last executing test programs: 37.277373372s ago: executing program 32 (id=101): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 36.981550793s ago: executing program 33 (id=105): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000005b00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 35.991485114s ago: executing program 34 (id=112): r0 = syz_open_dev$usbfs(&(0x7f00000004c0), 0xb, 0x103381) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000740)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 35.522395951s ago: executing program 35 (id=122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd43d, 0x0, 0x0, 0x0, 0x14}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34dfc}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 33.078950511s ago: executing program 4 (id=188): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000001640)="8b", 0x11) 32.974170232s ago: executing program 4 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a010400000000000000000a0000010900010073797a310000000048000480440001800a0001006d61746368000000340002801c00030071580f242e5f09ce7f512000e7ffabbc9535d36223765dac0900010074696d650000000008000240000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4080851}, 0x24000840) 32.963080793s ago: executing program 4 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='1', 0x1) 32.906616838s ago: executing program 4 (id=191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x5, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 32.828993457s ago: executing program 4 (id=192): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f00000009c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 32.728163577s ago: executing program 4 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x17, &(0x7f0000000c00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000ac0)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/failslab/probability\x00', 0x2, 0x132) write(r2, &(0x7f0000000b40)='5', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000bc0)='1', 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x4, 0x13, 0x200, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000001780)='!', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f0000019280), 0x0, 0x0, 0x4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x0, 0x0}) 32.713390128s ago: executing program 36 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x17, &(0x7f0000000c00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000ac0)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/failslab/probability\x00', 0x2, 0x132) write(r2, &(0x7f0000000b40)='5', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000bc0)='1', 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x4, 0x13, 0x200, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000001780)='!', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f0000019280), 0x0, 0x0, 0x4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x0, 0x0}) 30.290745436s ago: executing program 6 (id=259): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 30.290636676s ago: executing program 6 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x40) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x922, 0x0) 30.290528016s ago: executing program 6 (id=261): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000780)={0x4000000, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 30.290267506s ago: executing program 6 (id=262): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") open(&(0x7f0000000b80)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000bc0)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f0000000c00)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000c40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c80)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000cc0)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) mknod$loop(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) 29.557634581s ago: executing program 6 (id=280): syz_read_part_table(0x5d6, &(0x7f00000027c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file0\x00', 0x0, 0xa0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 29.354925912s ago: executing program 6 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$inet(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000004c0)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x395e, 0x8, 0x9, 0x7, 0x7ff, 0x80, 0x737}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c800) 29.354695442s ago: executing program 37 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$inet(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000004c0)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x395e, 0x8, 0x9, 0x7, 0x7ff, 0x80, 0x737}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c800) 24.134991165s ago: executing program 1 (id=401): add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x1d8, 0xfffffffffffffffe) 24.058155753s ago: executing program 1 (id=402): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f00000008c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r1, &(0x7f0000000900)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @remote}, 0x14) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/128, 0x80}], 0x1, 0x33, 0xf7) 23.121191148s ago: executing program 1 (id=406): setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x80080, &(0x7f0000000080)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c00)=0x2) syz_open_procfs(0x0, &(0x7f0000000c40)='pagemap\x00') socket$nl_route(0x10, 0x3, 0x0) io_setup(0x4fe, &(0x7f0000019c80)=0x0) keyctl$clear(0x7, 0xfffffffffffffffb) io_pgetevents(r3, 0x7, 0x0, 0x0, &(0x7f0000019cc0)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x181) mount$overlay(0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0) 22.186620864s ago: executing program 1 (id=415): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x20) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x24) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) r4 = creat(&(0x7f00000015c0)='./bus\x00', 0x119) write$cgroup_int(r4, &(0x7f0000001600), 0xfffffdd8) 21.894915643s ago: executing program 1 (id=422): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00009bd000/0x4000)=nil, 0x4000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 19.135015176s ago: executing program 1 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001f40)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) 19.072873112s ago: executing program 38 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001f40)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) 16.911536812s ago: executing program 2 (id=451): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x9fd, 0x8, 0x105}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/127, 0x7f}], 0x1, 0x0, 0x1) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) 16.029858413s ago: executing program 2 (id=456): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000008c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000980)={0x2, 0x4e21, @remote}, 0x10) close(0x3) 16.005793665s ago: executing program 2 (id=457): syz_mount_image$exfat(&(0x7f00000004c0), &(0x7f0000000240)='./bus\x00', 0x214000, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES8], 0x41, 0x150b, &(0x7f0000002ac0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x291804, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x162006, 0x0, 0x7, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1211009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) rename(&(0x7f0000005640)='./bus\x00', &(0x7f0000005680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.753426431s ago: executing program 2 (id=459): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)) sched_setscheduler(0x0, 0x2, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x105042, 0x1f6) add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x11, r1, 0x0) write$UHID_DESTROY(r1, &(0x7f00000010c0), 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 14.006669169s ago: executing program 2 (id=463): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8004, &(0x7f0000000080)={[{@shortname_win95}, {@uni_xlate}, {@fat=@errors_remount}, {@rodir}, {@shortname_win95}, {@shortname_winnt}]}, 0xfc, 0x259, &(0x7f0000000540)="$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") 13.747885806s ago: executing program 2 (id=465): socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 13.694613421s ago: executing program 39 (id=465): socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 6.36359029s ago: executing program 8 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x100040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000800)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000840)={0x1, r2}) 6.2694713s ago: executing program 8 (id=536): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000540)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xffa4}]}, &(0x7f0000000580)='GPL\x00', 0x5, 0xfd90, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0xb5}, 0x48) 6.218915875s ago: executing program 8 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000680)=@filename='./proc/../file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x17, &(0x7f0000000c00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000ac0)='100', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/failslab/probability\x00', 0x2, 0x132) write(r2, &(0x7f0000000b40)='5', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000bc0)='1', 0x1) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) 5.234851756s ago: executing program 8 (id=556): socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000004bc0), &(0x7f0000004c00)='./file2\x00', 0x8, &(0x7f0000004c40)=ANY=[], 0x1, 0x1520, &(0x7f0000004c80)="$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") chdir(&(0x7f00000061c0)='./file0\x00') creat(&(0x7f0000006200)='./bus\x00', 0x182) mount(&(0x7f0000006240)=@loop={'/dev/loop', 0x0}, &(0x7f0000006280)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000062c0)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000006300)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000006340)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x2c41, 0x0) 5.010678568s ago: executing program 8 (id=559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000004c0)={0x1, 0x0, [{0x1, 0x5, 0x8, 0xfff, 0x7}]}) 4.870703183s ago: executing program 8 (id=562): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000bc0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x4, 0xfffd, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x4}}, 0xe8) connect$inet(r0, &(0x7f0000000d00)={0x2, 0x4e23, @multicast2}, 0x10) 4.751487475s ago: executing program 40 (id=562): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000bc0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x4, 0xfffd, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x4}}, 0xe8) connect$inet(r0, &(0x7f0000000d00)={0x2, 0x4e23, @multicast2}, 0x10) 3.318870581s ago: executing program 3 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x2000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/147, 0x93}, {0x0, 0x58}], 0x2) 3.318520741s ago: executing program 3 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000680)=@filename='./proc/../file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x17, &(0x7f0000000c00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000ac0)='100', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/failslab/probability\x00', 0x2, 0x132) write(r2, &(0x7f0000000b40)='5', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) 2.499613415s ago: executing program 3 (id=598): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080), 0x1, 0x793, &(0x7f00000014c0)="$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") quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, 0x0) open(0x0, 0x8000, 0x50) r2 = creat(&(0x7f0000000e40)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) setrlimit(0x1, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x202, &(0x7f0000000ec0)=0x0) io_submit(r3, 0x3b, &(0x7f0000001440)=[&(0x7f0000001480)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f00000014c0), 0x100000, 0x8002007ffb}]) 1.975003409s ago: executing program 0 (id=604): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0x81, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x45b, 0x44000102, 0x0) 1.968881179s ago: executing program 3 (id=605): socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000004bc0), &(0x7f0000004c00)='./file2\x00', 0x8, &(0x7f0000004c40)=ANY=[], 0x1, 0x1520, &(0x7f0000004c80)="$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") chdir(&(0x7f00000061c0)='./file0\x00') creat(&(0x7f0000006200)='./bus\x00', 0x182) mount(&(0x7f0000006240)=@loop={'/dev/loop', 0x0}, &(0x7f0000006280)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000062c0)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000006300)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000006340)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x2c41, 0x0) 1.866635389s ago: executing program 0 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, 'mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x1d}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3, 0x800000}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3, 0x0, 0x0, 0xf}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) setns(0xc9, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000580)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f00000005c0), 0x800001d, 0x0) 1.85940178s ago: executing program 9 (id=608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.710890535s ago: executing program 9 (id=609): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000340)="$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") mount$bind(0x0, &(0x7f0000000900)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000940)='.\x00', 0x0, 0x2390824, 0x0) 1.421373375s ago: executing program 3 (id=612): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000b00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000000b80), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000c40)=[{r1, 0x3328}, {r0, 0x101}], 0x2, 0x0, 0x0, 0x0) close(r0) 1.399418847s ago: executing program 9 (id=614): socket(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='batadv_slave_1\x00', 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000480)="5400000013000100"/24, 0x19) 1.338859914s ago: executing program 7 (id=615): syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000080) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) truncate(&(0x7f0000000740)='./file1\x00', 0x20fdfffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, 0x0, &(0x7f0000000880)='GPL\x00', 0x4, 0xc3, &(0x7f00000008c0)=""/195, 0x0, 0x15}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x818) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x2c41, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x32}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff7fffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x20000000}, 0x0, 0x0, 0xa, 0x1, 0x10, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0xb, 0x32, 0x40, @remote, @local, {[], "000004d22000000100006c"}}}}}, 0x0) 1.327600615s ago: executing program 7 (id=616): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x104}}) 1.310999126s ago: executing program 9 (id=617): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x8c41a, &(0x7f0000000040)={[], [{@subj_role={'subj_role', 0x3d, 'asymmetric\x00'}}, {@pcr={'pcr', 0x3d, 0x5}}], 0x2c}, 0x1, 0x486, &(0x7f0000001b40)="$eJzs28tvFdUfAPDv3La8+bU/xAeIWsVH46OlBZWFCzGasDEx0QUuaykEKdTQmgghUl3g0rByqS5N/AtcycaoK41b3RsTYtiIJpIxM3fmcrm9t7b3tr3U+/kkw5xz5sycc2bm9J45MwTQs4azf5KIHRHxc0QMRkRfY4bh6urG9YtTf16/OJVEmr7+e5LtFn9cvzhVZk2K9fYiMlKpJS0yd/7C6cmZmelzRXxs/sw7Y3PnLzxz6szkyemT02cnDh8+dHD8+ecmnl2Vdu7M6rr3/dl9e46+eeXVqWNX3vruy6xyO4rt9e2oGuq4zOEYbnkCHuv46HeWncW65QXnjpT19f6IGMj7/2D05bGqwXjlw65WDlhTaZqmmxel1kYAC2kTJ5olAhtQEt2uAdAd5Q999vxbLus4/Oi6a0eqD0BZu28US3VLf1SKPAN1z7erbTgiji389Wm2RNN5CACA1fV1Nv55utn4rxL31OX7X/FuaCgi/h8RuyLirojYHRF3R+R5742I+1ZY/nBD/Fb5N4tJqB+3tt+6f3ftSCQvFO+2bh//laO/GOorYjvz9g8kJ07NTB8ozslIDGzO4uNLlHH15Z8+brWtfvyXLVn55ViwqMdv/Q0TdMcn5yc7aXO9ax/kc4CXFrc/qb0JSCJiT0TsbeP4WyLi1JNf7KslbKo7aGHp9i+hv40KNUg/j3iiev0XoqH9UVfVJd5Pjm2JmekDY+Vdsdj3P1x+rVX5Ddc/OzvLb/8qyK7/tqb3f639Q0n9+9q5lZdx+ZePWj7TtHv/b0reyMPl7fTe5ItFaKEhfX7+3MStfct4vh6vtn9kf/P+vyvi5mfFfvdHRHYTPxARD0bEQ0XdH46IRyJi/xLt//alR99uv/1rK2v/8RVd/5UH+k5/81Wr8pd3/Q/loZEiZTl//5ZbwU7OHQAAAGwUlfwb+KQyWgtXKqOj1W/4d8e2yszs3PxTJ2bfPXu8+q38UAxUypmuwbr50PFizqWMTxRzxWX8YD5vnKZpujWPj07NzqzVO3Vgeba36P+ZX/u6XTtgzeXv0Q5/soLMwH/FbV16oHv1ANafn3ToXfo/9C79H3pXs/5/KeJGF6oCrDO//9C79H/oXfo/9C79H3pSJ/+vf6nArqNrdeSNGLgaEa3y9LV95M0R0WkNH99+KyViJbtHZfGm4qZa6PoJbwiU37TVUipNMv/drRpm13G5mS/FelWsi3+UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVtE/AQAA//8Ont5I") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0x4, 0x4, 0x480, 0xffffffff, 0x0, 0x2a8, 0x1d0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x4e24, 0x4e21, 0x4e20, 0x4e24, 0x5, 0x9, 0x8, 0x1000, 0xb7a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000001380)={0x900, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b1c0030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b716380327727385edb72ae6e0decfbb66d017fe95566dfbf1d76780228fbb57ff8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cde982d4b55b2d321f1c9d55f844f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb0252799c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc", 