last executing test programs: 42.750043239s ago: executing program 0 (id=51): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24008041}, 0x40004) 42.749784139s ago: executing program 0 (id=52): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) mount(0x0, &(0x7f0000000140)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='f', 0x1) write(0xffffffffffffffff, &(0x7f00000003c0)='fc', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nn-0x3333333333333333:pn-0x4444444444444444', 0x2b) symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 42.736498799s ago: executing program 0 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) 42.582462383s ago: executing program 0 (id=54): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x141104, 0x80) getdents64(r0, 0x0, 0x0) 42.405247227s ago: executing program 0 (id=55): syz_open_procfs$userns(0x0, &(0x7f0000000040)) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x17, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000880)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000008c0)={0x3, 0x0, [{0x1b, 0x0, 0xc00}, {0x80f, 0x0, 0x1ff}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000900)={0x1, 0x0, [{0x6e0, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={&(0x7f0000000480)="be7a8c38fbda9e6ba5d596f184685b043fd59fe24ce6d662041319d76d06a3d4c681cb614fb086550814e3d69b7a9c1009712695188c242afe41d1462fc1d4395f21ba4d74f76c73601d2d9e90916f018ec0", &(0x7f0000000500)=""/117, &(0x7f0000000580)="b861e2440ee154efea416f754619be86f647d6e87662181df2b2912d66b6eb99b5eb4aaecbe698c92c6f9c041114f698b8e85a1183bfd4e650b9766841201c92a69b43e6fc84e5a70be41da1e23020004198f24d", &(0x7f0000000600)="883bc95376a621c436aed7291d8298bad46055acdd984edd20", 0xa5, r0, 0x4}, 0x38) readlinkat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/101, 0x65) 41.8100965s ago: executing program 0 (id=60): unshare(0x22020600) syz_clone3(&(0x7f0000000300)={0x1a0000280, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 41.80995368s ago: executing program 32 (id=60): unshare(0x22020600) syz_clone3(&(0x7f0000000300)={0x1a0000280, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 3.033776602s ago: executing program 1 (id=528): unshare(0x20000400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 3.033608242s ago: executing program 1 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000880)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)={0x3, 0x0, [{0x1b, 0x0, 0xc00}, {0x80f, 0x0, 0x1ff}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.989548323s ago: executing program 1 (id=530): r0 = socket$igmp(0x2, 0x3, 0x2) setresuid(0xee01, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x1]}, 0x8, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x1, 0x80, 0xfffffe00, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)=')\x80', 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904481e34d33f785dab4d7ebf327796909fbf856241b75866e944055dbaef4a1e763f4fa00c70915f6fe79465ff877f"], 0x0) r2 = dup(0xffffffffffffffff) write$binfmt_elf32(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c464a"], 0x38) execveat(r2, &(0x7f0000001d40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x1000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 2.813298528s ago: executing program 3 (id=537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2.803066578s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f00000000c0)={'wlan1\x00', @random="0100"}) 2.34602157s ago: executing program 5 (id=543): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffff99, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0xa, 0x800}, 0x28) 2.34573139s ago: executing program 5 (id=544): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 2.288990922s ago: executing program 5 (id=545): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x39e6, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x14}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, 0x0, 0x0) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 1.869063042s ago: executing program 3 (id=547): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000002, 0x82000) r1 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x47, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x40, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x4, 0xfffffffd, 0x32}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x2, 0x369}}], 0x1, 0x0, 0x0) 1.868707872s ago: executing program 3 (id=548): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406400105240000000d240f0100000000000000000006241a0000000905810300020000000904eebb00020d000009040101"], 0x0) 1.867772212s ago: executing program 5 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1', 0x1) 1.749632355s ago: executing program 2 (id=553): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x10, 0x2, 0x7fff7ffc}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 1.749278995s ago: executing program 2 (id=554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x20000004) 1.749044035s ago: executing program 2 (id=555): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1.626920508s ago: executing program 1 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x99ee, 0x1, 0x0, 0x4001cb, 0x0, r1}, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.626136509s ago: executing program 5 (id=559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.525932331s ago: executing program 2 (id=560): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x184) unshare(0x20000400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x101, 0x80000001}) 1.525315721s ago: executing program 2 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) timer_create(0x6, &(0x7f0000001b80)={0x0, 0x29, 0x1, @thr={&(0x7f0000001a00)="430df58f8e00cd1beb275a9da0f1be34a8fea24498a7e2cc9005e7da90f8182b3d1bb0e64d2a9e9bad0efc8c9f845bf95714806ea6e3f094eac0b3efcefed66554301fa0e43c0d57024ecfdb223f7d", &(0x7f0000001a80)="8d8fe584a7908c3a290d7953e44b49ea001e16ee4e57c807e3abd6e156fcaf57cdc7c911cc21627c00aaa01c2b0830a874c244eac5fd92b115b96adebb9104647a76ada957f6f7b779df0c2941de8c4c70a8c859e4abb20b8a50aefb6f201573b5645bafa768f41847691ce2e53df58c687baa23f14882e86873351922f501f8dd9461fdf2101696d3f56447ede6eeff7f53ce10295b5956846b4c1682aaa7592c27964b2ee1ec5aa78766507c817d1ed6d572372bd97550cc120fb0238d6ba48c4549a5c52da3ccf69af7a14172adc142844f3a362982aa1606b387634e651f5c"}}, &(0x7f0000001bc0)=0x0) clock_gettime(0x0, &(0x7f0000001c00)) timer_settime(r1, 0x1, &(0x7f0000001c40)={{0x77359400}}, &(0x7f0000000240)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1a4, 0x3, 0x9, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x15, 0x3, 0x8b88) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000002180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x40, 0x80, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdd2d, 