last executing test programs: 2m13.628656257s ago: executing program 3 (id=6): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0x700, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) 2m13.349184057s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="d896cc3a", 0x4, 0x40008800, 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) 2m12.452679348s ago: executing program 3 (id=29): syz_open_dev$loop(&(0x7f0000000200), 0x8, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0x4c044) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r10, r9, &(0x7f00000002c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x2000, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.time\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x8, 0x80000) (async) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) (async) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0x4c044) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) dup(0xffffffffffffffff) (async) syz_ublk_setup_queues(r10, r9, &(0x7f00000002c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x2000, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) (async) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.time\x00', 0x275a, 0x0) (async) 2m12.452482998s ago: executing program 3 (id=30): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_getparam(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r3, &(0x7f0000001300)=[{0x0}, {&(0x7f00000002c0)="bd", 0x1}], 0x2, 0x8, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0xfffffffffffffd44, 0xbeb598a38fc2c243) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x2b, 0x3, 0xfff) timer_create(0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0xfdef) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$EVIOCGABS0(r9, 0x80184540, &(0x7f0000000080)=""/5) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x10bc00, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae03, 0x5) r11 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8001, 0x40001) ioctl$NILFS_IOCTL_GET_SUSTAT(r11, 0x80306e85, &(0x7f0000000040)) 2m12.229689276s ago: executing program 3 (id=32): rt_sigprocmask(0x1, &(0x7f0000000040)={[0x8]}, 0x0, 0x8) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') connect$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000040)=0x9, 0x4) listen(r3, 0x1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat(r1, &(0x7f0000000200)='./bus\x00', 0x111400, 0x80) ftruncate(r1, 0x7fffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x802, 0x0) ioctl(r5, 0xc139fd01, &(0x7f0000000000)="040000000000000000000000380100000000000000") sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe800000000000000000000097a6f8b18befbff3e2426500031dd1e10000003cfe8000000000000000000000000000aae2310061746c44ef66eefd6235f14e84e149835a806b8a5d928e5989f342fede996344827b70838fd6770091aeb4905a3d5edaaa13093ea6d034cf07dbcfc22288b8eddb4acb36c96db85e58128338c83c40d42a4967564de5e53340ff7e6fe7b5e36c9be09b1731030b06aec22f2d6401678a870f0e64486f18f4478edade44e06d47917fef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f0000000000000007000000000000000300000000000000fcfffffffffffffffdffffffffffffff0500000000000000fffffffffffffffffcffffff0000000000000000000000000000000000000000050000000000000000000000000000000101030000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x80) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e19, 0x0, @empty, 0x61}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, 0x1c) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000100)={@private0, 0x57, r7}) clock_gettime(0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}}, 0x0) tkill(r0, 0x12) 2m12.164818329s ago: executing program 3 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m57.076016915s ago: executing program 32 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21.649065522s ago: executing program 4 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./dev\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 21.213907025s ago: executing program 4 (id=1198): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) (fail_nth: 4) 20.852811523s ago: executing program 4 (id=1199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000200)=""/226, 0xe2}], 0x2, &(0x7f0000000340)=""/197, 0xc5}, 0x40002000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) 20.852580293s ago: executing program 4 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) setuid(0xee01) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x208580, 0x10}, 0x18) openat(r2, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x0, 0x81) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x202, 0x10) write(r3, &(0x7f0000000000)='7', 0x1) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000100224e0000", 0x58}], 0x1) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x30002, 0x0, 0x3a}, 0x18) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000002c0)=""/189) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00', 0x10) 20.811683502s ago: executing program 4 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x260d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) exit(0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000800)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) add_key(0x0, 0x0, &(0x7f0000000040)="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", 0x1d8, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 20.731806008s ago: executing program 4 (id=1202): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffc5, 0x5, 0x0, {0x0, 0x1, 0x8fc3, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x5) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x41, 0x0, [@remote]}}}], 0x28}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsmount(0xffffffffffffffff, 0x1, 0x40) execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000140)='ethtool\x00', &(0x7f0000000180)='/dev/sda1\x00', &(0x7f0000000200)='q#!#/\xa3!*{$#%.#^[,\x00', &(0x7f0000000280)='}]:@})#$\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='syzkaller1\x00', &(0x7f0000000380)='ethtool\x00']}, &(0x7f0000000540)={[&(0x7f0000000440)='veth1_to_bond\x00', &(0x7f0000000480)='&}#\x00', &(0x7f00000004c0)='syzkaller1\x00', &(0x7f0000000500)='\x00']}, 0x2000) r4 = inotify_init() inotify_rm_watch(r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'veth1_to_bond\x00', 0x0}) ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) 20.650959546s ago: executing program 33 (id=1202): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffc5, 0x5, 0x0, {0x0, 0x1, 0x8fc3, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x5) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x41, 0x0, [@remote]}}}], 0x28}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsmount(0xffffffffffffffff, 0x1, 0x40) execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000140)='ethtool\x00', &(0x7f0000000180)='/dev/sda1\x00', &(0x7f0000000200)='q#!#/\xa3!*{$#%.#^[,\x00', &(0x7f0000000280)='}]:@})#$\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='syzkaller1\x00', &(0x7f0000000380)='ethtool\x00']}, &(0x7f0000000540)={[&(0x7f0000000440)='veth1_to_bond\x00', &(0x7f0000000480)='&}#\x00', &(0x7f00000004c0)='syzkaller1\x00', &(0x7f0000000500)='\x00']}, 0x2000) r4 = inotify_init() inotify_rm_watch(r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'veth1_to_bond\x00', 0x0}) ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) 11.998936525s ago: executing program 1 (id=1222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'xfrm0\x00', @random="01300136b1ff"}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x8, 0x0) (async) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r5, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) ioctl$UI_SET_SNDBIT(r6, 0xc010bb01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="440f20c03506000000440f22c0362e660f38358600000000b96d0800000f32f20f113d5b060000260f350f3066baf80cb892792689ef66bafc0cec66baa100b0d1eeb9800000c00f3235000100000f30e802000000", 0x55}], 0x1, 0x34, 0x0, 0x0) (async, rerun: 32) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) (async, rerun: 32) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f00000000c0)=""/231) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @mcast1, 0x4}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.581803948s ago: executing program 2 (id=1225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/7, 0x7}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100, 0x20, 0x87}, {0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x5, 0xfffffffffffffffb}, {0x5e4, 0x40000000000000, 0x200000000000000, 0x80}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x68004010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000400)={0xa, 0x1634, 0x7, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x40}, 0x8d7f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xe, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000b0004"], 0x28}, 0x4004881) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 9.019811612s ago: executing program 0 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./dev\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 9.019659412s ago: executing program 1 (id=1227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0xb000, 0xdddd1000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x4, 0xb5}, {0xeeef0000, 0x0, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0xeeef0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0xd9, 0x3, 0x89, 0xab, 0x7d, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x3, 0x7, 0xb1, 0x9, 0x21, 0x83, 0x80, 0xff, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x9, 0x7f, 0x81, 0x1, 0x70}, {0x70000, 0x25000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0xc00, 0x8000000, 0x2024, 0x8, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 9.019450252s ago: executing program 2 (id=1228): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008) mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000140)=ANY=[@ANYBLOB='rlog_wakeup_cnt=00001000000000000001,\x00']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x8100) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) (fail_nth: 2) 7.463090365s ago: executing program 0 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x260d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) exit(0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000800)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 7.459495606s ago: executing program 1 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x260d) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) exit(0x5) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) 7.404674788s ago: executing program 2 (id=1231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x1007}) ioperm(0x9, 0x7ff, 0x100000000) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0xa) (async) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6]) (async) statx(r0, &(0x7f0000000200)='./file0\x00', 0x800, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x402, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '$'}}, {@cache_loose}, {@access_user}, {@loose}, {@msize={'msize', 0x3d, 0xa52}}, {@afid={'afid', 0x3d, 0xf}}], [{@smackfshat}, {@fowner_lt={'fowner<', r6}}, {@uid_lt={'uid<', r7}}]}}) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) (async) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000)=0x1) (async) setfsuid(0xffffffffffffffff) (async) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r8, &(0x7f0000000180)='hist:keys=$', 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) madvise(&(0x7f0000126000/0x4000)=nil, 0x4000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) pipe2(&(0x7f0000000040), 0x0) (async) write$P9_RFLUSH(r2, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) 5.740957093s ago: executing program 0 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4c9f2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f07ef5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8981c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb8, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x2, 0x401, 0x9, 0xbc88, 0x9, {0x4, 0x8000000000000005, 0x5, 0x7fff, 0x3, 0x12e, 0x6af, 0x8, 0xf7fffffa, 0xc000, 0x4, r3, r4, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x4, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000240)='./cgroup\x00', r3, r5, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendfile(r6, r7, &(0x7f0000000200)=0xc, 0x4) mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000140)=ANY=[@ANYBLOB='rlog_wakeup_cnt=00001000000000000001,\x00']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x8100) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 5.737136874s ago: executing program 1 (id=1233): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008) mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000140)=ANY=[@ANYBLOB='rlog_wakeup_cnt=00001000000000000001,\x00']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x59, 0x8100) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 5.690331964s ago: executing program 2 (id=1234): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={0x0, "0ac7d35a1524222aa8436e7b7fdcee5b"}) 3.93094657s ago: executing program 0 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x14000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000000)='27', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r0, 0x0, 0x80) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) unshare(0x40000000) 3.922422242s ago: executing program 1 (id=1236): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./dev\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 3.867256713s ago: executing program 2 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='pstore\x00', 0x40000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000000)='27', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r0, 0x0, 0x80) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) unshare(0x40000000) 2.005685842s ago: executing program 0 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x9, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) r2 = dup(r1) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) mmap$IORING_OFF_SQ_RING(0x0, 0xfff, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x250}) sendmsg$sock(r3, &(0x7f0000003580)={&(0x7f0000000100)=@qipcrtr={0x2a, 0xffffffff, 0x3fff}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000180)="cdabcb2fb31d07499c3e3fda17ff67739faa468c5743665bda9483bb13cf6ddfeb2716f4c06fab118b561039fe6e2d5cc6ff12deebafff138ef49e8d6e3fe3536e1f0c4079960866afbdd86f643c7560a444146a94f9f8bc791fe4ddf5abd1c68eb1c269b599d5aa6dd2fbedee2c6ea4ba41320b6cec948eac692d6e0e98a63b", 0x80}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="d43b092db63fb3468704685a98b40d3b6aa0d439ae0c9bebb0f1022ff0bd9595a4f230cba922e54af0a9298e76c1913efe334b740d5da7b315eb36c458718392c4c9ebd5840642afd9e7dcf5b94a107eeac4c266617cd242c0d946eb20cca03ac8ebe18b6b9550c79e60b73cea70e58a4367644e9cb73717861937f5866aab12e4880466db9f89cec1848e45b63eddb136da8d723bb899ee5a586d536a314f353a38df88d31325c7929ddbd2a12a46befb34bf6cac1adb28ef32f98615fdb92502c55cd81d4d53eaeb60953d4304e3a6d4f303163dcec94c628729c025742bd03b283bcd0b85918758bbea85ee78eff68cb909", 0xf3}, {&(0x7f0000003340)="d4de345c7d604caac98a4160b08425619d06445bd091de341746fd6c48e34a542737b68cbd5fcfd3d7c1fde7aba34ab8a2ca99f1e6be8b5b1f066179a8a603b28f7926e8136f6e589a25b89a2e9cf5b3de85de63f9c106be07d814576f018daee87674bc87882a8badc8185fde91ea38de7bb5192072e4a9a899e482433f14a65fa49b2005cacab103a9", 0x8a}, {&(0x7f0000003400)="685504388a515a06aa0f81c109d1f599a0864e0d0c59f9c32ee0fbe9a640a6af8f50f1dfa6a90aa7c4963955d303bf0bca083cf26e0762819d8858cce56de0d51fc390a272c488bfe5ef36bd28bf7f5d096fffbdc9356671b2d8c1846ce35873d756163287121ceb98ee2f3e12925510d83420f831", 