last executing test programs: 10.260455259s ago: executing program 2 (id=99): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x16, &(0x7f0000000c40)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000180100002020733500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.372419549s ago: executing program 2 (id=125): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 9.372299299s ago: executing program 2 (id=127): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x90) 9.360775361s ago: executing program 2 (id=128): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc400, &(0x7f0000000740)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@errors_continue}]}, 0x2, 0x246, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='8086 2922 ffffffff ffffffff 0 0 b', 0x21) 9.26613977s ago: executing program 2 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x3, &(0x7f0000000dc0)=@framed, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = fsopen(&(0x7f0000000ec0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)={@cgroup=r2, r0, 0x12, 0x2}, 0x10) 8.993333678s ago: executing program 2 (id=141): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r3, 0x32, 0x0, @void}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./rpc_pipefs\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = fsopen(&(0x7f0000000400)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010d00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 8.970357191s ago: executing program 32 (id=141): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r3, 0x32, 0x0, @void}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./rpc_pipefs\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = fsopen(&(0x7f0000000400)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010d00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 4.369232852s ago: executing program 1 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000600)='./mysys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.186067181s ago: executing program 1 (id=273): syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x200700, &(0x7f00000009c0)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f0000000a80)="$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") utime(&(0x7f0000002dc0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000000fc0)=@sha1={0x1, "8affff42f431c3d9a322d200008000004000"}, 0xe2f2, 0x0) 3.301508041s ago: executing program 1 (id=286): close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@acl}, {@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x21, 0x4bd, &(0x7f0000000740)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") openat(0xffffffffffffff9c, 0x0, 0x2040, 0x6c) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x101842, 0x1) 3.003660772s ago: executing program 1 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='g\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a18300000004000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="1a000e0088800900ffffffffffff080211000000ec03f3b85ad3000004008181a1ffffffffffffff6400000000060101010101010301000406010202000010060243832a0100720603030303030371078100ff0101046176060ff42200040000"], 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x8, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='0', 0x1) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) pwrite64(r4, &(0x7f0000000580)='3', 0x1, 0xe7c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x7}, 0x4, 0x3, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x5, 0xdb2}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) write$binfmt_format(r5, &(0x7f0000000240)='-1\x00', 0x3) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x810, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0x36, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xd, 0x0, 0x1, {0x22, 0x1c1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9a, 0xff, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x1ef, 0x47, 0x9b, 0x5}}]}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x18, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESHEX, @ANYRESHEX=r2]}) 2.768099486s ago: executing program 3 (id=306): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.761621307s ago: executing program 3 (id=307): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) 2.717808441s ago: executing program 3 (id=311): syz_emit_ethernet(0x66, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, 0x0, 0x0) 1.06996289s ago: executing program 5 (id=400): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x2, 0x0, @ioapic={0x8000000, 0xd, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0xd, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0x9}, {0x7, 0x9, 0xe, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7c, 0xd, 0xb, '\x00', 0xb}, {0xd5, 0xd, 0x8, '\x00', 0x6}, {0x2, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x5, 0xfe, '\x00', 0xff}, {0xfe, 0xa, 0x26, '\x00', 0x6}, {0xcf, 0xb, 0x1, '\x00', 0x6}, {0xf, 0x4, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x10, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x0, '\x00', 0xc}, {0x3, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0x10, '\x00', 0x1}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000a00)) 968.680941ms ago: executing program 3 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000040)='ro\x00', &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1400c, &(0x7f0000000200)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x4a7, &(0x7f0000000240)="$eJzs3M1vG0UbAPBnN3Hy5k0hoZSvlo9AQVQIkqYt0AMHQCBxKAIJDnCMklCVpgU1QaJVJFIO5YQqJO6II/8CJ7ggxAmJK3BGFRXKpS0no7V3E9u13XzYcRv/fpKTZ3bXO/PsepzZndgB9K2J7EcSsScifo+IsWqxfoOJ6q/rq8uzN1aXZ5Mol9/5J6lsd211ebbYtHje6GDtTpI40KTexfMXTs8sLMyfy8tTS2c+nlo8f+G5U2dmTs6fnD975PjxY0enX3zhyPPbyG4kIva+VY3TfNkb73/15okv6/JvyKNDJtqtfKpc7nB1vXVXTTxYBKXetIWNG8jPV6nS/8diYP3sxVi8/vla4bMeNRDomnK5XB5tvXqlDOxiSdSXdXnoF8Uf+uL6N/89XDsIeLmrI5DeuvpK9QIoy/t6/qiuGVy7Y1BquL7tpImIeG/l32+yR7S9D5F0qQUAQL/5IRv/PJuNdpZns7HH+vgjjftrtrs7nxsaj4h7ImJvRNwbZ2NfRNwXUdn2gYh4cJP110ySVIaZ11aHGsY/6ZUtJ7cB2fjvpco978bxXzH6i/GBSul8tRCl5INTC/OH82NyKErDWXm6TR0/vvbb5Vbrasd/2SOrvxgL5u24Mjhc/5y5maWZrWdc7+rFiP2D1bm9+vyTtZmAbOT5UETsb7aD9NZ1nHrmu4dbrbt1/m0MbmirtsrfRjxdndtciYb8C0n7+cmp/8XC/OGp4lVxs19+vfR2q/q3lX8HZOf//9H8/OfGk9r52sXN13Hpjy9azq1OFHOEm3j9r8wsDUXybiUeypd9OrO0dG46Yig5UW107fIj688tysX2Wf6HDjbLP628xxVH4kBEZC/iRyLi0Yh4LD93j0fEExFxsE3+P7/65IeNy0aK/G+D8z+3qfO/HgxF/ZK0yTZZMHD6p+/rKh1fD/P8b7R//ztWiQ7lSzby/ndzK5oH2z1+AAAAcCdII2JPJOnkWpymk5MRoxGxb/0/uD85O1f9jMB4lNLiTtdYzf3Q6fyyvlq+GBHVfy0o1h+NtHLf+OuBkUp5cvajhbmeZg6Mtuj/mb8Get06oOu2OI820ul2ADuvA/PowB2qbf/3IW7Y1W7q/237/HBX2wLsrCZ//13bQ59oNv73fT/QHxr6v2k/6CPu/0P/0v+hf23gM/zA7rM4Erf+kPxaUIqIxlXFnjbw9K0EYxGbaeH2g+KbEbe7nyjtXJt7EUTamf38mR/vJquGWr+0/r4ccRschOZB0r3usHNB796TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOum/AAAA//8Km9MH") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)) 797.437279ms ago: executing program 3 (id=409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mysys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 695.657599ms ago: executing program 4 (id=413): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000700), 0x4) 694.806709ms ago: executing program 3 (id=414): mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="20000000020903"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) 636.636175ms ago: executing program 0 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="0688c3b456", 0x5, 0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 636.511225ms ago: executing program 0 (id=416): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000ac0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f00000017c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0xc) umount2(&(0x7f0000000380)='./file0\x00', 0xc) 631.478826ms ago: executing program 4 (id=417): bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000010, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000038c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x5, 0xffffffff80011100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000003940)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005a00)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000005a40)='./file0\x00', 0x22801, 0x0) dup3(r2, r0, 0x80000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000005a80)={0x0, 0x2, 0x58, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./proc\x00', 0x180) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x8) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xf6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r6, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r8, &(0x7f0000001800)='7', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_freezer_state(r8, &(0x7f0000000040), 0x2, 0x0) 583.5052ms ago: executing program 5 (id=418): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20e8086) sendmmsg(r0, &(0x7f0000002a00), 0x4ff, 0x0) 496.663359ms ago: executing program 0 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='ro\x00', &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x1400c, &(0x7f0000000200)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x4a7, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)) 496.374589ms ago: executing program 4 (id=420): mkdirat(0xffffffffffffff9c, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002e40)='dummy_udc.0', 0xb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=@random={'user.', './binderfs/binder0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000027c0)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000002c00)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000002c40)=0x2eb4, 