0xa, 0x1e, 0xfd}, [@effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x4, [0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x1fe, 0x6, 0x2, 0x1, 0x81, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x8, 0x37, {0x8, 0x25, 0x1, 0x80, 0x14, 0x18, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0xe2, 0x4, {0x8, 0x25, 0x1, 0x81, 0x3, 0x2, 0x499f}}}}}}}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) 985.863165ms ago: executing program 4 (id=568): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 979.471125ms ago: executing program 4 (id=569): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='1', 0x1) 949.994796ms ago: executing program 4 (id=570): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='fi'], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 715.930092ms ago: executing program 5 (id=571): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x74b36ae850024e60) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000100)=""/98, 0x62) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8=r0], 0x0) 713.414092ms ago: executing program 1 (id=572): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000006d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000004280)={0x20, 0x0, r3, {0x403, 0x4, 0x8, 0x3}}, 0x20) dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_create_resource$binfmt(&(0x7f0000006800)='./file1\x00') close(0xffffffffffffffff) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x78, 0x0, 0x58c, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x8, 0x3, 0x6, 0x2, 0x0, 0x200800, 0x1, 0xa, 0xa000, 0xfffffffa, 0x0, r4, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x20000) write$FUSE_LK(r0, 0x0, 0x0) 680.505073ms ago: executing program 4 (id=573): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 534.985686ms ago: executing program 1 (id=574): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x1b00, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x1, 0x15b2, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x33}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x1}, {0xffffffffffffffff, 0x0, 0x23, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 471.000468ms ago: executing program 3 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 412.92979ms ago: executing program 4 (id=576): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc80, &(0x7f0000000780)=ANY=[@ANYBLOB='fmask=00000000000000000000001,umask=00000000000020000000002,utf8,keep_last_dots,allow_utime=00000000000000000004001,errors=continue,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703835302c696f636861727365743d69736f383835392d312c006b95def57e2522c1bea829c23d304a63a4dbc03e4e15b41ada21c9a1dd3aad8a353a45e2fb41ed411833b1789f3d88f528c72dcbb5e1aea5dab11e69a77f2b692198fa6cd5c07eae4e91f2350fa2e360df77ba73081b1114f7c77978a4e105bf40f0bfca515e2bbb2552ca497c842e3abb25e85344d0e964a97a3875dd9cc56d8fda567e4c9f0589ef0b"], 0x7, 0x1526, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001e40)='./bus\x00', 0x800, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001ec0)='./bus\x00', 0x0) 385.48123ms ago: executing program 3 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000880)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000900)={0x1, 0x0, [{0x6e0, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 242.643084ms ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) 0s ago: executing program 2 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000001800)='7', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) kernel console output (not intermixed with test programs): 10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.122526][ T524] loop5: detected capacity change from 0 to 256 [ 39.122708][ T42] device bridge_slave_1 left promiscuous mode [ 39.139522][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.149477][ T524] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 39.166350][ T42] device bridge_slave_0 left promiscuous mode [ 39.173579][ T28] audit: type=1400 audit(1791905218.022:177): avc: denied { write } for pid=523 comm="syz.5.61" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.174239][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.202029][ T28] audit: type=1400 audit(1791905218.022:178): avc: denied { add_name } for pid=523 comm="syz.5.61" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.232865][ T19] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.234395][ T28] audit: type=1400 audit(1791905218.022:179): avc: denied { create } for pid=523 comm="syz.5.61" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.247087][ T19] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.270865][ T28] audit: type=1400 audit(1791905218.022:180): avc: denied { associate } for pid=523 comm="syz.5.61" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.283943][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 39.307942][ T28] audit: type=1400 audit(1791905218.022:181): avc: denied { read write } for pid=523 comm="syz.5.61" name="file1" dev="loop5" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.318926][ T19] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 39.344269][ T28] audit: type=1400 audit(1791905218.022:182): avc: denied { open } for pid=523 comm="syz.5.61" path="/0/file1/file1" dev="loop5" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.354295][ T42] device veth1_macvtap left promiscuous mode [ 39.386038][ T19] usb 2-1: Product: syz [ 39.390511][ T19] usb 2-1: Manufacturer: syz [ 39.391747][ T42] device veth0_vlan left promiscuous mode [ 39.397500][ T28] audit: type=1400 audit(1791905218.242:183): avc: denied { unmount } for pid=503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.440060][ T19] hub 2-1:4.0: USB hub found [ 39.464226][ T528] process 'syz.5.67' launched '/dev/fd/4' with NULL argv: empty string added [ 39.475374][ T28] audit: type=1400 audit(1791905218.322:184): avc: denied { execute } for pid=527 comm="syz.5.67" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.501594][ T28] audit: type=1400 audit(1791905218.322:185): avc: denied { execute_no_trans } for pid=527 comm="syz.5.67" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.539887][ T292] usb 4-1: USB disconnect, device number 3 [ 39.541122][ T531] loop5: detected capacity change from 0 to 1024 [ 39.595426][ T389] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.630927][ T19] hub 2-1:4.0: 1 port detected [ 39.968792][ T551] tipc: Withdrawal distribution failure [ 40.068163][ T19] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 40.081489][ T19] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 40.123300][ T19] usb 2-1: USB disconnect, device number 4 [ 40.144296][ T557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 40.152255][ T559] FAULT_INJECTION: forcing a failure. [ 