0x75}], 0x6, &(0x7f0000003500)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xde79}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}, 0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200), 0x2, 0x3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) ioctl$UFFDIO_POISON(r3, 0xc020aa08, 0x0) 2.005148382s ago: executing program 1 (id=1239): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x260d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) exit(0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000800)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 2.005006542s ago: executing program 2 (id=1240): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x260d) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) exit(0x5) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 0 (id=1241): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x24, 0x0, &(0x7f0000000740)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x5e21, @multicast2}, 0x10) kernel console output (not intermixed with test programs): > [ 101.852016][ T311] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 102.074241][ T36] audit: type=1400 audit(1790409766.230:508): avc: denied { load_policy } for pid=2580 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.074395][ T2581] SELinux: failed to load policy [ 102.202028][ T311] usb 3-1: device descriptor read/64, error -71 [ 102.296491][ T2596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=2596 comm=syz.1.791 [ 102.471959][ T311] usb 3-1: device descriptor read/64, error -71 [ 102.562687][ T1099] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 102.592086][ T311] usb usb3-port1: attempt power cycle [ 102.711965][ T1099] usb 5-1: Using ep0 maxpacket: 32 [ 102.718327][ T1099] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.726501][ T1099] usb 5-1: config 0 has no interface number 0 [ 102.732757][ T1099] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.743743][ T1099] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.753730][ T1099] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 102.763038][ T1099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.772063][ T1099] usb 5-1: config 0 descriptor?? [ 102.931963][ T311] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 102.953965][ T311] usb 3-1: device descriptor read/8, error -71 [ 103.083087][ T311] usb 3-1: device descriptor read/8, error -71 [ 103.181941][ T315] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 103.342033][ T311] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 103.363079][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.374445][ T311] usb 3-1: device descriptor read/8, error -71 [ 103.382958][ T315] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 103.404139][ T315] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 103.432061][ T315] usb 2-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 103.441421][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.449742][ T315] usb 2-1: Product: syz [ 103.454258][ T315] usb 2-1: Manufacturer: syz [ 103.458952][ T315] usb 2-1: SerialNumber: syz [ 103.475599][ T315] usb-storage 2-1:1.0: USB Mass Storage device detected [ 103.503855][ T315] scsi host1: usb-storage 2-1:1.0 [ 103.523239][ T311] usb 3-1: device descriptor read/8, error -71 [ 103.652074][ T311] usb usb3-port1: unable to enumerate USB device [ 103.785056][ T2623] Invalid logical block size (131072) [ 103.846109][ T2625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 103.877144][ T36] audit: type=1400 audit(1790409768.030:509): avc: denied { mounton } for pid=2624 comm="syz.4.803" path="/153/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 103.940554][ T2628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2628 comm=syz.2.804 [ 103.966717][ T36] audit: type=1400 audit(1790409768.120:510): avc: denied { mounton } for pid=2627 comm="syz.2.804" path="/201/mnt/mnt" dev="sda1" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1 [ 104.102923][ T1099] usbhid 5-1:0.1: can't add hid device: -71 [ 104.112704][ T1099] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 104.137054][ T1099] usb 5-1: USB disconnect, device number 11 [ 104.144420][ T2639] FAULT_INJECTION: forcing a failure. [ 104.144420][ T2639] name failslab, interval 1, probability 0, space 0, times 0 [ 104.167435][ T2639] CPU: 1 UID: 0 PID: 2639 Comm: syz.0.805 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 104.167472][ T2639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.167487][ T2639] Call Trace: [ 104.167495][ T2639] [ 104.167504][ T2639] __dump_stack+0x21/0x30 [ 104.167543][ T2639] dump_stack_lvl+0x140/0x1c0 [ 104.167576][ T2639] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.167613][ T2639] dump_stack+0x19/0x20 [ 104.167643][ T2639] should_fail_ex+0x3c2/0x510 [ 104.167673][ T2639] should_failslab+0xac/0x100 [ 104.167712][ T2639] kmem_cache_alloc_node_noprof+0x45/0x420 [ 104.167739][ T2639] ? dup_task_struct+0xc1/0xd80 [ 104.167769][ T2639] ? kasan_save_alloc_info+0x3a/0x50 [ 104.167792][ T2639] ? __kasan_kmalloc+0x96/0xb0 [ 104.167820][ T2639] ? __kmalloc_cache_noprof+0x23c/0x470 [ 104.167848][ T2639] dup_task_struct+0xc1/0xd80 [ 104.167877][ T2639] ? __kasan_check_write+0x18/0x20 [ 104.167901][ T2639] ? _raw_spin_lock_irq+0x93/0x120 [ 104.167924][ T2639] ? copy_process+0x3350/0x3350 [ 104.167953][ T2639] ? __kasan_check_write+0x18/0x20 [ 104.167978][ T2639] copy_process+0x57c/0x3350 [ 104.168011][ T2639] ? kasan_save_alloc_info+0x3a/0x50 [ 104.168033][ T2639] ? __cfi_copy_process+0x10/0x10 [ 104.168062][ T2639] ? __kmalloc_cache_noprof+0x23c/0x470 [ 104.168088][ T2639] ? __kasan_check_write+0x18/0x20 [ 104.168113][ T2639] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 104.168141][ T2639] vhost_task_create+0x1f7/0x3f0 [ 104.168167][ T2639] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 104.168196][ T2639] ? __cfi_vhost_task_create+0x10/0x10 [ 104.168224][ T2639] ? __cfi_vhost_task_fn+0x10/0x10 [ 104.168249][ T2639] ? __kasan_check_write+0x18/0x20 [ 104.168272][ T2639] ? mutex_lock+0x97/0x1d0 [ 104.168301][ T2639] ? __cfi_mutex_lock+0x10/0x10 [ 104.168327][ T2639] ? kernel_text_address+0xa9/0xe0 [ 104.168361][ T2639] kvm_mmu_post_init_vm+0x161/0x300 [ 104.168396][ T2639] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 104.168428][ T2639] ? _parse_integer_limit+0x195/0x1e0 [ 104.168457][ T2639] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 104.168489][ T2639] ? kstrtoull+0x13b/0x1e0 [ 104.168515][ T2639] ? kstrtouint+0x78/0xf0 [ 104.168540][ T2639] ? ioctl_has_perm+0x1bc/0x500 [ 104.168565][ T2639] ? __asan_memcpy+0x5a/0x80 [ 104.168589][ T2639] ? ioctl_has_perm+0x408/0x500 [ 104.168613][ T2639] ? has_cap_mac_admin+0xd0/0xd0 [ 104.168639][ T2639] ? __kasan_check_write+0x18/0x20 [ 104.168663][ T2639] ? mutex_lock_killable+0x97/0x1d0 [ 104.168699][ T2639] ? __cfi_mutex_lock_killable+0x10/0x10 [ 104.168729][ T2639] ? proc_fail_nth_write+0x184/0x220 [ 104.168766][ T2639] kvm_vcpu_ioctl+0xa43/0x1000 [ 104.168791][ T2639] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 104.168814][ T2639] ? __cfi_vfs_write+0x10/0x10 [ 104.168840][ T2639] ? __kasan_check_write+0x18/0x20 [ 104.168865][ T2639] ? mutex_unlock+0x90/0x240 [ 104.168893][ T2639] ? __cfi_mutex_unlock+0x10/0x10 [ 104.168923][ T2639] ? __fget_files+0x2bc/0x330 [ 104.168953][ T2639] ? bpf_lsm_file_ioctl+0xd/0x20 [ 104.168984][ T2639] ? security_file_ioctl+0x3e/0x110 [ 104.169008][ T2639] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 104.169031][ T2639] __se_sys_ioctl+0x123/0x1b0 [ 104.169061][ T2639] __x64_sys_ioctl+0x7f/0xa0 [ 104.169090][ T2639] x64_sys_call+0x1878/0x2ee0 [ 104.169112][ T2639] do_syscall_64+0x57/0xf0 [ 104.169135][ T2639] ? clear_bhb_loop+0x50/0xa0 [ 104.169165][ T2639] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.169194][ T2639] RIP: 0033:0x7fef3f99e159 [ 104.169214][ T2639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.169234][ T2639] RSP: 002b:00007fef408a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.169259][ T2639] RAX: ffffffffffffffda RBX: 00007fef3fc26090 RCX: 00007fef3f99e159 [ 104.169278][ T2639] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 104.169293][ T2639] RBP: 00007fef408a3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.169309][ T2639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.169323][ T2639] R13: 00007fef3fc26128 R14: 00007fef3fc26090 R15: 00007ffe20d1eb48 [ 104.169343][ T2639] [ 104.982403][ T36] audit: type=1400 audit(1790409769.140:511): avc: denied { create } for pid=2645 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 105.043313][ T36] audit: type=1400 audit(1790409769.200:512): avc: denied { create } for pid=2649 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 105.571981][ T1099] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 105.741952][ T1099] usb 5-1: Using ep0 maxpacket: 32 [ 105.748390][ T1099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.763146][ T1099] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.772316][ T1099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.780344][ T1099] usb 5-1: Product: syz [ 105.784882][ T1099] usb 5-1: Manufacturer: syz [ 105.789511][ T1099] usb 5-1: SerialNumber: syz [ 105.795802][ T1099] usb 5-1: config 0 descriptor?? [ 105.805958][ T1099] smsc75xx v1.0.0 [ 105.820870][ T1099] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 105.831216][ T1099] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 105.860930][ T36] audit: type=1400 audit(1790409770.010:513): avc: denied { mounton } for pid=2671 comm="syz.2.820" path="/213/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 105.860959][ T2672] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.909292][ T1099] usb 2-1: USB disconnect, device number 21 [ 106.037870][ T1739] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.152332][ T36] audit: type=1400 audit(1790409770.310:514): avc: denied { getopt } for pid=2692 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.208876][ T2697] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 106.212770][ T36] audit: type=1400 audit(1790409770.360:515): avc: denied { ioctl } for pid=2696 comm="syz.2.830" path="socket:[29639]" dev="sockfs" ino=29639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.281478][ T311] usb 5-1: USB disconnect, device number 12 [ 106.545083][ T2710] fuse: Unknown parameter 'Iroup_id' [ 106.749522][ T36] audit: type=1400 audit(1790409770.900:516): avc: denied { ioctl } for pid=2722 comm="syz.2.841" path="/226/mnt/trace_pipe" dev="tracefs" ino=1065 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.932185][ T311] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 106.942171][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 106.991976][ T315] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 107.083330][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.094637][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 107.099730][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.110644][ T45] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 107.121116][ T311] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.130309][ T315] usb 3-1: device descriptor read/64, error -71 [ 107.136668][ T311] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 107.144819][ T45] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.154035][ T311] usb 5-1: Manufacturer: syz [ 107.159559][ T311] usb 5-1: config 0 descriptor?? [ 107.166697][ T45] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 107.176727][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.184859][ T45] usb 1-1: Product: syz [ 107.189064][ T45] usb 1-1: Manufacturer: syz [ 107.193726][ T45] usb 1-1: SerialNumber: syz [ 107.199260][ T45] usb 1-1: config 0 descriptor?? [ 107.392000][ T315] usb 3-1: device descriptor read/64, error -71 [ 107.412778][ T45] usb 1-1: USB disconnect, device number 22 [ 107.631963][ T315] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 107.761971][ T315] usb 3-1: device descriptor read/64, error -71 [ 107.968967][ T2716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.977687][ T2716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.986840][ T311] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 107.997104][ T311] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 108.005438][ T311] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 108.013816][ T315] usb 3-1: device descriptor read/64, error -71 [ 108.020120][ T311] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 108.028476][ T311] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 108.040706][ T311] usb 5-1: USB disconnect, device number 13 [ 108.051980][ T56] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.105175][ T2731] EXT4-fs (sda1): Invalid checksum for backup superblock 32768 [ 108.122090][ T315] usb usb3-port1: attempt power cycle [ 108.162021][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 108.184561][ T2733] FAULT_INJECTION: forcing a failure. [ 108.184561][ T2733] name failslab, interval 1, probability 0, space 0, times 0 [ 108.197564][ T2733] CPU: 0 UID: 0 PID: 2733 Comm: syz.1.846 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 108.197592][ T2733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.197603][ T2733] Call Trace: [ 108.197608][ T2733] [ 108.197615][ T2733] __dump_stack+0x21/0x30 [ 108.197649][ T2733] dump_stack_lvl+0x140/0x1c0 [ 108.197672][ T2733] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.197697][ T2733] dump_stack+0x19/0x20 [ 108.197718][ T2733] should_fail_ex+0x3c2/0x510 [ 108.197740][ T2733] should_failslab+0xac/0x100 [ 108.197762][ T2733] kmem_cache_alloc_noprof+0x42/0x410 [ 108.197779][ T2733] ? jbd2__journal_start+0x16d/0x860 [ 108.197800][ T2733] jbd2__journal_start+0x16d/0x860 [ 108.197820][ T2733] __ext4_journal_start_sb+0x111/0x3f0 [ 108.197846][ T2733] ext4_update_superblocks_fn+0x1a7/0x1230 [ 108.197872][ T2733] ? __cfi_ext4_sb_setlabel+0x10/0x10 [ 108.197896][ T2733] ? ext4_update_overhead+0x190/0x190 [ 108.197919][ T2733] ? selinux_capable+0x38/0x50 [ 108.197941][ T2733] ? mnt_get_write_access_file+0x2f3/0x3b0 [ 108.197967][ T2733] ? mnt_want_write_file+0x224/0x300 [ 108.197991][ T2733] ext4_ioctl+0x2b73/0x3b50 [ 108.198014][ T2733] ? __cfi_ext4_ioctl+0x10/0x10 [ 108.198036][ T2733] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 108.198060][ T2733] ? _parse_integer+0x2e/0x40 [ 108.198081][ T2733] ? ioctl_has_perm+0x39a/0x500 [ 108.198099][ T2733] ? has_cap_mac_admin+0xd0/0xd0 [ 108.198117][ T2733] ? proc_fail_nth_write+0x184/0x220 [ 108.198141][ T2733] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 108.198170][ T2733] ? selinux_file_ioctl+0x732/0x1480 [ 108.198187][ T2733] ? vfs_write+0xbcf/0xfd0 [ 108.198204][ T2733] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 108.198222][ T2733] ? __cfi_vfs_write+0x10/0x10 [ 108.198239][ T2733] ? __kasan_check_write+0x18/0x20 [ 108.198256][ T2733] ? mutex_unlock+0x90/0x240 [ 108.198277][ T2733] ? __cfi_mutex_unlock+0x10/0x10 [ 108.198299][ T2733] ? __fget_files+0x2bc/0x330 [ 108.198319][ T2733] ? bpf_lsm_file_ioctl+0xd/0x20 [ 108.198342][ T2733] ? security_file_ioctl+0x3e/0x110 [ 108.198358][ T2733] ? __cfi_ext4_ioctl+0x10/0x10 [ 108.198380][ T2733] __se_sys_ioctl+0x123/0x1b0 [ 108.198402][ T2733] __x64_sys_ioctl+0x7f/0xa0 [ 108.198422][ T2733] x64_sys_call+0x1878/0x2ee0 [ 108.198438][ T2733] do_syscall_64+0x57/0xf0 [ 108.198453][ T2733] ? clear_bhb_loop+0x50/0xa0 [ 108.198475][ T2733] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.198496][ T2733] RIP: 0033:0x7f4ebbd9e159 [ 108.198510][ T2733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.198523][ T2733] RSP: 002b:00007f4eba7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.198542][ T2733] RAX: ffffffffffffffda RBX: 00007f4ebc025fa0 RCX: 00007f4ebbd9e159 [ 108.198555][ T2733] RDX: 0000000000000000 RSI: 0000000041009432 RDI: 0000000000000003 [ 108.198566][ T2733] RBP: 00007f4eba7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.198577][ T2733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.198588][ T2733] R13: 00007f4ebc026038 R14: 00007f4ebc025fa0 R15: 00007fff547e6818 [ 108.198602][ T2733] [ 108.422077][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 108.517625][ T315] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 108.529534][ T45] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 108.554670][ T45] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.573145][ T315] usb 3-1: device descriptor read/8, error -71 [ 108.580763][ T45] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 108.590710][ T2736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.847: No space for directory leaf checksum. Please run e2fsck -D. [ 108.603079][ T2740] EXT4-fs (sda1): Invalid checksum for backup superblock 32768 [ 108.606309][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.622479][ T45] usb 1-1: Product: syz [ 108.626934][ T2736] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.1.847: checksumming directory block 0 [ 108.647845][ T45] usb 1-1: Manufacturer: syz [ 108.654545][ T45] usb 1-1: SerialNumber: syz [ 108.660119][ T2736] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 108.671582][ T45] usb 1-1: config 0 descriptor?? [ 108.679643][ T2736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.847: No space for directory leaf checksum. Please run e2fsck -D. [ 108.695699][ T2736] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.1.847: checksumming directory block 0 [ 108.709176][ T2736] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 108.719798][ T2736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.847: No space for directory leaf checksum. Please run e2fsck -D. [ 108.735709][ T315] usb 3-1: device descriptor read/8, error -71 [ 108.741980][ T2736] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.1.847: checksumming directory block 0 [ 108.754745][ T2736] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 108.765498][ T2736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.847: No space for directory leaf checksum. Please run e2fsck -D. [ 108.781600][ T2736] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.1.847: checksumming directory block 0 [ 108.797211][ T2736] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 108.806967][ T2736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 108.814066][ T2742] FAULT_INJECTION: forcing a failure. [ 108.814066][ T2742] name failslab, interval 1, probability 0, space 0, times 0 [ 108.830055][ T2742] CPU: 0 UID: 0 PID: 2742 Comm: syz.4.849 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 108.830097][ T2742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.830125][ T2742] Call Trace: [ 108.830134][ T2742] [ 108.830144][ T2742] __dump_stack+0x21/0x30 [ 108.830186][ T2742] dump_stack_lvl+0x140/0x1c0 [ 108.830221][ T2742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.830257][ T2742] dump_stack+0x19/0x20 [ 108.830290][ T2742] should_fail_ex+0x3c2/0x510 [ 108.830322][ T2742] should_failslab+0xac/0x100 [ 108.830352][ T2742] __kmalloc_cache_noprof+0x41/0x470 [ 108.830379][ T2742] ? ovl_init_fs_context+0x15e/0x790 [ 108.830408][ T2742] ovl_init_fs_context+0x15e/0x790 [ 108.830438][ T2742] alloc_fs_context+0x5c4/0x800 [ 108.830471][ T2742] fs_context_for_mount+0x26/0x40 [ 108.830503][ T2742] __se_sys_fsopen+0xab/0x390 [ 108.830525][ T2742] __x64_sys_fsopen+0x5f/0x80 [ 108.830546][ T2742] x64_sys_call+0x2d40/0x2ee0 [ 108.830570][ T2742] do_syscall_64+0x57/0xf0 [ 108.830593][ T2742] ? clear_bhb_loop+0x50/0xa0 [ 108.830625][ T2742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.830654][ T2742] RIP: 0033:0x7fa43f39e159 [ 108.830674][ T2742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.830697][ T2742] RSP: 002b:00007fa44017f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 108.830723][ T2742] RAX: ffffffffffffffda RBX: 00007fa43f625fa0 RCX: 00007fa43f39e159 [ 108.830742][ T2742] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200 [ 108.830758][ T2742] RBP: 00007fa43f43506b R08: 0000000000000000 R09: 0000000000000000 [ 108.830773][ T2742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.830788][ T2742] R13: 00007fa43f626038 R14: 00007fa43f625fa0 R15: 00007ffdee239898 [ 108.830810][ T2742] [ 108.912091][ T2725] FAULT_INJECTION: forcing a failure. [ 108.912091][ T2725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.918403][ T2742] Invalid logical block size (131072) [ 108.918849][ T2725] CPU: 1 UID: 0 PID: 2725 Comm: syz.0.842 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 108.918936][ T2725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.918975][ T2725] Call Trace: [ 108.919001][ T2725] [ 108.919022][ T2725] __dump_stack+0x21/0x30 [ 108.919118][ T2725] dump_stack_lvl+0x140/0x1c0 [ 108.919196][ T2725] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.919286][ T2725] ? check_stack_object+0x138/0x150 [ 108.919355][ T2725] dump_stack+0x19/0x20 [ 108.919432][ T2725] should_fail_ex+0x3c2/0x510 [ 108.919508][ T2725] should_fail+0xf/0x20 [ 108.919575][ T2725] should_fail_usercopy+0x1e/0x30 [ 108.919652][ T2725] _copy_to_user+0x24/0xa0 [ 108.919738][ T2725] simple_read_from_buffer+0xed/0x160 [ 108.919835][ T2725] proc_fail_nth_read+0x1aa/0x220 [ 108.919922][ T2725] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 108.920022][ T2725] ? bpf_lsm_file_permission+0xd/0x20 [ 108.920141][ T2725] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 108.920227][ T2725] vfs_read+0x288/0xc70 [ 108.920298][ T2725] ? __cfi_vfs_read+0x10/0x10 [ 108.920357][ T2725] ? __kasan_check_write+0x18/0x20 [ 108.920415][ T2725] ? mutex_lock+0x97/0x1d0 [ 108.920491][ T2725] ? __cfi_mutex_lock+0x10/0x10 [ 108.920569][ T2725] ksys_read+0x145/0x260 [ 108.920629][ T2725] ? xfd_validate_state+0x68/0x140 [ 108.920715][ T2725] ? __cfi_ksys_read+0x10/0x10 [ 108.920783][ T2725] ? __kasan_check_write+0x18/0x20 [ 108.920841][ T2725] ? fpregs_restore_userregs+0x11c/0x260 [ 108.920920][ T2725] __x64_sys_read+0x7f/0x90 [ 108.920985][ T2725] x64_sys_call+0x2638/0x2ee0 [ 108.921042][ T2725] do_syscall_64+0x57/0xf0 [ 108.921100][ T2725] ? clear_bhb_loop+0x50/0xa0 [ 108.921186][ T2725] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.921258][ T2725] RIP: 0033:0x7fef3f95e98e [ 108.921307][ T2725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.921362][ T2725] RSP: 002b:00007fef408c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.921424][ T2725] RAX: ffffffffffffffda RBX: 00007fef408c46c0 RCX: 00007fef3f95e98e [ 108.921491][ T2725] RDX: 000000000000000f RSI: 00007fef408c40a0 RDI: 0000000000000007 [ 108.921542][ T2725] RBP: 00007fef408c4090 R08: 0000000000000000 R09: 0000000000000000 [ 108.921590][ T2725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.921628][ T2725] R13: 00007fef3fc26038 R14: 00007fef3fc25fa0 R15: 00007ffe20d1eb48 [ 108.921678][ T2725] [ 108.972347][ T45] usb 1-1: USB disconnect, device number 23 [ 108.997986][ T36] audit: type=1400 audit(1790409773.130:517): avc: denied { create } for pid=2741 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.007764][ T315] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 109.343057][ T315] usb 3-1: device descriptor read/8, error -71 [ 109.472480][ T2761] input: syz0 as /devices/virtual/input/input76 [ 109.481847][ T315] usb 3-1: device descriptor read/8, error -71 [ 109.532431][ T36] audit: type=1326 audit(1790409773.690:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 109.559019][ T36] audit: type=1326 audit(1790409773.690:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 109.584286][ T36] audit: type=1326 audit(1790409773.690:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 109.614840][ T315] usb usb3-port1: unable to enumerate USB device [ 109.992426][ T36] kauditd_printk_skb: 3848 callbacks suppressed [ 109.992445][ T36] audit: type=1326 audit(1790409774.140:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.031601][ T36] audit: type=1326 audit(1790409774.180:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.056696][ T36] audit: type=1326 audit(1790409774.180:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.081732][ T36] audit: type=1326 audit(1790409774.180:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.107109][ T36] audit: type=1326 audit(1790409774.180:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.132380][ T36] audit: type=1326 audit(1790409774.180:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.157670][ T36] audit: type=1326 audit(1790409774.180:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.182711][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 110.190715][ T36] audit: type=1326 audit(1790409774.180:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.216160][ T36] audit: type=1326 audit(1790409774.180:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.241450][ T36] audit: type=1326 audit(1790409774.180:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.4.857" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43f39e159 code=0x50000 [ 110.333501][ T2780] input: syz0 as /devices/virtual/input/input77 [ 110.353027][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.363323][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.390532][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.418140][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.428601][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.445465][ T45] usb 3-1: Product: syz [ 110.454255][ T45] usb 3-1: Manufacturer: syz [ 110.458902][ T45] usb 3-1: SerialNumber: syz [ 110.476703][ T45] hub 3-1:1.0: bad descriptor, ignoring hub [ 110.489367][ T45] hub 3-1:1.0: probe with driver hub failed with error -5 [ 110.685861][ T2771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.707309][ T2771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.728653][ T2785] input: syz0 as /devices/virtual/input/input78 [ 111.414895][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.453421][ T45] usb 3-1: USB disconnect, device number 21 [ 111.466907][ T45] usblp0: removed [ 111.516336][ T2807] input: syz0 as /devices/virtual/input/input81 [ 111.787430][ T2814] input: syz0 as /devices/virtual/input/input82 [ 111.943490][ T2823] FAULT_INJECTION: forcing a failure. [ 111.943490][ T2823] name failslab, interval 1, probability 0, space 0, times 0 [ 111.971945][ T2823] CPU: 0 UID: 0 PID: 2823 Comm: syz.1.876 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 111.971979][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.971993][ T2823] Call Trace: [ 111.972000][ T2823] [ 111.972009][ T2823] __dump_stack+0x21/0x30 [ 111.972043][ T2823] dump_stack_lvl+0x140/0x1c0 [ 111.972071][ T2823] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.972099][ T2823] ? __kasan_check_write+0x18/0x20 [ 111.972120][ T2823] ? _raw_spin_lock_irq+0x93/0x120 [ 111.972141][ T2823] dump_stack+0x19/0x20 [ 111.972167][ T2823] should_fail_ex+0x3c2/0x510 [ 111.972192][ T2823] should_failslab+0xac/0x100 [ 111.972217][ T2823] kmem_cache_alloc_noprof+0x42/0x410 [ 111.972238][ T2823] ? ext4_init_io_end+0x44/0x1b0 [ 111.972268][ T2823] ext4_init_io_end+0x44/0x1b0 [ 111.972296][ T2823] ext4_do_writepages+0xac8/0x39f0 [ 111.972318][ T2823] ? prep_new_page+0x2d/0x180 [ 111.972344][ T2823] ? shmem_alloc_and_add_folio+0x45f/0x10b0 [ 111.972375][ T2823] ? ext4_normal_submit_inode_data_buffers+0x270/0x270 [ 111.972398][ T2823] ? kasan_unpoison+0x4a/0x70 [ 111.972419][ T2823] ? post_alloc_hook+0x37d/0x3b0 [ 111.972446][ T2823] ? __cfi_post_alloc_hook+0x10/0x10 [ 111.972472][ T2823] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 111.972500][ T2823] ? _raw_spin_trylock+0xb5/0x140 [ 111.972519][ T2823] ? __cfi__raw_spin_trylock+0x10/0x10 [ 111.972541][ T2823] ? __kasan_check_write+0x18/0x20 [ 111.972566][ T2823] ? prep_new_page+0x42/0x180 [ 111.972601][ T2823] ? get_page_from_freelist+0x4aea/0x4ba0 [ 111.972631][ T2823] ? lru_gen_add_folio+0x5c8/0x9a0 [ 111.972660][ T2823] ? __kasan_check_write+0x18/0x20 [ 111.972680][ T2823] ? folios_put_refs+0x746/0x860 [ 111.972707][ T2823] ext4_writepages+0x28c/0x550 [ 111.972732][ T2823] ? __cfi_ext4_writepages+0x10/0x10 [ 111.972759][ T2823] ? __cfi__raw_spin_lock+0x10/0x10 [ 111.972778][ T2823] ? __cfi_ext4_writepages+0x10/0x10 [ 111.972803][ T2823] do_writepages+0x3d4/0x7f0 [ 111.972833][ T2823] ? __kernel_text_address+0x11/0x40 [ 111.972861][ T2823] ? unwind_get_return_address+0x51/0x90 [ 111.972887][ T2823] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 111.972912][ T2823] ? arch_stack_walk+0x10a/0x170 [ 111.972932][ T2823] ? __cfi_do_writepages+0x10/0x10 [ 111.972961][ T2823] ? __kasan_check_write+0x18/0x20 [ 111.972980][ T2823] ? _raw_spin_lock+0x92/0x120 [ 111.972999][ T2823] ? _raw_spin_unlock+0x45/0x60 [ 111.973019][ T2823] filemap_fdatawrite_wbc+0x12c/0x190 [ 111.973041][ T2823] filemap_invalidate_pages+0x2cf/0x430 [ 111.973067][ T2823] ? __kmalloc_cache_noprof+0x23c/0x470 [ 111.973089][ T2823] ? __cfi_filemap_invalidate_pages+0x10/0x10 [ 111.973114][ T2823] ? do_iter_readv_writev+0x62c/0x820 [ 111.973146][ T2823] ? kasan_save_alloc_info+0x3a/0x50 [ 111.973164][ T2823] ? __kasan_kmalloc+0x96/0xb0 [ 111.973188][ T2823] ? __kmalloc_cache_noprof+0x23c/0x470 [ 111.973210][ T2823] kiocb_invalidate_pages+0xb1/0xe0 [ 111.973236][ T2823] __iomap_dio_rw+0x956/0x1ba0 [ 111.973257][ T2823] ? __cfi___iomap_dio_rw+0x10/0x10 [ 111.973278][ T2823] ? ext4_dirty_inode+0xdd/0x110 [ 111.973302][ T2823] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 111.973326][ T2823] ? __mark_inode_dirty+0x2ab/0xc50 [ 111.973349][ T2823] ? mnt_get_write_access_file+0x1af/0x3b0 [ 111.973378][ T2823] ? mnt_put_write_access_file+0xc2/0x100 [ 111.973407][ T2823] iomap_dio_rw+0x45/0xa0 [ 111.973424][ T2823] ext4_file_write_iter+0xf23/0x15c0 [ 111.973450][ T2823] ? ext4_file_write_iter+0x8a0/0x15c0 [ 111.973476][ T2823] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 111.973506][ T2823] ? avc_policy_seqno+0xd/0x30 [ 111.973531][ T2823] ? selinux_file_permission+0x318/0xb60 [ 111.973553][ T2823] do_iter_readv_writev+0x62c/0x820 [ 111.973577][ T2823] ? vfs_iter_read+0x5e0/0x5e0 [ 111.973600][ T2823] ? bpf_lsm_file_permission+0xd/0x20 [ 111.973631][ T2823] vfs_writev+0x4a5/0xe90 [ 111.973663][ T2823] ? do_writev+0x2e0/0x2e0 [ 111.973688][ T2823] ? vfs_write+0xbcf/0xfd0 [ 111.973714][ T2823] __se_sys_pwritev2+0x181/0x2a0 [ 111.973738][ T2823] ? __x64_sys_pwritev2+0xf0/0xf0 [ 111.973764][ T2823] __x64_sys_pwritev2+0xc3/0xf0 [ 111.973788][ T2823] x64_sys_call+0x2938/0x2ee0 [ 111.973822][ T2823] do_syscall_64+0x57/0xf0 [ 111.973841][ T2823] ? clear_bhb_loop+0x50/0xa0 [ 111.973867][ T2823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.973891][ T2823] RIP: 0033:0x7f4ebbd9e159 [ 111.973908][ T2823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.973925][ T2823] RSP: 002b:00007f4eba7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 111.973947][ T2823] RAX: ffffffffffffffda RBX: 00007f4ebc025fa0 RCX: 00007f4ebbd9e159 [ 111.973962][ T2823] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000003 [ 111.973975][ T2823] RBP: 00007f4eba7f7090 R08: 0000000000000500 R09: 0000000000000003 [ 111.973988][ T2823] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 111.974001][ T2823] R13: 00007f4ebc026038 R14: 00007f4ebc025fa0 R15: 00007fff547e6818 [ 111.974018][ T2823] [ 112.566515][ T2833] input: syz0 as /devices/virtual/input/input83 [ 112.757365][ T2848] input: syz0 as /devices/virtual/input/input85 [ 112.818470][ T2859] input: syz0 as /devices/virtual/input/input87 [ 113.251940][ T311] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 