0x2000007ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002c80)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 449.203934ms ago: executing program 1 (id=421): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x300884c, &(0x7f0000000700), 0x3, 0x515, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x65) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 419.556367ms ago: executing program 4 (id=422): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000440)={0x8f, 0x0, 0x2}) 371.268232ms ago: executing program 5 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./mysys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 371.112302ms ago: executing program 5 (id=424): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r2) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/108, 0x6c}, 0x10001}], 0x2, 0x40000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) recvmsg$unix(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 371.011692ms ago: executing program 5 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mysys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 369.837772ms ago: executing program 5 (id=426): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 288.575861ms ago: executing program 1 (id=427): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc, 0x0) fdatasync(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000019c0)={0xd, 0x4, 0x7, 0x4}) 278.579322ms ago: executing program 4 (id=428): syz_emit_ethernet(0x7a, &(0x7f0000000880)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "3125b8", 0x44, 0x2f, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x81, 0x1, 0x0, 0x2, 0x1, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0xe, 0x3, 0x1, 0x1, 0x4}, 0x2, {0x2, 0x9, 0x2, 0x1b, 0x0, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) 258.012424ms ago: executing program 4 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x101100, 0x100) openat(r4, 0x0, 0x40000, 0x120) openat(0xffffffffffffff9c, 0x0, 0x6042, 0x101) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x54) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/fscaps', 0x109000, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r6, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000500)={0x1fd, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wake_lock', 0x202, 0x40) sendfile(r7, r6, 0x0, 0xd6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010304000000000000001c00000004000180135c798e0104ca2d58787fb2c04b216c2d4f1926cb34ec2fddc06cff784f75ea3c6a36b0d0c9e58e60955ed8a28b5995887f9c071e09596bac6ea13913f035aedea9a5feca07f468320186f4497fa51e4b3c90db2df362e2390aa942fd9dd735eef082cede58ad988b812916402271e1687dfbd980decebe214eb562a5d50144756d79278d0e0d8c4318bddfff53b04b2aa59fdf9167f1fa1f21521a86b110fd6a8ae6831cac5e7a00ea4ab214b9a5c99e4c6d234f8c2c5be4ffe792d16f9a7d0cfb7dca68745500f307a1f45576fe4a36ca19cb9d53edb7d4a1626c5fabb4fb11d82e43d4aae8"], 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x40) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8400, &(0x7f0000000000), 0x0, 0x613, &(0x7f0000000600)="$eJzs3c9vFFUcAPDv7G5LS9EWYlQ8SBNjIFFaWsA0xgNcDWnwR7x4caUFkQINrdGiCSXBiwnxYoyJJw/if6FErpz05MGLJ0NC1BBPRtfMdge67Wx/LG0XmM8n2e6b9+b1vWn77bydfW82gMIaTL+UInZHxHQS0Z/M3y2rLNnvzl+fnEgfSdRqb/yRRNLIy/ZJGs99jco9EfHTj0nsKi9vd2bu4pnq1NTkhcb28OzZ6eGZuYv7T5+tnpo8NXlu9KXRscOHDo+NHGjruC7l5B278v6H/Z+Nv/3t1/8kI9/9Op7EkXi1sePi49g4g/WfSbK8oG9s4xvriHLj72TxrzipdLBDrEv2++uKiKeiP8qLor4/Pn2to50DNlUtiagBxZSe+DvdB6AjsnFA9tp+6evgUkdGJcBWuN3TSCyL/8rCtcHoqV8b2H4naboemEREe1fmmu2IiJs3xq+cvDF+JTbtOhyQZ/5yRDydd/5P6vE/ED0xUI//UlP8p+OC443nNP/1NttfeqlY/MPWWYj/nhXjP1rE/zvp86WFGH63zfYH7yXf622K/952DwkAAAAAAAAK6/rRiHgx7/3/0t35P1F//+/vpnp9EXFkA9ofXLK9/P3/0q0NaAbIcftoxCvZ/N/eaIr/xuzfgXIj9Vh9PkBXcvL01OSBiHg8IvZF17Z0e2SFNvZf3fVVq7LBxvy/7JG2f7MxF7DRj1uVbc11Jqqz1fs9biDi9uWIZyqt5/+l5/8kZ/5v+v9geo1t7Hr+2vFWZavHP7BZat9E7M1d/3PvrhVJy/tzJDE2cmC4Ph4YzkYFyz378efft2q/3fh3iwm4f+n5f/vK8T+QLL5fz8z62zg4V6nlZNdDuJ3xf6k6W+1O3qzfcqa7kfdRdXb2wkhEd3KsnOY25Y+uv8/wKMriIYuXNP73Pbfy9b+88X9vRMwv+d7Jn81rijNP/tf3W6v+GP9D56TxP7Gu8//6E6PXBn5o1f7azv+H6uf6fQsZFdf/YMGXWZh2N+fnhGMlr2ir+wsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4JSROyIpDR0N10qpRt9EfFEbC9NnZ+ZfeHk+Q/OTaRl9c//L2Wf9Nu/sJ1kn/8/sGh7dMn2wYjYGRFflHvr20Mnzk9NdPrgAQAAAAAAAAAAAAAAAAAA4AHRl7P+f2hooez3cqd7B2y6Sqc7AHRMTvz/vJZ6PZvQF2BrOf9DcYl/KC7xD8Ul/qG4xD8Ul/iH4hL/UFxrif9/a7XaFnQFAAAAAAC4fzv3XP8liYj5l3vrj1R3o6yroz0DNlup0x0AOsYtfqC4TP2D4vIaH0hWKc+91VeylppLXF28MX1ifZUBAAAAAAAAAAAAoNj27rb+H4rK+n8oLuv/obiy9f972qls8AAPtdav8d0ZBIpkpZX8uev/V60FAAAAAAAAAAAAAGykmbmLZ6pTU5MXHoFEOVbYJzvg1tXfejCOYisTtVrtUvpDeVD687AmoqeeSFb9G9usRHesYedsRc/avnNH/h0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5/g8AAP///FAfDw==") 236.998086ms ago: executing program 0 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 248.78µs ago: executing program 0 (id=431): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x1, 0x9, 0x0, 0xffff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x33, 0x0, 0x0, 0xd}}}], 0x18}, 0x400c0c0) 0s ago: executing program 0 (id=432): mkdirat(0xffffffffffffff9c, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002e40)='dummy_udc.0', 0xb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=@random={'user.', './binderfs/binder0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000027c0)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000002c00)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000002c40)=0x2eb4, 0x2000007ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002c80)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 28.504161][ T24] audit: type=1400 audit(1792866320.719:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.505171][ T271] cgroup: Unknown subsys name 'net' [ 28.526804][ T24] audit: type=1400 audit(1792866320.719:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.553994][ T24] audit: type=1400 audit(1792866320.749:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.554150][ T271] cgroup: Unknown subsys name 'devices' [ 28.669143][ T271] cgroup: Unknown subsys name 'hugetlb' [ 28.674728][ T271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.810869][ T24] audit: type=1400 audit(1792866321.029:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.822159][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.833988][ T24] audit: type=1400 audit(1792866321.029:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.867221][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.867296][ T24] audit: type=1400 audit(1792866321.029:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.898985][ T24] audit: type=1400 audit(1792866321.059:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.924357][ T24] audit: type=1400 audit(1792866321.059:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.949902][ T24] audit: type=1400 audit(1792866321.069:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.975361][ T24] audit: type=1400 audit(1792866321.069:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.424044][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.431183][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.438585][ T279] device bridge_slave_0 entered promiscuous mode [ 29.445305][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.452463][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.460081][ T279] device bridge_slave_1 entered promiscuous mode [ 29.558543][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.565567][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.572895][ T281] device bridge_slave_0 entered promiscuous mode [ 29.590683][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.597700][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.605082][ T283] device bridge_slave_0 entered promiscuous mode [ 29.611670][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.618770][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.626075][ T281] device bridge_slave_1 entered promiscuous mode [ 29.639043][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.646068][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.653375][ T283] device bridge_slave_1 entered promiscuous mode [ 29.680845][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.687888][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.695192][ T282] device bridge_slave_0 entered promiscuous mode [ 29.704015][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.711055][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.718468][ T282] device bridge_slave_1 entered promiscuous mode [ 29.724903][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.731933][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.739181][ T280] device bridge_slave_0 entered promiscuous mode [ 29.746117][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.753172][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.760536][ T280] device bridge_slave_1 entered promiscuous mode [ 