last executing test programs: 16.510927733s ago: executing program 0 (id=1): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0/../file0/file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x2804005, 0x0) 16.335325577s ago: executing program 0 (id=8): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x0, 0xfff7, 0x0, 0x0, 0x0, "e1aa535c8d201159"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 16.101331063s ago: executing program 0 (id=12): keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 16.086266373s ago: executing program 32 (id=12): keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.77312559s ago: executing program 5 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 4.75634933s ago: executing program 5 (id=129): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0)={[{@noblock_validity}, {@nodioread_nolock}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1000}}, {@delalloc}, {@nogrpid}]}, 0x1, 0x5c5, &(0x7f0000004b00)="$eJzs3T1sG9cdAPD/HUVLtuXKQwu0hQejLeAChqkP263bSV6LujDgoUCXVqBowRAlGiLVWIKAyLsRxEOQBF6cLRkyJsiQIciSMWuWfMwBjFhIAMtDwoBfsixRDiWbZCL+fsCJ790d+f+/O77nu8OdGcDAOl37k0b8LiKuJhFj25YNRXPh6cZ6mxtr+ccba/kkqtVr3ySRRMSjjbV8a/2k+Xo8ItYj4rcR8XE24my69ZFHWoXyyur8TLFYWGrWxysLN8fLK6vnbizMzBXmCovn//q3i5cuXJycmtye7uPq9lp2f22988XdV+58+o/7d99599R6/rWZJKZjtLlseztepMY2ycb0jvkXuhGsj5J+J8CBZJr9vNaVfhNjkWn2+naq2weH4Z6kB3RRdTiiumVbERgAyXN0+tYgAvwStY4Daue/ramXxx8PLjdOQGpxNzfW8i9HK/5Q49pEjNTPTY59mzx1ZlI73zzZy0Q5lNZvR8TE0NDu73/S/P4d3MSLSJCu+uhyY0ft3v/p1vgTbcaf0da10+fUGv82m+PfZpv4mT3Gv6sdxvj+P1+9uWf828Px+7bxk634SZv4aUT8r8P49/79waW9llXfijgT7eO3JM++Pjx+/UaxMNH42zbGh2dO/X3v9kccq8fP7IrfuGY7Uk9ke/uPNHNKO2z/+5+894f1Z8T/8x+fvf/bbf+jEfFqJ8FrKz56+597LX5wO3lYOwrY7/5PIhv3O4kfEX+ZPv15s+iqIQAAAAAAAAAAvEBp/V62JM1tldM0l2s8w/vrOJYWS+XK2eul5cXZxj1vJyObtu60GmvUk1p9snk/bqs+taN+PtMMmDlar+fypeJsn9sOAAAAAAAAAAAAAAAAAAAAPxfHdzz//12m/vz/dMTUiX7nBvTA3j/5DRx2+j8Mrqf7f9K3PIDe8+8/DKyq/g+DS/+HwaX/w+DS/2Fwte3/R3ufB9B7u/r/SH/yAHpv38f//8p2JxEAAAAAAAAAAAAAAAAAAAAAAAAAADhcrl65UpuqjzfW8rX67NDK8nzp/+dmC+X53MJyPpcvLd3MzZVKc8VCLl9a+KnPS0qlmxOxuHxrvFIoV8bLK6v/XSgtL7Z+U7TgPw4FAAAAAAAAAAAAAAAAAACA3UbrU5LmIrKNeprmchEnIuJkEsn1G8XCRET8KiI+y2SHa/XJficNAAAAAAAAAAAAAAAAAAAAh0x5ZXV+plgsLHWvMNQM1dm7vqx0NZ+h/awcEetPzYlInm+L1T5x3+/KNjdgfc5I1/fX4S5kOvweDnyhj4MSAAAAAAAAAAAAAAAAAAAMqCcP/Xb6jh+6mxAAAAAAAAAAAAAAAAAAAAAMpPTrJCJq05mxP43uXHok2czUXyPipXvXXr81U6ksTdbmP9yaX3mjOX+qH/kDnWr10zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlg5YGO5gnX63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAgfgwAAP//8czFuw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37ec, 0x683) 4.514053606s ago: executing program 5 (id=140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, 0x0, 0x0) 4.201178644s ago: executing program 5 (id=148): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24044010) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x81, 0x0, 0x10000, 0x6, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.54529289s ago: executing program 4 (id=155): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_FLOW={0x8, 0xb, 0x2}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 3.391301634s ago: executing program 5 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) 2.849313838s ago: executing program 5 (id=163): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 1.99435723s ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='2', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) 1.768536925s ago: executing program 4 (id=168): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9ZR\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000240)=""/173, 0xad, 0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 1.19000979s ago: executing program 2 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @random="875073911fc1", @from_mac=@broadcast, {0x0, 0x75e}, "", @value={0x6, 0x1, 0x1, 0x1, 0x6}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1.18971015s ago: executing program 2 (id=179): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="240000001e005d059be35f031400ff01000009f80700b3586ff606c2cf53797c080008e4", 0x24) 1.17940371s ago: executing program 1 (id=180): memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\n\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\x01\x86\xe2+Ol\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd6\a\x11\xa9\xb6^\xff\xf5\x95\xd2q#\xc2\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x15\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xec#]\xbf\xa2\xa3H\x86\x86S8\x05\xfe\xdc\x11\x04\xa1u\xa3\xe5\x89 X\x02', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.120515442s ago: executing program 2 (id=181): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@acl}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 1.120147242s ago: executing program 2 (id=182): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 1.028399054s ago: executing program 1 (id=183): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@bsdgroups}, {@nodelalloc}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) clock_gettime(0x0, &(0x7f0000002180)) 1.028160954s ago: executing program 2 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x400000007ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ptrace$peek(0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101480) 1.018257114s ago: executing program 1 (id=185): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 885.899968ms ago: executing program 3 (id=186): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 821.356899ms ago: executing program 3 (id=187): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 821.096919ms ago: executing program 3 (id=188): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r0, 0x2, 0x25, &(0x7f00000000c0)="4056bb83289927bb8db861968b2f6f05063447dcf6b19d855645d5e7ae2a7256fdb110313a") 790.60101ms ago: executing program 4 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x1, 0xe8e8, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 667.236883ms ago: executing program 4 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065fffffd0f80000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x800f, 0x0, 0x7, 0x0, 0x0, 0x10, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x200440a, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 569.432526ms ago: executing program 4 (id=191): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0x9, "1a9f653b"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local=@item_012={0x1, 0x2, 0x0, '0'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 198.614765ms ago: executing program 2 (id=192): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @void}, 0x10) 69.364848ms ago: executing program 1 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='foo1 bar1 0 0 0', 0xf) write(r0, &(0x7f0000000100)='foo1 bar1 0 0 0', 0xf) 332.21µs ago: executing program 1 (id=194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsopen(&(0x7f0000000380)='nilfs2\x00', 0x1) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x218, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_ACT={0x120, 0x1, [@m_gact={0x11c, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0xd5, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c995030329bc7513206fbbbaff80269acd40d48bee53c5d29ae26ac4f4be644348ff30d97b9cb02360266994fa3a862b1418bc3eaede1bb9463c1926a947cf619ae9e30d95e4fafecf091aba5ad491096d09ff089a4344e72ae7c5fcb84862d7cba26dd8f3a4c326"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa0, 0x1, [@m_tunnel_key={0x9c, 0x5, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x9, 0x6, "67a638128a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 18.340408][ T24] audit: type=1400 audit(1791392906.220:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.341391][ T271] cgroup: Unknown subsys name 'net' [ 18.345519][ T24] audit: type=1400 audit(1791392906.220:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.350251][ T24] audit: type=1400 audit(1791392906.230:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.350399][ T271] cgroup: Unknown subsys name 'devices' [ 18.415809][ T271] cgroup: Unknown subsys name 'hugetlb' [ 18.421439][ T271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 18.528750][ T24] audit: type=1400 audit(1791392906.410:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.542926][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.551919][ T24] audit: type=1400 