last executing test programs: 1m17.129877592s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='2', 0x1) 1m17.057386879s ago: executing program 2 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000026c0)={@empty, 0x0, 0x2, 0x0, 0x5, 0x73, 0x2}, 0x20) syz_emit_ethernet(0x47, &(0x7f0000002b80)={@local, @multicast, @void, {@ipv6={0x86dd, @esp={0x3, 0x6, "ff9381", 0x11, 0x32, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @empty}}}}, 0x0) 1m17.020754943s ago: executing program 2 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1m16.941568681s ago: executing program 2 (id=22): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000540)='./file0\x00', 0x12048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x2d9, &(0x7f0000000740)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000a40)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00008500000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='3', 0x1) read$msr(r2, &(0x7f00000003c0)=""/95, 0x5f) mount$bind(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x1333406, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2000002, 0x82011, r3, 0x9bd23000) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x1918ae, 0x0) mount$bind(&(0x7f0000000bc0)='.\x00', &(0x7f0000000c00)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) 1m14.997504872s ago: executing program 2 (id=37): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) pipe2(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0) 1m14.91134526s ago: executing program 2 (id=39): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], &(0x7f00000009c0)=""/4096, 0x4c, 0x1000, 0xa}, 0x28) 1m14.890786762s ago: executing program 32 (id=39): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], &(0x7f00000009c0)=""/4096, 0x4c, 0x1000, 0xa}, 0x28) 30.721184499s ago: executing program 5 (id=542): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001100)=""/4096, 0x79c5}], 0x1) 30.683414883s ago: executing program 5 (id=543): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 30.668823254s ago: executing program 5 (id=544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe14, 0x0, 0x0, 0x0}, 0x94) timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000dc0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x1, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000bc0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) setrlimit(0xf, &(0x7f00000001c0)={0x0, 0x3}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x13, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/udp6\x00') readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/253, 0xfd}], 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000d40)={0x24, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0022180000008501150015ff0904a108750109309102c0c0"], 0x0}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=r7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x31, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) clock_getres(0x2, &(0x7f0000000680)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@map=r5, r0, 0x19, 0x2028, 0x0, @void, @void, @value=r7, @void, r4}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x51fbec230593a21, 0x1, 0x3, {0xd, @esp_ip6_spec={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaf7, 0x6}, {0x0, @empty, 0x6, 0xe, [0x2]}, @tcp_ip6_spec={@local, @mcast2, 0x4e21, 0x4e20, 0x58}, {0x0, @remote, 0x800, 0x0, [0x400, 0x8]}, 0x4, 0x8}}}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) timer_getoverrun(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0x135, 0x0, &(0x7f0000000000)="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", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.08124441s ago: executing program 5 (id=583): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 27.823010637s ago: executing program 5 (id=573): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffdc1, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 27.619433558s ago: executing program 5 (id=575): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000600)={[{@errors_remount}, {@nombcache}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000001800)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001840)={0x7, 0xed, 0x1, 0x2}) 12.684441205s ago: executing program 33 (id=575): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000600)={[{@errors_remount}, {@nombcache}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000001800)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001840)={0x7, 0xed, 0x1, 0x2}) 8.196105267s ago: executing program 6 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 7.378950031s ago: executing program 3 (id=733): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb-cipher_null\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, 0x0) 6.267219355s ago: executing program 6 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 5.54498513s ago: executing program 3 (id=740): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0x24000800) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000340)=0x2) (async) recvmmsg(r6, &(0x7f0000000380), 0x10106, 0x2, 0x0) (async, rerun: 32) gettid() (async, rerun: 32) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) io_submit(0x0, 0x3, &(0x7f00000008c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff, &(0x7f0000000540)="eda44ae0aca35a9e8f2155", 0xb, 0xffffffffffffff4c}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f00000006c0)="e9ccf06847c297330cff7a190afcbcec115bddfeedad26d09bfc4c17e1cc84c5b9a0e47a2c8f1a725a44847c2752f36b033d5c5e423987b18a6d798c5330327b45ad2b166566c4a4856a2e4f7b951feabfc2da7b67914fa8658811ca5470c4a73b07175ecdc938ce8ef038d88fa4135c31ee791540ab8ca04a112f076e510673843fe9b3643c2dc14f41a28bd4713c471e7514a7629fadf2eebea557dc071a827a16b28c707ec2b354f23e00e7f3db5d598579a66e6a6b20c5e1170fa23b8fe426b931c2b22a8d798e477a119cd2c60a4997301a0b7b66e07f9356eb9963d1c5f7cddf47dd7c", 0xe6, 0x4, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f0000000800)="0b6b87aad9d2b2bc9977ac0dbcf76e53209ae5c413fdb1b2fe595912ffad33ffdce59dd5ca816b0eb29f8f6b16aba115f139fb4d9e0a4b61569e09894d91bb4360c012b21f867e7972ee49e82899b2805cc84d68fe1566635fa61f3c", 0x5c, 0x9, 0x0, 0x1}]) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x48000) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=r8], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x44) (async) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x40000000, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x20000014}) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x15555555555555e7, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 5.05591546s ago: executing program 6 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 4.179312201s ago: executing program 1 (id=747): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000001dc0)=""/4096, 0x1000) lseek(r2, 0xffffffffffffffff, 0x1) 4.17920747s ago: executing program 3 (id=748): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) pipe2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0) 4.17863689s ago: executing program 4 (id=749): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000020c0)={0x1, &(0x7f0000002100)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) rename(0x0, 0x0) setpgid(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0xfe3, 0x45, 0x0, 0x303}, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) syz_ublk_add_dev(r0, 0x0, 0x0, r1, 0x0, &(0x7f0000000480)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000001a40)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001a80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x42, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000018c0)={0xfffffffffffffffc, 0x0, 0x800, 0x1ff}, 0x20) pwrite64(r2, &(0x7f0000002080)='E', 0x1, 0x47ecf) r4 = io_uring_setup(0x3450, &(0x7f0000000000)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) r5 = io_uring_setup(0xb, &(0x7f0000000180)={0x0, 0xfc9f, 0x1, 0x1, 0x3c0}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f00000018c0), 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000019c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r6}, 0xc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000005c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.095384069s ago: executing program 1 (id=751): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb-cipher_null\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, 0x0) 4.095227969s ago: executing program 1 (id=752): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f0000000240)={0xa, 0x4e1d, 0x80000, @local, 0x4}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000280)=0x35) 4.061668613s ago: executing program 1 (id=753): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb-cipher_null\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000800)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, 0x0) 3.915182168s ago: executing program 6 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 2.990309643s ago: executing program 0 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000000000085100000fcffffff950000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000a80)=""/216}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ac03", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000840308802800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2c0000800400098024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c03008006000500feff0000080003000200000014000400"], 0x3ac}, 0x1, 0x0, 0x0, 0x404c844}, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000480)="$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") bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001000)={{}, {0x9}, 0x90, 0x0, 0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='.\x00', &(0x7f0000000c80)="e6b04fac2a3ae77e894756691d8bdf2b5bd6365fe2e5682bd0b47d0dcdb61de9a7f5d6514a674f65a734b1f4cd989dcbf55e9bfa01239231449af4fbfc2a9be843761e080dd731700abd8ac904316effa7a50e9b274bfb80ff2390a1774ea6097fd33569c1367a9965889994ec", 0x6d, 0x0, &(0x7f0000000f00)={0x2, 0xc1, {0x0, 0xc, 0x2f, "849840e42e5d6cbc9752f26e63917820a4a6d5884f75eb9d27a23006f5330a0a452a0a7aa07e08241808a43f9c94bf", 0x85, "e96f401c72a218a6dc08e3e3af1198fa1f22d532f335cd86a13ca869fa0e53f44bee351b787287c91ab8afeb8e66a39f6dd0962e15f2d9f159e2f3cf84166586b5ab85bf3627becf3b04d91c3927058c84166396d91fa1b41af8ca7e75103e199cc6e59b45fd6dabb239cede0bf8c3a217fd0520154611807f396114c2598f466be50d6d1e"}, 0x6, "0728c2d193c5"}, 0xd3}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2982, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000c00)={0xf, 0x3e, 0x6, 0x3, 0xc, "a0e1c601283700000000000000000000000008"}) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc\x00', 0x161) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000012c0)='10', 0x2) getrandom(&(0x7f0000001180)=""/286, 0xffffff9a, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000200)=0x73, 0x4) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/152, 0x98}, 0x80}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/21, 0x15}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2002, 0x0) 2.990076643s ago: executing program 1 (id=757): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x600000b, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0xb, 0x103381) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 2.989038233s ago: executing program 3 (id=758): syz_read_part_table(0x5e3, &(0x7f00000007c0)="$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") r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x440000, 0x183) openat(r0, &(0x7f0000000040)='./file0\x00', 0x210d40, 0x10) syz_read_part_table(0x5e3, &(0x7f00000007c0)="$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") (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x440000, 0x183) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x210d40, 0x10) (async) 2.987542463s ago: executing program 4 (id=759): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="44799d7026f9bf65a883015ef03ed64f7cc886c84ae2f3", @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x10000040}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00\n\x00\x00\x00\f\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r7, r6}, 0xc) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40042, 0x1) close(r9) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x8c, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfd', @ANYRESHEX]) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000780)={'vlan0\x00', &(0x7f00000007c0)=@ethtool_link_settings={0x4d, 0x5, 0xa, 0x2, 0x7f, 0xff, 0x5, 0xb2, 0x1, 0xe9, [0x9, 0x1, 0x3, 0x1, 0x1, 0x3d8, 0x76, 0xa], [0xc18400, 0xfffffffb, 0xa, 0x3d77, 0x8001, 0x10001, 0x76]}}) unshare(0x6020400) 2.91936488s ago: executing program 1 (id=760): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mremap$dontunmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000058000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(0x0, 0x1) splice(r2, 0x0, r4, 0x0, 0x2, 0x5) fcntl$setflags(r4, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) 2.513117952s ago: executing program 6 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 1.329575214s ago: executing program 0 (id=761): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='stack\x00') read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 1.329324214s ago: executing program 3 (id=762): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x1, 'vlan1\x00', {}, 0x5832}) r2 = syz_open_dev$usbfs(&(0x7f0000000540), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00') ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000380)={0x40, 0x32, 0xe}) r3 = socket$inet6(0x10, 0x2, 0x1fb) sendmsg(r3, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x800401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000001b80)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r4, &(0x7f0000002040)='/', 0x1) sendfile(r4, r4, &(0x7f0000002080), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r4, 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='fd/3\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) pidfd_getfd(r5, r3, 0x0) getpeername$netlink(r5, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[], 0x1f) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) chdir(&(0x7f00000001c0)='./proc/fs/nfsd\x00') 1.329102394s ago: executing program 4 (id=763): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb-cipher_null\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, 0x0) 1.314326275s ago: executing program 4 (id=764): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f0000000240)={0xa, 0x4e1d, 0x80000, @local, 0x4}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000280)=0x35) 1.285260308s ago: executing program 0 (id=765): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="2cc1c851c2f5ea12afdb69ef00943f0ea188182c76c89661f9f72c8154ca33f64391d034d3b4cabe", 0x28) 1.278725419s ago: executing program 4 (id=766): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000180)=[{0x45, 0x2, 0x2, 