29.833705][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.840740][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.847999][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.854998][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.920026][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.927051][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.934301][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.941312][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.959294][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.966309][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.973642][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.980662][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.996992][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.004023][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.011264][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.018279][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.026522][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.033550][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.040790][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.047789][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.059549][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.066712][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.074040][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.081336][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.088493][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.095576][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.102791][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.109906][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.116984][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.124158][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.131743][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.139111][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.169022][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.176546][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.184439][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.193177][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.200196][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.207563][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.215880][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.222898][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.230193][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.238322][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.245313][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.252595][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.260682][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.267674][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.275019][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.283106][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.290120][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.297372][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.307099][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.320787][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.328997][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.335989][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.343705][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.370695][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.379243][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.387441][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.395519][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.403205][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.410738][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.418669][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.426494][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.434980][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.443277][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.451482][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.458501][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.479004][ T283] device veth0_vlan entered promiscuous mode [ 30.490598][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.498561][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.506377][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.514317][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.521879][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.530160][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.538319][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.545316][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.552655][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.561029][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.569198][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.576219][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.583529][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.591743][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.599966][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.607921][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.615730][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.623719][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.631625][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.639856][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.647968][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.654966][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.664347][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.672552][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.683034][ T279] device veth0_vlan entered promiscuous mode [ 30.693251][ T283] device veth1_macvtap entered promiscuous mode [ 30.700293][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.707801][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.715665][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.723846][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.731843][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.739837][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.747725][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.755747][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.763753][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.771892][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.779318][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.786623][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.794019][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.802075][ T281] device veth0_vlan entered promiscuous mode [ 30.812061][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.820270][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.841877][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.850293][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.858646][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.866800][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.875161][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.883389][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.892266][ T281] device veth1_macvtap entered promiscuous mode [ 30.900008][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.907606][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.915542][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.927697][ T280] device veth0_vlan entered promiscuous mode [ 30.935235][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.942950][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.950435][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.958810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.967008][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.975135][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.983218][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.991017][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.998998][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.006365][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.014278][ T279] device veth1_macvtap entered promiscuous mode [ 31.021977][ T282] device veth0_vlan entered promiscuous mode [ 31.035550][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.043258][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.051471][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.060147][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.068727][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.080935][ T280] device veth1_macvtap entered promiscuous mode [ 31.090497][ T282] device veth1_macvtap entered promiscuous mode [ 31.100683][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.100920][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 31.108858][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.124423][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.132254][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.140575][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.148641][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.156714][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.165069][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.173223][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.190656][ T283] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 31.200734][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.209011][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.217319][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.225673][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.233970][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.242156][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.250713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.259026][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.276085][ T302] EXT4-fs (loop4): Ignoring removed orlov option [ 31.288645][ T302] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 31.297151][ T302] EXT4-fs (loop4): orphan cleanup on readonly fs [ 31.307366][ T302] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz.4.5: Invalid inode table block 0 in block_group 0 [ 31.320054][ T302] EXT4-fs (loop4): Remounting filesystem read-only [ 31.326656][ T302] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 31.336253][ T302] EXT4-fs error (device loop4): ext4_quota_write:6655: inode #3: comm syz.4.5: mark_inode_dirty error [ 31.351329][ T302] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.5: Failed to acquire dquot type 0 [ 31.366427][ T302] EXT4-fs (loop4): 1 truncate cleaned up [ 31.373386][ T302] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,journal_path=./file0,errors=remount-ro,barrier=0x0000000000000101,data_err=ignore,i_version,minixdf,orlov, [ 31.397068][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.424723][ T316] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.437699][ T320] FAULT_INJECTION: forcing a failure. [ 31.437699][ T320] name failslab, interval 1, probability 0, space 0, times 1 [ 31.450563][ T320] CPU: 0 PID: 320 Comm: syz.0.6 Not tainted syzkaller #0 [ 31.457572][ T320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.467604][ T320] Call Trace: [ 31.470890][ T320] __dump_stack+0x21/0x24 [ 31.475207][ T320] dump_stack_lvl+0x1a7/0x208 [ 31.479856][ T320] ? show_regs_print_info+0x18/0x18 [ 31.485027][ T320] dump_stack+0x15/0x1c [ 31.489154][ T320] should_fail+0x3ab/0x500 [ 31.493544][ T320] ? key_alloc+0x2c1/0xef0 [ 31.497944][ T320] __should_failslab+0xa4/0xe0 [ 31.502692][ T320] should_failslab+0x9/0x20 [ 31.507168][ T320] kmem_cache_alloc+0x3d/0x2d0 [ 31.511902][ T320] ? key_user_lookup+0x35c/0x460 [ 31.516812][ T320] key_alloc+0x2c1/0xef0 [ 31.521034][ T320] keyring_alloc+0x47/0xb0 [ 31.525425][ T320] look_up_user_keyrings+0x32d/0x630 [ 31.530680][ T320] ? key_validate+0xf0/0xf0 [ 31.535154][ T320] lookup_user_key+0x72f/0x11b0 [ 31.539975][ T320] ? lookup_user_key_possessed+0x40/0x40 [ 31.545604][ T320] ? search_process_keyrings_rcu+0x280/0x280 [ 31.551558][ T320] __se_sys_add_key+0x311/0x410 [ 31.556378][ T320] ? __x64_sys_add_key+0xd0/0xd0 [ 31.561284][ T320] __x64_sys_add_key+0xbf/0xd0 [ 31.566024][ T320] do_syscall_64+0x31/0x40 [ 31.570414][ T320] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.576278][ T320] RIP: 0033:0x7fd75885a559 [ 31.580665][ T320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.600248][ T320] RSP: 002b:00007fd7572b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 31.608636][ T320] RAX: ffffffffffffffda RBX: 00007fd758ae0fa0 RCX: 00007fd75885a559 [ 31.616579][ T320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 31.624527][ T320] RBP: 00007fd7588f1b20 R08: fffffffffffffffc R09: 0000000000000000 [ 31.632475][ T320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.640420][ T320] R13: 00007fd758ae1038 R14: 00007fd758ae0fa0 R15: 00007ffe2bd87dc8 [ 31.652852][ T316] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,usrquota,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 31.688967][ T314] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 31.712021][ T54] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.732569][ T331] device batadv_slave_0 entered promiscuous mode [ 31.737556][ T314] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 31.769622][ T316] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 31.782251][ T316] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.782251][ T316] [ 31.793838][ T331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.800797][ T316] EXT4-fs (loop1): Total free blocks count 0 [ 31.805026][ T331] EXT4-fs (loop0): Ignoring removed orlov option [ 31.806787][ T316] EXT4-fs (loop1): Free/Dirty block details [ 31.819769][ T316] EXT4-fs (loop1): free_blocks=0 [ 31.822388][ T331] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue [ 31.824775][ T316] EXT4-fs (loop1): dirty_blocks=0 [ 31.846528][ T316] EXT4-fs (loop1): Block reservation details [ 31.852807][ T316] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 31.857194][ T328] device batadv_slave_0 left promiscuous mode [ 32.097998][ T54] usb 4-1: config index 0 descriptor too short (expected 42, got 36) [ 32.106171][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.117217][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.127064][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.140221][ T54] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 32.149263][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.158162][ T54] usb 4-1: config 0 descriptor?? [ 32.190450][ T358] device-mapper: table: 253:0: flakey: unknown target type [ 32.197705][ T358] device-mapper: ioctl: error adding target to table [ 32.324555][ T363] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.331233][ T363] EXT4-fs error (device loop1): ext4_find_extent:928: inode #4: comm syz.1.18: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 32.348289][ T363] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 32.362949][ T363] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 32.376576][ T363] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000000,,errors=continue [ 32.768687][ T390] netlink: 'syz.4.20': attribute type 4 has an invalid length. [ 32.776278][ T390] netlink: 17 bytes leftover after parsing attributes in process `syz.4.20'. [ 32.794036][ T390] Zero length message leads to an empty skb [ 32.888358][ T54] usb 4-1: string descriptor 0 read error: -71 [ 32.907935][ T54] uclogic 0003:5543:0081.0001: failed retrieving string descriptor #200: -71 [ 32.944654][ T54] uclogic 0003:5543:0081.0001: failed retrieving pen parameters: -71 [ 32.954637][ T54] uclogic 0003:5543:0081.0001: failed probing pen v2 parameters: -71 [ 32.962868][ T54] uclogic 0003:5543:0081.0001: failed probing parameters: -71 [ 32.970784][ T54] uclogic: probe of 0003:5543:0081.0001 failed with error -71 [ 32.979773][ T401] cgroup: syz.2.34 (401) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 32.980562][ T54] usb 4-1: USB disconnect, device number 2 [ 33.041213][ T401] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 33.199670][ T414] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 33.417455][ T422] capability: warning: `syz.4.42' uses 32-bit capabilities (legacy support in use) [ 33.470089][ T427] device bridge1 entered promiscuous mode [ 33.499876][ T430] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 33.529913][ T24] kauditd_printk_skb: 104 callbacks suppressed [ 33.529923][ T24] audit: type=1400 audit(1792866325.749:175): avc: denied { watch watch_reads } for pid=431 comm="syz.3.46" path="/3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.655151][ T438] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 33.655151][ T438] [ 33.781377][ T24] audit: type=1400 audit(1792866325.999:176): avc: denied { read write } for pid=448 comm="syz.3.53" name="dm0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.892553][ T24] audit: type=1400 audit(1792866325.999:177): avc: denied { open } for pid=448 comm="syz.3.53" path="/9/dm0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.947911][ T24] audit: type=1400 audit(1792866326.069:178): avc: denied { ioctl } for pid=458 comm="syz.4.57" path="socket:[16056]" dev="sockfs" ino=16056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.039194][ T24] audit: type=1400 audit(1792866326.199:179): avc: denied { write } for pid=465 comm="syz.4.59" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.060510][ T24] audit: type=1400 audit(1792866326.199:180): avc: denied { add_name } for pid=465 comm="syz.4.59" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.082102][ T24] audit: type=1400 audit(1792866326.199:181): avc: denied { create } for pid=465 comm="syz.4.59" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 34.103660][ T24] audit: type=1400 audit(1792866326.199:182): avc: denied { associate } for pid=465 comm="syz.4.59" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 34.125665][ T24] audit: type=1400 audit(1792866326.199:183): avc: denied { unmount } for pid=465 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.145446][ T24] audit: type=1400 audit(1792866326.229:184): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 34.167965][ T307] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.271306][ T503] process 'syz.4.76' launched './file0' with NULL argv: empty string added [ 34.278253][ T491] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.292354][ T491] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.309425][ T491] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 34.327897][ T491] FAT-fs (loop2): Filesystem has been set read-only [ 34.597993][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.657930][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 34.737940][ T307] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 4 [ 34.907961][ T307] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 34.919200][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.933631][ T307] usb 4-1: Product: syz [ 34.938067][ T307] usb 4-1: Manufacturer: syz [ 34.947198][ T307] usb 4-1: SerialNumber: syz [ 35.219765][ T571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.237946][ T307] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 35.267935][ T307] snd-usb-audio: probe of 4-1:1.1 failed with error -71 [ 35.297979][ T307] snd-usb-audio: probe of 4-1:1.2 failed with error -71 [ 35.309342][ T307] usb 4-1: USB disconnect, device number 3 [ 35.468730][ T595] ====================================================== [ 