113.402758][ T311] usb 2-1: not running at top speed; connect to a high speed hub [ 113.422365][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 113.433262][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 113.446092][ T311] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 113.455409][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.463633][ T311] usb 2-1: Product: syz [ 113.467880][ T311] usb 2-1: Manufacturer: syz [ 113.472739][ T311] usb 2-1: SerialNumber: syz [ 113.619283][ T2887] input: syz0 as /devices/virtual/input/input88 [ 113.672791][ T2891] input: syz0 as /devices/virtual/input/input89 [ 113.982005][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.132176][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 114.138621][ T45] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 114.147005][ T45] usb 5-1: config 0 has no interface number 0 [ 114.155348][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 114.164525][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.172597][ T45] usb 5-1: Product: syz [ 114.176786][ T45] usb 5-1: Manufacturer: syz [ 114.181395][ T45] usb 5-1: SerialNumber: syz [ 114.186935][ T45] usb 5-1: config 0 descriptor?? [ 114.194066][ T45] smsc95xx v2.0.0 [ 114.937656][ T2920] input: syz0 as /devices/virtual/input/input92 [ 114.968420][ T2922] input: syz0 as /devices/virtual/input/input93 [ 114.995229][ T2897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.005135][ T2897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.022586][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 115.035484][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.044984][ T45] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 115.056095][ T45] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 115.066897][ T45] usb 5-1: USB disconnect, device number 14 [ 116.033010][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.041690][ T311] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 116.050775][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 116.070718][ T311] usb 2-1: USB disconnect, device number 22 [ 116.089024][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.105254][ T2945] input: syz0 as /devices/virtual/input/input96 [ 116.153935][ T2948] input: syz0 as /devices/virtual/input/input97 [ 116.264675][ T2954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.282262][ T2953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.394646][ T36] kauditd_printk_skb: 9327 callbacks suppressed [ 116.394661][ T36] audit: type=1400 audit(1790409780.550:13706): avc: denied { mount } for pid=2959 comm="syz.4.922" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 116.400165][ T2961] FAULT_INJECTION: forcing a failure. [ 116.400165][ T2961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.437179][ T2961] CPU: 0 UID: 0 PID: 2961 Comm: syz.1.921 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 116.437211][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.437226][ T2961] Call Trace: [ 116.437232][ T2961] [ 116.437241][ T2961] __dump_stack+0x21/0x30 [ 116.437276][ T2961] dump_stack_lvl+0x140/0x1c0 [ 116.437305][ T2961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.437334][ T2961] ? check_stack_object+0x138/0x150 [ 116.437358][ T2961] dump_stack+0x19/0x20 [ 116.437385][ T2961] should_fail_ex+0x3c2/0x510 [ 116.437412][ T2961] should_fail+0xf/0x20 [ 116.437435][ T2961] should_fail_usercopy+0x1e/0x30 [ 116.437461][ T2961] _copy_to_user+0x24/0xa0 [ 116.437493][ T2961] simple_read_from_buffer+0xed/0x160 [ 116.437523][ T2961] proc_fail_nth_read+0x1aa/0x220 [ 116.437555][ T2961] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 116.437586][ T2961] ? bpf_lsm_file_permission+0xd/0x20 [ 116.437614][ T2961] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 116.437644][ T2961] vfs_read+0x288/0xc70 [ 116.437666][ T2961] ? __cfi_mutex_unlock+0x10/0x10 [ 116.437692][ T2961] ? __cfi_vfs_read+0x10/0x10 [ 116.437713][ T2961] ? __kasan_check_write+0x18/0x20 [ 116.437734][ T2961] ? mutex_lock+0x97/0x1d0 [ 116.437758][ T2961] ? __cfi_mutex_lock+0x10/0x10 [ 116.437785][ T2961] ksys_read+0x145/0x260 [ 116.437805][ T2961] ? xfd_validate_state+0x68/0x140 [ 116.437834][ T2961] ? __cfi_ksys_read+0x10/0x10 [ 116.437856][ T2961] ? __kasan_check_write+0x18/0x20 [ 116.437877][ T2961] ? fpregs_restore_userregs+0x11c/0x260 [ 116.437903][ T2961] __x64_sys_read+0x7f/0x90 [ 116.437925][ T2961] x64_sys_call+0x2638/0x2ee0 [ 116.437944][ T2961] do_syscall_64+0x57/0xf0 [ 116.437971][ T2961] ? clear_bhb_loop+0x50/0xa0 [ 116.437998][ T2961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.438023][ T2961] RIP: 0033:0x7f4ebbd5e98e [ 116.438041][ T2961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.438057][ T2961] RSP: 002b:00007f4eba7d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.438079][ T2961] RAX: ffffffffffffffda RBX: 00007f4eba7d66c0 RCX: 00007f4ebbd5e98e [ 116.438095][ T2961] RDX: 000000000000000f RSI: 00007f4eba7d60a0 RDI: 0000000000000006 [ 116.438108][ T2961] RBP: 00007f4eba7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.438122][ T2961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.438135][ T2961] R13: 00007f4ebc026128 R14: 00007f4ebc026090 R15: 00007fff547e6818 [ 116.438153][ T2961] [ 116.728460][ T2975] input: syz0 as /devices/virtual/input/input98 [ 116.737423][ T2977] input: syz0 as /devices/virtual/input/input99 [ 117.030695][ T36] audit: type=1400 audit(1790409781.180:13707): avc: denied { map } for pid=3003 comm="syz.2.937" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.055815][ T36] audit: type=1400 audit(1790409781.220:13708): avc: denied { call } for pid=3003 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 117.105189][ T3008] input: syz0 as /devices/virtual/input/input103 [ 117.352908][ T36] audit: type=1400 audit(1790409781.510:13709): avc: denied { append } for pid=3022 comm="syz.2.945" name="pfkey" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.376521][ T3024] syz.2.945 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.503788][ T36] audit: type=1400 audit(1790409781.660:13710): avc: denied { write } for pid=3033 comm="syz.2.950" name="usb_gadget" dev="configfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.518864][ T3036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 117.551936][ T36] audit: type=1400 audit(1790409781.660:13711): avc: denied { add_name } for pid=3033 comm="syz.2.950" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.574665][ T36] audit: type=1400 audit(1790409781.660:13712): avc: denied { create } for pid=3033 comm="syz.2.950" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 117.596378][ T36] audit: type=1400 audit(1790409781.660:13713): avc: denied { write } for pid=3033 comm="syz.2.950" name="idVendor" dev="configfs" ino=31521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 117.623772][ T36] audit: type=1400 audit(1790409781.660:13714): avc: denied { open } for pid=3033 comm="syz.2.950" path="/265/config/usb_gadget/g1/idVendor" dev="configfs" ino=31521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 118.275737][ T36] audit: type=1400 audit(1790409782.430:13715): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 118.326518][ T3096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 118.451955][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 118.485425][ T3105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 118.569152][ T3109] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2619238112 (10476952448 ns) > initial count (287013888 ns). Using initial count to start timer. [ 118.591975][ T9] usb 2-1: device descriptor read/64, error -71 [ 118.747299][ T3120] FAULT_INJECTION: forcing a failure. [ 118.747299][ T3120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.768036][ T3120] CPU: 0 UID: 0 PID: 3120 Comm: syz.4.984 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 118.768075][ T3120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.768091][ T3120] Call Trace: [ 118.768099][ T3120] [ 118.768109][ T3120] __dump_stack+0x21/0x30 [ 118.768147][ T3120] dump_stack_lvl+0x140/0x1c0 [ 118.768180][ T3120] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.768215][ T3120] ? check_stack_object+0x138/0x150 [ 118.768242][ T3120] dump_stack+0x19/0x20 [ 118.768274][ T3120] should_fail_ex+0x3c2/0x510 [ 118.768311][ T3120] should_fail+0xf/0x20 [ 118.768338][ T3120] should_fail_usercopy+0x1e/0x30 [ 118.768369][ T3120] _copy_to_user+0x24/0xa0 [ 118.768403][ T3120] simple_read_from_buffer+0xed/0x160 [ 118.768438][ T3120] proc_fail_nth_read+0x1aa/0x220 [ 118.768474][ T3120] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 118.768508][ T3120] ? rwsem_read_trylock+0x275/0x5a0 [ 118.768545][ T3120] ? bpf_lsm_file_permission+0xd/0x20 [ 118.768577][ T3120] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 118.768611][ T3120] vfs_read+0x288/0xc70 [ 118.768636][ T3120] ? __cfi___blk_flush_plug+0x10/0x10 [ 118.768667][ T3120] ? __cfi_vfs_read+0x10/0x10 [ 118.768691][ T3120] ? __kasan_check_write+0x18/0x20 [ 118.768716][ T3120] ? mutex_lock+0x97/0x1d0 [ 118.768758][ T3120] ? __cfi_mutex_lock+0x10/0x10 [ 118.768789][ T3120] ksys_read+0x145/0x260 [ 118.768814][ T3120] ? xfd_validate_state+0x68/0x140 [ 118.768847][ T3120] ? __cfi_ksys_read+0x10/0x10 [ 118.768874][ T3120] ? __kasan_check_read+0x15/0x20 [ 118.768898][ T3120] __x64_sys_read+0x7f/0x90 [ 118.768923][ T3120] x64_sys_call+0x2638/0x2ee0 [ 118.768945][ T3120] do_syscall_64+0x57/0xf0 [ 118.768968][ T3120] ? clear_bhb_loop+0x50/0xa0 [ 118.768998][ T3120] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.769027][ T3120] RIP: 0033:0x7fa43f35e98e [ 118.769047][ T3120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.769067][ T3120] RSP: 002b:00007fa44017efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.769092][ T3120] RAX: ffffffffffffffda RBX: 00007fa44017f6c0 RCX: 00007fa43f35e98e [ 118.769110][ T3120] RDX: 000000000000000f RSI: 00007fa44017f0a0 RDI: 0000000000000004 [ 118.769125][ T3120] RBP: 00007fa44017f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.769141][ T3120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.769155][ T3120] R13: 00007fa43f626038 R14: 00007fa43f625fa0 R15: 00007ffdee239898 [ 118.769174][ T3120] [ 119.081975][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.198484][ T3144] rust_binder: 3134:3144 error while translating object: EINVAL [ 119.206269][ T3144] rust_binder: Failure in copy_transaction_data: EINVAL [ 119.206295][ T3144] rust_binder: 3134:3144 transaction call to 3134:0 failed EINVAL, code 0 size 88-24 [ 119.321961][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 119.451940][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.691997][ T9] usb 2-1: device descriptor read/64, error -71 [ 119.802110][ T9] usb usb2-port1: attempt power cycle [ 119.974113][ T3148] rust_binder: 3147:3148 error while translating object: EINVAL [ 119.978142][ T1099] rust_binder: 3134: undelivered TRANSACTION_ERROR: 29201 [ 119.982387][ T3148] rust_binder: Failure in copy_transaction_data: EINVAL [ 119.988924][ T3148] rust_binder: 3147:3148 transaction call to 3147:0 failed EINVAL, code 0 size 88-24 [ 120.008061][ T1099] rust_binder: 3147: undelivered TRANSACTION_ERROR: 29201 [ 120.028915][ T3150] FAULT_INJECTION: forcing a failure. [ 120.028915][ T3150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.052148][ T3150] CPU: 0 UID: 0 PID: 3150 Comm: syz.0.995 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 120.052186][ T3150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.052216][ T3150] Call Trace: [ 120.052224][ T3150] [ 120.052234][ T3150] __dump_stack+0x21/0x30 [ 120.052272][ T3150] dump_stack_lvl+0x140/0x1c0 [ 120.052304][ T3150] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.052340][ T3150] dump_stack+0x19/0x20 [ 120.052371][ T3150] should_fail_ex+0x3c2/0x510 [ 120.052402][ T3150] should_fail+0xf/0x20 [ 120.052429][ T3150] should_fail_usercopy+0x1e/0x30 [ 120.052461][ T3150] _copy_from_user+0x20/0xa0 [ 120.052496][ T3150] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0xeef/0x3fe0 [ 120.052528][ T3150] ? __asan_set_shadow_00+0x12/0x20 [ 120.052563][ T3150] ? do_vfs_ioctl+0x1824/0x2010 [ 120.052592][ T3150] ? arch_stack_walk+0x10a/0x170 [ 120.052616][ T3150] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 120.052648][ T3150] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 120.052678][ T3150] ? _parse_integer+0x2e/0x40 [ 120.052708][ T3150] ? ioctl_has_perm+0x39a/0x500 [ 120.052734][ T3150] ? has_cap_mac_admin+0xd0/0xd0 [ 120.052761][ T3150] ? proc_fail_nth_write+0x184/0x220 [ 120.052798][ T3150] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 120.052835][ T3150] ? selinux_file_ioctl+0x732/0x1480 [ 120.052859][ T3150] ? vfs_write+0xbcf/0xfd0 [ 120.052885][ T3150] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 120.052910][ T3150] ? __cfi_vfs_write+0x10/0x10 [ 120.052935][ T3150] ? __kasan_check_write+0x18/0x20 [ 120.052960][ T3150] ? mutex_unlock+0x90/0x240 [ 120.052990][ T3150] ? __cfi_mutex_unlock+0x10/0x10 [ 120.053020][ T3150] ? __fget_files+0x2bc/0x330 [ 120.053050][ T3150] ? bpf_lsm_file_ioctl+0xd/0x20 [ 120.053101][ T3150] ? security_file_ioctl+0x3e/0x110 [ 120.053126][ T3150] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 120.053156][ T3150] __se_sys_ioctl+0x123/0x1b0 [ 120.053186][ T3150] __x64_sys_ioctl+0x7f/0xa0 [ 120.053224][ T3150] x64_sys_call+0x1878/0x2ee0 [ 120.053247][ T3150] do_syscall_64+0x57/0xf0 [ 120.053270][ T3150] ? clear_bhb_loop+0x50/0xa0 [ 120.053301][ T3150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.053328][ T3150] RIP: 0033:0x7fef3f99e159 [ 120.053346][ T3150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.053366][ T3150] RSP: 002b:00007fef408c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.053391][ T3150] RAX: ffffffffffffffda RBX: 00007fef3fc25fa0 RCX: 00007fef3f99e159 [ 120.053409][ T3150] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000003 [ 120.053425][ T3150] RBP: 00007fef408c4090 R08: 0000000000000000 R09: 0000000000000000 [ 120.053441][ T3150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.053455][ T3150] R13: 00007fef3fc26038 R14: 00007fef3fc25fa0 R15: 00007ffe20d1eb48 [ 120.053476][ T3150] [ 120.362683][ T3158] ./dev/sda1: Can't lookup blockdev [ 120.386867][ T3160] fuse: Bad value for 'group_id' [ 120.402637][ T3160] fuse: Bad value for 'group_id' [ 120.412059][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 120.432994][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.521147][ T3166] fuse: Bad value for 'fd' [ 120.563399][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.722663][ T3190] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 120.801948][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 120.823063][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.845117][ T3196] ./dev/sda1: Can't lookup blockdev [ 120.952945][ T9] usb 2-1: device descriptor read/8, error -71 [ 120.999255][ T3200] No source specified [ 121.062072][ T9] usb usb2-port1: unable to enumerate USB device [ 121.323718][ T3207] FAULT_INJECTION: forcing a failure. [ 121.323718][ T3207] name failslab, interval 1, probability 0, space 0, times 0 [ 121.336629][ T3207] CPU: 0 UID: 0 PID: 3207 Comm: syz.2.1015 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 121.336664][ T3207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.336680][ T3207] Call Trace: [ 121.336688][ T3207] [ 121.336698][ T3207] __dump_stack+0x21/0x30 [ 121.336737][ T3207] dump_stack_lvl+0x140/0x1c0 [ 121.336770][ T3207] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.336803][ T3207] ? avc_has_perm_noaudit+0x289/0x360 [ 121.336836][ T3207] dump_stack+0x19/0x20 [ 121.336867][ T3207] should_fail_ex+0x3c2/0x510 [ 121.336896][ T3207] should_failslab+0xac/0x100 [ 121.336927][ T3207] __kmalloc_cache_noprof+0x41/0x470 [ 121.336952][ T3207] ? alloc_fs_context+0x6f/0x800 [ 121.336982][ T3207] ? __cfi_selinux_mount+0x10/0x10 [ 121.337033][ T3207] alloc_fs_context+0x6f/0x800 [ 121.337064][ T3207] ? security_capable+0x44/0x130 [ 121.337091][ T3207] fs_context_for_reconfigure+0x77/0x90 [ 121.337124][ T3207] path_mount+0xb52/0xff0 [ 121.337154][ T3207] __se_sys_mount+0x2bf/0x480 [ 121.337180][ T3207] ? ksys_write+0x1f3/0x260 [ 121.337205][ T3207] ? __x64_sys_mount+0xf0/0xf0 [ 121.337232][ T3207] __x64_sys_mount+0xc3/0xf0 [ 121.337257][ T3207] x64_sys_call+0x2021/0x2ee0 [ 121.337279][ T3207] do_syscall_64+0x57/0xf0 [ 121.337302][ T3207] ? clear_bhb_loop+0x50/0xa0 [ 121.337332][ T3207] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.337360][ T3207] RIP: 0033:0x7f99ad19e159 [ 121.337379][ T3207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.337398][ T3207] RSP: 002b:00007f99ae01e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.337424][ T3207] RAX: ffffffffffffffda RBX: 00007f99ad425fa0 RCX: 00007f99ad19e159 [ 121.337441][ T3207] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 121.337457][ T3207] RBP: 00007f99ae01e090 R08: 0000200000000040 R09: 0000000000000000 [ 121.337473][ T3207] R10: 0000000000086862 R11: 0000000000000246 R12: 0000000000000001 [ 121.337487][ T3207] R13: 00007f99ad426038 R14: 00007f99ad425fa0 R15: 00007ffedc131f78 [ 121.337508][ T3207] [ 121.611609][ T3221] ./dev/sda1: Can't lookup blockdev [ 121.617800][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 121.617819][ T36] audit: type=1400 audit(1790409785.780:13721): avc: denied { nlmsg_read } for pid=3218 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 121.669303][ T3226] FAULT_INJECTION: forcing a failure. [ 121.669303][ T3226] name failslab, interval 1, probability 0, space 0, times 0 [ 121.682251][ T3226] CPU: 1 UID: 0 PID: 3226 Comm: syz.0.1024 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 121.682289][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.682304][ T3226] Call Trace: [ 121.682312][ T3226] [ 121.682322][ T3226] __dump_stack+0x21/0x30 [ 121.682362][ T3226] dump_stack_lvl+0x140/0x1c0 [ 121.682394][ T3226] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.682430][ T3226] dump_stack+0x19/0x20 [ 121.682462][ T3226] should_fail_ex+0x3c2/0x510 [ 121.682491][ T3226] should_failslab+0xac/0x100 [ 121.682523][ T3226] kmem_cache_alloc_noprof+0x42/0x410 [ 121.682549][ T3226] ? single_open+0x14b/0x3d0 [ 121.682583][ T3226] single_open+0x14b/0x3d0 [ 121.682615][ T3226] ? bpf_lsm_locked_down+0xd/0x20 [ 121.682648][ T3226] tracing_clock_open+0x103/0x240 [ 121.682672][ T3226] ? __cfi_tracing_clock_open+0x10/0x10 [ 121.682697][ T3226] do_dentry_open+0x97f/0x1510 [ 121.682733][ T3226] vfs_open+0x86/0x240 [ 121.682764][ T3226] ? __cfi_vfs_open+0x10/0x10 [ 121.682796][ T3226] ? may_open+0x352/0x430 [ 121.682828][ T3226] path_openat+0x2c49/0x35a0 [ 121.682863][ T3226] ? kasan_save_alloc_info+0x3a/0x50 [ 121.682886][ T3226] ? getname+0x1b/0x30 [ 121.682912][ T3226] ? x64_sys_call+0xe69/0x2ee0 [ 121.682934][ T3226] ? do_syscall_64+0x57/0xf0 [ 121.682960][ T3226] ? do_filp_open+0x440/0x440 [ 121.683004][ T3226] do_filp_open+0x1f2/0x440 [ 121.683037][ T3226] ? __cfi_do_filp_open+0x10/0x10 [ 121.683073][ T3226] ? alloc_fd+0x4c1/0x570 [ 121.683103][ T3226] do_sys_openat2+0x134/0x1d0 [ 121.683137][ T3226] ? fput+0x1a4/0x230 [ 121.683168][ T3226] ? do_sys_open+0x100/0x100 [ 121.683202][ T3226] ? ksys_write+0x1f3/0x260 [ 121.683228][ T3226] ? __cfi_ksys_write+0x10/0x10 [ 121.683255][ T3226] __x64_sys_openat+0x13a/0x170 [ 121.683291][ T3226] x64_sys_call+0xe69/0x2ee0 [ 121.683314][ T3226] do_syscall_64+0x57/0xf0 [ 121.683337][ T3226] ? clear_bhb_loop+0x50/0xa0 [ 121.683367][ T3226] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.683397][ T3226] RIP: 0033:0x7fef3f99e159 [ 121.683422][ T3226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.683443][ T3226] RSP: 002b:00007fef408c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.683469][ T3226] RAX: ffffffffffffffda RBX: 00007fef3fc25fa0 RCX: 00007fef3f99e159 [ 121.683488][ T3226] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 121.683505][ T3226] RBP: 00007fef408c4090 R08: 0000000000000000 R09: 0000000000000000 [ 121.683521][ T3226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.683536][ T3226] R13: 00007fef3fc26038 R14: 00007fef3fc25fa0 R15: 00007ffe20d1eb48 [ 121.683557][ T3226] [ 122.097740][ T3243] 9pnet_fd: p9_fd_create_unix (3243): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.231965][ T1099] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 122.471240][ T3256] ./dev/sda1: Can't lookup blockdev [ 122.483093][ T1099] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.501979][ T1099] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.522981][ T1099] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.532142][ T1099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.540216][ T1099] usb 2-1: SerialNumber: syz [ 122.860035][ T3266] FAULT_INJECTION: forcing a failure. [ 122.860035][ T3266] name failslab, interval 1, probability 0, space 0, times 0 [ 122.872843][ T3266] CPU: 1 UID: 0 PID: 3266 Comm: syz.4.1038 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 122.872881][ T3266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.872893][ T3266] Call Trace: [ 122.872899][ T3266] [ 122.872906][ T3266] __dump_stack+0x21/0x30 [ 122.872959][ T3266] dump_stack_lvl+0x140/0x1c0 [ 122.872990][ T3266] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.873026][ T3266] ? avc_has_perm_noaudit+0x289/0x360 [ 122.873049][ T3266] dump_stack+0x19/0x20 [ 122.873071][ T3266] should_fail_ex+0x3c2/0x510 [ 122.873114][ T3266] should_failslab+0xac/0x100 [ 122.873143][ T3266] __kmalloc_node_noprof+0x69/0x500 [ 122.873173][ T3266] ? __kvmalloc_node_noprof+0x128/0x300 [ 122.873190][ T3266] __kvmalloc_node_noprof+0x128/0x300 [ 122.873205][ T3266] ? bpf_lsm_capable+0xd/0x20 [ 122.873243][ T3266] ? security_capable+0x44/0x130 [ 122.873271][ T3266] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 122.873293][ T3266] ? ns_capable_noaudit+0x60/0xf0 [ 122.873317][ T3266] proc_sys_call_handler+0x3e6/0x880 [ 122.873342][ T3266] ? __cfi_selinux_file_permission+0x10/0x10 [ 122.873366][ T3266] ? proc_sys_open+0x2a0/0x2a0 [ 122.873388][ T3266] ? __kasan_check_write+0x18/0x20 [ 122.873418][ T3266] ? proc_fail_nth_write+0x184/0x220 [ 122.873457][ T3266] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 122.873483][ T3266] proc_sys_write+0x26/0x30 [ 122.873499][ T3266] vfs_write+0x75f/0xfd0 [ 122.873533][ T3266] ? __cfi_vfs_write+0x10/0x10 [ 122.873559][ T3266] ? __cfi_mutex_lock+0x10/0x10 [ 122.873589][ T3266] ksys_write+0x145/0x260 [ 122.873616][ T3266] ? __cfi_ksys_write+0x10/0x10 [ 122.873635][ T3266] ? __kasan_check_read+0x15/0x20 [ 122.873652][ T3266] __x64_sys_write+0x7f/0x90 [ 122.873686][ T3266] x64_sys_call+0x271c/0x2ee0 [ 122.873708][ T3266] do_syscall_64+0x57/0xf0 [ 122.873729][ T3266] ? clear_bhb_loop+0x50/0xa0 [ 122.873761][ T3266] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.873801][ T3266] RIP: 0033:0x7fa43f39e159 [ 122.873821][ T3266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.873845][ T3266] RSP: 002b:00007fa44017f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.873869][ T3266] RAX: ffffffffffffffda RBX: 00007fa43f625fa0 RCX: 00007fa43f39e159 [ 122.873886][ T3266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.873904][ T3266] RBP: 00007fa44017f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.873916][ T3266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.873927][ T3266] R13: 00007fa43f626038 R14: 00007fa43f625fa0 R15: 00007ffdee239898 [ 122.873942][ T3266] [ 123.278311][ T3277] veth0_to_batadv: mtu greater than device maximum [ 123.682255][ T3282] ./dev/sda1: Can't lookup blockdev [ 124.331966][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 124.503877][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.512516][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.522055][ T311] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 124.523349][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.541260][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 124.550751][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.559013][ T9] usb 1-1: Product: syz [ 124.563536][ T9] usb 1-1: Manufacturer: syz [ 124.568219][ T9] usb 1-1: SerialNumber: syz [ 124.583949][ T9] usb 1-1: selecting invalid altsetting 1 [ 124.584687][ T3294] syz.0.1047 (3294): drop_caches: 3 [ 124.590730][ T9] usb 1-1: unit 6 not found! [ 124.690567][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.703151][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.713035][ T311] usb 3-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 124.722163][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.738023][ T313] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 124.754132][ T313] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 124.766031][ T313] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 124.781042][ T313] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 124.793150][ T313] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 124.808381][ T313] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.016527][ T3310] ./dev/sda1: Can't lookup blockdev [ 125.216288][ T9] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 125.227675][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.236957][ T1099] usb 2-1: 0:2 : does not exist [ 125.241866][ T1099] usb 2-1: unit 5 not found! [ 125.246887][ T3314] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=22910 (366560 ns) > initial count (1920 ns). Using initial count to start timer. [ 125.261010][ T1099] usb 2-1: USB disconnect, device number 27 [ 125.270457][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.286213][ T9] usb 1-1: USB disconnect, device number 24 [ 125.295436][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.308149][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.323208][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.334610][ T3303] 9pnet_fd: p9_fd_create_tcp (3303): problem connecting socket to 127.0.0.1 [ 125.337074][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.359820][ T36] audit: type=1400 audit(1790409789.520:13722): avc: denied { ioctl } for pid=3302 comm="syz.2.1050" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.361668][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.402287][ T362] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.418258][ T362] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.430298][ T362] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.446818][ T362] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.458749][ T362] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.475111][ T362] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.496957][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.516508][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.747634][ T3332] syz.2.1050 (3332): /proc/3302/oom_adj is deprecated, please use /proc/3302/oom_score_adj instead. [ 125.758584][ T36] audit: type=1400 audit(1790409789.900:13723): avc: denied { bind } for pid=3331 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.783449][ T311] aiptek 3-1:1.0: Aiptek using 400 ms programming speed [ 125.798212][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.813407][ T311] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input125 [ 125.814693][ T3336] ./dev/sda1: Can't lookup blockdev [ 125.828610][ T311] usb 3-1: USB disconnect, device number 22 [ 125.836559][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 125.852816][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 125.868107][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 126.073715][ T36] audit: type=1400 audit(1790409790.230:13724): avc: denied { read } for pid=3338 comm="syz.0.1062" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.621957][ T311] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 126.773201][ T311] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.786416][ T311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 126.795065][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.808325][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.816916][ T311] usb 3-1: Product: syz [ 126.821222][ T311] usb 3-1: Manufacturer: syz [ 126.822041][ T1099] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 126.826585][ T311] usb 3-1: SerialNumber: syz [ 126.883671][ T3359] ./dev/sda1: Can't lookup blockdev [ 126.993015][ T1099] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.011952][ T1099] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 127.031981][ T1099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.042763][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.048988][ T1099] usb 5-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 127.063030][ T311] usb 3-1: bad CDC descriptors [ 127.077756][ T1099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.088414][ T311] usb 3-1: USB disconnect, device number 23 [ 127.094577][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.105019][ T1099] usb 5-1: config 0 descriptor?? [ 127.113461][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.130746][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.134905][ T3357] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.152028][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.190188][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.222795][ T362] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 127.335268][ T3364] synth uevent: /bus/acpi: unknown uevent action string [ 127.539915][ T36] audit: type=1400 audit(1790409791.690:13725): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 127.584142][ T1099] usbhid 5-1:0.0: can't add hid device: -71 [ 127.590151][ T1099] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 127.608594][ T1099] usb 5-1: USB disconnect, device number 15 [ 127.638679][ T3389] ./dev/sda1: Can't lookup blockdev [ 127.800673][ T36] audit: type=1400 audit(1790409791.950:13726): avc: granted { setsecparam } for pid=3397 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 128.112781][ T3409] input: syz0 as /devices/virtual/input/input135 [ 128.229916][ T3417] ./dev/sda1: Can't lookup blockdev [ 128.421390][ T3426] input: syz0 as /devices/virtual/input/input137 [ 128.471980][ T36] audit: type=1400 audit(1790409792.620:13727): avc: denied { create } for pid=3429 comm="syz.4.1094" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 128.501794][ T3433] input: syz0 as /devices/virtual/input/input138 [ 128.780860][ T3443] ./dev/sda1: Can't lookup blockdev [ 128.952174][ T3457] input: syz0 as /devices/virtual/input/input141 [ 128.959486][ T3458] input: syz0 as /devices/virtual/input/input142 [ 129.073007][ T3469] ./dev/sda1: Can't lookup blockdev [ 129.078657][ T36] audit: type=1400 audit(1790409793.230:13728): avc: denied { create } for pid=3467 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 129.102088][ T36] audit: type=1400 audit(1790409793.240:13729): avc: denied { execute } for pid=3467 comm="syz.2.1109" path="/syzcgroup/cpu/syz2/cpuset.cpus" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 129.207732][ T36] audit: type=1400 audit(1790409793.360:13730): avc: denied { wake_alarm } for pid=3472 comm="syz.1.1111" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.331976][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 129.451977][ T1099] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 129.481954][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 129.488290][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 129.496796][ T45] usb 