0xffffffff}, {0x60}, {0x2}, {0x6}]}) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpriority(0x2, r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab00000000020000003200"], 0x30}, 0x1, 0x0, 0x0, 0x20004895}, 0x40010) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000002bc0)={0x10, 0x0, "2b268438c278cede023891d30a5a117b"}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000002480), &(0x7f00000024c0)='./file1\x00', 0x10048, &(0x7f0000002500)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6c6f7765722c696f636861727365743d63703836312c00f54f36778e7c2defd4a177283254efa9174a5aac6eb8992e9861f2eb7095940f9f27e0992164c730e09565585f5699f069051edce5a2147e9e052030e269ba9d31870e1b471c24470fb136a11da4a9f11c4d77af199ac1acf0a65e2c4807829751de53d1fab4506199601b9d8115c3efc59d88b3a16dcba162c362a91457e038b2da16203c62867d82e8af74e7a2142f9fd66d2fc999ad8be012dbb24071220de3a2bc8aca31c6e39f1eaaeccbe8bd029c0e6a01f580abd3da1661d05a43e96773526dbe520e441238346c0980694218c41fcad26443c5ee7be70c"], 0x1, 0x2a5, &(0x7f0000002640)="$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") openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = syz_io_uring_setup(0x5136, &(0x7f0000002900)={0x0, 0xd73c, 0x1, 0xfffdfffe, 0x1}, &(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00)) syz_io_uring_setup(0x3c5f, &(0x7f0000002a40)={0x0, 0x24, 0x27, 0x5, 0xffffffff, 0x0, r8}, &(0x7f0000002ac0), &(0x7f0000002b00), 0x0) getdents(r7, 0x0, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) ppoll(&(0x7f0000002b40)=[{r7, 0x1}, {0xffffffffffffffff, 0x6}, {r3, 0x206}, {r3, 0x410}], 0x4, 0x0, &(0x7f0000002b80)={[0xa]}, 0x8) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r10 = syz_open_procfs(r9, &(0x7f0000000080)='net/netstat\x00') read$FUSE(r10, &(0x7f0000000440)={0x2020}, 0x2020) 1.231403414s ago: executing program 0 (id=767): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_getoverrun(r1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf8) copy_file_range(r2, &(0x7f0000000080)=0xe, r2, &(0x7f00000000c0)=0x3, 0x711, 0x0) 1.231171004s ago: executing program 0 (id=768): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb-cipher_null\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000800)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x20080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, 0x0) 1.195733738s ago: executing program 6 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x4000}) 2.00374ms ago: executing program 0 (id=769): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) pipe2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0) 266.98µs ago: executing program 3 (id=770): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x600000b, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0xb, 0x103381) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) 0s ago: executing program 4 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 22.175605][ T28] audit: type=1400 audit(1794357837.323:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.179261][ T279] cgroup: Unknown subsys name 'net' [ 22.198283][ T28] audit: type=1400 audit(1794357837.323:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.225625][ T28] audit: type=1400 audit(1794357837.363:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.226175][ T279] cgroup: Unknown subsys name 'devices' [ 22.369375][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.375019][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.479853][ T28] audit: type=1400 audit(1794357837.633:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.503187][ T28] audit: type=1400 audit(1794357837.633:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.528096][ T28] audit: type=1400 audit(1794357837.633:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.552172][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.561033][ T28] audit: type=1400 audit(1794357837.723:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.586515][ T28] audit: type=1400 audit(1794357837.723:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.615855][ T28] audit: type=1400 audit(1794357837.763:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.641446][ T28] audit: type=1400 audit(1794357837.763:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.641511][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.801835][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.808986][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.816504][ T288] device bridge_slave_0 entered promiscuous mode [ 23.830591][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.837695][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.845162][ T287] device bridge_slave_0 entered promiscuous mode [ 23.852202][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.859308][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.866688][ T288] device bridge_slave_1 entered promiscuous mode [ 23.880392][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.887502][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.895127][ T290] device bridge_slave_0 entered promiscuous mode [ 23.901984][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.909125][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.916487][ T287] device bridge_slave_1 entered promiscuous mode [ 23.938562][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.945730][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.953237][ T290] device bridge_slave_1 entered promiscuous mode [ 24.010067][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.017319][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.024800][ T289] device bridge_slave_0 entered promiscuous mode [ 24.034849][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.041960][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.049470][ T289] device bridge_slave_1 entered promiscuous mode [ 24.108816][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.115915][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.123511][ T291] device bridge_slave_0 entered promiscuous mode [ 24.130720][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.137845][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.145217][ T291] device bridge_slave_1 entered promiscuous mode [ 24.282705][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.289815][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.297184][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.304241][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.314370][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.321454][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.328753][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.335789][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.351941][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.359036][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.366338][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.373422][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.383366][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.390459][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.397761][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.404901][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.443256][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.450450][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.457749][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464785][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.501317][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.508707][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.515847][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.523316][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.531470][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.538768][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.545873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.553613][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.560941][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.569035][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.576240][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.605353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.613079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.621571][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.628654][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.636383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.644734][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.651856][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.659232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.666642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.674273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.682523][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.689652][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.697050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.705188][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.712361][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.719792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.727817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.735987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.743719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.751975][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.759129][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.766477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.774868][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.781936][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.810061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.818673][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.826886][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.833977][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.841529][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.850080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.858671][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.865705][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.873321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.881610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.889751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.897974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.905915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.913450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.922457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.930695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.944265][ T287] device veth0_vlan entered promiscuous mode [ 24.954261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.962727][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.971333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.981091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.989304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.996804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.011167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.019730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.028099][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.035129][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.042626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.050989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.059076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.067416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.075755][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.082829][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.095339][ T287] device veth1_macvtap entered promiscuous mode [ 25.107300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.115512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.124584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.132511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.140817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.148989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.157525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.173462][ T289] device veth0_vlan entered promiscuous mode [ 25.181101][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.189484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.197752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.206054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.214728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.222880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.231145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.239617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.248355][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.255880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.274546][ T290] device veth0_vlan entered promiscuous mode [ 25.284627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.293176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.301738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.309935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.318491][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.325995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.336443][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.344589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.362063][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.370644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.379561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.388015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.401284][ T290] device veth1_macvtap entered promiscuous mode [ 25.409017][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 25.421284][ T288] device veth0_vlan entered promiscuous mode [ 25.428898][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.437832][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.445886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.454280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.462097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.474295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.483261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.496889][ T289] device veth1_macvtap entered promiscuous mode [ 25.516556][ T288] device veth1_macvtap entered promiscuous mode [ 25.524611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.533806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.542653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.549327][ T310] loop3: detected capacity change from 0 to 256 [ 25.552121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.557162][ T310] ======================================================= [ 25.557162][ T310] WARNING: The mand mount option has been deprecated and [ 25.557162][ T310] and is ignored by this kernel. Remove the mand [ 25.557162][ T310] option from the mount to silence this warning. [ 25.557162][ T310] ======================================================= [ 25.589010][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.598964][ T310] exfat: Bad value for 'dmask' [ 