35.468730][ T595] WARNING: the mand mount option is being deprecated and [ 35.468730][ T595] will be removed in v5.15! [ 35.468730][ T595] ====================================================== [ 35.510944][ T592] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 35.528062][ T592] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.116: bg 0: block 393: padding at end of block bitmap is not set [ 35.542665][ T592] EXT4-fs (loop0): Remounting filesystem read-only [ 35.549645][ T592] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 35.558682][ T592] EXT4-fs (loop0): 2 truncates cleaned up [ 35.564396][ T592] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota, [ 35.835877][ T605] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.853523][ T605] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.121: bg 0: block 104: invalid block bitmap [ 35.866061][ T307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.873667][ T605] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 35.908249][ T605] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.121: invalid indirect mapped block 1 (level 1) [ 35.925345][ T605] EXT4-fs (loop3): 1 truncate cleaned up [ 35.931494][ T605] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue [ 35.953142][ T605] EXT4-fs (loop3): shut down requested (0) [ 35.993355][ T623] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,jqfmt=vfsv0,errors=continue,,errors=continue [ 36.008295][ T623] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.048040][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 36.062694][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 36.077261][ T282] EXT4-fs error (device loop2): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 36.094330][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 36.110118][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 36.124071][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 36.130226][ T282] EXT4-fs error (device loop2): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 36.143934][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 36.158241][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 36.172364][ T282] EXT4-fs error (device loop2): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 36.185656][ T282] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 36.257936][ T307] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 36.266132][ T307] usb 1-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 36.276557][ T307] usb 1-1: config 0 has no interface number 0 [ 36.414410][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.421550][ T652] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.429015][ T652] device bridge_slave_0 entered promiscuous mode [ 36.435698][ T652] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.442818][ T652] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.442836][ T307] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 36.449958][ T15] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.459580][ T652] device bridge_slave_1 entered promiscuous mode [ 36.472950][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.481012][ T307] usb 1-1: Product: syz [ 36.485192][ T307] usb 1-1: Manufacturer: syz [ 36.489822][ T307] usb 1-1: SerialNumber: syz [ 36.496956][ T307] usb 1-1: config 0 descriptor?? [ 36.523226][ T652] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.530262][ T652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.537466][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.544488][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.561842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.569628][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.576794][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.585087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.593259][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.600280][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.609764][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.618213][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.625240][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.635921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.650094][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.658912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.669809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.677681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.685111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.694825][ T652] device veth0_vlan entered promiscuous mode [ 36.704555][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.714398][ T652] device veth1_macvtap entered promiscuous mode [ 36.723513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.732820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.768020][ T15] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 36.778063][ T307] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 36.784927][ T657] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙˙˙" or missing value [ 36.785506][ T307] uvcvideo: No valid video chain found. [ 36.810257][ T307] usb 1-1: USB disconnect, device number 2 [ 36.819408][ T300] device bridge_slave_1 left promiscuous mode [ 36.825689][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.833177][ T300] device bridge_slave_0 left promiscuous mode [ 36.841483][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.851892][ T300] device veth1_macvtap left promiscuous mode [ 36.858151][ T300] device veth0_vlan left promiscuous mode [ 36.923966][ T672] capability: warning: `syz.5.146' uses deprecated v2 capabilities in a way that may be insecure [ 36.949567][ T678] using random self ethernet address [ 36.954936][ T678] using random host ethernet address [ 36.963887][ T678] FAULT_INJECTION: forcing a failure. [ 36.963887][ T678] name failslab, interval 1, probability 0, space 0, times 0 [ 36.976610][ T678] CPU: 0 PID: 678 Comm: syz.5.151 Not tainted syzkaller #0 [ 36.983799][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.993829][ T678] Call Trace: [ 36.997114][ T678] __dump_stack+0x21/0x24 [ 37.001426][ T678] dump_stack_lvl+0x1a7/0x208 [ 37.006079][ T678] ? show_regs_print_info+0x18/0x18 [ 37.011253][ T678] ? __kasan_check_write+0x14/0x20 [ 37.016344][ T678] ? _raw_spin_lock+0x94/0xf0 [ 37.021003][ T678] dump_stack+0x15/0x1c [ 37.025139][ T678] should_fail+0x3ab/0x500 [ 37.029541][ T678] ? __kernfs_new_node+0xe1/0x670 [ 37.034544][ T678] __should_failslab+0xa4/0xe0 [ 37.039281][ T678] should_failslab+0x9/0x20 [ 37.043757][ T678] kmem_cache_alloc+0x3d/0x2d0 [ 37.048498][ T678] ? down_write+0xb2/0x120 [ 37.052892][ T678] __kernfs_new_node+0xe1/0x670 [ 37.057717][ T678] ? __kasan_check_write+0x14/0x20 [ 37.062805][ T678] ? make_kgid+0x1c4/0x650 [ 37.067194][ T678] ? kernfs_new_node+0x260/0x260 [ 37.072109][ T678] ? from_kuid_munged+0x6e0/0x6e0 [ 37.077105][ T678] ? kernfs_add_one+0x542/0x680 [ 37.081959][ T678] ? net_ns_get_ownership+0xf8/0x180 [ 37.087220][ T678] kernfs_new_node+0x150/0x260 [ 37.091956][ T678] kernfs_create_dir_ns+0x47/0x130 [ 37.097040][ T678] internal_create_group+0x21a/0xd00 [ 37.102301][ T678] ? sysfs_create_group+0x30/0x30 [ 37.107295][ T678] ? kernfs_put+0x44f/0x480 [ 37.111772][ T678] ? sysfs_create_group+0x30/0x30 [ 37.116768][ T678] ? kernfs_create_link+0x186/0x200 [ 37.121962][ T678] sysfs_create_group+0x1f/0x30 [ 37.126790][ T678] dpm_sysfs_add+0x6a/0x290 [ 37.131276][ T678] device_add+0x53b/0xc00 [ 37.135580][ T678] ? device_initialize+0x1d6/0x410 [ 37.140666][ T678] netdev_register_kobject+0x18e/0x330 [ 37.146102][ T678] ? raw_notifier_call_chain+0xe9/0x100 [ 37.151624][ T678] register_netdevice+0xdae/0x13a0 [ 37.156713][ T678] ? netif_stacked_transfer_operstate+0x220/0x220 [ 37.163108][ T678] ? __kasan_check_write+0x14/0x20 [ 37.168198][ T678] register_netdev+0x3e/0x50 [ 37.172765][ T678] gether_register_netdev+0x7f/0x120 [ 37.178023][ T678] ecm_bind+0x18c/0x8c0 [ 37.182156][ T678] usb_add_function+0x2c1/0x820 [ 37.186981][ T678] ? configfs_composite_bind+0xffa/0x13a0 [ 37.192677][ T678] configfs_composite_bind+0xa9c/0x13a0 [ 37.198201][ T678] ? os_desc_qw_sign_store+0x140/0x140 [ 37.203633][ T678] udc_bind_to_driver+0x24e/0x6d0 [ 37.208630][ T678] ? mutex_lock+0x92/0xf0 [ 37.212935][ T678] usb_gadget_probe_driver+0x1fc/0x380 [ 37.218370][ T678] gadget_dev_desc_UDC_store+0x217/0x330 [ 37.223974][ T678] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 37.229494][ T678] configfs_write_file+0x320/0x3d0 [ 37.234580][ T678] ? configfs_read_file+0x400/0x400 [ 37.239756][ T678] vfs_write+0x344/0xd70 [ 37.243970][ T678] ? kernel_write+0x3c0/0x3c0 [ 37.248626][ T678] ? __kasan_check_write+0x14/0x20 [ 37.253710][ T678] ? mutex_lock+0x92/0xf0 [ 37.258015][ T678] ? mutex_trylock+0xb0/0xb0 [ 37.262577][ T678] ? __fget_files+0x2e1/0x340 [ 37.267226][ T678] ? __fdget_pos+0x2d2/0x380 [ 37.271787][ T678] ? ksys_write+0x70/0x260 [ 37.276175][ T678] ksys_write+0x14a/0x260 [ 37.280480][ T678] ? __ia32_sys_read+0x90/0x90 [ 37.285216][ T678] ? do_symlinkat+0x35b/0x3d0 [ 37.289866][ T678] ? __kasan_check_read+0x11/0x20 [ 37.294864][ T678] __x64_sys_write+0x7b/0x90 [ 37.299430][ T678] do_syscall_64+0x31/0x40 [ 37.303820][ T678] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.309683][ T678] RIP: 0033:0x7fe7c722c559 [ 37.314075][ T678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.333653][ T678] RSP: 002b:00007fe7c5c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.342039][ T678] RAX: ffffffffffffffda