3-1: config 0 has no interface number 0 [ 129.503075][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 129.511387][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 129.520552][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.528610][ T45] usb 3-1: Product: syz [ 129.532879][ T45] usb 3-1: Manufacturer: syz [ 129.537590][ T45] usb 3-1: SerialNumber: syz [ 129.543216][ T45] usb 3-1: config 0 descriptor?? [ 129.549177][ T45] smsc75xx v1.0.0 [ 129.611961][ T1099] usb 2-1: Using ep0 maxpacket: 32 [ 129.618731][ T1099] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.629383][ T1099] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 129.641951][ T1099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.650072][ T1099] usb 2-1: Product: syz [ 129.654599][ T1099] usb 2-1: Manufacturer: syz [ 129.659333][ T1099] usb 2-1: SerialNumber: syz [ 129.663939][ T3477] input: syz0 as /devices/virtual/input/input143 [ 129.878625][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.887358][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.931951][ T466] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 129.975842][ T362] EXT4-fs error: 32 callbacks suppressed [ 129.975862][ T362] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 129.976681][ T1099] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 129.983682][ T362] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 129.993898][ T1099] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 130.001629][ T362] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.033811][ T313] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.047220][ T1099] usb 2-1: USB disconnect, device number 28 [ 130.054423][ T1111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.068699][ T313] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.082068][ T313] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.094089][ T1111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.106488][ T1111] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 130.118772][ T466] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.130853][ T466] usb 1-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 130.140382][ T466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.148886][ T466] usb 1-1: Product: syz [ 130.153218][ T466] usb 1-1: Manufacturer: syz [ 130.158006][ T466] usb 1-1: SerialNumber: syz [ 130.362480][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 130.362622][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 130.386541][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.395977][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 130.406971][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 130.429927][ T3482] input: syz0 as /devices/virtual/input/input144 [ 130.433655][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 130.442003][ T466] usb 1-1: failed to enable PITCH for EP 0x1 [ 130.447306][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 130.466693][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 130.484300][ T45] usb 3-1: USB disconnect, device number 24 [ 130.495251][ T466] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 130.515474][ T466] usb 1-1: USB disconnect, device number 25 [ 130.741989][ T311] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 130.752099][ T398] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 130.880059][ T36] audit: type=1400 audit(1790409795.030:13731): avc: denied { ioctl } for pid=3487 comm="syz.2.1118" path="socket:[35319]" dev="sockfs" ino=35319 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.911775][ T311] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 130.919563][ T311] usb 5-1: can't read configurations, error -61 [ 130.926223][ T36] audit: type=1400 audit(1790409795.030:13732): avc: denied { execute } for pid=3487 comm="syz.2.1118" path="/proc/847/task/848/net/vlan/vlan1" dev="proc" ino=4026532788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 130.936763][ T3494] ./dev/sda1: Can't lookup blockdev [ 130.952089][ T398] usb 2-1: Using ep0 maxpacket: 8 [ 130.966971][ T398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.975572][ T398] usb 2-1: config 10 has an invalid interface number: 91 but max is 0 [ 130.983921][ T398] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 130.994312][ T398] usb 2-1: config 10 has no interface number 0 [ 131.000517][ T398] usb 2-1: config 10 interface 91 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.013934][ T398] usb 2-1: config 10 interface 91 has no altsetting 0 [ 131.023131][ T398] usb 2-1: string descriptor 0 read error: -22 [ 131.029435][ T398] usb 2-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 131.038691][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.057464][ T398] uvcvideo 2-1:10.91: Found Unit with invalid ID 0 [ 131.064197][ T398] usb 2-1: Found UVC 0.40 device (097b:61f6) [ 131.071260][ T398] uvcvideo 2-1:10.91: Entity type for entity Output 3 was not initialized! [ 131.079967][ T311] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 131.089555][ T398] uvcvideo 2-1:10.91: Entity type for entity Media 2 was not initialized! [ 131.098870][ T322] EXT4-fs warning: 50 callbacks suppressed [ 131.098889][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 131.120504][ T398] usb 2-1: Failed to create links for entity 3 [ 131.126842][ T398] usb 2-1: Failed to register entities (-22). [ 131.133306][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 131.150401][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 131.260125][ T1099] usb 2-1: USB disconnect, device number 29 [ 131.273480][ T311] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.281221][ T311] usb 5-1: can't read configurations, error -61 [ 131.287683][ T311] usb usb5-port1: attempt power cycle [ 131.631997][ T311] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.654004][ T311] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.661749][ T311] usb 5-1: can't read configurations, error -61 [ 131.791988][ T311] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 131.812354][ T3510] input: syz0 as /devices/virtual/input/input147 [ 131.818897][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 131.835356][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 131.853107][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 131.868688][ T311] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 131.876539][ T311] usb 5-1: can't read configurations, error -61 [ 131.883116][ T311] usb usb5-port1: unable to enumerate USB device [ 131.916164][ T3516] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm syz.2.1126: No space for directory leaf checksum. Please run e2fsck -D. [ 131.932513][ T3516] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 131.943706][ T3516] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm syz.2.1126: No space for directory leaf checksum. Please run e2fsck -D. [ 131.959455][ T3516] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 131.969573][ T3516] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm syz.2.1126: No space for directory leaf checksum. Please run e2fsck -D. [ 131.985111][ T3516] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 131.995733][ T3516] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm syz.2.1126: No space for directory leaf checksum. Please run e2fsck -D. [ 132.011484][ T3516] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 132.013757][ T3520] ./dev/sda1: Can't lookup blockdev [ 132.021017][ T3516] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 132.135726][ T1741] tipc: Subscription rejected, illegal request [ 132.143542][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 132.312001][ T1099] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 132.361558][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 132.461932][ T1099] usb 1-1: Using ep0 maxpacket: 32 [ 132.488944][ T36] audit: type=1400 audit(1790409796.640:13733): avc: denied { execute } for pid=3545 comm="syz.1.1137" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.535433][ T1099] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.550599][ T1099] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 132.558435][ T1099] usb 1-1: can't read configurations, error -71 [ 133.026238][ T3554] ./dev/sda1: Can't lookup blockdev [ 133.316154][ T36] audit: type=1400 audit(1790409797.470:13734): avc: denied { ioctl } for pid=3571 comm="syz.0.1147" path="socket:[34712]" dev="sockfs" ino=34712 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.516972][ T3583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 133.592162][ T36] audit: type=1400 audit(1790409797.750:13735): avc: granted { setsecparam } for pid=3587 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 133.612624][ T3588] netlink: 'syz.1.1152': attribute type 4 has an invalid length. [ 133.620499][ T3588] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1152'. [ 133.641960][ T36] audit: type=1400 audit(1790409797.780:13736): avc: denied { sys_module } for pid=3587 comm="syz.1.1152" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.749674][ T3595] /dev/nullb0: Can't lookup blockdev [ 133.825854][ T36] audit: type=1400 audit(1790409797.980:13737): avc: denied { read write } for pid=297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.871924][ T36] audit: type=1400 audit(1790409797.980:13738): avc: denied { open } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.917734][ T3609] can: request_module (can-proto-0) failed. [ 133.922054][ T36] audit: type=1400 audit(1790409797.980:13739): avc: denied { ioctl } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.030173][ T36] audit: type=1400 audit(1790409798.180:13740): avc: denied { create } for pid=3612 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.050045][ T36] audit: type=1400 audit(1790409798.190:13741): avc: denied { bind } for pid=3612 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.069652][ T36] audit: type=1400 audit(1790409798.190:13742): avc: denied { listen } for pid=3612 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.089378][ T36] audit: type=1400 audit(1790409798.190:13743): avc: denied { setattr } for pid=3612 comm="syz.2.1155" name="AF_VSOCK" dev="sockfs" ino=35994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.191992][ T466] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 134.341925][ T466] usb 2-1: Using ep0 maxpacket: 16 [ 134.350629][ T466] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 134.360470][ T466] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.371416][ T466] usb 2-1: config 0 has no interface number 0 [ 134.378283][ T466] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 134.389114][ T466] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.400120][ T466] usb 2-1: config 0 interface 98 has no altsetting 0 [ 134.412472][ T466] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 134.422287][ T466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.430479][ T466] usb 2-1: Product: syz [ 134.436094][ T466] usb 2-1: Manufacturer: syz [ 134.440795][ T466] usb 2-1: SerialNumber: syz [ 134.452046][ T466] usb 2-1: config 0 descriptor?? [ 134.468594][ T3611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.476309][ T3611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.688890][ T3611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.702852][ T3611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.994866][ T466] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 135.005171][ T466] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 135.016285][ T466] asix 2-1:0.98: probe with driver asix failed with error -71 [ 135.026417][ T466] usb 2-1: USB disconnect, device number 30 [ 135.057161][ T322] EXT4-fs error: 33 callbacks suppressed [ 135.057176][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 135.074965][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 135.087366][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 135.823091][ T3671] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.882519][ T3680] No source specified [ 136.312005][ T311] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 136.474611][ T311] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 136.483328][ T311] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 136.491620][ T311] usb 1-1: config 0 has no interface number 0 [ 136.498858][ T311] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 136.508899][ T311] usb 1-1: config 0 interface 200 has no altsetting 0 [ 136.518862][ T311] usb 1-1: New USB device found, idVendor=0b57, idProduct=742a, bcdDevice=6d.39 [ 136.528003][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.536580][ T311] usb 1-1: Product: syz [ 136.540851][ T311] usb 1-1: Manufacturer: syz [ 136.546373][ T311] usb 1-1: SerialNumber: syz [ 136.553503][ T311] usb 1-1: config 0 descriptor?? [ 136.554941][ T112] EXT4-fs warning: 9 callbacks suppressed [ 136.554987][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.579658][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 136.593939][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.609333][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 136.630731][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.647213][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 136.659569][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.674617][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 136.687156][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.703639][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 136.722461][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.738484][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 136.791549][ T311] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 136.810525][ T311] usb 1-1: USB disconnect, device number 28 [ 136.838966][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.854378][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 136.866638][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 136.882350][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 137.032066][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 137.201190][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 137.226565][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.236608][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.262526][ T9] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.308861][ T9] usb 2-1: string descriptor 0 read error: -22 [ 137.325268][ T9] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 137.361921][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.376887][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 137.396721][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.417378][ T3708] No source specified [ 137.417387][ T9] usb 2-1: unknown interface protocol 0x5d, assuming v1 [ 137.417419][ T9] usb 2-1: cannot find UAC_HEADER [ 137.484240][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 137.535976][ T313] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 137.773939][ T3721] FAULT_INJECTION: forcing a failure. [ 137.773939][ T3721] name fail_futex, interval 1, probability 0, space 0, times 0 [ 137.786833][ T3721] CPU: 0 UID: 0 PID: 3721 Comm: syz.4.1198 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 137.786868][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.786883][ T3721] Call Trace: [ 137.786891][ T3721] [ 137.786900][ T3721] __dump_stack+0x21/0x30 [ 137.786939][ T3721] dump_stack_lvl+0x140/0x1c0 [ 137.786971][ T3721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.787006][ T3721] dump_stack+0x19/0x20 [ 137.787036][ T3721] should_fail_ex+0x3c2/0x510 [ 137.787066][ T3721] should_fail+0xf/0x20 [ 137.787099][ T3721] get_futex_key+0x22c/0x940 [ 137.787131][ T3721] ? __cfi_get_futex_key+0x10/0x10 [ 137.787161][ T3721] futex_wait_multiple_setup+0x16f/0x5a0 [ 137.787187][ T3721] ? __cfi_futex_wait_multiple_setup+0x10/0x10 [ 137.787211][ T3721] ? kasan_save_alloc_info+0x3a/0x50 [ 137.787235][ T3721] futex_wait_multiple+0xa8/0x380 [ 137.787260][ T3721] __se_sys_futex_waitv+0x5df/0x720 [ 137.787293][ T3721] ? __x64_sys_futex_waitv+0xf0/0xf0 [ 137.787327][ T3721] ? __kasan_check_write+0x18/0x20 [ 137.787352][ T3721] ? fput+0x1a4/0x230 [ 137.787383][ T3721] ? __cfi_ksys_write+0x10/0x10 [ 137.787410][ T3721] __x64_sys_futex_waitv+0xc3/0xf0 [ 137.787443][ T3721] x64_sys_call+0x2dc4/0x2ee0 [ 137.787465][ T3721] do_syscall_64+0x57/0xf0 [ 137.787488][ T3721] ? clear_bhb_loop+0x50/0xa0 [ 137.787518][ T3721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.787547][ T3721] RIP: 0033:0x7fa43f39e159 [ 137.787566][ T3721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.787587][ T3721] RSP: 002b:00007fa44017f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 137.787613][ T3721] RAX: ffffffffffffffda RBX: 00007fa43f625fa0 RCX: 00007fa43f39e159 [ 137.787631][ T3721] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000006c0 [ 137.787646][ T3721] RBP: 00007fa44017f090 R08: 0000000000000001 R09: 0000000000000000 [ 137.787661][ T3721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.787677][ T3721] R13: 00007fa43f626038 R14: 00007fa43f625fa0 R15: 00007ffdee239898 [ 137.787698][ T3721] [ 138.132025][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 138.183589][ T1129] bridge_slave_1: left allmulticast mode [ 138.189358][ T1129] bridge_slave_1: left promiscuous mode [ 138.195846][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.204062][ T1129] bridge_slave_0: left allmulticast mode [ 138.210091][ T1129] bridge_slave_0: left promiscuous mode [ 138.218272][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.291919][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 138.308049][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 138.319778][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.333095][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.339846][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 138.351177][ T1129] veth1_macvtap: left promiscuous mode [ 138.358369][ T36] kauditd_printk_skb: 466 callbacks suppressed [ 138.358389][ T36] audit: type=1400 audit(1790409802.510:14210): avc: denied { mounton } for pid=3731 comm="syz.2.1204" path="/321/sys" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.359993][ T1129] veth0_vlan: left promiscuous mode [ 138.364698][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.401993][ T36] audit: type=1400 audit(1790409802.550:14211): avc: denied { mount } for pid=3731 comm="syz.2.1204" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.433159][ T9] usb 1-1: config 0 descriptor?? [ 138.444617][ T36] audit: type=1400 audit(1790409802.590:14212): avc: denied { ioctl } for pid=3718 comm="syz.0.1197" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.500840][ T36] audit: type=1400 audit(1790409802.590:14213): avc: denied { ioctl } for pid=3718 comm="syz.0.1197" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.546885][ T36] audit: type=1400 audit(1790409802.590:14214): avc: denied { ioctl } for pid=3718 comm="syz.0.1197" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.583463][ T36] audit: type=1400 audit(1790409802.590:14215): avc: denied { ioctl } for pid=3718 comm="syz.0.1197" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.612618][ T36] audit: type=1400 audit(1790409802.630:14216): avc: denied { mount } for pid=3731 comm="syz.2.1204" name="/" dev="ramfs" ino=36372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.637422][ T36] audit: type=1400 audit(1790409802.630:14217): avc: denied { create } for pid=3731 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.658565][ T36] audit: type=1400 audit(1790409802.630:14218): avc: denied { bind } for pid=3731 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.679466][ T36] audit: type=1400 audit(1790409802.630:14219): avc: denied { create } for pid=3731 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.862578][ T9] input: HID 17ef:6047 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0008/input/input159 [ 138.880440][ T9] lenovo 0003:17EF:6047.0008: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 138.946525][ T3738] udevd[3738]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 139.062835][ T311] usb 1-1: USB disconnect, device number 29 [ 139.842928][ T9] usb 2-1: USB disconnect, device number 31 [ 139.869402][ T3746] No source specified [ 140.811994][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 140.951956][ T9] usb 2-1: device descriptor read/64, error -71 [ 141.191984][ T9] usb 2-1: device descriptor read/64, error -71 [ 141.431935][ T9] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 141.592056][ T9] usb 2-1: device descriptor read/64, error -71 [ 141.831988][ T9] usb 2-1: device descriptor read/64, error -71 [ 141.942542][ T9] usb usb2-port1: attempt power cycle [ 142.282096][ T9] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 142.291312][ T3768] futex_wake_op: syz.2.1213 tries to shift op by 144; fix this program [ 142.307435][ T9] usb 2-1: device descriptor read/8, error -71 [ 142.444415][ T9] usb 2-1: device descriptor read/8, error -71 [ 142.681959][ T9] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 142.704420][ T9] usb 2-1: device descriptor read/8, error -71 [ 142.834410][ T9] usb 2-1: device descriptor read/8, error -71 [ 142.942440][ T9] usb usb2-port1: unable to enumerate USB device [ 143.292273][ T3774] tipc: Enabling of bearer rejected, failed to enable media [ 143.388163][ T36] kauditd_printk_skb: 234 callbacks suppressed [ 143.388211][ T36] audit: type=1400 audit(1790409807.540:14452): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.414881][ T112] EXT4-fs warning: 26 callbacks suppressed [ 143.414902][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 143.435810][ T36] audit: type=1400 audit(1790409807.560:14453): avc: denied { read write } for pid=298 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.452069][ T112] EXT4-fs error: 29 callbacks suppressed [ 143.452142][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 143.460184][ T36] audit: type=1400 audit(1790409807.560:14454): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.470527][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 143.477391][ T36] audit: type=1400 audit(1790409807.560:14455): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.505248][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 143.555090][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 143.570247][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 143.582508][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 143.597600][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 143.609907][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 143.624994][ T36] audit: type=1400 audit(1790409807.770:14456): avc: denied { read write } for pid=297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.625006][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 143.626200][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 143.676093][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 143.682027][ T36] audit: type=1400 audit(1790409807.770:14457): avc: denied { read write open } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.714126][ T36] audit: type=1400 audit(1790409807.770:14458): avc: denied { ioctl } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.397875][ T36] audit: type=1400 audit(1790409808.550:14459): avc: denied { create } for pid=3778 comm="syz.1.1217" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.440525][ T3780] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1217'. [ 144.449654][ T36] audit: type=1400 audit(1790409808.570:14460): avc: denied { read } for pid=3779 comm="syz.2.1218" dev="nsfs" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.492665][ T36] audit: type=1400 audit(1790409808.570:14461): avc: denied { read open } for pid=3779 comm="syz.2.1218" path="net:[4026532486]" dev="nsfs" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.871982][ T311] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 146.024450][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.035480][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.045339][ T311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 146.055444][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.065498][ T311] usb 1-1: config 0 descriptor?? [ 146.102519][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 146.117600][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 146.129973][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 146.144985][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 146.157296][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 146.172350][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 146.484621][ T311] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2 [ 146.493396][ T311] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 146.521090][ T322] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 146.536158][ T322] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 146.573990][ T3798] udevd[3798]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 146.708627][ T311] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 146.716173][ T311] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 146.740193][ T311] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 146.749980][ T311] usb 1-1: USB disconnect, device number 30 [ 146.983237][ T3804] ±ÿ: renamed from xfrm0 (while UP) [ 147.006562][ T3804] tipc: Disabling bearer [ 147.163643][ T311] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 147.339797][ T311] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 147.349396][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.357463][ T311] usb 3-1: Product: syz [ 147.366168][ T311] usb 3-1: Manufacturer: syz [ 147.370841][ T311] usb 3-1: SerialNumber: syz [ 147.656679][ T311] usb 3-1: MIDIStreaming interface descriptor not found [ 147.682044][ T311] usb 3-1: USB disconnect, device number 25 [ 147.752459][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.394107][ T36] kauditd_printk_skb: 348 callbacks suppressed [ 148.394147][ T36] audit: type=1400 audit(1790409812.550:14810): avc: denied { write } for pid=3812 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.420631][ T36] audit: type=1400 audit(1790409812.550:14811): avc: denied { nlmsg_write } for pid=3812 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.441411][ T36] audit: type=1400 audit(1790409812.560:14812): avc: denied { write } for pid=3812 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.481973][ T36] audit: type=1400 audit(1790409812.560:14813): avc: denied { nlmsg_read } for pid=3812 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.509150][ T36] audit: type=1400 audit(1790409812.620:14814): avc: denied { read write } for pid=298 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.551976][ T36] audit: type=1400 audit(1790409812.620:14815): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.584760][ T36] audit: type=1400 audit(1790409812.620:14816): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.913995][ T36] audit: type=1400 audit(1790409813.070:14817): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 148.934131][ T36] audit: type=1400 audit(1790409813.080:14818): avc: denied { read write } for pid=297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.958262][ T36] audit: type=1400 audit(1790409813.080:14819): avc: denied { read write open } for pid=297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.857488][ T112] EXT4-fs warning: 14 callbacks suppressed [ 149.857509][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 149.859655][ T3820] incfs: Options parsing error. -22 [ 149.872005][ T112] EXT4-fs error: 14 callbacks suppressed [ 149.872058][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 149.888216][ T3820] incfs: mount failed -22 [ 149.906187][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 149.932732][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 149.945483][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 149.964252][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 149.976703][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 149.992014][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 150.004533][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 150.019866][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 150.032938][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 150.034664][ T3820] FAULT_INJECTION: forcing a failure. [ 150.034664][ T3820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.048150][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 150.091948][ T3820] CPU: 1 UID: 0 PID: 3820 Comm: syz.2.1228 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 150.091985][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.092006][ T3820] Call Trace: [ 150.092014][ T3820] [ 150.092024][ T3820] __dump_stack+0x21/0x30 [ 150.092062][ T3820] dump_stack_lvl+0x140/0x1c0 [ 150.092094][ T3820] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.092131][ T3820] dump_stack+0x19/0x20 [ 150.092161][ T3820] should_fail_ex+0x3c2/0x510 [ 150.092190][ T3820] should_fail+0xf/0x20 [ 150.092217][ T3820] should_fail_usercopy+0x1e/0x30 [ 150.092247][ T3820] strncpy_from_user+0x29/0x280 [ 150.092276][ T3820] getname_flags+0x106/0x6b0 [ 150.092305][ T3820] getname+0x1b/0x30 [ 150.092329][ T3820] do_sys_openat2+0xda/0x1d0 [ 150.092362][ T3820] ? fput+0x1a4/0x230 [ 150.092392][ T3820] ? do_sys_open+0x100/0x100 [ 150.092425][ T3820] ? ksys_write+0x1f3/0x260 [ 150.092450][ T3820] ? __cfi_ksys_write+0x10/0x10 [ 150.092477][ T3820] __x64_sys_openat+0x13a/0x170 [ 150.092512][ T3820] x64_sys_call+0xe69/0x2ee0 [ 150.092534][ T3820] do_syscall_64+0x57/0xf0 [ 150.092556][ T3820] ? clear_bhb_loop+0x50/0xa0 [ 150.092586][ T3820] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.092614][ T3820] RIP: 0033:0x7f99ad19e159 [ 150.092634][ T3820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.092653][ T3820] RSP: 002b:00007f99ae01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.092678][ T3820] RAX: ffffffffffffffda RBX: 00007f99ad425fa0 RCX: 00007f99ad19e159 [ 150.092697][ T3820] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 150.092714][ T3820] RBP: 00007f99ae01e090 R08: 0000000000000000 R09: 0000000000000000 [ 150.092728][ T3820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.092743][ T3820] R13: 00007f99ad426038 R14: 00007f99ad425fa0 R15: 00007ffedc131f78 [ 150.092763][ T3820] [ 153.188598][ T3844] incfs: Options parsing error. -22 [ 153.192847][ T3848] incfs: Options parsing error. -22 [ 153.194071][ T3844] incfs: mount failed -22 [ 153.199388][ T3848] incfs: mount failed -22 [ 153.244128][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 153.272936][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 153.286364][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 153.302254][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 153.315765][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 153.330821][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 153.342865][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 153.357861][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 154.991264][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 154.991285][ T36] audit: type=1400 audit(1790409819.140:14916): avc: denied { mounton } for pid=3852 comm="syz.0.1235" path="/319/proc" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.028915][ T3854] FAULT_INJECTION: forcing a failure. [ 