25.625444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.633884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.654375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.663028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.672031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.680720][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.689564][ T291] device veth0_vlan entered promiscuous mode [ 25.711845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.720362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.729410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.737994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.746367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.754988][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.778539][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.799341][ T291] device veth1_macvtap entered promiscuous mode [ 25.811158][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.833033][ T317] loop2: detected capacity change from 0 to 256 [ 25.840159][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.903057][ T323] loop3: detected capacity change from 0 to 512 [ 25.956437][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.965801][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.808130][ T334] fuse: Unknown parameter '00000000000000000000' [ 27.230556][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 27.230574][ T28] audit: type=1400 audit(1794357842.383:140): avc: denied { ioctl } for pid=329 comm="syz.1.2" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.248968][ T336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.269075][ T28] audit: type=1400 audit(1794357842.383:141): avc: denied { prog_run } for pid=331 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.299891][ T28] audit: type=1400 audit(1794357842.403:142): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.329419][ T28] audit: type=1400 audit(1794357842.483:143): avc: denied { mount } for pid=341 comm="syz.3.10" name="/" dev="ramfs" ino=16616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.390634][ T336] ip_tables: iptables: counters copy to user failed while replacing table [ 27.400592][ T346] loop1: detected capacity change from 0 to 512 [ 27.420439][ T333] syz.2.3 (333) used greatest stack depth: 20296 bytes left [ 27.429347][ T28] audit: type=1400 audit(1794357842.483:144): avc: denied { read write } for pid=331 comm="syz.4.5" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.452761][ T28] audit: type=1400 audit(1794357842.483:145): avc: denied { open } for pid=331 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.488215][ T28] audit: type=1400 audit(1794357842.483:146): avc: denied { ioctl } for pid=331 comm="syz.4.5" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.579080][ T28] audit: type=1400 audit(1794357842.513:147): avc: denied { create } for pid=335 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.599988][ T28] audit: type=1400 audit(1794357842.513:148): avc: denied { write } for pid=335 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.875717][ T40] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.910422][ T28] audit: type=1400 audit(1794357842.533:149): avc: denied { map_create } for pid=345 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.182197][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.196980][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.206745][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.237023][ T40] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.256234][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.278220][ T40] usb 5-1: config 0 descriptor?? [ 28.509006][ T377] loop2: detected capacity change from 0 to 128 [ 28.562097][ T377] FAT-fs (loop2): Unrecognized mount option "shortname=mhxed" or missing value [ 28.645027][ T381] WARNING! power/level is deprecated; use power/control instead [ 28.700058][ T387] capability: warning: `syz.0.27' uses deprecated v2 capabilities in a way that may be insecure [ 28.714624][ T385] loop3: detected capacity change from 0 to 4096 [ 28.742193][ T385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.826671][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 28.832961][ T40] usbhid: probe of 5-1:0.0 failed with error -71 [ 28.842120][ T40] usb 5-1: USB disconnect, device number 2 [ 28.896999][ T328] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.188563][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.199616][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.210133][ T328] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 29.219798][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.240610][ T328] usb 3-1: config 0 descriptor?? [ 29.318400][ T400] ip_tables: iptables: counters copy to user failed while replacing table [ 29.558027][ T287] EXT4-fs (loop3): unmounting filesystem. [ 29.656335][ T328] hid (null): report_id 0 is invalid [ 29.671033][ T328] hid-steam 0003:28DE:1142.0001: report_id 0 is invalid [ 29.678233][ T328] hid-steam 0003:28DE:1142.0001: item 0 1 1 8 parsing failed [ 29.686266][ T328] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 29.695021][ T328] hid-steam: probe of 0003:28DE:1142.0001 failed with error -22 [ 29.930809][ T401] usb 3-1: USB disconnect, device number 2 [ 29.957019][ T40] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.027242][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.148581][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 30.157166][ T40] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 30.169623][ T40] usb 5-1: string descriptor 0 read error: -22 [ 30.175924][ T40] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 30.185365][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.197086][ T407] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 30.208302][ T40] usb 5-1: MIDIStreaming interface descriptor not found [ 30.217067][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 30.232498][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.244377][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 30.253736][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.261940][ T24] usb 4-1: Product: syz [ 30.266256][ T24] usb 4-1: Manufacturer: syz [ 30.277114][ T24] usb 4-1: SerialNumber: syz [ 30.567002][ T412] loop3: detected capacity change from 0 to 1024 [ 30.617922][ T412] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.659127][ T412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.851880][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.859273][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.866847][ T433] device bridge_slave_0 entered promiscuous mode [ 30.874879][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.882383][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.890023][ T433] device bridge_slave_1 entered promiscuous mode [ 30.930334][ T401] usb 5-1: USB disconnect, device number 3 [ 31.431880][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.438980][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.446296][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.453384][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.866938][ C0] sched: RT throttling activated [ 32.928183][ T452] overlayfs: failed to clone lowerpath [ 32.949695][ T456] FAULT_INJECTION: forcing a failure. [ 32.949695][ T456] name fail_futex, interval 1, probability 0, space 0, times 1 [ 32.962676][ T456] CPU: 0 PID: 456 Comm: syz.0.51 Not tainted syzkaller #0 [ 32.962701][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 32.962729][ T456] Call Trace: [ 32.962736][ T456] [ 32.962743][ T456] __dump_stack+0x21/0x24 [ 32.962775][ T456] dump_stack_lvl+0x110/0x170 [ 32.962794][ T456] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.962836][ T456] ? stack_trace_save+0xa6/0xf0 [ 32.962862][ T456] dump_stack+0x15/0x24 [ 32.962879][ T456] should_fail_ex+0x3bf/0x510 [ 32.962899][ T456] should_fail+0xb/0x10 [ 32.962916][ T456] get_futex_key+0x170/0xb10 [ 32.962943][ T456] ? __kasan_slab_alloc+0x72/0x80 [ 32.962967][ T456] ? slab_post_alloc_hook+0x4f/0x2d0 [ 32.962994][ T456] ? taskstats_exit+0x1f0/0xb50 [ 32.963017][ T456] ? get_signal+0x167c/0x1700 [ 32.963042][ T456] ? exit_to_user_mode_prepare+0x87/0xd0 [ 32.963064][ T456] ? syscall_exit_to_user_mode+0x1a/0x30 [ 32.963091][ T456] ? __cfi_get_futex_key+0x10/0x10 [ 32.963122][ T456] futex_wake+0x150/0x8e0 [ 32.963146][ T456] ? __cfi_futex_wake+0x10/0x10 [ 32.963168][ T456] ? perf_lock_task_context+0x3fd/0x4c0 [ 32.963193][ T456] ? perf_event_exit_event+0x530/0x530 [ 32.963214][ T456] ? mutex_unlock+0x8f/0x230 [ 32.963238][ T456] do_futex+0x2bf/0x430 [ 32.963257][ T456] ? __cfi_do_futex+0x10/0x10 [ 32.963277][ T456] ? __kasan_check_write+0x14/0x20 [ 32.963307][ T456] mm_release+0x195/0x2d0 [ 32.963335][ T456] ? exit_mm_release+0x30/0x30 [ 32.963362][ T456] ? futex_exit_release+0x119/0x1e0 [ 32.963381][ T456] exit_mm_release+0x25/0x30 [ 32.963408][ T456] do_exit+0x8de/0x29f0 [ 32.963436][ T456] ? __schedule+0xcbb/0x1700 [ 32.963457][ T456] ? __cfi_do_exit+0x10/0x10 [ 32.963485][ T456] ? plist_check_list+0x255/0x270 [ 32.963507][ T456] ? _raw_spin_lock+0x94/0xf0 [ 32.963526][ T456] ? __kasan_check_write+0x14/0x20 [ 32.963548][ T456] ? _raw_spin_lock_irq+0x95/0xf0 [ 32.963567][ T456] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.963587][ T456] do_group_exit+0x21b/0x2e0 [ 32.963615][ T456] ? __kasan_check_write+0x14/0x20 [ 32.963636][ T456] ? recalc_sigpending+0x168/0x1c0 [ 32.963660][ T456] get_signal+0x167c/0x1700 [ 32.963692][ T456] ? __cfi_get_signal+0x10/0x10 [ 32.963722][ T456] arch_do_signal_or_restart+0xd1/0x11c0 [ 32.963748][ T456] ? do_futex+0x2e2/0x430 [ 32.963768][ T456] ? __cfi_do_futex+0x10/0x10 [ 32.963787][ T456] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 32.963812][ T456] ? __se_sys_futex+0x136/0x310 [ 32.963834][ T456] ? __cfi_ksys_write+0x10/0x10 [ 32.963857][ T456] exit_to_user_mode_loop+0x7a/0xb0 [ 32.963880][ T456] exit_to_user_mode_prepare+0x87/0xd0 [ 32.963903][ T456] syscall_exit_to_user_mode+0x1a/0x30 [ 32.963930][ T456] do_syscall_64+0x58/0xa0 [ 32.963949][ T456] ? clear_bhb_loop+0x30/0x80 [ 32.963974][ T456] ? clear_bhb_loop+0x30/0x80 [ 32.963999][ T456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.964023][ T456] RIP: 0033:0x7fb6df7a8f19 [ 32.964047][ T456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.964065][ T456] RSP: 002b:00007fb6e06700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.964092][ T456] RAX: fffffffffffffe00 RBX: 00007fb6dfa25fa8 RCX: 00007fb6df7a8f19 [ 32.964108][ T456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb6dfa25fa8 [ 32.964121][ T456] RBP: 00007fb6dfa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 32.964134][ T456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.964146][ T456] R13: 00007fb6dfa26038 R14: 00007ffef834e880 R15: 00007ffef834e968 [ 32.964165][ T456] [ 32.972369][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.972638][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.984821][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 32.984860][ T28] audit: type=1400 audit(1794357848.133:202): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.062119][ T24] usb 4-1: USB disconnect, device number 2 [ 33.391720][ T454] device erspan0 entered promiscuous mode [ 33.410206][ T454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 33.430742][ T10] device bridge_slave_1 left promiscuous mode [ 33.438748][ T287] EXT4-fs (loop3): unmounting filesystem. [ 33.445381][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.472468][ T10] device bridge_slave_0 left promiscuous mode [ 33.485661][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.494454][ T10] device veth1_macvtap left promiscuous mode [ 33.500880][ T10] device veth0_vlan left promiscuous mode [ 33.507363][ T28] audit: type=1400 audit(1794357848.663:203): avc: denied { read } for pid=472 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.618284][ T484] tmpfs: Unsupported parameter 'mpol' [ 33.627166][ T28] audit: type=1400 audit(1794357848.753:204): avc: denied { mount } for pid=474 comm="syz.0.59" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.674696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.677856][ T28] audit: type=1400 audit(1794357848.813:205): avc: denied { write } for pid=472 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.696177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.722645][ T28] audit: type=1400 audit(1794357848.873:206): avc: denied { read write } for pid=487 comm="syz.4.63" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.741700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.754917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.763181][ T488] device-mapper: table: 252:0: crypt: Error allocating crypto tfm (-ENOENT) [ 33.774838][ T488] device-mapper: ioctl: error adding target to table [ 33.780815][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.783312][ T28] audit: type=1400 audit(1794357848.873:207): avc: denied { open } for pid=487 comm="syz.4.63" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.788609][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.805286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.827282][ T28] audit: type=1400 audit(1794357848.873:208): avc: denied { ioctl } for pid=487 comm="syz.4.63" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.853385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.862223][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.869318][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.942927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.951913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.978611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.996328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.037184][ T507] mmap: syz.3.69 (507): VmData 40828928 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 34.059725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.069485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.094591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.118323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.144004][ T433] device veth0_vlan entered promiscuous mode [ 34.161090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.183434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.227953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.244635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.274337][ T433] device veth1_macvtap entered promiscuous mode [ 34.303439][ T516] syz.3.73 uses obsolete (PF_INET,SOCK_PACKET) [ 34.314198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.324130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.337048][ T28] audit: type=1400 audit(1794357849.393:209): avc: denied { ioctl } for pid=510 comm="syz.3.71" path="socket:[16364]" dev="sockfs" ino=16364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.373627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.407814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.418299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.655370][ T28] audit: type=1400 audit(1794357849.803:210): avc: denied { read } for pid=500 comm="syz.4.67" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 34.702004][ T401] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.724145][ T28] audit: type=1400 audit(1794357849.803:211): avc: denied { open } for pid=500 comm="syz.4.67" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 34.939529][ T401] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 34.955564][ T401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.981342][ T401] usb 4-1: Product: syz [ 34.993787][ T401] usb 4-1: Manufacturer: syz [ 35.008626][ T401] usb 4-1: SerialNumber: syz [ 35.086879][ T401] usb 4-1: config 0 descriptor?? [ 35.728386][ T553] loop5: detected capacity change from 0 to 512 [ 35.735357][ T553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.754196][ T553] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.87: inode has both inline data and extents flags [ 35.767459][ T553] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.87: couldn't read orphan inode 15 (err -117) [ 35.779419][ T553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 36.060837][ T562] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.87: Directory hole found for htree leaf block 0 [ 36.550980][ T564] hub 5-0:1.0: USB hub found [ 36.555985][ T564] hub 5-0:1.0: 1 port detected [ 36.657218][ T433] EXT4-fs (loop5): unmounting filesystem. [ 36.810798][ T573] loop0: detected capacity change from 0 to 256 [ 36.817407][ T573] exfat: Unknown parameter 'ÿ18446744073709551615' [ 37.064310][ T568] device-mapper: table: 252:1: raid: unknown target type [ 37.071514][ T568] device-mapper: ioctl: error adding target to table [ 37.236631][ T582] loop4: detected capacity change from 0 to 256 [ 37.899496][ T401] usb 4-1: USB disconnect, device number 3 [ 37.927176][ T597] hub 8-0:1.0: USB hub found [ 37.932339][ T597] hub 8-0:1.0: 1 port detected [ 38.531821][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 38.531837][ T28] audit: type=1400 audit(1794357853.683:227): avc: denied { write } for pid=607 comm="syz.4.104" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.561859][ T608] random: crng reseeded on system resumption [ 38.612172][ T28] audit: type=1400 audit(1794357853.713:228): avc: denied { open } for pid=607 comm="syz.4.104" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.706118][ T612] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.713527][ T612] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.754748][ T28] audit: type=1400 audit(1794357853.813:229): avc: denied { write } for pid=609 comm="syz.5.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.068250][ T28] audit: type=1400 audit(1794357854.193:230): avc: denied { mount } for pid=618 comm="syz.0.108" name="/" dev="configfs" ino=10503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.627304][ T28] audit: type=1400 audit(1794357854.243:231): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.650441][ T28] audit: type=1326 audit(1794357854.263:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.4.112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b721a8f19 code=0x7ffc0000 [ 39.728666][ T641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 39.880351][ T28] audit: type=1326 audit(1794357854.263:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.4.112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b721a8f19 code=0x7ffc0000 [ 39.999087][ T28] audit: type=1326 audit(1794357854.273:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.4.112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8b721a8f19 code=0x7ffc0000 [ 40.023885][ T28] audit: type=1326 audit(1794357854.273:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.4.112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b721a8f19 code=0x7ffc0000 [ 40.048594][ T28] audit: type=1326 audit(1794357854.273:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.4.112" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b721a8f19 code=0x7ffc0000 [ 40.118746][ T658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.126'. [ 40.281183][ T675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 40.318943][ T675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 40.337094][ T677] device syzkaller0 entered promiscuous mode [ 40.360211][ T677] tipc: Started in network mode [ 40.365262][ T677] tipc: Node identity 9aca1be8a661, cluster identity 4711 [ 40.384781][ T677] tipc: Enabled bearer , priority 0 [ 40.394509][ T677] tipc: Resetting bearer [ 40.409088][ T676] tipc: Resetting bearer [ 40.423394][ T676] tipc: Disabling bearer [ 40.431463][ T691] loop0: detected capacity change from 0 to 128 [ 40.504558][ T715] device syzkaller0 entered promiscuous mode [ 40.559854][ T725] ip_tables: iptables: counters copy to user failed while replacing table [ 40.653329][ T730] Zero length message leads to an empty skb [ 42.920689][ T413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 43.440056][ T784] cgroup: fork rejected by pids controller in /syz1 [ 44.009729][ T840] loop3: detected capacity change from 0 to 512 [ 44.027539][ T840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.063417][ T846] loop5: detected capacity change from 0 to 512 [ 44.126867][ T846] EXT4-fs: dax option not supported [ 44.275916][ T840] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #3: comm syz.3.186: corrupted inode contents [ 44.297332][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.305231][ T840] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #3: comm syz.3.186: mark_inode_dirty error [ 44.326399][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 44.326414][ T28] audit: type=1400 audit(1794357859.473:246): avc: denied { ioctl } for pid=858 comm="syz.0.191" path="socket:[17348]" dev="sockfs" ino=17348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.358488][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 44.377219][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.404351][ T840] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #3: comm syz.3.186: corrupted inode contents [ 44.439782][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.460756][ T840] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.186: mark_inode_dirty error [ 44.506995][ T413] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.525127][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.545180][ T840] Quota error (device loop3): write_blk: dquota write failed [ 44.559825][ T872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.577041][ T840] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 44.601522][ T840] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.186: Failed to acquire dquot type 0 [ 44.636265][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.653768][ T841] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.668732][ T840] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.186: corrupted inode contents [ 44.686133][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.696033][ T840] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #16: comm syz.3.186: mark_inode_dirty error [ 44.697073][ T413] usb 5-1: Using ep0 maxpacket: 16 [ 44.712840][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.720796][ T840] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.186: corrupted inode contents [ 44.726789][ T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.744923][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.757557][ T892] FAULT_INJECTION: forcing a failure. [ 44.757557][ T892] name failslab, interval 1, probability 0, space 0, times 0 [ 44.770272][ T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.772557][ T840] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.186: mark_inode_dirty error [ 44.787121][ T413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 44.797092][ T892] CPU: 1 PID: 892 Comm: syz.0.201 Not tainted syzkaller #0 [ 44.811193][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 44.821048][ T413] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 44.821265][ T892] Call Trace: [ 44.821273][ T892] [ 44.836533][ T892] __dump_stack+0x21/0x24 [ 44.837061][ T413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.840890][ T892] dump_stack_lvl+0x110/0x170 [ 44.840914][ T892] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.858634][ T892] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 44.866037][ T892] dump_stack+0x15/0x24 [ 44.870227][ T892] should_fail_ex+0x3bf/0x510 [ 44.874932][ T892] ? anon_vma_fork+0x1f6/0x510 [ 44.879865][ T892] __should_failslab+0xac/0xf0 [ 44.881259][ T413] usb 5-1: config 0 descriptor?? [ 44.884668][ T892] should_failslab+0x9/0x20 [ 44.894135][ T892] kmem_cache_alloc+0x3b/0x320 [ 44.898946][ T892] ? anon_vma_fork+0xef/0x510 [ 44.903656][ T892] anon_vma_fork+0x1f6/0x510 [ 44.908284][ T892] copy_mm+0xcab/0x1ad0 [ 44.912467][ T892] ? copy_signal+0x630/0x630 [ 44.917081][ T892] ? _raw_spin_lock+0x94/0xf0 [ 44.921787][ T892] ? __init_rwsem+0x11b/0x1f0 [ 44.926502][ T892] ? copy_signal+0x4eb/0x630 [ 44.931115][ T892] copy_process+0x12d8/0x3500 [ 44.935568][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.935843][ T892] ? __cfi_futex_wake+0x10/0x10 [ 44.947220][ T892] ? idle_dummy+0x10/0x10 [ 44.947243][ T840] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.186: corrupted inode contents [ 44.951581][ T892] kernel_clone+0x22f/0x7f0 [ 44.967819][ T892] ? __cfi_kernel_clone+0x10/0x10 [ 44.972875][ T892] ? __kasan_check_write+0x14/0x20 [ 44.972915][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.978012][ T892] ? mutex_unlock+0x8f/0x230 [ 44.978040][ T892] __x64_sys_clone+0x193/0x200 [ 44.978073][ T892] ? __cfi___x64_sys_clone+0x10/0x10 [ 44.985998][ T840] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 44.989181][ T892] ? __kasan_check_write+0x14/0x20 [ 44.989211][ T892] ? fpregs_restore_userregs+0x128/0x260 [ 44.995628][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 44.999269][ T892] ? switch_fpu_return+0xe/0x10 [ 44.999300][ T892] x64_sys_call+0x990/0x9a0 [ 44.999325][ T892] do_syscall_64+0x4c/0xa0 [ 45.009172][ T840] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.186: corrupted inode contents [ 45.012987][ T892] ? clear_bhb_loop+0x30/0x80 [ 45.020065][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 45.025130][ T892] ? clear_bhb_loop+0x30/0x80 [ 45.030987][ T840] EXT4-fs error (device loop3): ext4_truncate:4327: inode #16: comm syz.3.186: mark_inode_dirty error [ 45.034508][ T892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.040131][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 45.050650][ T892] RIP: 0033:0x7fb6df7a8f19 [ 45.050673][ T892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.050689][ T892] RSP: 002b:00007fb6e066ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.050710][ T892] RAX: ffffffffffffffda RBX: 00007fb6dfa25fa0 RCX: 00007fb6df7a8f19 [ 45.050726][ T892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 45.057142][ T840] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 45.062000][ T892] RBP: 00007fb6df837f6d R08: 0000000000000000 R09: 0000000000000000 [ 45.062019][ T892] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 45.067762][ T840] EXT4-fs (loop3): Remounting filesystem read-only [ 45.077646][ T892] R13: 00007fb6dfa26038 R14: 00007fb6dfa25fa0 R15: 00007ffef834e968 [ 45.077671][ T892] [ 45.190488][ T840] EXT4-fs (loop3): 1 truncate cleaned up [ 45.196454][ T840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.206132][ T840] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.249356][ T287] EXT4-fs (loop3): unmounting filesystem. [ 45.277849][ T905] process 'syz.3.207' launched '/dev/fd/3' with NULL argv: empty string added [ 45.287751][ T28] audit: type=1400 audit(1794357860.443:247): avc: denied { execute_no_trans } for pid=904 comm="syz.3.207" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.326024][ T910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.209'. [ 45.336826][ T910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=910 comm=syz.0.209 [ 45.357866][ T413] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 45.366799][ T413] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 45.379030][ T28] audit: type=1400 audit(1794357860.533:248): avc: denied { ioctl } for pid=916 comm="syz.0.213" path="socket:[18081]" dev="sockfs" ino=18081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.403734][ T413] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 45.412009][ T413] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 45.426624][ T413] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 45.434293][ T28] audit: type=1400 audit(1794357860.563:249): avc: denied { unmount } for pid=914 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 45.455218][ T413] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 45.530210][ T28] audit: type=1400 audit(1794357860.673:250): avc: denied { setopt } for pid=924 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.560853][ T401] usb 5-1: USB disconnect, device number 4 [ 46.029293][ T936] fido_id[936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 46.401765][ T961] loop4: detected capacity change from 0 to 1024 [ 46.444923][ T961] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.232: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.458487][ T961] EXT4-fs (loop4): Remounting filesystem read-only [ 46.465139][ T961] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.232: Invalid inode bitmap blk 0 in block_group 0 [ 46.485686][ T961] EXT4-fs (loop4): Remounting filesystem read-only [ 46.492553][ T961] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 46.501414][ T961] EXT4-fs (loop4): Remounting filesystem read-only [ 46.509592][ T961] EXT4-fs (loop4): 1 orphan inode deleted [ 46.515427][ T961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.535334][ T291] EXT4-fs (loop4): unmounting filesystem. [ 47.036779][ T28] audit: type=1326 audit(1794357862.183:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.1.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9f7a8f19 code=0x7ffc0000 [ 47.072001][ T28] audit: type=1400 audit(1794357862.223:252): avc: denied { mounton } for pid=983 comm="syz.3.242" path="/33/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 47.124320][ T988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 47.133448][ T526] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 47.141022][ T28] audit: type=1326 audit(1794357862.243:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=981 comm="syz.1.