audit(1791392906.410:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.585147][ T24] audit: type=1400 audit(1791392906.410:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.585178][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.608275][ T24] audit: type=1400 audit(1791392906.450:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.642321][ T24] audit: type=1400 audit(1791392906.450:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.667908][ T24] audit: type=1400 audit(1791392906.450:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.693378][ T24] audit: type=1400 audit(1791392906.450:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.240534][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.247610][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.254977][ T279] device bridge_slave_0 entered promiscuous mode [ 19.263444][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.270597][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.277989][ T279] device bridge_slave_1 entered promiscuous mode [ 19.316259][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.323302][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.330720][ T281] device bridge_slave_0 entered promiscuous mode [ 19.339870][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.347026][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.354360][ T281] device bridge_slave_1 entered promiscuous mode [ 19.380011][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.387096][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.394582][ T280] device bridge_slave_0 entered promiscuous mode [ 19.402849][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.409952][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.417251][ T280] device bridge_slave_1 entered promiscuous mode [ 19.526533][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.533581][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.541015][ T285] device bridge_slave_0 entered promiscuous mode [ 19.550566][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.557621][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.564993][ T285] device bridge_slave_1 entered promiscuous mode [ 19.590581][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.597636][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.604915][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.611922][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.635170][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.642210][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.649603][ T283] device bridge_slave_0 entered promiscuous mode [ 19.659158][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.666232][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.673601][ T283] device bridge_slave_1 entered promiscuous mode [ 19.716420][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.723478][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.730738][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.737763][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.766707][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.773749][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.781022][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.788055][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.820798][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.828497][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.836016][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.843130][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.850506][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.857648][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.865507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.872863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.892832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.902595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.910832][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.917875][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.938495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.946244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.954938][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.961944][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.981206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.989331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.997643][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.004694][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.012375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.020967][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.028023][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.035447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.043532][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.050560][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.057880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.066004][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.073003][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.080343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.088501][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.095521][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.102864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.124910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.132799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.140902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.149385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.157545][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.164573][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.171918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.182765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.201063][ T279] device veth0_vlan entered promiscuous mode [ 20.212525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.220759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.229329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.237739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.245778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.253643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.261060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.268550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.276914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.285188][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.292211][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.299766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.308006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.316176][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.323203][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.330784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.338795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.346780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.354356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.361751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.373991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.382078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.400107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.408631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.417503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.425762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.433597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.441945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.450316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.458165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.466067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.473995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.485048][ T279] device veth1_macvtap entered promiscuous mode [ 20.498321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.505860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.513200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.521444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.529865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.537673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.546066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.554366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.562486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.573937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.581923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.590657][ T281] device veth0_vlan entered promiscuous mode [ 20.599522][ T280] device veth0_vlan entered promiscuous mode [ 20.606242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.613700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.631692][ T283] device veth0_vlan entered promiscuous mode [ 20.639568][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 20.642854][ T281] device veth1_macvtap entered promiscuous mode [ 20.655251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.663633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.672210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.680244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.688401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.696896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.705129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.712659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.720236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.736079][ T280] device veth1_macvtap entered promiscuous mode [ 20.742925][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.753719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.762175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.771924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.780819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.789099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.797444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.805219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.813472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.821836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.830708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.839911][ T283] device veth1_macvtap entered promiscuous mode [ 20.875571][ T285] device veth0_vlan entered promiscuous mode [ 20.884857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.893871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.902843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.911302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.919997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.928267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.938730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.946837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.975401][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.991159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.053339][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.065156][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.078329][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.087169][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.100229][ T285] device veth1_macvtap entered promiscuous mode [ 21.171899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.191370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.220605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.248519][ T281] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 21.257667][ T281] FAT-fs (loop0): Filesystem has been set read-only [ 21.264869][ T281] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 21.278065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.291647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.333595][ T325] FAT-fs (loop2): Directory bread(block 1048) failed [ 21.346426][ T325] FAT-fs (loop2): Directory bread(block 1049) failed [ 21.353304][ T325] FAT-fs (loop2): Directory bread(block 1050) failed [ 21.364673][ T325] FAT-fs (loop2): Directory bread(block 1051) failed [ 21.371665][ T325] FAT-fs (loop2): Directory bread(block 1052) failed [ 21.378990][ T325] FAT-fs (loop2): Directory bread(block 1053) failed [ 21.389311][ T325] FAT-fs (loop2): Directory bread(block 1054) failed [ 21.404320][ T325] FAT-fs (loop2): Directory bread(block 1055) failed [ 21.457348][ T325] attempt to access beyond end of device [ 21.457348][ T325] loop2: rw=2051, want=1104, limit=128 [ 21.752375][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 21.801284][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.814082][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.821493][ T341] device bridge_slave_0 entered promiscuous mode [ 21.852647][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.862828][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.875373][ T341] device bridge_slave_1 entered promiscuous mode [ 21.958227][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.965320][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.972593][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.979641][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.034271][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.042154][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.050213][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 22.056404][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.092890][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.102415][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.109478][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.119701][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.150013][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.157300][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.184512][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 22.231923][ T310] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 22.280015][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 22.291078][ T310] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 22.306270][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.327182][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.336156][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.345384][ T9] device bridge_slave_1 left promiscuous mode [ 22.351528][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.359526][ T9] device bridge_slave_0 left promiscuous mode [ 22.366257][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.367155][ T359] exfat: Deprecated parameter 'utf8' [ 22.379318][ T9] device veth1_macvtap left promiscuous mode [ 22.385388][ T9] device veth0_vlan left promiscuous mode [ 22.398955][ T359] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 22.471389][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.479809][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.492533][ T341] device veth0_vlan entered promiscuous mode [ 22.494166][ T310] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 22.499000][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.520159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.521543][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.535189][ T341] device veth1_macvtap entered promiscuous mode [ 22.541009][ T310] usb 5-1: Product: syz [ 22.547496][ T366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23'. [ 22.547943][ T310] usb 5-1: Manufacturer: syz [ 22.556937][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.561197][ T310] usb 5-1: SerialNumber: syz [ 22.568614][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.574272][ T310] usb 5-1: config 0 descriptor?? [ 22.585891][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.593432][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.602133][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.610434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.618165][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.629697][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.638161][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.646522][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.677408][ T368] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000d4d,grpquota,,errors=continue [ 22.690806][ T368] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.775596][ T380] process 'syz.5.25' launched './file0' with NULL argv: empty string added [ 22.824111][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 22.861022][ T25] usb 5-1: USB disconnect, device number 2 [ 22.864913][ T386] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.020937][ T9] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 23.144123][ T311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 23.153041][ T311] usb 2-1: config 0 interface 0 has no altsetting 1 [ 