40.152255][ T559] name failslab, interval 1, probability 0, space 0, times 0 [ 40.167822][ T561] Zero length message leads to an empty skb [ 40.187208][ T559] CPU: 1 PID: 559 Comm: syz.4.78 Not tainted syzkaller #0 [ 40.195175][ T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 40.208750][ T559] Call Trace: [ 40.213089][ T559] [ 40.217219][ T559] __dump_stack+0x21/0x24 [ 40.223078][ T559] dump_stack_lvl+0x110/0x170 [ 40.228939][ T559] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.235336][ T559] ? kernfs_xattr_get+0x81/0x90 [ 40.242265][ T559] ? selinux_kernfs_init_security+0x143/0x450 [ 40.249618][ T559] dump_stack+0x15/0x24 [ 40.254614][ T559] should_fail_ex+0x3bf/0x510 [ 40.260816][ T559] __should_failslab+0xac/0xf0 [ 40.266608][ T559] should_failslab+0x9/0x20 [ 40.271860][ T559] __kmem_cache_alloc_node+0x3d/0x2d0 [ 40.278580][ T559] ? __kernfs_new_node+0xa6/0x670 [ 40.285885][ T559] ? __kernfs_new_node+0xa6/0x670 [ 40.292723][ T559] __kmalloc_node_track_caller+0xa1/0x1e0 [ 40.299705][ T559] kstrdup_const+0x5a/0xa0 [ 40.304507][ T559] __kernfs_new_node+0xa6/0x670 [ 40.309503][ T559] ? kernfs_new_node+0x260/0x260 [ 40.314667][ T559] ? up_write+0x7b/0x290 [ 40.321565][ T559] ? kernfs_activate+0x1ea/0x200 [ 40.330118][ T559] ? kernfs_add_one+0x485/0x590 [ 40.336568][ T559] kernfs_new_node+0x150/0x260 [ 40.342259][ T559] kernfs_create_dir_ns+0x47/0x130 [ 40.348147][ T559] sysfs_create_dir_ns+0x128/0x290 [ 40.354572][ T559] ? __kasan_check_write+0x14/0x20 [ 40.362823][ T559] ? _raw_spin_lock+0x94/0xf0 [ 40.368228][ T559] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 40.374762][ T559] kobject_add_internal+0x718/0xc20 [ 40.381072][ T559] kobject_add+0x165/0x230 [ 40.386442][ T559] ? __cfi_mutex_unlock+0x10/0x10 [ 40.392062][ T559] ? __cfi_kobject_add+0x10/0x10 [ 40.398773][ T559] ? __kasan_check_write+0x14/0x20 [ 40.405004][ T559] ? get_device_parent+0x3ed/0x410 [ 40.410606][ T559] device_add+0x398/0xec0 [ 40.415448][ T559] hci_register_dev+0x317/0x960 [ 40.421481][ T559] hci_uart_tty_ioctl+0x8a7/0xa70 [ 40.426762][ T559] ? __cfi_hci_uart_tty_ioctl+0x10/0x10 [ 40.432731][ T559] tty_ioctl+0x8ef/0xc60 [ 40.437731][ T559] ? __cfi_tty_ioctl+0x10/0x10 [ 40.443325][ T559] __se_sys_ioctl+0x12f/0x1b0 [ 40.448339][ T559] __x64_sys_ioctl+0x7b/0x90 [ 40.454609][ T559] x64_sys_call+0x58b/0x9a0 [ 40.460863][ T559] do_syscall_64+0x4c/0xa0 [ 40.466020][ T559] ? clear_bhb_loop+0x30/0x80 [ 40.471093][ T559] ? clear_bhb_loop+0x30/0x80 [ 40.476329][ T559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.483297][ T559] RIP: 0033:0x7f442cd9e2d9 [ 40.488000][ T559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.509369][ T559] RSP: 002b:00007f442dc36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.518256][ T559] RAX: ffffffffffffffda RBX: 00007f442d025fa0 RCX: 00007f442cd9e2d9 [ 40.526427][ T559] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 40.535211][ T559] RBP: 00007f442ce35888 R08: 0000000000000000 R09: 0000000000000000 [ 40.544602][ T559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.555201][ T559] R13: 00007f442d026038 R14: 00007f442d025fa0 R15: 00007ffc56cdf4c8 [ 40.563914][ T559] [ 40.568162][ T559] kobject_add_internal failed for hci0 (error: -12 parent: bluetooth) [ 40.578922][ T559] Bluetooth: Can't register HCI device [ 40.618320][ T292] usb 3-1: USB disconnect, device number 4 [ 41.619019][ T603] FAULT_INJECTION: forcing a failure. [ 41.619019][ T603] name failslab, interval 1, probability 0, space 0, times 0 [ 41.623492][ T601] loop5: detected capacity change from 0 to 256 [ 41.639277][ T603] CPU: 1 PID: 603 Comm: syz.3.97 Not tainted syzkaller #0 [ 41.655983][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.667814][ T603] Call Trace: [ 41.671477][ T603] [ 41.674792][ T603] __dump_stack+0x21/0x24 [ 41.679998][ T603] dump_stack_lvl+0x110/0x170 [ 41.686136][ T603] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.692940][ T603] ? pointer+0x870/0xfe0 [ 41.697933][ T603] dump_stack+0x15/0x24 [ 41.703361][ T603] should_fail_ex+0x3bf/0x510 [ 41.709835][ T603] __should_failslab+0xac/0xf0 [ 41.715921][ T603] should_failslab+0x9/0x20 [ 41.720984][ T603] __kmem_cache_alloc_node+0x3d/0x2d0 [ 41.726749][ T603] ? kasprintf+0xdf/0x130 [ 41.731619][ T603] ? vsnprintf+0x18c6/0x1990 [ 41.736374][ T603] ? kasprintf+0xdf/0x130 [ 41.742049][ T603] __kmalloc_node_track_caller+0xa1/0x1e0 [ 41.749204][ T603] kvasprintf+0xe8/0x1a0 [ 41.754436][ T603] ? __cfi_kvasprintf+0x10/0x10 [ 41.759921][ T603] ? __stack_depot_save+0x44d/0x490 [ 41.765701][ T603] kasprintf+0xdf/0x130 [ 41.770977][ T603] ? __x64_sys_fsconfig+0xbf/0xd0 [ 41.777657][ T603] ? x64_sys_call+0x5df/0x9a0 [ 41.782813][ T603] ? do_syscall_64+0x4c/0xa0 [ 41.788104][ T603] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.796131][ T603] ? __cfi_kasprintf+0x10/0x10 [ 41.801034][ T603] logfc+0x152/0x4f0 [ 41.804971][ T603] ? __cfi_logfc+0x10/0x10 [ 41.810159][ T603] ? cgroup2_parse_param+0x12f/0x1c0 [ 41.815840][ T603] ? __cfi_cgroup2_parse_param+0x10/0x10 [ 41.823002][ T603] ? security_fs_context_parse_param+0xcd/0x100 [ 41.830167][ T603] vfs_parse_fs_param+0x2cc/0x450 [ 41.835596][ T603] vfs_fsconfig_locked+0x25e/0x3f0 [ 41.842924][ T603] __se_sys_fsconfig+0x69c/0x7e0 [ 41.850258][ T603] ? __x64_sys_fsconfig+0xd0/0xd0 [ 41.855978][ T603] ? __kasan_check_write+0x14/0x20 [ 41.861735][ T603] ? fpregs_restore_userregs+0x128/0x260 [ 41.868315][ T603] __x64_sys_fsconfig+0xbf/0xd0 [ 41.873519][ T603] x64_sys_call+0x5df/0x9a0 [ 41.878136][ T603] do_syscall_64+0x4c/0xa0 [ 41.883421][ T603] ? clear_bhb_loop+0x30/0x80 [ 41.888674][ T603] ? clear_bhb_loop+0x30/0x80 [ 41.893590][ T603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.899950][ T603] RIP: 0033:0x7fb00139e2d9 [ 41.905702][ T603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.927604][ T603] RSP: 002b:00007fb0021e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 41.936409][ T603] RAX: ffffffffffffffda RBX: 00007fb001625fa0 RCX: 00007fb00139e2d9 [ 41.945238][ T603] RDX: 00002000000003c0 RSI: 0000000000000002 RDI: 0000000000000003 [ 41.955081][ T603] RBP: 00007fb001435888 R08: 0000000000000001 R09: 0000000000000000 [ 41.965267][ T603] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 41.975179][ T603] R13: 00007fb001626038 R14: 00007fb001625fa0 R15: 00007ffd472a1e78 [ 41.986099][ T603] [ 42.014896][ T601] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 42.121712][ T622] loop3: detected capacity change from 0 to 512 [ 42.130834][ T622] ======================================================= [ 42.130834][ T622] WARNING: The mand mount option has been deprecated and [ 42.130834][ T622] and is ignored by this kernel. Remove the mand [ 42.130834][ T622] option from the mount to silence this warning. [ 42.130834][ T622] ======================================================= [ 42.169502][ T625] loop1: detected capacity change from 0 to 512 [ 42.192397][ T622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.214837][ T625] EXT4-fs: Ignoring removed nobh option [ 42.221469][ T622] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.239761][ T622] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 1803188595: comm syz.3.104: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 42.263426][ T622] EXT4-fs (loop3): mount failed [ 42.291275][ T625] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #3: comm syz.1.105: corrupted inode contents [ 42.311816][ T622] loop3: detected capacity change from 0 to 256 [ 42.314847][ T625] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #3: comm syz.1.105: mark_inode_dirty error [ 42.321168][ T622] FAT-fs (loop3): Unrecognized mount option "uni_xl‘ Ç1" or missing value [ 42.337153][ T625] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #3: comm syz.1.105: corrupted inode contents [ 42.364927][ T625] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.105: mark_inode_dirty error [ 42.377436][ T625] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.105: Failed to acquire dquot type 0 [ 42.390331][ T625] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.105: corrupted inode contents [ 42.403756][ T625] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #16: comm syz.1.105: mark_inode_dirty error [ 42.417764][ T625] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.105: corrupted inode contents [ 42.431200][ T625] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.105: mark_inode_dirty error [ 42.446957][ T625] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.105: corrupted inode contents [ 42.464808][ T625] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 42.475752][ T625] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #16: comm syz.1.105: corrupted inode contents [ 42.490891][ T625] EXT4-fs error (device loop1): ext4_truncate:4327: inode #16: comm syz.1.105: mark_inode_dirty error [ 42.502621][ T658] kernel profiling enabled (shift: 0) [ 42.505359][ T625] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 42.526396][ T625] EXT4-fs (loop1): 1 truncate cleaned up [ 42.534019][ T625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.546129][ T625] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.571763][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.590032][ T288] EXT4-fs (loop1): unmounting filesystem. [ 42.761666][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 42.770083][ T19] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 42.790874][ T19] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 42.803269][ T660] loop1: detected capacity change from 0 to 40427 [ 42.812487][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.824302][ T660] F2FS-fs (loop1): invalid crc value [ 42.837790][ T19] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 42.857328][ T660] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.871057][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.901656][ T19] usb 3-1: Product: syz [ 42.915686][ T19] usb 3-1: Manufacturer: syz [ 42.928380][ T19] usb 3-1: SerialNumber: syz [ 42.944656][ T19] usb 3-1: config 0 descriptor?? [ 42.953994][ T660] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.450501][ T678] tmpfs: Unknown parameter 'usrquota' [ 43.481809][ T583] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.501842][ T682] loop1: detected capacity change from 0 to 512 [ 43.515078][ T682] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.528637][ T682] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.537580][ T682] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.125: Allocating blocks 41-42 which overlap fs metadata [ 43.554649][ T682] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.125: Failed to acquire dquot type 0 [ 43.567400][ T682] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 43.583687][ T682] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.125: corrupted inode contents [ 43.596705][ T682] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #12: comm syz.1.125: mark_inode_dirty error [ 43.610953][ T682] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.125: corrupted inode contents [ 43.624535][ T682] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.125: mark_inode_dirty error [ 43.640849][ T682] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.125: corrupted inode contents [ 43.656505][ T682] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 43.668440][ T682] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #12: comm syz.1.125: corrupted inode contents [ 43.682652][ T682] EXT4-fs error (device loop1): ext4_truncate:4327: inode #12: comm syz.1.125: mark_inode_dirty error [ 43.697957][ T583] usb 6-1: Using ep0 maxpacket: 16 [ 43.698366][ T682] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 43.708480][ T583] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.718809][ T682] EXT4-fs (loop1): 1 truncate cleaned up [ 43.734101][ T583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.742742][ T682] EXT4-fs (loop1): pa ffff888117d02888: logic 1, phys. 41, len 23 [ 43.755767][ T583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.765487][ T682] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 43.777835][ T583] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 43.789132][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.803397][ T583] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 43.820604][ T583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.833853][ T583] usb 6-1: config 0 descriptor?? [ 43.840707][ T682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.874942][ T288] EXT4-fs (loop1): unmounting filesystem. [ 43.893289][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 43.893304][ T28] audit: type=1400 audit(1791905222.742:213): avc: denied { read write } for pid=686 comm="syz.1.127" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.929440][ T687] input: syz0 as /devices/virtual/input/input4 [ 43.962488][ T28] audit: type=1400 audit(1791905222.772:214): avc: denied { open } for pid=686 comm="syz.1.127" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.972849][ T691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 43.999841][ T691] tipc: Invalid UDP bearer configuration [ 43.999886][ T691] tipc: Enabling of bearer rejected, failed to enable media [ 44.021879][ T28] audit: type=1400 audit(1791905222.772:215): avc: denied { ioctl } for pid=686 comm="syz.1.127" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.052765][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.071762][ T19] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 44.091692][ T28] audit: type=1400 