886][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.720291][ T6] usb-storage 7-1:1.0: USB Mass Storage device detected [ 194.111475][ T2554] loop2: detected capacity change from 0 to 16 [ 194.143362][ T2554] erofs: (device loop2): mounted with root inode @ nid 36. [ 194.195502][ T2549] syz.2.559: attempt to access beyond end of device [ 194.195502][ T2549] loop2: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 194.210033][ T2549] syz.2.559: attempt to access beyond end of device [ 194.210033][ T2549] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 194.224129][ T2549] syz.2.559: attempt to access beyond end of device [ 194.224129][ T2549] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 194.238580][ T2554] syz.2.559: attempt to access beyond end of device [ 194.238580][ T2554] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 194.349942][ T621] EXT4-fs (loop5): unmounting filesystem. [ 194.827233][ T2559] loop5: detected capacity change from 0 to 16 [ 194.839284][ T2559] erofs: (device loop5): mounted with root inode @ nid 36. [ 194.936587][ T6] scsi host1: usb-storage 7-1:1.0 [ 195.003171][ T435] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 195.252079][ T2567] loop2: detected capacity change from 0 to 16 [ 195.306519][ T2567] erofs: (device loop2): mounted with root inode @ nid 36. [ 196.816855][ T6] usb 7-1: USB disconnect, device number 3 [ 196.842517][ T435] usb 1-1: config 3 has an invalid interface number: 61 but max is 0 [ 197.819105][ T435] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 197.830295][ T435] usb 1-1: config 3 has no interface number 0 [ 197.836475][ T435] usb 1-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.849567][ T435] usb 1-1: config 3 interface 61 has no altsetting 0 [ 198.205905][ T435] usb 1-1: string descriptor 0 read error: -71 [ 198.220759][ T435] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 198.229839][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.251864][ T435] usb 1-1: can't set config #3, error -71 [ 198.258427][ T435] usb 1-1: USB disconnect, device number 11 [ 198.265246][ T2576] xt_hashlimit: size too large, truncated to 1048576 [ 198.292848][ T2209] smpboot: CPU 1 is now offline [ 198.310517][ T2581] x86: Booting SMP configuration: [ 198.319103][ T2571] loop6: detected capacity change from 0 to 40427 [ 198.342780][ T2581] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 198.366984][ T2571] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 198.401813][ T2571] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 198.410616][ T2571] F2FS-fs (loop6): invalid crc value [ 198.424262][ T2571] F2FS-fs (loop6): Found nat_bits in checkpoint [ 198.465553][ T2571] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 198.472688][ T2571] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 198.496993][ T2571] bio_check_eod: 194 callbacks suppressed [ 198.497014][ T2571] syz.6.564: attempt to access beyond end of device [ 198.497014][ T2571] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.602586][ T2596] syz.6.564: attempt to access beyond end of device [ 198.602586][ T2596] loop6: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 198.660751][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.690747][ T2209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.840743][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 198.847148][ T6] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 198.855738][ T6] usb 2-1: config 0 has no interface number 0 [ 198.862534][ T6] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 198.872812][ T6] usb 2-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 198.883957][ T6] usb 2-1: config 0 interface 196 has no altsetting 0 [ 198.893808][ T2209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.918321][ T2209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.928700][ T2209] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.940347][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 198.949668][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.958044][ T2209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.318356][ T2604] loop6: detected capacity change from 0 to 512 [ 199.333944][ T2604] EXT4-fs: Ignoring removed i_version option [ 199.492406][ T2606] loop0: detected capacity change from 0 to 16 [ 199.501387][ T2604] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.520651][ T2606] erofs: (device loop0): mounted with root inode @ nid 36. [ 199.606883][ T6] usb 2-1: Product: syz [ 199.611570][ T2605] syz.0.572: attempt to access beyond end of device [ 199.611570][ T2605] loop0: rw=524288, sector=1342178600, nr_sectors = 256 limit=16 [ 199.615538][ T2602] syz.0.572: attempt to access beyond end of device [ 199.615538][ T2602] loop0: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 199.625898][ T2605] syz.0.572: attempt to access beyond end of device [ 199.625898][ T2605] loop0: rw=0, sector=1342178712, nr_sectors = 32 limit=16 [ 199.640000][ T2602] syz.0.572: attempt to access beyond end of device [ 199.640000][ T2602] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 199.653934][ T2605] syz.0.572: attempt to access beyond end of device [ 199.653934][ T2605] loop0: rw=0, sector=1342178712, nr_sectors = 32 limit=16 [ 199.667383][ T2602] syz.0.572: attempt to access beyond end of device [ 199.667383][ T2602] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 199.685360][ T2209] usb 3-1: config 0 descriptor?? [ 199.700042][ T6] usb 2-1: Manufacturer: syz [ 199.704858][ T6] usb 2-1: SerialNumber: syz [ 199.709629][ T2605] syz.0.572: attempt to access beyond end of device [ 199.709629][ T2605] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 199.723466][ T2605] syz.0.572: attempt to access beyond end of device [ 199.723466][ T2605] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 199.751711][ T2604] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.570: invalid indirect mapped block 32768 (level 2) [ 199.765315][ T2604] EXT4-fs (loop6): Remounting filesystem read-only [ 199.772024][ T2604] EXT4-fs (loop6): 1 orphan inode deleted [ 199.777785][ T2604] EXT4-fs (loop6): 1 truncate cleaned up [ 199.783506][ T2604] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 199.793379][ T6] usb 2-1: config 0 descriptor?? [ 199.799156][ T2585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.982735][ T28] audit: type=1400 audit(1791955785.272:417): avc: denied { ioctl } for pid=2610 comm="syz.0.573" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26038 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.027140][ T2367] EXT4-fs (loop6): unmounting filesystem. [ 200.036885][ T28] audit: type=1400 audit(1791955785.302:418): avc: denied { accept } for pid=2610 comm="syz.0.573" path="socket:[26039]" dev="sockfs" ino=26039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 200.072040][ T28] audit: type=1400 audit(1791955785.362:419): avc: denied { create } for pid=2582 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.093616][ T2615] 9pnet_fd: Insufficient options for proto=fd [ 200.116918][ T2583] loop1: detected capacity change from 0 to 4096 [ 200.138735][ T2583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.154981][ T2583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 200.166607][ T2617] loop6: detected capacity change from 0 to 512 [ 200.174993][ T2209] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 200.185043][ T2583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.198000][ T2583] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 200.205828][ T2209] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input5 [ 200.209647][ T2583] SELinux: Context òK is not valid (left unmapped). [ 200.224227][ T28] audit: type=1400 audit(1791955785.522:420): avc: denied { relabelto } for pid=2582 comm="syz.1.568" name=22050820 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F24B [ 200.249817][ T6] ipheth 2-1:0.196: Unable to find endpoints [ 200.260562][ T6] usb 2-1: USB disconnect, device number 12 [ 200.333535][ T28] audit: type=1400 