last executing test programs: 1m0.92851353s ago: executing program 2 (id=455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) accept$inet(r0, 0x0, 0x0) 1m0.125499767s ago: executing program 2 (id=477): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x10000, 0x0, 0x0, 0xfffffff9, 0x80000}) 59.619662044s ago: executing program 2 (id=484): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x1015, 0x1) r1 = socket(0x14, 0x2, 0x4) sendmsg$nl_netfilter(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={0x0, 0x1458}, 0x1, 0x0, 0x0, 0x8010}, 0x40) 59.318319064s ago: executing program 2 (id=492): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x5505, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x802084, 0x0, 0x3e, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 58.869823849s ago: executing program 2 (id=497): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000204c054b0203000000000109022400010000000309040081010300010009210400030122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20092c0000002c22e75bcfb03d43af0c0ab502d8cf47a8978ac3343390979534d2dd23136b31"], 0x0, 0x0, 0x0, 0x0}, 0x0) 58.651046656s ago: executing program 2 (id=498): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x300}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x40004) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x4, 0x1}, {0x74, 0x1}, @const={0x4b7, {0xc4a, 0x6, 0x1ff, 0x7f5d}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000100)={0x1f, 0x0, 0x0}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) 58.611273298s ago: executing program 32 (id=498): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x300}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x40004) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x4, 0x1}, {0x74, 0x1}, @const={0x4b7, {0xc4a, 0x6, 0x1ff, 0x7f5d}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000100)={0x1f, 0x0, 0x0}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) 37.411941934s ago: executing program 1 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois', 0x8) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 37.388847315s ago: executing program 1 (id=737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x2f000000, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x45, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179e", 0x0, 0x1, 0x8000000, 0x13}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0x0, 0x0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x30, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xec, r8, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) 37.346462236s ago: executing program 1 (id=739): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x700, 0x80, 0xd, 0x11, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x64, 0x0, 0x2, 0x5549ca03dbffd6cb, 0x0, @remote, @rand_addr=0x64010100}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) close(r2) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x9, 0x4) 37.241049869s ago: executing program 1 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00') 37.240394359s ago: executing program 1 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 37.192536331s ago: executing program 1 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x4c, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 37.166978912s ago: executing program 33 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x4c, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3.357061308s ago: executing program 4 (id=1041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000004c0)=[{r1, 0xb046}, {r0, 0x27e2}], 0x2, 0x0, 0x0, 0x0) 2.488602557s ago: executing program 5 (id=1051): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) 2.457901588s ago: executing program 5 (id=1052): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1043, 0x0) 2.457689658s ago: executing program 4 (id=1053): socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x5, 0x800, 0x2) unshare(0x64000600) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1}, 0x2) 2.372517611s ago: executing program 5 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.372324351s ago: executing program 5 (id=1055): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000140)) 2.372213571s ago: executing program 4 (id=1056): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000280)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec08b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bf1643938981322eea3d17c21444faa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES32=0x0, @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="04e086d6111b594b7b5cb08a1d3b529967cc282d711346a4e89752c55d9b9b384d1c1c3964af662d5e0a8dba129b3a6ffd8b8721dda066499dc3f6f760c4b10d8c186db3262d0e2e2b1eba33fb547ffaea3bbad91c7d544002e17a86ed17a714127a366087c5c96ec6bd05dcded3dc37dc01d033097f42cf34a2e8f16a029b810693f31e1c9100ab61bd", @ANYRESOCT], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3cGLG1UcB/BfY+22tdvsQQQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWjN0EEz3vx7s3bXjz2UIwk2d1u4u7BQna25POB5L3My5d5k/DC7zJ5+7d/vNveKRs7WT9q76W4EhG1xxErUYtDFw7a2rh/KY57GO/Ub//5+iefff5hc2PjxmZKN5u33l1PKV1/49dvvv3pzd/6L3368/VflmJv5Yv9v9f/2ntl79X9f2593SpTq0ydbj9l6U6328/uFHnabpXtRkofF3lW5qnVKfPe1PhO0d3dHaSss718dbeXl2XKOoPUzgep30393iBlX2WtTmo0Gmn5aiyWZ7nerUebm1lzDpPhDP0we+DK9Mter5mN1vDSf5Jbj+Y6MQDgXJqt/2txeXy8ovr/sET5//X/hUWv/5+F+n8RjOr/Swfrd5r6HwAAAAAAAAAAAAAAngePh8P6cDisH7azj6rnx3z5/hfbsRv3LkcU39/burc1aSfjzZ1oRRF5rEY9nkQMj8T4TsGbH2zcWE1jK7F898EkP2pfmM6vRT1WpvOj51F+LaU0fJDSdP7F8T9aHOXXox4vn5xfn5x/Jn8p3n7rWL4R9fjjy+hGEdsxyj7Nf7eW0vsfbczkl8bvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAxNNKRE/fvbzROG5/kj/bXX416PDl5f/7VE/fnvxivXaz22gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUDm4386KIu+dfedhnDI0PFDVxM6+EzG3U/x+LU77nHXOV+fawZo8H/Op+IcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvB00++qZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECVysH9dlYUeW+OnaqvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HnybwAAAP//V3Yinw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.344457122s ago: executing program 4 (id=1057): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 2.329379943s ago: executing program 4 (id=1058): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.200867237s ago: executing program 0 (id=1060): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(r0, 0x0, 0x0) 2.200688917s ago: executing program 0 (id=1061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x4, 0x7f}, {0x0, 0x7, 0xcc, 0x4}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x40, "cf89f80ad8f34a74aaf34f59aa45b5c2c7ca916b"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) 2.200484017s ago: executing program 0 (id=1062): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x20000000000001df, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffefc, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) 2.128029809s ago: executing program 0 (id=1064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}], 0x4, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) 2.024032853s ago: executing program 3 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f0000000340)={0x7, 0x7, 0x0, 0x5, 0x800, 0x2, 0x100000000, 0x7}, &(0x7f0000000380)={0x3, 0x1, 0x697, 0x2, 0x4, 0x6, 0x8001, 0xf6b}, &(0x7f00000003c0)={0x3, 0x1, 0x1, 0x200, 0x7, 0x100, 0x101, 0x2}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0xa892]}, 0x8}) r4 = fsopen(&(0x7f0000000080)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)='\t', 0x27) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x2, 0x2, 0x240e, 0x2af4, r0}) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4c) unshare(0x64000600) 1.920583736s ago: executing program 6 (id=1068): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xe400000e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) r1 = creat(0x0, 0xc7) close(r1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRES16]) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 163.922625ms ago: executing program 3 (id=1072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffe766, r1}, 0x38) 163.880335ms ago: executing program 6 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000000000080000006b116a000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 163.717735ms ago: executing program 3 (id=1074): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x20000000000001df, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffefc, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) 163.626805ms ago: executing program 3 (id=1075): socketpair(0x18, 0x800, 0x3, &(0x7f0000000580)) 163.560725ms ago: executing program 6 (id=1076): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 159.976495ms ago: executing program 0 (id=1077): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) preadv(r1, 0x0, 0x0, 0x8, 0x2) 146.317555ms ago: executing program 5 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 99.286067ms ago: executing program 6 (id=1079): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40b02, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffff240001000000000000000000027c0000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000600)={&(0x7f0000000340), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x5c, r2, 0x608, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x2040) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x82) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc9}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) removexattr(0x0, &(0x7f0000000500)=@known='system.posix_acl_default\x00') socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000240)) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045090}, 0x200000d4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x40000, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000015060a0b0400000000000000000200000928000480240001800b000100657874686472000014000280080007400000000008000640000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 37.534188ms ago: executing program 5 (id=1080): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xd9) write(r0, &(0x7f0000002100)="8a", 0x1) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 37.400299ms ago: executing program 3 (id=1081): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000480)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 36.994289ms ago: executing program 0 (id=1082): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x4040054}, 0x8001) 0s ago: executing program 6 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, 0x0) syz_fuse_handle_req(r0, &(0x7f00000063c0)="c501c50664f77c0a450baf7454e704ca98f61c595c7f6be17afc5ca3a122b22032744ed2a7bce260951f21a07f961270f74828f92260ad9fa91f310c5279b4208adfcb5a25aaa0f3dd4f743d07624fa4e0e0f2c9ac3fdcc46d22f0847bc1cb678a0b141730c9e5e99145ab665596f5e9605b37061d122e2c0eebd472ace2409f7fa17f87ee394bc5455aa1d76ad8e55e5329ed7a5ad528f5fdef5074be4c2a8fa503cc9be3d21603dc3d9150c8d35290fb93d6964f44ba92b7e4c75f3109c8f4c8fb9e6155626d817cff91ee3f191f7faab48365dbea66d5b9e35078a8effcf8a21525ffce591107b5cd7d037c70d7d86c07aef37e3d1f48283826a58ec7dd957aa669170b1ffab78f2d0f9826ecb7bf729c433c506448f55f6bad6d9e4ba27617f340729be3873da16846ffb213d442e195f5f60a89aa2193898d15feea9407a37ab1c7bd935dc04dc4006e6cb9eea0ed3cbd5d9c2a2751dc5934b3054e06a37f952f5e6b514fe15fc574c5053c206661ed71f8a00452b96dc2a1bdfe7b8a0652b25d383ecb182c14c649ac3aca0817d8eacaecdd1f93c416891b7d90a95cc6817150270f2e525daa982b7862d10122e9116dd7e9b2331913f32cd6686cc36cf8d0e7914579a8ebe11e259442c85bd2961d9d26450927b297455aaf0b642fbeebc3242dbf3e2c9b077688c63da8de680bb8cc375b1d0f148844b3669587f040e331f25ae1e06b4fcd6dcb91bebe3358f5da727f648b39437e011e3984958d9062978fb6b8ef07ddb8b69cc29ba045608f4c00407b7dc4925cbb841cfd129120cacdac963023cd64a70bf47889156cb2784f969cf05aabed4ec3ae8b5a4effb3a2b343225518356c5c8bcd889a0a199e999bef8cded632caddbb6916e7b75d53daafbf19b58264e8d88f62205410eb824f7bac7f99ec6ac24c46d29b26eeeb92f6a344ef967d1270138bc723e0df4d3da6733afd67ecf2c07f9a1da7392e398b2dfd289ea1cf9bc45fbe59816c5d5523c830d604a374a6b6d7b590d1768367db7415a48b6091ce6d0d381cc487f1c383e8d83e7e03e833298b58ea47126737836cd853b0097121eb5119957c3ae718ecd4bac7419f9c72223395cdfc9a86b2fb53943cc7e2d10db54310f05e53a4153844e6fd6aa11ec5c0c1092e44b19898e875b44bcf998c847960dabe018cd5ebfd2878c12bd34f6cf69ccdb0823f66abe759e166a1bbeb113a1b5e5bd577120e724fe5ef93869d0e94d70af96cd43d813192d90e8b706614d33224bb1c29bcfa3ee8d0a6c9a260a4f87265a5610ae8188ffc00436912f6acb7864db43f55148ed9ceb401e11abdcfeeca483ecc71e683ccd2d6d1a64eb7cd5286f45f22e35a959a799ef6c9a2f4880986007c57fdf664a8d6266815d0bba1ba7c2062ca9c7e9a40c53f0181aaf356e5f728b6ac6de4b744f538004dac5645dec1b7d14d1813892195dab03d623d8a35de7eeffde9fe5410bdbb4b0dbb4888544159290fc5f6594919f1ba82d10a84a4fa9dbffbc2826300fc6913bca9cdbacc364acf6bed9000a4a042eba7eda8a10cbe144153887d15ce2f1ad3a20c3f9f3963675f6e4073bfa1c2cb61ca2df42f903c3997e06b05a2700adf9ca8828e7bc74a74cc940c199d107d9319890834f8718fb740b82ebaddc40b9566d6ed6fc44b0466de2e77769a90df939c34c3bee4fa7b35d80f8e55c8308c12d756f94f292b7a98d0d8d78b851c68c263b07d8181aa0eef0a47da40ad6f4a38b7ac4c07dc6198e920d068e979b32382a501013a7ded014fbc88b9871091e40a2f98ffbd646a70be4b968cbb225eb73036673a9f16c478de5e0a7c519fb71ebe78520dfe02eaf437005b5b3f221c4093c0ee8261fe5f0ad22ba0932dd1cd5ebd7c1b14a07791dd166147ed85064bd83ae717a4dcf746252191e1d324146d7cf4f3f5190e94f32653907b3aa06aea88f75c723f7e61d3cf3164faf5f36e1335fe92449c3aaa72a02c97ea85803ee757074a3ec7484f3cd079b97e2ca50113c4c962b3168cae594c4db8cd8d19b8063dccc03a2659656019b5e81d95235df3724534581fd5f80059d60b50219cc718167ba55ef308e401367405a41558bc17f6764dd3169255b4cec90b3403d47f963ff002590cf1004fc63d4a2ab9807976b467ebb8f8adf2043ab58f129d4860df46e5eb4955ceac2eb2af8bbd7d0f88f53589d7841e07f19db9d801426511ec185515881b46960789ea708ffd52bfe7f842a9a990aa231c7b806c9dc71f2d6d970c603f270e6a866eb994c3cf2ca4cafc84d988936de9bbb9fdf66ea9f45d46a9472d325533a34372711651797a8eb127a5d30518bac7d3a32cf94029f04e3c8804f081644e20dfa41060285a6de8803a506ac4f30b821486869fe4a60e2d49a256b0704f5bb7996d6d8da1414aa3e8e821116fcc79c593c9c87924299054c41fbed410614d4e653439f0b77656c40dd2f7b32328ec6ecf2f75020911beb3693aaa100055080f03e46b0f823aefe1998a2ba6c7efc9d13d04b5a56bc2a154115809509baf76dda86d3a13c51d676579edf11d3be5997ffa27c683876249022cf0b798395406a0b2008cc41fdb82138036500dc1d52223f79f720b41f7e7cb730b7be8abaacb27111ecb3df5564f2fbf51a13cf83ee472d4f72c052a508b4e03812cba40c23384ae33985c01eafb94146568c07f3f53358e37aa7171acb99cabf1bb66c2877ab927dd755799d357c21b9a45800b9605c5b1bdbb72a815e074345975378169d003c83aa71881b7cb229bc69749a6895eefaac0c1fd09dce2b48d70df7d84af4bda9863fa2d73191cff67f91e5118ac9cf7c10661d1db3df795ab64da41f1eb703caba0a82f8036b7c0c62e030dc316e2b768503224dc1054a8e7d657ebe0ed492f3256b99ec300e5ff47849d3ea8ba856fdd01444664e6b92f7d9068977c2eee7e80309bcb289dbb05192267046b50e65b5581ca98f923af01a9c0275267cec62372bedcbd35fb786041287266a0a358bd2c4bd35a4f929fb00f05368c864e0d90a086a6b8c3a8601343380a033f5fc92421670b999e66fbe7ac697af1dbc6d65abe78a83a6fc46ca094ed9b64f66cab9735a84a121fb801c45928fa85a819008b346b517f41d4baaa70b932fdcbef538bbcc63015c1761411cce2f4c99ed92da2621cd61277836a93dc3344e4963f761e7ec45c3b57646758886ceaa0b666cc7b9bd1678a2c492677d0fccf9e34fd6d85c232408dd58f6301621dde745d1fcd7c24d5ddd36627b33c9008e8c7b859b2ddf8fad0ddc75355a91f0658aea0f609eba417f2fbbdbbaac70175438cc0699dbdadf633a4dde6502440c432675a745fea40c0904cd2e804488cd566ee42309f03272763487fd74f89b84a780e161781012a665f9977b7f8189d012371721fcd08b867092e1a0caa8c04fad1445845007b25ad2c2b74217a7c1efd773cc6fee9cdfa3084ea31568fe0ac0fd6460fc294bcb501e540696fe8c115fa64f3c48c8cd48361717ccfcd23be2b9d7373c0fe7301be55233200bd0a297635a27409f20ebcd90d8e48bf301f16859799076c10f99efcf31cf50fae2682f3cdecf536bb2c7e3857430fa00cbd5ad045335108050035bf694ac145a1b2fec7fa6685febb0e783ce5d3e7af48dc41ad70866c7603344b40f32843f6e453bda33e58715a3cedcbf105e9ce39b450562bdcb6357730a5495e5626b3da95a6175244d2f67d3c2bc83a72e56d5d2791eb1fe4c146db8b5fd15ae0c6264964d7960e558921c99b865e036facc47f31e676a806989fa0609e4e39533332cbd612c4af6bff3d943fa155fdef46254e2422243d464fde0a8c215b8bd7eeb9e5aab6d1081f7677ea677fc008895b35d3091ff8c64b87ea41d11d2d5b2919342430e066f736a1b3d389239469caeec199fca5b693f1267e3adf4ccd358247fd0c2bd1b40421fb907317a72e4646063cae11737fabee53950f374760e989d685e45bb72d130343ff405b90bdfcf07f0c375ab27fe1bcc4055e2c5d719513f84b6a1adcb874f2551cabed22b2109c2f80a75d3ddb298edf0ed727b7899c599015175f2b2052fa7aeb32e4b6677b9ee4fb433e96093431b82f154bb94f9e18464b94106322f408ab79a08e6958cc2abe8e7a9e0ef69d66032917d2872a75f56a697f2af8e8ebec9358083e1e4b456cf811181cfa5289e2d259b1f429e1168d3b190d526daff9a434920eaa904883ef1f6d9135346e1c812d8d8e6b69aa276722d3eccb21bdf9eabdf90a0edad59565573340cebce561c87af9f9d305484295f663e31379c3b30a2eed7c23ad47feb96d79549c0b7dc4da670b5208d35c302b8670ab96d2887a0fe117229c0ccac15a05a6530719e2cb877603fdb35c4f121f2280c9428329b48430cdf76de8377e235bb77c8a30624f0ef9c12da48b1ea62c923f2fcee030a9168316ca04a5f0e0e0683022d4b9fc66864c82f0331a76d1c65f299cf53d5e039bb6b7ea24c4f63572fff594705211927a74217dd4daa94cf46db472ce5cb235f5d75e66059d78305ec4a31ecf8124c4a2210a89ae887ca26b1fd2a6bf334d965bd85096dcbc6454fcfa99409f3e8d93baea101e6e7bea29491669d268cb42c4a5a2f62915c96c19d32ba205d242cac492895e5aa85d1329c897230a52926c5060050f389a29033788ba44870537b60a03e838799e7f391eec7253230a6d149d3b515173d2c8dbe58c605a79cb8f99d402fa23e93fc968f4da8f29d6336e10196c3a498d2148c61a01e0bb7c6ff8161bdb026aad443a1dbac52068e24e3f34834b9e6dd9d4d3d165ac684150a24e8b1efcab934d11648e7ab7664d8bd902cdffa9858cde80f0166650d297844f741e1ac7a014e3489559092dbd6a107129c603e797200f9f86ea467c751512afaa85401404af851e8e3ad2c074db0349f0d31f3f8e53ef4015031a866763113cc9687e4e8aee9b4f2c5a7d9a478fa9a3c132953f338a9f87c74715e7d79007e05f69a9c8cfbac9b03f3f62843dabccfebb2db657eb929c78f4a27f21d9b03f04a51b4e23bab703627c409073a1c897f5b5305a3e96f7e30ae702293d59048858798a95cac8e0bcdc7cef43085f4d259b89888392fc0432c3155ecd4c0ecff89319d0d99465341d93698a5b1064c4cff533ac2149c87f8e5b8b38d6273f7404eecc030feb56f075ad3103fdec1c14d8232ac89b0014cd305adc25e9805eb954a4bcce5575ad83403ad0033589d19cd9077929a34a959882cb7f137c65e53af541d379d4fda9c4c59abe2c17d9bba4e3f2e0539bc42aceb32a0e6e1b3af096b0bc45565a6bc27e8609b6e7c97ab003584e9acd0434067512604562cc7d90dc00fcb454ad0960b05f7931133c839c495e6392945f812635bf6729709e26285c7a4d227fd0d862754024f4960d9ff4806f73523b7727735094c0c6d13c8b0ce167d58249eb454fb4655ef4104b3fa62b6d549a3d2f38c1f1f5864895c36faa651f67664d1b0df056ac8fd63f27656f18228bff6931dfa49ece4796a1131654ecc906ac3daf0982421d0d94a924497a627f7203693e603dcac23e89178f5e4696df67bcffca