audit(1791905222.782:216): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=611 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.097670][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.119660][ T28] audit: type=1400 audit(1791905222.782:217): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.143592][ T19] usb 4-1: config 0 descriptor?? [ 44.161889][ T28] audit: type=1400 audit(1791905222.782:218): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.197472][ T28] audit: type=1400 audit(1791905222.912:219): avc: denied { write } for pid=694 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.218740][ T28] audit: type=1400 audit(1791905222.912:220): avc: denied { nlmsg_write } for pid=694 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.254357][ T583] hid-generic 0003:057E:2019.0001: unknown main item tag 0x0 [ 44.263539][ T583] hid-generic 0003:057E:2019.0001: unknown main item tag 0x0 [ 44.272522][ T583] hid-generic 0003:057E:2019.0001: unknown main item tag 0x0 [ 44.280964][ T583] hid-generic 0003:057E:2019.0001: unknown main item tag 0x0 [ 44.290004][ T583] hid-generic 0003:057E:2019.0001: unknown main item tag 0x0 [ 44.299312][ T583] hid-generic 0003:057E:2019.0001: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 44.331784][ T697] syz.1.132 (697) used greatest stack depth: 21024 bytes left [ 44.427901][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.462391][ T583] usb 6-1: USB disconnect, device number 2 [ 44.542030][ T28] audit: type=1400 audit(1791905223.382:221): avc: denied { create } for pid=701 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.623210][ T19] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 44.635814][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.657910][ T19] usb 5-1: config 0 descriptor?? [ 45.106474][ T28] audit: type=1400 audit(1791905223.952:222): avc: denied { mount } for pid=711 comm="syz.5.136" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.108075][ T713] FAULT_INJECTION: forcing a failure. [ 45.108075][ T713] name failslab, interval 1, probability 0, space 0, times 0 [ 45.144606][ T713] CPU: 1 PID: 713 Comm: syz.5.136 Not tainted syzkaller #0 [ 45.151859][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 45.162303][ T713] Call Trace: [ 45.165686][ T713] [ 45.168724][ T713] __dump_stack+0x21/0x24 [ 45.173598][ T713] dump_stack_lvl+0x110/0x170 [ 45.178289][ T713] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.183440][ T713] dump_stack+0x15/0x24 [ 45.187720][ T713] should_fail_ex+0x3bf/0x510 [ 45.192513][ T713] __should_failslab+0xac/0xf0 [ 45.197649][ T713] should_failslab+0x9/0x20 [ 45.202415][ T713] __kmem_cache_alloc_node+0x3d/0x2d0 [ 45.208651][ T713] ? append_filter_err+0xad/0x460 [ 45.213938][ T713] ? append_filter_err+0xad/0x460 [ 45.220147][ T713] kmalloc_trace+0x29/0xb0 [ 45.225120][ T713] append_filter_err+0xad/0x460 [ 45.230271][ T713] apply_event_filter+0x1c8/0x5c0 [ 45.235324][ T713] ? __kasan_check_write+0x14/0x20 [ 45.240473][ T713] event_filter_write+0xda/0x150 [ 45.245579][ T713] ? __cfi_event_filter_write+0x10/0x10 [ 45.251171][ T713] vfs_write+0x3fb/0xd00 [ 45.255451][ T713] ? __cfi_vfs_write+0x10/0x10 [ 45.260330][ T713] ? __kasan_check_write+0x14/0x20 [ 45.265774][ T713] ? mutex_lock+0x93/0x1b0 [ 45.270648][ T713] ? __cfi_mutex_lock+0x10/0x10 [ 45.275692][ T713] ? __fdget_pos+0x2cd/0x380 [ 45.280341][ T713] ? ksys_write+0x70/0x260 [ 45.284770][ T713] ksys_write+0x14a/0x260 [ 45.289193][ T713] ? __cfi_ksys_write+0x10/0x10 [ 45.294133][ T713] ? fpregs_restore_userregs+0x128/0x260 [ 45.300042][ T713] __x64_sys_write+0x7b/0x90 [ 45.304895][ T713] x64_sys_call+0x27b/0x9a0 [ 45.310441][ T713] do_syscall_64+0x4c/0xa0 [ 45.314963][ T713] ? clear_bhb_loop+0x30/0x80 [ 45.319817][ T713] ? clear_bhb_loop+0x30/0x80 [ 45.324586][ T713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.330761][ T713] RIP: 0033:0x7f511db9e2d9 [ 45.335208][ T713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.354925][ T713] RSP: 002b:00007f511ea76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.363529][ T713] RAX: ffffffffffffffda RBX: 00007f511de25fa0 RCX: 00007f511db9e2d9 [ 45.371773][ T713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 45.379972][ T713] RBP: 00007f511dc35888 R08: 0000000000000000 R09: 0000000000000000 [ 45.388250][ T713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.396439][ T713] R13: 00007f511de26038 R14: 00007f511de25fa0 R15: 00007fff992d3f48 [ 45.404537][ T713] [ 45.524500][ T310] usb 3-1: USB disconnect, device number 5 [ 47.231414][ T766] usb 5-1: USB disconnect, device number 3 [ 47.336142][ T6] usb 4-1: USB disconnect, device number 4 [ 48.000328][ T796] FAULT_INJECTION: forcing a failure. [ 48.000328][ T796] name fail_futex, interval 1, probability 0, space 0, times 1 [ 48.067442][ T800] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 48.071818][ T796] CPU: 1 PID: 796 Comm: syz.4.167 Not tainted syzkaller #0 [ 48.081441][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.092322][ T796] Call Trace: [ 48.096309][ T796] [ 48.101714][ T796] __dump_stack+0x21/0x24 [ 48.106639][ T796] dump_stack_lvl+0x110/0x170 [ 48.111514][ T796] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.117877][ T796] ? __switch_to+0x56f/0x1070 [ 48.123047][ T796] dump_stack+0x15/0x24 [ 48.127511][ T796] should_fail_ex+0x3bf/0x510 [ 48.132827][ T796] should_fail+0xb/0x10 [ 48.138516][ T796] get_futex_key+0x6a4/0xb10 [ 48.145542][ T796] ? _raw_spin_unlock+0x4c/0x70 [ 48.154226][ T796] ? __cfi_get_futex_key+0x10/0x10 [ 48.162112][ T796] ? __schedule+0xcbb/0x1700 [ 48.167661][ T796] ? futex_setup_timer+0xb0/0xc0 [ 48.174999][ T796] futex_wait_requeue_pi+0x2af/0x9b0 [ 48.181848][ T796] ? __cfi_futex_wait_requeue_pi+0x10/0x10 [ 48.188846][ T796] ? futex_unqueue+0x132/0x160 [ 48.194589][ T796] ? __cfi_futex_wait+0x10/0x10 [ 48.201506][ T796] ? __cfi_futex_wake+0x10/0x10 [ 48.208708][ T796] ? vfs_write+0xa51/0xd00 [ 48.214573][ T796] do_futex+0x188/0x430 [ 48.220534][ T796] ? __cfi_do_futex+0x10/0x10 [ 48.227947][ T796] ? __kasan_check_write+0x14/0x20 [ 48.234776][ T796] ? mutex_unlock+0x8f/0x230 [ 48.239795][ T796] __se_sys_futex+0x136/0x310 [ 48.246704][ T796] ? __x64_sys_futex+0x100/0x100 [ 48.254355][ T796] ? xfd_validate_state+0x70/0x150 [ 48.261068][ T796] ? __kasan_check_write+0x14/0x20 [ 48.267590][ T796] __x64_sys_futex+0xe5/0x100 [ 48.273595][ T796] x64_sys_call+0x7ec/0x9a0 [ 48.280157][ T796] do_syscall_64+0x4c/0xa0 [ 48.284979][ T796] ? clear_bhb_loop+0x30/0x80 [ 48.292246][ T796] ? clear_bhb_loop+0x30/0x80 [ 48.298824][ T796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.307306][ T796] RIP: 0033:0x7f442cd9e2d9 [ 48.312987][ T796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.337491][ T796] RSP: 002b:00007f442dc36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.349542][ T796] RAX: ffffffffffffffda RBX: 00007f442d025fa0 RCX: 00007f442cd9e2d9 [ 48.360449][ T796] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000 [ 48.369679][ T796] RBP: 00007f442ce35888 R08: 0000200000000380 R09: 0000000000000001 [ 48.378665][ T796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.388008][ T796] R13: 00007f442d026038 R14: 00007f442d025fa0 R15: 00007ffc56cdf4c8 [ 48.396910][ T796] [ 48.424630][ T803] syzkaller1: tun_chr_ioctl cmd 35108 [ 48.688033][ T824] FAULT_INJECTION: forcing a failure. [ 48.688033][ T824] name failslab, interval 1, probability 0, space 0, times 0 [ 48.740844][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 48.748307][ T824] CPU: 0 PID: 824 Comm: syz.2.177 Not tainted syzkaller #0 [ 48.762169][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.768984][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 48.774336][ T824] Call Trace: [ 48.774352][ T824] [ 48.774360][ T824] __dump_stack+0x21/0x24 [ 48.774395][ T824] dump_stack_lvl+0x110/0x170 [ 48.774420][ T824] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.808491][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 48.810340][ T824] dump_stack+0x15/0x24 [ 48.810383][ T824] should_fail_ex+0x3bf/0x510 [ 48.828913][ T824] ? security_inode_alloc+0x33/0x120 [ 48.834634][ T824] __should_failslab+0xac/0xf0 [ 48.838725][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 48.841054][ T824] should_failslab+0x9/0x20 [ 48.841086][ T824] kmem_cache_alloc+0x3b/0x320 [ 48.859088][ T824] security_inode_alloc+0x33/0x120 [ 48.863946][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 48.864514][ T824] inode_init_always+0x6ee/0x950 [ 48.881685][ T824] new_inode_pseudo+0xa2/0x1f0 [ 48.887289][ T824] new_inode+0x28/0x1e0 [ 48.892793][ T824] proc_setup_self+0xe3/0x310 [ 48.894721][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 48.898754][ T824] ? _raw_spin_unlock+0x4c/0x70 [ 48.898796][ T824] proc_fill_super+0x51d/0x760 [ 48.898824][ T824] get_tree_nodev+0xc4/0x170 [ 48.927998][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 48.929752][ T824] ? __cfi_proc_fill_super+0x10/0x10 [ 48.929792][ T824] proc_get_tree+0x1c/0x20 [ 48.929816][ T824] vfs_get_tree+0x9a/0x270 [ 48.961238][ T824] do_new_mount+0x251/0xb40 [ 48.967522][ T824] ? security_capable+0x99/0xc0 [ 48.973982][ T824] path_mount+0x640/0xfd0 [ 48.979927][ T824] __se_sys_mount+0x320/0x390 [ 48.988086][ T824] ? __this_cpu_preempt_check+0x13/0x20 [ 48.995422][ T824] ? __x64_sys_mount+0xd0/0xd0 [ 49.001882][ T824] ? __kasan_check_write+0x14/0x20 [ 49.008156][ T824] ? fpregs_restore_userregs+0x128/0x260 [ 49.015269][ T824] __x64_sys_mount+0xbf/0xd0 [ 49.022250][ T824] x64_sys_call+0x65d/0x9a0 [ 49.028276][ T824] do_syscall_64+0x4c/0xa0 [ 49.033271][ T824] ? clear_bhb_loop+0x30/0x80 [ 49.038632][ T824] ? clear_bhb_loop+0x30/0x80 [ 49.045079][ T824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.052474][ T824] RIP: 0033:0x7f791c79e2d9 [ 49.058402][ T824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.080672][ T824] RSP: 002b:00007f791d613028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.089596][ T824] RAX: ffffffffffffffda RBX: 00007f791ca25fa0 RCX: 00007f791c79e2d9 [ 49.097975][ T824] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 49.106313][ T824] RBP: 00007f791c835888 R08: 0000000000000000 R09: 0000000000000000 [ 49.114479][ T824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.124452][ T824] R13: 00007f791ca26038 R14: 00007f791ca25fa0 R15: 00007ffc0d5fa128 [ 49.133681][ T824] [ 49.151294][ T819] loop3: detected capacity change from 0 to 40427 [ 49.165908][ T824] proc_fill_super: can't allocate /proc/self [ 49.166290][ T819] F2FS-fs (loop3): Invalid log sectors per block(24) log sectorsize(9) [ 49.191775][ T819] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.216640][ T819] F2FS-fs (loop3): invalid crc value [ 49.284324][ T844] loop1: detected capacity change from 0 to 512 [ 49.298305][ T819] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.310234][ T850] loop2: detected capacity change from 0 to 16 [ 49.329184][ T850] erofs: (device loop2): mounted with root inode @ nid 36. [ 49.345598][ T844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.396993][ T844] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.402977][ T819] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 49.424589][ T864] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.434426][ T819] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.455683][ T844] EXT4-fs error (device loop1): ext4_resize_begin:62: comm syz.1.184: resize_inode disabled but reserved GDT blocks non-zero [ 49.522580][ T862] loop2: detected capacity change from 0 to 1024 [ 49.538490][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 49.538515][ T28] audit: type=1400 audit(1791905228.382:240): avc: denied { ioctl } for pid=867 comm="syz.5.192" path="pid:[4026532298]" dev="nsfs" ino=4026532298 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.650863][ T862] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.808793][ T844] EXT4-fs (loop1): Remounting filesystem read-only [ 49.840478][ T288] EXT4-fs (loop1): unmounting filesystem. [ 49.910322][ T862] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 49.910322][ T862] [ 49.927965][ T862] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 49.943191][ T880] cgroup: Need name or subsystem set [ 50.643157][ T905] raw_sendmsg: syz.5.207 forgot to set AF_INET. Fix it! [ 50.654216][ T28] audit: type=1400 audit(1791905229.452:241): avc: denied { bind } for pid=898 comm="syz.5.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.719229][ T28] audit: type=1400 audit(1791905229.452:242): avc: denied { setopt } for pid=898 comm="syz.5.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.789026][ T28] audit: type=1400 audit(1791905229.462:243): avc: denied { read } for pid=892 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.824186][ T28] audit: type=1400 audit(1791905229.542:244): avc: denied { search } for pid=899 comm="syz.2.206" name="/" dev="configfs" ino=11658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.996244][ T937] FAULT_INJECTION: forcing a failure. [ 51.996244][ T937] name failslab, interval 1, probability 0, space 0, times 0 [ 52.051690][ T937] CPU: 0 PID: 937 Comm: syz.3.216 Not tainted syzkaller #0 [ 52.059944][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 52.071177][ T937] Call Trace: [ 52.074769][ T937] [ 52.078943][ T937] __dump_stack+0x21/0x24 [ 52.083925][ T937] dump_stack_lvl+0x110/0x170 [ 52.089190][ T937] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.095341][ T937] dump_stack+0x15/0x24 [ 52.099557][ T937] should_fail_ex+0x3bf/0x510 [ 52.104621][ T937] __should_failslab+0xac/0xf0 [ 52.109529][ T937] should_failslab+0x9/0x20 [ 52.114922][ T937] __kmem_cache_alloc_node+0x3d/0x2d0 [ 52.121440][ T937] ? kvm_dev_ioctl+0x964/0x1200 [ 52.127644][ T937] ? kasan_save_alloc_info+0x1f/0x30 [ 52.133336][ T937] ? kvm_dev_ioctl+0x964/0x1200 [ 52.140593][ T937] kmalloc_trace+0x29/0xb0 [ 52.145478][ T937] kvm_dev_ioctl+0x964/0x1200 [ 52.150682][ T937] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 52.156435][ T937] ? security_file_ioctl+0x95/0xc0 [ 52.162286][ T937] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 52.168119][ T937] __se_sys_ioctl+0x12f/0x1b0 [ 52.173242][ T937] __x64_sys_ioctl+0x7b/0x90 [ 52.178300][ T937] x64_sys_call+0x58b/0x9a0 [ 52.183214][ T937] do_syscall_64+0x4c/0xa0 [ 52.188179][ T937] ? clear_bhb_loop+0x30/0x80 [ 52.193754][ T937] ? clear_bhb_loop+0x30/0x80 [ 52.198850][ T937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.205117][ T937] RIP: 0033:0x7fb00139e2d9 [ 52.209817][ T937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.231169][ T937] RSP: 002b:00007fb0021e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.239774][ T937] RAX: ffffffffffffffda RBX: 00007fb001625fa0 RCX: 00007fb00139e2d9 [ 52.248621][ T937] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 52.257295][ T937] RBP: 00007fb001435888 R08: 0000000000000000 R09: 0000000000000000 [ 52.265476][ T937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.273763][ T937] R13: 00007fb001626038 R14: 00007fb001625fa0 R15: 00007ffd472a1e78 [ 52.282117][ T937] [ 52.315512][ T945] loop1: detected capacity change from 0 to 4096 [ 52.332011][ T945] EXT4-fs: Ignoring removed nobh option [ 52.368959][ T945] EXT4-fs: Ignoring removed bh option [ 52.389447][ T945] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.406459][ T945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.418767][ T28] audit: type=1400 audit(1791905231.262:245): avc: denied { create } for pid=942 comm="syz.1.220" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.441761][ T945] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 52.463439][ T950] loop3: detected capacity change from 0 to 256 [ 52.476908][ T28] audit: type=1400 audit(1791905231.322:246): avc: denied { remount } for pid=942 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.496498][ T945] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 52.497603][ T28] audit: type=1400 audit(1791905231.322:247): avc: denied { getopt } for pid=951 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.535979][ T28] audit: type=1400 audit(1791905231.372:248): avc: denied { mount } for pid=947 comm="syz.3.221" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.552498][ T954] loop4: detected capacity change from 0 to 512 [ 52.561823][ T28] audit: type=1400 audit(1791905231.402:249): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.591340][ T288] EXT4-fs (loop1): unmounting filesystem. [ 52.752750][ T202] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.941729][ T202] usb 6-1: Using ep0 maxpacket: 16 [ 52.960820][ T202] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.981964][ T202] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.993721][ T202] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.012155][ T202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.020524][ T202] usb 6-1: Product: syz [ 53.025980][ T202] usb 6-1: Manufacturer: syz [ 53.036258][ T202] usb 6-1: SerialNumber: syz [ 53.255983][ T202] usb 6-1: 0:2 : does not exist [ 53.265462][ T202] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 53.286156][ T202] usb 6-1: USB disconnect, device number 3 [ 53.310687][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.677592][ T1011] loop2: detected capacity change from 0 to 1024 [ 53.775414][ T338] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.084868][ T1038] loop1: detected capacity change from 0 to 128 [ 54.156374][ T1042] futex_wake_op: syz.4.258 tries to shift op by -1; fix this program [ 54.911736][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 54.911766][ T28] audit: type=1400 audit(1791905233.252:265): avc: denied { mount } for pid=1052 comm="syz.2.262" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 55.212973][ T28] audit: type=1400 audit(1791905234.062:266): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 55.282398][ T28] audit: type=1400 audit(1791905234.122:267): avc: denied { block_suspend } for pid=1075 comm="syz.4.269" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.356054][ T1080] loop4: detected capacity change from 0 to 256 [ 55.365559][ T28] audit: type=1400 audit(1791905234.212:268): avc: denied { bind } for pid=1067 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.416661][ T28] audit: type=1400 audit(1791905234.212:269): avc: denied { name_bind } for pid=1067 comm="syz.1.266" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.589804][ T28] audit: type=1400 audit(1791905234.212:270): avc: denied { node_bind } for pid=1067 comm="syz.1.266" saddr=172.20.20.170 src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 55.767686][ T28] audit: type=1400 audit(1791905234.312:271): avc: denied { ioctl } for pid=1086 comm="syz.3.273" path="socket:[18392]" dev="sockfs" ino=18392 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.907868][ T28] audit: type=1400 audit(1791905234.382:272): avc: denied { create } for pid=1084 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.951911][ T28] audit: type=1400 audit(1791905234.382:273): avc: denied { sys_admin } for pid=1084 comm="syz.2.272" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 55.975703][ T28] audit: type=1400 audit(1791905234.402:274): avc: denied { remount } for pid=1084 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.426945][ T8] device bridge_slave_1 left promiscuous mode [ 56.445868][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.464430][ T8] device bridge_slave_0 left promiscuous mode [ 56.478253][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.499389][ T8] device veth1_macvtap left promiscuous mode [ 56.511923][ T8] device veth0_vlan left promiscuous mode [ 56.831455][ T1116] loop0: detected capacity change from 0 to 3904 [ 56.923716][ T1116] loop0: [ 57.171223][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.179693][ T1126] loop4: detected capacity change from 0 to 512 [ 57.198869][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.212994][ T1126] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.287: bad orphan inode 13 [ 57.222018][ T1100] device bridge_slave_0 entered promiscuous mode [ 57.231215][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.239114][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.249263][ T1100] device bridge_slave_1 entered promiscuous mode [ 57.260561][ T1131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.263188][ T1126] ext4_test_bit(bit=12, block=4) = 