0x4e6, 0xffffffffffffffff) 1.259014451s ago: executing program 7 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.258891931s ago: executing program 3 (id=619): r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f000000a080)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) read(r0, &(0x7f000000a0c0)=""/4096, 0x1000) 1.256383292s ago: executing program 41 (id=619): r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f000000a080)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) read(r0, &(0x7f000000a0c0)=""/4096, 0x1000) 1.17558506s ago: executing program 7 (id=621): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x810, &(0x7f0000000200)={[{@errors_remount}, {@grpquota}]}, 0x1, 0x4fe, &(0x7f0000000400)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") r1 = dup2(r0, r0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000a80)='./file0\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 989.809649ms ago: executing program 0 (id=622): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x40800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TARGET_MSG(r1, 0xc138fd0e, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_dev={r2}, {0x8, @core='@stats_print 1'}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000600)=0x8000000ffffffff) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x0) shutdown(r4, 0x1) 878.78198ms ago: executing program 0 (id=623): socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000004bc0), &(0x7f0000004c00)='./file2\x00', 0x8, &(0x7f0000004c40)=ANY=[], 0x1, 0x1520, &(0x7f0000004c80)="$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") chdir(&(0x7f00000061c0)='./file0\x00') creat(&(0x7f0000006200)='./bus\x00', 0x182) mount(&(0x7f0000006240)=@loop={'/dev/loop', 0x0}, &(0x7f0000006280)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000062c0)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000006300)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000006340)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x2c41, 0x0) 666.348672ms ago: executing program 0 (id=624): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000f00)={@desc={0x1, 0x0, @desc3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000080)=0x0) r1 = eventfd2(0x7fff, 0x80000) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x800, r1, 0x0, 0x0, 0xed, 0x0, 0x1, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xfff, r1, 0x0, 0x0, 0x7fff, 0x0, 0x3, r1}]) 582.696851ms ago: executing program 5 (id=625): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000340)="$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") mount$bind(0x0, &(0x7f0000000900)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000940)='.\x00', 0x0, 0x2390824, 0x0) 560.762603ms ago: executing program 5 (id=626): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 537.990815ms ago: executing program 0 (id=627): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xf4, 0x1, {0xa, 0x25, 0x25, 0xff, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xa, 0x5, {0xa, 0x25, 0x25, 0x80000000, 0x7, 0x9}}}}}}}}]}}, 0x0) 485.41113ms ago: executing program 42 (id=627): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xf4, 0x1, {0xa, 0x25, 0x25, 0xff, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xa, 0x5, {0xa, 0x25, 0x25, 0x80000000, 0x7, 0x9}}}}}}}}]}}, 0x0) 439.673955ms ago: executing program 5 (id=629): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r1 = fsopen(&(0x7f0000000400)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 439.517415ms ago: executing program 5 (id=630): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000340)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000240)=0x6ec) 435.126256ms ago: executing program 9 (id=631): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffb, 0x4002004c0, 0xffe, 0x0, 0x2a, 0x20000000014, 0xffff, 0x0, 0x0, 0x7f, 0x7], 0xeeee8000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 331.820376ms ago: executing program 7 (id=632): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x80800c, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESHEX], 0x0, 0x250, &(0x7f0000001680)="$eJzs2k9rXFUYB+D3pqlpE9OJ+I8WxIMu1M2lydpFg7QgBhRthCpIb82NDrnOhLlDYERsVrr1I7gWl+4E6dJNNn4CF+6yybIL8cp0ptopE6XUOrU+z2ZeOPc355w5M4fDcA5f/eqTne063y76MZdlMXch9uNmFisxF7ftxysvXfnxuXeuvPfG+sbGxbdTurR+eXUtpXTm+R/e/+zbF270l9797sz3C3Gw8sHh0dovB88cnD387fLH7Tq169Tp9lORrnW7/eJaVaatdr2Tp/RWVRZ1mdqduuxNtG9X3d3dQSo6W8uLu72yrlPRGaSdcpD63dTvDVLxUdHupDzP0/JicD82v7nZNHHUnLwaTdOc/jqWbsTyz9GK7ImUPXkhe/pq9ux+dvaoaVqzHioPhPX/f7tjUz8VUX25t7m3OXodta9vRzuqKON8tOLXGH5Nxkb1pdc3Lp5Pt6zEF9X1cf763uaJyfxqtGJlen51lE+T+YVYjDgZMc6vRSuemp5fm5o/FS+/eEf/ebTipw+jG1VsxTD7Z/7z1ZRee3Pjrvy5W88BADxq8vSHqee3PD+ufZS/h/PhXeer+Tg3P9u5E1EPPt0pqqrszaS4/R/Tsc88fv99Dd9/FhOc/6t5PbrF6fGSPti+FuKeUlnE/nBQD8Hn06sfeyh+en9XLM1kO+JfNrlPAgAAAAAAAAAA8F/xj18ePDH9Bi4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBxfg8AAP//Sy7Cew==") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001980)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000019c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ac0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001b80), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001bc0)=0x2) mount$cgroup(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000002c0), 0x3000000, &(0x7f0000000300)={[{}, {@name={'name', 0x3d, '\xe5\xdc'}}]}) r3 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) r4 = fsmount(r3, 0x0, 0x82) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r5, r4, 0x2, 0x0, @void}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_getrule={0x1c, 0x22, 0x117, 0x70bd27, 0x25dfdbfc, {0xa, 0x20, 0x20, 0x6, 0x41, 0x0, 0x0, 0x8, 0x10011}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c004) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) 270.980372ms ago: executing program 9 (id=633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x582, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r1, 0x8914, &(0x7f0000000100)="7573623000000000000000000000000003") 270.802232ms ago: executing program 5 (id=634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000040)='@', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)=0x33) 219.17µs ago: executing program 7 (id=635): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000340)="$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") mount$bind(0x0, &(0x7f0000000900)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000940)='.\x00', 0x0, 0x2390824, 0x0) 0s ago: executing program 5 (id=636): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001240)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b7000000010000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r4, &(0x7f00000004c0), &(0x7f0000000500)=@tcp=r2}, 0x20) sendto(r3, &(0x7f0000000540)="0102", 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 27.562477][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562494][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562512][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562529][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562547][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562564][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562581][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562599][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562629][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562647][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.562664][ T20] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 27.570342][ T20] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.04 Device [syz1] on syz1 [ 27.579504][ T782] loop4: detected capacity change from 0 to 16 [ 27.614850][ T783] fido_id[783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 27.678129][ T26] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 27.811442][ T782] erofs: (device loop4): mounted with root inode @ nid 36. [ 27.843255][ T791] device-mapper: table: 253:7: thin-pool: unknown target type [ 27.850805][ T791] device-mapper: ioctl: error adding target to table [ 27.867064][ T796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 27.870151][ T791] loop8: detected capacity change from 0 to 2048 [ 27.918869][ T791] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.983085][ T809] device-mapper: table: 253:8: linear: Device lookup failed [ 27.991016][ T310] usb 8-1: USB disconnect, device number 2 [ 28.001109][ T809] device-mapper: ioctl: error adding target to table [ 28.022328][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 28.022340][ T30] audit: type=1400 audit(1793892851.639:274): avc: denied { read write } for pid=812 comm="syz.4.186" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 28.058443][ T30] audit: type=1400 audit(1793892851.639:275): avc: denied { open } for pid=812 comm="syz.4.186" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 28.101862][ T30] audit: type=1400 audit(1793892851.709:276): avc: denied { mounton } for pid=817 comm="syz.4.188" path="/57/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 28.157767][ T26] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.169218][ T26] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.179631][ T26] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.193050][ T26] usb 7-1: config 0 interface 0 has no altsetting 0 [ 28.201052][ T26] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 28.210618][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.220236][ T26] usb 7-1: config 0 descriptor?? [ 28.250182][ T30] audit: type=1400 audit(1793892851.869:277): avc: denied { mount } for pid=821 comm="syz.4.190" name="/" dev="configfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.274280][ T30] audit: type=1400 audit(1793892851.869:278): avc: denied { search } for pid=821 comm="syz.4.190" name="/" dev="configfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.299967][ T824] loop4: detected capacity change from 0 to 1024 [ 28.310001][ T824] EXT4-fs (loop4): Ignoring removed bh option [ 28.316540][ T30] audit: type=1400 audit(1793892851.869:279): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.338860][ T824] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 28.573951][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.586145][ T828] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.595386][ T828] device bridge_slave_0 entered promiscuous mode [ 28.596104][ T833] loop7: detected capacity change from 0 to 256 [ 28.603024][ T828] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.615380][ T828] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.623018][ T828] device bridge_slave_1 entered promiscuous mode [ 28.687170][ T828] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.694293][ T828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.701718][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.708778][ T828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.739286][ T26] input: HID 13ec:0006 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:13EC:0006.0003/input/input5 [ 28.765965][ T837] device-mapper: table: 253:9: linear: Device lookup failed [ 28.784865][ T26] zydacron 0003:13EC:0006.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.6-1/input0 [ 28.796927][ T813] loop8: detected capacity change from 0 to 262144 [ 28.805481][ T837] device-mapper: ioctl: error adding target to table [ 28.807229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.819930][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.827289][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.845458][ T30] audit: type=1400 audit(1793892852.459:280): avc: denied { create } for pid=840 comm="syz.7.197" dev="anon_inodefs" ino=19567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.883959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.895964][ T30] audit: type=1400 audit(1793892852.459:281): avc: denied { search } for pid=842 comm="syz.1.198" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 28.899770][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.924568][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.938156][ T813] F2FS-fs (loop8): Found nat_bits in checkpoint [ 28.961250][ T30] audit: type=1400 audit(1793892852.489:282): avc: denied { ioctl } for pid=840 comm="syz.7.197" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19567 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.974467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.998166][ T843] kvm: apic: phys broadcast and lowest prio [ 29.011849][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.018922][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.026317][ T813] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 29.050428][ T849] device xfrm0 entered promiscuous mode [ 29.058188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.066284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.074737][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.083452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.101408][ T828] device veth0_vlan entered promiscuous mode [ 29.108587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.126001][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.158016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.167077][ T864] loop1: detected capacity change from 0 to 2048 [ 29.174275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.182631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.190581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.204313][ T828] device veth1_macvtap entered promiscuous mode [ 29.211092][ T335] loop1: p1 < > p2 p3 p4 < p5 p6 > [ 29.216321][ T335] loop1: partition table partially beyond EOD, truncated [ 29.224354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.228097][ T335] loop1: p1 start 3405774849 is beyond EOD, truncated [ 29.239789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.240065][ T335] loop1: p3 start 4225 is beyond EOD, truncated [ 29.255777][ T335] loop1: p6 start 4225 is beyond EOD, truncated [ 29.257829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.269731][ T864] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 29.301790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.315728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.336055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.356930][ T441] udevd[441]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 29.370648][ T335] udevd[335]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 29.385939][ T442] udevd[442]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 29.387887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.437580][ T307] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 29.461322][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.213'. [ 29.516786][ T30] audit: type=1400 audit(1793892853.129:283): avc: denied { create } for pid=890 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.643684][ T927] FAULT_INJECTION: forcing a failure. [ 29.643684][ T927] name failslab, interval 1, probability 5, space 0, times 100 [ 29.650908][ T929] netlink: 12 bytes leftover after parsing attributes in process `syz.8.235'. [ 29.657279][ T927] CPU: 1 PID: 927 Comm: syz.1.227 Not tainted syzkaller #0 [ 29.672520][ T927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.682584][ T927] Call Trace: [ 29.685964][ T927] [ 29.688910][ T927] __dump_stack+0x21/0x30 [ 29.693260][ T927] dump_stack_lvl+0x110/0x170 [ 29.697980][ T927] ? show_regs_print_info+0x20/0x20 [ 29.703198][ T927] ? prandom_u32+0x24d/0x290 [ 29.707818][ T927] dump_stack+0x15/0x20 [ 29.711995][ T927] should_fail+0x3ab/0x500 [ 29.716431][ T927] __should_failslab+0xa4/0xe0 [ 29.721433][ T927] should_failslab+0x9/0x20 [ 29.725932][ T927] slab_pre_alloc_hook+0x39/0xd0 [ 29.730899][ T927] kmem_cache_alloc_trace+0x48/0x270 [ 29.736221][ T927] ? sysfs_init_fs_context+0xa9/0x390 [ 29.741699][ T927] sysfs_init_fs_context+0xa9/0x390 [ 29.747090][ T927] ? sysfs_rename_link_ns+0x1a0/0x1a0 [ 29.752458][ T927] alloc_fs_context+0x645/0x7c0 [ 29.757338][ T927] fs_context_for_mount+0x22/0x30 [ 29.762360][ T927] do_new_mount+0x116/0xb40 [ 29.766865][ T927] ? security_capable+0x87/0xb0 [ 29.771704][ T927] path_mount+0x640/0xff0 [ 29.776412][ T927] __se_sys_mount+0x320/0x390 [ 29.781094][ T927] ? __x64_sys_mount+0xd0/0xd0 [ 29.785849][ T927] ? __kasan_check_write+0x14/0x20 [ 29.791213][ T927] __x64_sys_mount+0xbf/0xd0 [ 29.795795][ T927] x64_sys_call+0x6bf/0x9a0 [ 29.800472][ T927] do_syscall_64+0x4c/0xa0 [ 29.804888][ T927] ? clear_bhb_loop+0x50/0xa0 [ 29.809581][ T927] ? clear_bhb_loop+0x50/0xa0 [ 29.814292][ T927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 29.820182][ T927] RIP: 0033:0x7fce93177b19 [ 29.824585][ T927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.844502][ T927] RSP: 002b:00007fce91bae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.853235][ T927] RAX: ffffffffffffffda RBX: 00007fce933fe090 RCX: 00007fce93177b19 [ 29.861292][ T927] RDX: 0000200000000780 RSI: 0000200000000580 RDI: 0000000000000000 [ 29.869272][ T927] RBP: 00007fce9320fb70 R08: 0000000000000000 R09: 0000000000000000 [ 29.877238][ T927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.885475][ T927] R13: 00007fce933fe128 R14: 00007fce933fe090 R15: 00007ffe6b8bb698 [ 29.893527][ T927] [ 29.897567][ T930] usb 7-1: string descriptor 0 read error: -71 [ 29.900325][ T307] usb 8-1: Using ep0 maxpacket: 32 [ 29.947597][ T307] usb 8-1: no configurations [ 29.952383][ T307] usb 8-1: can't read configurations, error -22 [ 29.967587][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.008014][ T20] usb 7-1: reset full-speed USB device number 2 using dummy_hcd [ 30.107556][ T307] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 30.207561][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 30.347578][ T307] usb 8-1: Using ep0 maxpacket: 32 [ 30.347634][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.362851][ T310] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 30.387590][ T307] usb 8-1: no configurations [ 30.392361][ T307] usb 8-1: can't read configurations, error -22 [ 30.398993][ T307] usb usb8-port1: attempt power cycle [ 30.537595][ T310] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 30.546949][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.555026][ T310] usb 2-1: Product: syz [ 30.559736][ T310] usb 2-1: Manufacturer: syz [ 30.564366][ T310] usb 2-1: SerialNumber: syz [ 30.569915][ T310] usb 2-1: config 0 descriptor?? [ 30.651455][ T978] loop6: detected capacity change from 0 to 40427 [ 30.701443][ T978] F2FS-fs (loop6): invalid crc value [ 30.708219][ T978] F2FS-fs (loop6): Found nat_bits in checkpoint [ 30.732741][ T978] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 30.754402][ T978] attempt to access beyond end of device [ 30.754402][ T978] loop6: rw=34817, want=79872, limit=40427 [ 30.772509][ T580] attempt to access beyond end of device [ 30.772509][ T580] loop6: rw=2049, want=45104, limit=40427 [ 30.807582][ T26] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 30.815212][ T307] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 30.907824][ T307] usb 8-1: Using ep0 maxpacket: 32 [ 30.947645][ T307] usb 8-1: no configurations [ 30.952529][ T307] usb 8-1: can't read configurations, error -22 [ 30.954225][ T686] usb 7-1: USB disconnect, device number 2 [ 31.001617][ T1000] loop8: detected capacity change from 0 to 4096 [ 31.023061][ T1000] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,nodelalloc,,errors=continue. Quota mode: writeback. [ 31.038278][ T1000] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 31.053402][ T996] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 31.061738][ T996] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 31.070877][ T996] F2FS-fs (loop6): invalid crc value [ 31.078044][ T996] F2FS-fs (loop6): Found nat_bits in checkpoint [ 31.100412][ T996] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 31.107599][ T996] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 31.118221][ T307] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 31.154668][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.8.265'. [ 31.177620][ T26] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 31.187382][ T26] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 31.206977][ T26] usb 10-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 31.218378][ T307] usb 8-1: Using ep0 maxpacket: 32 [ 31.223700][ T1011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=1011 comm=syz.8.266 [ 31.250228][ T10] loop: Write error at byte offset 9223372036894621695, length 4096. [ 31.260307][ C1] blk_update_request: I/O error, dev loop6, sector 77824 op 0x1:(WRITE) flags 0x4800 phys_seg 110 prio class 0 [ 31.272460][ T10] loop: Write error at byte offset 9223372036895932415, length 4096. [ 31.280834][ T307] usb 8-1: no configurations [ 31.285685][ T307] usb 8-1: can't read configurations, error -22 [ 31.293741][ T307] usb usb8-port1: unable to enumerate USB device [ 31.303235][ C1] blk_update_request: I/O error, dev loop6, sector 80384 op 0x1:(WRITE) flags 0x800 phys_seg 13 prio class 0 [ 31.309698][ T10] loop: Write error at byte offset 9223372036879941631, length 4096. [ 31.317568][ T26] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 31.323460][ C0] blk_update_request: I/O error, dev loop6, sector 49152 op 0x1:(WRITE) flags 0x4800 phys_seg 22 prio class 0 [ 31.334940][ T26] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 31.353396][ T10] loop: Write error at byte offset 9223372036881252351, length 4096. [ 31.353473][ T26] usb 10-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 31.362165][ T10] loop: Write error at byte offset 9223372036884135935, length 4096. [ 31.372396][ C0] blk_update_request: I/O error, dev loop6, sector 51712 op 0x1:(WRITE) flags 0x800 phys_seg 14 prio class 0 [ 31.393539][ C0] blk_update_request: I/O error, dev loop6, sector 57344 op 0x1:(WRITE) flags 0x4800 phys_seg 21 prio class 0 [ 31.393855][ T10] loop: Write error at byte offset 9223372036885446655, length 4096. [ 31.414164][ C1] blk_update_request: I/O error, dev loop6, sector 59904 op 0x1:(WRITE) flags 0x4800 phys_seg 21 prio class 0 [ 31.428136][ T10] loop: Write error at byte offset 9223372036886757375, length 4096. [ 31.436322][ C1] blk_update_request: I/O error, dev loop6, sector 62464 op 0x1:(WRITE) flags 0x4800 phys_seg 22 prio class 0 [ 31.448125][ T10] loop: Write error at byte offset 9223372036888068095, length 4096. [ 31.448808][ T26] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 31.456448][ C0] blk_update_request: I/O error, dev loop6, sector 65024 op 0x1:(WRITE) flags 0x4800 phys_seg 20 prio class 0 [ 31.466043][ T26] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 31.486726][ T10] loop: Write error at byte offset 9223372036889378815, length 4096. [ 31.490941][ T1024] Zero length message leads to an empty skb [ 31.495419][ T10] loop: Write error at byte offset 9223372036890427391, length 4096. [ 31.501917][ C0] blk_update_request: I/O error, dev loop6, sector 67584 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 31.505757][ T26] usb 10-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 31.514369][ C0] blk_update_request: I/O error, dev loop6, sector 69632 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 31.649946][ T580] F2FS-fs (loop6): do_checkpoint failed err:-5, stop checkpoint [ 31.729570][ T1058] set_capacity_and_notify: 2 callbacks suppressed [ 31.729586][ T1058] loop8: detected capacity change from 0 to 1024 [ 31.758993][ T1058] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.767731][ T26] usb 10-1: string descriptor 0 read error: -22 [ 31.780182][ T26] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 31.789388][ T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.799508][ T1058] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,dioread_nolock,min_batch_time=0x0000000000000002,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,init_itable,errors=remount-ro,acl,auto_da_alloc=0x0000000000000344,inode_readahead_blks=0x000000000. Quota mode: none. [ 31.911159][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.918779][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.926128][ T1062] device bridge_slave_0 entered promiscuous mode [ 31.933199][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.940282][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.947789][ T1062] device bridge_slave_1 entered promiscuous mode [ 31.986523][ T1075] syz.8.295 uses obsolete (PF_INET,SOCK_PACKET) [ 31.996681][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.295'. [ 32.009575][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.295'. [ 32.054041][ T26] usb 10-1: USB disconnect, device number 2 [ 32.064199][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.072515][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.085440][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.094530][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.102853][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.104125][ T1082] overlayfs: upper fs does not support file handles, falling back to index=off. [ 32.110128][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.110524][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.135779][ T1082] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 32.150551][ T1082] overlayfs: upper fs does not support file handles, falling back to index=off. [ 32.152668][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.159993][ T1082] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 32.169046][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.190385][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.197565][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.203309][ T1086] x_tables: unsorted underflow at hook 3 [ 32.205221][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.218750][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.226787][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.245156][ T10] device bridge_slave_1 left promiscuous mode [ 32.252827][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.261170][ T10] device bridge_slave_0 left promiscuous mode [ 32.267739][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.275799][ T10] device veth1_macvtap left promiscuous mode [ 32.283417][ T10] device veth0_vlan left promiscuous mode [ 32.321711][ T1100] loop0: detected capacity change from 0 to 1 [ 32.342292][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.359968][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.368114][ T335] loop0: [ 32.368995][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.379488][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.379567][ T1100] loop0: [ 32.389012][ T1062] device veth0_vlan entered promiscuous mode [ 32.410150][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.420068][ T1062] device veth1_macvtap entered promiscuous mode [ 32.431364][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.440069][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.450569][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.459281][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.517109][ T1125] device-mapper: table: 253:10: crypt: Error decoding and setting key [ 32.525782][ T1125] device-mapper: ioctl: error adding target to table [ 32.551561][ T1126] loop7: detected capacity change from 0 to 4096 [ 32.563317][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 32.600913][ T26] usb 2-1: USB disconnect, device number 3 [ 32.610519][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.322'. [ 32.660364][ T1126] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.697998][ T1126] FAULT_INJECTION: forcing a failure. [ 32.697998][ T1126] name failslab, interval 1, probability 5, space 0, times 99 [ 32.705203][ T1147] FAULT_INJECTION: forcing a failure. [ 32.705203][ T1147] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 32.724227][ T1147] CPU: 0 PID: 1147 Comm: syz.1.324 Not tainted syzkaller #0 [ 32.731516][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.741671][ T1147] Call Trace: [ 32.744972][ T1147] [ 32.747917][ T1147] __dump_stack+0x21/0x30 [ 32.752256][ T1147] dump_stack_lvl+0x110/0x170 [ 32.757200][ T1147] ? show_regs_print_info+0x20/0x20 [ 32.762590][ T1147] dump_stack+0x15/0x20 [ 32.766750][ T1147] should_fail+0x3ab/0x500 [ 32.771199][ T1147] should_fail_alloc_page+0x55/0x80 [ 32.776404][ T1147] prepare_alloc_pages+0x13f/0x590 [ 32.781526][ T1147] ? __alloc_pages_bulk+0xab0/0xab0 [ 32.786765][ T1147] __alloc_pages+0x11d/0x460 [ 32.791350][ T1147] ? unlock_page_memcg+0x114/0x130 [ 32.796454][ T1147] ? zone_watermark_fast+0x250/0x250 [ 32.801731][ T1147] ? page_remove_rmap+0xc6d/0xf40 [ 32.806929][ T1147] ? page_add_file_rmap+0x700/0x700 [ 32.812209][ T1147] ? mark_page_accessed+0x3a8/0x8e0 [ 32.817432][ T1147] __get_free_pages+0x10/0x30 [ 32.822301][ T1147] __tlb_remove_page_size+0x18a/0x310 [ 32.827680][ T1147] unmap_page_range+0x1059/0x1e00 [ 32.832902][ T1147] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 32.839438][ T1147] ? lru_cache_add+0x7e0/0x7e0 [ 32.844251][ T1147] unmap_vmas+0x26d/0x380 [ 32.848573][ T1147] ? unmap_page_range+0x1e00/0x1e00 [ 32.853850][ T1147] ? __kasan_check_write+0x14/0x20 [ 32.858955][ T1147] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 32.864411][ T1147] exit_mmap+0x412/0x8b0 [ 32.868947][ T1147] ? vm_brk+0x30/0x30 [ 32.872933][ T1147] ? mutex_unlock+0x8f/0x230 [ 32.877564][ T1147] ? uprobe_clear_state+0x2c6/0x320 [ 32.882768][ T1147] __mmput+0x92/0x300 [ 32.886752][ T1147] mmput+0x50/0x150 [ 32.891089][ T1147] do_exit+0xacc/0x29a0 [ 32.895268][ T1147] ? __kasan_check_write+0x14/0x20 [ 32.900396][ T1147] ? put_task_struct+0x90/0x90 [ 32.905150][ T1147] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 32.910949][ T1147] ? try_to_wake_up+0x610/0x1150 [ 32.915875][ T1147] ? __kasan_check_write+0x14/0x20 [ 32.921022][ T1147] ? _raw_spin_lock_irq+0x95/0xf0 [ 32.926087][ T1147] do_group_exit+0x149/0x310 [ 32.930665][ T1147] ? __kasan_check_write+0x14/0x20 [ 32.935764][ T1147] ? recalc_sigpending+0x1ac/0x230 [ 32.940885][ T1147] get_signal+0x64f/0x1430 [ 32.947648][ T1147] arch_do_signal_or_restart+0xe2/0x1100 [ 32.953296][ T1147] ? check_vma_flags+0x2d0/0x2d0 [ 32.958253][ T1147] ? get_sigframe_size+0x10/0x10 [ 32.963179][ T1147] ? __se_sys_futex+0x135/0x330 [ 32.968026][ T1147] exit_to_user_mode_loop+0xa7/0xe0 [ 32.973304][ T1147] exit_to_user_mode_prepare+0x87/0xd0 [ 32.978838][ T1147] syscall_exit_to_user_mode+0x1a/0x30 [ 32.984387][ T1147] do_syscall_64+0x58/0xa0 [ 32.989067][ T1147] ? clear_bhb_loop+0x50/0xa0 [ 32.993746][ T1147] ? clear_bhb_loop+0x50/0xa0 [ 32.998593][ T1147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.004892][ T1147] RIP: 0033:0x7fce93177b19 [ 33.009658][ T1147] Code: Unable to access opcode bytes at RIP 0x7fce93177aef. [ 33.017456][ T1147] RSP: 002b:00007fce91bcf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.026047][ T1147] RAX: fffffffffffffe00 RBX: 00007fce933fdfa8 RCX: 00007fce93177b19 [ 33.034538][ T1147] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce933fdfa8 [ 33.042602][ T1147] RBP: 00007fce933fdfa0 R08: 0000000000000000 R09: 0000000000000000 [ 33.050705][ T1147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.058803][ T1147] R13: 00007fce933fe038 R14: 00007ffe6b8bb5b0 R15: 00007ffe6b8bb698 [ 33.066779][ T1147] [ 33.074353][ T1126] CPU: 0 PID: 1126 Comm: syz.7.317 Not tainted syzkaller #0 [ 33.081746][ T1126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.091821][ T1126] Call Trace: [ 33.095115][ T1126] [ 33.098236][ T1126] __dump_stack+0x21/0x30 [ 33.102665][ T1126] dump_stack_lvl+0x110/0x170 [ 33.107381][ T1126] ? show_regs_print_info+0x20/0x20 [ 33.112845][ T1126] dump_stack+0x15/0x20 [ 33.117063][ T1126] should_fail+0x3ab/0x500 [ 33.121579][ T1126] __should_failslab+0xa4/0xe0 [ 33.126346][ T1126] should_failslab+0x9/0x20 [ 33.131027][ T1126] slab_pre_alloc_hook+0x39/0xd0 [ 33.135963][ T1126] ? ext4_mb_new_blocks+0x4a0/0x4140 [ 33.141349][ T1126] kmem_cache_alloc+0x44/0x260 [ 33.146111][ T1126] ext4_mb_new_blocks+0x4a0/0x4140 [ 33.151308][ T1126] ? __kmalloc+0x13d/0x2c0 [ 33.155747][ T1126] ? memset+0x35/0x40 [ 33.159761][ T1126] ? ext4_mb_pa_callback+0xd0/0xd0 [ 33.165660][ T1126] ? ext4_ext_check_overlap+0x308/0x550 [ 33.171556][ T1126] ? ext4_ext_find_goal+0x108/0x200 [ 33.176838][ T1126] ext4_ext_map_blocks+0x1652/0x6150 [ 33.182202][ T1126] ? __submit_bio+0x900/0x900 [ 33.186883][ T1126] ? blk_try_enter_queue+0x165/0x350 [ 33.192422][ T1126] ? ext4_ext_release+0x10/0x10 [ 33.197354][ T1126] ? ext4_es_lookup_extent+0x563/0x900 [ 33.202820][ T1126] ext4_map_blocks+0x979/0x1a50 [ 33.207734][ T1126] ? ext4_issue_zeroout+0x250/0x250 [ 33.212948][ T1126] ? ext4_journal_check_start+0x171/0x230 [ 33.218661][ T1126] ? ext4_iomap_begin+0x6af/0xb30 [ 33.223766][ T1126] ? __ext4_journal_start_sb+0x154/0x2b0 [ 33.229393][ T1126] ext4_iomap_begin+0x7b2/0xb30 [ 33.234325][ T1126] ? submit_bio_noacct+0x800/0x800 [ 33.239607][ T1126] ? ext4_alloc_da_blocks+0x190/0x190 [ 33.244978][ T1126] iomap_iter+0x582/0xaf0 [ 33.249300][ T1126] ? ext4_alloc_da_blocks+0x190/0x190 [ 33.254663][ T1126] __iomap_dio_rw+0x101e/0x1a30 [ 33.259683][ T1126] ? ext4_mark_iloc_dirty+0x30bd/0x4010 [ 33.265314][ T1126] ? iomap_dio_complete+0x720/0x720 [ 33.270620][ T1126] ? _raw_spin_lock+0x94/0xf0 [ 33.275381][ T1126] ? __kasan_check_read+0x11/0x20 [ 33.280407][ T1126] ? inode_dio_wait+0x25a/0x2d0 [ 33.285267][ T1126] ? ext4_fc_replay_link_internal+0x290/0x290 [ 33.291343][ T1126] iomap_dio_rw+0x3e/0x90 [ 33.295671][ T1126] ? ext4_file_write_iter+0x861/0x1530 [ 33.301248][ T1126] ext4_file_write_iter+0xee6/0x1530 [ 33.306628][ T1126] ? is_bpf_text_address+0x177/0x190 [ 33.312174][ T1126] ? ext4_file_write_iter+0x861/0x1530 [ 33.317976][ T1126] ? ext4_file_read_iter+0x500/0x500 [ 33.323549][ T1126] ? __asan_set_shadow_00+0xe/0x10 [ 33.328945][ T1126] ? do_futex+0xdd3/0x2800 [ 33.333513][ T1126] do_iter_readv_writev+0x477/0x5f0 [ 33.339200][ T1126] ? generic_file_rw_checks+0x2a0/0x2a0 [ 33.344740][ T1126] ? fsnotify_perm+0x67/0x5b0 [ 33.349412][ T1126] ? security_file_permission+0x79/0xa0 [ 33.354954][ T1126] ? security_file_permission+0x83/0xa0 [ 33.360497][ T1126] do_iter_write+0x207/0x7b0 [ 33.365175][ T1126] vfs_writev+0x2df/0x570 [ 33.369495][ T1126] ? do_writev+0x2c0/0x2c0 [ 33.373921][ T1126] ? __fget_files+0x2e1/0x340 [ 33.378600][ T1126] ? __fdget+0x1a1/0x230 [ 33.382834][ T1126] ? __se_sys_pwritev2+0xb6/0x290 [ 33.387847][ T1126] __se_sys_pwritev2+0x17d/0x290 [ 33.392777][ T1126] ? __x64_sys_pwritev2+0xd0/0xd0 [ 33.397793][ T1126] ? __kasan_check_write+0x14/0x20 [ 33.402915][ T1126] __x64_sys_pwritev2+0xbf/0xd0 [ 33.407842][ T1126] x64_sys_call+0x346/0x9a0 [ 33.412791][ T1126] do_syscall_64+0x4c/0xa0 [ 33.417302][ T1126] ? clear_bhb_loop+0x50/0xa0 [ 33.422231][ T1126] ? clear_bhb_loop+0x50/0xa0 [ 33.427072][ T1126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.433967][ T1126] RIP: 0033:0x7f74c3f6bb19 [ 33.438388][ T1126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.458344][ T1126] RSP: 002b:00007f74c29c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 33.466937][ T1126] RAX: ffffffffffffffda RBX: 00007f74c41f1fa0 RCX: 00007f74c3f6bb19 [ 33.475032][ T1126] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 33.482997][ T1126] RBP: 00007f74c4003b70 R08: 0000000000000000 R09: 0000000000000003 [ 33.491067][ T1126] R10: 0000000000005a00 R11: 0000000000000246 R12: 0000000000000000 [ 33.499159][ T1126] R13: 00007f74c41f2038 R14: 00007f74c41f1fa0 R15: 00007ffdf069b568 [ 33.507238][ T1126] [ 33.530598][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 33.530614][ T30] audit: type=1400 audit(1793892857.149:307): avc: denied { ioctl } for pid=1170 comm="syz.1.333" path="socket:[21479]" dev="sockfs" ino=21479 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.569336][ T30] audit: type=1400 audit(1793892857.179:308): avc: denied { unlink } for pid=639 comm="syz-executor" name=66696C6507 dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 33.623587][ T30] audit: type=1400 audit(1793892857.239:309): avc: denied { mounton } for pid=1180 comm="syz.9.340" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.702781][ T1189] loop7: detected capacity change from 0 to 512 [ 33.745788][ T1189] EXT4-fs (loop7): Test dummy encryption mode enabled [ 33.763217][ T30] audit: type=1400 audit(1793892857.379:310): avc: denied { setattr } for pid=1195 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 33.788716][ T1189] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #15: comm syz.7.343: inode has both inline data and extents flags [ 33.808538][ T30] audit: type=1400 audit(1793892857.419:311): avc: denied { connect } for pid=1199 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.832732][ T1189] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.343: couldn't read orphan inode 15 (err -117) [ 33.847543][ T1189] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 33.869047][ T30] audit: type=1400 audit(1793892857.479:312): avc: denied { map } for pid=1201 comm="syz.1.347" path="socket:[22678]" dev="sockfs" ino=22678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.896274][ T1189] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 33.950426][ T1189] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.988153][ T1210] loop1: detected capacity change from 0 to 128 [ 34.017134][ T30] audit: type=1400 audit(1793892857.629:313): avc: denied { load_policy } for pid=1213 comm="syz.8.353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.043349][ T1214] SELinux: policydb version 0 does not match my version range 15-33 [ 34.051525][ T1214] SELinux: failed to load policy [ 34.068226][ T1210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.072283][ T1179] loop0: detected capacity change from 0 to 131072 [ 34.089821][ T1210] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.101343][ T1210] capability: warning: `syz.1.350' uses deprecated v2 capabilities in a way that may be insecure [ 34.107333][ T30] audit: type=1400 audit(1793892857.719:314): avc: denied { read } for pid=1222 comm="syz.7.356" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.134608][ T30] audit: type=1400 audit(1793892857.739:315): avc: denied { open } for pid=1222 comm="syz.7.356" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.174173][ T1227] FAULT_INJECTION: forcing a failure. [ 34.174173][ T1227] name failslab, interval 1, probability 5, space 0, times 10 [ 34.187442][ T1227] CPU: 1 PID: 1227 Comm: syz.8.358 Not tainted syzkaller #0 [ 34.194753][ T1227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.204829][ T1227] Call Trace: [ 34.208221][ T1227] [ 34.211153][ T1227] __dump_stack+0x21/0x30 [ 34.215498][ T1227] dump_stack_lvl+0x110/0x170 [ 34.220180][ T1227] ? show_regs_print_info+0x20/0x20 [ 34.227031][ T1227] ? 0xffffffffa0002364 [ 34.231194][ T1227] ? rtnetlink_bind+0x80/0x80 [ 34.235913][ T1227] dump_stack+0x15/0x20 [ 34.240119][ T1227] should_fail+0x3ab/0x500 [ 34.245230][ T1227] __should_failslab+0xa4/0xe0 [ 34.250004][ T1227] should_failslab+0x9/0x20 [ 34.254505][ T1227] slab_pre_alloc_hook+0x39/0xd0 [ 34.259434][ T1227] ? __alloc_skb+0xe4/0x730 [ 34.263936][ T1227] kmem_cache_alloc+0x44/0x260 [ 34.268696][ T1227] __alloc_skb+0xe4/0x730 [ 34.274491][ T1227] netlink_ack+0x35c/0xb10 [ 34.279271][ T1227] ? selinux_nlmsg_lookup+0x396/0x440 [ 34.284634][ T1227] ? netlink_dump+0xdf0/0xdf0 [ 34.289304][ T1227] netlink_rcv_skb+0x267/0x430 [ 34.294144][ T1227] ? rtnetlink_bind+0x80/0x80 [ 34.298810][ T1227] ? netlink_ack+0xb10/0xb10 [ 34.303395][ T1227] ? _copy_from_iter+0x4a4/0x10a0 [ 34.308415][ T1227] ? __netlink_lookup+0x387/0x3b0 [ 34.313463][ T1227] rtnetlink_rcv+0x1c/0x20 [ 34.317877][ T1227] netlink_unicast+0x86c/0xa30 [ 34.322634][ T1227] netlink_sendmsg+0x879/0xb80 [ 34.327523][ T1227] ? netlink_getsockopt+0x530/0x530 [ 34.332761][ T1227] ? kasan_set_track+0x4a/0x70 [ 34.337535][ T1227] ? security_socket_sendmsg+0x82/0xa0 [ 34.342990][ T1227] ? netlink_getsockopt+0x530/0x530 [ 34.348295][ T1227] ____sys_sendmsg+0x5be/0x8f0 [ 34.353763][ T1227] ? __sys_sendmsg_sock+0x40/0x40 [ 34.358794][ T1227] ? import_iovec+0x7c/0xb0 [ 34.363328][ T1227] ___sys_sendmsg+0x236/0x2e0 [ 34.368036][ T1227] ? __sys_sendmsg+0x280/0x280 [ 34.372792][ T1227] ? __fdget+0x1a1/0x230 [ 34.377376][ T1227] __x64_sys_sendmsg+0x201/0x2d0 [ 34.382300][ T1227] ? ___sys_sendmsg+0x2e0/0x2e0 [ 34.387282][ T1227] ? ksys_write+0x1fa/0x260 [ 34.393138][ T1227] ? __kasan_check_write+0x14/0x20 [ 34.398363][ T1227] ? switch_fpu_return+0x15d/0x2c0 [ 34.403510][ T1227] x64_sys_call+0x4b/0x9a0 [ 34.407920][ T1227] do_syscall_64+0x4c/0xa0 [ 34.412348][ T1227] ? clear_bhb_loop+0x50/0xa0 [ 34.417017][ T1227] ? clear_bhb_loop+0x50/0xa0 [ 34.421808][ T1227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.427779][ T1227] RIP: 0033:0x7f4fdec3db19 [ 34.432220][ T1227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.452109][ T1227] RSP: 002b:00007f4fdd695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.460831][ T1227] RAX: ffffffffffffffda RBX: 00007f4fdeec3fa0 RCX: 00007f4fdec3db19 [ 34.469807][ T1227] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 34.478573][ T1227] RBP: 00007f4fdecd5b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.486683][ T1227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.494897][ T1227] R13: 00007f4fdeec4038 R14: 00007f4fdeec3fa0 R15: 00007ffe54f654b8 [ 34.502885][ T1227] [ 34.522788][ T1179] F2FS-fs (loop0): invalid crc value [ 34.547301][ T1229] Illegal XDP return value 4294967295, expect packet loss! [ 34.550493][ T30] audit: type=1400 audit(1793892858.159:316): avc: denied { read append } for pid=1230 comm="syz.8.359" name="usbmon2" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.593454][ T1179] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.649205][ T1179] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 34.676013][ T1179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 34.701463][ T1259] loop7: detected capacity change from 0 to 1024 [ 34.723076][ T1265] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 34.745741][ T1269] loop1: detected capacity change from 0 to 256 [ 34.811141][ T1259] EXT4-fs (loop7): Ignoring removed oldalloc option [ 34.823478][ T1259] EXT4-fs (loop7): Ignoring removed oldalloc option [ 34.857646][ T1259] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.901833][ T1280] netlink: 'syz.1.380': attribute type 29 has an invalid length. [ 34.928331][ T1259] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000004,max_dir_size_kb=0x0000000000000008,block_validity,nodelalloc,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 34.936604][ T1286] ip_tables: iptables: counters copy to user failed while replacing table [ 34.996703][ T1286] ip_tables: iptables: counters copy to user failed while replacing table [ 35.037596][ T20] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 35.181480][ T1306] loop1: detected capacity change from 0 to 4096 [ 35.219943][ T1306] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.300486][ T1306] FAULT_INJECTION: forcing a failure. [ 35.300486][ T1306] name failslab, interval 1, probability 5, space 0, times 9 [ 35.347739][ T1306] CPU: 0 PID: 1306 Comm: syz.1.390 Not tainted syzkaller #0 [ 35.355276][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.365360][ T1306] Call Trace: [ 35.368656][ T1306] [ 35.371692][ T1306] __dump_stack+0x21/0x30 [ 35.376129][ T1306] dump_stack_lvl+0x110/0x170 [ 35.380826][ T1306] ? show_regs_print_info+0x20/0x20 [ 35.386057][ T1306] dump_stack+0x15/0x20 [ 35.390397][ T1306] should_fail+0x3ab/0x500 [ 35.395011][ T1306] __should_failslab+0xa4/0xe0 [ 35.399805][ T1306] should_failslab+0x9/0x20 [ 35.404324][ T1306] slab_pre_alloc_hook+0x39/0xd0 [ 35.409296][ T1306] ? ext4_mb_new_blocks+0x4a0/0x4140 [ 35.414591][ T1306] kmem_cache_alloc+0x44/0x260 [ 35.419454][ T1306] ext4_mb_new_blocks+0x4a0/0x4140 [ 35.424576][ T1306] ? __kmalloc+0x13d/0x2c0 [ 35.429013][ T1306] ? memset+0x35/0x40 [ 35.433003][ T1306] ? ext4_mb_pa_callback+0xd0/0xd0 [ 35.438142][ T1306] ? ext4_ext_check_overlap+0x308/0x550 [ 35.443729][ T1306] ? ext4_ext_find_goal+0x108/0x200 [ 35.449167][ T1306] ext4_ext_map_blocks+0x1652/0x6150 [ 35.454588][ T1306] ? __submit_bio+0x900/0x900 [ 35.459317][ T1306] ? blk_try_enter_queue+0x165/0x350 [ 35.464605][ T1306] ? ext4_ext_release+0x10/0x10 [ 35.469457][ T1306] ? ext4_es_lookup_extent+0x563/0x900 [ 35.474926][ T1306] ext4_map_blocks+0x979/0x1a50 [ 35.479782][ T1306] ? ext4_issue_zeroout+0x250/0x250 [ 35.484987][ T1306] ? ext4_journal_check_start+0x171/0x230 [ 35.490821][ T1306] ? ext4_iomap_begin+0x6af/0xb30 [ 35.495841][ T1306] ? __ext4_journal_start_sb+0x154/0x2b0 [ 35.501473][ T1306] ext4_iomap_begin+0x7b2/0xb30 [ 35.506314][ T1306] ? submit_bio_noacct+0x800/0x800 [ 35.511435][ T1306] ? ext4_alloc_da_blocks+0x190/0x190 [ 35.516988][ T1306] iomap_iter+0x582/0xaf0 [ 35.521305][ T1306] ? ext4_alloc_da_blocks+0x190/0x190 [ 35.526859][ T1306] __iomap_dio_rw+0x101e/0x1a30 [ 35.531784][ T1306] ? ext4_mark_iloc_dirty+0x30bd/0x4010 [ 35.537321][ T1306] ? iomap_dio_complete+0x720/0x720 [ 35.542708][ T1306] ? _raw_spin_lock+0x94/0xf0 [ 35.547566][ T1306] ? __kasan_check_read+0x11/0x20 [ 35.552857][ T1306] ? inode_dio_wait+0x25a/0x2d0 [ 35.557711][ T1306] ? ext4_fc_replay_link_internal+0x290/0x290 [ 35.563796][ T1306] iomap_dio_rw+0x3e/0x90 [ 35.568132][ T1306] ? ext4_file_write_iter+0x861/0x1530 [ 35.573696][ T1306] ext4_file_write_iter+0xee6/0x1530 [ 35.578974][ T1306] ? is_bpf_text_address+0x177/0x190 [ 35.584276][ T1306] ? ext4_file_write_iter+0x861/0x1530 [ 35.589753][ T1306] ? ext4_file_read_iter+0x500/0x500 [ 35.595036][ T1306] ? __asan_set_shadow_00+0xe/0x10 [ 35.600139][ T1306] ? do_futex+0xdd3/0x2800 [ 35.604561][ T1306] do_iter_readv_writev+0x477/0x5f0 [ 35.609780][ T1306] ? generic_file_rw_checks+0x2a0/0x2a0 [ 35.615494][ T1306] ? fsnotify_perm+0x67/0x5b0 [ 35.620160][ T1306] ? security_file_permission+0x79/0xa0 [ 35.625719][ T1306] ? security_file_permission+0x83/0xa0 [ 35.631314][ T1306] do_iter_write+0x207/0x7b0 [ 35.635925][ T1306] vfs_writev+0x2df/0x570 [ 35.640249][ T1306] ? do_writev+0x2c0/0x2c0 [ 35.644673][ T1306] ? __fget_files+0x2e1/0x340 [ 35.649342][ T1306] ? __fdget+0x1a1/0x230 [ 35.653568][ T1306] ? __se_sys_pwritev2+0xb6/0x290 [ 35.658587][ T1306] __se_sys_pwritev2+0x17d/0x290 [ 35.663515][ T1306] ? __x64_sys_pwritev2+0xd0/0xd0 [ 35.668725][ T1306] ? __kasan_check_write+0x14/0x20 [ 35.673832][ T1306] __x64_sys_pwritev2+0xbf/0xd0 [ 35.678675][ T1306] x64_sys_call+0x346/0x9a0 [ 35.683181][ T1306] do_syscall_64+0x4c/0xa0 [ 35.687586][ T1306] ? clear_bhb_loop+0x50/0xa0 [ 35.692257][ T1306] ? clear_bhb_loop+0x50/0xa0 [ 35.696919][ T1306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.702812][ T1306] RIP: 0033:0x7fce93177b19 [ 35.707599][ T1306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.727290][ T1306] RSP: 002b:00007fce91bcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 35.735699][ T1306] RAX: ffffffffffffffda RBX: 00007fce933fdfa0 RCX: 00007fce93177b19 [ 35.743836][ T1306] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 35.751804][ T1306] RBP: 00007fce9320fb70 R08: 0000000000000000 R09: 0000000000000003 [ 35.759901][ T1306] R10: 0000000000005a00 R11: 0000000000000246 R12: 0000000000000000 [ 35.767861][ T1306] R13: 00007fce933fe038 R14: 00007fce933fdfa0 R15: 00007ffe6b8bb698 [ 35.775831][ T1306] [ 35.781228][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.917567][ T20] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 35.938248][ T20] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 35.947059][ T20] usb 9-1: Product: syz [ 35.952721][ T20] usb 9-1: config 0 descriptor?? [ 35.998140][ T20] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 36.009224][ T20] usb 9-1: Detected FT232H [ 36.047529][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 36.053897][ T1313] FAULT_INJECTION: forcing a failure. [ 36.053897][ T1313] name failslab, interval 1, probability 5, space 0, times 100 [ 36.075808][ T1313] CPU: 0 PID: 1313 Comm: syz.7.393 Not tainted syzkaller #0 [ 36.083135][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.093391][ T1313] Call Trace: [ 36.096684][ T1313] [ 36.099619][ T1313] __dump_stack+0x21/0x30 [ 36.103972][ T1313] dump_stack_lvl+0x110/0x170 [ 36.108762][ T1313] ? show_regs_print_info+0x20/0x20 [ 36.113977][ T1313] ? prandom_u32+0x24d/0x290 [ 36.118658][ T1313] dump_stack+0x15/0x20 [ 36.122933][ T1313] should_fail+0x3ab/0x500 [ 36.127366][ T1313] __should_failslab+0xa4/0xe0 [ 36.132147][ T1313] should_failslab+0x9/0x20 [ 36.136677][ T1313] slab_pre_alloc_hook+0x39/0xd0 [ 36.141623][ T1313] ? __anon_vma_prepare+0xa0/0x420 [ 36.146749][ T1313] kmem_cache_alloc+0x44/0x260 [ 36.151526][ T1313] ? find_mergeable_anon_vma+0x1ca/0x500 [ 36.157170][ T1313] __anon_vma_prepare+0xa0/0x420 [ 36.162117][ T1313] wp_page_copy+0x12cf/0x1890 [ 36.166902][ T1313] ? __kasan_check_write+0x14/0x20 [ 36.172117][ T1313] ? _raw_spin_lock+0x94/0xf0 [ 36.177324][ T1313] ? insert_page_into_pte_locked+0x310/0x310 [ 36.183497][ T1313] ? _raw_spin_lock+0x94/0xf0 [ 36.188409][ T1313] ? _raw_spin_trylock_bh+0x150/0x150 [ 36.193817][ T1313] ? vm_normal_page+0x1dd/0x1f0 [ 36.198682][ T1313] do_wp_page+0x9e1/0xc90 [ 36.203637][ T1313] handle_pte_fault+0x824/0x2770 [ 36.208644][ T1313] ? _raw_spin_unlock+0x4d/0x70 [ 36.214167][ T1313] ? fault_around_bytes_set+0xc0/0xc0 [ 36.219835][ T1313] do_handle_mm_fault+0x1b3b/0x1e30 [ 36.225171][ T1313] ? numa_migrate_prep+0xd0/0xd0 [ 36.230135][ T1313] ? __find_vma+0x30/0x150 [ 36.234690][ T1313] do_user_addr_fault+0x808/0x11c0 [ 36.240010][ T1313] ? do_mmap+0x86f/0xf10 [ 36.244276][ T1313] ? do_kern_addr_fault+0x80/0x80 [ 36.249315][ T1313] ? vm_mmap_pgoff+0x253/0x410 [ 36.254099][ T1313] ? debug_smp_processor_id+0x17/0x20 [ 36.259565][ T1313] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 36.265752][ T1313] ? exit_to_user_mode_prepare+0x39/0xd0 [ 36.271402][ T1313] exc_page_fault+0x51/0xb0 [ 36.276005][ T1313] asm_exc_page_fault+0x27/0x30 [ 36.280949][ T1313] RIP: 0033:0x7f74c3e223a3 [ 36.285375][ T1313] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 36.304997][ T1313] RSP: 002b:00007f74c29c2470 EFLAGS: 00010202 [ 36.311277][ T1313] RAX: 0000000000000400 RBX: 00007f74c29c2530 RCX: 00007f74ba5a3000 [ 36.319440][ T1313] RDX: 00007f74c29c26d0 RSI: 0000000000000000 RDI: 00007f74c29c25d0 [ 36.327427][ T1313] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009a [ 36.335410][ T1313] R10: 00000000000000b8 R11: 00007f74c29c2530 R12: 0000000000000001 [ 36.343497][ T1313] R13: 00007f74c40242e0 R14: 0000000000000020 R15: 00007f74c29c25d0 [ 36.351768][ T1313] [ 36.356351][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 36.373510][ T1313] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 36.387663][ T20] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 36.419453][ T20] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 36.582836][ T310] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.596713][ T1313] loop7: detected capacity change from 0 to 4096 [ 36.611650][ T1313] FAULT_INJECTION: forcing a failure. [ 36.611650][ T1313] name failslab, interval 1, probability 5, space 0, times 99 [ 36.627873][ T20] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.636293][ T310] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.656911][ T20] usb 9-1: USB disconnect, device number 2 [ 36.667561][ T310] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 36.746020][ T1313] CPU: 0 PID: 1313 Comm: syz.7.393 Not tainted syzkaller #0 [ 36.753353][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.763525][ T1313] Call Trace: [ 36.767263][ T1313] [ 36.770270][ T1313] __dump_stack+0x21/0x30 [ 36.775160][ T1313] dump_stack_lvl+0x110/0x170 [ 36.779885][ T1313] ? show_regs_print_info+0x20/0x20 [ 36.785971][ T1313] ? prandom_u32+0x24d/0x290 [ 36.790598][ T1313] dump_stack+0x15/0x20 [ 36.794785][ T1313] should_fail+0x3ab/0x500 [ 36.799231][ T1313] __should_failslab+0xa4/0xe0 [ 36.804016][ T1313] should_failslab+0x9/0x20 [ 36.808537][ T1313] slab_pre_alloc_hook+0x39/0xd0 [ 36.813504][ T1313] ? __se_sys_mount+0x9c/0x390 [ 36.818439][ T1313] __kmalloc_track_caller+0x6c/0x2c0 [ 36.823782][ T1313] ? __se_sys_mount+0x9c/0x390 [ 36.828834][ T1313] ? strnlen_user+0xe8/0x1c0 [ 36.833454][ T1313] strndup_user+0x74/0x150 [ 36.837885][ T1313] __se_sys_mount+0x9c/0x390 [ 36.842493][ T1313] ? __x64_sys_mount+0xd0/0xd0 [ 36.847359][ T1313] __x64_sys_mount+0xbf/0xd0 [ 36.851994][ T1313] x64_sys_call+0x6bf/0x9a0 [ 36.856817][ T1313] do_syscall_64+0x4c/0xa0 [ 36.861253][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 36.865988][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 36.870871][ T1313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.876779][ T1313] RIP: 0033:0x7f74c3f6cd8a [ 36.881199][ T1313] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.900804][ T1313] RSP: 002b:00007f74c29c2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.909315][ T1313] RAX: ffffffffffffffda RBX: 00007f74c29c2ee0 RCX: 00007f74c3f6cd8a [ 36.917285][ T1313] RDX: 0000200000000380 RSI: 00002000000003c0 RDI: 00007f74c29c2ea0 [ 36.925273][ T1313] RBP: 0000200000000380 R08: 00007f74c29c2ee0 R09: 0000000000000000 [ 36.933327][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000003c0 [ 36.941307][ T1313] R13: 00007f74c29c2ea0 R14: 0000000000000baf R15: 0000200000000440 [ 36.949520][ T1313] [ 36.963895][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 37.009304][ T1313] FAULT_INJECTION: forcing a failure. [ 37.009304][ T1313] name failslab, interval 1, probability 5, space 0, times 98 [ 37.024369][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.037538][ T1313] CPU: 1 PID: 1313 Comm: syz.7.393 Not tainted syzkaller #0 [ 37.042690][ T310] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 37.044858][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.044873][ T1313] Call Trace: [ 37.044879][ T1313] [ 37.044885][ T1313] __dump_stack+0x21/0x30 [ 37.054859][ T1332] X.509: Got cert with pkey (7) and sig (98) algorithm OIDs [ 37.063952][ T1313] dump_stack_lvl+0x110/0x170 [ 37.063985][ T1313] ? show_regs_print_info+0x20/0x20 [ 37.077497][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.081856][ T1313] ? prandom_u32+0x24d/0x290 [ 37.104407][ T1313] dump_stack+0x15/0x20 [ 37.108842][ T1313] should_fail+0x3ab/0x500 [ 37.113710][ T1313] __should_failslab+0xa4/0xe0 [ 37.118502][ T1313] should_failslab+0x9/0x20 [ 37.123019][ T1313] slab_pre_alloc_hook+0x39/0xd0 [ 37.127980][ T1313] ? __alloc_skb+0xe4/0x730 [ 37.132503][ T1313] kmem_cache_alloc+0x44/0x260 [ 37.137297][ T1313] __alloc_skb+0xe4/0x730 [ 37.141629][ T1313] alloc_uevent_skb+0x85/0x240 [ 37.146416][ T1313] kobject_uevent_net_broadcast+0x335/0x5a0 [ 37.152414][ T1313] kobject_uevent_env+0x52b/0x700 [ 37.157651][ T1313] disk_force_media_change+0x1a0/0x2c0 [ 37.163231][ T1313] ? __mutex_lock_slowpath+0x10/0x10 [ 37.168603][ T1313] ? bdev_check_media_change+0x340/0x340 [ 37.174313][ T1313] ? percpu_ref_resurrect+0xfa/0x170 [ 37.180134][ T1313] ? blk_mq_unfreeze_queue+0xab/0x110 [ 37.185527][ T1313] __loop_clr_fd+0x9ef/0xd00 [ 37.190219][ T1313] ? __kasan_check_write+0x14/0x20 [ 37.195401][ T1313] lo_ioctl+0x145f/0x2350 [ 37.199750][ T1313] ? lo_release+0x200/0x200 [ 37.204291][ T1313] ? 0xffffffffa0028000 [ 37.208447][ T1313] ? is_bpf_text_address+0x177/0x190 [ 37.214177][ T1313] ? __kernel_text_address+0xa0/0x100 [ 37.219569][ T1313] ? unwind_get_return_address+0x4d/0x90 [ 37.225220][ T1313] ? stack_trace_save+0xf0/0xf0 [ 37.230081][ T1313] ? arch_stack_walk+0xee/0x140 [ 37.234954][ T1313] ? avc_has_perm_noaudit+0x398/0x5c0 [ 37.240353][ T1313] ? __kasan_check_write+0x14/0x20 [ 37.246017][ T1313] ? _raw_spin_lock+0x94/0xf0 [ 37.250718][ T1313] ? _raw_spin_trylock_bh+0x150/0x150 [ 37.256118][ T1313] ? fsnotify+0x51f/0x1a90 [ 37.260915][ T1313] ? avc_denied+0x1b0/0x1b0 [ 37.265631][ T1313] ? _raw_spin_unlock+0x4d/0x70 [ 37.270667][ T1313] ? find_inode_fast+0x3c2/0x3f0 [ 37.275638][ T1313] ? __kasan_check_write+0x14/0x20 [ 37.280778][ T1313] ? mutex_unlock+0x8f/0x230 [ 37.285400][ T1313] ? __mutex_lock_slowpath+0x10/0x10 [ 37.290721][ T1313] ? 0xffffffffa0028000 [ 37.294879][ T1313] ? is_bpf_text_address+0x177/0x190 [ 37.300184][ T1313] ? __kernel_text_address+0xa0/0x100 [ 37.305667][ T1313] ? unwind_get_return_address+0x4d/0x90 [ 37.311418][ T1313] ? stack_trace_save+0xf0/0xf0 [ 37.316289][ T1313] ? arch_stack_walk+0xee/0x140 [ 37.321352][ T1313] ? avc_has_extended_perms+0x869/0xed0 [ 37.326911][ T1313] ? memcpy+0x56/0x70 [ 37.330906][ T1313] ? avc_has_extended_perms+0x9d5/0xed0 [ 37.336474][ T1313] ? avc_flush+0x2b0/0x2b0 [ 37.340891][ T1313] ? kasan_set_track+0x5b/0x70 [ 37.345678][ T1313] ? __kasan_slab_free+0x11/0x20 [ 37.350620][ T1313] ? slab_free_freelist_hook+0xc2/0x190 [ 37.356162][ T1313] ? kmem_cache_free+0x100/0x320 [ 37.361112][ T1313] ? __asan_set_shadow_00+0xe/0x10 [ 37.366240][ T1313] ? do_vfs_ioctl+0x1c15/0x1d80 [ 37.371093][ T1313] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 37.376738][ T1313] ? blkdev_common_ioctl+0x59f/0x1bc0 [ 37.382301][ T1313] ? ioctl_has_perm+0x1b8/0x4f0 [ 37.387167][ T1313] ? blkdev_bszset+0x1f0/0x1f0 [ 37.393938][ T1313] ? has_cap_mac_admin+0x370/0x370 [ 37.399147][ T1313] ? __kasan_slab_free+0x11/0x20 [ 37.404105][ T1313] ? slab_free_freelist_hook+0xc2/0x190 [ 37.409675][ T1313] ? putname+0x111/0x160 [ 37.413936][ T1313] ? kmem_cache_free+0x100/0x320 [ 37.418881][ T1313] ? selinux_file_ioctl+0x3ad/0x4c0 [ 37.424123][ T1313] ? selinux_file_alloc_security+0x120/0x120 [ 37.430134][ T1313] ? lo_release+0x200/0x200 [ 37.434659][ T1313] blkdev_ioctl+0x2f3/0x660 [ 37.439181][ T1313] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 37.444759][ T1313] block_ioctl+0xaf/0x100 [ 37.449116][ T1313] ? blkdev_iopoll+0x100/0x100 [ 37.453897][ T1313] __se_sys_ioctl+0x121/0x1a0 [ 37.458591][ T1313] __x64_sys_ioctl+0x7b/0x90 [ 37.463205][ T1313] x64_sys_call+0x2f/0x9a0 [ 37.467855][ T1313] do_syscall_64+0x4c/0xa0 [ 37.472313][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 37.477031][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 37.481897][ T1313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.487838][ T1313] RIP: 0033:0x7f74c3f6b7ab [ 37.492266][ T1313] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 37.512486][ T1313] RSP: 002b:00007f74c29c2e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.520893][ T1313] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f74c3f6b7ab [ 37.529205][ T1313] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 37.537171][ T1313] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 37.545138][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 37.553118][ T1313] R13: 00007f74c29c2ea0 R14: 0000000000000baf R15: 0000200000000440 [ 37.561089][ T1313] [ 37.564915][ T1313] FAULT_INJECTION: forcing a failure. [ 37.564915][ T1313] name failslab, interval 1, probability 5, space 0, times 97 [ 37.578535][ T1313] CPU: 0 PID: 1313 Comm: syz.7.393 Not tainted syzkaller #0 [ 37.585848][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.595925][ T1313] Call Trace: [ 37.599230][ T1313] [ 37.602179][ T1313] __dump_stack+0x21/0x30 [ 37.606523][ T1313] dump_stack_lvl+0x110/0x170 [ 37.611343][ T1313] ? show_regs_print_info+0x20/0x20 [ 37.616575][ T1313] ? prandom_u32+0x24d/0x290 [ 37.621457][ T1313] dump_stack+0x15/0x20 [ 37.626106][ T1313] should_fail+0x3ab/0x500 [ 37.630795][ T1313] __should_failslab+0xa4/0xe0 [ 37.635674][ T1313] should_failslab+0x9/0x20 [ 37.640185][ T1313] slab_pre_alloc_hook+0x39/0xd0 [ 37.645129][ T1313] ? __alloc_skb+0xe4/0x730 [ 37.649733][ T1313] kmem_cache_alloc+0x44/0x260 [ 37.654525][ T1313] __alloc_skb+0xe4/0x730 [ 37.658949][ T1313] alloc_uevent_skb+0x85/0x240 [ 37.663808][ T1313] kobject_uevent_net_broadcast+0x335/0x5a0 [ 37.669707][ T1313] kobject_uevent_env+0x52b/0x700 [ 37.674738][ T1313] disk_force_media_change+0x1a0/0x2c0 [ 37.680203][ T1313] ? __mutex_lock_slowpath+0x10/0x10 [ 37.685521][ T1313] ? bdev_check_media_change+0x340/0x340 [ 37.691161][ T1313] ? percpu_ref_resurrect+0xfa/0x170 [ 37.696461][ T1313] ? blk_mq_unfreeze_queue+0xab/0x110 [ 37.701839][ T1313] __loop_clr_fd+0x9ef/0xd00 [ 37.706436][ T1313] ? __kasan_check_write+0x14/0x20 [ 37.711797][ T1313] lo_ioctl+0x145f/0x2350 [ 37.716519][ T1313] ? lo_release+0x200/0x200 [ 37.721078][ T1313] ? 0xffffffffa0028000 [ 37.725238][ T1313] ? is_bpf_text_address+0x177/0x190 [ 37.730531][ T1313] ? __kernel_text_address+0xa0/0x100 [ 37.735906][ T1313] ? unwind_get_return_address+0x4d/0x90 [ 37.741542][ T1313] ? stack_trace_save+0xf0/0xf0 [ 37.746398][ T1313] ? arch_stack_walk+0xee/0x140 [ 37.751254][ T1313] ? avc_has_perm_noaudit+0x398/0x5c0 [ 37.756639][ T1313] ? __kasan_check_write+0x14/0x20 [ 37.761756][ T1313] ? _raw_spin_lock+0x94/0xf0 [ 37.766444][ T1313] ? _raw_spin_trylock_bh+0x150/0x150 [ 37.772075][ T1313] ? fsnotify+0x51f/0x1a90 [ 37.776494][ T1313] ? avc_denied+0x1b0/0x1b0 [ 37.781012][ T1313] ? _raw_spin_unlock+0x4d/0x70 [ 37.785873][ T1313] ? find_inode_fast+0x3c2/0x3f0 [ 37.790839][ T1313] ? __kasan_check_write+0x14/0x20 [ 37.795978][ T1313] ? mutex_unlock+0x8f/0x230 [ 37.800577][ T1313] ? __mutex_lock_slowpath+0x10/0x10 [ 37.805870][ T1313] ? 0xffffffffa0028000 [ 37.810027][ T1313] ? is_bpf_text_address+0x177/0x190 [ 37.815315][ T1313] ? __kernel_text_address+0xa0/0x100 [ 37.820689][ T1313] ? unwind_get_return_address+0x4d/0x90 [ 37.826333][ T1313] ? stack_trace_save+0xf0/0xf0 [ 37.831186][ T1313] ? arch_stack_walk+0xee/0x140 [ 37.836042][ T1313] ? avc_has_extended_perms+0x869/0xed0 [ 37.841598][ T1313] ? memcpy+0x56/0x70 [ 37.845600][ T1313] ? avc_has_extended_perms+0x9d5/0xed0 [ 37.851149][ T1313] ? avc_flush+0x2b0/0x2b0 [ 37.855562][ T1313] ? kasan_set_track+0x5b/0x70 [ 37.860325][ T1313] ? __kasan_slab_free+0x11/0x20 [ 37.865260][ T1313] ? slab_free_freelist_hook+0xc2/0x190 [ 37.870804][ T1313] ? kmem_cache_free+0x100/0x320 [ 37.875745][ T1313] ? __asan_set_shadow_00+0xe/0x10 [ 37.880858][ T1313] ? do_vfs_ioctl+0x1c15/0x1d80 [ 37.885714][ T1313] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 37.891356][ T1313] ? blkdev_common_ioctl+0x59f/0x1bc0 [ 37.896735][ T1313] ? ioctl_has_perm+0x1b8/0x4f0 [ 37.901590][ T1313] ? blkdev_bszset+0x1f0/0x1f0 [ 37.906354][ T1313] ? has_cap_mac_admin+0x370/0x370 [ 37.911466][ T1313] ? __kasan_slab_free+0x11/0x20 [ 37.916418][ T1313] ? slab_free_freelist_hook+0xc2/0x190 [ 37.921964][ T1313] ? putname+0x111/0x160 [ 37.926214][ T1313] ? kmem_cache_free+0x100/0x320 [ 37.931157][ T1313] ? selinux_file_ioctl+0x3ad/0x4c0 [ 37.936377][ T1313] ? selinux_file_alloc_security+0x120/0x120 [ 37.942794][ T1313] ? lo_release+0x200/0x200 [ 37.947302][ T1313] blkdev_ioctl+0x2f3/0x660 [ 37.951807][ T1313] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 37.957268][ T1313] block_ioctl+0xaf/0x100 [ 37.961600][ T1313] ? blkdev_iopoll+0x100/0x100 [ 37.966364][ T1313] __se_sys_ioctl+0x121/0x1a0 [ 37.971057][ T1313] __x64_sys_ioctl+0x7b/0x90 [ 37.975657][ T1313] x64_sys_call+0x2f/0x9a0 [ 37.980077][ T1313] do_syscall_64+0x4c/0xa0 [ 37.984495][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 37.989174][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 37.993867][ T1313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.999853][ T1313] RIP: 0033:0x7f74c3f6b7ab [ 38.004275][ T1313] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 38.023888][ T1313] RSP: 002b:00007f74c29c2e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.032311][ T1313] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f74c3f6b7ab [ 38.040291][ T1313] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 38.048277][ T1313] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 38.056692][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 38.064686][ T1313] R13: 00007f74c29c2ea0 R14: 0000000000000baf R15: 0000200000000440 [ 38.072704][ T1313] [ 38.089023][ T20] ftdi_sio 9-1:0.0: device disconnected [ 38.099830][ T310] usb 1-1: config 0 descriptor?? [ 38.111876][ T1346] loop1: detected capacity change from 0 to 512 [ 38.147572][ T310] usb 1-1: can't set config #0, error -71 [ 38.157627][ T310] usb 1-1: USB disconnect, device number 2 [ 38.182447][ T1349] loop0: detected capacity change from 0 to 512 [ 38.189171][ T1313] FAULT_INJECTION: forcing a failure. [ 38.189171][ T1313] name failslab, interval 1, probability 5, space 0, times 96 [ 38.206738][ T1313] CPU: 0 PID: 1313 Comm: syz.7.393 Not tainted syzkaller #0 [ 38.214160][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.224237][ T1313] Call Trace: [ 38.227524][ T1313] [ 38.230473][ T1313] __dump_stack+0x21/0x30 [ 38.234813][ T1313] dump_stack_lvl+0x110/0x170 [ 38.239495][ T1313] ? show_regs_print_info+0x20/0x20 [ 38.244698][ T1313] ? prandom_u32+0x24d/0x290 [ 38.248923][ T1352] using random self ethernet address [ 38.249293][ T1313] dump_stack+0x15/0x20 [ 38.254563][ T1352] using random host ethernet address [ 38.258713][ T1313] should_fail+0x3ab/0x500 [ 38.258740][ T1313] __should_failslab+0xa4/0xe0 [ 38.258757][ T1313] should_failslab+0x9/0x20 [ 38.258773][ T1313] slab_pre_alloc_hook+0x39/0xd0 [ 38.282735][ T1313] ? __kernfs_new_node+0xa6/0x670 [ 38.287783][ T1313] __kmalloc_track_caller+0x6c/0x2c0 [ 38.293092][ T1313] ? __kernfs_new_node+0xa6/0x670 [ 38.298236][ T1313] kstrdup_const+0x55/0x90 [ 38.302682][ T1313] __kernfs_new_node+0xa6/0x670 [ 38.307550][ T1313] ? kernfs_new_node+0x260/0x260 [ 38.312496][ T1313] ? rwsem_write_trylock+0x136/0x300 [ 38.317794][ T1313] ? cgroup_mkdir+0x395/0x13d0 [ 38.322570][ T1313] ? kernfs_iop_mkdir+0x1a3/0x2b0 [ 38.327602][ T1313] ? vfs_mkdir+0x38b/0x590 [ 38.332034][ T1313] ? up_write+0x7b/0x290 [ 38.336287][ T1313] kernfs_new_node+0x150/0x260 [ 38.341071][ T1313] __kernfs_create_file+0x4e/0x270 [ 38.346203][ T1313] cgroup_addrm_files+0xa46/0xf50 [ 38.351244][ T1313] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 38.357408][ T1313] ? pcpu_memcg_post_alloc_hook+0x176/0x210 [ 38.363308][ T1313] ? __kasan_check_write+0x14/0x20 [ 38.368427][ T1313] ? __kasan_check_write+0x14/0x20 [ 38.373546][ T1313] ? _raw_spin_lock_irq+0x95/0xf0 [ 38.378571][ T1313] css_populate_dir+0x1d4/0x360 [ 38.383428][ T1313] cgroup_mkdir+0x1153/0x13d0 [ 38.388125][ T1313] ? css_task_iter_end+0x270/0x270 [ 38.393349][ T1313] ? up_read+0x56/0x1d0 [ 38.397515][ T1313] ? css_task_iter_end+0x270/0x270 [ 38.402638][ T1313] kernfs_iop_mkdir+0x1a3/0x2b0 [ 38.407495][ T1313] vfs_mkdir+0x38b/0x590 [ 38.411744][ T1313] do_mkdirat+0x174/0x4d0 [ 38.416078][ T1313] __x64_sys_mkdirat+0x89/0xa0 [ 38.420849][ T1313] x64_sys_call+0x37e/0x9a0 [ 38.425372][ T1313] do_syscall_64+0x4c/0xa0 [ 38.429791][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 38.434556][ T1313] ? clear_bhb_loop+0x50/0xa0 [ 38.439237][ T1313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.445136][ T1313] RIP: 0033:0x7f74c3f6bb19 [ 38.449552][ T1313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.469162][ T1313] RSP: 002b:00007f74c29c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 38.477629][ T1313] RAX: ffffffffffffffda RBX: 00007f74c41f1fa0 RCX: 00007f74c3f6bb19 [ 38.485605][ T1313] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 38.493732][ T1313] RBP: 00007f74c4003b70 R08: 0000000000000000 R09: 0000000000000000 [ 38.501725][ T1313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.509877][ T1313] R13: 00007f74c41f2038 R14: 00007f74c41f1fa0 R15: 00007ffdf069b568 [ 38.517857][ T1313] [ 38.522285][ T1313] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 38.565947][ T1349] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 38.570864][ T1356] loop9: detected capacity change from 0 to 4096 [ 38.669436][ T1356] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.701013][ T1349] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.736113][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 38.736134][ T30] audit: type=1400 audit(1793892862.349:352): avc: denied { setattr } for pid=1347 comm="syz.0.408" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.766258][ T1353] device-mapper: table: 253:11: thin-pool: unknown target type [ 38.786621][ T1349] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.408: corrupted inode contents [ 38.801435][ T1353] device-mapper: ioctl: error adding target to table [ 38.818610][ T1349] EXT4-fs (loop0): Remounting filesystem read-only [ 38.825417][ T1349] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.408: mark_inode_dirty error [ 38.840017][ T1349] EXT4-fs (loop0): Remounting filesystem read-only [ 38.856911][ T1349] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.408: corrupted inode contents [ 38.869014][ T30] audit: type=1400 audit(1793892862.459:353): avc: denied { reparent } for pid=1354 comm="syz.9.410" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.893253][ T1349] EXT4-fs (loop0): Remounting filesystem read-only [ 38.937563][ T20] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 39.000117][ T1369] loop9: detected capacity change from 0 to 4096 [ 39.025527][ T1374] loop1: detected capacity change from 0 to 512 [ 39.081969][ T1374] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.103706][ T1369] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 39.184189][ T1374] EXT4-fs (loop1): 1 truncate cleaned up [ 39.189964][ T20] usb 9-1: Using ep0 maxpacket: 16 [ 39.211788][ T1374] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 39.249542][ T286] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 39.266143][ T1390] device bridge_slave_0 left promiscuous mode [ 39.298108][ T1390] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.321898][ T1392] loop0: detected capacity change from 0 to 4096 [ 39.334986][ T1390] device bridge_slave_1 left promiscuous mode [ 39.337554][ T20] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.345364][ T286] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 39.363225][ T20] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.367646][ T1390] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.383482][ T20] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 39.393810][ T286] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz-executor: mark_inode_dirty error [ 39.409538][ T20] usb 9-1: config 0 interface 0 has no altsetting 0 [ 39.416186][ T20] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 39.445568][ T20] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.482004][ T1400] loop9: detected capacity change from 0 to 128 [ 39.492824][ T1392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.505325][ T20] usb 9-1: config 0 descriptor?? [ 39.514094][ T1400] EXT4-fs (loop9): mounted filesystem without journal. Opts: min_batch_time=0x00000000000007ff,,errors=continue. Quota mode: none. [ 39.540007][ T1400] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.987476][ C0] sched: RT throttling activated [ 40.995782][ T1400] syz.9.425 (pid 1400) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 42.037559][ T20] usbhid 9-1:0.0: can't add hid device: -71 [ 42.047575][ T20] usbhid: probe of 9-1:0.0 failed with error -71 [ 42.079334][ T20] usb 9-1: USB disconnect, device number 3 [ 42.116005][ T1407] loop0: detected capacity change from 0 to 8192 [ 42.150235][ T30] audit: type=1400 audit(1793892865.769:354): avc: denied { bind } for pid=1410 comm="syz.7.