9524fd0dfac2d10078a935edc3b5d53a90bf3aa48801ea0416454d0bd21e9404a6b543dcbce93ad99dcdc788347557c4736b8399996c24d9801a0b46327eff50475878e018b9882681887c70b38a45ffdff8a0ff77201d379c113453cc6db595a549e9bea7b94f8f8ae8a14d29c2b83b442a7050e664778fb198aef909e9d3a86331ac534da1fb3013022ba56a2141bf5e2b51b556280f1c740205bd39dcd08a02150fa0c11b436c841ab685290817881ed0ee3b2da609f823cfae0cccbd4405fff28aa235c6aa1a011a7664db951da4069f8dcea03256600115af1dc7a74e8ceb96a8004b872615b4deece17f37077c4501654c040fbee77e4d03baf8fd98330641faa63f2dcc1fefab6c3168f04091c79a56c023598f1d0e48a2c806938e6aa0c4ddcd0e135cfa69da14433e7e3fdecd25439f68f5bf611811d2b6553885431b63e130ca9c6a11f694f22e71fa1aff641588d2bd3ea208843adc212c81dfbbac6339dbcf7b55a70838eb3cccf610002b3dcbb53ebb35b474c5dde221a297b6e508ef0b0f127b504b567ca1da5d8597d332e5d662bcbd3621a9b2e7ebc07bad81ddb25b6c3df289cc785a535806e0059078276fe623e7c0fc601ab23a7db521e9cf2f686c41e38c956d2e129f601dc52c34b2f1cba565d1425d95c4865b66f5067be0b2c3373ff5548185236f021e76003c2a68c61dc4b2229646c163c8224ccbfa66c441155bfd8eaaba5755352cd0f5f83680eed5f13cc955cbd498b50b4d811d47e5976280f58d276a2dc86fc46d0e3e932464b026734f55a41bf07b2e496010435034121a09dc7b9145babe76e680e5261fb9e12cc9578c735aeb70c5b024622282958f3e1bb2b928a0d702bc6f7ae707c2dcba7f6cec5644bd5a61fab7b56e1a889e7895d3823c4e125878660a2268a1887733ecfb6b569cae20d9adccef4c13fd90eae23ebe9e1a667230c05ba622dc2a7b89748e9b01cc27c10d9b864f7936cf2935b372a89dae4375f3b9fa4b592015cce4d19525446638fc720980f6d887ff93c6d678d36d0300e6c81ac421583136dad253b4f8593ebeff408d208b10dceb830a8948ccd91b70ca7b50411dba36946a4b0e7ecd3db68715993b2bc37f9a6c4799eff25740b9a66ab55a11ed0eece818edc2820a3d4431d417fcb004b63edeac8ac5da523b372453f7f7734ac65c4860f2f99857df36894252f27d277a8b654d86011c74c4bedc4a2c018c4a7a2246db24ad4d6355822e33656c5c3358b416d539b5e947019a823b9a3fc8ddf80d827d5ddaade555f3a34bddbb826e03986c25e244e2905e850ea93bd912e1771fd13b33f367799bbf46e851ec6dbedffdaca5d1317dc7873d991dd20dc6c31b2e748a5eea28378680cfe60da99f033b642f2847351ceba2e640958109ddb3dbafeabc50fdf8228655eec062769ca1d3b39d73cd5b202d53ad97c4e0461d99b380c30f6bcb86a9e78b56ee809c39114d23a3d54dd7a3ebfb5056e7325f676075716612ac6a3250ec044002d0aa608dcdc1af1f57e317048f60b434f38dfdec2f1e05fb713de87199fd9bec7644c36eb18a9e5ebbef884312378bbf6f23e7765efb7a3a3fc3ca7240985692557983aa9160b9a85c193a75ce824b9ef8d37b9ac67d18c6fbac053feb1d8afe6ae4a0d8204941949867b629769bad62c1c33c689523524e52ab9c6f03b8707e6febfd7404fab4607a4ea620a13b9649a4c06754c6a1d967253d1dd40c4498fa1889c335dda3cded1f326d648599d8474d17cb07a5c3dc631543a0728851071a434df829c7d93fd59e8fbb963cecc71f81bd1cbe7efe2e26e85cf721f97a6fa460669697cf82a9f9c2dd7423572b0149a77ae8923162ef87a6e2fde852334cc8f1b3563fe875052de9243da053eceb091c95cbb8be039b81730cdb71434d60f4c214190dc91ba21085b90ac18c09c8163cb7617ea445f4e96c3abcc6fa994c25fa9be76711ca42142a311a0a2ce6030bec676792967a78a76bde2478b90057629ba8d731d9a52aa38cd6fe41760f7082f6dd2f663568a9338e30be965fffde00553feab6f4fa71d84f6f20602de0039d80fc3677974ad5d90dc8b1fba2d06ffcb501f3bf09dc76131c0e851f6e8f803239e066bc4360212bc7cd17c35828e4b503cf86cfa011e9bea8f7d3fff896fa42f3562f7048981572c80508565683d5190bee7bfbbb2ba3005765247e5f929841b2262ab1c6440d08e4ea14faa426110ef2467d23f7618b37bcc2cd9fce93c9cdd1cf6632eed232562ae146c4f642ad4d7fb8369f6c5b7669dd933a2e1fda12403be0adcc8d8d2a0ddc0b63f14de2f748b376c8aea1471b41c11026b81650817e8561fb5cd977ddee7e5c82060f6ce8d3b54df435534699d08a83e2b3d86e344af099950650dfa19be17447973e11fce6c6ba4ce0f0d3c765231774d0cdebbe4d243db549b26e35b09b19e160f98472591703a6c8d751f232f3483d7f7eed6f67cf319cb93c22a272bf214d703cf98dea17dab9860585f5b9927ef68d5e068ba67940381bf3f35f3b6a4566d7b769156a2df0ca336bfdf98fc06f26aa92edcc79d97243419d9592c93e753a30c3f78db0ca755c085593322d3a514f99947c6e5e26be4e23e7d3c5a07b5d3556f1d5ad0c1bcaf82d0b2ea7d0e5e67883b1be612e0a9b77b59d9b825ec5d5b533a98e7e72a7d1777d4f3786ecea502fbb1c4e2c9fc39b09fa1191cfc124bef878ec63187231dba1e3d2dea4c613bcfcd5f3fa7505688106b238efc70cdc65f426013962f75e09a75f21f3ef2655eb36d4a10728399d2838f026e4bd33a0dfdd6e691911b9e90ba4c613f48260e2b6240d47fc905fc07e953d4250f85e1117c0f680d5500a10a762755f66c62f49be62c480ad7b84c84640eeefafb983ea5015568d3c07e0e563f62c1664ccafaa8aa694b8bb0695666368627d41d60657726bc97b01ea817acc324c1e13a8afd7c395a8bf442ac79130319f6877bef9fb5115a8c27831722eac8eef34d0926d984f5c2deceb17a0624b3b41c620a070d6ee3ccf0686d76d1d869733e0419bdac4e95314c641cf3199d1823ec15d3f6ad6ff4bd3e12e5c1fe541be005b9dc88c84f25ec70cb530ea41970d90b60435cea75a80f217a148f4be9f20720eaf58a5a017941400137a9ed70bd634ec4c00cb31b8dc83b7994fdbaf66d7da3841267e44c698f3beea98961be4687e3ef0e301bc64bd337930d046acb4b3e883db2083e1f3cb9965b41f40a3a6aeb3550002a7a49156a1d67c93413f142730c2b615dc9a5e20e3414c8a2b1d9bada99b4c1568c88ceaa0192a141d980c2b40b37073c94e94f2e9b7ea68bab217866f6ec18668d02533d1a14d2e41a14bb737245d305078f1de73ae4d1eaab266c881e2940cfcb3ff261497015545912d7ea63fbfb060e0fd99cfbcd2ffb0e060c834c8720ad950fe1a170b54f299a6f5d9d8d1f38b79bc2699df4f508c82dd3464a6d3203e44eaba484f9cb9c14cb53ac519be5dd51ab420de32b079d052903555bd0d900e1e7a554b3da27f86216f4f88256c7338eb1c6173f9d1e3381376b860e96b08034b3d3c3f8456d75dc971bdc83a5ce2b6f7beb839b02eef3539c7b267ecd74be7fde9d619ccd2c8ac7d494a05d0a645275792da66f7a8feb6316a77054d157feab5bc78cd8afc52057336c262c09d1eacf71eed99329ca989d49b2e496d90acce84e00f8b72be07f57961158ce5d634f0d02633eab47e1dd1f788e13aa7e7dde11ba18e486bb0b62d040ea992dfe6ae43b6875994decf9d97bca9f98ffce715c608d34bc614d0a7547a7d12ade6487121e29ce5a7d95b361b84cad895424f90ed86cad1ce5b5781c2ba2f6c239877658ed69346e7353bb45a2497f07c8c3a5eceac09f1efe4b887e6edd9276935fea96ad308ce6a117f71b01ff2f18d4a83abde0fea673455282e031e5435b8bc863494873d9c044b3987c19f617f4d7f3e91b15e523fab515276e4f4d8e825759c30f087147dea1adf4c668389207ff21ca710580f6f5d1d91f8d9659841513e8f3cfd2e7c546b8c7594e820589e40a0b1811f685cdb2013626cf036894f16cd49b02fb078aba8f127dd47981f0fc9e2e6d8db95617cd5c031125f100caf12fc5efcba7c7ac17189b83ae14b9fbb522d2bfb160c4372f9ad09e3ba2fc8d539436d5bde149dc6347dff3961079203821ba7ced9f208d0b649268a77bccf810fbaa07fe16678a9457da9762b7520f8ed052d836242d6b95a7f3691faeb511697bb4ceabfaea9a3c0acb6b838c74ea15b31a80982bad222e57665710b5615ccca5f3e0e249a36844783a5b4b1e152b8db8cddc4787e4186eca104fbd476da27990cdd14ac667e30715bca22c9742a2da53306ab4e6bdd5fbb8c99656dd5d31246eb6555932dba83692f01c90b4f1ef82abd4692873b6bbbd8c263d25e5add20d99c836878de21968c4f0297a5b7e9f03cee1830ae188692787bb9d35b91e324df70270d2f6e6fc7747ebfe743c98812fc277c48b276f4474c6edcbdad180d017cf04bd8f335fadca4965793b7565e1242c9ef3cdfbf242838f285f4b2c21c1ee95850989eff26f2853566f881ff9d0929f798829b82f4c015f533d77a3a1eb2d7d3b3713ae99b6a982a1ccd4da3e4e0137ed112f293f970b890530b33b5dafb88a3a3caeb1fa079fb40ac81f5d62eab0e19ef2c94ef6c04df9f05686fe04d755052f26c9b0bc529bb27565f1f6c6757b3d36aabc0b6576d1429e3b110a39b9363a4dc707e563a47713afe498560c7605cc99743647d94eed8915d04e85f85d7b5b1f1da1ac4d76f0611492572bfda2ba0182e34c7ca1dcde7dec5e68b7e9f0e66d91e09b8c29670ac58c71f57e5b26317fb1737663fddcde50576984ddb0ada508b6379772eca60d4c103c4de05b74da22e716b414f101af0060347c941a674df8c7a1eec576bcc1a60d0cc8dd1d1e600cf302c2d007cfbb3b647c6098eafb00587f352fe15446649cd30152219f671e003ceca7e7d5c9518a20dd6fd16781e2480d9b0278f592eeeb7cab412c5b85c172f727cbdf3ef57c322cb243dc5573e65af98d1920d99b281891531dd90d93a7b7ed654ae71c51fa8f2b9504a7083fe13ffbe2a5a6a591819cbe11b795f44f6c50bae5e2b507820bed7ab0a9f9a2d91c09bd7bcde9b01dc727e460ee53a176163927669595c4ac3100b0c1e9c4de673377d2cdb9b46fa8e28b2018f5bb5ac45416c846c75962251fd45be35f42af7f84f7c50aa6520c247fce6cf82e86bd43598961eebb5e2eaa2223793611fbc2691ea2597ea4962e59d69f39ea9ffb231e263f7bc283772eae347d3342c5e71f6b15627dc5f9a9cc7f079729e8b8f92a0abd781d0a6c8f35d90d4258bde2e2f1b73612bdbc1ff785a002c6f35c52d5b29bbe813bcb96f4bb8912173ac7c762fe3a1b468c8107ce3e6758c2a1b4c24dbce8135fd31345387cdaea7b560906bfc43b00e2fef103e4adc5e4ac5c007f42f51967de412b0bd53da11a96cd614d0535bcd9a68d6997dcbca74616a58a1e0ce453caaafc76cab4a9fe17b77e6b5ef33b068b356ff11751e8605eb666b2b8a03a49946a228ed91f3b30fb70c641132f64810ea1ddd02c3afde938bfb8f4396bc8b54c1e6c0b528f90e9bd85aebb7e26d4289e6897138af8c52f1b46c5d0620f9e7c6a9195a5eb56630cd7c2fd929289fc098bc810175ebcde3963c0ff28b1110d40dad6e5f439f786aacf5f00beb679a6df1373bfb47d593533151d7ea69e4e67cbea1d3971c1110934a062fb7ff06d3d008476231a911db18d2f2f13f394e4815e471e594f510f8df9a2bd4f024dbd38bd40829502f4997ed177cd8ca82aa626e23b4ddfa6e8d9ae0f400589cbd1d6c4d7516569439401782c8c97321e8d989b072fc0c", 0x2000, &(0x7f000000f500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c6c0)={0x78, 0x0, 0x8, {0xce5a, 0xd14c, 0x0, {0x0, 0x3, 0x1003, 0x8, 0x6, 0x3, 0x10, 0xc, 0x8, 0x2000, 0xd809, r2, r3, 0x81, 0xc2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): b 5-1: Product: syz [ 60.987276][ T37] usb 5-1: Manufacturer: syz [ 60.992165][ T37] usb 5-1: SerialNumber: syz [ 61.012144][ T37] usb 5-1: config 0 descriptor?? [ 61.018066][ T37] smsc95xx v2.0.0 [ 61.080298][ T1172] syz.3.331 (1172) used greatest stack depth: 21984 bytes left [ 61.092716][ T636] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 61.103368][ T636] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 61.114319][ T636] usb 1-1: config 0 has no interface number 0 [ 61.120607][ T636] usb 1-1: too many endpoints for config 0 interface 135 altsetting 47: 48, using maximum allowed: 30 [ 61.132237][ T636] usb 1-1: config 0 interface 135 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 61.146070][ T636] usb 1-1: config 0 interface 135 has no altsetting 0 [ 61.155139][ T636] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 61.156901][ T335] hid-rmi 0003:0461:4E72.0004: ignoring exceeding usage max [ 61.164542][ T636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.180077][ T636] usb 1-1: Product: syz [ 61.180357][ T335] hid-rmi 0003:0461:4E72.0004: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 61.184719][ T636] usb 1-1: Manufacturer: syz [ 61.201027][ T636] usb 1-1: SerialNumber: syz [ 61.208822][ T636] usb 1-1: config 0 descriptor?? [ 61.355108][ T1179] loop3: detected capacity change from 0 to 256 [ 61.363504][ T1179] exfat: Unknown parameter 'irki3h' [ 61.565573][ T335] usb 3-1: USB disconnect, device number 7 [ 61.579543][ T1180] fido_id[1180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 61.617012][ T636] usb 1-1: USB disconnect, device number 13 [ 61.648040][ T1185] netlink: 'syz.1.334': attribute type 4 has an invalid length. [ 61.658177][ T37] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 61.671662][ T297] usb 2-1: USB disconnect, device number 15 [ 61.677850][ T37] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.688382][ T37] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 61.695395][ T1185] syz.1.334 (1185) used greatest stack depth: 21920 bytes left [ 61.700615][ T37] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 61.717385][ T37] usb 5-1: USB disconnect, device number 10 [ 62.177796][ T297] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 62.318142][ T1231] Unsupported ieee802154 address type: 0 [ 62.331615][ T309] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 62.371597][ T297] usb 2-1: Using ep0 maxpacket: 8 [ 62.380667][ T297] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 62.389850][ T297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.398116][ T297] usb 2-1: Product: syz [ 62.402390][ T297] usb 2-1: Manufacturer: syz [ 62.407001][ T297] usb 2-1: SerialNumber: syz [ 62.481506][ T636] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 62.521540][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 62.528096][ T309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.539943][ T309] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 62.549264][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.557447][ T309] usb 4-1: Product: syz [ 62.561773][ T309] usb 4-1: Manufacturer: syz [ 62.566794][ T309] usb 4-1: SerialNumber: syz [ 62.573661][ T309] usb 4-1: config 0 descriptor?? [ 62.579438][ T309] cdc_ether 4-1:0.0: skipping garbage [ 62.584920][ T309] usb 4-1: bad CDC descriptors [ 62.589841][ T309] usb 4-1: unsupported MDLM descriptors [ 62.671532][ T636] usb 3-1: Using ep0 maxpacket: 32 [ 62.678240][ T636] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.686858][ T636] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 62.695317][ T636] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 62.703614][ T636] usb 3-1: config 14 has no interface number 0 [ 62.709874][ T636] usb 3-1: config 14 has no interface number 1 [ 62.716088][ T636] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 62.727388][ T636] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 62.738772][ T636] usb 3-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.751954][ T636] usb 3-1: config 14 interface 57 has no altsetting 0 [ 62.758742][ T636] usb 3-1: config 14 interface 228 has no altsetting 0 [ 62.773612][ T636] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 62.781865][ T309] usb 4-1: USB disconnect, device number 9 [ 62.784909][ T636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.799103][ T636] usb 3-1: Product: syz [ 62.803720][ T636] usb 3-1: Manufacturer: syz [ 62.813504][ T636] usb 3-1: SerialNumber: syz [ 62.831506][ T37] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 63.018955][ T297] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 63.029067][ T297] usb 2-1: clock source 0 is not valid, cannot use [ 63.036595][ T297] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 63.044211][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.054539][ T636] usb 3-1: USB disconnect, device number 8 [ 63.061675][ T37] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 63.078816][ T37] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 63.093815][ T37] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 63.114851][ T37] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 63.124096][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.132378][ T37] usb 1-1: Product: > [ 63.245073][ T297] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 63.253989][ T297] usb 2-1: clock source 0 is not valid, cannot use [ 63.263476][ T297] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 63.270576][ T297] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 63.294551][ T297] usb 2-1: USB disconnect, device number 16 [ 63.351677][ T37] usb 1-1: low speed audio streaming not supported [ 63.384122][ T37] usb 1-1: low speed audio streaming not supported [ 63.424426][ T37] usb 1-1: USB disconnect, device number 14 [ 63.523783][ T432] udevd[432]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.653111][ T1183] udevd[1183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.675674][ T1262] Unsupported ieee802154 address type: 0 [ 63.934832][ T1254] syz.4.364 (1254) used greatest stack depth: 21216 bytes left [ 64.074408][ T1289] Unsupported ieee802154 address type: 0 [ 64.421567][ T335] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 64.441529][ T309] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 64.492107][ T1313] Unsupported ieee802154 address type: 0 [ 64.602621][ T335] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.615286][ T335] usb 1-1: config 179 has no interface number 0 [ 64.621793][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 64.631566][ T335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 64.643510][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.654469][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.665164][ T335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 64.676969][ T309] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 64.687182][ T335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 8 [ 64.698566][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.706758][ T335] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.720737][ T309] usb 2-1: config 0 descriptor?? [ 64.725838][ T335] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.735116][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.746786][ T1305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.755747][ T1305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 65.016028][ T37] usb 1-1: USB disconnect, device number 15 [ 65.016063][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 65.031363][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 65.146126][ T309] hid-generic 0003:0403:6030.0005: unknown main item tag 0x0 [ 65.154016][ T309] hid-generic 0003:0403:6030.0005: unknown main item tag 0x0 [ 65.162436][ T309] hid-generic 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 65.357104][ T297] usb 2-1: USB disconnect, device number 17 [ 65.473694][ T1343] kvm: pic: non byte read [ 65.478279][ T1343] kvm: pic: non byte read [ 65.485126][ T1343] kvm: pic: non byte read [ 66.971159][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 66.971174][ T28] audit: type=1326 audit(1780455773.841:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.017008][ T28] audit: type=1400 audit(1780455773.871:555): avc: denied { setopt } for pid=1367 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.037269][ T28] audit: type=1400 audit(1780455773.871:556): avc: denied { bind } for pid=1367 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.056552][ T28] audit: type=1326 audit(1780455773.881:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.081854][ T28] audit: type=1326 audit(1780455773.881:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.108171][ T28] audit: type=1326 audit(1780455773.881:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.132831][ T28] audit: type=1326 audit(1780455773.881:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.171950][ T28] audit: type=1326 audit(1780455773.881:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.197375][ T28] audit: type=1326 audit(1780455773.881:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.197977][ T1380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 67.222210][ T28] audit: type=1326 audit(1780455773.881:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.0.408" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f753719ce59 code=0x7ffc0000 [ 67.257050][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.265135][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.299291][ T1383] netlink: 'syz.1.415': attribute type 16 has an invalid length. [ 67.307125][ T1383] netlink: 'syz.1.415': attribute type 17 has an invalid length. [ 67.315374][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 67.323021][ T323] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 67.330638][ T636] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 67.339227][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 67.349501][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.357080][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.365971][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.373048][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.381030][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.388105][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.491712][ T636] usb 3-1: device descriptor read/64, error -71 [ 67.523609][ T323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.533771][ T323] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 67.543491][ T323] usb 5-1: config 64 has no interface number 0 [ 67.549952][ T323] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 67.586621][ T323] usb 5-1: config 64 interface 44 has no altsetting 0 [ 67.600856][ T323] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 67.611319][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.620188][ T323] usb 5-1: Product: syz [ 67.625921][ T323] usb 5-1: Manufacturer: syz [ 67.630805][ T323] usb 5-1: SerialNumber: syz [ 67.781525][ T636] usb 3-1: device descriptor read/64, error -71 [ 68.045790][ T323] usb 5-1: USB disconnect, device number 11 [ 68.051848][ T636] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 68.221766][ T636] usb 3-1: device descriptor read/64, error -71 [ 68.375119][ T335] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 68.531496][ T636] usb 3-1: device descriptor read/64, error -71 [ 68.562478][ T335] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 68.571730][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.587858][ T335] usb 2-1: config 0 descriptor?? [ 68.651581][ T636] usb usb3-port1: attempt power cycle [ 69.051554][ T335] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 69.091519][ T636] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 69.122751][ T636] usb 3-1: device descriptor read/8, error -71 [ 69.251463][ T335] usb 5-1: Using ep0 maxpacket: 8 [ 69.257696][ T335] usb 5-1: config 1 interface 0 altsetting 227 bulk endpoint 0x82 has invalid maxpacket 16 [ 69.268198][ T335] usb 5-1: config 1 interface 0 altsetting 227 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.281537][ T335] usb 5-1: config 1 interface 0 has no altsetting 0 [ 69.281623][ T323] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 69.289766][ T335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.305148][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.313452][ T636] usb 3-1: device descriptor read/8, error -71 [ 69.318613][ T335] usb 5-1: Product: syz [ 69.324346][ T335] usb 5-1: Manufacturer: syz [ 69.329101][ T335] usb 5-1: SerialNumber: syz [ 69.342924][ T1429] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 69.481530][ T323] usb 4-1: Using ep0 maxpacket: 16 [ 69.488353][ T323] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 69.497164][ T323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.507597][ T323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.518635][ T323] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.528047][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.536109][ T323] usb 4-1: Product: syz [ 69.540383][ T323] usb 4-1: Manufacturer: syz [ 69.545040][ T323] usb 4-1: SerialNumber: syz [ 69.554271][ T335] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 69.562966][ T335] usb 5-1: USB disconnect, device number 12 [ 69.581510][ T636] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 69.612528][ T636] usb 3-1: device descriptor read/8, error -71 [ 69.741497][ T1255] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 69.752616][ T323] usb 4-1: 0:2 : does not exist [ 69.759778][ T323] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 69.768438][ T636] usb 3-1: device descriptor read/8, error -71 [ 69.779709][ T323] usb 4-1: USB disconnect, device number 10 [ 69.891619][ T636] usb usb3-port1: unable to enumerate USB device [ 69.921479][ T1255] usb 1-1: Using ep0 maxpacket: 32 [ 69.927901][ T1255] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.938213][ T1255] usb 1-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.951336][ T1255] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.958099][ T1255] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 69.967188][ T1255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.976125][ T1255] usb 1-1: config 0 descriptor?? [ 69.982565][ T1255] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 70.278921][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.287241][ T1475] syz.3.449 uses obsolete (PF_INET,SOCK_PACKET) [ 70.289130][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.302845][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.345312][ T1474] netlink: 'syz.4.448': attribute type 16 has an invalid length. [ 70.353347][ T1474] netlink: 'syz.4.448': attribute type 17 has an invalid length. [ 70.364893][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.372332][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.381906][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.388983][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.397564][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.404624][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.417773][ T1474] device veth0_vlan left promiscuous mode [ 70.424010][ T1474] device veth0_vlan entered promiscuous mode [ 70.432118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.442546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.452737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.611498][ T335] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 70.792633][ T335] usb 4-1: too many endpoints for config 0 interface 0 altsetting 18: 254, using maximum allowed: 30 [ 70.803640][ T335] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 70.814950][ T335] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 70.826196][ T335] usb 4-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 70.839263][ T335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.845916][ T335] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 70.855050][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.863668][ T335] usb 4-1: config 0 descriptor?? [ 70.869040][ T1481] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 71.034278][ T6] usb 2-1: USB disconnect, device number 18 [ 71.173603][ T1509] loop4: detected capacity change from 0 to 1024 [ 71.192835][ T1509] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.211389][ T1511] mmap: syz.1.462 (1511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.223763][ T1509] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 71.279031][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.296894][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.304316][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.320982][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.331725][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.339342][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.347128][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.355767][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.377331][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.391270][ T1518] loop4: detected capacity change from 0 to 512 [ 71.397692][ T335] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 71.408513][ T335] dragonrise 0003:0079:0011.0006: unexpected long global item [ 71.418148][ T1518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.422640][ T335] dragonrise 0003:0079:0011.0006: parse failed [ 71.428104][ T1518] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.433599][ T335] dragonrise: probe of 0003:0079:0011.0006 failed with error -22 [ 71.447608][ T1518] 9pnet_virtio: no channels available for device syz [ 71.461021][ T1518] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.466: Failed to acquire dquot type 1 [ 71.489372][ T335] usb 4-1: USB disconnect, device number 11 [ 71.506832][ T289] EXT4-fs (loop4): unmounting filesystem. [ 71.613123][ T1526] loop1: detected capacity change from 0 to 40427 [ 71.620249][ T1526] F2FS-fs (loop1): fault_injection options not supported [ 71.627645][ T1526] F2FS-fs (loop1): fault_injection options not supported [ 71.635740][ T1526] F2FS-fs (loop1): invalid crc value [ 71.643838][ T1526] F2FS-fs (loop1): Wrong cp_pack_start_sum: 1 [ 71.650170][ T1526] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 71.727922][ T1538] loop1: detected capacity change from 0 to 1024 [ 71.734907][ T1538] EXT4-fs: dax option not supported [ 71.760770][ T1540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 72.036709][ T1550] loop1: detected capacity change from 0 to 40427 [ 72.045906][ T1546] loop2: detected capacity change from 0 to 40427 [ 72.050341][ T1550] F2FS-fs (loop1): heap/no_heap options were deprecated [ 72.060433][ T1550] F2FS-fs (loop1): fault_injection options not supported [ 72.071653][ T1546] F2FS-fs (loop2): invalid crc value [ 72.080651][ T1550] F2FS-fs (loop1): fault_type options not supported [ 72.088780][ T1550] F2FS-fs (loop1): invalid crc value [ 72.102443][ T1546] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.102879][ T1550] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.139793][ T1546] F2FS-fs (loop2): Start checkpoint disabled! [ 72.145331][ T1550] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.162919][ T1546] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 72.193977][ T1546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 72.201571][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 72.201587][ T28] audit: type=1400 audit(1780455779.071:701): avc: denied { setattr } for pid=1549 comm="syz.1.479" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.230875][ T28] audit: type=1400 audit(1780455779.071:702): avc: denied { read write open } for pid=1549 comm="syz.1.479" path="/97/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.254555][ T286] syz-executor: attempt to access beyond end of device [ 72.254555][ T286] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 72.254710][ T28] audit: type=1400 audit(1780455779.071:703): avc: denied { rename } for pid=1549 comm="syz.1.479" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.291118][ T28] audit: type=1400 audit(1780455779.111:704): avc: denied { ioctl } for pid=1545 comm="syz.2.477" path="/95/file0/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.321127][ T1546] F2FS-fs (loop2): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 72.349339][ T43] kworker/u4:2: attempt to access beyond end of device [ 72.349339][ T43] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.482973][ T335] usb 1-1: USB disconnect, device number 16 [ 72.507483][ T1574] bridge0: port 3(syz_tun) entered blocking state [ 72.531478][ T1574] bridge0: port 3(syz_tun) entered disabled state [ 72.544229][ T1574] device syz_tun entered promiscuous mode [ 72.553648][ T28] audit: type=1326 audit(1780455779.431:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.1.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d59ce59 code=0x7ffc0000 [ 72.579890][ T1574] bridge0: port 3(syz_tun) entered blocking state [ 72.586398][ T1574] bridge0: port 3(syz_tun) entered forwarding state [ 72.611538][ T28] audit: type=1326 audit(1780455779.471:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.1.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d59ce59 code=0x7ffc0000 [ 72.670350][ T28] audit: type=1326 audit(1780455779.471:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.1.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d59ce59 code=0x7ffc0000 [ 72.729059][ T28] audit: type=1326 audit(1780455779.471:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.1.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fe95d59ce59 code=0x7ffc0000 [ 72.784370][ T28] audit: type=1326 audit(1780455779.471:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.1.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d59ce59 code=0x7ffc0000 [ 72.841013][ T28] audit: type=1326 audit(1780455779.471:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.1.490" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95d59ce59 code=0x7ffc0000 [ 72.916812][ T1591] loop2: detected capacity change from 0 to 40427 [ 72.932499][ T1591] F2FS-fs (loop2): heap/no_heap options were deprecated [ 72.947962][ T1591] F2FS-fs (loop2): fault_injection options not supported [ 72.955420][ T1591] F2FS-fs (loop2): fault_type options not supported [ 72.962612][ T1591] F2FS-fs (loop2): invalid crc value [ 72.977754][ T1591] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.021933][ T1591] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.083983][ T323] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 73.098704][ T290] syz-executor: attempt to access beyond end of device [ 73.098704][ T290] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 73.113033][ T290] syz-executor: attempt to access beyond end of device [ 73.113033][ T290] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 73.156984][ T10] kworker/u4:1: attempt to access beyond end of device [ 73.156984][ T10] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 73.219855][ T1581] loop4: detected capacity change from 0 to 131072 [ 73.232064][ T1581] F2FS-fs (loop4): invalid crc value [ 73.292251][ T1581] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.301567][ T323] usb 2-1: Using ep0 maxpacket: 32 [ 73.308331][ T323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.319984][ T323] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40 [ 73.329446][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.337681][ T323] usb 2-1: Product: syz [ 73.342245][ T323] usb 2-1: Manufacturer: syz [ 73.346926][ T323] usb 2-1: SerialNumber: syz [ 73.365310][ T1581] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 73.524497][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.531682][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.539353][ T1612] device bridge_slave_0 entered promiscuous mode [ 73.546746][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.561499][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.570538][ T323] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 73.590625][ T1612] device bridge_slave_1 entered promiscuous mode [ 73.598225][ T323] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 73.607349][ T323] usb 2-1: USB disconnect, device number 19 [ 73.712574][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.715676][ T1621] loop3: detected capacity change from 0 to 40427 [ 73.719782][ T1612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.733491][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.734495][ T1621] F2FS-fs (loop3): fault_injection options not supported [ 73.740540][ T1612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.759343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.761623][ T1621] F2FS-fs (loop3): fault_type options not supported [ 73.776163][ T1621] F2FS-fs (loop3): invalid crc value [ 73.778613][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.791891][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.806285][ T1621] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.821786][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.842139][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.842365][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.849201][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.849356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.882030][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.889184][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.901998][ T1621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.916319][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.924614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.952205][ T1612] device veth0_vlan entered promiscuous mode [ 73.966073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.976373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.985546][ T1621] syz.3.502: attempt to access beyond end of device [ 73.985546][ T1621] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.985764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.007401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.023928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.034534][ T1612] device veth1_macvtap entered promiscuous mode [ 74.052412][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.076106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.104543][ T287] syz-executor: attempt to access beyond end of device [ 74.104543][ T287] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 74.241636][ T323] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 74.431573][ T636] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.439130][ T323] usb 1-1: Using ep0 maxpacket: 8 [ 74.448067][ T323] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 74.458902][ T37] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 74.466770][ T323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.477013][ T323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.487089][ T323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.497419][ T323] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.511062][ T323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.520208][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.632008][ T636] usb 6-1: Using ep0 maxpacket: 32 [ 74.638764][ T636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.649250][ T636] usb 6-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.663123][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 74.668396][ T636] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.675765][ T636] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 74.685817][ T636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.694293][ T37] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 74.702787][ T37] usb 2-1: config 0 has no interface number 0 [ 74.709285][ T636] usb 6-1: config 0 descriptor?? [ 74.715743][ T636] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 74.723958][ T37] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 74.733689][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.741931][ T37] usb 2-1: Product: syz [ 74.746204][ T37] usb 2-1: Manufacturer: syz [ 74.751066][ T37] usb 2-1: SerialNumber: syz [ 74.756688][ T37] usb 2-1: config 0 descriptor?? [ 74.762805][ T37] usb 2-1: bad CDC descriptors [ 75.913486][ T1667] loop4: detected capacity change from 0 to 131072 [ 75.926619][ T1667] F2FS-fs (loop4): Test dummy encryption mode enabled [ 75.941616][ T1667] F2FS-fs (loop4): invalid crc value [ 75.968025][ T1667] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.007433][ T1667] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 76.961062][ T636] usb 1-1: USB disconnect, device number 17 [ 77.117395][ T291] usb 2-1: USB disconnect, device number 20 [ 77.151477][ T37] usb 6-1: USB disconnect, device number 2 [ 77.161879][ T1694] bridge0: port 3(syz_tun) entered blocking state [ 77.171502][ T1694] bridge0: port 3(syz_tun) entered disabled state [ 77.198872][ T1694] device syz_tun entered promiscuous mode [ 77.212276][ T1694] bridge0: port 3(syz_tun) entered blocking state [ 77.218865][ T1694] bridge0: port 3(syz_tun) entered forwarding state [ 77.226723][ T1700] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 77.244014][ T1698] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.264754][ T1698] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.280700][ T1702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.528'. [ 77.285469][ T1705] loop1: detected capacity change from 0 to 2048 [ 77.297154][ T1703] netlink: 'syz.5.526': attribute type 16 has an invalid length. [ 77.310402][ T1703] netlink: 'syz.5.526': attribute type 17 has an invalid length. [ 77.330560][ T1703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.338552][ T1703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.351072][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.358218][ T1703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.367419][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.374627][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.382695][ T1705] loop1: p2 p3 < > p4 < p5 > [ 77.387475][ T1705] loop1: partition table partially beyond EOD, truncated [ 77.398765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 77.407252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.415795][ T1705] loop1: p3 start 4225 is beyond EOD, truncated [ 77.454284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 77.471526][ T636] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 77.473551][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 77.473567][ T28] audit: type=1400 audit(1780455784.351:741): avc: denied { map } for pid=1704 comm="syz.1.529" path="/105/bus" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.490225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.549016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.554840][ T28] audit: type=1400 audit(1780455784.391:742): avc: denied { execute } for pid=1704 comm="syz.1.529" path="/105/bus" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.569150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.593280][ T102] loop1: p2 p3 < > p4 < p5 > [ 77.601885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.603697][ T102] loop1: partition table partially beyond EOD, [ 77.610138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.620635][ T102] truncated [ 77.631965][ T102] loop1: p3 start 4225 is beyond EOD, truncated [ 77.652559][ T636] usb 4-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 77.671700][ T28] audit: type=1400 audit(1780455784.521:743): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 77.671987][ T636] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.712895][ T636] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 77.713825][ T430] udevd[430]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 77.731464][ T636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.733817][ T1183] udevd[1183]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 77.741394][ T431] udevd[431]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 77.771359][ T636] usb 4-1: Product: syz [ 77.775804][ T636] usb 4-1: Manufacturer: syz [ 77.780423][ T636] usb 4-1: SerialNumber: syz [ 77.786437][ T636] usb 4-1: config 0 descriptor?? [ 77.991485][ T37] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 78.047321][ T636] usb 4-1: USB disconnect, device number 12 [ 78.053919][ T323] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 78.241780][ T37] usb 2-1: device descriptor read/64, error -71 [ 78.271648][ T323] usb 1-1: Using ep0 maxpacket: 16 [ 78.277932][ T323] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 78.291647][ T323] usb 1-1: config 0 has no interface number 0 [ 78.303494][ T323] usb 1-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 78.321467][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.329574][ T323] usb 1-1: Product: syz [ 78.333915][ T323] usb 1-1: Manufacturer: syz [ 78.338599][ T323] usb 1-1: SerialNumber: syz [ 78.347776][ T323] usb 1-1: config 0 descriptor?? [ 78.355160][ T323] usb 1-1: bad CDC descriptors [ 78.454227][ T1695] loop4: detected capacity change from 0 to 131072 [ 78.464251][ T1695] F2FS-fs (loop4): invalid crc value [ 78.471771][ T1695] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.511483][ T37] usb 2-1: device descriptor read/64, error -71 [ 78.541546][ T1695] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 78.612504][ T28] audit: type=1400 audit(1780455785.491:744): avc: denied { create } for pid=1733 comm="syz.3.539" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.661473][ T28] audit: type=1400 audit(1780455785.491:745): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.692908][ T28] audit: type=1326 audit(1780455785.521:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.3.540" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe39ce59 code=0x7ffc0000 [ 78.692944][ T28] audit: type=1326 audit(1780455785.521:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.3.540" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe39ce59 code=0x7ffc0000 [ 78.743451][ T28] audit: type=1326 audit(1780455785.521:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.3.540" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe39ce59 code=0x7ffc0000 [ 78.768355][ T28] audit: type=1326 audit(1780455785.521:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.3.540" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fe39ce59 code=0x7ffc0000 [ 78.768389][ T28] audit: type=1326 audit(1780455785.521:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.3.540" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f38fe39ce59 code=0x7ffc0000 [ 78.818439][ T37] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 78.840773][ T1745] random: crng reseeded on system resumption [ 78.926008][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.936112][ T1747] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.961869][ T37] usb 2-1: device descriptor read/64, error -71 [ 78.962359][ T1747] loop3: detected capacity change from 0 to 1024 [ 78.982929][ T1747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.996179][ T1747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.010142][ T1747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.010608][ T1749] loop4: detected capacity change from 0 to 2048 [ 79.043969][ T1749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.060792][ T289] EXT4-fs (loop4): unmounting filesystem. [ 79.082848][ T1756] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 79.091313][ T1756] overlayfs: failed to look up (file2) for ino (-5) [ 79.231489][ T37] usb 2-1: device descriptor read/64, error -71 [ 79.361584][ T37] usb usb2-port1: attempt power cycle [ 79.771561][ T37] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 79.802667][ T37] usb 2-1: device descriptor read/8, error -71 [ 79.952618][ T37] usb 2-1: device descriptor read/8, error -71 [ 80.221680][ T37] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 80.252546][ T37] usb 2-1: device descriptor read/8, error -71 [ 80.402554][ T37] usb 2-1: device descriptor read/8, error -71 [ 80.521712][ T37] usb usb2-port1: unable to enumerate USB device [ 80.674212][ T636] usb 1-1: USB disconnect, device number 18 [ 80.915691][ T1775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.923383][ T1775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.939601][ T1775] netlink: 'syz.4.554': attribute type 16 has an invalid length. [ 80.947456][ T1775] netlink: 'syz.4.554': attribute type 17 has an invalid length. [ 80.957650][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.964931][ T1775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.973591][ T1775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.980648][ T1775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.988955][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.996034][ T1775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.081529][ T636] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 81.131510][ T37] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 81.261517][ T636] usb 1-1: Using ep0 maxpacket: 8 [ 81.267714][ T636] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.277704][ T636] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.287739][ T636] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 1032, setting to 1024 [ 81.298982][ T636] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 81.309113][ T636] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.317566][ T636] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.326696][ T636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.334761][ T636] usb 1-1: Product: syz [ 81.339051][ T636] usb 1-1: Manufacturer: syz [ 81.344858][ T636] usb 1-1: SerialNumber: syz [ 81.349879][ T37] usb 2-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 81.360815][ T37] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.370903][ T1768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.378919][ T636] usb 1-1: bad CDC descriptors [ 81.385508][ T37] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 81.394773][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.402822][ T37] usb 2-1: Product: syz [ 81.406989][ T37] usb 2-1: Manufacturer: syz [ 81.411622][ T37] usb 2-1: SerialNumber: syz [ 81.416777][ T37] usb 2-1: config 0 descriptor?? [ 81.589271][ T323] usb 1-1: USB disconnect, device number 19 [ 81.648427][ T37] usb 2-1: USB disconnect, device number 25 [ 82.049444][ T287] EXT4-fs (loop3): unmounting filesystem. [ 82.309584][ T1799] device batadv_slave_1 entered promiscuous mode [ 82.501469][ T6] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 82.661466][ T6] usb 6-1: device descriptor read/64, error -71 [ 82.681590][ T1805] bridge0: port 3(syz_tun) entered blocking state [ 82.698669][ T1805] bridge0: port 3(syz_tun) entered disabled state [ 82.719367][ T1805] device syz_tun entered promiscuous mode [ 82.738647][ T1805] bridge0: port 3(syz_tun) entered blocking state [ 82.745184][ T1805] bridge0: port 3(syz_tun) entered forwarding state [ 82.832745][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 82.832762][ T28] audit: type=1400 audit(1780455789.711:756): avc: denied { create } for pid=1809 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.901482][ T28] audit: type=1400 audit(1780455789.741:757): avc: denied { setopt } for pid=1809 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.931462][ T6] usb 6-1: device descriptor read/64, error -71 [ 82.949795][ T28] audit: type=1400 audit(1780455789.741:758): avc: denied { write } for pid=1809 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.990123][ T28] audit: type=1400 audit(1780455789.741:759): avc: denied { read } for pid=1809 comm="syz.4.569" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.094666][ T1803] loop1: detected capacity change from 0 to 131072 [ 83.110580][ T1803] F2FS-fs (loop1): FLUSH_MERGE not compatible with readonly mode [ 83.211516][ T6] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 83.371484][ T6] usb 6-1: device descriptor read/64, error -71 [ 83.481558][ T28] audit: type=1400 audit(1780455790.351:760): avc: denied { bind } for pid=1819 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.503359][ T28] audit: type=1400 audit(1780455790.351:761): avc: denied { listen } for pid=1819 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.523957][ T291] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 83.621028][ T1827] bridge0: port 3(syz_tun) entered disabled state [ 83.630785][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.638879][ T1827] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.651515][ T6] usb 6-1: device descriptor read/64, error -71 [ 83.680510][ T1827] netlink: 'syz.0.577': attribute type 16 has an invalid length. [ 83.691556][ T1829] loop4: detected capacity change from 0 to 512 [ 83.698325][ T1827] netlink: 'syz.0.577': attribute type 17 has an invalid length. [ 83.711136][ T1827] bridge0: port 3(syz_tun) entered blocking state [ 83.717659][ T1827] bridge0: port 3(syz_tun) entered forwarding state [ 83.725635][ T291] usb 2-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 83.736454][ T1829] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.742651][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.748150][ T291] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.761165][ T1801] loop3: detected capacity change from 0 to 262144 [ 83.765807][ T291] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 83.774773][ T1827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.781374][ T6] usb usb6-port1: attempt power cycle [ 83.790674][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.793025][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.799569][ T1827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.807990][ T291] usb 2-1: Product: syz [ 83.822439][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.829540][ T1827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.832581][ T291] usb 2-1: Manufacturer: syz [ 83.847225][ T1829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.857190][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 83.866007][ T1801] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.870317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.880905][ T1829] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.892231][ T291] usb 2-1: SerialNumber: syz [ 83.897661][ T291] usb 2-1: config 0 descriptor?? [ 83.904048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 83.916220][ T1801] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.930520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.970579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.995316][ T289] EXT4-fs (loop4): unmounting filesystem. [ 83.995851][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.021683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.036328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.186332][ T291] usb 2-1: USB disconnect, device number 26 [ 84.211537][ T6] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 84.253575][ T6] usb 6-1: device descriptor read/8, error -71 [ 84.407894][ T1846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 84.417900][ T6] usb 6-1: device descriptor read/8, error -71 [ 84.591531][ T309] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 84.691518][ T6] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 84.711577][ T323] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 84.722615][ T6] usb 6-1: device descriptor read/8, error -71 [ 84.760081][ T1855] bridge0: port 3(syz_tun) entered disabled state [ 84.768395][ T1855] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.776670][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.784018][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.799114][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.808071][ T1855] netlink: 'syz.1.586': attribute type 16 has an invalid length. [ 84.808941][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.816807][ T1855] netlink: 'syz.1.586': attribute type 17 has an invalid length. [ 84.829978][ T309] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.837798][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.846880][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.854475][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.862405][ T309] usb 4-1: config 0 descriptor?? [ 84.874911][ T6] usb 6-1: device descriptor read/8, error -71 [ 84.876731][ T1855] bridge0: port 3(syz_tun) entered blocking state [ 84.887579][ T1855] bridge0: port 3(syz_tun) entered forwarding state [ 84.895073][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.902551][ T323] usb 1-1: Using ep0 maxpacket: 8 [ 84.907798][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.915954][ T323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.922958][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.926317][ T323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.933387][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.942473][ T323] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 84.950754][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.960239][ T323] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.967191][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.971821][ T1855] device batadv_slave_1 left promiscuous mode [ 84.976787][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.000654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.002630][ T6] usb usb6-port1: unable to enumerate USB device [ 85.022267][ T1852] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 85.032443][ T323] hub 1-1:1.0: bad descriptor, ignoring hub [ 85.038467][ T323] hub: probe of 1-1:1.0 failed with error -5 [ 85.045450][ T323] cdc_wdm 1-1:1.0: skipping garbage [ 85.051166][ T323] cdc_wdm 1-1:1.0: skipping garbage [ 85.056563][ T323] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 85.093755][ T1859] device syzkaller0 entered promiscuous mode [ 85.146883][ T1861] tipc: Started in network mode [ 85.152294][ T1861] tipc: Node identity a63e578adbd1, cluster identity 4711 [ 85.159770][ T1861] tipc: Enabled bearer , priority 0 [ 85.178088][ T1861] device syzkaller0 entered promiscuous mode [ 85.184821][ T1861] tipc: Resetting bearer [ 85.206172][ T1860] tipc: Resetting bearer [ 85.220160][ T1860] tipc: Disabling bearer [ 85.276885][ T309] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 85.293603][ T309] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 85.413008][ T28] audit: type=1400 audit(1780455792.291:762): avc: denied { connect } for pid=1877 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.529349][ T1844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.551499][ T1844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.577532][ T28] audit: type=1400 audit(1780455792.451:763): avc: denied { map } for pid=1882 comm="syz.1.599" path="socket:[25033]" dev="sockfs" ino=25033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.600953][ T28] audit: type=1400 audit(1780455792.451:764): avc: denied { read } for pid=1882 comm="syz.1.599" path="socket:[25033]" dev="sockfs" ino=25033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.602385][ T1883] bridge0: port 3(syz_tun) entered disabled state [ 85.631891][ T1883] device syz_tun left promiscuous mode [ 85.637437][ T1883] bridge0: port 3(syz_tun) entered disabled state [ 85.661701][ T335] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.681575][ T323] usb 1-1: USB disconnect, device number 20 [ 85.842641][ T335] usb 6-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 85.853056][ T335] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.855231][ T37] usb 4-1: USB disconnect, device number 13 [ 85.863884][ T335] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 85.877841][ T335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.886313][ T335] usb 6-1: Product: syz [ 85.890527][ T335] usb 6-1: Manufacturer: syz [ 85.895188][ T335] usb 6-1: SerialNumber: syz [ 85.900320][ T335] usb 6-1: config 0 descriptor?? [ 85.981543][ T309] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 86.031527][ T323] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 86.139427][ T335] usb 6-1: USB disconnect, device number 7 [ 86.151496][ T309] usb 2-1: device descriptor read/64, error -71 [ 86.212767][ T323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.223021][ T323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.232077][ T323] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 86.242692][ T323] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 86.252011][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.261101][ T1852] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 86.269059][ T323] hub 1-1:1.0: bad descriptor, ignoring hub [ 86.275239][ T323] hub: probe of 1-1:1.0 failed with error -5 [ 86.281355][ T323] cdc_wdm 1-1:1.0: skipping garbage [ 86.286630][ T323] cdc_wdm 1-1:1.0: skipping garbage [ 86.295151][ T323] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 86.319612][ T1892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.602'. [ 86.421659][ T309] usb 2-1: device descriptor read/64, error -71 [ 86.494913][ T1907] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 86.611621][ T335] usb 1-1: USB disconnect, device number 21 [ 86.691651][ T309] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 86.841521][ T309] usb 2-1: device descriptor read/64, error -71 [ 87.028281][ T28] audit: type=1400 audit(1780455793.901:765): avc: denied { create } for pid=1926 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.092437][ T1935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 87.104982][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.112702][ T309] usb 2-1: device descriptor read/64, error -71 [ 87.231721][ T309] usb usb2-port1: attempt power cycle [ 87.249550][ T1937] xt_hashlimit: size too large, truncated to 1048576 [ 87.385058][ T1940] device syzkaller0 entered promiscuous mode [ 87.474111][ T1952] tipc: Started in network mode [ 87.479097][ T1952] tipc: Node identity cef391d12a8e, cluster identity 4711 [ 87.486718][ T1952] tipc: Enabled bearer , priority 0 [ 87.502505][ T1952] device syzkaller0 entered promiscuous mode [ 87.510698][ T1952] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 87.525629][ T1952] tipc: Resetting bearer [ 87.534032][ T1951] tipc: Resetting bearer [ 87.542647][ T1951] tipc: Disabling bearer [ 87.641600][ T309] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 87.672710][ T309] usb 2-1: device descriptor read/8, error -71 [ 87.811489][ T37] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.822771][ T309] usb 2-1: device descriptor read/8, error -71 [ 87.970060][ T1963] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 87.991502][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 87.998071][ T37] usb 6-1: config 0 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.011239][ T37] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.017932][ T37] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 88.027109][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.035766][ T37] usb 6-1: config 0 descriptor?? [ 88.041571][ T37] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 88.054783][ T1966] bridge0: port 3(syz_tun) entered disabled state [ 88.063461][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.071353][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.087976][ T1966] netlink: 'syz.0.636': attribute type 16 has an invalid length. [ 88.095941][ T1966] netlink: 'syz.0.636': attribute type 17 has an invalid length. [ 88.105412][ T1966] bridge0: port 3(syz_tun) entered blocking state [ 88.111857][ T1966] bridge0: port 3(syz_tun) entered forwarding state [ 88.118652][ T309] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 88.122275][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.133820][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.142566][ T1966] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.149739][ T1966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.152591][ T309] usb 2-1: device descriptor read/8, error -71 [ 88.158000][ T1966] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.170238][ T1966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.182909][ T1966] IPv6: ADDRCONF(NETDEV_CHANGE): ip6erspan0: link becomes ready [ 88.312724][ T309] usb 2-1: device descriptor read/8, error -71 [ 88.416593][ T1973] device syzkaller0 entered promiscuous mode [ 88.431614][ T309] usb usb2-port1: unable to enumerate USB device [ 88.505565][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 88.516177][ T1985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.110077][ T1994] device syzkaller0 entered promiscuous mode [ 89.171698][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 89.171715][ T28] audit: type=1400 audit(1780455796.051:768): avc: denied { setopt } for pid=1995 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.191945][ T1996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 89.283120][ T1998] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1762628057 (225616391296 ns) > initial count (22454538752 ns). Using initial count to start timer. [ 89.302213][ T1998] ------------[ cut here ]------------ [ 89.308078][ T1998] WARNING: CPU: 0 PID: 1998 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1aa6/0x1fc0 [ 89.318529][ T1998] Modules linked in: [ 89.322584][ T1998] CPU: 0 PID: 1998 Comm: syz.0.650 Not tainted syzkaller #0 [ 89.330011][ T1998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.340149][ T1998] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1aa6/0x1fc0 [ 89.346771][ T1998] Code: e8 2f dd a6 00 e9 8a f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 e8 ff ff 4c 89 ff e8 b4 dc a6 00 e9 c8 e8 ff ff e8 0a 38 61 00 <0f> 0b e9 93 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ef ee [ 89.366452][ T1998] RSP: 0018:ffffc90000a07bf8 EFLAGS: 00010283 [ 89.372579][ T1998] RAX: ffffffff81104376 RBX: ffff88811b5d0000 RCX: 0000000000080000 [ 89.380638][ T1998] RDX: ffffc900012b9000 RSI: 000000000000003f RDI: 0000000000000040 [ 89.388705][ T1998] RBP: ffffc90000a07cb0 R08: ffff8881151cd107 R09: 1ffff11022a39a20 [ 89.396736][ T1998] R10: dffffc0000000000 R11: ffffed1022a39a21 R12: ffff8881252e4000 [ 89.404871][ T1998] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811b5d0078 [ 89.412988][ T1998] FS: 00007f7537fab6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.422023][ T1998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.429049][ T1998] CR2: 000000110c28fe17 CR3: 000000011ef4d000 CR4: 00000000003526b0 [ 89.437084][ T1998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.445100][ T1998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.453223][ T1998] Call Trace: [ 89.456541][ T1998] [ 89.459582][ T1998] ? mutex_lock_killable+0x93/0x1b0 [ 89.464839][ T1998] ? __cfi_mutex_lock_killable+0x10/0x10 [ 89.470767][ T1998] kvm_vcpu_ioctl+0x8f2/0xc00 [ 89.475558][ T1998] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 89.480808][ T1998] ? selinux_file_ioctl+0x3a0/0x4d0 [ 89.486160][ T1998] ? __cfi_do_futex+0x10/0x10 [ 89.490859][ T1998] ? kvm_uevent_notify_change+0x30b/0x3b0 [ 89.496744][ T1998] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 89.502618][ T1998] ? __fget_files+0x2d5/0x330 [ 89.507328][ T1998] ? security_file_ioctl+0x95/0xc0 [ 89.512472][ T1998] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 89.518136][ T1998] __se_sys_ioctl+0x12f/0x1b0 [ 89.522948][ T1998] __x64_sys_ioctl+0x7b/0x90 [ 89.527583][ T1998] x64_sys_call+0x58b/0x9a0 [ 89.532118][ T1998] do_syscall_64+0x4c/0xa0 [ 89.536550][ T1998] ? clear_bhb_loop+0x30/0x80 [ 89.541227][ T1998] ? clear_bhb_loop+0x30/0x80 [ 89.545946][ T1998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.551886][ T1998] RIP: 0033:0x7f753719ce59 [ 89.556315][ T1998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.575978][ T1998] RSP: 002b:00007f7537fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.584456][ T1998] RAX: ffffffffffffffda RBX: 00007f7537415fa0 RCX: 00007f753719ce59 [ 89.592466][ T1998] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 89.600451][ T1998] RBP: 00007f7537232d6f R08: 0000000000000000 R09: 0000000000000000 [ 89.608556][ T1998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.616585][ T1998] R13: 00007f7537416038 R14: 00007f7537415fa0 R15: 00007ffc3cbb2e88 [ 89.624598][ T1998] [ 89.627646][ T1998] ---[ end trace 0000000000000000 ]--- [ 89.753380][ T2014] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.855003][ T2023] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.863700][ T2023] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.882215][ T2023] netlink: 'syz.1.658': attribute type 16 has an invalid length. [ 89.890520][ T2023] netlink: 'syz.1.658': attribute type 17 has an invalid length. [ 89.898830][ T2023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.908700][ T2023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.931754][ T2023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.939428][ T2023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.952738][ T2023] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.959838][ T2023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.968122][ T2023] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.975221][ T2023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.552470][ T636] usb 6-1: USB disconnect, device number 8 [ 90.881537][ T309] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 91.082597][ T309] usb 4-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 91.094102][ T309] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.104974][ T309] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 91.114328][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.122507][ T309] usb 4-1: Product: syz [ 91.134360][ T2108] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.141735][ T309] usb 4-1: Manufacturer: syz [ 91.146358][ T309] usb 4-1: SerialNumber: syz [ 91.152200][ T2108] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.165533][ T309] usb 4-1: config 0 descriptor?? [ 91.191090][ T2108] netlink: 'syz.5.684': attribute type 16 has an invalid length. [ 91.199009][ T2108] netlink: 'syz.5.684': attribute type 17 has an invalid length. [ 91.211346][ T2108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.218772][ T2108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.240879][ T2108] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.247990][ T2108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.263490][ T2108] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.270600][ T2108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.391295][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 91.407439][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.418480][ T309] usb 4-1: USB disconnect, device number 14 [ 91.436215][ T2119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.618535][ T28] audit: type=1400 audit(1780455798.491:769): avc: denied { bind } for pid=2121 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.734335][ T2124] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.742398][ T2124] lo: Caught tx_queue_len zero misconfig [ 91.898305][ T2129] kvm: vcpu 6: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer. [ 91.933459][ T2131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.025710][ T2136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 92.771960][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.779687][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.822665][ T2169] netlink: 'syz.1.704': attribute type 16 has an invalid length. [ 92.831508][ T2169] netlink: 'syz.1.704': attribute type 17 has an invalid length. [ 92.839809][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.848361][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.860526][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.869320][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.888446][ T2169] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.895610][ T2169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.903787][ T2169] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.910842][ T2169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.983546][ T2182] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 93.151508][ T323] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 93.311580][ T309] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 93.351538][ T323] usb 5-1: Using ep0 maxpacket: 16 [ 93.361026][ T323] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 93.369697][ T323] usb 5-1: config 0 has no interface number 0 [ 93.380782][ T323] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 93.390023][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.398217][ T323] usb 5-1: Product: syz [ 93.402681][ T323] usb 5-1: Manufacturer: syz [ 93.407331][ T323] usb 5-1: SerialNumber: syz [ 93.416612][ T323] usb 5-1: config 0 descriptor?? [ 93.424157][ T323] usb 5-1: bad CDC descriptors [ 93.492859][ T309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.503349][ T309] usb 4-1: config 0 has no interfaces? [ 93.510298][ T309] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.519500][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.529045][ T309] usb 4-1: Product: syz [ 93.533465][ T309] usb 4-1: Manufacturer: syz [ 93.538061][ T309] usb 4-1: SerialNumber: syz [ 93.546232][ T309] usb 4-1: config 0 descriptor?? [ 93.757594][ T636] usb 4-1: USB disconnect, device number 15 [ 93.861505][ T323] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 93.907912][ T2215] 9pnet_virtio: no channels available for device syz [ 93.946652][ T2221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.728'. [ 94.041516][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 94.047869][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.059108][ T323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.072458][ T323] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.082266][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.091143][ T323] usb 2-1: config 0 descriptor?? [ 94.549401][ T323] usbhid 2-1:0.0: can't add hid device: -71 [ 94.558741][ T323] usbhid: probe of 2-1:0.0 failed with error -71 [ 94.582144][ T323] usb 2-1: USB disconnect, device number 31 [ 94.612924][ T2248] netlink: 56 bytes leftover after parsing attributes in process `syz.0.740'. [ 94.682794][ T28] audit: type=1400 audit(1780455801.561:770): avc: denied { mount } for pid=2251 comm="syz.1.742" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.705578][ T28] audit: type=1400 audit(1780455801.591:771): avc: denied { mounton } for pid=2251 comm="syz.1.742" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 94.731799][ T28] audit: type=1400 audit(1780455801.611:772): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.752218][ T28] audit: type=1400 audit(1780455801.611:773): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 95.029704][ T2257] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.037217][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.046477][ T2257] device bridge_slave_0 entered promiscuous mode [ 95.055690][ T2257] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.063239][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.073347][ T2257] device bridge_slave_1 entered promiscuous mode [ 95.151506][ T323] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 95.181076][ T2257] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.188459][ T2257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.195864][ T2257] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.203011][ T2257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.223396][ T2267] netlink: 52 bytes leftover after parsing attributes in process `syz.0.748'. [ 95.237589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.245379][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.253095][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.264437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.274244][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.281321][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.289116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.297777][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.304838][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.323646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.331845][ T323] usb 6-1: no configurations [ 95.341727][ T323] usb 6-1: can't read configurations, error -22 [ 95.343222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.358534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.372741][ T2257] device veth0_vlan entered promiscuous mode [ 95.382306][ T2275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'. [ 95.382580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.399384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.407324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.418151][ T2257] device veth1_macvtap entered promiscuous mode [ 95.425877][ T10] device bridge_slave_1 left promiscuous mode [ 95.433182][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.442120][ T10] device bridge_slave_0 left promiscuous mode [ 95.448395][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.460394][ T10] device veth1_macvtap left promiscuous mode [ 95.466654][ T10] device veth0_vlan left promiscuous mode [ 95.473262][ T2279] Illegal XDP return value 4294967274 on prog (id 13) dev N/A, expect packet loss! [ 95.501541][ T323] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 95.563334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.574461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.584396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.600216][ T28] audit: type=1400 audit(1780455802.471:774): avc: denied { mount } for pid=2257 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.682079][ T323] usb 6-1: no configurations [ 95.686818][ T323] usb 6-1: can't read configurations, error -22 [ 95.693573][ T323] usb usb6-port1: attempt power cycle [ 95.803457][ T335] usb 5-1: USB disconnect, device number 13 [ 95.908650][ T2293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 96.101514][ T323] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 96.133601][ T323] usb 6-1: no configurations [ 96.138281][ T323] usb 6-1: can't read configurations, error -22 [ 96.291483][ T323] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 96.332279][ T323] usb 6-1: no configurations [ 96.338186][ T323] usb 6-1: can't read configurations, error -22 [ 96.345081][ T323] usb usb6-port1: unable to enumerate USB device [ 96.911556][ T28] audit: type=1400 audit(1780455803.781:775): avc: denied { write } for pid=2317 comm="syz.6.768" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 97.004635][ T28] audit: type=1400 audit(1780455803.781:776): avc: denied { open } for pid=2317 comm="syz.6.768" path="/3/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 97.091577][ T323] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 97.291475][ T323] usb 1-1: Using ep0 maxpacket: 8 [ 97.298711][ T323] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.307883][ T323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.374825][ T323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.384748][ T323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.394793][ T323] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.407815][ T323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.417025][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.738907][ T28] audit: type=1400 audit(1780455804.611:777): avc: denied { shutdown } for pid=2315 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.889642][ T28] audit: type=1400 audit(1780455804.641:778): avc: denied { read } for pid=2315 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.675716][ T2351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.011500][ T323] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 99.191842][ T323] usb 4-1: no configurations [ 99.196475][ T323] usb 4-1: can't read configurations, error -22 [ 99.311127][ T2378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.792'. [ 99.351480][ T323] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 99.425526][ T2389] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.433758][ T2389] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.458095][ T2389] netlink: 'syz.5.796': attribute type 16 has an invalid length. [ 99.470423][ T2389] netlink: 'syz.5.796': attribute type 17 has an invalid length. [ 99.480672][ T2389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.487998][ T2389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.496603][ T2389] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.503676][ T2389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.512261][ T2389] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.519406][ T2389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.532412][ T2389] IPv6: ADDRCONF(NETDEV_CHANGE): ip6erspan0: link becomes ready [ 99.543155][ T323] usb 4-1: no configurations [ 99.547870][ T323] usb 4-1: can't read configurations, error -22 [ 99.554397][ T323] usb usb4-port1: attempt power cycle [ 99.799958][ T297] usb 1-1: USB disconnect, device number 22 [ 99.892787][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.961586][ T323] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 99.992250][ T323] usb 4-1: no configurations [ 99.996916][ T323] usb 4-1: can't read configurations, error -22 [ 100.151478][ T323] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 100.202190][ T323] usb 4-1: no configurations [ 100.208248][ T323] usb 4-1: can't read configurations, error -22 [ 100.231277][ T323] usb usb4-port1: unable to enumerate USB device [ 101.262170][ T28] audit: type=1400 audit(1780455808.141:779): avc: denied { write } for pid=2418 comm="syz.4.807" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.292823][ T2419] binder: 2418:2419 ioctl c0306201 200000000440 returned -14 [ 101.901556][ T2398] Bluetooth: hci0: command 0x1003 tx timeout [ 101.907807][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.211489][ T400] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 102.401475][ T400] usb 4-1: Using ep0 maxpacket: 16 [ 102.407810][ T400] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 102.439452][ T400] usb 4-1: config 0 has no interface number 0 [ 102.450579][ T400] usb 4-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 102.469878][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.484160][ T400] usb 4-1: Product: syz [ 102.488361][ T400] usb 4-1: Manufacturer: syz [ 102.503089][ T400] usb 4-1: SerialNumber: syz [ 102.511895][ T400] usb 4-1: config 0 descriptor?? [ 102.527976][ T400] usb 4-1: bad CDC descriptors [ 102.729569][ T2413] usb 4-1: USB disconnect, device number 20 [ 103.001491][ T309] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 103.200594][ T309] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 103.211806][ T309] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.222710][ T309] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 103.231884][ T2469] netlink: 28 bytes leftover after parsing attributes in process `syz.5.824'. [ 103.232204][ T28] audit: type=1400 audit(1780455810.111:780): avc: denied { bind } for pid=2468 comm="syz.5.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.247923][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.273795][ T309] usb 1-1: Product: syz [ 103.281757][ T309] usb 1-1: Manufacturer: syz [ 103.286441][ T309] usb 1-1: SerialNumber: syz [ 103.293792][ T309] usb 1-1: config 0 descriptor?? [ 103.337824][ T2473] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 103.346369][ T2413] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 103.354355][ T2473] pit: kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 103.474824][ T28] audit: type=1400 audit(1780455810.351:781): avc: denied { write } for pid=2476 comm="syz.5.827" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.521885][ T28] audit: type=1400 audit(1780455810.401:782): avc: denied { map } for pid=2478 comm="syz.6.828" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 103.527258][ T309] usb 1-1: USB disconnect, device number 23 [ 103.545857][ T2413] usb 5-1: no configurations [ 103.558359][ T2413] usb 5-1: can't read configurations, error -22 [ 103.566523][ T323] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 103.689203][ T28] audit: type=1400 audit(1780455810.561:783): avc: denied { watch } for pid=2483 comm="syz.6.830" path="/13/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.742416][ T2413] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 103.771500][ T323] usb 4-1: Using ep0 maxpacket: 32 [ 103.777847][ T323] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.787871][ T323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.794537][ T323] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 103.803638][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.814378][ T323] usb 4-1: config 0 descriptor?? [ 103.820130][ T323] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 103.921965][ T2413] usb 5-1: no configurations [ 103.926659][ T2413] usb 5-1: can't read configurations, error -22 [ 103.933068][ T2413] usb usb5-port1: attempt power cycle [ 104.341475][ T2413] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 104.372373][ T2413] usb 5-1: no configurations [ 104.377068][ T2413] usb 5-1: can't read configurations, error -22 [ 104.541710][ T2413] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 104.572411][ T2413] usb 5-1: no configurations [ 104.577108][ T2413] usb 5-1: can't read configurations, error -22 [ 104.583728][ T2413] usb usb5-port1: unable to enumerate USB device [ 105.234717][ T2506] bridge0: port 3(syz_tun) entered disabled state [ 105.321392][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.366166][ T2506] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.281781][ T28] audit: type=1400 audit(1780455812.521:784): avc: denied { write } for pid=2498 comm="syz.6.835" path="socket:[30452]" dev="sockfs" ino=30452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.430800][ T335] usb 4-1: USB disconnect, device number 21 [ 106.431142][ T2501] syz.6.835 (2501) used greatest stack depth: 19896 bytes left [ 106.438908][ T2507] netlink: 'syz.0.837': attribute type 16 has an invalid length. [ 106.527231][ T2507] netlink: 'syz.0.837': attribute type 17 has an invalid length. [ 106.541072][ T2507] bridge0: port 3(syz_tun) entered blocking state [ 106.547619][ T2507] bridge0: port 3(syz_tun) entered forwarding state [ 106.555435][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.562937][ T2507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.571171][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.578344][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.586869][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.594129][ T2507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.609165][ T2524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 106.804895][ T309] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 106.816529][ T2539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 106.992676][ T309] usb 7-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 107.003067][ T309] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.013677][ T309] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 107.023277][ T309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.131579][ T28] audit: type=1400 audit(1780455813.961:785): avc: denied { create } for pid=2543 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.152263][ T28] audit: type=1400 audit(1780455813.961:786): avc: denied { bind } for pid=2543 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.391451][ T2413] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 107.515390][ T2553] 9pnet_virtio: no channels available for device syz [ 107.581684][ T2413] usb 4-1: Using ep0 maxpacket: 32 [ 107.589302][ T2413] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.601306][ T2413] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.611678][ T2413] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.618377][ T2413] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 107.627984][ T2413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.658799][ T2413] usb 4-1: config 0 descriptor?? [ 107.789231][ T309] usb 7-1: Product: syz [ 107.793534][ T309] usb 7-1: Manufacturer: syz [ 107.798155][ T309] usb 7-1: SerialNumber: syz [ 107.822643][ T309] usb 7-1: config 0 descriptor?? [ 108.048783][ T309] usb 7-1: USB disconnect, device number 2 [ 108.078432][ T2413] usbhid 4-1:0.0: can't add hid device: -71 [ 108.088001][ T2413] usbhid: probe of 4-1:0.0 failed with error -71 [ 108.095631][ T2413] usb 4-1: USB disconnect, device number 22 [ 108.285504][ T2568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 108.296495][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.370829][ T2571] netlink: 'syz.0.860': attribute type 16 has an invalid length. [ 108.379097][ T2571] netlink: 'syz.0.860': attribute type 17 has an invalid length. [ 108.388852][ T2571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.568528][ T28] audit: type=1400 audit(1780455815.441:787): avc: denied { mounton } for pid=2579 comm="syz.6.864" path="/proc/50/task" dev="proc" ino=29302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 108.626614][ T28] audit: type=1400 audit(1780455815.501:788): avc: denied { map } for pid=2584 comm="syz.3.867" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.937015][ T2599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.870'. [ 108.955588][ T2599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.170813][ T2605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 109.181111][ T2605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 109.341623][ T2413] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 109.461513][ T400] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 109.522676][ T2413] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 109.533547][ T2413] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.546780][ T2413] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.555877][ T2413] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.564680][ T2413] usb 7-1: config 0 descriptor?? [ 109.570553][ T2413] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 109.601577][ T349] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 109.612810][ T2615] netlink: 'syz.4.877': attribute type 12 has an invalid length. [ 109.642667][ T400] usb 1-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 109.653483][ T400] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.664128][ T400] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 109.673254][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.681375][ T400] usb 1-1: Product: syz [ 109.685882][ T400] usb 1-1: Manufacturer: syz [ 109.690500][ T400] usb 1-1: SerialNumber: syz [ 109.699617][ T400] usb 1-1: config 0 descriptor?? [ 109.791557][ T349] usb 6-1: Using ep0 maxpacket: 32 [ 109.798481][ T349] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.810242][ T349] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.820408][ T349] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.827233][ T349] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 109.836634][ T349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.845883][ T349] usb 6-1: config 0 descriptor?? [ 109.851755][ T2628] netlink: 'syz.4.883': attribute type 16 has an invalid length. [ 109.859720][ T2628] netlink: 'syz.4.883': attribute type 17 has an invalid length. [ 109.869395][ T2628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.920527][ T400] usb 1-1: USB disconnect, device number 24 [ 110.254493][ T349] usbhid 6-1:0.0: can't add hid device: -71 [ 110.260883][ T349] usbhid: probe of 6-1:0.0 failed with error -71 [ 110.268142][ T349] usb 6-1: USB disconnect, device number 14 [ 111.221507][ T349] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 111.402660][ T349] usb 6-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 111.413914][ T349] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.424465][ T349] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 111.433666][ T349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.441779][ T349] usb 6-1: Product: syz [ 111.445986][ T349] usb 6-1: Manufacturer: syz [ 111.450666][ T349] usb 6-1: SerialNumber: syz [ 111.459608][ T349] usb 6-1: config 0 descriptor?? [ 111.469471][ T28] audit: type=1400 audit(1780455818.351:789): avc: denied { bind } for pid=2661 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.504082][ T28] audit: type=1400 audit(1780455818.381:790): avc: denied { listen } for pid=2661 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.524485][ T28] audit: type=1400 audit(1780455818.401:791): avc: denied { accept } for pid=2661 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.603473][ T2667] netlink: 'syz.4.898': attribute type 16 has an invalid length. [ 111.611332][ T2667] netlink: 'syz.4.898': attribute type 17 has an invalid length. [ 111.621134][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.661520][ T2398] Bluetooth: hci0: command 0x1003 tx timeout [ 111.667680][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.708671][ T349] usb 6-1: USB disconnect, device number 15 [ 111.994555][ T323] usb 7-1: USB disconnect, device number 3 [ 112.011205][ T2688] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 112.019659][ T2688] overlayfs: failed to look up (file2) for ino (-5) [ 112.051508][ T335] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 112.239573][ T335] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 112.252819][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.261783][ T335] usb 4-1: Product: syz [ 112.266110][ T335] usb 4-1: Manufacturer: syz [ 112.270770][ T335] usb 4-1: SerialNumber: syz [ 113.041526][ T323] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 113.551472][ T323] usb 5-1: Using ep0 maxpacket: 8 [ 113.557844][ T323] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 113.568346][ T323] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.578417][ T323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.588643][ T323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.611701][ T323] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.637539][ T335] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 113.655553][ T323] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.665885][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.921505][ T335] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 113.931582][ T309] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 114.101468][ T335] usb 7-1: Using ep0 maxpacket: 16 [ 114.107848][ T335] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 114.116177][ T335] usb 7-1: config 0 has no interface number 0 [ 114.123394][ T309] usb 6-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 114.133906][ T309] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.143343][ T335] usb 7-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 114.152517][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.160611][ T335] usb 7-1: Product: syz [ 114.164835][ T335] usb 7-1: Manufacturer: syz [ 114.169533][ T335] usb 7-1: SerialNumber: syz [ 114.174859][ T309] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 114.184206][ T335] usb 7-1: config 0 descriptor?? [ 114.189294][ T309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.197333][ T309] usb 6-1: Product: syz [ 114.201897][ T335] usb 7-1: bad CDC descriptors [ 114.207327][ T309] usb 6-1: Manufacturer: syz [ 114.212008][ T309] usb 6-1: SerialNumber: syz [ 114.217060][ T309] usb 6-1: config 0 descriptor?? [ 114.403552][ T335] usb 7-1: USB disconnect, device number 4 [ 114.438330][ T309] usb 6-1: USB disconnect, device number 16 [ 114.584015][ T28] audit: type=1400 audit(1780455821.461:792): avc: denied { read write } for pid=2721 comm="syz.4.920" name="lp0" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.607612][ T28] audit: type=1400 audit(1780455821.461:793): avc: denied { open } for pid=2721 comm="syz.4.920" path="/dev/usb/lp0" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.632111][ T28] audit: type=1400 audit(1780455821.481:794): avc: denied { ioctl } for pid=2721 comm="syz.4.920" path="/dev/usb/lp0" dev="devtmpfs" ino=842 ioctlcmd=0x5b17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.942176][ T400] usb 4-1: USB disconnect, device number 23 [ 115.271535][ T309] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 115.291478][ T323] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 115.461492][ T309] usb 6-1: Using ep0 maxpacket: 32 [ 115.467984][ T309] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.472613][ T323] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.476441][ T309] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.485401][ T323] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.493883][ T309] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.504137][ T323] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.513015][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.522253][ T400] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 115.532091][ T309] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.539688][ T323] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.549265][ T309] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.560576][ T323] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.573574][ T309] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.592644][ T323] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.593955][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.602995][ T323] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.612064][ T309] usb 6-1: config 0 descriptor?? [ 115.623888][ T323] usb 7-1: Product: syz [ 115.628072][ T323] usb 7-1: Manufacturer: syz [ 115.634424][ T323] cdc_wdm 7-1:1.0: skipping garbage [ 115.639657][ T323] cdc_wdm 7-1:1.0: skipping garbage [ 115.646477][ T323] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 115.798127][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.805489][ T2731] usblp0: removed [ 115.809377][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.813602][ T6] usb 5-1: USB disconnect, device number 18 [ 115.822776][ T400] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 115.830763][ T309] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.837876][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.090025][ T2761] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.159374][ T400] usb 4-1: config 0 descriptor?? [ 116.227755][ T323] usb 6-1: USB disconnect, device number 17 [ 116.227787][ C1] usblp0: nonzero read bulk status received: -71 [ 116.240065][ T2738] usblp0: error -71 reading from printer [ 116.247549][ T2737] usblp0: removed [ 116.251743][ T335] usb 7-1: USB disconnect, device number 5 [ 116.631146][ T400] hid-generic 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 116.639125][ T400] hid-generic 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 116.647864][ T400] hid-generic 0003:0D8C:0022.0008: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 116.671473][ T335] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 116.851505][ T335] usb 7-1: Using ep0 maxpacket: 32 [ 116.859495][ T335] usb 7-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.880756][ T335] usb 7-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.900943][ T335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.912149][ T335] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 116.921303][ T335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.929856][ T309] usb 4-1: USB disconnect, device number 24 [ 116.939727][ T335] usb 7-1: config 0 descriptor?? [ 117.356005][ T335] usbhid 7-1:0.0: can't add hid device: -71 [ 117.362042][ T335] usbhid: probe of 7-1:0.0 failed with error -71 [ 117.369252][ T335] usb 7-1: USB disconnect, device number 6 [ 117.619528][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.627275][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.640373][ T2794] netlink: 'syz.3.946': attribute type 16 has an invalid length. [ 117.648278][ T2794] netlink: 'syz.3.946': attribute type 17 has an invalid length. [ 117.659977][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.667316][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.676777][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.683917][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.692151][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.699179][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.711838][ T2794] device veth0_vlan left promiscuous mode [ 117.717783][ T2794] device veth0_vlan entered promiscuous mode [ 117.725965][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 117.735795][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.746777][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 117.755143][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.763375][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.772055][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.780497][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.788989][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.799418][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.808424][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.816342][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.988896][ T2804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 117.998315][ T2804] netlink: 'syz.4.949': attribute type 16 has an invalid length. [ 118.006130][ T2804] netlink: 'syz.4.949': attribute type 17 has an invalid length. [ 118.016334][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.062330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.237301][ T2815] loop5: detected capacity change from 0 to 8192 [ 118.262580][ T28] audit: type=1400 audit(1780455825.141:795): avc: denied { remount } for pid=2814 comm="syz.5.955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.291281][ T28] audit: type=1400 audit(1780455825.161:796): avc: denied { unmount } for pid=1612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.411554][ T400] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 118.501549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.602923][ T400] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 118.610638][ T400] usb 7-1: can't read configurations, error -61 [ 118.741467][ T2413] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 118.761459][ T400] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 118.910556][ T28] audit: type=1400 audit(1780455825.781:797): avc: denied { write } for pid=2828 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.930210][ T2413] usb 4-1: Using ep0 maxpacket: 32 [ 118.936592][ T2413] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.947969][ T2413] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.958167][ T2413] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.964887][ T2413] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.03 [ 118.974567][ T2413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.985985][ T400] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 118.997319][ T2413] usb 4-1: config 0 descriptor?? [ 119.002381][ T400] usb 7-1: can't read configurations, error -61 [ 119.008849][ T400] usb usb7-port1: attempt power cycle [ 119.451498][ T400] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 119.483260][ T400] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 119.490947][ T400] usb 7-1: can't read configurations, error -61 [ 119.575661][ T2413] usbhid 4-1:0.0: can't add hid device: -71 [ 119.582110][ T2413] usbhid: probe of 4-1:0.0 failed with error -71 [ 119.590027][ T2413] usb 4-1: USB disconnect, device number 25 [ 119.641487][ T400] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 119.673434][ T400] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 119.681063][ T400] usb 7-1: can't read configurations, error -61 [ 119.687596][ T400] usb usb7-port1: unable to enumerate USB device [ 119.701480][ T349] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 119.908899][ T349] usb 6-1: Using ep0 maxpacket: 16 [ 119.931370][ T349] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 119.939735][ T349] usb 6-1: config 0 has no interface number 0 [ 119.966047][ T349] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 119.976557][ T349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.985226][ T349] usb 6-1: Product: syz [ 119.989899][ T349] usb 6-1: Manufacturer: syz [ 119.995343][ T349] usb 6-1: SerialNumber: syz [ 120.107672][ T349] usb 6-1: config 0 descriptor?? [ 120.124524][ T349] usb 6-1: bad CDC descriptors [ 120.172508][ T2849] loop4: detected capacity change from 0 to 128 [ 120.327919][ T349] usb 6-1: USB disconnect, device number 18 [ 120.403102][ T2849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.479227][ T2849] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.085166][ T289] EXT4-fs (loop4): unmounting filesystem. [ 121.172476][ T2869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 121.586000][ T28] audit: type=1400 audit(1780455828.461:798): avc: denied { create } for pid=2887 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.609678][ T2888] loop5: detected capacity change from 0 to 512 [ 121.636699][ T2888] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 121.648352][ T2888] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.983: invalid block [ 121.681879][ T2888] EXT4-fs (loop5): 1 truncate cleaned up [ 121.687804][ T2888] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 121.787531][ T1612] EXT4-fs (loop5): unmounting filesystem. [ 121.846030][ T2899] random: crng reseeded on system resumption [ 122.345728][ T28] audit: type=1400 audit(1780455829.221:799): avc: denied { search } for pid=2902 comm="syz.5.986" name="/" dev="configfs" ino=13727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.433468][ T28] audit: type=1400 audit(1780455829.271:800): avc: denied { read } for pid=2902 comm="syz.5.986" name="/" dev="configfs" ino=13727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.455716][ T28] audit: type=1400 audit(1780455829.271:801): avc: denied { open } for pid=2902 comm="syz.5.986" path="/" dev="configfs" ino=13727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.994858][ T2945] loop3: detected capacity change from 0 to 128 [ 124.052700][ T2945] FAT-fs (loop3): Directory bread(block 162) failed [ 124.067110][ T2945] FAT-fs (loop3): Directory bread(block 163) failed [ 124.074238][ T2945] FAT-fs (loop3): Directory bread(block 164) failed [ 124.080947][ T2945] FAT-fs (loop3): Directory bread(block 165) failed [ 124.087838][ T2945] FAT-fs (loop3): Directory bread(block 166) failed [ 124.094543][ T2945] FAT-fs (loop3): Directory bread(block 167) failed [ 124.101459][ T2945] FAT-fs (loop3): Directory bread(block 168) failed [ 124.108662][ T2945] FAT-fs (loop3): Directory bread(block 169) failed [ 124.161923][ T2956] random: crng reseeded on system resumption [ 124.409803][ T2958] random: crng reseeded on system resumption [ 124.967593][ T2945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.981670][ T2960] netlink: 408 bytes leftover after parsing attributes in process `syz.5.1009'. [ 125.010520][ T28] audit: type=1400 audit(1780455831.871:802): avc: denied { accept } for pid=2961 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.030282][ T28] audit: type=1400 audit(1780455831.871:803): avc: denied { mount } for pid=2944 comm="syz.3.1005" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 125.032962][ T2945] FAT-fs (loop3): Directory bread(block 162) failed [ 125.052494][ T28] audit: type=1326 audit(1780455831.901:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.065534][ T2966] random: crng reseeded on system resumption [ 125.084168][ T28] audit: type=1326 audit(1780455831.901:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.115966][ T28] audit: type=1326 audit(1780455831.901:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.119392][ T2945] FAT-fs (loop3): Directory bread(block 163) failed [ 125.142507][ T28] audit: type=1326 audit(1780455831.901:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.172421][ T28] audit: type=1326 audit(1780455831.901:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.177837][ T2945] syz.3.1005: attempt to access beyond end of device [ 125.177837][ T2945] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 125.197180][ T28] audit: type=1326 audit(1780455831.901:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.197209][ T28] audit: type=1326 audit(1780455831.901:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.246427][ T2945] syz.3.1005: attempt to access beyond end of device [ 125.246427][ T2945] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 125.268045][ T28] audit: type=1326 audit(1780455831.901:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.4.1010" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7abed9ce59 code=0x7ffc0000 [ 125.320973][ T2979] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1014'. [ 125.603657][ T2983] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1016'. [ 125.824754][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.834025][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.122757][ T3006] netlink: 'syz.5.1022': attribute type 16 has an invalid length. [ 128.168479][ T3006] netlink: 'syz.5.1022': attribute type 17 has an invalid length. [ 128.277516][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.288864][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.298501][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.305593][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.314057][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.321555][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.343542][ T3017] netlink: 'syz.4.1029': attribute type 9 has an invalid length. [ 128.351338][ T3017] netlink: 'syz.4.1029': attribute type 6 has an invalid length. [ 128.419848][ T3023] loop4: detected capacity change from 0 to 2048 [ 128.464755][ T3035] loop6: detected capacity change from 0 to 512 [ 128.471752][ T3035] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.497619][ T3023] loop4: p2 p3 p7 [ 128.551590][ T291] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 128.646839][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 128.723605][ T430] udevd[430]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 128.723944][ T1183] udevd[1183]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 128.745159][ T431] udevd[431]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 128.781475][ T291] usb 1-1: Using ep0 maxpacket: 16 [ 128.796471][ T291] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 128.843967][ T291] usb 1-1: config 0 has no interface number 0 [ 128.884740][ T291] usb 1-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 128.930766][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.941853][ T291] usb 1-1: Product: syz [ 128.946238][ T291] usb 1-1: Manufacturer: syz [ 128.951326][ T291] usb 1-1: SerialNumber: syz [ 128.959509][ T291] usb 1-1: config 0 descriptor?? [ 128.967647][ T291] usb 1-1: bad CDC descriptors [ 129.018369][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.027849][ T3056] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.070270][ T3056] netlink: 'syz.6.1046': attribute type 16 has an invalid length. [ 129.080473][ T3056] netlink: 'syz.6.1046': attribute type 17 has an invalid length. [ 129.103202][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.111001][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.127264][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.134404][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.144792][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.151895][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.173073][ T291] usb 1-1: USB disconnect, device number 25 [ 129.211469][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 129.227209][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.247990][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 129.259076][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.269759][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.281212][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.290833][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.312524][ T2512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.451846][ T3064] loop5: detected capacity change from 0 to 128 [ 129.583221][ T3076] loop4: detected capacity change from 0 to 512 [ 129.590511][ T2512] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.598404][ T3076] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.695629][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 129.715147][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.768679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.840471][ T3083] netlink: 'syz.4.1058': attribute type 16 has an invalid length. [ 129.860797][ T3083] netlink: 'syz.4.1058': attribute type 17 has an invalid length. [ 129.871918][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.907219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.937946][ T3097] random: crng reseeded on system resumption [ 131.382153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 131.411243][ T3107] loop7: detected capacity change from 0 to 4 [ 131.425212][ T3109] loop4: detected capacity change from 0 to 512 [ 131.475918][ T3109] EXT4-fs: Ignoring removed oldalloc option [ 131.510101][ T3109] EXT4-fs: Ignoring removed nobh option [ 131.531495][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 131.531516][ T28] audit: type=1400 audit(1780455838.361:885): avc: denied { setopt } for pid=3110 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.766027][ T2398] Bluetooth: hci0: command 0x1003 tx timeout [ 131.772169][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.801520][ T3074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.840188][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1069: iget: bad extra_isize 90 (inode size 256) [ 131.875550][ T3132] batadv_slave_0: Caught