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9f7a8f19 code=0x7ffc0000 [ 47.213280][ T992] netlink: 'syz.1.245': attribute type 12 has an invalid length. [ 47.368931][ T526] usb 5-1: config 0 interface 0 has no altsetting 0 [ 47.379003][ T526] usb 5-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 47.425436][ T526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.491853][ T526] usb 5-1: config 0 descriptor?? [ 48.042349][ T526] wacom 0003:056A:0014.0003: unbalanced collection at end of report description [ 48.052082][ T526] wacom 0003:056A:0014.0003: parse failed [ 48.058091][ T526] wacom: probe of 0003:056A:0014.0003 failed with error -22 [ 48.147008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 48.262042][ T24] usb 5-1: USB disconnect, device number 5 [ 48.554058][ T1037] ip_tables: iptables: counters copy to user failed while replacing table [ 49.273355][ T1056] FAULT_INJECTION: forcing a failure. [ 49.273355][ T1056] name failslab, interval 1, probability 0, space 0, times 0 [ 49.306364][ T1056] CPU: 1 PID: 1056 Comm: syz.3.269 Not tainted syzkaller #0 [ 49.313714][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.323790][ T1056] Call Trace: [ 49.327089][ T1056] [ 49.330033][ T1056] __dump_stack+0x21/0x24 [ 49.334396][ T1056] dump_stack_lvl+0x110/0x170 [ 49.339088][ T1056] ? __cfi_dump_stack_lvl+0x8/0x8 [ 49.344128][ T1056] ? __cfi_do_futex+0x10/0x10 [ 49.348824][ T1056] ? __kasan_check_write+0x14/0x20 [ 49.353956][ T1056] dump_stack+0x15/0x24 [ 49.358143][ T1056] should_fail_ex+0x3bf/0x510 [ 49.362839][ T1056] ? getname_flags+0xba/0x510 [ 49.367552][ T1056] __should_failslab+0xac/0xf0 [ 49.372341][ T1056] should_failslab+0x9/0x20 [ 49.376868][ T1056] kmem_cache_alloc+0x3b/0x320 [ 49.381663][ T1056] getname_flags+0xba/0x510 [ 49.386178][ T1056] __x64_sys_mkdirat+0x7c/0xa0 [ 49.390961][ T1056] x64_sys_call+0x73d/0x9a0 [ 49.395491][ T1056] do_syscall_64+0x4c/0xa0 [ 49.399923][ T1056] ? clear_bhb_loop+0x30/0x80 [ 49.404622][ T1056] ? clear_bhb_loop+0x30/0x80 [ 49.409316][ T1056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.415226][ T1056] RIP: 0033:0x7fee545a8f19 [ 49.419656][ T1056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.439280][ T1056] RSP: 002b:00007fee5549e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 49.447718][ T1056] RAX: ffffffffffffffda RBX: 00007fee54825fa0 RCX: 00007fee545a8f19 [ 49.455735][ T1056] RDX: 0000000000000181 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 49.463721][ T1056] RBP: 00007fee54637f6d R08: 0000000000000000 R09: 0000000000000000 [ 49.471707][ T1056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.479690][ T1056] R13: 00007fee54826038 R14: 00007fee54825fa0 R15: 00007ffd8deba888 [ 49.487681][ T1056] [ 49.870660][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 49.870702][ T28] audit: type=1400 audit(1794357865.023:277): avc: denied { setopt } for pid=1071 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.900911][ T28] audit: type=1400 audit(1794357865.023:278): avc: denied { search } for pid=1046 comm="syz.5.266" name="sched_switch" dev="tracefs" ino=30222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 49.937876][ T1072] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=1072 comm=syz.4.276 [ 49.986993][ T417] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 50.187028][ T417] usb 4-1: Using ep0 maxpacket: 32 [ 50.194223][ T417] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.282849][ T417] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 50.292001][ T417] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 50.799490][ T417] usb 4-1: config 14 has no interface number 0 [ 50.806427][ T417] usb 4-1: config 14 has no interface number 1 [ 50.816295][ T417] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 50.827459][ T417] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 50.838645][ T417] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 50.857113][ T417] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.872746][ T417] usb 4-1: config 14 interface 57 has no altsetting 0 [ 51.347675][ T1089] loop0: detected capacity change from 0 to 131072 [ 51.358408][ T417] usb 4-1: config 14 interface 228 has no altsetting 0 [ 51.368628][ T417] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 51.379027][ T852] udevd[852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 51.397744][ T1089] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 51.405662][ T1089] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 51.414028][ T1089] F2FS-fs (loop0): Test dummy encryption mode enabled [ 51.421763][ T1089] F2FS-fs (loop0): invalid crc value [ 51.431583][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.451866][ T852] udevd[852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 51.461838][ T1089] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.496336][ T1089] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 51.508132][ T1089] F2FS-fs (loop0): Start checkpoint disabled! [ 51.514867][ T1089] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 51.532793][ T1089] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 51.540019][ T1089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 51.548144][ T417] usb 4-1: Product: syz [ 51.552349][ T417] usb 4-1: Manufacturer: syz [ 51.566356][ T28] audit: type=1400 audit(1794357866.713:279): avc: denied { create } for pid=1088 comm="syz.0.282" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.607153][ T1089] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 51.622953][ T417] usb 4-1: SerialNumber: syz [ 51.663601][ T28] audit: type=1400 audit(1794357866.763:280): avc: denied { read append open } for pid=1088 comm="syz.0.282" path="/62/file0/memory.swap.current" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.691568][ T315] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 51.747321][ T28] audit: type=1400 audit(1794357866.763:281): avc: denied { ioctl } for pid=1088 comm="syz.0.282" path="/62/file0/memory.swap.current" dev="loop0" ino=4 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.777173][ T852] udevd[852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 51.798835][ T852] udevd[852]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 51.836150][ T28] audit: type=1400 audit(1794357866.883:282): avc: denied { create } for pid=1105 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.855659][ T28] audit: type=1400 audit(1794357866.883:283): avc: denied { setopt } for pid=1105 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.386978][ T526] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.686154][ T526] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.697390][ T526] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 53.721533][ T526] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 53.745275][ T526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.762266][ T526] usb 1-1: Product: syz [ 53.771759][ T526] usb 1-1: Manufacturer: syz [ 53.783946][ T526] usb 1-1: SerialNumber: syz [ 54.001565][ T526] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.041802][ T1176] FAULT_INJECTION: forcing a failure. [ 54.041802][ T1176] name failslab, interval 1, probability 0, space 0, times 0 [ 54.055159][ T1176] CPU: 1 PID: 1176 Comm: syz.5.313 Not tainted syzkaller #0 [ 54.062491][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.072574][ T1176] Call Trace: [ 54.075882][ T1176] [ 54.078833][ T1176] __dump_stack+0x21/0x24 [ 54.083197][ T1176] dump_stack_lvl+0x110/0x170 [ 54.087901][ T1176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.092963][ T1176] ? kasan_save_alloc_info+0x1f/0x30 [ 54.098290][ T1176] ? bpf_prog_select_runtime+0x89c/0xbb0 [ 54.103978][ T1176] ? bpf_prog_create_from_user+0x2c5/0x420 [ 54.109824][ T1176] ? do_seccomp+0x801/0xec0 [ 54.114363][ T1176] ? __x64_sys_seccomp+0x7b/0x90 [ 54.119335][ T1176] ? do_syscall_64+0x4c/0xa0 [ 54.124008][ T1176] dump_stack+0x15/0x24 [ 54.128199][ T1176] should_fail_ex+0x3bf/0x510 [ 54.132904][ T1176] __should_failslab+0xac/0xf0 [ 54.137695][ T1176] should_failslab+0x9/0x20 [ 54.142227][ T1176] __kmem_cache_alloc_node+0x3d/0x2d0 [ 54.147629][ T1176] ? kvmalloc_node+0x28a/0x460 [ 54.152507][ T1176] ? kvmalloc_node+0x28a/0x460 [ 54.157296][ T1176] __kmalloc_node+0xa2/0x1e0 [ 54.161909][ T1176] kvmalloc_node+0x28a/0x460 [ 54.166529][ T1176] ? __cfi_kvmalloc_node+0x10/0x10 [ 54.171666][ T1176] ? __kasan_kmalloc+0x60/0xb0 [ 54.176459][ T1176] ? bpf_int_jit_compile+0x238/0xcb00 [ 54.181855][ T1176] ? kmalloc_trace+0x40/0xb0 [ 54.186473][ T1176] bpf_int_jit_compile+0x474/0xcb00 [ 54.191695][ T1176] ? __kmem_cache_free+0xb7/0x1b0 [ 54.196752][ T1176] ? ____kasan_slab_free+0x13d/0x180 [ 54.202069][ T1176] ? __kasan_slab_free+0x11/0x20 [ 54.207057][ T1176] ? __kmem_cache_free+0xb7/0x1b0 [ 54.212121][ T1176] ? kfree+0x6f/0xf0 [ 54.216155][ T1176] ? bpf_convert_filter+0x509a/0x5220 [ 54.221557][ T1176] ? ____kasan_slab_free+0x132/0x180 [ 54.226897][ T1176] ? __kasan_slab_free+0x11/0x20 [ 54.231861][ T1176] ? kasan_set_track+0x4b/0x70 [ 54.236647][ T1176] ? __cfi_bpf_int_jit_compile+0x10/0x10 [ 54.242310][ T1176] ? sk_filter_release_rcu+0x110/0x110 [ 54.247807][ T1176] bpf_prog_select_runtime+0x89c/0xbb0 [ 54.253298][ T1176] ? kmemdup+0x46/0x60 [ 54.257398][ T1176] ? memcpy+0x56/0x70 [ 54.261424][ T1176] ? bpf_prog_realloc+0x185/0x200 [ 54.266498][ T1176] bpf_prepare_filter+0x101c/0x11c0 [ 54.271722][ T1176] ? __cfi_seccomp_check_filter+0x10/0x10 [ 54.277467][ T1176] ? bpf_prog_create+0x1f0/0x1f0 [ 54.282440][ T1176] bpf_prog_create_from_user+0x2c5/0x420 [ 54.288117][ T1176] ? __cfi_seccomp_check_filter+0x10/0x10 [ 54.293866][ T1176] do_seccomp+0x801/0xec0 [ 54.298223][ T1176] ? prctl_set_seccomp+0x60/0x60 [ 54.303189][ T1176] ? __this_cpu_preempt_check+0x13/0x20 [ 54.308764][ T1176] ? xfd_validate_state+0x70/0x150 [ 54.313918][ T1176] ? fpregs_restore_userregs+0x128/0x260 [ 54.319586][ T1176] __x64_sys_seccomp+0x7b/0x90 [ 54.324390][ T1176] x64_sys_call+0x721/0x9a0 [ 54.328931][ T1176] do_syscall_64+0x4c/0xa0 [ 54.333491][ T1176] ? clear_bhb_loop+0x30/0x80 [ 54.338230][ T1176] ? clear_bhb_loop+0x30/0x80 [ 54.342942][ T1176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.348866][ T1176] RIP: 0033:0x7fc63eba8f19 [ 54.353325][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.372958][ T1176] RSP: 002b:00007fc63f98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 54.381413][ T1176] RAX: ffffffffffffffda RBX: 00007fc63ee25fa0 RCX: 00007fc63eba8f19 [ 54.389429][ T1176] RDX: 00002000000000c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 54.397420][ T1176] RBP: 00007fc63ec37f6d R08: 0000000000000000 R09: 0000000000000000 [ 54.405409][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.413434][ T1176] R13: 00007fc63ee26038 R14: 00007fc63ee25fa0 R15: 00007ffe20a20a48 [ 54.421442][ T1176] [ 54.437265][ T417] usb 4-1: USB disconnect, device number 4 [ 54.476210][ T1180] loop3: detected capacity change from 0 to 128 [ 54.496433][ T853] udevd[853]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 54.507204][ T1180] FAULT_INJECTION: forcing a failure. [ 54.507204][ T1180] name failslab, interval 1, probability 0, space 0, times 0 [ 54.527209][ T1180] CPU: 1 PID: 1180 Comm: syz.3.314 Not tainted syzkaller #0 [ 54.534544][ T1180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.544623][ T1180] Call Trace: [ 54.547918][ T1180] [ 54.550863][ T1180] __dump_stack+0x21/0x24 [ 54.555219][ T1180] dump_stack_lvl+0x110/0x170 [ 54.559920][ T1180] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.564968][ T1180] dump_stack+0x15/0x24 [ 54.569141][ T1180] should_fail_ex+0x3bf/0x510 [ 54.573849][ T1180] ? security_inode_alloc+0x33/0x120 [ 54.579170][ T1180] __should_failslab+0xac/0xf0 [ 54.583974][ T1180] should_failslab+0x9/0x20 [ 54.588501][ T1180] kmem_cache_alloc+0x3b/0x320 [ 54.593309][ T1180] security_inode_alloc+0x33/0x120 [ 54.598460][ T1180] inode_init_always+0x6ee/0x950 [ 54.603428][ T1180] new_inode_pseudo+0xa2/0x1f0 [ 54.608230][ T1180] new_inode+0x28/0x1e0 [ 54.612417][ T1180] fat_build_inode+0x201/0x3d0 [ 54.617214][ T1180] vfat_lookup+0x335/0x590 [ 54.621651][ T1180] ? slab_pre_alloc_hook+0x30/0x1d0 [ 54.626882][ T1180] ? __cfi_vfat_lookup+0x10/0x10 [ 54.631843][ T1180] ? _raw_spin_lock+0x94/0xf0 [ 54.636540][ T1180] ? __cfi__raw_spin_lock+0x10/0x10 [ 54.641756][ T1180] ? __d_alloc+0x4d5/0x6d0 [ 54.646212][ T1180] ? d_alloc+0x1f4/0x260 [ 54.650495][ T1180] lookup_one_qstr_excl+0x125/0x270 [ 54.655727][ T1180] filename_create+0x23d/0x440 [ 54.660523][ T1180] ? kern_path_create+0x1b0/0x1b0 [ 54.665583][ T1180] ? __check_object_size+0x45a/0x600 [ 54.670896][ T1180] do_mknodat+0xdb/0x790 [ 54.675177][ T1180] ? getname_flags+0x205/0x510 [ 54.679978][ T1180] __x64_sys_mknodat+0xa9/0xc0 [ 54.684780][ T1180] x64_sys_call+0x220/0x9a0 [ 54.689321][ T1180] do_syscall_64+0x4c/0xa0 [ 54.693766][ T1180] ? clear_bhb_loop+0x30/0x80 [ 54.698484][ T1180] ? clear_bhb_loop+0x30/0x80 [ 54.703200][ T1180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.709131][ T1180] RIP: 0033:0x7fee545a8f19 [ 54.713572][ T1180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.733211][ T1180] RSP: 002b:00007fee5549e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 54.741691][ T1180] RAX: ffffffffffffffda RBX: 00007fee54825fa0 RCX: 00007fee545a8f19 [ 54.749698][ T1180] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 54.757699][ T1180] RBP: 00007fee54637f6d R08: 0000000000000000 R09: 0000000000000000 [ 54.765698][ T1180] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000000 [ 54.773719][ T1180] R13: 00007fee54826038 R14: 00007fee54825fa0 R15: 00007ffd8deba888 [ 54.781731][ T1180] [ 54.804429][ T853] udevd[853]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 54.819242][ T853] udevd[853]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 55.230017][ T526] usb 1-1: failed to enable PITCH for EP 0x82 [ 55.236699][ T526] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 55.245671][ T526] usb 1-1: clock source 0 is not valid, cannot use [ 55.257411][ T526] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 55.269257][ T526] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 55.307432][ T526] usb 1-1: USB disconnect, device number 2 [ 55.866551][ T1248] FAULT_INJECTION: forcing a failure. [ 55.866551][ T1248] name failslab, interval 1, probability 0, space 0, times 0 [ 55.882801][ T1248] CPU: 0 PID: 1248 Comm: syz.3.338 Not tainted syzkaller #0 [ 55.890139][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.900216][ T1248] Call Trace: [ 55.903525][ T1248] [ 55.906517][ T1248] __dump_stack+0x21/0x24 [ 55.910880][ T1248] dump_stack_lvl+0x110/0x170 [ 55.915593][ T1248] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.920665][ T1248] dump_stack+0x15/0x24 [ 55.924878][ T1248] should_fail_ex+0x3bf/0x510 [ 55.929619][ T1248] __should_failslab+0xac/0xf0 [ 55.934425][ T1248] should_failslab+0x9/0x20 [ 55.939003][ T1248] kmem_cache_alloc_node+0x42/0x330 [ 55.944241][ T1248] ? __alloc_skb+0xe8/0x4a0 [ 55.948781][ T1248] __alloc_skb+0xe8/0x4a0 [ 55.953147][ T1248] netlink_ack+0x373/0x1160 [ 55.957696][ T1248] ? __cfi_avc_has_perm+0x10/0x10 [ 55.962768][ T1248] ? __cfi_netlink_ack+0x10/0x10 [ 55.967748][ T1248] ? selinux_nlmsg_lookup+0x233/0x440 [ 55.973158][ T1248] netlink_rcv_skb+0x27e/0x450 [ 55.977967][ T1248] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 55.983465][ T1248] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 