RBX: 00007fe7c74b2fa0 RCX: 00007fe7c722c559 [ 37.349983][ T678] RDX: 000000000000000b RSI: 0000200000002e40 RDI: 0000000000000004 [ 37.357931][ T678] RBP: 00007fe7c72c3b20 R08: 0000000000000000 R09: 0000000000000000 [ 37.365877][ T678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.373827][ T678] R13: 00007fe7c74b3038 R14: 00007fe7c74b2fa0 R15: 00007ffff3bcd578 [ 37.389788][ T678] udc dummy_udc.0: failed to start g1: -12 [ 37.412295][ T682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 37.444382][ T682] EXT4-fs (loop5): 1 truncate cleaned up [ 37.450206][ T682] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1, [ 37.510417][ T697] netlink: 'syz.4.158': attribute type 10 has an invalid length. [ 37.808534][ T721] EXT4-fs (loop5): Invalid want_extra_isize 55 [ 37.841412][ T724] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 37.893342][ T724] exFAT-fs (loop0): error, invalid size(size(0) > aligned(18374686479671623680) [ 37.893342][ T724] [ 38.118008][ T15] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 38.127140][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.135444][ T15] usb 4-1: Product: syz [ 38.139698][ T15] usb 4-1: Manufacturer: syz [ 38.144303][ T15] usb 4-1: SerialNumber: syz [ 38.151858][ T15] usb 4-1: config 0 descriptor?? [ 38.273113][ T764] FAULT_INJECTION: forcing a failure. [ 38.273113][ T764] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.286482][ T764] CPU: 0 PID: 764 Comm: syz.0.184 Not tainted syzkaller #0 [ 38.293666][ T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.303691][ T764] Call Trace: [ 38.306954][ T764] __dump_stack+0x21/0x24 [ 38.311252][ T764] dump_stack_lvl+0x1a7/0x208 [ 38.315899][ T764] ? show_regs_print_info+0x18/0x18 [ 38.321065][ T764] dump_stack+0x15/0x1c [ 38.325191][ T764] should_fail+0x3ab/0x500 [ 38.329594][ T764] should_fail_usercopy+0x1a/0x20 [ 38.334589][ T764] strncpy_from_user+0x24/0x2d0 [ 38.339411][ T764] ? kmem_cache_alloc+0x15a/0x2d0 [ 38.344402][ T764] ? getname_flags+0xba/0x510 [ 38.349052][ T764] getname_flags+0xf5/0x510 [ 38.353545][ T764] __x64_sys_unlinkat+0xb0/0xf0 [ 38.358380][ T764] do_syscall_64+0x31/0x40 [ 38.362778][ T764] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.368639][ T764] RIP: 0033:0x7fd75885a559 [ 38.373041][ T764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.392639][ T764] RSP: 002b:00007fd7572b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 38.401024][ T764] RAX: ffffffffffffffda RBX: 00007fd758ae0fa0 RCX: 00007fd75885a559 [ 38.408968][ T764] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.416924][ T764] RBP: 00007fd7588f1b20 R08: 0000000000000000 R09: 0000000000000000 [ 38.424868][ T764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.432816][ T764] R13: 00007fd758ae1038 R14: 00007fd758ae0fa0 R15: 00007ffe2bd87dc8 [ 38.446950][ T633] udc-core: couldn't find an available UDC or it's busy [ 38.454334][ T633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.470103][ T15] usb 4-1: USB disconnect, device number 4 [ 39.092411][ T817] device-mapper: table: 253:1: thin: unknown target type [ 39.100463][ T817] device-mapper: ioctl: error adding target to table [ 39.214427][ T822] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 39.227212][ T24] kauditd_printk_skb: 1989 callbacks suppressed [ 39.227221][ T24] audit: type=1400 audit(1792866331.439:2174): avc: denied { mounton } for pid=821 comm="syz.5.208" path="/14/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.267924][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.278544][ T24] audit: type=1400 audit(1792866331.489:2175): avc: denied { unlink } for pid=652 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.300969][ T24] audit: type=1400 audit(1792866331.499:2176): avc: denied { unlink } for pid=652 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.431123][ T844] attempt to access beyond end of device [ 39.431123][ T844] loop5: rw=2049, want=1041, limit=128 [ 39.452627][ T843] attempt to access beyond end of device [ 39.452627][ T843] loop5: rw=524288, want=369, limit=128 [ 39.527964][ T307] usb 2-1: Using ep0 maxpacket: 8 [ 39.614749][ T24] audit: type=1400 audit(1792866331.829:2177): avc: denied { write } for pid=856 comm="syz.0.223" name="filter" dev="tracefs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.668083][ T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 39.709675][ T24] audit: type=1400 audit(1792866331.829:2178): avc: denied { open } for pid=856 comm="syz.0.223" path="/31/tracing/events/sched/filter" dev="tracefs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.867947][ T307] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 39.877088][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.885145][ T307] usb 2-1: Product: syz [ 39.891323][ T307] usb 2-1: Manufacturer: syz [ 39.900312][ T307] usb 2-1: SerialNumber: syz [ 39.913401][ T453] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.302212][ T307] usb 2-1: unit 4 not found! [ 40.314223][ T307] usb 2-1: USB disconnect, device number 2 [ 40.327960][ T453] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.338213][ T453] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 40.348047][ T453] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 40.357915][ T453] usb 4-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 40.366947][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.387944][ T855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 40.394953][ T855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 40.440048][ T924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.450649][ T924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 40.458647][ T924] System zones: 1-12 [ 40.462815][ T924] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.252: bad orphan inode 131072 [ 40.473311][ T924] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 40.485928][ T924] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.252: reserved inode found cleared - inode=18 [ 40.613775][ T618] usb 4-1: USB disconnect, device number 5 [ 40.615965][ T929] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 40.629069][ T929] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.253: invalid indirect mapped block 256 (level 1) [ 40.642923][ T929] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.253: invalid indirect mapped block 2683928664 (level 1) [ 40.658660][ T929] EXT4-fs (loop0): 1 truncate cleaned up [ 40.664442][ T929] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue [ 40.743129][ T307] kernel write not supported for file [eventfd] (pid: 307 comm: kworker/1:3) [ 40.764102][ T946] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.779045][ T24] audit: type=1400 audit(1792866332.999:2179): avc: denied { relabelto } for pid=945 comm="syz.5.260" name="29" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 40.805049][ T24] audit: type=1400 audit(1792866332.999:2180): avc: denied { associate } for pid=945 comm="syz.5.260" name="29" dev="tmpfs" ino=177 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 40.833811][ T952] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #2: block 13: comm syz.0.253: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 40.853512][ T24] audit: type=1400 audit(1792866333.049:2181): avc: denied { create } for pid=928 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.882166][ T24] audit: type=1400 audit(1792866333.049:2182): avc: denied { bind } for pid=928 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.904806][ T948] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.913681][ T24] audit: type=1400 audit(1792866333.049:2183): avc: denied { write } for pid=928 comm="syz.0.253" name="wireless" dev="proc" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.954672][ T958] tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 41.186760][ T978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a026c018, mo2=0002] [ 41.204910][ T978] System zones: 1-12 [ 41.209594][ T978] ------------[ cut here ]------------ [ 41.216891][ T978] EA inode 11 i_nlink=0 [ 41.217028][ T978] WARNING: CPU: 1 PID: 978 at fs/ext4/xattr.c:1002 ext4_xattr_inode_update_ref+0x4ea/0x540 [ 41.232554][ T978] Modules linked in: [ 41.236535][ T978] CPU: 1 PID: 978 Comm: syz.1.273 Not tainted syzkaller #0 [ 41.245688][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.255997][ T978] RIP: 0010:ext4_xattr_inode_update_ref+0x4ea/0x540 [ 41.262836][ T978] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 79 0e be ff 49 8b 34 24 48 c7 c7 60 eb 2c 85 44 89 fa e8 06 bf 98 02 <0f> 0b 4c 8b 74 24 08 4c 8b 64 24 10 e9 a5 fe ff ff e8 d0 5b 9c 02 [ 41.282911][ T978] RSP: 0018:ffffc90000d172c0 EFLAGS: 00010246 [ 41.289028][ T978] RAX: 691d40ea0080c300 RBX: ffff88812f7dc9d8 RCX: 0000000000080000 [ 41.297076][ T978] RDX: ffffc9000152b000 RSI: 00000000000072fc RDI: 00000000000072fd [ 41.305266][ T978] RBP: ffffc90000d173b0 R08: ffff8881f7127493 R09: 1ffff1103ee24e92 [ 41.313342][ T978] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: ffff88812f7dc8b8 [ 41.321501][ T978] R13: dffffc0000000000 R14: ffff88812f7dc878 R15: 0000000000000000 [ 41.322505][ T987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.331497][ T978] FS: 00007efddab676c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.347353][ T987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 41.348322][ T978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.348338][ T978] CR2: 00007f1350df6dac CR3: 0000000127786000 CR4: 00000000003526b0 [ 41.356408][ T987] System