audit(1791955785.622:421): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1221 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.357672][ T2209] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 200.373931][ T2591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.382525][ T28] audit: type=1400 audit(1791955785.622:422): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1221 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.389868][ T2591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.420740][ T1808] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.429013][ T2591] loop2: detected capacity change from 0 to 16 [ 200.452120][ T28] audit: type=1400 audit(1791955785.622:423): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1221 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.472049][ T2591] erofs: (device loop2): mounted with root inode @ nid 36. [ 200.570754][ T435] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 200.611835][ T1808] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 200.621041][ T1808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.631272][ T1808] usb-storage 6-1:1.0: USB Mass Storage device detected [ 200.737920][ T2583] EXT4-fs (loop1): unmounting filesystem. [ 200.772257][ T435] usb 1-1: config 3 has an invalid interface number: 61 but max is 0 [ 200.785305][ T435] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 200.809983][ T435] usb 1-1: config 3 has no interface number 0 [ 200.824944][ T435] usb 1-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.857539][ T435] usb 1-1: config 3 interface 61 has no altsetting 0 [ 200.889386][ T435] usb 1-1: string descriptor 0 read error: -22 [ 200.895678][ T435] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 200.905113][ T435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.083360][ T1808] scsi host1: usb-storage 6-1:1.0 [ 201.926941][ T2632] loop1: detected capacity change from 0 to 16 [ 201.930223][ T435] snd-usb-audio: probe of 1-1:3.61 failed with error -2 [ 201.950149][ T19] usb 3-1: USB disconnect, device number 12 [ 201.956311][ T2632] erofs: (device loop1): mounted with root inode @ nid 36. [ 201.965051][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.61/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.988958][ T435] usb 1-1: USB disconnect, device number 12 [ 202.015425][ T2641] syz.6.580 uses obsolete (PF_INET,SOCK_PACKET) [ 202.046487][ T28] audit: type=1400 audit(1791955787.332:424): avc: denied { read } for pid=2637 comm="syz.6.580" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 202.074651][ T28] audit: type=1400 audit(1791955787.362:425): avc: denied { open } for pid=2637 comm="syz.6.580" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 202.174515][ T2640] loop2: detected capacity change from 0 to 40427 [ 202.196969][ T2640] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 202.210573][ T2640] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 202.219601][ T2640] F2FS-fs (loop2): invalid crc value [ 202.247097][ T2640] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.248119][ T2646] xt_hashlimit: size too large, truncated to 1048576 [ 202.294836][ T2640] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 202.302089][ T2640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.350714][ T1808] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 202.591285][ T1808] usb 7-1: Using ep0 maxpacket: 8 [ 202.597664][ T1808] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 202.609202][ T1808] usb 7-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 202.619603][ T1808] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.628721][ T1808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.731059][ T2657] loop0: detected capacity change from 0 to 16 [ 202.740794][ T2657] erofs: (device loop0): mounted with root inode @ nid 36. [ 202.844013][ T28] audit: type=1400 audit(1791955788.132:426): avc: denied { ioctl } for pid=2637 comm="syz.6.580" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.013128][ T435] usb 7-1: USB disconnect, device number 4 [ 203.080607][ T508] usb 6-1: USB disconnect, device number 9 [ 203.113328][ T2665] 9pnet_fd: Insufficient options for proto=fd [ 203.524867][ T2668] loop1: detected capacity change from 0 to 512 [ 203.531572][ T2668] EXT4-fs: Ignoring removed i_version option [ 203.539758][ T2670] loop5: detected capacity change from 0 to 16 [ 203.548958][ T2670] erofs: (device loop5): mounted with root inode @ nid 36. [ 203.614847][ T2668] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.616147][ T2669] bio_check_eod: 196 callbacks suppressed [ 203.616176][ T2669] syz.5.588: attempt to access beyond end of device [ 203.616176][ T2669] loop5: rw=524288, sector=1342178880, nr_sectors = 256 limit=16 [ 203.636595][ T2666] syz.5.588: attempt to access beyond end of device [ 203.636595][ T2666] loop5: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 203.645155][ T2669] syz.5.588: attempt to access beyond end of device [ 203.645155][ T2669] loop5: rw=0, sector=1342179000, nr_sectors = 32 limit=16 [ 203.659373][ T2666] syz.5.588: attempt to access beyond end of device [ 203.659373][ T2666] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 203.673190][ T2669] syz.5.588: attempt to access beyond end of device [ 203.673190][ T2669] loop5: rw=0, sector=1342179000, nr_sectors = 32 limit=16 [ 203.686867][ T2666] syz.5.588: attempt to access beyond end of device [ 203.686867][ T2666] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 203.734932][ T2668] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.585: invalid indirect mapped block 32768 (level 2) [ 203.748620][ T2668] EXT4-fs (loop1): Remounting filesystem read-only [ 203.755235][ T2669] syz.5.588: attempt to access beyond end of device [ 203.755235][ T2669] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 203.755539][ T2668] EXT4-fs (loop1): 1 orphan inode deleted [ 203.769020][ T2669] syz.5.588: attempt to access beyond end of device [ 203.769020][ T2669] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 203.774707][ T2668] EXT4-fs (loop1): 1 truncate cleaned up [ 203.774745][ T2668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 203.788546][ T2669] syz.5.588: attempt to access beyond end of device [ 203.788546][ T2669] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 203.816264][ T2669] syz.5.588: attempt to access beyond end of device [ 203.816264][ T2669] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 203.878882][ T6] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 204.031412][ T287] EXT4-fs (loop1): unmounting filesystem. [ 204.056918][ T435] smpboot: CPU 1 is now offline [ 204.066209][ T2680] x86: Booting SMP configuration: [ 204.071878][ T2680] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 204.310965][ T508] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 205.803380][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 205.817703][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 205.826986][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.835100][ T6] usb 3-1: Product: syz [ 205.839361][ T6] usb 3-1: Manufacturer: syz [ 205.844085][ T6] usb 3-1: SerialNumber: syz [ 205.855090][ T2682] loop0: detected capacity change from 0 to 16 [ 205.907460][ T2682] erofs: (device loop0): mounted with root inode @ nid 36. [ 205.962145][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 206.154780][ T2686] FAULT_INJECTION: forcing a failure. [ 206.154780][ T2686] name failslab, interval 1, probability 0, space 0, times 0 [ 206.167430][ T2686] CPU: 1 PID: 2686 Comm: syz.1.593 Not tainted syzkaller #0 [ 206.174747][ T2686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.184832][ T2686] Call Trace: [ 206.188133][ T2686] [ 206.191088][ T2686] __dump_stack+0x21/0x24 [ 206.195465][ T2686] dump_stack_lvl+0x110/0x170 [ 206.200183][ T2686] ? __cfi_dump_stack_lvl+0x8/0x8 [ 206.205245][ T2686] dump_stack+0x15/0x24 [ 206.209435][ T2686] should_fail_ex+0x3bf/0x510 [ 206.214143][ T2686] ? __sigqueue_alloc+0x13f/0x210 [ 206.219203][ T2686] __should_failslab+0xac/0xf0 [ 206.224024][ T2686] should_failslab+0x9/0x20 [ 206.228558][ T2686] kmem_cache_alloc+0x3b/0x320 [ 206.233362][ T2686] __sigqueue_alloc+0x13f/0x210 [ 206.238254][ T2686] __send_signal_locked+0x19d/0xb70 [ 206.243510][ T2686] send_signal_locked+0x416/0x580 [ 206.248589][ T2686] force_sig_info_to_task+0x2e5/0x3b0 [ 206.254047][ T2686] force_sig_fault+0xd9/0x130 [ 206.258773][ T2686] ? __cfi_force_sig_fault+0x10/0x10 [ 206.264105][ T2686] ? page_fault_oops+0x8b0/0x8b0 [ 206.269082][ T2686] ? down_read_trylock+0x27f/0x660 [ 206.274235][ T2686] ? find_vma+0x89/0xd0 [ 206.278445][ T2686] __bad_area_nosemaphore+0x303/0x630 [ 206.283862][ T2686] bad_area_nosemaphore+0x2d/0x40 [ 206.288929][ T2686] do_user_addr_fault+0xd10/0x1030 [ 206.294083][ T2686] ? debug_smp_processor_id+0x17/0x20 [ 206.299492][ T2686] exc_page_fault+0x51/0xb0 [ 206.304046][ T2686] asm_exc_page_fault+0x27/0x30 [ 206.308928][ T2686] RIP: 0033:0x7fd325b89161 [ 206.313370][ T2686] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 206.333002][ T2686] RSP: 002b:00007fd3269c1f48 EFLAGS: 00010283 [ 206.339119][ T2686] RAX: 0000000000000000 RBX: 00007fd3269c2014 RCX: 0000000000000000 [ 206.347119][ T2686] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 206.355131][ T2686] RBP: 0000000000000004 R08: 000000000000000f R09: 0000000000000000 [ 206.363122][ T2686] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 206.371114][ T2686] R13: 00007fd3269c1fb0 R14: 00007fd325e25fa0 R15: 0000000000000000 [ 206.379134][ T2686] [ 206.495692][ T2688] loop5: detected capacity change from 0 to 16 [ 206.506279][ T2688] erofs: (device loop5): mounted with root inode @ nid 36. [ 206.531941][ T508] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.100715][ T508] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.133231][ T2693] fuse: Bad value for 'user_id' [ 207.139819][ T508] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.181024][ T508] usb 7-1: config 0 interface 0 has no altsetting 0 [ 207.210925][ T508] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 207.240415][ T508] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.260879][ T2699] xt_hashlimit: size too large, truncated to 1048576 [ 207.273278][ T508] usb 7-1: config 0 descriptor?? [ 207.288902][ T508] usb 7-1: can't set config #0, error -71 [ 207.303684][ T508] usb 7-1: USB disconnect, device number 5 [ 207.386203][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 207.400800][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 207.421168][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 207.440842][ T6] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 207.454915][ T2690] loop0: detected capacity change from 0 to 40427 [ 207.470512][ T2690] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 207.478358][ T2690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 207.541586][ T2690] F2FS-fs (loop0): invalid crc value [ 207.555144][ T2706] 9pnet_fd: Insufficient options for proto=fd [ 207.570598][ T2690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.635622][ T2690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 207.646064][ T2690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.720807][ T508] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 207.792883][ T2715] loop5: detected capacity change from 0 to 512 [ 207.801449][ T2715] EXT4-fs: Ignoring removed i_version option [ 207.902579][ T508] usb 7-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 207.912819][ T2715] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.027165][ T508] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.052797][ T2715] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.601: invalid indirect mapped block 32768 (level 2) [ 208.066678][ T2715] EXT4-fs (loop5): Remounting filesystem read-only [ 208.073402][ T2715] EXT4-fs (loop5): 1 orphan inode deleted [ 208.079158][ T2715] EXT4-fs (loop5): 1 truncate cleaned up [ 208.080348][ T508] usb-storage 7-1:1.0: USB Mass Storage device detected [ 208.084863][ T2715] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 209.426070][ T2723] loop1: detected capacity change from 0 to 16 [ 209.725295][ T2723] erofs: (device loop1): mounted with root inode @ nid 36. [ 209.746262][ T2703] bio_check_eod: 11 callbacks suppressed [ 209.746291][ T2703] syz.1.599: attempt to access beyond end of device [ 209.746291][ T2703] loop1: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 209.766449][ T2703] syz.1.599: attempt to access beyond end of device [ 209.766449][ T2703] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.780752][ T2703] syz.1.599: attempt to access beyond end of device [ 209.780752][ T2703] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.796055][ T2723] syz.1.599: attempt to access beyond end of device [ 209.796055][ T2723] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.810748][ T2723] syz.1.599: attempt to access beyond end of device [ 209.810748][ T2723] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.825322][ T2723] syz.1.599: attempt to access beyond end of device [ 209.825322][ T2723] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.839968][ T2723] syz.1.599: attempt to access beyond end of device [ 209.839968][ T2723] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 209.911253][ T2723] syz.1.599: attempt to access beyond end of device [ 209.911253][ T2723] loop1: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 210.001991][ T2703] syz.1.599: attempt to access beyond end of device [ 210.001991][ T2703] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 210.016764][ T2703] syz.1.599: attempt to access beyond end of device [ 210.016764][ T2703] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 210.153812][ T621] EXT4-fs (loop5): unmounting filesystem. [ 210.315151][ T508] scsi host1: usb-storage 7-1:1.0 [ 210.343871][ T6] smpboot: CPU 1 is now offline [ 210.367003][ T2733] x86: Booting SMP configuration: [ 210.435130][ T2733] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 210.465861][ T28] audit: type=1400 audit(1791955795.752:427): avc: denied { create } for pid=2737 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 210.506332][ T2738] loop1: detected capacity change from 0 to 4096 [ 210.549018][ T2738] EXT4-fs (loop1): can't mount with commit=9, fs mounted w/o journal [ 210.651916][ T2749] netlink: 'syz.2.606': attribute type 3 has an invalid length. [ 210.842964][ T28] audit: type=1400 audit(1791955796.132:428): avc: denied { mounton } for pid=2747 comm="syz.0.604" path="/121/file0" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.890777][ T435] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 210.898943][ T28] audit: type=1400 audit(1791955796.182:429): avc: denied { setattr } for pid=2747 comm="syz.0.604" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 210.921246][ T2756] loop5: detected capacity change from 0 to 512 [ 210.927978][ T28] audit: type=1400 audit(1791955796.212:430): avc: denied { mounton } for pid=2755 comm="syz.5.609" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 210.939005][ T2756] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 210.966267][ T28] audit: type=1400 audit(1791955796.252:431): avc: denied { create } for pid=2747 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.978802][ T2748] Zero length message leads to an empty skb [ 211.003147][ T28] audit: type=1400 audit(1791955796.252:432): avc: denied { accept } for pid=2747 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.027047][ T2748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2748 comm=syz.0.604 [ 211.046293][ T2748] loop0: detected capacity change from 0 to 1024 [ 211.061092][ T2748] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.072597][ T2748] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 211.083248][ T2748] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 211.093604][ T2748] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.604: Failed to acquire dquot type 0 [ 211.105705][ T2748] EXT4-fs (loop0): 1 truncate cleaned up [ 211.111556][ T2748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.121703][ T2748] EXT4-fs (loop0): unmounting filesystem. [ 211.130714][ T435] usb 2-1: Using ep0 maxpacket: 16 [ 211.137117][ T435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.147321][ T435] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.157993][ T435] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.167122][ T435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.175206][ T435] usb 2-1: Product: syz [ 211.179453][ T435] usb 2-1: Manufacturer: syz [ 211.184288][ T435] usb 2-1: SerialNumber: syz [ 211.437124][ T2763] loop5: detected capacity change from 0 to 16 [ 211.480504][ T2763] erofs: (device loop5): mounted with root inode @ nid 36. [ 211.691033][ T1808] usb 7-1: USB disconnect, device number 6 [ 213.911388][ T2780] loop1: detected capacity change from 0 to 512 [ 213.918064][ T2780] EXT4-fs: Ignoring removed i_version option [ 213.927318][ T2780] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.073347][ T435] usb 2-1: 0:2 : does not exist [ 214.079781][ T435] usb 2-1: USB disconnect, device number 13 [ 214.104976][ T2780] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.616: invalid indirect mapped block 32768 (level 2) [ 214.118831][ T2780] EXT4-fs (loop1): Remounting filesystem read-only [ 214.125544][ T2780] EXT4-fs (loop1): 1 orphan inode deleted [ 214.131636][ T2780] EXT4-fs (loop1): 1 truncate cleaned up [ 214.137309][ T2780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.264140][ T2787] xt_hashlimit: size too large, truncated to 1048576 [ 214.338129][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.382694][ T287] EXT4-fs (loop1): unmounting filesystem. [ 214.396705][ T435] smpboot: CPU 1 is now offline [ 214.417352][ T2793] x86: Booting SMP configuration: [ 214.422536][ T2793] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 214.493209][ T28] audit: type=1400 audit(1791955799.782:433): avc: denied { create } for pid=2800 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.513709][ T435] kernel write not supported for file /vcsa1 (pid: 435 comm: kworker/0:3) [ 214.538671][ T2802] xt_hashlimit: size too large, truncated to 1048576 [ 214.551976][ T28] audit: type=1400 audit(1791955799.782:434): avc: denied { setopt } for pid=2800 comm="syz.6.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.800724][ T435] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.946674][ T2786] loop5: detected capacity change from 0 to 131072 [ 214.956858][ T2786] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 214.965958][ T2786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 214.975230][ T2786] F2FS-fs (loop5): invalid crc value [ 215.036795][ T2786] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.060125][ T435] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 215.075880][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.089754][ T435] usb-storage 2-1:1.0: USB Mass Storage device detected [ 215.551056][ T2810] loop0: detected capacity change from 0 to 512 [ 215.557769][ T2810] EXT4-fs: Ignoring removed i_version option [ 218.554921][ T2821] loop2: detected capacity change from 0 to 16 [ 218.574043][ T2818] loop6: detected capacity change from 0 to 16 [ 218.603080][ T2821] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.634696][ T2818] erofs: (device loop6): mounted with root inode @ nid 36. [ 220.133706][ T2812] bio_check_eod: 82 callbacks suppressed [ 220.133887][ T2812] syz.2.626: attempt to access beyond end of device [ 220.133887][ T2812] loop2: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 220.154358][ T2812] syz.2.626: attempt to access beyond end of device [ 220.154358][ T2812] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.169008][ T2812] syz.2.626: attempt to access beyond end of device [ 220.169008][ T2812] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.184788][ T2821] syz.2.626: attempt to access beyond end of device [ 220.184788][ T2821] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.199311][ T2821] syz.2.626: attempt to access beyond end of device [ 220.199311][ T2821] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.213990][ T2821] syz.2.626: attempt to access beyond end of device [ 220.213990][ T2821] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.228480][ T2821] syz.2.626: attempt to access beyond end of device [ 220.228480][ T2821] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.354414][ T2821] syz.2.626: attempt to access beyond end of device [ 220.354414][ T2821] loop2: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 220.825642][ T2810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.861669][ T2812] syz.2.626: attempt to access beyond end of device [ 220.861669][ T2812] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.875455][ T2812] syz.2.626: attempt to access beyond end of device [ 220.875455][ T2812] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 220.902269][ T2810] EXT4-fs: failed to create workqueue [ 220.907715][ T2810] EXT4-fs (loop0): mount failed [ 220.991338][ T435] scsi host1: usb-storage 2-1:1.0 [ 221.082870][ T435] usb 2-1: USB disconnect, device number 14 [ 221.181537][ T2835] select_fallback_rq: 2 callbacks suppressed [ 221.181554][ T2835] process 2836 (syz.0.632) no longer affine to cpu1 [ 221.187127][ T6] smpboot: CPU 1 is now offline [ 221.750871][ T2845] loop0: detected capacity change from 0 to 512 [ 221.757440][ T2845] EXT4-fs: Ignoring removed i_version option [ 221.767091][ T2845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.787070][ T2843] xt_hashlimit: size too large, truncated to 1048576 [ 221.798799][ T2844] x86: Booting SMP configuration: [ 221.819652][ T2844] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 221.828706][ T2845] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.632: invalid indirect mapped block 32768 (level 2) [ 221.842363][ T2845] EXT4-fs (loop0): Remounting filesystem read-only [ 221.849007][ T2845] EXT4-fs (loop0): 1 orphan inode deleted [ 221.854878][ T2845] EXT4-fs (loop0): 1 truncate cleaned up [ 221.860533][ T2845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 221.994211][ T2853] xt_hashlimit: size too large, truncated to 1048576 [ 222.064850][ T289] EXT4-fs (loop0): unmounting filesystem. [ 222.109725][ T2857] loop5: detected capacity change from 0 to 512 [ 222.143502][ T2857] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 222.171960][ T2857] EXT4-fs (loop5): invalid journal inode [ 222.190606][ T2857] EXT4-fs (loop5): can't get journal size [ 222.211512][ T2857] EXT4-fs (loop5): 1 truncate cleaned up [ 222.218062][ T2857] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 222.250101][ T621] EXT4-fs (loop5): unmounting filesystem. [ 222.289423][ T2841] loop1: detected capacity change from 0 to 40427 [ 222.314332][ T2841] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 222.341033][ T2841] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 222.359936][ T2841] F2FS-fs (loop1): invalid crc value [ 222.416594][ T2841] F2FS-fs (loop1): Found nat_bits in checkpoint [ 222.422852][ T435] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.454490][ T2867] loop5: detected capacity change from 0 to 16 [ 225.464434][ T2872] loop6: detected capacity change from 0 to 16 [ 225.485965][ T2867] erofs: (device loop5): mounted with root inode @ nid 36. [ 225.511565][ T2872] erofs: (device loop6): mounted with root inode @ nid 36. [ 225.941744][ T2862] bio_check_eod: 81 callbacks suppressed [ 225.941799][ T2862] syz.5.639: attempt to access beyond end of device [ 225.941799][ T2862] loop5: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 225.962492][ T2862] syz.5.639: attempt to access beyond end of device [ 225.962492][ T2862] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 225.977612][ T2862] syz.5.639: attempt to access beyond end of device [ 225.977612][ T2862] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 225.993598][ T2867] syz.5.639: attempt to access beyond end of device [ 225.993598][ T2867] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 226.008410][ T2867] syz.5.639: attempt to access beyond end of device [ 