55.988790][ T1248] ? __netlink_lookup+0x387/0x3b0 [ 55.993857][ T1248] xfrm_netlink_rcv+0x72/0x90 [ 55.998565][ T1248] netlink_unicast+0x8c1/0xa60 [ 56.003370][ T1248] netlink_sendmsg+0x8b9/0xbd0 [ 56.008173][ T1248] ? __cfi_netlink_sendmsg+0x10/0x10 [ 56.013502][ T1248] ? security_socket_sendmsg+0x93/0xb0 [ 56.019000][ T1248] ? __cfi_netlink_sendmsg+0x10/0x10 [ 56.024343][ T1248] ____sys_sendmsg+0x5fb/0x9c0 [ 56.029158][ T1248] ? __sys_sendmsg_sock+0x40/0x40 [ 56.034209][ T1248] ? import_iovec+0x7c/0xb0 [ 56.038745][ T1248] ___sys_sendmsg+0x2a2/0x360 [ 56.043452][ T1248] ? __sys_sendmsg+0x290/0x290 [ 56.048247][ T1248] ? security_file_alloc+0x33/0x130 [ 56.053471][ T1248] ? percpu_counter_add_batch+0x13c/0x160 [ 56.059227][ T1248] ? __fdget+0x19c/0x220 [ 56.063532][ T1248] __x64_sys_sendmsg+0x20d/0x2e0 [ 56.068500][ T1248] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 56.074002][ T1248] ? __kasan_check_write+0x14/0x20 [ 56.079146][ T1248] ? fpregs_restore_userregs+0x128/0x260 [ 56.084808][ T1248] ? switch_fpu_return+0xe/0x10 [ 56.089688][ T1248] x64_sys_call+0x171/0x9a0 [ 56.094220][ T1248] do_syscall_64+0x4c/0xa0 [ 56.098660][ T1248] ? clear_bhb_loop+0x30/0x80 [ 56.103380][ T1248] ? clear_bhb_loop+0x30/0x80 [ 56.108090][ T1248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.114022][ T1248] RIP: 0033:0x7fee545a8f19 [ 56.118462][ T1248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.138128][ T1248] RSP: 002b:00007fee5549e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.146571][ T1248] RAX: ffffffffffffffda RBX: 00007fee54825fa0 RCX: 00007fee545a8f19 [ 56.154574][ T1248] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 56.162574][ T1248] RBP: 00007fee54637f6d R08: 0000000000000000 R09: 0000000000000000 [ 56.170576][ T1248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.178575][ T1248] R13: 00007fee54826038 R14: 00007fee54825fa0 R15: 00007ffd8deba888 [ 56.186578][ T1248] [ 56.705427][ T1277] loop5: detected capacity change from 0 to 128 [ 56.713311][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 57.027060][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 57.564322][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 57.573977][ T1287] overlayfs: failed to clone lowerpath [ 57.581780][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 57.647136][ T1045] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 57.812578][ T28] audit: type=1400 audit(1794357872.963:284): avc: denied { write } for pid=1304 comm="syz.0.354" name="psched" dev="proc" ino=4026532398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.838564][ T1045] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.855001][ T1045] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 57.882306][ T1045] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 57.901858][ T1045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.917364][ T1045] usb 4-1: Product: syz [ 57.921613][ T1045] usb 4-1: Manufacturer: syz [ 57.926234][ T1045] usb 4-1: SerialNumber: syz [ 58.144552][ T1045] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 58.276998][ T598] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.468181][ T598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.479186][ T598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.489000][ T598] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 58.498102][ T598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.506848][ T598] usb 6-1: config 0 descriptor?? [ 58.643240][ T1348] loop4: detected capacity change from 0 to 128 [ 58.649993][ T1348] EXT4-fs: Ignoring removed bh option [ 58.657055][ T1348] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.657065][ T854] udevd[854]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 58.661214][ T854] udevd[854]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 58.670561][ T1348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.690056][ T1348] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.703126][ T1348] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 58.714516][ T28] audit: type=1400 audit(1794357873.873:285): avc: denied { mounton } for pid=1347 comm="syz.4.376" path="/75/mnt/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.737119][ T28] audit: type=1400 audit(1794357873.873:286): avc: denied { write } for pid=1347 comm="syz.4.376" name="bus" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.759144][ T28] audit: type=1400 audit(1794357873.873:287): avc: denied { add_name } for pid=1347 comm="syz.4.376" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.760718][ T291] EXT4-fs (loop4): unmounting filesystem. [ 58.779542][ T28] audit: type=1400 audit(1794357873.873:288): avc: denied { setattr } for pid=1347 comm="syz.4.376" name="work" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.806776][ T28] audit: type=1400 audit(1794357873.873:289): avc: denied { write } for pid=1347 comm="syz.4.376" path=2F202864656C6574656429 dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.830200][ T28] audit: type=1400 audit(1794357873.873:290): avc: denied { remove_name } for pid=1347 comm="syz.4.376" name="#3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.831985][ T854] udevd[854]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 58.852170][ T28] audit: type=1400 audit(1794357873.873:291): avc: denied { rename } for pid=1347 comm="syz.4.376" name="#3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.865682][ T854] udevd[854]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 58.883330][ T28] audit: type=1400 audit(1794357873.873:292): avc: denied { unlink } for pid=1347 comm="syz.4.376" name="#3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.914653][ T598] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 58.922159][ T598] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 58.934183][ T598] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 58.942396][ T598] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 58.959928][ T1045] usb 4-1: failed to enable PITCH for EP 0x82 [ 58.966395][ T1045] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 58.975070][ T1045] usb 4-1: clock source 0 is not valid, cannot use [ 58.981858][ T1045] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 58.988511][ T1045] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 59.002120][ T1045] usb 4-1: USB disconnect, device number 5 [ 59.016993][ T598] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 59.033374][ T1353] udevd[1353]: open /dev/null failed: Not a directory [ 59.115593][ T28] audit: type=1400 audit(1794357874.263:293): avc: denied { append } for pid=1321 comm="syz.5.365" name="hidraw0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.117809][ T1285] usb 6-1: USB disconnect, device number 2 [ 59.145580][ T1285] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 59.208394][ T854] udevd[854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.187040][ T1285] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.407934][ T1285] usb 6-1: unable to get BOS descriptor or descriptor too short [ 60.424630][ T1285] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 60.447264][ T1285] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 60.472341][ T1285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.498854][ T1285] usb 6-1: Product: syz [ 60.514415][ T1285] usb 6-1: Manufacturer: syz [ 60.529839][ T1285] usb 6-1: SerialNumber: syz [ 60.772143][ T1285] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 60.917120][ T40] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.096995][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 61.103936][ T40] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 61.112738][ T40] usb 1-1: config 0 has no interface number 0 [ 61.119535][ T40] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 61.130793][ T40] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 61.142163][ T40] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 61.156111][ T40] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 61.166129][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.293674][ T40] usb 1-1: config 0 descriptor?? [ 61.503671][ T24] usb 1-1: USB disconnect, device number 3 [ 61.590349][ T1432] FAULT_INJECTION: forcing a failure. [ 61.590349][ T1432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.620653][ T1432] CPU: 1 PID: 1432 Comm: syz.4.408 Not tainted syzkaller #0 [ 61.628030][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.638194][ T1432] Call Trace: [ 61.641519][ T1432] [ 61.644489][ T1432] __dump_stack+0x21/0x24 [ 61.648893][ T1432] dump_stack_lvl+0x110/0x170 [ 61.653619][ T1432] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.658705][ T1432] dump_stack+0x15/0x24 [ 61.662903][ T1432] should_fail_ex+0x3bf/0x510 [ 61.667628][ T1432] should_fail+0xb/0x10 [ 61.671827][ T1432] should_fail_usercopy+0x1a/0x20 [ 61.676889][ T1432] _copy_from_user+0x1e/0xc0 [ 61.681520][ T1432] __sys_bpf+0x2a0/0x850 [ 61.685819][ T1432] ? bpf_link_show_fdinfo+0x330/0x330 [ 61.691242][ T1432] ? fpregs_restore_userregs+0x128/0x260 [ 61.696923][ T1432] __x64_sys_bpf+0x7c/0x90 [ 61.701383][ T1432] x64_sys_call+0x488/0x9a0 [ 61.705936][ T1432] do_syscall_64+0x4c/0xa0 [ 61.710387][ T1432] ? clear_bhb_loop+0x30/0x80 [ 61.715098][ T1432] ? clear_bhb_loop+0x30/0x80 [ 61.719805][ T1432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.725752][ T1432] RIP: 0033:0x7f8b721a8f19 [ 61.730196][ T1432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.749839][ T1432] RSP: 002b:00007f8b7307f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.758293][ T1432] RAX: ffffffffffffffda RBX: 00007f8b72425fa0 RCX: 00007f8b721a8f19 [ 61.766297][ T1432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 61.774296][ T1432] RBP: 00007f8b72237f6d R08: 0000000000000000 R09: 0000000000000000 [ 61.782316][ T1432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.790335][ T1432] R13: 00007f8b72426038 R14: 00007f8b72425fa0 R15: 00007fff1c410a98 [ 61.798343][ T1432] [ 61.808139][ T1285] usb 6-1: failed to enable PITCH for EP 0x82 [ 61.817025][ T1285] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 61.902834][ T1285] usb 6-1: clock source 0 is not valid, cannot use [ 61.910182][ T1285] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 61.919894][ T1285] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 61.929645][ T1432] overlayfs: workdir and upperdir must be separate subtrees [ 61.994062][ T1285] usb 6-1: USB disconnect, device number 3 [ 62.329475][ T1445] loop4: detected capacity change from 0 to 256 [ 62.339046][ T853] udevd[853]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 62.355357][ T1445] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 62.372509][ T1445] exFAT-fs (loop4): hint_cluster is invalid (17) [ 62.389258][ T853] udevd[853]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 62.405947][ T853] udevd[853]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 62.475033][ T1458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 62.656568][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 62.829818][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 62.900805][ T1504] tipc: Started in network mode [ 62.905920][ T1504] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 62.915444][ T1504] tipc: Enabled bearer , priority 0 [ 62.956547][ T1510] loop3: detected capacity change from 0 to 1024 [ 62.964513][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 62.973921][ T1510] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 62.973921][ T1510] [ 63.087005][ T417] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.268139][ T417] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 63.277425][ T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.289274][ T417] usb 5-1: config 0 descriptor?? [ 63.335792][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 63.354666][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 63.364010][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 63.364025][ T28] audit: type=1400 audit(1794357878.513:305): avc: denied { read write } for pid=1511 comm="syz.3.442" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.395561][ T28] audit: type=1400 audit(1794357878.543:306): avc: denied { open } for pid=1511 comm="syz.3.442" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 64.394534][ T19] tipc: Node number set to 43690 [ 64.437173][ T1542] FAULT_INJECTION: forcing a failure. [ 64.437173][ T1542] name failslab, interval 1, probability 0, space 0, times 0 [ 64.857177][ T28] audit: type=1400 audit(1794357879.703:307): avc: denied { bind } for pid=1544 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.870436][ T1542] CPU: 1 PID: 1542 Comm: syz.5.452 Not tainted syzkaller #0 [ 64.870472][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.870488][ T1542] Call Trace: [ 64.870495][ T1542] [ 64.870505][ T1542] __dump_stack+0x21/0x24 [ 64.870536][ T1542] dump_stack_lvl+0x110/0x170 [ 64.870561][ T1542] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.870587][ T1542] dump_stack+0x15/0x24 [ 64.870609][ T1542] should_fail_ex+0x3bf/0x510 [ 64.870637][ T1542] ? prepare_creds+0x2f/0x610 [ 64.870674][ T1542] __should_failslab+0xac/0xf0 [ 64.870707][ T1542] should_failslab+0x9/0x20 [ 64.870731][ T1542] kmem_cache_alloc+0x3b/0x320 [ 64.870764][ T1542] prepare_creds+0x2f/0x610 [ 64.870787][ T1542] ? kmalloc_trace+0x40/0xb0 [ 64.870811][ T1542] ovl_fill_super+0x1d5/0x4790 [ 64.870836][ T1542] ? xas_store+0xb65/0x17d0 [ 64.870867][ T1542] ? xas_nomem+0x6b/0x1f0 [ 64.870895][ T1542] ? ida_alloc_range+0x808/0x840 [ 64.870921][ T1542] ? __cfi_ovl_fill_super+0x10/0x10 [ 64.870946][ T1542] ? rwsem_write_trylock+0x136/0x300 [ 64.870969][ T1542] ? __cfi_ida_alloc_range+0x10/0x10 [ 64.870992][ T1542] ? clear_nonspinnable+0x60/0x60 [ 64.871015][ T1542] ? up_write+0x7b/0x290 [ 64.871068][ T1542] ? register_shrinker_prepared+0xd7/0x100 [ 64.871105][ T1542] ? __cfi_set_anon_super+0x10/0x10 [ 64.871141][ T1542] ? __cfi_ovl_fill_super+0x10/0x10 [ 64.871167][ T1542] mount_nodev+0x6a/0x100 [ 64.871189][ T1542] ovl_mount+0x2c/0x40 [ 64.871213][ T1542] legacy_get_tree+0xfe/0x1a0 [ 64.871249][ T1542] ? __cfi_ovl_mount+0x10/0x10 [ 64.871275][ T1542] vfs_get_tree+0x9a/0x270 [ 64.871298][ T1542] do_new_mount+0x251/0xb40 [ 64.871320][ T1542] ? security_capable+0x99/0xc0 [ 64.871352][ T1542] path_mount+0x640/0xfd0 [ 64.871376][ T1542] __se_sys_mount+0x320/0x390 [ 64.871399][ T1542] ? __this_cpu_preempt_check+0x13/0x20 [ 64.871449][ T1542] ? __x64_sys_mount+0xd0/0xd0 [ 64.871474][ T1542] ? __kasan_check_write+0x14/0x20 [ 64.871500][ T1542] ? fpregs_restore_userregs+0x128/0x260 [ 64.871531][ T1542] __x64_sys_mount+0xbf/0xd0 [ 64.871555][ T1542] x64_sys_call+0x65d/0x9a0 [ 64.871584][ T1542] do_syscall_64+0x4c/0xa0 [ 64.871607][ T1542] ? clear_bhb_loop+0x30/0x80 [ 64.871638][ T1542] ? clear_bhb_loop+0x30/0x80 [ 64.871669][ T1542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.871698][ T1542] RIP: 0033:0x7fc63eba8f19 [ 64.871719][ T1542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.871740][ T1542] RSP: 002b:00007fc63f98e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.871769][ T1542] RAX: ffffffffffffffda RBX: 00007fc63ee25fa0 RCX: 00007fc63eba8f19 [ 64.871787][ T1542] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 64.871804][ T1542] RBP: 00007fc63ec37f6d R08: 0000200000000700 R09: 0000000000000000 [ 64.871823][ T1542] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 64.871839][ T1542] R13: 00007fc63ee26038 R14: 00007fc63ee25fa0 R15: 00007ffe20a20a48 [ 64.871863][ T1542] [ 65.315035][ T28] audit: type=1400 audit(1794357880.463:308): avc: denied { create } for pid=1551 comm="syz.5.