zones: [ 41.362899][ T978] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.371277][ T987] 1-12 [ 41.378242][ T978] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.393024][ T978] Call Trace: [ 41.395090][ T987] [ 41.396307][ T978] ? ext4_xattr_block_csum+0x560/0x560 [ 41.396324][ T978] ? __ext4_journal_ensure_credits+0x30/0x470 [ 41.404407][ T987] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.276: bad orphan inode 131072 [ 41.420571][ T978] ? ext4_xattr_inode_dec_ref_all+0x394/0xf20 [ 41.426671][ T978] ext4_xattr_inode_dec_ref_all+0x91a/0xf20 [ 41.432932][ T978] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 41.435264][ T987] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 41.438827][ T978] ? __ext4_journal_ensure_credits+0x470/0x470 [ 41.456364][ T978] ? ext4_get_inode_loc+0x100/0x130 [ 41.461671][ T978] ext4_xattr_delete_inode+0xa42/0xc00 [ 41.467110][ T978] ? ext4_expand_extra_isize_ea+0x19d0/0x19d0 [ 41.473172][ T978] ? __ext4_mark_inode_dirty+0x489/0x660 [ 41.478826][ T978] ext4_evict_inode+0x10e2/0x1780 [ 41.483822][ T978] ? _raw_spin_unlock+0x4d/0x70 [ 41.488685][ T978] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 41.494559][ T978] ? thaw_kernel_threads+0x220/0x220 [ 41.500571][ T978] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 41.506514][ T978] evict+0x4a9/0x940 [ 41.510473][ T978] ? mode_strip_sgid+0x150/0x150 [ 41.513696][ T987] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.276: reserved inode found cleared - inode=18 [ 41.515498][ T978] ? _raw_spin_lock+0x94/0xf0 [ 41.531828][ T978] ? _raw_spin_trylock_bh+0x150/0x150 [ 41.537229][ T978] ? __kasan_check_write+0x14/0x20 [ 41.542493][ T978] iput+0x654/0x7e0 [ 41.546322][ T978] ext4_orphan_cleanup+0x989/0xd40 [ 41.564107][ T978] ext4_fill_super+0x867e/0x8d90 [ 41.569100][ T978] ? ext4_mount+0x40/0x40 [ 41.573450][ T978] ? vscnprintf+0x80/0x80 [ 41.577845][ T978] ? set_blocksize+0x1eb/0x3a0 [ 41.583403][ T978] ? sb_set_blocksize+0xaa/0xf0 [ 41.589468][ T978] mount_bdev+0x26a/0x380 [ 41.593852][ T978] ? ext4_mount+0x40/0x40 [ 41.598757][ T978] ext4_mount+0x34/0x40 [ 41.602959][ T978] legacy_get_tree+0xed/0x190 [ 41.607649][ T978] ? ext4_chksum+0x180/0x180 [ 41.612588][ T978] vfs_get_tree+0x89/0x260 [ 41.617041][ T978] do_new_mount+0x25a/0xa30 [ 41.621700][ T978] path_mount+0x581/0xca0 [ 41.626089][ T978] __se_sys_mount+0x320/0x390 [ 41.633331][ T978] ? __x64_sys_mount+0xd0/0xd0 [ 41.638450][ T978] ? debug_smp_processor_id+0x17/0x20 [ 41.643954][ T978] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 41.650353][ T978] __x64_sys_mount+0xbf/0xd0 [ 41.655230][ T978] do_syscall_64+0x31/0x40 [ 41.666997][ T978] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.673709][ T978] RIP: 0033:0x7efddc1107ca [ 41.678439][ T978] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.699958][ T978] RSP: 002b:00007efddab66e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.701477][ T1005] udc-core: couldn't find an available UDC or it's busy [ 41.720538][ T978] RAX: ffffffffffffffda RBX: 00007efddab66ee0 RCX: 00007efddc1107ca [ 41.728672][ T978] RDX: 0000200000000940 RSI: 0000200000000980 RDI: 00007efddab66ea0 [ 41.736673][ T978] RBP: 0000200000000940 R08: 00007efddab66ee0 R09: 0000000000200700 [ 41.744811][ T978] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000980 [ 41.752905][ T978] R13: 00007efddab66ea0 R14: 0000000000000488 R15: 00002000000009c0 [ 41.760890][ T978] ---[ end trace ac77387d1fc5a555 ]--- [ 41.766385][ T978] EXT4-fs (loop1): 1 orphan inode deleted [ 41.768356][ T1005] FAULT_INJECTION: forcing a failure. [ 41.768356][ T1005] name failslab, interval 1, probability 0, space 0, times 0 [ 41.774078][ T978] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,prjquota,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000000009,inode_readahead_blks=0x0000000000000000,nodelalloc,debug,,errors=continue [ 41.788825][ T1005] CPU: 0 PID: 1005 Comm: syz.3.282 Tainted: G W syzkaller #0 [ 41.815165][ T1005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.825201][ T1005] Call Trace: [ 41.828468][ T1005] __dump_stack+0x21/0x24 [ 41.832771][ T1005] dump_stack_lvl+0x1a7/0x208 [ 41.837421][ T1005] ? thaw_kernel_threads+0x220/0x220 [ 41.842675][ T1005] ? show_regs_print_info+0x18/0x18 [ 41.847842][ T1005] dump_stack+0x15/0x1c [ 41.851973][ T1005] should_fail+0x3ab/0x500 [ 41.856359][ T1005] ? kvmalloc_node+0x88/0x130 [ 41.861005][ T1005] __should_failslab+0xa4/0xe0 [ 41.865742][ T1005] should_failslab+0x9/0x20 [ 41.870213][ T1005] __kmalloc+0x60/0x330 [ 41.874337][ T1005] kvmalloc_node+0x88/0x130 [ 41.878810][ T1005] __list_lru_init+0x1d7/0x5a0 [ 41.883542][ T1005] ? prealloc_shrinker+0x1dc/0x230 [ 41.888624][ T1005] alloc_super+0x68c/0x7d0 [ 41.893011][ T1005] ? mount_bdev+0x380/0x380 [ 41.897482][ T1005] sget+0x1e2/0x4c0 [ 41.901261][ T1005] ? test_bdev_super+0x50/0x50 [ 41.905994][ T1005] mount_bdev+0xec/0x380 [ 41.910204][ T1005] ? ext4_mount+0x40/0x40 [ 41.914505][ T1005] ext4_mount+0x34/0x40 [ 41.918630][ T1005] legacy_get_tree+0xed/0x190 [ 41.923277][ T1005] ? ext4_chksum+0x180/0x180 [ 41.927836][ T1005] vfs_get_tree+0x89/0x260 [ 41.932243][ T1005] do_new_mount+0x25a/0xa30 [ 41.936734][ T1005] path_mount+0x581/0xca0 [ 41.941046][ T1005] __se_sys_mount+0x320/0x390 [ 41.945698][ T1005] ? __x64_sys_mount+0xd0/0xd0 [ 41.950435][ T1005] ? debug_smp_processor_id+0x17/0x20 [ 41.955775][ T1005] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 41.961813][ T1005] __x64_sys_mount+0xbf/0xd0 [ 41.966375][ T1005] do_syscall_64+0x31/0x40 [ 41.970760][ T1005] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.976620][ T1005] RIP: 0033:0x7f1350b6f7ca [ 41.981004][ T1005] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.000578][ T1005] RSP: 002b:00007f134f5c5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.008959][ T1005] RAX: ffffffffffffffda RBX: 00007f134f5c5ee0 RCX: 00007f1350b6f7ca [ 42.016902][ T1005] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 00007f134f5c5ea0 [ 42.024843][ T1005] RBP: 0000200000000080 R08: 00007f134f5c5ee0 R09: 000000000001001a [ 42.032785][ T1005] R10: 000000000001001a R11: 0000000000000246 R12: 0000200000000100 [ 42.040730][ T1005] R13: 00007f134f5c5ea0 R14: 0000000000000439 R15: 000000000000002c [ 42.117914][ T453] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.189228][ T1012] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,init_itable=0x0000000000000004,,errors=continue [ 42.203433][ T1012] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.212750][ T1023] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.214987][ T1012] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.286: corrupted xattr block 33 [ 42.234515][ T1012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 42.243491][ T1012] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.286: corrupted xattr block 33 [ 42.255270][ T1012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 42.264315][ T1012] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.286: corrupted xattr block 33 [ 42.276077][ T1012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 42.285075][ T1012] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.286: corrupted xattr block 33 [ 42.296951][ T1012] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 42.343949][ T1038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 42.357992][ T453] usb 1-1: Using ep0 maxpacket: 8 [ 42.419244][ T1043] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.433358][ T1043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 42.441400][ T1043] System zones: 1-12 [ 42.445673][ T1043] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.298: bad orphan inode 131072 [ 42.462303][ T1043] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 42.474863][ T1043] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.298: reserved inode found cleared - inode=18 [ 42.490488][ T453] usb 1-1: config 0 has no interfaces? [ 42.648268][ T453] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 42.657444][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.665507][ T453] usb 1-1: Product: syz [ 42.669866][ T453] usb 1-1: Manufacturer: syz [ 42.674584][ T453] usb 1-1: SerialNumber: syz [ 42.680180][ T453] usb 1-1: config 0 descriptor?? [ 42.803156][ T307] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 42.888087][ T756] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.936029][ T453] usb 1-1: USB disconnect, device number 3 [ 43.020938][ T1127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.337'. [ 43.127993][ T756] usb 4-1: Using ep0 maxpacket: 8 [ 43.247927][ T756] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.247932][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.264017][ T756] usb 4-1: config 179 has no interface number 0 [ 43.270397][ T756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 43.281894][ T756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 43.293246][ T756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 43.297946][ T307] usb 2-1: not running at top speed; connect to a high speed hub [ 43.304544][ T756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 43.324516][ T756] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.337890][ T756] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 43.346904][ T756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.367953][ T1081] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 43.407940][ T307] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.423716][ T307] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x2 has invalid maxpacket 495, setting to 64 [ 43.442188][ T1185] erofs: (device loop0): mounted with root inode @ nid 36. [ 43.448039][ T307] usb 2-1: config 1 interface 0 has no altsetting 0 [ 43.452629][ T1185] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 43.468000][ T1185] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 43.616205][ T1198] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.645044][ T1198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 43.657477][ T1198] System zones: 1-12 [ 43.657943][ T307] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40 [ 43.666306][ T1198] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.372: bad orphan inode 131072 [ 43.677885][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.695798][ T1198] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 43.707895][ T307] usb 2-1: Product: syz [ 43.712058][ T307] usb 2-1: Manufacturer: syz [ 43.716636][ T307] usb 2-1: SerialNumber: syz [ 43.738613][ T1198] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.372: reserved inode found cleared - inode=18 [ 43.751189][ T1046] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 43.794857][ T15] usb 4-1: USB disconnect, device number 6 [ 43.807890][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 44.059245][ T1231] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.290874][ T1263] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.381068][ T1266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.383953][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 44.398728][ T1266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 44.399809][ T1270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 44.407668][ T1266] System zones: 1-12 [ 44.416616][ T1270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.403'. [ 44.420866][ T1266] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.402: bad orphan inode 131072 [ 44.429405][ T1270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.403'. [ 44.439710][ T1266] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 44.476698][ T1266] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.402: reserved inode found cleared - inode=18 [ 44.488553][ T307] usbhid 2-1:1.0: can't add hid device: -71 [ 44.494500][ T307] usbhid: probe of 2-1:1.0 failed with error -71 [ 44.504073][ T307] usb 2-1: USB disconnect, device number 3 [ 44.594119][ T1277] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.642896][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 44.642906][ T24] audit: type=1400 audit(1792866336.859:2197): avc: denied { map } for pid=1299 comm="syz.0.415" path="socket:[31015]" dev="sockfs" ino=31015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 44.728601][ T1303] EXT4-fs (loop0): Ignoring removed orlov option [ 44.749307][ T1303] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,stripe=0x0000000000000000,minixdf,orlov,,errors=continue [ 44.940250][ T1317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.958485][ T1320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.973489][ T1320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 44.981873][ T1320] System zones: 1-12 [ 44.986480][ T1320] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.419: bad orphan inode 131072 [ 44.997960][ T1320] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 45.049255][ T1320] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.419: reserved inode found cleared - inode=18 [ 45.261625][ T1343] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups, [ 45.273251][ T24] audit: type=1400 audit(1792866337.489:2198): avc: denied { search } for pid=1354 comm="syz.0.432" name="/" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.276345][ T1343] EXT4-fs error (device loop1): ext4_find_extent:928: inode #2: comm syz.1.427: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 45.297707][ T1355] ------------[ cut here ]------------ [ 45.313927][ T1343] EXT4-fs (loop1): Remounting filesystem read-only [ 45.319085][ T1355] kernel BUG at net/core/dev.c:9976! [ 45.331553][ T1355] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.332072][ T1343] EXT4-fs error (device loop1): ext4_ext_precache:607: inode #2: comm syz.1.427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 45.337615][ T1355] CPU: 0 PID: 1355 Comm: syz.0.432 Tainted: G W syzkaller #0 [ 45.337620][ T1355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.337637][ T1355] RIP: 0010:register_netdevice+0x138c/0x13a0 [ 45.337646][ T1355] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 45 fd ff ff 4c 89 f7 e8 f5 28 ff fd e9 38 fd ff ff e8 4b 9b c4 fd 0f 0b e8 44 9b c4 fd <0f> 0b e8 3d 9b c4 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 [ 45.337660][ T1355] RSP: 0018:ffffc9000145f880 EFLAGS: 00010287 [ 45.405203][ T1355] RAX: ffffffff83a01b7c RBX: ffff88811a23e000 RCX: 0000000000080000 [ 45.413147][ T1355] RDX: ffffc9000192c000 RSI: 00000000000000ec RDI: 00000000000000ed [ 45.421099][ T1355] RBP: ffffc9000145f978 R08: ffffffff86ad39a7 R09: 1ffffffff0d5a734 [ 45.429054][ T1355] R10: dffffc0000000000 R11: fffffbfff0d5a735 R12: 1ffff11023447c9f [ 45.436999][ T1355] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffffff86aca9c0 [ 45.444946][ T1355] FS: 00007fd7572b26c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.453843][ T1355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.460400][ T1355] CR2: 0000200000002e00 CR3: 000000010fe02000 CR4: 00000000003506b0 [ 45.468349][ T1355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.476292][ T1355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.484255][ T1355] Call Trace: [ 45.487520][ T1355] ? __kasan_check_write+0x14/0x20 [ 45.492604][ T1355] ? mutex_lock_killable+0x92/0xf0 [ 45.497686][ T1355] ? netif_stacked_transfer_operstate+0x220/0x220 [ 45.504069][ T1355] ? __kasan_check_write+0x14/0x20 [ 45.509170][ T1355] register_netdev+0x3e/0x50 [ 45.513730][ T1355] gether_register_netdev+0x7f/0x120 [ 45.518984][ T1355] ecm_bind+0x18c/0x8c0 [ 45.523114][ T1355] usb_add_function+0x2c1/0x820 [ 45.527936][ T1355] configfs_composite_bind+0xa9c/0x13a0 [ 45.533452][ T1355] ? os_desc_qw_sign_store+0x140/0x140 [ 45.538884][ T1355] udc_bind_to_driver+0x24e/0x6d0 [ 45.543876][ T1355] ? mutex_lock+0x92/0xf0 [ 45.548177][ T1355] usb_gadget_probe_driver+0x1fc/0x380 [ 45.553607][ T1355] gadget_dev_desc_UDC_store+0x217/0x330 [ 45.559210][ T1355] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 45.564726][ T1355] configfs_write_file+0x320/0x3d0 [ 45.569818][ T1355] ? configfs_read_file+0x400/0x400 [ 45.574988][ T1355] vfs_write+0x344/0xd70 [ 45.579204][ T1355] ? kernel_write+0x3c0/0x3c0 [ 45.583852][ T1355] ? __kasan_check_write+0x14/0x20 [ 45.588934][ T1355] ? mutex_lock+0x92/0xf0 [ 45.593255][ T1355] ? mutex_trylock+0xb0/0xb0 [ 45.597816][ T1355] ? __fget_files+0x2e1/0x340 [ 45.602464][ T1355] ? __fdget_pos+0x2d2/0x380 [ 45.607026][ T1355] ? ksys_write+0x70/0x260 [ 45.611435][ T1355] ksys_write+0x14a/0x260 [ 45.615737][ T1355] ? __ia32_sys_read+0x90/0x90 [ 45.620473][ T1355] ? __kasan_check_read+0x11/0x20 [ 45.625466][ T1355] __x64_sys_write+0x7b/0x90 [ 45.630030][ T1355] do_syscall_64+0x31/0x40 [ 45.634420][ T1355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.640283][ T1355] RIP: 0033:0x7fd75885a559 [ 45.644678][ T1355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.664256][ T1355] RSP: 002b:00007fd7572b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.672645][ T1355] RAX: ffffffffffffffda RBX: 00007fd758ae0fa0 RCX: 00007fd75885a559 [ 45.680594][ T1355] RDX: 000000000000000b RSI: 0000200000002e40 RDI: 0000000000000004 [ 45.688542][ T1355] RBP: 00007fd7588f1b20 R08: 0000000000000000 R09: 0000000000000000 [ 45.696489][ T1355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.704433][ T1355] R13: 00007fd758ae1038 R14: 00007fd758ae0fa0 R15: 00007ffe2bd87dc8 [ 45.712380][ T1355] Modules linked in: [ 45.717808][ T1355] ---[ end trace ac77387d1fc5a556 ]--- [ 45.723421][ T1355] RIP: 0010:register_netdevice+0x138c/0x13a0 [ 45.729498][ T1355] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 45 fd ff ff 4c 89 f7 e8 f5 28 ff fd e9 38 fd ff ff e8 4b 9b c4 fd 0f 0b e8 44 9b c4 fd <0f> 0b e8 3d 9b c4 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 [ 45.750977][ T1355] RSP: 0018:ffffc9000145f880 EFLAGS: 00010287 [ 45.757158][ T1355] RAX: ffffffff83a01b7c RBX: ffff88811a23e000 RCX: 0000000000080000 [ 45.765279][ T1355] RDX: ffffc9000192c000 RSI: 00000000000000ec RDI: 00000000000000ed [ 45.773350][ T1355] RBP: ffffc9000145f978 R08: ffffffff86ad39a7 R09: 1ffffffff0d5a734 [ 45.781713][ T1355] R10: dffffc0000000000 R11: fffffbfff0d5a735 R12: 1ffff11023447c9f [ 45.790033][ T1355] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffffff86aca9c0 [ 45.798167][ T1355] FS: 00007fd7572b26c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.826459][ T1355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.833156][ T1355] CR2: 000000110c3089d9 CR3: 000000010fe02000 CR4: 00000000003506b0 [ 45.839223][ T1356] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.841315][ T1355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.852313][ T1356] EXT4-fs (loop0): 1 truncate cleaned up [ 45.859356][ T1355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.864723][ T1356] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1, [ 45.872992][ T1355] Kernel panic - not syncing: Fatal exception [ 45.896229][ T1355] Kernel Offset: disabled [ 45.900536][ T1355] Rebooting in 86400 seconds..