tx_queue_len zero misconfig [ 131.886038][ T3132] loop6: detected capacity change from 0 to 512 [ 131.892836][ T3132] EXT4-fs: Ignoring removed i_version option [ 131.903771][ T3132] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 131.910043][ T3137] binder: 3133:3137 ioctl c0306201 200000000080 returned -14 [ 131.914561][ T3132] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.934881][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 131.945913][ T28] audit: type=1400 audit(1780455838.821:886): avc: denied { create } for pid=3131 comm="syz.6.1079" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 131.969984][ T2257] ================================================================== [ 131.978079][ T2257] BUG: KASAN: use-after-free in detach_if_pending+0x156/0x300 [ 131.985538][ T2257] Write of size 8 at addr ffff88811c1a09f8 by task syz-executor/2257 [ 131.993592][ T2257] [ 131.996033][ T2257] CPU: 1 PID: 2257 Comm: syz-executor Tainted: G W syzkaller #0 [ 132.005129][ T2257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.015355][ T2257] Call Trace: [ 132.018721][ T2257] [ 132.021660][ T2257] __dump_stack+0x21/0x24 [ 132.026005][ T2257] dump_stack_lvl+0x110/0x170 [ 132.030685][ T2257] ? __cfi_dump_stack_lvl+0x8/0x8 [ 132.035716][ T2257] ? stack_trace_save+0xa6/0xf0 [ 132.040572][ T2257] ? detach_if_pending+0x156/0x300 [ 132.045689][ T2257] print_address_description+0x71/0x200 [ 132.051225][ T2257] print_report+0x4a/0x60 [ 132.055545][ T2257] kasan_report+0x122/0x150 [ 132.060048][ T2257] ? detach_if_pending+0x156/0x300 [ 132.065149][ T2257] ? deactivate_super+0xaf/0xe0 [ 132.069997][ T2257] __asan_report_store8_noabort+0x17/0x20 [ 132.075724][ T2257] detach_if_pending+0x156/0x300 [ 132.080691][ T2257] del_timer+0x75/0xb0 [ 132.084760][ T2257] try_to_grab_pending+0xcd/0x5d0 [ 132.089967][ T2257] ? mod_delayed_work_on+0xe0/0xe0 [ 132.095084][ T2257] ? __kasan_check_write+0x14/0x20 [ 132.100200][ T2257] ? _raw_spin_lock_irq+0x95/0xf0 [ 132.105237][ T2257] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 132.110783][ T2257] mod_delayed_work_on+0x44/0xe0 [ 132.115716][ T2257] wb_queue_work+0x2a4/0x3b0 [ 132.120295][ T2257] bdi_split_work_to_wbs+0x4f1/0xa60 [ 132.125607][ T2257] ? sync_inodes_sb+0x6e0/0x6e0 [ 132.130448][ T2257] ? __cfi_call_rcu+0x10/0x10 [ 132.135114][ T2257] __writeback_inodes_sb_nr+0x219/0x280 [ 132.140848][ T2257] ? writeback_inodes_sb_nr+0x30/0x30 [ 132.146209][ T2257] ? get_nr_dirty_inodes+0x297/0x2d0 [ 132.151481][ T2257] writeback_inodes_sb+0x74/0x80 [ 132.156409][ T2257] sync_filesystem+0xaa/0x260 [ 132.161084][ T2257] ? shrink_dcache_for_umount+0x96/0x110 [ 132.166709][ T2257] generic_shutdown_super+0x6e/0x480 [ 132.171985][ T2257] kill_block_super+0x7f/0xf0 [ 132.176661][ T2257] deactivate_locked_super+0xb5/0x120 [ 132.182019][ T2257] deactivate_super+0xaf/0xe0 [ 132.186689][ T2257] cleanup_mnt+0x474/0x500 [ 132.191093][ T2257] __cleanup_mnt+0x19/0x20 [ 132.195503][ T2257] task_work_run+0x1e1/0x250 [ 132.200083][ T2257] ? __cfi_task_work_run+0x10/0x10 [ 132.205184][ T2257] ? __x64_sys_umount+0x12d/0x170 [ 132.210203][ T2257] ? __cfi___x64_sys_umount+0x10/0x10 [ 132.215570][ T2257] exit_to_user_mode_loop+0x9b/0xb0 [ 132.220852][ T2257] exit_to_user_mode_prepare+0x87/0xd0 [ 132.226918][ T2257] syscall_exit_to_user_mode+0x1a/0x30 [ 132.232408][ T2257] do_syscall_64+0x58/0xa0 [ 132.236923][ T2257] ? clear_bhb_loop+0x30/0x80 [ 132.241712][ T2257] ? clear_bhb_loop+0x30/0x80 [ 132.246485][ T2257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.252378][ T2257] RIP: 0033:0x7f9dac59e097 [ 132.256787][ T2257] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 132.276380][ T2257] RSP: 002b:00007ffcd6d2f4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 132.284779][ T2257] RAX: 0000000000000000 RBX: 00007f9dac6321ca RCX: 00007f9dac59e097 [ 132.292742][ T2257] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd6d2f560 [ 132.300699][ T2257] RBP: 00007ffcd6d2f560 R08: 00007ffcd6d30560 R09: 00000000ffffffff [ 132.308669][ T2257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd6d305f0 [ 132.316643][ T2257] R13: 00007f9dac6321ca R14: 0000000000020354 R15: 00007ffcd6d30630 [ 132.324634][ T2257] [ 132.327647][ T2257] [ 132.329959][ T2257] Allocated by task 3074: [ 132.334270][ T2257] kasan_set_track+0x4b/0x70 [ 132.338858][ T2257] kasan_save_alloc_info+0x25/0x30 [ 132.343955][ T2257] __kasan_kmalloc+0x95/0xb0 [ 132.348531][ T2257] __kmalloc+0xb1/0x1e0 [ 132.352672][ T2257] hci_alloc_dev_priv+0x27/0x1bd0 [ 132.357785][ T2257] hci_uart_tty_ioctl+0x3c8/0xa20 [ 132.362795][ T2257] tty_ioctl+0x8ef/0xc60 [ 132.367028][ T2257] __se_sys_ioctl+0x12f/0x1b0 [ 132.371704][ T2257] __x64_sys_ioctl+0x7b/0x90 [ 132.376305][ T2257] x64_sys_call+0x58b/0x9a0 [ 132.380803][ T2257] do_syscall_64+0x4c/0xa0 [ 132.385207][ T2257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.391098][ T2257] [ 132.393418][ T2257] Freed by task 3074: [ 132.397390][ T2257] kasan_set_track+0x4b/0x70 [ 132.401966][ T2257] kasan_save_free_info+0x31/0x50 [ 132.406977][ T2257] ____kasan_slab_free+0x132/0x180 [ 132.412083][ T2257] __kasan_slab_free+0x11/0x20 [ 132.416835][ T2257] slab_free_freelist_hook+0xc2/0x190 [ 132.422189][ T2257] __kmem_cache_free+0xb7/0x1b0 [ 132.427023][ T2257] kfree+0x6f/0xf0 [ 132.430730][ T2257] hci_release_dev+0x12a3/0x13b0 [ 132.435653][ T2257] bt_host_release+0x82/0x90 [ 132.440229][ T2257] device_release+0xa4/0x1d0 [ 132.444822][ T2257] kobject_put+0x19d/0x280 [ 132.449225][ T2257] put_device+0x1f/0x30 [ 132.453366][ T2257] hci_dev_cmd+0x279/0x740 [ 132.457767][ T2257] hci_sock_ioctl+0x41e/0x7f0 [ 132.462431][ T2257] sock_do_ioctl+0x114/0x330 [ 132.467026][ T2257] sock_ioctl+0x4bd/0x710 [ 132.471417][ T2257] __se_sys_ioctl+0x12f/0x1b0 [ 132.476129][ T2257] __x64_sys_ioctl+0x7b/0x90 [ 132.480723][ T2257] x64_sys_call+0x58b/0x9a0 [ 132.485216][ T2257] do_syscall_64+0x4c/0xa0 [ 132.489641][ T2257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.495526][ T2257] [ 132.497859][ T2257] Last potentially related work creation: [ 132.503568][ T2257] kasan_save_stack+0x3a/0x60 [ 132.508257][ T2257] __kasan_record_aux_stack+0xb6/0xc0 [ 132.513638][ T2257] kasan_record_aux_stack_noalloc+0xb/0x10 [ 132.519494][ T2257] insert_work+0x51/0x300 [ 132.523810][ T2257] __queue_work+0x9b1/0xd30 [ 132.528304][ T2257] queue_work_on+0xde/0x150 [ 132.532804][ T2257] __hci_cmd_sync_sk+0xa7f/0xd30 [ 132.537743][ T2257] hci_cmd_sync_status+0x53/0x120 [ 132.542749][ T2257] hci_dev_cmd+0x35b/0x740 [ 132.547148][ T2257] hci_sock_ioctl+0x41e/0x7f0 [ 132.551808][ T2257] sock_do_ioctl+0x114/0x330 [ 132.556413][ T2257] sock_ioctl+0x4bd/0x710 [ 132.560790][ T2257] __se_sys_ioctl+0x12f/0x1b0 [ 132.565465][ T2257] __x64_sys_ioctl+0x7b/0x90 [ 132.570046][ T2257] x64_sys_call+0x58b/0x9a0 [ 132.574542][ T2257] do_syscall_64+0x4c/0xa0 [ 132.578961][ T2257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.584930][ T2257] [ 132.587243][ T2257] Second to last potentially related work creation: [ 132.593810][ T2257] kasan_save_stack+0x3a/0x60 [ 132.598477][ T2257] __kasan_record_aux_stack+0xb6/0xc0 [ 132.603863][ T2257] kasan_record_aux_stack_noalloc+0xb/0x10 [ 132.609652][ T2257] insert_work+0x51/0x300 [ 132.613966][ T2257] __queue_work+0x9b1/0xd30 [ 132.618542][ T2257] queue_work_on+0xde/0x150 [ 132.623118][ T2257] hci_cmd_timeout+0x191/0x200 [ 132.627879][ T2257] process_one_work+0x71f/0xc40 [ 132.632715][ T2257] worker_thread+0xa29/0x11e0 [ 132.637379][ T2257] kthread+0x281/0x320 [ 132.641464][ T2257] ret_from_fork+0x1f/0x30 [ 132.645868][ T2257] [ 132.648179][ T2257] The buggy address belongs to the object at ffff88811c1a0000 [ 132.648179][ T2257] which belongs to the cache kmalloc-8k of size 8192 [ 132.662228][ T2257] The buggy address is located 2552 bytes inside of [ 132.662228][ T2257] 8192-byte region [ffff88811c1a0000, ffff88811c1a2000) [ 132.675683][ T2257] [ 132.678007][ T2257] The buggy address belongs to the physical page: [ 132.684413][ T2257] page:ffffea0004706800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c1a0 [ 132.694646][ T2257] head:ffffea0004706800 order:3 compound_mapcount:0 compound_pincount:0 [ 132.702980][ T2257] flags: 0x4000000000010200(slab|head|zone=1) [ 132.709044][ T2257] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 132.717617][ T2257] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 132.726200][ T2257] page dumped because: kasan: bad access detected [ 132.732601][ T2257] page_owner tracks the page as allocated [ 132.738297][ T2257] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3064, tgid 3063 (syz.5.1050), ts 129469256228, free_ts 129449964003 [ 132.761025][ T2257] post_alloc_hook+0x1f5/0x210 [ 132.765784][ T2257] prep_new_page+0x1c/0x110 [ 132.770283][ T2257] get_page_from_freelist+0x2d12/0x2d80 [ 132.775824][ T2257] __alloc_pages+0x1fa/0x610 [ 132.780420][ T2257] alloc_slab_page+0x6e/0xf0 [ 132.784999][ T2257] new_slab+0x98/0x3d0 [ 132.789152][ T2257] ___slab_alloc+0x6bd/0xb20 [ 132.793746][ T2257] __slab_alloc+0x5e/0xa0 [ 132.798095][ T2257] __kmem_cache_alloc_node+0x203/0x2c0 [ 132.803641][ T2257] kmalloc_trace+0x29/0xb0 [ 132.808111][ T2257] fat_fill_super+0x147/0x4a20 [ 132.812894][ T2257] vfat_fill_super+0x2f/0x40 [ 132.817496][ T2257] mount_bdev+0x2bc/0x3f0 [ 132.821837][ T2257] vfat_mount+0x34/0x40 [ 132.825982][ T2257] legacy_get_tree+0xfe/0x1a0 [ 132.830653][ T2257] vfs_get_tree+0x9a/0x270 [ 132.835062][ T2257] page last free stack trace: [ 132.839731][ T2257] free_unref_page_prepare+0x7f8/0x800 [ 132.845191][ T2257] free_unref_page+0x95/0x540 [ 132.849874][ T2257] __free_pages+0x67/0x100 [ 132.854310][ T2257] __free_slab+0xca/0x1a0 [ 132.858641][ T2257] __unfreeze_partials+0x160/0x190 [ 132.863740][ T2257] put_cpu_partial+0xa9/0x100 [ 132.868419][ T2257] __slab_free+0x1c4/0x280 [ 132.872832][ T2257] ___cache_free+0xbf/0xd0 [ 132.877250][ T2257] qlist_free_all+0xc6/0x140 [ 132.881853][ T2257] kasan_quarantine_reduce+0x14a/0x170 [ 132.887305][ T2257] __kasan_slab_alloc+0x24/0x80 [ 132.892149][ T2257] slab_post_alloc_hook+0x4f/0x2d0 [ 132.897254][ T2257] kmem_cache_alloc+0x16e/0x330 [ 132.902097][ T2257] getname_flags+0xb9/0x500 [ 132.906626][ T2257] getname+0x19/0x20 [ 132.910527][ T2257] do_sys_openat2+0xeb/0x810 [ 132.915118][ T2257] [ 132.917434][ T2257] Memory state around the buggy address: [ 132.923052][ T2257] ffff88811c1a0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.931113][ T2257] ffff88811c1a0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.939160][ T2257] >ffff88811c1a0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.947468][ T2257] ^ [ 132.955450][ T2257] ffff88811c1a0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.963508][ T2257] ffff88811c1a0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.971561][ T2257] ================================================================== [ 132.979656][ T2257] Disabling lock debugging due to kernel taint [ 132.985875][ C0] sched: RT throttling activated [ 132.987061][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1069: error while reading EA inode 11 err=-117 [ 133.021278][ T3137] binder: 3133:3137 ioctl c0306201 2000000003c0 returned -14 [ 133.027581][ T28] audit: type=1400 audit(1780455839.891:887): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.032349][ T2257] EXT4-fs (loop6): unmounting filesystem. [ 133.051338][ T28] audit: type=1400 audit(1780455839.891:888): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.077870][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.087939][ T3109] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.103943][ T28] audit: type=1400 audit(1780455839.891:889): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.132186][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1069: iget: bad extra_isize 90 (inode size 256) [ 133.141783][ T28] audit: type=1400 audit(1780455839.891:890): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.161627][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.166228][ T28] audit: type=1400 audit(1780455839.891:891): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.173225][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1069: error while reading EA inode 11 err=-117 [ 133.194042][ T28] audit: type=1400 audit(1780455839.891:892): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.206159][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.228994][ T28] audit: type=1400 audit(1780455839.891:893): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.235236][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1069: iget: bad extra_isize 90 (inode size 256) [ 133.271696][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.278304][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1069: error while reading EA inode 18 err=-117 [ 133.291316][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.298465][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1069: iget: bad extra_isize 90 (inode size 256) [ 133.312129][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.318656][ T3109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1069: error while reading EA inode 18 err=-117 [ 133.331250][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.337962][ T3109] EXT4-fs (loop4): 1 orphan inode deleted [ 133.343722][ T3109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.361936][ T3109] EXT4-fs error (device loop4): __ext4_iget:5104: inode #14: block 1886221359: comm syz.4.1069: invalid block [ 133.373938][ T3109] EXT4-fs (loop4): Remounting filesystem read-only [ 133.384882][ T289] EXT4-fs (loop4): unmounting filesystem. [ 133.831563][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 133.843340][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 133.851749][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B W syzkaller #0 [ 133.860330][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.870386][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 133.875965][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 51 29 00 4c 89 ff e8 c0 3f ba 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc f6 6e 00 49 8b 7d 00 e8 53 3b [ 133.895678][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 133.901851][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701c680 [ 133.910001][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 133.917970][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 133.925973][ C0] R10: dffffc0000000000 R11: ffffed1023834139 R12: dffffc0000000000 [ 133.934050][ C0] R13: 0000000000000000 R14: ffff88811c1a09c8 R15: 0000000000000008 [ 133.942010][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 133.950943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.957524][ C0] CR2: 0000001b2ed23ffc CR3: 00000001215dd000 CR4: 00000000003506b0 [ 133.965485][ C0] DR0: 0000000000050010 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.973547][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 133.981518][ C0] Call Trace: [ 133.984801][ C0] [ 133.987639][ C0] delayed_work_timer_fn+0x61/0x80 [ 133.992748][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 133.998548][ C0] call_timer_fn+0x46/0x2a0 [ 134.003046][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 134.008847][ C0] __run_timers+0x689/0x9f0 [ 134.013341][ C0] ? calc_index+0x200/0x200 [ 134.017832][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 134.023114][ C0] run_timer_softirq+0x6a/0xf0 [ 134.027973][ C0] handle_softirqs+0x1d7/0x600 [ 134.032771][ C0] ? irqtime_account_irq+0xc4/0x240 [ 134.037980][ C0] __irq_exit_rcu+0x52/0xf0 [ 134.042482][ C0] irq_exit_rcu+0x9/0x10 [ 134.046742][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 134.052374][ C0] [ 134.055310][ C0] [ 134.058233][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 134.064209][ C0] RIP: 0010:default_idle+0xf/0x20 [ 134.069294][ C0] Code: 57 e3 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 43 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 134.088912][ C0] RSP: 0018:ffffffff87007d58 EFLAGS: 00000257 [ 134.094977][ C0] RAX: ffff8881f6e00000 RBX: ffffffff8701c680 RCX: f2d54477db55a100 [ 134.103032][ C0] RDX: 0000000000000001 RSI: ffffffff85ca8f40 RDI: ffffffff85ca8f00 [ 134.111001][ C0] RBP: ffffffff87007d58 R08: ffff8881f6e348b3 R09: 1ffff1103edc6916 [ 134.118977][ C0] R10: 0000000000000000 R11: ffffffff85023e30 R12: dffffc0000000000 [ 134.126960][ C0] R13: 0000000000000000 R14: ffffffff8701c680 R15: dffffc0000000000 [ 134.134929][ C0] ? __cfi_default_idle+0x10/0x10 [ 134.139998][ C0] arch_cpu_idle+0x1c/0x20 [ 134.144402][ C0] default_idle_call+0x71/0x1d0 [ 134.149243][ C0] do_idle+0x354/0x640 [ 134.153308][ C0] ? ct_irq_exit+0x9/0x10 [ 134.157626][ C0] ? irqentry_exit+0x30/0x40 [ 134.162200][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 134.167392][ C0] cpu_startup_entry+0x43/0x60 [ 134.172145][ C0] rest_init+0x10a/0x130 [ 134.176423][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 134.181804][ C0] arch_call_rest_init+0xe/0x10 [ 134.186661][ C0] start_kernel+0x483/0x4f1 [ 134.191167][ C0] x86_64_start_reservations+0x2a/0x2c [ 134.196650][ C0] x86_64_start_kernel+0x7c/0x81 [ 134.201679][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 134.207587][ C0] [ 134.210608][ C0] Modules linked in: [ 134.214510][ C0] ---[ end trace 0000000000000000 ]--- [ 134.220189][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 134.225534][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 51 29 00 4c 89 ff e8 c0 3f ba 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc f6 6e 00 49 8b 7d 00 e8 53 3b [ 134.245391][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 134.251473][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff8701c680 [ 134.259498][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 134.267564][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: fffffffffffffffb [ 134.275626][ C0] R10: dffffc0000000000 R11: ffffed1023834139 R12: dffffc0000000000 [ 134.283770][ C0] R13: 0000000000000000 R14: ffff88811c1a09c8 R15: 0000000000000008 [ 134.291744][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 134.300664][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.307246][ C0] CR2: 0000001b2ed23ffc CR3: 00000001215dd000 CR4: 00000000003506b0 [ 134.315223][ C0] DR0: 0000000000050010 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.323183][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 134.331141][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 134.338702][ C0] Kernel Offset: disabled [ 134.343018][ C0] Rebooting in 86400 seconds..