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.171526][ T1413] loop9: detected capacity change from 0 to 512 [ 42.214100][ T30] audit: type=1400 audit(1793892865.769:355): avc: denied { name_bind } for pid=1410 comm="syz.7.431" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 42.242794][ T1420] loop0: detected capacity change from 0 to 1024 [ 42.260764][ T30] audit: type=1400 audit(1793892865.769:356): avc: denied { node_bind } for pid=1410 comm="syz.7.431" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 42.277146][ T1413] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.281564][ T1420] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.312350][ T30] audit: type=1400 audit(1793892865.879:357): avc: denied { read write } for pid=1421 comm="syz.7.436" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.337886][ T1413] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 42.355238][ T1413] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.366232][ T30] audit: type=1400 audit(1793892865.879:358): avc: denied { open } for pid=1421 comm="syz.7.436" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.398185][ T1420] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,data_err=ignore,barrier,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: none. [ 42.431679][ T30] audit: type=1400 audit(1793892865.879:359): avc: denied { ioctl } for pid=1421 comm="syz.7.436" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.461147][ T1427] EXT4-fs (loop8): Ignoring removed orlov option [ 42.467656][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.473936][ T1427] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 42.482651][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.495748][ T1427] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 42.500514][ T1419] device bridge_slave_0 entered promiscuous mode [ 42.516747][ T1427] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 42.535238][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.542834][ T584] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 42.565461][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.576000][ T1419] device bridge_slave_1 entered promiscuous mode [ 42.628611][ T30] audit: type=1400 audit(1793892866.249:360): avc: denied { unmount } for pid=651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.725781][ T1443] device-mapper: table: 253:3: crypt: Gap in table [ 42.735466][ T1443] device-mapper: ioctl: error adding target to table [ 42.750496][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.757577][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.764884][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.771946][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.804396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.812403][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.821854][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.829857][ T1448] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 42.830646][ T584] usb 8-1: Using ep0 maxpacket: 16 [ 42.847560][ T20] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 42.857171][ T1448] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 42.875664][ T1448] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,quota,,errors=continue. Quota mode: writeback. [ 42.890490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.898960][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.906023][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.913532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.926265][ T1448] EXT4-fs warning (device loop0): empty_inline_dir:1893: bad inline directory (dir #12) - no `..' [ 42.937317][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.944383][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.957442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.967575][ T584] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.979967][ T584] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.998246][ T306] device bridge_slave_1 left promiscuous mode [ 43.004367][ T584] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.014546][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.017425][ T584] usb 8-1: config 0 interface 0 has no altsetting 0 [ 43.030948][ T310] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 43.031089][ T306] device bridge_slave_0 left promiscuous mode [ 43.038832][ T584] usb 8-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 43.053923][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.057203][ T584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.072294][ T306] device veth1_macvtap left promiscuous mode [ 43.073307][ T584] usb 8-1: config 0 descriptor?? [ 43.083939][ T306] device veth0_vlan left promiscuous mode [ 43.101481][ T30] audit: type=1400 audit(1793892866.719:361): avc: denied { write } for pid=1452 comm="syz.0.446" name="id" dev="configfs" ino=23435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 43.125496][ T1453] UDC core: couldn't find an available UDC or it's busy: -19 [ 43.191118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.203993][ T1419] device veth0_vlan entered promiscuous mode [ 43.210682][ T1455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 43.218820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.227706][ T20] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.228509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.247551][ T20] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.247828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.265426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.267554][ T20] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.273726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.293650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.309418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.313384][ T20] usb 10-1: config 0 interface 0 has no altsetting 0 [ 43.317945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.333120][ T1419] device veth1_macvtap entered promiscuous mode [ 43.334220][ T20] usb 10-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 43.343880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.356657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.364974][ T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.365635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.381920][ T20] usb 10-1: config 0 descriptor?? [ 43.398277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.415249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.425004][ T1458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'. [ 43.490732][ T310] usb 9-1: config 127 has an invalid interface number: 57 but max is 0 [ 43.499328][ T310] usb 9-1: config 127 has no interface number 0 [ 43.505588][ T310] usb 9-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 43.516869][ T310] usb 9-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 43.528208][ T310] usb 9-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 43.691709][ T584] input: HID 046d:c215 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C215.0004/input/input7 [ 43.770114][ T584] logitech 0003:046D:C215.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.7-1/input0 [ 43.797191][ T584] usb 8-1: USB disconnect, device number 7 [ 43.827612][ T310] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 43.828267][ T1461] fido_id[1461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 43.836669][ T310] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.836690][ T310] usb 9-1: Product: syz [ 43.836703][ T310] usb 9-1: Manufacturer: syz [ 43.836713][ T310] usb 9-1: SerialNumber: syz [ 43.897632][ T1446] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 43.929277][ T20] hid-rmi 0003:1532:011D.0005: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.9-1/input0 [ 44.169366][ T1469] set_capacity_and_notify: 2 callbacks suppressed [ 44.169383][ T1469] loop0: detected capacity change from 0 to 8192 [ 44.190852][ T42] usb 10-1: USB disconnect, device number 3 [ 44.245634][ T1469] attempt to access beyond end of device [ 44.245634][ T1469] loop0: rw=0, want=57848, limit=8192 [ 44.300244][ T1469] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.310041][ T1470] attempt to access beyond end of device [ 44.310041][ T1470] loop0: rw=0, want=57848, limit=8192 [ 44.377953][ T1470] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.395600][ T1475] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 44.398633][ T1446] FAULT_INJECTION: forcing a failure. [ 44.398633][ T1446] name fail_futex, interval 1, probability 0, space 0, times 0 [ 44.417619][ T1470] attempt to access beyond end of device [ 44.417619][ T1470] loop0: rw=0, want=57848, limit=8192 [ 44.427709][ T1446] CPU: 0 PID: 1446 Comm: syz.8.443 Not tainted syzkaller #0 [ 44.435753][ T1446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.445831][ T1446] Call Trace: [ 44.447532][ T1470] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.449129][ T1446] [ 44.449137][ T1446] __dump_stack+0x21/0x30 [ 44.464536][ T1446] dump_stack_lvl+0x110/0x170 [ 44.469229][ T1446] ? show_regs_print_info+0x20/0x20 [ 44.474431][ T1446] ? _raw_spin_unlock+0x4d/0x70 [ 44.478123][ T1469] attempt to access beyond end of device [ 44.478123][ T1469] loop0: rw=0, want=57848, limit=8192 [ 44.479282][ T1446] ? switch_mm_irqs_off+0x2fb/0x960 [ 44.495288][ T1446] dump_stack+0x15/0x20 [ 44.499459][ T1446] should_fail+0x3ab/0x500 [ 44.503895][ T1446] get_futex_key+0x143/0xb60 [ 44.505135][ T1469] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.508490][ T1446] ? futex_wait_restart+0x250/0x250 [ 44.508516][ T1446] ? preempt_schedule_common+0xbe/0xf0 [ 44.508534][ T1446] ? preempt_schedule+0xbc/0xd0 [ 44.527643][ T1470] attempt to access beyond end of device [ 44.527643][ T1470] loop0: rw=0, want=57848, limit=8192 [ 44.532124][ T1446] futex_wait_setup+0x52/0x510 [ 44.532151][ T1446] ? ttwu_do_wakeup+0x447/0x470 [ 44.532169][ T1446] futex_wait+0x235/0x8f0 [ 44.556878][ T1446] ? do_futex+0x2800/0x2800 [ 44.557551][ T1470] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.561409][ T1446] do_futex+0xdb1/0x2800 [ 44.561437][ T1446] ? __asan_set_shadow_00+0xe/0x10 [ 44.578901][ T1446] ? do_vfs_ioctl+0x1c15/0x1d80 [ 44.583768][ T1446] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 44.589420][ T1446] ? futex_exit_release+0x1e0/0x1e0 [ 44.590040][ T1469] attempt to access beyond end of device [ 44.590040][ T1469] loop0: rw=0, want=57848, limit=8192 [ 44.594627][ T1446] ? blkdev_common_ioctl+0x59f/0x1bc0 [ 44.594655][ T1446] ? ioctl_has_perm+0x1b8/0x4f0 [ 44.615660][ T1446] ? blkdev_bszset+0x1f0/0x1f0 [ 44.620433][ T1446] ? has_cap_mac_admin+0x370/0x370 [ 44.625560][ T1446] ? selinux_file_ioctl+0x3ad/0x4c0 [ 44.626060][ T1469] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.630761][ T1446] ? kasan_quarantine_put+0x34/0x190 [ 44.630790][ T1446] __se_sys_futex+0x135/0x330 [ 44.630810][ T1446] ? __x64_sys_futex+0x100/0x100 [ 44.630824][ T1446] ? __kasan_check_write+0x14/0x20 [ 44.630848][ T1446] __x64_sys_futex+0xe5/0x100 [ 44.630862][ T1446] x64_sys_call+0x251/0x9a0 [ 44.659722][ T1470] attempt to access beyond end of device [ 44.659722][ T1470] loop0: rw=0, want=57848, limit=8192 [ 44.664015][ T1446] do_syscall_64+0x4c/0xa0 [ 44.664044][ T1446] ? clear_bhb_loop+0x50/0xa0 [ 44.687549][ T1470] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.688416][ T1446] ? clear_bhb_loop+0x50/0xa0 [ 44.701214][ T1446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.707123][ T1446] RIP: 0033:0x7f4fdec3db19 [ 44.711077][ T1469] attempt to access beyond end of device [ 44.711077][ T1469] loop0: rw=0, want=57848, limit=8192 [ 44.711537][ T1446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.741962][ T1446] RSP: 002b:00007f4fdd6950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 44.742808][ T1469] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.750388][ T1446] RAX: ffffffffffffffda RBX: 00007f4fdeec3fa8 RCX: 00007f4fdec3db19 [ 44.750402][ T1446] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fdeec3fa8 [ 44.750412][ T1446] RBP: 00007f4fdeec3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 44.750422][ T1446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.777867][ T1469] attempt to access beyond end of device [ 44.777867][ T1469] loop0: rw=0, want=57848, limit=8192 [ 44.782774][ T1446] R13: 00007f4fdeec4038 R14: 00007ffe54f653d0 R15: 00007ffe54f654b8 [ 44.782794][ T1446] [ 44.880442][ T1469] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.903085][ T1469] attempt to access beyond end of device [ 44.903085][ T1469] loop0: rw=0, want=57848, limit=8192 [ 44.917628][ T310] asix 9-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 44.923580][ T1469] Buffer I/O error on dev loop0, logical block 57847, async page read [ 44.949007][ T310] asix: probe of 9-1:127.57 failed with error -71 [ 44.958842][ T1480] loop9: detected capacity change from 0 to 512 [ 44.979045][ T310] usb 9-1: USB disconnect, device number 4 [ 45.009983][ T1480] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.021268][ T1480] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.057529][ T584] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 45.220480][ T1492] loop2: detected capacity change from 0 to 256 [ 45.238558][ T1485] loop0: detected capacity change from 0 to 40427 [ 45.255887][ T1485] F2FS-fs (loop0): invalid crc value [ 45.265001][ T1485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.268271][ T1492] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.303957][ T1492] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 45.315335][ T1485] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 45.323538][ T1492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfa30541c, utbl_chksum : 0xe619d30d) [ 45.341425][ T1485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 45.365710][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 45.365724][ T30] audit: type=1400 audit(1793892868.979:364): avc: denied { write } for pid=1491 comm="syz.2.457" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.418971][ T30] audit: type=1400 audit(1793892868.979:365): avc: denied { add_name } for pid=1491 comm="syz.2.457" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.440542][ T584] usb 8-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 45.464451][ T584] usb 8-1: config 0 interface 0 has no altsetting 0 [ 45.487536][ T584] usb 8-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 45.516875][ T30] audit: type=1400 audit(1793892868.979:366): avc: denied { associate } for pid=1491 comm="syz.2.457" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 45.538670][ T584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.559316][ T584] usb 8-1: config 0 descriptor?? [ 45.581885][ T30] audit: type=1400 audit(1793892869.029:367): avc: denied { remove_name } for pid=1491 comm="syz.2.457" name="bus" dev="loop2" ino=1048726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.613822][ T30] audit: type=1400 audit(1793892869.029:368): avc: denied { rename } for pid=1491 comm="syz.2.457" name="bus" dev="loop2" ino=1048726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.657534][ T30] audit: type=1400 audit(1793892869.029:369): avc: denied { rmdir } for pid=1491 comm="syz.2.457" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.746921][ T30] audit: type=1400 audit(1793892869.039:370): avc: denied { unmount } for pid=1419 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 45.777945][ T30] audit: type=1400 audit(1793892869.389:371): avc: denied { create } for pid=1484 comm="syz.0.454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.798751][ T30] audit: type=1400 audit(1793892869.389:372): avc: denied { ioctl } for pid=1484 comm="syz.0.454" path=2F32362F66696C65312F233130202864656C6574656429 dev="loop0" ino=10 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.987512][ T310] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 47.030457][ T584] wacom 0003:056A:0030.0006: unknown main item tag 0x3 [ 47.037394][ T584] wacom 0003:056A:0030.0006: unknown main item tag 0x4 [ 47.052715][ T584] wacom 0003:056A:0030.0006: unknown main item tag 0x0 [ 47.068970][ T1501] loop2: detected capacity change from 0 to 2048 [ 47.075444][ T584] wacom 0003:056A:0030.0006: ignoring exceeding usage max [ 47.088966][ T584] wacom 0003:056A:0030.0006: unknown main item tag 0x6 [ 47.095874][ T584] wacom 0003:056A:0030.0006: item fetching failed at offset 37/40 [ 47.107403][ T584] wacom 0003:056A:0030.0006: parse failed [ 47.113445][ T584] wacom: probe of 0003:056A:0030.0006 failed with error -22 [ 47.138978][ T1501] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.162030][ T1501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 47.233266][ T595] usb 8-1: USB disconnect, device number 8 [ 47.416830][ T1518] loop0: detected capacity change from 0 to 512 [ 47.447895][ T310] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 47.460735][ T1518] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.471645][ T310] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 47.472897][ T1518] EXT4-fs (loop0): 1 truncate cleaned up [ 47.489477][ T1518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.526175][ T30] audit: type=1400 audit(1793892871.139:373): avc: denied { map } for pid=1517 comm="syz.0.464" path="/28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.657607][ T310] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 47.666687][ T310] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.676010][ T310] usb 9-1: Product: syz [ 47.681596][ T310] usb 9-1: Manufacturer: syz [ 47.686211][ T310] usb 9-1: SerialNumber: syz [ 47.696589][ T1526] loop0: detected capacity change from 0 to 512 [ 47.704843][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.712204][ T310] usb 9-1: config 0 descriptor?? [ 47.717233][ T1522] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.724789][ T1522] device bridge_slave_0 entered promiscuous mode [ 47.731234][ T1498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.740946][ T1498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.741488][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.755265][ T1522] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.763445][ T1522] device bridge_slave_1 entered promiscuous mode [ 47.852385][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.859670][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.866973][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.874043][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.935163][ T8] device bridge_slave_1 left promiscuous mode [ 47.942810][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.953714][ T8] device bridge_slave_0 left promiscuous mode [ 47.960752][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.973063][ T8] device veth1_macvtap left promiscuous mode [ 47.979389][ T8] device veth0_vlan left promiscuous mode [ 48.045742][ T1534] program syz.9.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.065911][ T310] dm9601: probe of 9-1:0.0 failed with error -71 [ 48.073608][ T310] usb 9-1: USB disconnect, device number 5 [ 48.113504][ T1534] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 48.231836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.240027][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.249004][ T1544] EXT4-fs warning (device sda1): verify_group_input:176: Cannot read last block (266218) [ 48.260152][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.273083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.281517][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.288684][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.308663][ T1546] loop9: detected capacity change from 0 to 256 [ 48.316400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.332128][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.339242][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.347184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.358226][ T1546] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 48.367384][ T1522] device veth0_vlan entered promiscuous mode [ 48.377638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.386090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.389059][ T1546] exFAT-fs (loop9): error, invalid access to FAT free cluster (entry 0x00000008) [ 48.394698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.412059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.419813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.426506][ T1546] exFAT-fs (loop9): error, failed to bmap (inode : ffff88812ee1df00 iblock : 97, err : -5) [ 48.433916][ T1522] device veth1_macvtap entered promiscuous mode [ 48.445147][ T1546] exFAT-fs (loop9): error, invalid access to FAT free cluster (entry 0x00000008) [ 48.455116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.463699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.472320][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.491550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.500425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.508877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.517204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.619681][ T1556] loop0: detected capacity change from 0 to 512 [ 48.642292][ T1558] loop7: detected capacity change from 0 to 1024 [ 48.708561][ T1564] input: syz0 as /devices/virtual/input/input8 [ 48.718756][ T1556] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 48.731866][ T1556] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 48.742302][ T1558] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,acl,grpquota,nobarrier,min_batch_time=0x0000000000000004,bsddf,noload,barrier=0x0000000000000009,nogrpid,inlinecrypt,,errors=continue. Quota mode: writeback. [ 48.797052][ T1556] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.476: corrupted in-inode xattr [ 48.812526][ T1556] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.476: couldn't read orphan inode 15 (err -117) [ 48.828488][ T1556] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 48.862159][ T1571] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.026444][ T1592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.038719][ T1592] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.187531][ T42] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 49.457638][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 49.484295][ T1617] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 49.577570][ T42] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.678008][ T42] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.847583][ T42] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.856665][ T42] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.865451][ T42] usb 8-1: Product: syz [ 49.869752][ T42] usb 8-1: Manufacturer: syz [ 49.919125][ T42] hub 8-1:4.0: USB hub found [ 50.127562][ T42] hub 8-1:4.0: 11 ports detected [ 50.147574][ T42] hub 8-1:4.0: insufficient power available to use all downstream ports [ 50.217535][ T310] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 50.337546][ T42] hub 8-1:4.0: hub_hub_status failed (err = -71) [ 50.344335][ T42] hub 8-1:4.0: config failed, can't get hub status (err -71) [ 50.388053][ T42] usb 8-1: USB disconnect, device number 9 [ 50.577586][ T310] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.588057][ T310] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.597897][ T310] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 50.615506][ T310] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 50.628629][ T310] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 50.638231][ T310] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.688120][ T310] pl2303 9-1:1.0: required endpoints missing [ 50.897754][ T310] usb 9-1: USB disconnect, device number 6 [ 52.810906][ T1638] set_capacity_and_notify: 3 callbacks suppressed [ 52.810924][ T1638] loop5: detected capacity change from 0 to 512 [ 52.828200][ T1635] resource sanity check: requesting [mem 0xfe800000-0xfe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 52.843992][ T1640] loop0: detected capacity change from 0 to 512 [ 52.863399][ T1643] loop9: detected capacity change from 0 to 4096 [ 52.871696][ T1635] caller generic_access_phys+0x1e0/0x360 mapping multiple BARs [ 52.928702][ T1640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.980435][ T1643] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 52.999128][ T1643] EXT4-fs (loop9): Ignoring removed bh option [ 53.005291][ T1643] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 53.051662][ T1640] EXT4-fs (loop0): 1 truncate cleaned up [ 53.057737][ T1640] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.112245][ T1651] ip_tables: iptables: counters copy to user failed while replacing table [ 53.125784][ T1643] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 53.367609][ T310] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 53.482653][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 53.482671][ T30] audit: type=1400 audit(1793892877.099:389): avc: denied { setattr } for pid=1667 comm="syz.0.521" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.527519][ T296] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 53.607564][ T310] usb 8-1: Using ep0 maxpacket: 32 [ 53.727581][ T310] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 53.744974][ T310] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.767524][ T296] usb 10-1: Using ep0 maxpacket: 16 [ 53.773871][ T310] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 53.795462][ T310] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 53.813276][ T310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.834127][ T310] usb 8-1: config 0 descriptor?? [ 53.887623][ T296] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 54.147570][ T296] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.156726][ T296] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.165196][ T296] usb 10-1: Product: syz [ 54.169610][ T296] usb 10-1: Manufacturer: syz [ 54.174291][ T296] usb 10-1: SerialNumber: syz [ 54.182491][ T296] r8152-cfgselector 10-1: config 0 descriptor?? [ 54.319206][ T310] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x1 [ 54.326300][ T310] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 54.333793][ T310] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x4 [ 54.484372][ T30] audit: type=1400 audit(1793892878.099:390): avc: denied { append } for pid=1689 comm="syz.0.530" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.507630][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.537683][ T310] hid-led: probe of 0003:0FC5:B080.0007 failed with error -71 [ 54.555135][ T310] usb 8-1: USB disconnect, device number 10 [ 54.667552][ T296] r8152-cfgselector 10-1: Unknown version 0x0000 [ 54.674041][ T296] r8152-cfgselector 10-1: bad CDC descriptors [ 54.697610][ T296] r8152-cfgselector 10-1: Unknown version 0x0000 [ 54.707791][ T296] r8152-cfgselector 10-1: USB disconnect, device number 4 [ 54.767516][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 54.799857][ T30] audit: type=1400 audit(1793892878.419:391): avc: denied { read write } for pid=1697 comm="syz.8.533" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 54.844480][ T30] audit: type=1400 audit(1793892878.419:392): avc: denied { open } for pid=1697 comm="syz.8.533" path="/119/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 54.868622][ T30] audit: type=1400 audit(1793892878.419:393): avc: denied { ioctl } for pid=1697 comm="syz.8.533" path="/119/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 54.917609][ T42] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.934051][ T42] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.954267][ T42] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 54.967522][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 54.975942][ T42] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 54.985794][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.994646][ T42] usb 6-1: config 0 descriptor?? [ 55.044119][ T30] audit: type=1400 audit(1793892878.659:394): avc: denied { append } for pid=1709 comm="syz.7.538" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.123566][ T30] audit: type=1400 audit(1793892878.739:395): avc: denied { ioctl } for pid=1709 comm="syz.7.538" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.160486][ T1713] loop7: detected capacity change from 0 to 512 [ 55.193804][ T1713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 55.211060][ T1713] EXT4-fs (loop7): 1 truncate cleaned up [ 55.216909][ T1713] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.238681][ T1686] UDC core: couldn't find an available UDC or it's busy: -16 [ 55.246087][ T1686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.280062][ T1718] loop9: detected capacity change from 0 to 512 [ 55.337498][ T1718] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 55.382793][ T1718] EXT4-fs (loop9): 1 truncate cleaned up [ 55.401571][ T1718] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,acl,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 55.437771][ T30] audit: type=1400 audit(1793892879.059:396): avc: denied { rename } for pid=1717 comm="syz.9.541" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.491633][ T42] hid (null): report_id 0 is invalid [ 55.495288][ T1734] loop0: detected capacity change from 0 to 2048 [ 55.509695][ T1738] device-mapper: table: 253:12: crypt: Error decoding and setting key [ 55.518380][ T1738] device-mapper: ioctl: error adding target to table [ 55.559825][ T1734] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.673115][ T1753] loop9: detected capacity change from 0 to 256 [ 55.690175][ T595] usb 6-1: USB disconnect, device number 2 [ 55.987271][ T1759] loop8: detected capacity change from 0 to 256 [ 56.012661][ T1759] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.047638][ T1759] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 56.067672][ T1759] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 56.085917][ T30] audit: type=1400 audit(1793892879.699:397): avc: denied { mounton } for pid=1757 comm="syz.8.556" path="/124/file2/file0/bus" dev="loop8" ino=1048746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.132431][ T1759] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 56.147549][ T1759] exFAT-fs (loop8): Filesystem has been set read-only [ 56.182900][ T651] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 56.203865][ T651] exFAT-fs (loop8): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 56.305973][ T30] audit: type=1400 audit(1793892879.919:398): avc: denied { name_bind } for pid=1767 comm="syz.9.561" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.465545][ T1774] loop7: detected capacity change from 0 to 128 [ 56.572718][ T1774] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.584276][ T1774] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.765234][ T1782] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.772446][ T1782] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.794456][ T1782] device bridge_slave_0 entered promiscuous mode [ 56.809661][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.824975][ T1782] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.840289][ T1782] device bridge_slave_1 entered promiscuous mode [ 56.955375][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.962462][ T1782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.969759][ T1782] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.976787][ T1782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.002119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.011090][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.019274][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.030350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.071115][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.078324][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.157914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.166375][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.173447][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.192752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.201335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.227766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.247225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.256444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.265901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.275536][ T1782] device veth0_vlan entered