155.028915][ T3854] name failslab, interval 1, probability 0, space 0, times 0 [ 155.043228][ T3854] CPU: 0 UID: 0 PID: 3854 Comm: syz.0.1235 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 155.043272][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.043289][ T3854] Call Trace: [ 155.043298][ T3854] [ 155.043307][ T3854] __dump_stack+0x21/0x30 [ 155.043353][ T3854] dump_stack_lvl+0x140/0x1c0 [ 155.043391][ T3854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.043430][ T3854] ? cred_has_capability+0x296/0x3a0 [ 155.043461][ T3854] dump_stack+0x19/0x20 [ 155.043496][ T3854] should_fail_ex+0x3c2/0x510 [ 155.043529][ T3854] should_failslab+0xac/0x100 [ 155.043562][ T3854] kmem_cache_alloc_noprof+0x42/0x410 [ 155.043592][ T3854] ? create_new_namespaces+0x48/0x6f0 [ 155.043631][ T3854] create_new_namespaces+0x48/0x6f0 [ 155.043672][ T3854] ? ns_capable+0x90/0xf0 [ 155.043698][ T3854] unshare_nsproxy_namespaces+0x124/0x180 [ 155.043740][ T3854] ksys_unshare+0x4f9/0x920 [ 155.043777][ T3854] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 155.043828][ T3854] ? __cfi_ksys_unshare+0x10/0x10 [ 155.043869][ T3854] ? __kasan_check_write+0x18/0x20 [ 155.043901][ T3854] __x64_sys_unshare+0x3c/0x50 [ 155.043948][ T3854] x64_sys_call+0x2998/0x2ee0 [ 155.043978][ T3854] do_syscall_64+0x57/0xf0 [ 155.044004][ T3854] ? clear_bhb_loop+0x50/0xa0 [ 155.044039][ T3854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.044074][ T3854] RIP: 0033:0x7fef3f99e159 [ 155.044097][ T3854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.044121][ T3854] RSP: 002b:00007fef408c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 155.044153][ T3854] RAX: ffffffffffffffda RBX: 00007fef3fc25fa0 RCX: 00007fef3f99e159 [ 155.044175][ T3854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 155.044193][ T3854] RBP: 00007fef3fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 155.044212][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.044229][ T3854] R13: 00007fef3fc26038 R14: 00007fef3fc25fa0 R15: 00007ffe20d1eb48 [ 155.044252][ T3854] [ 155.044763][ T36] audit: type=1400 audit(1790409819.170:14917): avc: denied { mount } for pid=3852 comm="syz.0.1235" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 155.305382][ T36] audit: type=1400 audit(1790409819.180:14918): avc: denied { mounton } for pid=3856 comm="syz.2.1237" path="/334/proc" dev="tmpfs" ino=1843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.346389][ T36] audit: type=1400 audit(1790409819.200:14919): avc: denied { mounton } for pid=3853 comm="syz.1.1236" path="/334/dev" dev="tmpfs" ino=1832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.371949][ T36] audit: type=1400 audit(1790409819.200:14920): avc: denied { mount } for pid=3853 comm="syz.1.1236" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 155.395201][ T36] audit: type=1400 audit(1790409819.350:14921): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 155.416251][ T36] audit: type=1400 audit(1790409819.360:14922): avc: denied { read write } for pid=298 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.441293][ T36] audit: type=1400 audit(1790409819.360:14923): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.467163][ T36] audit: type=1400 audit(1790409819.360:14924): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.527123][ T36] audit: type=1400 audit(1790409819.680:14925): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 156.919608][ T3864] tc_dump_action: action bad kind [ 157.770170][ T112] EXT4-fs warning: 2 callbacks suppressed [ 157.770190][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.804251][ T112] EXT4-fs error: 2 callbacks suppressed [ 157.804274][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 157.822687][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.837805][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 157.850465][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.865485][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 157.877813][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.892920][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 157.905411][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.920564][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 157.932926][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 157.948131][ T112] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 SYZFAIL: repeatedly failed to execute the program proc=5 req=1203 state=1 status=11 (errno 9: Bad file descriptor) [ 158.995788][ T1] EXT4-fs error (device sda1): ext4_lookup:1819: inode #2001: comm init: iget: checksum invalid [ 159.016092][ T1] EXT4-fs error (device sda1): ext4_lookup:1819: inode #2001: comm init: iget: checksum invalid [ 159.027518][ T1] EXT4-fs error (device sda1): ext4_lookup:1819: inode #2001: comm init: iget: checksum invalid [ 159.039758][ T1] EXT4-fs error (device sda1): ext4_lookup:1819: inode #2001: comm init: iget: checksum invalid [ 159.166313][ T1736] bridge_slave_1: left allmulticast mode [ 159.172079][ T1736] bridge_slave_1: left promiscuous mode [ 159.177745][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.187324][ T1736] bridge_slave_0: left allmulticast mode [ 159.193144][ T1736] bridge_slave_0: left promiscuous mode [ 159.198798][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.228426][ T1736] bridge0 (unregistering): left allmulticast mode [ 159.364126][ T1736] veth1_macvtap: left promiscuous mode [ 159.369750][ T1736] veth0_vlan: left promiscuous mode [ 159.644388][ T1736] bridge_slave_1: left allmulticast mode [ 159.650094][ T1736] bridge_slave_1: left promiscuous mode [ 159.656800][ T1736] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.664525][ T1736] bridge_slave_0: left allmulticast mode [ 159.670288][ T1736] bridge_slave_0: left promiscuous mode [ 159.676053][ T1736] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.804504][ T1736] tipc: Disabling bearer [ 159.810027][ T1736] tipc: Left network mode [ 159.814651][ T1736] tipc: Left network mode [ 159.820198][ T1736] veth1_macvtap: left promiscuous mode [ 159.825786][ T1736] veth0_vlan: left promiscuous mode [ 159.831379][ T1736] veth1_macvtap: left promiscuous mode [ 160.224451][ T1736] ------------[ cut here ]------------ [ 160.230057][ T1736] WARNING: CPU: 0 PID: 1736 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 160.240232][ T1736] Modules linked in: [ 160.244179][ T1736] CPU: 0 UID: 0 PID: 1736 Comm: kworker/u8:27 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 160.256055][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.266255][ T1736] Workqueue: netns cleanup_net [ 160.271071][ T1736] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 160.277133][ T1736] Code: e8 11 86 d5 fc 4b 83 3c 3e 00 75 19 e8 55 a8 7c fc 49 81 ff f8 07 00 00 74 1b e8 47 a8 7c fc 49 83 c7 08 eb c9 e8 3c a8 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 160.296931][ T1736] RSP: 0018:ffffc900081d7b90 EFLAGS: 00010293 [ 160.303070][ T1736] RAX: ffffffff850ad134 RBX: ffff888103b12380 RCX: ffff888116eb2600 [ 160.311509][ T1736] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888107ab4000 [ 160.319596][ T1736] RBP: ffffc900081d7bb0 R08: ffffffff87d44607 R09: 1ffffffff0fa88c0 [ 160.327702][ T1736] R10: dffffc0000000000 R11: fffffbfff0fa88c1 R12: dffffc0000000000 [ 160.335735][ T1736] R13: dffffc0000000000 R14: ffff888107ab4000 R15: 0000000000000000 [ 160.344038][ T1736] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 160.353038][ T1736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.359818][ T1736] CR2: 00007fef40757e20 CR3: 000000010af18000 CR4: 00000000003526b0 [ 160.367863][ T1736] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 160.375903][ T1736] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 160.383953][ T1736] Call Trace: [ 160.387281][ T1736] [ 160.390220][ T1736] cleanup_net+0x6bd/0xc90 [ 160.394726][ T1736] ? __cfi_cleanup_net+0x10/0x10 [ 160.399689][ T1736] ? kick_pool+0xb9/0x540 [ 160.404115][ T1736] process_scheduled_works+0x7f4/0x1060 [ 160.409691][ T1736] worker_thread+0xc99/0x13f0 [ 160.414434][ T1736] kthread+0x2c4/0x360 [ 160.418530][ T1736] ? __cfi_worker_thread+0x10/0x10 [ 160.423783][ T1736] ? __cfi_kthread+0x10/0x10 [ 160.428409][ T1736] ret_from_fork+0x67/0xa0 [ 160.432890][ T1736] ? __cfi_kthread+0x10/0x10 [ 160.437510][ T1736] ret_from_fork_asm+0x1a/0x30 [ 160.442330][ T1736] [ 160.445410][ T1736] ---[ end trace 0000000000000000 ]--- [ 160.451327][ T1736] ------------[ cut here ]------------ [ 160.456834][ T1736] WARNING: CPU: 1 PID: 1736 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 160.467066][ T1736] Modules linked in: [ 160.470980][ T1736] CPU: 1 UID: 0 PID: 1736 Comm: kworker/u8:27 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 160.484407][ T1736] Tainted: [W]=WARN [ 160.488227][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.498508][ T1736] Workqueue: netns cleanup_net [ 160.503348][ T1736] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 160.509445][ T1736] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 a8 7c fc 49 81 ff f8 07 00 00 74 1b e8 f2 a7 7c fc 49 83 c7 08 eb c5 e8 e7 a7 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 a7 7c fc 5b 41 5c 41 5e 41 [ 160.529130][ T1736] RSP: 0018:ffffc900081d7b90 EFLAGS: 00010293 [ 160.535248][ T1736] RAX: ffffffff850ad189 RBX: ffff888107ab4800 RCX: ffff888116eb2600 [ 160.543264][ T1736] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888107ab4810 [ 160.551347][ T1736] RBP: ffffc900081d7bb0 R08: ffffffff87d44607 R09: 1ffffffff0fa88c0 [ 160.559381][ T1736] R10: dffffc0000000000 R11: fffffbfff0fa88c1 R12: dffffc0000000000 [ 160.567426][ T1736] R13: dffffc0000000000 R14: ffff888107ab4000 R15: 0000000000000010 [ 160.575472][ T1736] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 160.584483][ T1736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.591095][ T1736] CR2: 000055e357eccaf8 CR3: 000000010c76e000 CR4: 00000000003526b0 [ 160.599213][ T1736] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 160.607225][ T1736] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 160.615246][ T1736] Call Trace: [ 160.618544][ T1736] [ 160.621474][ T1736] cleanup_net+0x6bd/0xc90 [ 160.626037][ T1736] ? __cfi_cleanup_net+0x10/0x10 [ 160.631038][ T1736] ? kick_pool+0xb9/0x540 [ 160.635463][ T1736] process_scheduled_works+0x7f4/0x1060 [ 160.641245][ T1736] worker_thread+0xc99/0x13f0 [ 160.646063][ T1736] kthread+0x2c4/0x360 [ 160.650180][ T1736] ? __cfi_worker_thread+0x10/0x10 [ 160.655387][ T1736] ? __cfi_kthread+0x10/0x10 [ 160.660001][ T1736] ret_from_fork+0x67/0xa0 [ 160.664516][ T1736] ? __cfi_kthread+0x10/0x10 [ 160.669246][ T1736] ret_from_fork_asm+0x1a/0x30 [ 160.674222][ T1736] [ 160.677259][ T1736] ---[ end trace 0000000000000000 ]--- [ 160.694284][ T1736] ------------[ cut here ]------------ [ 160.699768][ T1736] WARNING: CPU: 0 PID: 1736 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 160.709676][ T1736] Modules linked in: [ 160.713640][ T1736] CPU: 0 UID: 0 PID: 1736 Comm: kworker/u8:27 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 160.727011][ T1736] Tainted: [W]=WARN [ 160.730822][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.741069][ T1736] Workqueue: netns cleanup_net [ 160.745913][ T1736] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 160.751500][ T1736] Code: 3c 20 00 74 08 48 89 df e8 1f 49 f0 fc 48 8b 3b e8 57 39 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b3 b7 00 cc e8 52 6b 97 fc <0f> 0b e9 b0 fd ff ff e8 46 6b 97 fc 0f 0b e9 18 fe ff ff e8 3a 6b [ 160.771238][ T1736] RSP: 0018:ffffc900081d7b70 EFLAGS: 00010293 [ 160.777369][ T1736] RAX: ffffffff84f00e1e RBX: ffff888103b12380 RCX: ffff888116eb2600 [ 160.785415][ T1736] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888116eb2600 [ 160.793470][ T1736] RBP: ffffc900081d7b98 R08: ffffffff87d44607 R09: 1ffffffff0fa88c0 [ 160.801470][ T1736] R10: dffffc0000000000 R11: fffffbfff0fa88c1 R12: 1ffffffff0fa8614 [ 160.809509][ T1736] R13: dffffc0000000000 R14: ffff888103b12f80 R15: dffffc0000000000 [ 160.817552][ T1736] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 160.826566][ T1736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.833617][ T1736] CR2: 00007fef40757e20 CR3: 000000010c76e000 CR4: 00000000003526b0 [ 160.842587][ T1736] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 160.851299][ T1736] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 160.859512][ T1736] Call Trace: [ 160.862835][ T1736] [ 160.865770][ T1736] xfrm_net_exit+0x31/0x80 [ 160.870196][ T1736] cleanup_net+0x6bd/0xc90 [ 160.874665][ T1736] ? __cfi_cleanup_net+0x10/0x10 [ 160.879638][ T1736] ? kick_pool+0xb9/0x540 [ 160.884050][ T1736] process_scheduled_works+0x7f4/0x1060 [ 160.889619][ T1736] worker_thread+0xc99/0x13f0 [ 160.894455][ T1736] kthread+0x2c4/0x360 [ 160.898555][ T1736] ? __cfi_worker_thread+0x10/0x10 [ 160.903722][ T1736] ? __cfi_kthread+0x10/0x10 [ 160.908335][ T1736] ret_from_fork+0x67/0xa0 [ 160.912813][ T1736] ? __cfi_kthread+0x10/0x10 [ 160.917430][ T1736] ret_from_fork_asm+0x1a/0x30 [ 160.922250][ T1736] [ 160.925286][ T1736] ---[ end trace 0000000000000000 ]--- [ 160.931387][ T1736] ------------[ cut here ]------------ [ 160.936881][ T1736] WARNING: CPU: 1 PID: 1736 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 160.946491][ T1736] Modules linked in: [ 160.950406][ T1736] CPU: 1 UID: 0 PID: 1736 Comm: kworker/u8:27 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 160.963750][ T1736] Tainted: [W]=WARN [ 160.967572][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.977683][ T1736] Workqueue: netns cleanup_net [ 160.982523][ T1736] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 160.988093][ T1736] Code: 3c 20 00 74 08 48 89 df e8 1f 49 f0 fc 48 8b 3b e8 57 39 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b3 b7 00 cc e8 52 6b 97 fc <0f> 0b e9 b0 fd ff ff e8 46 6b 97 fc 0f 0b e9 18 fe ff ff e8 3a 6b [ 161.007787][ T1736] RSP: 0018:ffffc900081d7b70 EFLAGS: 00010293 [ 161.013906][ T1736] RAX: ffffffff84f00e1e RBX: ffff888104364700 RCX: ffff888116eb2600 [ 161.021940][ T1736] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888116eb2600 [ 161.029935][ T1736] RBP: ffffc900081d7b98 R08: ffffffff87d44607 R09: 1ffffffff0fa88c0 [ 161.037979][ T1736] R10: dffffc0000000000 R11: fffffbfff0fa88c1 R12: 1ffffffff0fa8614 [ 161.046018][ T1736] R13: dffffc0000000000 R14: ffff888104365300 R15: dffffc0000000000 [ 161.054052][ T1736] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 161.063058][ T1736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.069656][ T1736] CR2: 000055e357eccaf8 CR3: 000000010c76e000 CR4: 00000000003526b0 [ 161.077766][ T1736] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 161.085786][ T1736] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 161.093829][ T1736] Call Trace: [ 161.097133][ T1736] [ 161.100086][ T1736] xfrm_net_exit+0x31/0x80 [ 161.104616][ T1736] cleanup_net+0x6bd/0xc90 [ 161.109100][ T1736] ? __cfi_cleanup_net+0x10/0x10 [ 161.114098][ T1736] ? kick_pool+0xb9/0x540 [ 161.118460][ T1736] process_scheduled_works+0x7f4/0x1060 [ 161.124079][ T1736] worker_thread+0xc99/0x13f0 [ 161.128831][ T1736] kthread+0x2c4/0x360 [ 161.132953][ T1736] ? __cfi_worker_thread+0x10/0x10 [ 161.138101][ T1736] ? __cfi_kthread+0x10/0x10 [ 161.142794][ T1736] ret_from_fork+0x67/0xa0 [ 161.147334][ T1736] ? __cfi_kthread+0x10/0x10 [ 161.151982][ T1736] ret_from_fork_asm+0x1a/0x30 [ 161.156815][ T1736] [ 161.159920][ T1736] ---[ end trace 0000000000000000 ]--- [ 162.312457][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.336232][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.352118][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 162.367623][ T112] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.