226.008410][ T2867] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 226.023513][ T2867] syz.5.639: attempt to access beyond end of device [ 226.023513][ T2867] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 226.038219][ T2867] syz.5.639: attempt to access beyond end of device [ 226.038219][ T2867] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 226.180281][ T2867] syz.5.639: attempt to access beyond end of device [ 226.180281][ T2867] loop5: rw=524288, sector=1342177528, nr_sectors = 2304 limit=16 [ 226.727871][ T2862] syz.5.639: attempt to access beyond end of device [ 226.727871][ T2862] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 226.742465][ T2862] syz.5.639: attempt to access beyond end of device [ 226.742465][ T2862] loop5: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 230.171951][ T2884] loop5: detected capacity change from 0 to 16 [ 230.282814][ T2884] erofs: (device loop5): mounted with root inode @ nid 36. [ 231.432500][ T6] smpboot: CPU 1 is now offline [ 231.488212][ T2893] x86: Booting SMP configuration: [ 232.805729][ T435] usb 1-1: device not accepting address 13, error -71 [ 232.816636][ T2893] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 234.004831][ T2899] loop2: detected capacity change from 0 to 512 [ 234.011923][ T2899] EXT4-fs: Ignoring removed i_version option [ 234.650934][ T2899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.681545][ T2899] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.649: invalid indirect mapped block 32768 (level 2) [ 234.695817][ T2899] EXT4-fs (loop2): Remounting filesystem read-only [ 234.702584][ T2899] EXT4-fs (loop2): 1 orphan inode deleted [ 234.708364][ T2899] EXT4-fs (loop2): 1 truncate cleaned up [ 234.714056][ T2899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.729370][ T2903] FAULT_INJECTION: forcing a failure. [ 234.729370][ T2903] name failslab, interval 1, probability 0, space 0, times 0 [ 234.742012][ T2903] CPU: 0 PID: 2903 Comm: syz.1.646 Not tainted syzkaller #0 [ 234.749330][ T2903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.759417][ T2903] Call Trace: [ 234.762740][ T2903] [ 234.765700][ T2903] __dump_stack+0x21/0x24 [ 234.770087][ T2903] dump_stack_lvl+0x110/0x170 [ 234.774804][ T2903] ? __cfi_dump_stack_lvl+0x8/0x8 [ 234.779883][ T2903] dump_stack+0x15/0x24 [ 234.784098][ T2903] should_fail_ex+0x3bf/0x510 [ 234.788821][ T2903] ? __sigqueue_alloc+0x13f/0x210 [ 234.793941][ T2903] __should_failslab+0xac/0xf0 [ 234.798747][ T2903] should_failslab+0x9/0x20 [ 234.803285][ T2903] kmem_cache_alloc+0x3b/0x320 [ 234.808089][ T2903] __sigqueue_alloc+0x13f/0x210 [ 234.812988][ T2903] __send_signal_locked+0x19d/0xb70 [ 234.818247][ T2903] send_signal_locked+0x416/0x580 [ 234.823324][ T2903] force_sig_info_to_task+0x2e5/0x3b0 [ 234.828739][ T2903] force_sig_fault+0xd9/0x130 [ 234.833449][ T2903] ? __cfi_force_sig_fault+0x10/0x10 [ 234.838775][ T2903] ? page_fault_oops+0x8b0/0x8b0 [ 234.843748][ T2903] ? down_read_trylock+0x27f/0x660 [ 234.848922][ T2903] ? find_vma+0x89/0xd0 [ 234.853121][ T2903] __bad_area_nosemaphore+0x303/0x630 [ 234.858529][ T2903] bad_area_nosemaphore+0x2d/0x40 [ 234.863592][ T2903] do_user_addr_fault+0xd10/0x1030 [ 234.868741][ T2903] ? debug_smp_processor_id+0x17/0x20 [ 234.874158][ T2903] exc_page_fault+0x51/0xb0 [ 234.878709][ T2903] asm_exc_page_fault+0x27/0x30 [ 234.883599][ T2903] RIP: 0033:0x7fd325b89161 [ 234.888062][ T2903] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 234.907709][ T2903] RSP: 002b:00007fd3269c1f48 EFLAGS: 00010283 [ 234.913811][ T2903] RAX: 0000000000000000 RBX: 00007fd3269c2014 RCX: 0000000000000000 [ 234.921812][ T2903] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 234.929816][ T2903] RBP: 0000000000000003 R08: 000000000000000f R09: 0000000000000000 [ 234.937815][ T2903] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 234.945838][ T2903] R13: 00007fd3269c1fb0 R14: 00007fd325e25fa0 R15: 0000000000000000 [ 234.953845][ T2903] [ 235.121979][ T2910] loop0: detected capacity change from 0 to 512 [ 235.139312][ T2910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 235.169117][ T2910] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 235.230291][ T291] EXT4-fs (loop2): unmounting filesystem. [ 235.263768][ T2916] loop6: detected capacity change from 0 to 256 [ 235.284986][ T2910] EXT4-fs (loop0): 1 truncate cleaned up [ 235.295084][ T2910] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.324928][ T2910] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5974: inode #15: comm syz.0.652: bad extra_isize 62 (inode size 256) [ 235.343074][ T2910] EXT4-fs (loop0): Remounting filesystem read-only [ 235.358779][ T289] EXT4-fs (loop0): unmounting filesystem. [ 235.404835][ T2908] loop1: detected capacity change from 0 to 40427 [ 235.414985][ T2908] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 235.425859][ T2921] loop5: detected capacity change from 0 to 256 [ 235.432171][ T2908] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 235.440965][ T2921] exfat: Deprecated parameter 'namecase' [ 235.446658][ T2921] exfat: Deprecated parameter 'utf8' [ 235.452328][ T2908] F2FS-fs (loop1): invalid crc value [ 235.472004][ T2921] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 235.486385][ T2908] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.718554][ T28] audit: type=1400 audit(1791955821.002:437): avc: denied { mount } for pid=2918 comm="syz.2.655" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 235.757102][ T2908] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 235.771646][ T2908] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 235.789606][ T28] audit: type=1400 audit(1791955821.012:438): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 235.852053][ T2943] loop5: detected capacity change from 0 to 256 [ 235.859397][ T2908] bio_check_eod: 173 callbacks suppressed [ 235.859417][ T2908] syz.1.650: attempt to access beyond end of device [ 235.859417][ T2908] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.887743][ T2943] exfat: Deprecated parameter 'namecase' [ 235.928681][ T2943] exfat: Unknown parameter 'zero_size_dir' [ 236.064894][ T2953] syz.1.650: attempt to access beyond end of device [ 236.064894][ T2953] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 236.200750][ T28] audit: type=1400 audit(1791955821.422:439): avc: denied { search } for pid=2951 comm="syz.0.668" name="/" dev="configfs" ino=6745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 236.837242][ T2963] FAULT_INJECTION: forcing a failure. [ 236.837242][ T2963] name failslab, interval 1, probability 0, space 0, times 0 [ 236.868191][ T2963] CPU: 0 PID: 2963 Comm: syz.2.671 Not tainted syzkaller #0 [ 236.875548][ T2963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.885629][ T2963] Call Trace: [ 236.888938][ T2963] [ 236.891894][ T2963] __dump_stack+0x21/0x24 [ 236.896273][ T2963] dump_stack_lvl+0x110/0x170 [ 236.900989][ T2963] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.906057][ T2963] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 236.912783][ T2963] dump_stack+0x15/0x24 [ 236.916986][ T2963] should_fail_ex+0x3bf/0x510 [ 236.921705][ T2963] __should_failslab+0xac/0xf0 [ 236.926521][ T2963] should_failslab+0x9/0x20 [ 236.931057][ T2963] __kmem_cache_alloc_node+0x3d/0x2d0 [ 236.936469][ T2963] ? percpu_ref_init+0xce/0x340 [ 236.941384][ T2963] ? percpu_ref_init+0xce/0x340 [ 236.946279][ T2963] kmalloc_trace+0x29/0xb0 [ 236.950732][ T2963] percpu_ref_init+0xce/0x340 [ 236.955448][ T2963] ? __cfi_free_ioctx_users+0x10/0x10 [ 236.960862][ T2963] ioctx_alloc+0x21a/0x720 [ 236.965316][ T2963] __se_sys_io_setup+0x6f/0x230 [ 236.970199][ T2963] __x64_sys_io_setup+0x5b/0x70 [ 236.975103][ T2963] x64_sys_call+0x840/0x9a0 [ 236.979637][ T2963] do_syscall_64+0x4c/0xa0 [ 236.984101][ T2963] ? clear_bhb_loop+0x30/0x80 [ 236.988814][ T2963] ? clear_bhb_loop+0x30/0x80 [ 236.993534][ T2963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.999514][ T2963] RIP: 0033:0x7ff8fab9e2d9 [ 237.003956][ T2963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.023589][ T2963] RSP: 002b:00007ff8fba68028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 237.032052][ T2963] RAX: ffffffffffffffda RBX: 00007ff8fae25fa0 RCX: 00007ff8fab9e2d9 [ 237.040056][ T2963] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000043 [ 237.048083][ T2963] RBP: 00007ff8fac35888 R08: 0000000000000000 R09: 0000000000000000 [ 237.056089][ T2963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.064096][ T2963] R13: 00007ff8fae26038 R14: 00007ff8fae25fa0 R15: 00007ffe9493e958 [ 237.072121][ T2963] [ 237.220741][ T28] audit: type=1400 audit(1791955822.492:440): avc: denied { sys_module } for pid=2967 comm="syz.6.674" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 237.951244][ T28] audit: type=1326 audit(1791955823.242:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.2.681" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fab9e2d9 code=0x7ffc0000 [ 238.054270][ T28] audit: type=1326 audit(1791955823.272:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.2.681" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff8fab9e2d9 code=0x7ffc0000 [ 238.081378][ T28] audit: type=1326 audit(1791955823.272:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm=FF exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fab9e2d9 code=0x7ffc0000 [ 238.105417][ T28] audit: type=1326 audit(1791955823.272:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm=FF exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fab9e2d9 code=0x7ffc0000 [ 238.162965][ T28] audit: type=1326 audit(1791955823.272:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm=FF exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff8fab9e2d9 code=0x7ffc0000 [ 238.234794][ T2990] loop2: detected capacity change from 0 to 256 [ 238.242085][ T2990] exfat: Unknown parameter 'zero_size_dir' [ 238.248047][ T28] audit: type=1326 audit(1791955823.282:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm=FF exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fab9e2d9 code=0x7ffc0000 [ 238.281440][ T313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.760770][ T3039] tmpfs: Unknown parameter 'usrquota' [ 239.051029][ T508] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 240.410865][ T508] usb 7-1: Using ep0 maxpacket: 32 [ 240.418094][ T508] usb 7-1: config 20 has an invalid interface number: 156 but max is 0 [ 240.538727][ T508] usb 7-1: config 20 has no interface number 0 [ 240.556715][ T508] usb 7-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=98.1a [ 240.580680][ T508] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.609023][ T508] usb 7-1: Product: syz [ 240.619102][ T508] usb 7-1: Manufacturer: syz [ 240.639299][ T508] usb 7-1: SerialNumber: syz [ 240.714796][ T3059] loop2: detected capacity change from 0 to 512 [ 240.741881][ T3059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.705: missing EA_INODE flag [ 240.751069][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 240.751129][ T28] audit: type=1400 audit(1791955826.042:450): avc: denied { mounton } for pid=3061 comm="syz.0.707" path="/145/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 240.764480][ T3059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.705: error while reading EA inode 2 err=-117 [ 240.782516][ T3062] 9pnet_virtio: no channels available for device ./proc/file0 [ 240.801007][ T3059] EXT4-fs (loop2): 1 orphan inode deleted [ 240.806808][ T3059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.808435][ T3063] FAULT_INJECTION: forcing a failure. [ 240.808435][ T3063] name failslab, interval 1, probability 0, space 0, times 0 [ 240.915502][ T508] usb 7-1: USB disconnect, device number 7 [ 240.979689][ T3063] CPU: 1 PID: 3063 Comm: syz.0.707 Not tainted syzkaller #0 [ 240.987030][ T3063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.997116][ T3063] Call Trace: [ 241.000416][ T3063] [ 241.003399][ T3063] __dump_stack+0x21/0x24 [ 241.007785][ T3063] dump_stack_lvl+0x110/0x170 [ 241.012498][ T3063] ? __cfi_dump_stack_lvl+0x8/0x8 [ 241.017558][ T3063] ? do_new_mount+0x116/0xb40 [ 241.022261][ T3063] ? __se_sys_mount+0x320/0x390 [ 241.027138][ T3063] ? __x64_sys_mount+0xbf/0xd0 [ 241.031940][ T3063] ? x64_sys_call+0x65d/0x9a0 [ 241.036644][ T3063] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.042736][ T3063] dump_stack+0x15/0x24 [ 241.047038][ T3063] should_fail_ex+0x3bf/0x510 [ 241.051743][ T3063] __should_failslab+0xac/0xf0 [ 241.056543][ T3063] should_failslab+0x9/0x20 [ 241.061068][ T3063] __kmem_cache_alloc_node+0x3d/0x2d0 [ 241.066476][ T3063] ? generic_parse_monolithic+0x24d/0x370 [ 241.072229][ T3063] ? selinux_sb_eat_lsm_opts+0x9f9/0xac0 [ 241.077894][ T3063] ? generic_parse_monolithic+0x24d/0x370 [ 241.083655][ T3063] __kmalloc_node_track_caller+0xa1/0x1e0 [ 241.089398][ T3063] kmemdup_nul+0x31/0xa0 [ 241.093668][ T3063] generic_parse_monolithic+0x24d/0x370 [ 241.099335][ T3063] ? __kasan_kmalloc+0x95/0xb0 [ 241.104143][ T3063] ? __cfi_generic_parse_monolithic+0x10/0x10 [ 241.110334][ T3063] ? fuse_init_fs_context+0xfa/0x200 [ 241.115651][ T3063] ? alloc_fs_context+0x667/0x7d0 [ 241.120708][ T3063] parse_monolithic_mount_data+0x7a/0x90 [ 241.126375][ T3063] do_new_mount+0x222/0xb40 [ 241.130904][ T3063] ? security_capable+0x99/0xc0 [ 241.135804][ T3063] path_mount+0x640/0xfd0 [ 241.140171][ T3063] __se_sys_mount+0x320/0x390 [ 241.144873][ T3063] ? __this_cpu_preempt_check+0x13/0x20 [ 241.150452][ T3063] ? __x64_sys_mount+0xd0/0xd0 [ 241.155240][ T3063] ? __kasan_check_write+0x14/0x20 [ 241.160377][ T3063] ? fpregs_restore_userregs+0x128/0x260 [ 241.166034][ T3063] __x64_sys_mount+0xbf/0xd0 [ 241.170652][ T3063] x64_sys_call+0x65d/0x9a0 [ 241.175186][ T3063] do_syscall_64+0x4c/0xa0 [ 241.179639][ T3063] ? clear_bhb_loop+0x30/0x80 [ 241.184343][ T3063] ? clear_bhb_loop+0x30/0x80 [ 241.189068][ T3063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.194990][ T3063] RIP: 0033:0x7f1fc659e2d9 [ 241.199420][ T3063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.219048][ T3063] RSP: 002b:00007f1fc7449028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.227483][ T3063] RAX: ffffffffffffffda RBX: 00007f1fc6825fa0 RCX: 00007f1fc659e2d9 [ 241.235474][ T3063] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 0000000000000000 [ 241.243466][ T3063] RBP: 00007f1fc6635888 R08: 0000200000000380 R09: 0000000000000000 [ 241.251463][ T3063] R10: 0000000000000418 R11: 0000000000000246 R12: 0000000000000000 [ 241.259458][ T3063] R13: 00007f1fc6826038 R14: 00007f1fc6825fa0 R15: 00007fff1e6166b8 [ 241.267462][ T3063] [ 241.288168][ T28] audit: type=1400 audit(1791955826.562:451): avc: denied { create } for pid=3058 comm="syz.2.705" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 241.308687][ T28] audit: type=1400 audit(1791955826.562:452): avc: denied { read } for pid=3058 comm="syz.2.705" name="file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 241.363589][ T28] audit: type=1400 audit(1791955826.562:453): avc: denied { open } for pid=3058 comm="syz.2.705" path="/153/file0/file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 241.579491][ T291] EXT4-fs (loop2): unmounting filesystem. [ 241.680374][ T28] audit: type=1400 audit(1791955826.962:454): avc: denied { write } for pid=3089 comm="syz.5.714" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 241.792240][ T3099] loop0: detected capacity change from 0 to 256 [ 241.821539][ T313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.825787][ T3099] using random self ethernet address [ 241.831389][ T28] audit: type=1400 audit(1791955827.112:455): avc: denied { write } for pid=3098 comm="syz.0.717" name="functions" dev="configfs" ino=16383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 241.837544][ T3099] using random host ethernet address [ 241.915164][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.921877][ T28] audit: type=1400 audit(1791955827.112:456): avc: denied { add_name } for pid=3098 comm="syz.0.717" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 241.922859][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.005682][ T3110] 