promiscuous mode [ 57.299324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.309195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.321676][ T1782] device veth1_macvtap entered promiscuous mode [ 57.339886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.349947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.360197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.397336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.416452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.430454][ T1813] loop5: detected capacity change from 0 to 512 [ 57.459438][ T1815] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.487422][ T1815] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 57.501960][ T1815] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 57.874329][ T1825] SELinux: failed to load policy [ 57.901126][ T1838] set_capacity_and_notify: 2 callbacks suppressed [ 57.901146][ T1838] loop7: detected capacity change from 0 to 1024 [ 57.927308][ T1838] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.963703][ T1838] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,data_err=ignore,barrier,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: none. [ 58.050357][ T1849] loop5: detected capacity change from 0 to 512 [ 58.734816][ T1874] loop3: detected capacity change from 0 to 2048 [ 58.748709][ T1872] loop0: detected capacity change from 0 to 16 [ 58.808145][ T1872] erofs: (device loop0): mounted with root inode @ nid 36. [ 58.827262][ T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 58.854625][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 58.891438][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 58.898525][ T1874] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.961428][ T1882] xt_bpf: check failed: parse error [ 58.984292][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 58.993424][ T1884] loop5: detected capacity change from 0 to 512 [ 59.014107][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 59.041672][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 59.061577][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 59.081059][ T1872] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 59.091899][ T1888] loop7: detected capacity change from 0 to 1024 [ 59.183284][ T1872] syz.0.597 (1872) used greatest stack depth: 20768 bytes left [ 59.254005][ T1888] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,norecovery,nobarrier,barrier,block_validity,errors=remount-ro,init_itable,resuid=0x0000000000000000,init_itable=0x0000000000000006,. Quota mode: none. [ 59.292738][ T1896] loop3: detected capacity change from 0 to 256 [ 59.404942][ T1896] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.422317][ T1888] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.434162][ T1896] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 59.453942][ T1888] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: comm syz.7.603: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.470373][ T1903] loop9: detected capacity change from 0 to 512 [ 59.498443][ T1896] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 59.530314][ T1903] EXT4-fs (loop9): Ignoring removed oldalloc option [ 59.584862][ T1888] EXT4-fs (loop7): Remounting filesystem read-only [ 59.591734][ T1888] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #15: comm syz.7.603: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.606034][ T1888] EXT4-fs (loop7): Remounting filesystem read-only [ 59.614206][ T1903] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 59.638301][ T1888] EXT4-fs error (device loop7): ext4_ext_remove_space:2944: inode #15: comm syz.7.603: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.657432][ T1908] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 59.662759][ T1903] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 59.676443][ T1888] EXT4-fs (loop7): Remounting filesystem read-only [ 59.683615][ T1908] exFAT-fs (loop3): Filesystem has been set read-only [ 59.755513][ T1903] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 59.782274][ T1782] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 59.807184][ T1782] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 59.829355][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 59.829371][ T30] audit: type=1400 audit(1793892883.449:405): avc: denied { ioctl } for pid=1917 comm="syz.7.615" path="socket:[26027]" dev="sockfs" ino=26027 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.903301][ T1924] loop9: detected capacity change from 0 to 512 [ 60.047405][ T1932] loop7: detected capacity change from 0 to 512 [ 60.110057][ T1936] xt_SECMARK: invalid mode: 2 [ 60.219687][ T1932] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 60.242742][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.254574][ T1932] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.265840][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.274570][ T1933] device bridge_slave_0 entered promiscuous mode [ 60.286573][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.294546][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.303847][ T1932] EXT4-fs error (device loop7): ext4_get_first_dir_block:3599: inode #12: comm syz.7.621: Directory hole found for htree leaf block 0 [ 60.328478][ T1933] device bridge_slave_1 entered promiscuous mode [ 60.336891][ T1932] EXT4-fs (loop7): Remounting filesystem read-only [ 60.349707][ T1945] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.362786][ T1945] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 60.372645][ T1945] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 60.443866][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.450971][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.458288][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.465315][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.473406][ T1945] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 60.484489][ T1945] exFAT-fs (loop0): Filesystem has been set read-only [ 60.518960][ T1062] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 60.530188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.530764][ T1062] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 60.548052][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.555675][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.583082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.591683][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.598755][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.613489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.622083][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.629274][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.637732][ T30] audit: type=1400 audit(1793892884.249:406): avc: denied { remount } for pid=1946 comm="syz.5.625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.672941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.693270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.772620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.808610][ T436] device bridge_slave_1 left promiscuous mode [ 60.817705][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.855606][ T436] device bridge_slave_0 left promiscuous mode [ 60.885372][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.900421][ T436] device veth1_macvtap left promiscuous mode [ 60.906545][ T436] device veth0_vlan left promiscuous mode [ 60.996921][ T1933] device veth0_vlan entered promiscuous mode [ 61.068031][ T30] audit: type=1400 audit(1793892884.669:407): avc: denied { mounton } for pid=1961 comm="syz.7.632" path="/76/file0" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 61.126251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.134635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.142206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.182812][ T42] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 61.225176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.237995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.262280][ T1933] device veth1_macvtap entered promiscuous mode [ 61.274857][ T1958] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.287891][ T1958] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.299808][ T1974] EXT4-fs (loop7): Ignoring removed oldalloc option [ 61.307265][ T1975] ================================================================== [ 61.315352][ T1975] BUG: KASAN: slab-out-of-bounds in sk_skb_adjust_room+0x389/0x5c0 [ 61.323278][ T1975] Read of size 8 at addr ffff88811d5954e8 by task syz.5.636/1975 [ 61.331002][ T1975] [ 61.333326][ T1975] CPU: 0 PID: 1975 Comm: syz.5.636 Not tainted syzkaller #0 [ 61.340611][ T1975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.350757][ T1975] Call Trace: [ 61.354039][ T1975] [ 61.356971][ T1975] __dump_stack+0x21/0x30 [ 61.361313][ T1975] dump_stack_lvl+0x110/0x170 [ 61.366009][ T1975] ? show_regs_print_info+0x20/0x20 [ 61.371217][ T1975] ? load_image+0x3f0/0x3f0 [ 61.375733][ T1975] ? skb_release_data+0x1b5/0xa20 [ 61.380768][ T1975] print_address_description+0x7f/0x2c0 [ 61.386326][ T1975] ? sk_skb_adjust_room+0x389/0x5c0 [ 61.391530][ T1975] kasan_report+0x10f/0x150 [ 61.396047][ T1975] ? sk_skb_adjust_room+0x389/0x5c0 [ 61.401259][ T1975] __asan_report_load8_noabort+0x14/0x20 [ 61.406919][ T1975] sk_skb_adjust_room+0x389/0x5c0 [ 61.411963][ T1975] bpf_prog_e15ab8bd9cea3c06+0x19/0xc18 [ 61.417651][ T1975] sk_psock_verdict_recv+0x245/0x7f0 [ 61.423084][ T1975] unix_read_sock+0x108/0x2d0 [ 61.427863][ T1975] ? sk_psock_skb_redirect+0x440/0x440 [ 61.433347][ T1975] ? unix_stream_splice_actor+0x120/0x120 [ 61.439216][ T1975] ? copy_mc_pipe_to_iter+0x7e0/0x7e0 [ 61.444608][ T1975] ? sk_psock_skb_redirect+0x440/0x440 [ 61.450162][ T1975] unix_stream_read_sock+0x61/0x90 [ 61.455287][ T1975] sk_psock_verdict_data_ready+0x167/0x1d0 [ 61.458572][ T1958] device bridge_slave_0 entered promiscuous mode [ 61.461097][ T1975] ? sk_psock_start_verdict+0xc0/0xc0 [ 61.472769][ T1975] ? _raw_spin_lock+0x94/0xf0 [ 61.477464][ T1975] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 61.483269][ T1975] ? skb_queue_tail+0xcb/0xf0 [ 61.488051][ T1975] unix_stream_sendmsg+0x7d1/0xc90 [ 61.494216][ T1975] ? unix_show_fdinfo+0xa0/0xa0 [ 61.499091][ T1975] ? __fget_files+0x2e1/0x340 [ 61.503785][ T1975] ? security_socket_sendmsg+0x82/0xa0 [ 61.509261][ T1975] __sys_sendto+0x46d/0x620 [ 61.513785][ T1975] ? __ia32_sys_getpeername+0x90/0x90 [ 61.519190][ T1975] ? map_update_elem+0x286/0x780 [ 61.524229][ T1975] ? __se_sys_futex+0x135/0x330 [ 61.529097][ T1975] ? __kasan_check_write+0x14/0x20 [ 61.534226][ T1975] __x64_sys_sendto+0xe5/0x100 [ 61.539061][ T1975] x64_sys_call+0x178/0x9a0 [ 61.543581][ T1975] do_syscall_64+0x4c/0xa0 [ 61.548005][ T1975] ? clear_bhb_loop+0x50/0xa0 [ 61.552690][ T1975] ? clear_bhb_loop+0x50/0xa0 [ 61.557374][ T1975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.563459][ T1975] RIP: 0033:0x7f30265aeb19 [ 61.567957][ T1975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.587576][ T1975] RSP: 002b:00007f3024fe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.596000][ T1975] RAX: ffffffffffffffda RBX: 00007f3026835090 RCX: 00007f30265aeb19 [ 61.603959][ T1975] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000006 [ 61.611919][ T1975] RBP: 00007f3026646b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.619876][ T1975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.627829][ T1975] R13: 00007f3026835128 R14: 00007f3026835090 R15: 00007ffc4512f708 [ 61.635790][ T1975] [ 61.638793][ T1975] [ 61.641192][ T1975] Allocated by task 1975: [ 61.645494][ T1975] __kasan_slab_alloc+0xb7/0xe0 [ 61.650328][ T1975] slab_post_alloc_hook+0x4f/0x2b0 [ 61.655420][ T1975] kmem_cache_alloc+0xf7/0x260 [ 61.660164][ T1975] sk_prot_alloc+0x5f/0x320 [ 61.664651][ T1975] sk_alloc+0x38/0x430 [ 61.668700][ T1975] unix_create1+0xb4/0x610 [ 61.673099][ T1975] unix_create+0x149/0x200 [ 61.677496][ T1975] __sock_create+0x38d/0x7a0 [ 61.682064][ T1975] __sys_socketpair+0x1a1/0x590 [ 61.686892][ T1975] __x64_sys_socketpair+0x9b/0xb0 [ 61.691893][ T1975] x64_sys_call+0x36/0x9a0 [ 61.696293][ T1975] do_syscall_64+0x4c/0xa0 [ 61.700688][ T1975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.706565][ T1975] [ 61.708895][ T1975] The buggy address belongs to the object at ffff88811d594fc0 [ 61.708895][ T1975] which belongs to the cache UNIX-STREAM of size 1216 [ 61.723015][ T1975] The buggy address is located 104 bytes to the right of [ 61.723015][ T1975] 1216-byte region [ffff88811d594fc0, ffff88811d595480) [ 61.736967][ T1975] The buggy address belongs to the page: [ 61.742592][ T1975] page:ffffea0004756500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811d595a40 pfn:0x11d594 [ 61.754117][ T1975] head:ffffea0004756500 order:2 compound_mapcount:0 compound_pincount:0 [ 61.762422][ T1975] flags: 0x4000000000010200(slab|head|zone=1) [ 61.768489][ T1975] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881003e6780 [ 61.777052][ T1975] raw: ffff88811d595a40 00000000800c0008 00000001ffffffff 0000000000000000 [ 61.785719][ T1975] page dumped because: kasan: bad access detected [ 61.792133][ T1975] page_owner tracks the page as allocated [ 61.797856][ T1975] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 276, ts 17166892097, free_ts 0 [ 61.816162][ T1975] post_alloc_hook+0x192/0x1b0 [ 61.820921][ T1975] prep_new_page+0x1c/0x110 [ 61.825411][ T1975] get_page_from_freelist+0x2d42/0x2dd0 [ 61.830938][ T1975] __alloc_pages+0x1a2/0x460 [ 61.835517][ T1975] new_slab+0xa0/0x4d0 [ 61.839567][ T1975] ___slab_alloc+0x3ac/0x840 [ 61.844138][ T1975] __slab_alloc+0x49/0x90 [ 61.848450][ T1975] kmem_cache_alloc+0x138/0x260 [ 61.853298][ T1975] sk_prot_alloc+0x5f/0x320 [ 61.857782][ T1975] sk_alloc+0x38/0x430 [ 61.861833][ T1975] unix_create1+0xb4/0x610 [ 61.866230][ T1975] unix_stream_connect+0x308/0x1020 [ 61.871412][ T1975] __sys_connect+0x3cb/0x450 [ 61.875981][ T1975] __x64_sys_connect+0x7a/0x90 [ 61.880723][ T1975] x64_sys_call+0x7c/0x9a0 [ 61.885123][ T1975] do_syscall_64+0x4c/0xa0 [ 61.889521][ T1975] page_owner free stack trace missing [ 61.894867][ T1975] [ 61.897260][ T1975] Memory state around the buggy address: [ 61.902867][ T1975] ffff88811d595380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.910912][ T1975] ffff88811d595400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.919045][ T1975] >ffff88811d595480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.927176][ T1975] ^ [ 61.934784][ T1975] ffff88811d595500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.942829][ T1975] ffff88811d595580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.950865][ T1975] ================================================================== [ 61.958902][ T1975] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.978793][ T30] audit: type=1400 audit(1793892885.589:408): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[637]" dev="pipefs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 61.989855][ T1974] EXT4-fs warning (device loop7): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop7. [ 62.017619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.047549][ T30] audit: type=1400 audit(1793892885.629:409): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.062232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.079343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.108082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.127699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.149328][ T1958] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.156385][ T1958] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.163878][ T1958] device bridge_slave_1 entered promiscuous mode [ 62.307572][ T42] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 62.315246][ T42] usb 10-1: can't read configurations, error -71 [ 62.868367][ T436] device bridge_slave_1 left promiscuous mode [ 62.874536][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.882564][ T436] device bridge_slave_0 left promiscuous mode [ 62.888829][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.897068][ T436] device bridge_slave_1 left promiscuous mode [ 62.904043][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.912245][ T436] device bridge_slave_0 left promiscuous mode [ 62.918514][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.926932][ T436] device veth1_macvtap left promiscuous mode [ 62.933242][ T436] device veth0_vlan left promiscuous mode [ 62.939262][ T436] device veth1_macvtap left promiscuous mode [ 62.945271][ T436] device veth0_vlan left promiscuous mode [ 64.227763][ T436] device bridge_slave_1 left promiscuous mode [ 64.233941][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.242091][ T436] device bridge_slave_0 left promiscuous mode [ 64.248302][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.256318][ T436] device bridge_slave_1 left promiscuous mode [ 64.262732][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.270510][ T436] device bridge_slave_0 left promiscuous mode [ 64.276680][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.285973][ T436] device veth1_macvtap left promiscuous mode [ 64.292059][ T436] device veth0_vlan left promiscuous mode [ 64.298232][ T436] device veth1_macvtap left promiscuous mode [ 64.304248][ T436] device veth0_vlan left promiscuous mode