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.832280][ T598] usb 5-1: USB disconnect, device number 6 [ 65.913625][ T1602] ip_tables: iptables: counters copy to user failed while replacing table [ 65.977272][ T19] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 66.063005][ T28] audit: type=1400 audit(1794357881.213:309): avc: denied { ioctl } for pid=1605 comm="syz.4.479" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.115447][ T1614] 9pnet_fd: Insufficient options for proto=fd [ 66.341707][ T1616] fuse: Unknown parameter 'blksi' [ 66.416549][ T1623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 66.488896][ T19] usb 4-1: not running at top speed; connect to a high speed hub [ 66.506788][ T1627] 9pnet_fd: Insufficient options for proto=fd [ 67.000838][ T19] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 67.017265][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.440817][ T19] usb 4-1: USB disconnect, device number 6 [ 68.028940][ T28] audit: type=1400 audit(1794357883.183:310): avc: denied { nlmsg_read } for pid=1647 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 68.059141][ T28] audit: type=1400 audit(1794357883.183:311): avc: denied { accept } for pid=1640 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.109524][ T1651] loop4: detected capacity change from 0 to 512 [ 68.117680][ T852] udevd[852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 68.137955][ T1651] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.180258][ T1646] loop5: detected capacity change from 0 to 40427 [ 68.200251][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 68.209112][ T1646] F2FS-fs (loop5): Unrecognized mount option "./mnt" or missing value [ 68.268400][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 68.288750][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 68.297705][ T598] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 68.487702][ T598] usb 4-1: not running at top speed; connect to a high speed hub [ 68.499997][ T598] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 68.509980][ T598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.518581][ T598] usb 4-1: Product: syz [ 68.523491][ T598] usb 4-1: Manufacturer: syz [ 68.533305][ T598] usb 4-1: SerialNumber: syz [ 68.597624][ T1651] syz.4.491: attempt to access beyond end of device [ 68.597624][ T1651] loop4: rw=2049, sector=6080, nr_sectors = 4144 limit=512 [ 68.643428][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.694038][ T1651] syz.4.491: attempt to access beyond end of device [ 68.694038][ T1651] loop4: rw=524288, sector=752, nr_sectors = 256 limit=512 [ 68.708528][ T1651] syz.4.491: attempt to access beyond end of device [ 68.708528][ T1651] loop4: rw=524288, sector=1008, nr_sectors = 256 limit=512 [ 68.722689][ T1651] syz.4.491: attempt to access beyond end of device [ 68.722689][ T1651] loop4: rw=0, sector=752, nr_sectors = 8 limit=512 [ 68.735960][ T1651] syz.4.491: attempt to access beyond end of device [ 68.735960][ T1651] loop4: rw=0, sector=752, nr_sectors = 8 limit=512 [ 68.753529][ T598] usb 4-1: MIDIStreaming interface descriptor not found [ 68.777769][ T598] usb 4-1: USB disconnect, device number 7 [ 68.788306][ T315] kworker/u4:4: attempt to access beyond end of device [ 68.788306][ T315] loop4: rw=1, sector=544, nr_sectors = 8 limit=512 [ 68.809388][ T852] udevd[852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 68.825351][ T852] udevd[852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 68.836977][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 68.842590][ T19] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 68.871958][ T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 68.881721][ T19] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 68.890363][ T19] usb 1-1: Product: syz [ 68.894755][ T19] usb 1-1: Manufacturer: syz [ 68.903296][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 69.254278][ T19] r8152-cfgselector 1-1: bad CDC descriptors [ 69.262452][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 69.272003][ T19] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 69.306365][ T28] audit: type=1400 audit(1794357884.453:312): avc: denied { write } for pid=1667 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.338705][ T1670] FAULT_INJECTION: forcing a failure. [ 69.338705][ T1670] name failslab, interval 1, probability 0, space 0, times 0 [ 69.351749][ T1670] CPU: 0 PID: 1670 Comm: syz.3.498 Not tainted syzkaller #0 [ 69.359063][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 69.369136][ T1670] Call Trace: [ 69.372414][ T1670] [ 69.375348][ T1670] __dump_stack+0x21/0x24 [ 69.379697][ T1670] dump_stack_lvl+0x110/0x170 [ 69.384377][ T1670] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.389407][ T1670] dump_stack+0x15/0x24 [ 69.393570][ T1670] should_fail_ex+0x3bf/0x510 [ 69.398388][ T1670] __should_failslab+0xac/0xf0 [ 69.403177][ T1670] should_failslab+0x9/0x20 [ 69.407683][ T1670] __kmem_cache_alloc_node+0x3d/0x2d0 [ 69.413091][ T1670] ? __list_lru_init+0xa6/0x380 [ 69.417973][ T1670] ? kasan_save_alloc_info+0x1f/0x30 [ 69.423278][ T1670] ? __list_lru_init+0xa6/0x380 [ 69.428140][ T1670] kmalloc_trace+0x29/0xb0 [ 69.432563][ T1670] __list_lru_init+0xa6/0x380 [ 69.437245][ T1670] alloc_super+0x714/0x850 [ 69.441671][ T1670] sget+0x1f0/0x530 [ 69.445493][ T1670] ? __cfi_set_anon_super+0x10/0x10 [ 69.450735][ T1670] ? __cfi_ovl_fill_super+0x10/0x10 [ 69.455959][ T1670] mount_nodev+0x33/0x100 [ 69.460375][ T1670] ovl_mount+0x2c/0x40 [ 69.464455][ T1670] legacy_get_tree+0xfe/0x1a0 [ 69.469165][ T1670] ? __cfi_ovl_mount+0x10/0x10 [ 69.473953][ T1670] vfs_get_tree+0x9a/0x270 [ 69.478374][ T1670] do_new_mount+0x251/0xb40 [ 69.482875][ T1670] ? security_capable+0x99/0xc0 [ 69.487759][ T1670] path_mount+0x640/0xfd0 [ 69.492089][ T1670] __se_sys_mount+0x320/0x390 [ 69.496770][ T1670] ? __x64_sys_mount+0xd0/0xd0 [ 69.501549][ T1670] ? __kasan_check_write+0x14/0x20 [ 69.506683][ T1670] ? fpregs_restore_userregs+0x128/0x260 [ 69.512330][ T1670] __x64_sys_mount+0xbf/0xd0 [ 69.516939][ T1670] x64_sys_call+0x65d/0x9a0 [ 69.521458][ T1670] do_syscall_64+0x4c/0xa0 [ 69.525892][ T1670] ? clear_bhb_loop+0x30/0x80 [ 69.530594][ T1670] ? clear_bhb_loop+0x30/0x80 [ 69.535296][ T1670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.541222][ T1670] RIP: 0033:0x7fee545a8f19 [ 69.545653][ T1670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.565269][ T1670] RSP: 002b:00007fee5549e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.573693][ T1670] RAX: ffffffffffffffda RBX: 00007fee54825fa0 RCX: 00007fee545a8f19 [ 69.581680][ T1670] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 69.589661][ T1670] RBP: 00007fee54637f6d R08: 0000200000000700 R09: 0000000000000000 [ 69.597648][ T1670] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 69.605631][ T1670] R13: 00007fee54826038 R14: 00007fee54825fa0 R15: 00007ffd8deba888 [ 69.613630][ T1670] [ 69.804587][ T1692] loop3: detected capacity change from 0 to 512 [ 69.812828][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 69.822382][ T1692] ext4: Unknown parameter 'dont_measure' [ 69.838546][ T1695] loop4: detected capacity change from 0 to 512 [ 69.846889][ T853] udevd[853]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 69.890232][ T853] udevd[853]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 69.893531][ T852] udevd[852]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 69.914432][ T1695] loop4: detected capacity change from 0 to 512 [ 70.785002][ T1697] fuse: Unknown parameter '00000000000000000000' [ 70.906545][ T1702] overlayfs: unrecognized mount option "/" or missing value [ 71.017627][ T1695] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.507: Unrecognised inode hash code 255 [ 71.029102][ T1695] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.507: Corrupt directory, running e2fsck is recommended [ 71.042374][ T1695] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 71.051307][ T1695] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.507: corrupted in-inode xattr [ 71.063718][ T1695] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.507: couldn't read orphan inode 15 (err -117) [ 71.079931][ T1695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.093969][ T1695] EXT4-fs error (device loop4): __ext4_remount:6637: comm syz.4.507: Abort forced by user [ 71.104276][ T1695] EXT4-fs (loop4): Remounting filesystem read-only [ 71.110861][ T1695] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 71.577575][ T28] audit: type=1400 audit(1794357886.733:313): avc: denied { create } for pid=1691 comm="syz.3.508" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.636873][ T1711] EXT4-fs (loop4): unmounting filesystem. [ 71.647301][ T28] audit: type=1400 audit(1794357886.773:314): avc: denied { unmount } for pid=1690 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.936994][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.036490][ T1728] ip_tables: iptables: counters copy to user failed while replacing table [ 72.137005][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 72.144088][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.156765][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 72.166316][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.179157][ T19] usb 1-1: Product: syz [ 72.183668][ T19] usb 1-1: Manufacturer: syz [ 72.188733][ T19] usb 1-1: SerialNumber: syz [ 72.365283][ T1745] 9pnet_fd: Insufficient options for proto=fd [ 72.682324][ T1716] netlink: 'syz.0.513': attribute type 4 has an invalid length. [ 72.818065][ T28] audit: type=1400 audit(1794357887.973:315): avc: denied { sqpoll } for pid=1755 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.192990][ T1781] loop5: detected capacity change from 0 to 4096 [ 73.211880][ T853] udevd[853]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 73.230839][ T1781] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.756512][ T19] usb 1-1: USB disconnect, device number 5 [ 73.967685][ T852] udevd[852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.000355][ T433] EXT4-fs (loop5): unmounting filesystem. [ 74.008246][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 74.056794][ T852] udevd[852]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 74.199150][ T1805] 9pnet_fd: Insufficient options for proto=fd [ 75.046994][ T417] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.283581][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.297868][ T417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.307957][ T417] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.321054][ T417] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.330309][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.341904][ T417] usb 6-1: config 0 descriptor?? [ 75.587057][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.468696][ T1856] 9pnet_fd: Insufficient options for proto=fd [ 76.769991][ T417] usbhid 6-1:0.0: can't add hid device: -71 [ 76.783098][ T417] usbhid: probe of 6-1:0.0 failed with error -71 [ 76.795061][ T417] usb 6-1: USB disconnect, device number 4 [ 77.850372][ T1910] ip_tables: iptables: counters copy to user failed while replacing table [ 77.985706][ T1912] FAULT_INJECTION: forcing a failure. [ 77.985706][ T1912] name failslab, interval 1, probability 0, space 0, times 0 [ 78.019956][ T1912] CPU: 0 PID: 1912 Comm: syz.3.577 Not tainted syzkaller #0 [ 78.027365][ T1912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 78.037458][ T1912] Call Trace: [ 78.040786][ T1912] [ 78.043746][ T1912] __dump_stack+0x21/0x24 [ 78.048115][ T1912] dump_stack_lvl+0x110/0x170 [ 78.052828][ T1912] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.057891][ T1912] ? keyring_search_rcu+0x1f8/0x290 [ 78.063124][ T1912] ? keyring_search+0x22f/0x2b0 [ 78.068013][ T1912] dump_stack+0x15/0x24 [ 78.072208][ T1912] should_fail_ex+0x3bf/0x510 [ 78.076920][ T1912] __should_failslab+0xac/0xf0 [ 78.081715][ T1912] should_failslab+0x9/0x20 [ 78.086250][ T1912] __kmem_cache_alloc_node+0x3d/0x2d0 [ 78.091666][ T1912] ? fscrypt_provisioning_key_preparse+0x112/0x1d0 [ 78.098215][ T1912] ? __kasan_check_write+0x14/0x20 [ 78.103368][ T1912] ? fscrypt_provisioning_key_preparse+0x112/0x1d0 [ 78.109909][ T1912] __kmalloc_node_track_caller+0xa1/0x1e0 [ 78.115668][ T1912] ? down_read+0xa6/0xf0 [ 78.119990][ T1912] kmemdup+0x2b/0x60 [ 78.123931][ T1912] fscrypt_provisioning_key_preparse+0x112/0x1d0 [ 78.130302][ T1912] key_create_or_update+0x43e/0x9f0 [ 78.135546][ T1912] ? __cfi_key_create_or_update+0x10/0x10 [ 78.141301][ T1912] ? __cfi_lookup_user_key+0x10/0x10 [ 78.146635][ T1912] ? __kasan_check_write+0x14/0x20 [ 78.151784][ T1912] __se_sys_add_key+0x34b/0x410 [ 78.156670][ T1912] ? __x64_sys_add_key+0xd0/0xd0 [ 78.161648][ T1912] ? xfd_validate_state+0x70/0x150 [ 78.166805][ T1912] ? __kasan_check_write+0x14/0x20 [ 78.171956][ T1912] ? fpregs_restore_userregs+0x128/0x260 [ 78.177673][ T1912] __x64_sys_add_key+0xbf/0xd0 [ 78.182497][ T1912] x64_sys_call+0x6aa/0x9a0 [ 78.187054][ T1912] do_syscall_64+0x4c/0xa0 [ 78.191524][ T1912] ? clear_bhb_loop+0x30/0x80 [ 78.196264][ T1912] ? clear_bhb_loop+0x30/0x80 [ 78.200986][ T1912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.206924][ T1912] RIP: 0033:0x7fee545a8f19 [ 78.211371][ T1912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.231005][ T1912] RSP: 002b:00007fee5549e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 78.239505][ T1912] RAX: ffffffffffffffda RBX: 00007fee54825fa0 RCX: 00007fee545a8f19 [ 78.247518][ T1912] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 78.255523][ T1912] RBP: 00007fee54637f6d R08: fffffffffffffffb R09: 0000000000000000 [ 78.263527][ T1912] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 78.271553][ T1912] R13: 00007fee54826038 R14: 00007fee54825fa0 R15: 00007ffd8deba888 [ 78.279564][ T1912] [ 78.745080][ T1920] 9pnet_fd: Insufficient options for proto=fd [ 79.691030][ T1941] ip_tables: iptables: counters copy to user failed while replacing table [ 79.826126][ T1943] fuse: Unknown parameter 'blksi' [ 81.603582][ T1992] ip_tables: iptables: counters copy to user failed while replacing table [ 81.974527][ T2002] fuse: Unknown parameter 'blksi' [ 82.088324][ T2006] overlayfs: failed to clone lowerpath [ 83.068713][ T2024] fuse: Unknown parameter 'blksi' [ 83.521463][ T2041] fuse: Unknown parameter 'blksi' [ 83.730217][ T2054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 84.016774][ T28] audit: type=1400 audit(1794357899.163:316): avc: denied { watch watch_reads } for pid=2056 comm="syz.3.623" path="/105" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.085891][ T2063] overlayfs: failed to clone lowerpath [ 84.184883][ T2070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.628'. [ 84.264521][ T2074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.628'. [ 84.558567][ T2082] fuse: Unknown parameter 'blksi' [ 85.141351][ T2093] ip_tables: iptables: counters copy to user failed while replacing table [ 85.943835][ T2111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.642'. [ 86.187561][ T2121] 9pnet_fd: Insufficient options for proto=fd [ 86.459848][ T2123] fuse: Unknown parameter 'blksi' [ 86.662731][ T28] audit: type=1400 audit(1794357901.813:317): avc: denied { setopt } for pid=2130 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.706208][ T28] audit: type=1400 audit(1794357901.833:318): avc: denied { read } for pid=2130 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.770525][ T2135] ip_tables: iptables: counters copy to user failed while replacing table [ 87.005682][ T2146] ip_tables: iptables: counters copy to user failed while replacing table [ 87.834017][ T2156] fuse: Unknown parameter 'blksi' [ 87.960927][ T2165] overlayfs: failed to clone lowerpath [ 87.995420][ T28] audit: type=1400 audit(1794357903.143:319): avc: denied { setopt } for pid=2167 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.034342][ T28] audit: type=1400 audit(1794357903.183:320): avc: denied { name_bind } for pid=2167 comm="syz.4.660" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 88.102824][ T2177] ip_tables: iptables: counters copy to user failed while replacing table [ 88.365014][ T28] audit: type=1400 audit(1794357903.493:321): avc: denied { create } for pid=2185 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.471736][ T28] audit: type=1400 audit(1794357903.503:322): avc: denied { write } for pid=2185 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.634170][ T28] audit: type=1400 audit(1794357903.503:323): avc: denied { read } for pid=2185 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.710278][ T2195] overlayfs: failed to clone lowerpath [ 88.853342][ T28] audit: type=1400 audit(1794357904.003:324): avc: denied { remount } for pid=2191 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.204733][ T2209] netlink: 'syz.3.675': attribute type 3 has an invalid length. [ 89.236732][ T2209] Illegal XDP return value 4294967282 on prog (id 33) dev N/A, expect packet loss! [ 89.299872][ T28] audit: type=1400 audit(1794357904.453:325): avc: denied { setattr } for pid=2207 comm="syz.3.675" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 89.806335][ T2230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 89.918305][ T28] audit: type=1400 audit(1794357905.073:326): avc: denied { create } for pid=2229 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.227198][ T28] audit: type=1400 audit(1794357906.353:327): avc: denied { bind } for pid=2237 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.530231][ T2256] loop3: detected capacity change from 0 to 4096 [ 91.622193][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 91.634269][ T2256] EXT4-fs (loop3): Test dummy encryption mode enabled [ 91.641169][ T2256] EXT4-fs (loop3): unsupported descriptor size 320 [ 92.234825][ T2266] overlayfs: failed to clone lowerpath [ 92.274019][ T2268] netlink: 'syz.4.695': attribute type 2 has an invalid length. [ 92.349460][ T2274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.698'. [ 92.365619][ T2274] tipc: Enabling of bearer rejected, failed to enable media [ 92.385524][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 92.396151][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 92.437511][ T28] audit: type=1400 audit(1794357907.593:328): avc: denied { ioctl } for pid=2241 comm="syz.3.687" path="/119/trace/trace" dev="tracefs" ino=13484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 92.478083][ T2242] loop3: detected capacity change from 0 to 2048 [ 92.495163][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 92.517558][ T2242] loop3: p1 < > p4 [ 92.522514][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 92.537342][ T2242] loop3: p4 size 722688 extends beyond EOD, truncated [ 92.546557][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: Not a directory [ 92.558072][ T853] udevd[853]: inotify_add_watch(7, /dev/loop3p4, 10) failed: Not a directory [ 92.575170][ T28] audit: type=1400 audit(1794357907.723:329): avc: denied { listen } for pid=2277 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 92.701949][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 92.718064][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 94.636851][ T2298] overlayfs: failed to clone lowerpath [ 94.859897][ T2315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 94.897227][ T2315] tipc: Enabling of bearer rejected, failed to enable media [ 95.078062][ T2326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.710'. [ 95.232928][ T1394] tipc: Left network mode [ 95.488337][ T2334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1097 sclass=netlink_route_socket pid=2334 comm=syz.4.718 [ 95.505561][ T2332] capability: warning: `syz.3.717' uses 32-bit capabilities (legacy support in use) [ 95.515741][ T28] audit: type=1400 audit(1794357910.673:330): avc: denied { connect } for pid=2330 comm="syz.3.717" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.927836][ T1394] device bridge_slave_1 left promiscuous mode [ 95.934025][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.941580][ T1394] device bridge_slave_0 left promiscuous mode [ 95.947742][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.955699][ T1394] device veth1_macvtap left promiscuous mode [ 95.961798][ T1394] device veth0_vlan left promiscuous mode [ 96.007937][ T2342] futex_wake_op: syz.0.720 tries to shift op by 144; fix this program [ 97.030839][ T2358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.726'. [ 97.077590][ T2358] tipc: Enabling of bearer rejected, failed to enable media [ 97.108891][ T2364] loop3: detected capacity change from 0 to 512 [ 97.126044][ T2364] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.146369][ T2364] EXT4-fs warning (device loop3): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 97.168441][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 97.272037][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 97.304380][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 97.900705][ T28] audit: type=1400 audit(1794358169.056:331): avc: denied { create } for pid=2371 comm="syz.4.731" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.936660][ T28] audit: type=1400 audit(1794358169.076:332): avc: denied { read } for pid=2371 comm="syz.4.731" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.996997][ T28] audit: type=1400 audit(1794358169.076:333): avc: denied { write } for pid=2371 comm="syz.4.731" name="file0" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.048705][ T28] audit: type=1400 audit(1794358169.076:334): avc: denied { open } for pid=2371 comm="syz.4.731" path="/147/file0" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.305288][ T2377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 98.885249][ T28] audit: type=1400 audit(1794358169.076:335): avc: denied { ioctl } for pid=2371 comm="syz.4.731" path="/147/file0" dev="tmpfs" ino=809 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.012358][ T28] audit: type=1400 audit(1794358169.086:336): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.930863][ T28] audit: type=1400 audit(1794358171.086:337): avc: denied { block_suspend } for pid=2401 comm="syz.3.740" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.036950][ T2417] 9pnet_fd: Insufficient options for proto=fd [ 101.553390][ T2450] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.561774][ T2449] fuse: root generation should be zero [ 102.533964][ T2459] loop3: detected capacity change from 0 to 2048 [ 102.548156][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 102.587211][ T2459] loop3: p1 < > p3 < > p4 < > [ 102.592150][ T2459] loop3: partition table partially beyond EOD, truncated [ 102.606364][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 102.615939][ T2459] loop3: p1 start 3405774849 is beyond EOD, truncated [ 102.623264][ T2459] loop3: p3 start 4284289 is beyond EOD, truncated [ 102.632882][ T2465] 9pnet_fd: Insufficient options for proto=fd [ 102.651727][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3p4, 10) failed: Not a directory [ 102.683631][ T2457] FAULT_INJECTION: forcing a failure. [ 102.683631][ T2457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.696738][ T2457] CPU: 1 PID: 2457 Comm: syz.0.756 Not tainted syzkaller #0 [ 102.704051][ T2457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 102.714131][ T2457] Call Trace: [ 102.717437][ T2457] [ 102.720389][ T2457] __dump_stack+0x21/0x24 [ 102.724755][ T2457] dump_stack_lvl+0x110/0x170 [ 102.729470][ T2457] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.734522][ T2457] dump_stack+0x15/0x24 [ 102.738741][ T2457] should_fail_ex+0x3bf/0x510 [ 102.743458][ T2457] should_fail+0xb/0x10 [ 102.747643][ T2457] should_fail_usercopy+0x1a/0x20 [ 102.752691][ T2457] copyout+0x20/0xa0 [ 102.756609][ T2457] _copy_to_iter+0x3ce/0xe60 [ 102.761221][ T2457] ? __cfi__copy_to_iter+0x10/0x10 [ 102.766353][ T2457] get_random_bytes_user+0x1cd/0x3b0 [ 102.771659][ T2457] ? mix_interrupt_randomness+0x270/0x270 [ 102.777407][ T2457] ? import_single_range+0xce/0x280 [ 102.782616][ T2457] __x64_sys_getrandom+0x1a2/0x2a0 [ 102.787750][ T2457] ? __cfi___x64_sys_getrandom+0x10/0x10 [ 102.793408][ T2457] ? xfd_validate_state+0x70/0x150 [ 102.798594][ T2457] ? __kasan_check_write+0x14/0x20 [ 102.803743][ T2457] ? fpregs_restore_userregs+0x128/0x260 [ 102.809388][ T2457] ? switch_fpu_return+0xe/0x10 [ 102.814259][ T2457] x64_sys_call+0x25f/0x9a0 [ 102.818783][ T2457] do_syscall_64+0x4c/0xa0 [ 102.823209][ T2457] ? clear_bhb_loop+0x30/0x80 [ 102.827900][ T2457] ? clear_bhb_loop+0x30/0x80 [ 102.832594][ T2457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.838501][ T2457] RIP: 0033:0x7fb6df7a8f19 [ 102.842930][ T2457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.862639][ T2457] RSP: 002b:00007fb6e0670028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 102.871064][ T2457] RAX: ffffffffffffffda RBX: 00007fb6dfa25fa0 RCX: 00007fb6df7a8f19 [ 102.879050][ T2457] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000001180 [ 102.887037][ T2457] RBP: 00007fb6df837f6d R08: 0000000000000000 R09: 0000000000000000 [ 102.895023][ T2457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.903005][ T2457] R13: 00007fb6dfa26038 R14: 00007fb6dfa25fa0 R15: 00007ffef834e968 [ 102.910989][ T2457] [ 102.919741][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 102.937800][ T2459] loop3: detected capacity change from 0 to 2048 [ 102.962245][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 102.984381][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 103.007365][ T2459] loop3: p1 < > p3 < > p4 < > [ 103.012267][ T2459] loop3: partition table partially beyond EOD, truncated [ 103.035559][ T2459] loop3: p1 start 3405774849 is beyond EOD, truncated [ 103.038819][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 103.053300][ T2459] loop3: p3 start 4284289 is beyond EOD, truncated [ 103.074689][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3p4, 10) failed: Not a directory [ 103.128694][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 103.143528][ T852] udevd[852]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 104.166385][ T28] audit: type=1326 audit(1794358175.316:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2482 comm="syz.4.766" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b721a8f19 code=0x0 [ 104.341499][ T2491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 105.636339][ T2517] 9pnet_fd: Insufficient options for proto=fd [ 106.307212][ T1045] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.457295][ T1045] usb 4-1: device descriptor read/64, error -71 [ 106.727093][ T1045] usb 4-1: device descriptor read/64, error -71 [ 106.997030][ T1045] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.147019][ T1045] usb 4-1: device descriptor read/64, error -71 [ 107.416992][ T1045] usb 4-1: device descriptor read/64, error -71 [ 107.537016][ T1045] usb usb4-port1: attempt power cycle [ 107.946982][ T1045] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.978086][ T1045] usb 4-1: device descriptor read/8, error -71 [ 108.128120][ T1045] usb 4-1: device descriptor read/8, error -71 [ 108.397009][ T1045] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.428154][ T1045] usb 4-1: device descriptor read/8, error -71 [ 108.578147][ T1045] usb 4-1: device descriptor read/8, error -71 [ 108.697225][ T1045] usb usb4-port1: unable to enumerate USB device [ 111.427124][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=701 state=3 status=67 (errno 9: Bad file descriptor) [ 121.456097][ T28] audit: type=1400 audit(1794358192.606:339): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[10791]" dev="pipefs" ino=10791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 121.524827][ T1857] tipc: Resetting bearer [ 121.533017][ T1857] tipc: Disabling bearer [ 122.100749][ T1717] tipc: Left network mode [ 122.568251][ T1717] device bridge_slave_1 left promiscuous mode [ 122.574416][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.582050][ T1717] device bridge_slave_0 left promiscuous mode [ 122.588279][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.596258][ T1717] device bridge_slave_1 left promiscuous mode [ 122.602512][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.610181][ T1717] device bridge_slave_0 left promiscuous mode [ 122.616302][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.624462][ T1717] device bridge_slave_1 left promiscuous mode [ 122.630712][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.638300][ T1717] device bridge_slave_0 left promiscuous mode [ 122.644419][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.652415][ T1717] device bridge_slave_1 left promiscuous mode [ 122.658584][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.666282][ T1717] device bridge_slave_0 left promiscuous mode [ 122.672663][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.681208][ T1717] device veth1_macvtap left promiscuous mode [ 122.687294][ T1717] device veth0_vlan left promiscuous mode [ 122.693246][ T1717] device veth1_macvtap left promiscuous mode [ 122.699368][ T1717] device veth0_vlan left promiscuous mode [ 122.705339][ T1717] device veth1_macvtap left promiscuous mode [ 122.711410][ T1717] device veth0_vlan left promiscuous mode [ 122.717526][ T1717] device veth1_macvtap left promiscuous mode [ 122.723550][ T1717] device veth0_vlan left promiscuous mode