23.234250][ T311] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 23.243343][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 23.251531][ T311] usb 2-1: SerialNumber: syz [ 23.256957][ T311] usb 2-1: config 0 descriptor?? [ 23.294780][ T311] usb-storage 2-1:0.0: USB Mass Storage device detected [ 23.302752][ T311] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 23.404107][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 23.502287][ T287] usb 2-1: USB disconnect, device number 2 [ 23.777295][ T24] kauditd_printk_skb: 84 callbacks suppressed [ 23.777305][ T24] audit: type=1400 audit(1791392911.660:158): avc: denied { wake_alarm } for pid=403 comm="syz.3.33" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 23.839894][ T24] audit: type=1400 audit(1791392911.720:159): avc: denied { mount } for pid=410 comm="syz.3.36" name="/" dev="ramfs" ino=16435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 23.846713][ T406] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.889290][ T24] audit: type=1400 audit(1791392911.770:160): avc: denied { create } for pid=405 comm="syz.2.34" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.909172][ T24] audit: type=1400 audit(1791392911.770:161): avc: denied { write open } for pid=405 comm="syz.2.34" path="/8/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.931926][ T24] audit: type=1400 audit(1791392911.770:162): avc: denied { read } for pid=405 comm="syz.2.34" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.953373][ T415] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 23.953489][ T24] audit: type=1400 audit(1791392911.770:163): avc: denied { map } for pid=405 comm="syz.2.34" path="/8/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.963744][ T415] EXT4-fs (loop3): 1 truncate cleaned up [ 23.983639][ T24] audit: type=1400 audit(1791392911.770:164): avc: denied { execute } for pid=405 comm="syz.2.34" path="/8/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.995560][ T415] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue [ 24.041763][ T24] audit: type=1400 audit(1791392911.920:165): avc: denied { remove_name } for pid=414 comm="syz.3.37" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.048359][ T415] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.37: invalid indirect mapped block 4294967295 (level 1) [ 24.064086][ T24] audit: type=1400 audit(1791392911.920:166): avc: denied { rename } for pid=414 comm="syz.3.37" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.064104][ T24] audit: type=1400 audit(1791392911.920:167): avc: denied { unlink } for pid=414 comm="syz.3.37" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.077955][ T54] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.100885][ T415] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.37: invalid indirect mapped block 65535 (level 2) [ 24.161991][ T422] FAULT_INJECTION: forcing a failure. [ 24.161991][ T422] name failslab, interval 1, probability 0, space 0, times 1 [ 24.177445][ T422] CPU: 1 PID: 422 Comm: syz.1.39 Not tainted syzkaller #0 [ 24.179807][ T54] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.184567][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 24.184583][ T422] Call Trace: [ 24.184606][ T422] __dump_stack+0x21/0x24 [ 24.184617][ T422] dump_stack_lvl+0x1a7/0x208 [ 24.184629][ T422] ? thaw_kernel_threads+0x220/0x220 [ 24.184639][ T422] ? show_regs_print_info+0x18/0x18 [ 24.184653][ T422] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 24.184670][ T422] dump_stack+0x15/0x1c [ 24.197920][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 24.207468][ T422] should_fail+0x3ab/0x500 [ 24.207481][ T422] ? getname_flags+0xba/0x510 [ 24.207500][ T422] __should_failslab+0xa4/0xe0 [ 24.210909][ T54] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 24.215079][ T422] should_failslab+0x9/0x20 [ 24.215090][ T422] kmem_cache_alloc+0x3d/0x2d0 [ 24.215106][ T422] getname_flags+0xba/0x510 [ 24.219828][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.225019][ T422] getname+0x19/0x20 [ 24.225029][ T422] do_sys_openat2+0xde/0x750 [ 24.225039][ T422] ? do_sys_open+0xe0/0xe0 [ 24.225048][ T422] ? __kasan_check_write+0x14/0x20 [ 24.225059][ T422] ? switch_fpu_return+0x19c/0x330 [ 24.225068][ T422] ? fpu__clear_all+0x20/0x20 [ 24.225077][ T422] __x64_sys_openat+0x136/0x160 [ 24.225088][ T422] do_syscall_64+0x31/0x40 [ 24.225098][ T422] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.225106][ T422] RIP: 0033:0x7f5837032199 [ 24.225117][ T422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.225123][ T422] RSP: 002b:00007f5835a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 24.225136][ T422] RAX: ffffffffffffffda RBX: 00007f58372b9fa0 RCX: 00007f5837032199 [ 24.225143][ T422] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 24.225150][ T422] RBP: 00007f58370c98e0 R08: 0000000000000000 R09: 0000000000000000 [ 24.225155][ T422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.225162][ T422] R13: 00007f58372ba038 R14: 00007f58372b9fa0 R15: 00007fff517dce68 [ 24.441830][ T426] input: syz0 as /devices/virtual/input/input4 [ 24.472307][ T54] usb 6-1: config 0 descriptor?? [ 25.214131][ T54] usbhid 6-1:0.0: can't add hid device: -71 [ 25.220319][ T54] usbhid: probe of 6-1:0.0 failed with error -71 [ 25.229234][ T54] usb 6-1: USB disconnect, device number 2 [ 25.262598][ T461] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.524096][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.655484][ T475] F2FS-fs (loop2): invalid crc value [ 25.662997][ T475] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.695088][ T475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.713089][ T283] attempt to access beyond end of device [ 25.713089][ T283] loop2: rw=2049, want=45104, limit=40427 [ 25.884509][ T310] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 25.896643][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.971729][ T310] usb-storage 4-1:1.0: USB Mass Storage device detected [ 26.227047][ T497] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 26.278013][ T497] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 26.306819][ T497] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 26.338211][ T504] FAULT_INJECTION: forcing a failure. [ 26.338211][ T504] name fail_futex, interval 1, probability 0, space 0, times 1 [ 26.354628][ T504] CPU: 0 PID: 504 Comm: syz.1.67 Not tainted syzkaller #0 [ 26.361752][ T504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.371807][ T504] Call Trace: [ 26.375098][ T504] __dump_stack+0x21/0x24 [ 26.379431][ T504] dump_stack_lvl+0x1a7/0x208 [ 26.384112][ T504] ? thaw_kernel_threads+0x220/0x220 [ 26.389394][ T504] ? show_regs_print_info+0x18/0x18 [ 26.394590][ T504] ? stack_trace_save+0xa6/0xf0 [ 26.399439][ T504] ? stack_trace_snprint+0xe0/0xe0 [ 26.399623][ T310] scsi host1: usb-storage 4-1:1.0 [ 26.404557][ T504] dump_stack+0x15/0x1c [ 26.404567][ T504] should_fail+0x3ab/0x500 [ 26.404579][ T504] get_futex_key+0x13f/0xc30 [ 26.404596][ T504] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.428815][ T504] ? futex_wait_restart+0x240/0x240 [ 26.434061][ T504] futex_wake+0x11c/0x570 [ 26.438394][ T504] ? futex_wait+0x6f0/0x6f0 [ 26.442901][ T504] ? debug_smp_processor_id+0x17/0x20 [ 26.448272][ T504] do_futex+0xfad/0x1270 [ 26.452511][ T504] ? kmem_cache_free+0x100/0x2d0 [ 26.457445][ T504] ? slab_free_freelist_hook+0xc5/0x190 [ 26.463003][ T504] ? putname+0xfe/0x150 [ 26.467158][ T504] ? kmem_cache_free+0x100/0x2d0 [ 26.472095][ T504] ? futex_exit_release+0x1e0/0x1e0 [ 26.477291][ T504] ? putname+0xfe/0x150 [ 26.481448][ T504] ? do_sys_openat2+0x68e/0x750 [ 26.486301][ T504] __se_sys_futex+0x2ba/0x370 [ 26.490977][ T504] ? __kasan_check_write+0x14/0x20 [ 26.496095][ T504] ? __x64_sys_futex+0x100/0x100 [ 26.501042][ T504] ? fpu__clear_all+0x20/0x20 [ 26.505737][ T504] __x64_sys_futex+0xe5/0x100 [ 26.510413][ T504] do_syscall_64+0x31/0x40 [ 26.514831][ T504] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.520739][ T504] RIP: 0033:0x7f5837032199 [ 26.525164][ T504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.544777][ T504] RSP: 002b:00007f5835a8b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.553205][ T504] RAX: ffffffffffffffda RBX: 00007f58372b9fa8 RCX: 00007f5837032199 [ 26.561178][ T504] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58372b9fac [ 26.569151][ T504] RBP: 00007f58372b9fa0 R08: 0012153d90efaa60 R09: 0000000000000000 [ 26.577108][ T504] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 26.585064][ T504] R13: 00007f58372ba038 R14: 00007fff517dcd80 R15: 00007fff517dce68 [ 26.597441][ T54] usb 4-1: USB disconnect, device number 2 [ 26.638888][ T508] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000004,quota,sysvgroups, [ 26.663887][ T508] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.68: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 26.684292][ T508] EXT4-fs (loop2): Remounting filesystem read-only [ 27.194120][ T25] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 27.284185][ T287] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.299131][ T528] ====================================================== [ 27.299131][ T528] WARNING: the mand mount option is being deprecated and [ 27.299131][ T528] will be removed in v5.15! [ 27.299131][ T528] ====================================================== [ 27.527151][ T534] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 27.555143][ T287] usb 5-1: Using ep0 maxpacket: 8 [ 27.620929][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 27.684156][ T287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.694906][ T287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.704450][ T25] usb 6-1: config 7 has an invalid interface number: 3 but max is 0 [ 27.712694][ T287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.723891][ T25] usb 6-1: config 7 has no interface number 0 [ 27.730224][ T287] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 27.739576][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.785337][ T287] hub 5-1:1.0: bad descriptor, ignoring hub [ 27.791319][ T287] hub: probe of 5-1:1.0 failed with error -5 [ 27.798905][ T287] cdc_wdm 5-1:1.0: skipping garbage [ 27.804886][ T287] cdc_wdm 5-1:1.0: skipping garbage [ 27.817369][ T287] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 28.005845][ T25] usb 6-1: string descriptor 0 read error: -22 [ 28.015951][ T25] usb 6-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=f5.6a [ 28.041082][ T25] usb 6-1: New USB device strings: Mfr=1, Product=175, SerialNumber=3 [ 28.296456][ T25] usb 6-1: USB disconnect, device number 3 [ 28.521342][ T567] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 28.531697][ T567] flags: 0x4000000000000000() [ 28.536469][ T567] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 28.545125][ T567] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 28.553734][ T567] page dumped because: unmovable page [ 28.559158][ T567] page_owner tracks the page as allocated [ 28.564920][ T567] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, ts 986003816, free_ts 0 [ 28.576213][ T567] register_early_stack+0x95/0xf0 [ 28.581274][ T567] init_page_owner+0x32/0x800 [ 28.586013][ T567] page_ext_init+0x3c1/0x407 [ 28.590656][ T567] kernel_init_freeable+0x287/0x3c3 [ 28.596250][ T567] page_owner free stack trace missing [ 28.605299][ T311] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 28.629529][ T568] Offlined Pages 32768 [ 28.669526][ T567] Offlined Pages 32768 [ 28.728424][ T568] Offlined Pages 32768 [ 28.768914][ T567] Offlined Pages 32768 [ 28.862081][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 28.862092][ T24] audit: type=1400 audit(1791392916.740:238): avc: denied { write } for pid=577 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.898316][ T580] FAULT_INJECTION: forcing a failure. [ 28.898316][ T580] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 28.912129][ T580] CPU: 0 PID: 580 Comm: syz.3.93 Not tainted syzkaller #0 [ 28.919250][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.929303][ T580] Call Trace: [ 28.932598][ T580] __dump_stack+0x21/0x24 [ 28.936927][ T580] dump_stack_lvl+0x1a7/0x208 [ 28.941603][ T580] ? show_regs_print_info+0x18/0x18 [ 28.946797][ T580] dump_stack+0x15/0x1c [ 28.950947][ T580] should_fail+0x3ab/0x500 [ 28.955359][ T580] should_fail_usercopy+0x1a/0x20 [ 28.960379][ T580] _copy_from_user+0x20/0xd0 [ 28.964972][ T580] __se_sys_mount+0x176/0x390 [ 28.969645][ T580] ? __x64_sys_mount+0xd0/0xd0 [ 28.974406][ T580] __x64_sys_mount+0xbf/0xd0 [ 28.978990][ T580] do_syscall_64+0x31/0x40 [ 28.983405][ T580] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.989290][ T580] RIP: 0033:0x7f9b2c75c199 [ 28.993699][ T580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.013300][ T580] RSP: 002b:00007f9b2b1b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.021718][ T580] RAX: ffffffffffffffda RBX: 00007f9b2c9e3fa0 RCX: 00007f9b2c75c199 [ 29.029690][ T580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.037659][ T580] RBP: 00007f9b2c7f38e0 R08: 00002000000044c0 R09: 0000000000000000 [ 29.045625][ T580] R10: 0000000002080000 R11: 0000000000000246 R12: 0000000000000000 [ 29.053593][ T580] R13: 00007f9b2c9e4038 R14: 00007f9b2c9e3fa0 R15: 00007fff12637518 [ 29.067969][ T571] erofs: (device loop2): mounted with root inode @ nid 36. [ 29.223052][ T586] WARNING! power/level is deprecated; use power/control instead [ 29.248926][ T24] audit: type=1400 audit(1791392917.130:239): avc: denied { read } for pid=587 comm="syz.3.97" name="failed_transaction_log" dev="binder" ino=1048590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.295781][ T590] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 29.405069][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 29.421167][ T24] audit: type=1400 audit(1791392917.160:240): avc: denied { open } for pid=587 comm="syz.3.97" path="/dev/binderfs/binder_logs/failed_transaction_log" dev="binder" ino=1048590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.539770][ T311] usb 5-1: device firmware changed [ 29.545792][ T311] usb 5-1: USB disconnect, device number 3 [ 29.573514][ T24] audit: type=1400 audit(1791392917.200:241): avc: denied { create } for pid=592 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 29.665676][ T600] FAT-fs (loop3): Directory bread(block 64) failed [ 29.683285][ T600] FAT-fs (loop3): Directory bread(block 65) failed [ 29.708774][ T600] FAT-fs (loop3): Directory bread(block 66) failed [ 29.724193][ T600] FAT-fs (loop3): Directory bread(block 67) failed [ 29.728528][ T604] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 29.743184][ T600] FAT-fs (loop3): Directory bread(block 68) failed [ 29.754150][ T600] FAT-fs (loop3): Directory bread(block 69) failed [ 29.823667][ T600] FAT-fs (loop3): Directory bread(block 70) failed [ 29.831474][ T600] FAT-fs (loop3): Directory bread(block 71) failed [ 29.831577][ T604] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 29.847621][ T604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 29.854533][ T604] EXT4-fs error (device loop2): ext4_free_blocks:5690: comm syz.2.102: Freeing blocks not in datazone - block = 0, count = 4096 [ 29.854594][ T600] FAT-fs (loop3): Directory bread(block 72) failed [ 29.981625][ T24] audit: type=1400 audit(1791392917.810:242): avc: denied { connect } for pid=606 comm="syz.4.103" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.994198][ T604] EXT4-fs (loop2): Remounting filesystem read-only [ 30.014507][ T604] EXT4-fs (loop2): 1 orphan inode deleted [ 30.020346][ T604] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,barrier=0x0000000000000009,quota,jqfmt=vfsv0, [ 30.020355][ T600] FAT-fs (loop3): Directory bread(block 73) failed [ 30.041462][ T24] audit: type=1400 audit(1791392917.810:243): avc: denied { write } for pid=606 comm="syz.4.103" laddr=fe80::e433:e1ff:fe83:b8bd lport=7 faddr=fe88::5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.094813][ T604] EXT4-fs error (device loop2): ext4_lookup:1830: inode #15: comm syz.2.102: iget: bad i_size value: 1970324836974602 [ 30.624289][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.663163][ T24] audit: type=1400 audit(1791392918.540:244): avc: denied { connect } for pid=621 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.738848][ T24] audit: type=1400 audit(1791392918.620:245): avc: denied { ioctl } for pid=624 comm="syz.2.106" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 30.898012][ T24] audit: type=1400 audit(1791392918.780:246): avc: denied { create } for pid=638 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.918372][ T639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 30.927473][ T24] audit: type=1400 audit(1791392918.800:247): avc: denied { ioctl } for pid=638 comm="syz.2.113" path="socket:[16292]" dev="sockfs" ino=16292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.936352][ T640] tipc: Started in network mode [ 30.956933][ T640] tipc: Own node identity e2ff07d3bbcc, cluster identity 4711 [ 30.964597][ T640] tipc: Enabled bearer , priority 0 [ 30.977608][ T640] device syzkaller0 entered promiscuous mode [ 30.985739][ T640] tipc: Resetting bearer [ 30.992004][ T634] tipc: Resetting bearer [ 30.998511][ T634] tipc: Disabling bearer [ 31.014208][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.025304][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.114151][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 31.123256][ T20] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 31.131278][ T20] usb 2-1: Manufacturer: syz [ 31.136598][ T20] usb 2-1: config 0 descriptor?? [ 31.253780][ T654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.117'. [ 31.262762][ T654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.117'. [ 31.386406][ T656] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 31.393080][ T656] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 31.402170][ T656] F2FS-fs (loop5): invalid crc value [ 31.408469][ T656] F2FS-fs (loop5): Found nat_bits in checkpoint [ 31.429494][ T656] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 31.436561][ T656] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 31.448862][ T656] F2FS-fs (loop5): switch extent_cache option is not allowed [ 32.062150][ T20] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input6 [ 32.446297][ T20] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input7 [ 32.513498][ T20] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 32.673809][ T20] usb 2-1: USB disconnect, device number 3 [ 32.708895][ T676] fido_id[676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 32.829076][ T683] EXT4-fs (loop5): Ignoring removed oldalloc option [ 32.885236][ T683] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,oldalloc,journal_dev=0x0000000000001000,delalloc,nogrpid,,errors=continue [ 32.914824][ T683] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.935657][ T683] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.129: bg 0: block 3: invalid block bitmap [ 32.948157][ T683] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 32.974315][ T683] EXT4-fs (loop5): This should not happen!! Data will be lost [ 32.974315][ T683] [ 32.990144][ T683] EXT4-fs (loop5): Total free blocks count 0 [ 32.996504][ T683] EXT4-fs (loop5): Free/Dirty block details [ 33.002531][ T683] EXT4-fs (loop5): free_blocks=0 [ 33.007541][ T683] EXT4-fs (loop5): dirty_blocks=64 [ 33.012647][ T683] EXT4-fs (loop5): Block reservation details [ 33.020491][ T683] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 33.097593][ T696] erofs: (device loop3): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 33.115280][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 33.332296][ T735] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.766909][ T773] erofs: (device loop3): mounted with root inode @ nid 36. [ 34.779932][ T773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 34.788716][ T773] overlayfs: missing 'lowerdir' [ 34.978425][ T776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 35.061238][ T784] FAULT_INJECTION: forcing a failure. [ 35.061238][ T784] name failslab, interval 1, probability 0, space 0, times 0 [ 35.074210][ T784] CPU: 1 PID: 784 Comm: syz.5.163 Not tainted syzkaller #0 [ 35.081406][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.091461][ T784] Call Trace: [ 35.094780][ T784] __dump_stack+0x21/0x24 [ 35.099111][ T784] dump_stack_lvl+0x1a7/0x208 [ 35.103789][ T784] ? show_regs_print_info+0x18/0x18 [ 35.108993][ T784] dump_stack+0x15/0x1c [ 35.113149][ T784] should_fail+0x3ab/0x500 [ 35.117663][ T784] ? security_inode_alloc+0x33/0x110 [ 35.122952][ T784] __should_failslab+0xa4/0xe0 [ 35.127722][ T784] should_failslab+0x9/0x20 [ 35.132228][ T784] kmem_cache_alloc+0x3d/0x2d0 [ 35.136999][ T784] security_inode_alloc+0x33/0x110 [ 35.142113][ T784] inode_init_always+0x725/0x9c0 [ 35.147057][ T784] ? dax_init_fs_context+0x60/0x60 [ 35.152301][ T784] ? write_cache_store+0x1a0/0x1a0 [ 35.157416][ T784] iget5_locked+0xe0/0x270 [ 35.161834][ T784] ? dax_test+0x90/0x90 [ 35.165994][ T784] alloc_dax+0x14e/0x560 [ 35.170382][ T784] ? run_dax+0x30/0x30 [ 35.174505][ T784] ? device_initialize+0x1d6/0x410 [ 35.179624][ T784] ? __kasan_check_write+0x14/0x20 [ 35.184741][ T784] dm_create+0x8b5/0xdd0 [ 35.189026][ T784] dev_create+0x12e/0x2c0 [ 35.193361][ T784] ? list_devices+0x570/0x570 [ 35.198043][ T784] ? __kasan_check_write+0x14/0x20 [ 35.203162][ T784] ? _copy_from_user+0x95/0xd0 [ 35.207930][ T784] dm_ctl_ioctl+0x8ee/0xca0 [ 35.212436][ T784] ? list_devices+0x570/0x570 [ 35.217127][ T784] ? dm_poll+0x120/0x120 [ 35.221384][ T784] ? security_file_ioctl+0x84/0xa0 [ 35.226502][ T784] ? dm_poll+0x120/0x120 [ 35.230750][ T784] __se_sys_ioctl+0x121/0x1a0 [ 35.235437][ T784] __x64_sys_ioctl+0x7b/0x90 [ 35.240031][ T784] do_syscall_64+0x31/0x40 [ 35.244448][ T784] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.250339][ T784] RIP: 0033:0x7feda8ad0199 [ 35.254759][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.274367][ T784] RSP: 002b:00007feda7529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.282786][ T784] RAX: ffffffffffffffda RBX: 00007feda8d57fa0 RCX: 00007feda8ad0199 [ 35.290764][ T784] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 35.298743][ T784] RBP: 00007feda8b678e0 R08: 0000000000000000 R09: 0000000000000000 [ 35.306710][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.314676][ T784] R13: 00007feda8d58038 R14: 00007feda8d57fa0 R15: 00007ffd07f06f58 [ 35.334317][ T784] ------------[ cut here ]------------ [ 35.339802][ T784] kernfs: can not remove 'events', no directory [ 35.346446][ T784] WARNING: CPU: 1 PID: 784 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 35.356253][ T784] Modules linked in: [ 35.360260][ T784] CPU: 1 PID: 784 Comm: syz.5.163 Not tainted syzkaller #0 [ 35.367735][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.377923][ T784] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 35.384284][ T784] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 bc 1d 9d ff 48 c7 c7 40 39 2b 85 4c 89 f6 e8 fd 12 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 9e 1d 9d ff 41 be fe ff ff ff 48 [ 35.430562][ T784] RSP: 0018:ffffc90001847a10 EFLAGS: 00010246 [ 35.438092][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 35.438102][ T24] audit: type=1400 audit(1791392923.320:263): avc: denied { create } for pid=775 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.467197][ T784] RAX: 2d5cc50576380900 RBX: 0000000000000001 RCX: 0000000000080000 [ 35.492806][ T784] RDX: ffffc90008309000 RSI: 0000000000034ffc RDI: 0000000000034ffd [ 35.512020][ T784] RBP: ffffc90001847a38 R08: ffffc900018473a7 R09: fffff52000308ea8 [ 35.520080][ T784] R10: dffffc0000000000 R11: fffff52000308e75 R12: 0000000000000000 [ 35.524904][ T24] audit: type=1400 audit(1791392923.390:264): avc: denied { write } for pid=786 comm="syz.3.165" name="usb_gadget" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.528080][ T784] R13: ffffffff8674efc0 R14: ffffffff853fc320 R15: 0000000000000000 [ 35.558933][ T784] FS: 00007feda75296c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.569077][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.578135][ T784] CR2: 00007f9b2c9e5dac CR3: 000000011d3d9000 CR4: 00000000003506a0 [ 35.585726][ T24] audit: type=1400 audit(1791392923.390:265): avc: denied { add_name } for pid=786 comm="syz.3.165" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.586206][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.626460][ T24] audit: type=1400 audit(1791392923.390:266): avc: denied { create } for pid=786 comm="syz.3.165" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 35.646237][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.656527][ T784] Call Trace: [ 35.663945][ T784] sysfs_remove_files+0xa4/0x100 [ 35.665170][ T24] audit: type=1400 audit(1791392923.410:267): avc: denied { read write } for pid=786 comm="syz.3.165" name="report_length" dev="configfs" ino=16889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 35.681725][ T784] del_gendisk+0x254/0xa10 [ 35.692546][ T24] audit: type=1400 audit(1791392923.410:268): avc: denied { open } for pid=786 comm="syz.3.165" path="/45/config/usb_gadget/g1/functions/hid.usb0/report_length" dev="configfs" ino=16889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 35.723922][ T784] cleanup_mapped_device+0x16c/0x270 [ 35.730004][ T784] dm_create+0xb03/0xdd0 [ 35.734715][ T784] dev_create+0x12e/0x2c0 [ 35.739133][ T784] ? list_devices+0x570/0x570 [ 35.743865][ T784] ? __kasan_check_write+0x14/0x20 [ 35.787836][ T784] ? _copy_from_user+0x95/0xd0 [ 35.792823][ T784] dm_ctl_ioctl+0x8ee/0xca0 [ 35.798577][ T784] ? list_devices+0x570/0x570 [ 35.803545][ T784] ? dm_poll+0x120/0x120 [ 35.808175][ T784] ? security_file_ioctl+0x84/0xa0 [ 35.813384][ T784] ? dm_poll+0x120/0x120 [ 35.819676][ T784] __se_sys_ioctl+0x121/0x1a0 [ 35.825446][ T784] __x64_sys_ioctl+0x7b/0x90 [ 35.830110][ T784] do_syscall_64+0x31/0x40 [ 35.831017][ T24] audit: type=1400 audit(1791392923.710:269): avc: denied { create } for pid=796 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.834599][ T784] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.853864][ T24] audit: type=1400 audit(1791392923.710:270): avc: denied { connect } for pid=796 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.879620][ T784] RIP: 0033:0x7feda8ad0199 [ 35.885486][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.905557][ T24] audit: type=1400 audit(1791392923.710:271): avc: denied { write } for pid=796 comm="syz.3.170" laddr=::1 lport=1 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.928439][ T784] RSP: 002b:00007feda7529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.929656][ T24] audit: type=1400 audit(1791392923.710:272): avc: denied { read } for pid=796 comm="syz.3.170" laddr=::1 lport=1 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.937722][ T784] RAX: ffffffffffffffda RBX: 00007feda8d57fa0 RCX: 00007feda8ad0199 [ 35.968939][ T784] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 35.977179][ T784] RBP: 00007feda8b678e0 R08: 0000000000000000 R09: 0000000000000000 [ 35.985352][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.993448][ T784] R13: 00007feda8d58038 R14: 00007feda8d57fa0 R15: 00007ffd07f06f58 [ 36.001820][ T784] ---[ end trace 2ecca803b5d76a89 ]--- [ 36.007606][ T784] ------------[ cut here ]------------ [ 36.013116][ T784] kernfs: can not remove 'events_async', no directory [ 36.024331][ T784] WARNING: CPU: 1 PID: 784 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 36.034206][ T784] Modules linked in: [ 36.038153][ T784] CPU: 1 PID: 784 Comm: syz.5.163 Tainted: G W syzkaller #0 [ 36.046873][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.057080][ T784] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 36.063405][ T784] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 bc 1d 9d ff 48 c7 c7 40 39 2b 85 4c 89 f6 e8 fd 12 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 9e 1d 9d ff 41 be fe ff ff ff 48 [ 36.083081][ T784] RSP: 0018:ffffc90001847a10 EFLAGS: 00010246 [ 36.089472][ T784] RAX: 2d5cc50576380900 RBX: 0000000000000002 RCX: 0000000000080000 [ 36.331657][ T784] RDX: ffffc90008309000 RSI: 000000000007ffff RDI: 0000000000080000 [ 36.339755][ T784] RBP: ffffc90001847a38 R08: ffffc900018473a7 R09: fffff52000308ea8 [ 36.349535][ T784] R10: dffffc0000000000 R11: fffff52000308e75 R12: 0000000000000000 [ 36.362328][ T784] R13: ffffffff8674efc0 R14: ffffffff853fc400 R15: 0000000000000000 [ 36.372194][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 36.374117][ T784] FS: 00007feda75296c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 36.391753][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.398849][ T784] CR2: 00007f58372bbdac CR3: 000000011d3d9000 CR4: 00000000003506b0 [ 36.408048][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.418793][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.436504][ T784] Call Trace: [ 36.440358][ T826] device bridge_slave_0 left promiscuous mode [ 36.443095][ T784] sysfs_remove_files+0xa4/0x100 [ 36.446669][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.454782][ T784] del_gendisk+0x254/0xa10 [ 36.462879][ T784] cleanup_mapped_device+0x16c/0x270 [ 36.467785][ T826] device bridge_slave_1 left promiscuous mode [ 36.468427][ T784] dm_create+0xb03/0xdd0 [ 36.478113][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.478880][ T784] dev_create+0x12e/0x2c0 [ 36.494602][ T784] ? list_devices+0x570/0x570 [ 36.501484][ T784] ? __kasan_check_write+0x14/0x20 [ 36.508476][ T784] ? _copy_from_user+0x95/0xd0 [ 36.514491][ T784] dm_ctl_ioctl+0x8ee/0xca0 [ 36.519108][ T784] ? list_devices+0x570/0x570 [ 36.524144][ T784] ? dm_poll+0x120/0x120 [ 36.528821][ T784] ? security_file_ioctl+0x84/0xa0 [ 36.534193][ T784] ? dm_poll+0x120/0x120 [ 36.538612][ T784] __se_sys_ioctl+0x121/0x1a0 [ 36.543312][ T784] __x64_sys_ioctl+0x7b/0x90 [ 36.547983][ T784] do_syscall_64+0x31/0x40 [ 36.552402][ T784] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.558323][ T784] RIP: 0033:0x7feda8ad0199 [ 36.562729][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.582649][ T784] RSP: 002b:00007feda7529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.591693][ T784] RAX: ffffffffffffffda RBX: 00007feda8d57fa0 RCX: 00007feda8ad0199 [ 36.599768][ T784] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 36.607802][ T784] RBP: 00007feda8b678e0 R08: 0000000000000000 R09: 0000000000000000 [ 36.615861][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.623873][ T784] R13: 00007feda8d58038 R14: 00007feda8d57fa0 R15: 00007ffd07f06f58 [ 36.631938][ T784] ---[ end trace 2ecca803b5d76a8a ]--- [ 36.638456][ T784] ------------[ cut here ]------------ [ 36.643949][ T784] kernfs: can not remove 'events_poll_msecs', no directory [ 36.651474][ T784] WARNING: CPU: 0 PID: 784 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 36.668792][ T784] Modules linked in: [ 36.682985][ T784] CPU: 0 PID: 784 Comm: syz.5.163 Tainted: G W syzkaller #0 [ 36.699870][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.720316][ T784] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 36.764205][ T784] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 bc 1d 9d ff 48 c7 c7 40 39 2b 85 4c 89 f6 e8 fd 12 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 9e 1d 9d ff 41 be fe ff ff ff 48 [ 36.787079][ T784] RSP: 0018:ffffc90001847a10 EFLAGS: 00010246 [ 36.794752][ T784] RAX: 2d5cc50576380900 RBX: 0000000000000003 RCX: 0000000000080000 [ 36.802901][ T784] RDX: ffffc90008309000 RSI: 000000000007ffff RDI: 0000000000080000 [ 36.818871][ T845] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 36.827772][ T845] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 36.845190][ T784] RBP: ffffc90001847a38 R08: ffffc900018473a7 R09: fffff52000308ea8 [ 36.853212][ T784] R10: dffffc0000000000 R11: fffff52000308e75 R12: 0000000000000000 [ 36.864335][ T784] R13: ffffffff8674efc0 R14: ffffffff853fc460 R15: 0000000000000000 [ 36.888264][ T784] FS: 00007feda75296c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.898515][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.905401][ T784] CR2: 00007f5d76428060 CR3: 000000011d3d9000 CR4: 00000000003506a0 [ 36.913555][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.926100][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.948050][ T784] Call Trace: [ 36.953628][ T784] sysfs_remove_files+0xa4/0x100 [ 36.963027][ T784] del_gendisk+0x254/0xa10 [ 36.971805][ T784] cleanup_mapped_device+0x16c/0x270 [ 36.981583][ T784] dm_create+0xb03/0xdd0 [ 36.996911][ T784] dev_create+0x12e/0x2c0 [ 37.002595][ T784] ? list_devices+0x570/0x570 [ 37.007487][ T784] ? __kasan_check_write+0x14/0x20 [ 37.012686][ T784] ? _copy_from_user+0x95/0xd0 [ 37.017670][ T784] dm_ctl_ioctl+0x8ee/0xca0 [ 37.022208][ T784] ? list_devices+0x570/0x570 [ 37.027338][ T784] ? dm_poll+0x120/0x120 [ 37.031638][ T784] ? security_file_ioctl+0x84/0xa0 [ 37.034164][ T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.036957][ T784] ? dm_poll+0x120/0x120 [ 37.048679][ T784] __se_sys_ioctl+0x121/0x1a0 [ 37.053384][ T784] __x64_sys_ioctl+0x7b/0x90 [ 37.058274][ T784] do_syscall_64+0x31/0x40 [ 37.062799][ T784] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.068858][ T784] RIP: 0033:0x7feda8ad0199 [ 37.073368][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.093573][ T784] RSP: 002b:00007feda7529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.102203][ T784] RAX: ffffffffffffffda RBX: 00007feda8d57fa0 RCX: 00007feda8ad0199 [ 37.110399][ T784] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 37.118796][ T784] RBP: 00007feda8b678e0 R08: 0000000000000000 R09: 0000000000000000 [ 37.126981][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.135082][ T784] R13: 00007feda8d58038 R14: 00007feda8d57fa0 R15: 00007ffd07f06f58 [ 37.143152][ T784] ---[ end trace 2ecca803b5d76a8b ]--- [ 37.148809][ T784] ------------[ cut here ]------------ [ 37.154461][ T784] kernfs: can not remove 'bdi', no directory [ 37.160546][ T784] WARNING: CPU: 1 PID: 784 at fs/kernfs/dir.c:1588 kernfs_remove_by_name_ns+0x103/0x160 [ 37.170539][ T784] Modules linked in: [ 37.174578][ T784] CPU: 1 PID: 784 Comm: syz.5.163 Tainted: G W syzkaller #0 [ 37.183393][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.193778][ T784] RIP: 0010:kernfs_remove_by_name_ns+0x103/0x160 [ 37.200407][ T784] Code: 06 4c 89 f7 e8 fe ee ff ff 4c 89 f7 e8 86 af ff ff 45 31 f6 eb 29 e8 bc 1d 9d ff 48 c7 c7 40 39 2b 85 4c 89 f6 e8 fd 12 b2 02 <0f> 0b 41 be fe ff ff ff eb 13 e8 9e 1d 9d ff 41 be fe ff ff ff 48 [ 37.220284][ T784] RSP: 0018:ffffc90001847a30 EFLAGS: 00010246 [ 37.226489][ T784] RAX: 2d5cc50576380900 RBX: ffffffff853fbd40 RCX: 0000000000080000 [ 37.234954][ T784] RDX: ffffc90008309000 RSI: 000000000007ffff RDI: 0000000000080000 [ 37.242968][ T784] RBP: ffffc90001847a58 R08: ffff8881f7127493 R09: 1ffff1103ee24e92 [ 37.251208][ T784] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: 0000000000000000 [ 37.259322][ T784] R13: 1ffff1102368908f R14: ffffffff853fbd40 R15: 0000000000000000 [ 37.267497][ T569] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 37.275080][ T784] FS: 00007feda75296c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.284287][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.290912][ T784] CR2: 00007f5d75657300 CR3: 000000011d3d9000 CR4: 00000000003506a0 [ 37.299065][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.307371][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.315623][ T784] Call Trace: [ 37.318957][ T784] sysfs_remove_link+0x50/0x60 [ 37.323737][ T784] del_gendisk+0x3f8/0xa10 [ 37.328508][ T784] cleanup_mapped_device+0x16c/0x270 [ 37.333828][ T784] dm_create+0xb03/0xdd0 [ 37.338250][ T784] dev_create+0x12e/0x2c0 [ 37.342741][ T784] ? list_devices+0x570/0x570 [ 37.348169][ T784] ? __kasan_check_write+0x14/0x20 [ 37.353513][ T784] ? _copy_from_user+0x95/0xd0 [ 37.358670][ T784] dm_ctl_ioctl+0x8ee/0xca0 [ 37.363219][ T784] ? list_devices+0x570/0x570 [ 37.368112][ T784] ? dm_poll+0x120/0x120 [ 37.372368][ T784] ? security_file_ioctl+0x84/0xa0 [ 37.404163][ T15] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.424103][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.428606][ T784] ? dm_poll+0x120/0x120 [ 37.438165][ T784] __se_sys_ioctl+0x121/0x1a0 [ 37.443009][ T784] __x64_sys_ioctl+0x7b/0x90 [ 37.447678][ T15] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 37.447976][ T784] do_syscall_64+0x31/0x40 [ 37.461977][ T784] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.464081][ T15] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 37.477148][ T784] RIP: 0033:0x7feda8ad0199 [ 37.481576][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.492711][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.501497][ T784] RSP: 002b:00007feda7529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.535608][ T784] RAX: ffffffffffffffda RBX: 00007feda8d57fa0 RCX: 00007feda8ad0199 [ 37.543716][ T784] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 37.551951][ T784] RBP: 00007feda8b678e0 R08: 0000000000000000 R09: 0000000000000000 [ 37.563265][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.571397][ T784] R13: 00007feda8d58038 R14: 00007feda8d57fa0 R15: 00007ffd07f06f58 [ 37.579628][ T843] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.587465][ T784] ---[ end trace 2ecca803b5d76a8c ]--- [ 37.593108][ T784] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 37.604809][ T784] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 37.613215][ T784] CPU: 0 PID: 784 Comm: syz.5.163 Tainted: G W syzkaller #0 [ 37.621799][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.631857][ T784] RIP: 0010:strlen+0x29/0x70 [ 37.636444][ T784] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 37.646794][ T862] syz.1.196 (862): /proc/861/oom_adj is deprecated, please use /proc/861/oom_score_adj instead. [ 37.656134][ T784] RSP: 0018:ffffc900018479a8 EFLAGS: 00010246 [ 37.656145][ T784] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 37.656151][ T784] RDX: ffff88811cfba800 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.656158][ T784] RBP: ffffc900018479c8 R08: ffff888100059c77 R09: 1ffff1102000b38e [ 37.656166][ T784] R10: dffffc0000000000 R11: ffffed102000b38f R12: ffff8881069a5410 [ 37.656173][ T784] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 37.656190][ T784] FS: 00007feda75296c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 37.721293][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.727854][ T784] CR2: 00007f69c4918880 CR3: 000000011d3d9000 CR4: 00000000003506b0 [ 37.735805][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.743767][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.751728][ T784] Call Trace: [ 37.754994][ T784] kernfs_find_ns+0x95/0x4b0 [ 37.759557][ T784] kernfs_remove_by_name_ns+0x89/0x160 [ 37.764160][ T569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.764997][ T784] sysfs_remove_link+0x50/0x60 [ 37.775884][ T569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.780584][ T784] del_gendisk+0x84b/0xa10 [ 37.790776][ T569] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.794663][ T784] cleanup_mapped_device+0x16c/0x270 [ 37.794673][ T784] dm_create+0xb03/0xdd0 [ 37.794683][ T784] dev_create+0x12e/0x2c0 [ 37.794692][ T784] ? list_devices+0x570/0x570 [ 37.794710][ T784] ? __kasan_check_write+0x14/0x20 [ 37.807789][ T569] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.812711][ T784] ? _copy_from_user+0x95/0xd0 [ 37.817110][ T569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.821235][ T784] dm_ctl_ioctl+0x8ee/0xca0 [ 37.821252][ T784] ? list_devices+0x570/0x570 [ 37.862047][ T784] ? dm_poll+0x120/0x120 [ 37.866277][ T784] ? security_file_ioctl+0x84/0xa0 [ 37.871366][ T784] ? dm_poll+0x120/0x120 [ 37.875590][ T784] __se_sys_ioctl+0x121/0x1a0 [ 37.880253][ T784] __x64_sys_ioctl+0x7b/0x90 [ 37.884843][ T784] do_syscall_64+0x31/0x40 [ 37.889251][ T784] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.895140][ T784] RIP: 0033:0x7feda8ad0199 [ 37.899547][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.919136][ T784] RSP: 002b:00007feda7529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.927538][ T784] RAX: ffffffffffffffda RBX: 00007feda8d57fa0 RCX: 00007feda8ad0199 [ 37.935489][ T784] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 37.943438][ T784] RBP: 00007feda8b678e0 R08: 0000000000000000 R09: 0000000000000000 [ 37.951397][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.959364][ T784] R13: 00007feda8d58038 R14: 00007feda8d57fa0 R15: 00007ffd07f06f58 [ 37.967340][ T784] Modules linked in: [ 37.971555][ T784] ---[ end trace 2ecca803b5d76a8d ]--- [ 37.977184][ T784] RIP: 0010:strlen+0x29/0x70 [ 37.981846][ T784] Code: 00 55 48 89 e5 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 38.001535][ T784] RSP: 0018:ffffc900018479a8 EFLAGS: 00010246 [ 38.007927][ T784] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 38.016190][ T784] RDX: ffff88811cfba800 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.024486][ T784] RBP: ffffc900018479c8 R08: ffff888100059c77 R09: 1ffff1102000b38e [ 38.032626][ T784] R10: dffffc0000000000 R11: ffffed102000b38f R12: ffff8881069a5410 [ 38.040878][ T784] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 38.049134][ T784] FS: 00007feda75296c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 38.059241][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.065961][ T784] CR2: 00007f9b2c7a9880 CR3: 000000011d3d9000 CR4: 00000000003506b0 [ 38.116042][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.125631][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.133710][ T784] Kernel panic - not syncing: Fatal exception [ 38.139979][ T784] Kernel Offset: disabled [ 38.144296][ T784] Rebooting in 86400 seconds..