9pnet_virtio: no channels available for device ./proc/file0 [ 242.023745][ T3110] FAULT_INJECTION: forcing a failure. [ 242.023745][ T3110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 242.068337][ T3110] CPU: 0 PID: 3110 Comm: syz.0.719 Not tainted syzkaller #0 [ 242.075694][ T3110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.085808][ T3110] Call Trace: [ 242.089119][ T3110] [ 242.092072][ T3110] __dump_stack+0x21/0x24 [ 242.096504][ T3110] dump_stack_lvl+0x110/0x170 [ 242.101223][ T3110] ? __cfi_dump_stack_lvl+0x8/0x8 [ 242.106312][ T3110] dump_stack+0x15/0x24 [ 242.110517][ T3110] should_fail_ex+0x3bf/0x510 [ 242.115240][ T3110] should_fail+0xb/0x10 [ 242.119431][ T3110] get_futex_key+0x143/0xb10 [ 242.124096][ T3110] ? __cfi_get_futex_key+0x10/0x10 [ 242.129294][ T3110] ? import_iovec+0x7c/0xb0 [ 242.133875][ T3110] futex_wake+0x150/0x8e0 [ 242.138271][ T3110] ? __sys_sendmsg+0x290/0x290 [ 242.143091][ T3110] ? __cfi_futex_wake+0x10/0x10 [ 242.148025][ T3110] do_futex+0x2bf/0x430 [ 242.152242][ T3110] ? __cfi_do_futex+0x10/0x10 [ 242.156964][ T3110] __se_sys_futex+0x136/0x310 [ 242.161699][ T3110] ? __x64_sys_futex+0x100/0x100 [ 242.166685][ T3110] ? xfd_validate_state+0x70/0x150 [ 242.171901][ T3110] ? __kasan_check_write+0x14/0x20 [ 242.177079][ T3110] __x64_sys_futex+0xe5/0x100 [ 242.181828][ T3110] x64_sys_call+0x7ec/0x9a0 [ 242.186377][ T3110] do_syscall_64+0x4c/0xa0 [ 242.190857][ T3110] ? clear_bhb_loop+0x30/0x80 [ 242.195588][ T3110] ? clear_bhb_loop+0x30/0x80 [ 242.200332][ T3110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.206293][ T3110] RIP: 0033:0x7f1fc659e2d9 [ 242.210778][ T3110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.230470][ T3110] RSP: 002b:00007f1fc74490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 242.239206][ T3110] RAX: ffffffffffffffda RBX: 00007f1fc6825fa8 RCX: 00007f1fc659e2d9 [ 242.247230][ T3110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1fc6825fac [ 242.255255][ T3110] RBP: 00007f1fc6825fa0 R08: 003b035c94c078fe R09: 0000000000000000 [ 242.263288][ T3110] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 242.271304][ T3110] R13: 00007f1fc6826038 R14: 00007fff1e6165d0 R15: 00007fff1e6166b8 [ 242.279320][ T3110] [ 242.391210][ T3114] usb usb7: usbfs: process 3114 (syz.5.720) did not claim interface 0 before use [ 242.434810][ T3118] FAULT_INJECTION: forcing a failure. [ 242.434810][ T3118] name failslab, interval 1, probability 0, space 0, times 0 [ 242.482642][ T3118] CPU: 1 PID: 3118 Comm: syz.5.722 Not tainted syzkaller #0 [ 242.489999][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.500086][ T3118] Call Trace: [ 242.503407][ T3118] [ 242.506370][ T3118] __dump_stack+0x21/0x24 [ 242.510769][ T3118] dump_stack_lvl+0x110/0x170 [ 242.515511][ T3118] ? __cfi_dump_stack_lvl+0x8/0x8 [ 242.520605][ T3118] ? kasan_set_track+0x60/0x70 [ 242.525417][ T3118] ? kasan_set_track+0x4b/0x70 [ 242.530227][ T3118] dump_stack+0x15/0x24 [ 242.534437][ T3118] should_fail_ex+0x3bf/0x510 [ 242.539150][ T3118] __should_failslab+0xac/0xf0 [ 242.543958][ T3118] should_failslab+0x9/0x20 [ 242.548506][ T3118] slab_pre_alloc_hook+0x30/0x1d0 [ 242.553580][ T3118] kmem_cache_alloc_lru+0x49/0x280 [ 242.558741][ T3118] ? new_inode_pseudo+0x8f/0x1f0 [ 242.563724][ T3118] new_inode_pseudo+0x8f/0x1f0 [ 242.568534][ T3118] alloc_anon_inode+0x21/0x300 [ 242.573371][ T3118] ? __alloc_percpu+0x24/0x30 [ 242.578085][ T3118] aio_setup_ring+0xfc/0xbc0 [ 242.582722][ T3118] ? free_ioctx_reqs+0x160/0x160 [ 242.587725][ T3118] ioctx_alloc+0x31d/0x720 [ 242.592192][ T3118] __se_sys_io_setup+0x6f/0x230 [ 242.597201][ T3118] __x64_sys_io_setup+0x5b/0x70 [ 242.602096][ T3118] x64_sys_call+0x840/0x9a0 [ 242.606651][ T3118] do_syscall_64+0x4c/0xa0 [ 242.611112][ T3118] ? clear_bhb_loop+0x30/0x80 [ 242.615834][ T3118] ? clear_bhb_loop+0x30/0x80 [ 242.620558][ T3118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.626489][ T3118] RIP: 0033:0x7f3a7679e2d9 [ 242.630940][ T3118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.650601][ T3118] RSP: 002b:00007f3a775b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 242.659141][ T3118] RAX: ffffffffffffffda RBX: 00007f3a76a25fa0 RCX: 00007f3a7679e2d9 [ 242.667154][ T3118] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000043 [ 242.675253][ T3118] RBP: 00007f3a76835888 R08: 0000000000000000 R09: 0000000000000000 [ 242.683278][ T3118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.691302][ T3118] R13: 00007f3a76a26038 R14: 00007f3a76a25fa0 R15: 00007ffefe3ff548 [ 242.699347][ T3118] [ 242.740338][ T28] audit: type=1400 audit(1791955828.022:457): avc: denied { write } for pid=3121 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.809408][ T28] audit: type=1400 audit(1791955828.092:458): avc: denied { setopt } for pid=3131 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.850225][ T28] audit: type=1400 audit(1791955828.092:459): avc: denied { ioctl } for pid=3131 comm="syz.2.728" path="socket:[27821]" dev="sockfs" ino=27821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.300894][ T3166] loop0: detected capacity change from 0 to 512 [ 243.359179][ T3166] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.736: Failed to acquire dquot type 1 [ 243.375046][ T3166] EXT4-fs (loop0): 1 truncate cleaned up [ 243.385006][ T3166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.417537][ T3166] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.476508][ T3166] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.736: deleted inode referenced: 12 [ 243.510710][ T888] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 243.514184][ T3166] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.736: deleted inode referenced: 12 [ 243.587960][ T3166] EXT4-fs (loop0): unmounting filesystem. [ 243.735306][ T888] usb 7-1: Using ep0 maxpacket: 32 [ 243.753831][ T888] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 243.779232][ T888] usb 7-1: config 0 has no interface number 0 [ 243.799390][ T888] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 243.812768][ T888] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 243.842689][ T888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.863700][ T888] usb 7-1: Product: syz [ 243.867918][ T888] usb 7-1: Manufacturer: syz [ 243.910746][ T888] usb 7-1: SerialNumber: syz [ 243.935921][ T888] usb 7-1: config 0 descriptor?? [ 243.946754][ T3164] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 244.168813][ T3164] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 244.200705][ T481] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 244.336476][ T3197] loop1: detected capacity change from 0 to 512 [ 244.405246][ T3197] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.748: Failed to acquire dquot type 1 [ 244.453190][ T3197] EXT4-fs (loop1): 1 truncate cleaned up [ 244.469886][ T3197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 244.481592][ T3207] 9pnet: Could not find request transport: rdma [ 244.488101][ T481] usb 3-1: config 118 interface 0 has no altsetting 0 [ 244.498658][ T481] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 244.512011][ T3208] netlink: 'syz.0.752': attribute type 16 has an invalid length. [ 244.542202][ T3197] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.554992][ T481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.564132][ T3210] FAULT_INJECTION: forcing a failure. [ 244.564132][ T3210] name failslab, interval 1, probability 0, space 0, times 0 [ 244.577001][ T3208] netlink: 'syz.0.752': attribute type 17 has an invalid length. [ 244.596901][ T3197] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.748: deleted inode referenced: 12 [ 244.609453][ T481] usb 3-1: Product: syz [ 244.623460][ T481] usb 3-1: Manufacturer: syz [ 244.628153][ T3210] CPU: 0 PID: 3210 Comm: syz.5.754 Not tainted syzkaller #0 [ 244.635483][ T3210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.645582][ T3210] Call Trace: [ 244.648895][ T3210] [ 244.651858][ T3210] __dump_stack+0x21/0x24 [ 244.656238][ T3210] dump_stack_lvl+0x110/0x170 [ 244.660958][ T3210] ? __cfi_dump_stack_lvl+0x8/0x8 [ 244.666028][ T3210] ? __kasan_check_read+0x11/0x20 [ 244.671277][ T3210] ? call_rcu+0xb84/0xf50 [ 244.675646][ T3210] dump_stack+0x15/0x24 [ 244.679847][ T3210] should_fail_ex+0x3bf/0x510 [ 244.684563][ T3210] ? mas_alloc_nodes+0x2d8/0x850 [ 244.689545][ T3210] __should_failslab+0xac/0xf0 [ 244.694352][ T3210] should_failslab+0x9/0x20 [ 244.699283][ T3210] kmem_cache_alloc+0x3b/0x320 [ 244.704087][ T3210] mas_alloc_nodes+0x2d8/0x850 [ 244.708929][ T3210] mas_preallocate+0xe3d/0x1430 [ 244.713820][ T3210] ? __cfi_mas_preallocate+0x10/0x10 [ 244.719148][ T3210] ? rwsem_write_trylock+0x136/0x300 [ 244.724472][ T3210] vma_expand+0x437/0xad0 [ 244.728841][ T3210] mmap_region+0xf04/0x2130 [ 244.733390][ T3210] ? __cfi_mmap_region+0x10/0x10 [ 244.738369][ T3210] ? cap_mmap_addr+0x165/0x2e0 [ 244.743197][ T3210] ? get_unmapped_area+0x30c/0x370 [ 244.748351][ T3210] do_mmap+0x858/0xdd0 [ 244.752463][ T3210] ? __cfi_do_mmap+0x10/0x10 [ 244.757098][ T3210] ? do_futex+0x2e2/0x430 [ 244.761460][ T3210] vm_mmap_pgoff+0x206/0x3f0 [ 244.766081][ T3210] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 244.771527][ T3210] ? xfd_validate_state+0x70/0x150 [ 244.776719][ T3210] ksys_mmap_pgoff+0xf6/0x1d0 [ 244.781435][ T3210] ? __kasan_check_write+0x14/0x20 [ 244.786582][ T3210] __x64_sys_mmap+0xfa/0x110 [ 244.791210][ T3210] x64_sys_call+0x8fd/0x9a0 [ 244.796128][ T3210] do_syscall_64+0x4c/0xa0 [ 244.800594][ T3210] ? clear_bhb_loop+0x30/0x80 [ 244.805329][ T3210] ? clear_bhb_loop+0x30/0x80 [ 244.810047][ T3210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.815971][ T3210] RIP: 0033:0x7f3a7679e2d9 [ 244.820415][ T3210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.840164][ T3210] RSP: 002b:00007f3a775b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 244.849039][ T3210] RAX: ffffffffffffffda RBX: 00007f3a76a25fa0 RCX: 00007f3a7679e2d9 [ 244.857054][ T3210] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 244.865074][ T3210] RBP: 00007f3a76835888 R08: ffffffffffffffff R09: 000000001c5f1000 [ 244.873079][ T3210] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 244.881084][ T3210] R13: 00007f3a76a26038 R14: 00007f3a76a25fa0 R15: 00007ffefe3ff548 [ 244.889101][ T3210] [ 244.903411][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.912941][ T481] usb 3-1: SerialNumber: syz [ 244.920051][ T3211] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.748: deleted inode referenced: 12 [ 244.945194][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.979097][ T3211] EXT4-fs (loop1): unmounting filesystem. [ 244.990524][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.070522][ T3208] device bridge1 left promiscuous mode [ 245.086590][ T3208] device bridge2 left promiscuous mode [ 245.097933][ T888] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 245.108651][ T3210] ------------[ cut here ]------------ [ 245.114872][ T3210] kernel BUG at mm/mmap.c:2854! [ 245.120329][ T3208] device bridge3 left promiscuous mode [ 245.120450][ T888] asix: probe of 7-1:0.188 failed with error -71 [ 245.132681][ T3210] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 245.138789][ T3210] CPU: 1 PID: 3210 Comm: syz.5.754 Not tainted syzkaller #0 [ 245.146105][ T3210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.156200][ T3210] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 245.161621][ T3210] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 19 4d 09 00 e9 d2 f9 ff ff e8 3f b3 c3 ff 0f 0b e8 38 b3 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 245.162402][ T481] usb 3-1: USB disconnect, device number 14 [ 245.181260][ T3210] RSP: 0018:ffffc9000eea7a40 EFLAGS: 00010283 [ 245.181291][ T3210] RAX: ffffffff81adbb08 RBX: 0000200000b36000 RCX: 0000000000080000 [ 245.181308][ T3210] RDX: ffffc90000dd9000 RSI: 000000000003809d RDI: 000000000003809e [ 245.181322][ T3210] RBP: ffffc9000eea7c30 R08: ffff8881167a0000 R09: 0000000000000003 [ 245.181338][ T3210] R10: 0000000000000003 R11: 0000000000000002 R12: 0000200000b35fff [ 245.181352][ T3210] R13: 0000200000b36000 R14: dffffc0000000000 R15: 0000200000000000 [ 245.181369][ T3210] FS: 00007f3a775b46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 245.181387][ T3210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.181402][ T3210] CR2: fffffffffffffe70 CR3: 000000013b4b3000 CR4: 00000000003506a0 [ 245.181423][ T3210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.181436][ T3210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.181467][ T3210] Call Trace: [ 245.181474][ T3210] [ 245.181487][ T3210] ? __cfi_mmap_region+0x10/0x10 [ 245.181525][ T3210] ? cap_mmap_addr+0x165/0x2e0 [ 245.198826][ T3208] device bridge4 left promiscuous mode [ 245.201491][ T3210] ? get_unmapped_area+0x30c/0x370 [ 245.201533][ T3210] do_mmap+0x858/0xdd0 [ 245.201566][ T3210] ? __cfi_do_mmap+0x10/0x10 [ 245.244571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 245.249046][ T3210] ? do_futex+0x2e2/0x430 [ 245.299212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.299574][ T3210] vm_mmap_pgoff+0x206/0x3f0 [ 245.320572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 245.328349][ T3210] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 245.328386][ T3210] ? xfd_validate_state+0x70/0x150 [ 245.328418][ T3210] ksys_mmap_pgoff+0xf6/0x1d0 [ 245.328449][ T3210] ? __kasan_check_write+0x14/0x20 [ 245.360920][ T3210] __x64_sys_mmap+0xfa/0x110 [ 245.365553][ T3210] x64_sys_call+0x8fd/0x9a0 [ 245.370102][ T3210] do_syscall_64+0x4c/0xa0 [ 245.374571][ T3210] ? clear_bhb_loop+0x30/0x80 [ 245.379289][ T3210] ? clear_bhb_loop+0x30/0x80 [ 245.384009][ T3210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.389941][ T3210] RIP: 0033:0x7f3a7679e2d9 [ 245.393084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.394393][ T3210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.394416][ T3210] RSP: 002b:00007f3a775b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 245.430424][ T3210] RAX: ffffffffffffffda RBX: 00007f3a76a25fa0 RCX: 00007f3a7679e2d9 [ 245.438467][ T3210] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 245.446488][ T3210] RBP: 00007f3a76835888 R08: ffffffffffffffff R09: 000000001c5f1000 [ 245.454497][ T3210] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 245.462495][ T3210] R13: 00007f3a76a26038 R14: 00007f3a76a25fa0 R15: 00007ffefe3ff548 [ 245.470497][ T3210] [ 245.473546][ T3210] Modules linked in: [ 245.482990][ T888] usb 7-1: USB disconnect, device number 8 [ 245.490114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.501703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.510142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.518718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.527340][ T3210] ---[ end trace 0000000000000000 ]--- [ 245.533145][ T3210] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 245.538602][ T3210] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 19 4d 09 00 e9 d2 f9 ff ff e8 3f b3 c3 ff 0f 0b e8 38 b3 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 245.559234][ T3210] RSP: 0018:ffffc9000eea7a40 EFLAGS: 00010283 [ 245.565572][ T3210] RAX: ffffffff81adbb08 RBX: 0000200000b36000 RCX: 0000000000080000 [ 245.573777][ T3210] RDX: ffffc90000dd9000 RSI: 000000000003809d RDI: 000000000003809e [ 245.582527][ T3210] RBP: ffffc9000eea7c30 R08: ffff8881167a0000 R09: 0000000000000003 [ 245.590555][ T3210] R10: 0000000000000003 R11: 0000000000000002 R12: 0000200000b35fff [ 245.598865][ T3210] R13: 0000200000b36000 R14: dffffc0000000000 R15: 0000200000000000 [ 245.607165][ T3210] FS: 00007f3a775b46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 245.616326][ T3210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.623412][ T3210] CR2: fffffffffffffe70 CR3: 000000013b4b3000 CR4: 00000000003506a0 [ 245.631642][ T3210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.639657][ T3210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.647909][ T3210] Kernel panic - not syncing: Fatal exception [ 245.654561][ T3210] Kernel Offset: disabled [ 245.658900][ T3210] Rebooting in 86400 seconds..