1 [ 57.274781][ T1126] is_bad_inode(inode)=0 [ 57.279673][ T1126] NEXT_ORPHAN(inode)=0 [ 57.301834][ T1126] max_ino=32 [ 57.305388][ T1126] i_nlink=1 [ 57.309447][ T1126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.368966][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.376361][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.384118][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.391425][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.531375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.590517][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.591384][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.000240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.039825][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.046968][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.071542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.081162][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.088426][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.124207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.133970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.149790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.180866][ T287] EXT4-fs (loop4): unmounting filesystem. [ 58.187387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.216124][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.232310][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.249773][ T1100] device veth0_vlan entered promiscuous mode [ 58.258262][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.289083][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.319328][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.348727][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.370853][ T1168] loop4: detected capacity change from 0 to 1024 [ 58.385693][ T1100] device veth1_macvtap entered promiscuous mode [ 58.393498][ T1172] loop3: detected capacity change from 0 to 1024 [ 58.397395][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.412937][ T1168] ext3: Unknown parameter 'nouser_xattr' [ 58.429195][ T1172] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.435282][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.442037][ T338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.460215][ T1172] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 58.472215][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.489434][ T1172] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 58.500234][ T1172] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.305: blocks 2-3 from inode overlap system zone [ 58.514751][ T1172] EXT4-fs (loop3): failed to initialize system zone (-117) [ 58.522324][ T1172] EXT4-fs (loop3): mount failed [ 58.547023][ T1176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.307'. [ 58.587741][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 58.589351][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.606667][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 58.610767][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.619725][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 58.650228][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.655570][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 58.668940][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.486198][ T1213] pit: kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 59.532298][ T1213] pit: kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 59.549375][ T1221] netlink: 'syz.5.322': attribute type 4 has an invalid length. [ 59.552292][ T1213] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 59.569259][ T1213] pit: kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 59.579391][ T1213] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 59.588534][ T1213] pit: kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 59.597904][ T1213] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 59.607255][ T1213] pit: kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 59.617181][ T1213] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 59.627794][ T1213] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 59.801334][ T1242] FAULT_INJECTION: forcing a failure. [ 59.801334][ T1242] name failslab, interval 1, probability 0, space 0, times 0 [ 59.817678][ T1242] CPU: 0 PID: 1242 Comm: syz.5.337 Not tainted syzkaller #0 [ 59.821268][ T1241] FAULT_INJECTION: forcing a failure. [ 59.821268][ T1241] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.825384][ T1242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.825404][ T1242] Call Trace: [ 59.825410][ T1242] [ 59.825418][ T1242] __dump_stack+0x21/0x24 [ 59.825452][ T1242] dump_stack_lvl+0x110/0x170 [ 59.825477][ T1242] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.825502][ T1242] ? __cfi_avc_has_perm+0x10/0x10 [ 59.878313][ T1242] dump_stack+0x15/0x24 [ 59.882609][ T1242] should_fail_ex+0x3bf/0x510 [ 59.887314][ T1242] __should_failslab+0xac/0xf0 [ 59.892403][ T1242] should_failslab+0x9/0x20 [ 59.897817][ T1242] __kmem_cache_alloc_node+0x3d/0x2d0 [ 59.903512][ T1242] ? __request_module+0x2a7/0x910 [ 59.908571][ T1242] ? __request_module+0x2a7/0x910 [ 59.913704][ T1242] kmalloc_trace+0x29/0xb0 [ 59.918802][ T1242] ? blk_request_module+0x14c/0x2a0 [ 59.924392][ T1242] __request_module+0x2a7/0x910 [ 59.930157][ T1242] ? detach_entity_load_avg+0x790/0x790 [ 59.935737][ T1242] ? __cfi___request_module+0x10/0x10 [ 59.941122][ T1242] ? find_inode_fast+0x334/0x3f0 [ 59.946273][ T1242] ? __kasan_check_write+0x14/0x20 [ 59.951952][ T1242] ? mutex_unlock+0x8f/0x230 [ 59.956835][ T1242] ? __cfi_mutex_unlock+0x10/0x10 [ 59.962762][ T1242] ? _raw_spin_lock+0x94/0xf0 [ 59.967646][ T1242] ? __cfi__raw_spin_lock+0x10/0x10 [ 59.973053][ T1242] ? __cfi_sscanf+0x10/0x10 [ 59.978172][ T1242] blk_request_module+0x14c/0x2a0 [ 59.983764][ T1242] blkdev_get_no_open+0x3a/0xd0 [ 59.989111][ T1242] blkcg_conf_open_bdev+0x1c8/0x2b0 [ 59.994702][ T1242] ? __cfi_blkcg_conf_open_bdev+0x10/0x10 [ 60.000469][ T1242] ? stack_trace_save+0xa6/0xf0 [ 60.005616][ T1242] blkg_conf_prep+0x40/0xaf0 [ 60.010416][ T1242] ? kasan_set_track+0x60/0x70 [ 60.015226][ T1242] ? kasan_set_track+0x4b/0x70 [ 60.020863][ T1242] ? kasan_save_alloc_info+0x1f/0x30 [ 60.026504][ T1242] ? __kasan_kmalloc+0x95/0xb0 [ 60.031706][ T1242] ? __kmalloc+0xb4/0x1e0 [ 60.036074][ T1242] ? kernfs_fop_write_iter+0x152/0x470 [ 60.041647][ T1242] tg_set_conf+0xde/0x3d0 [ 60.046131][ T1242] ? tg_prfill_conf_u64+0x80/0x80 [ 60.051271][ T1242] tg_set_conf_uint+0x27/0x30 [ 60.057021][ T1242] ? __cfi_tg_set_conf_uint+0x10/0x10 [ 60.062434][ T1242] cgroup_file_write+0x2a2/0x590 [ 60.067678][ T1242] ? __cfi_cgroup_file_write+0x10/0x10 [ 60.073432][ T1242] ? mutex_lock+0x93/0x1b0 [ 60.077906][ T1242] ? __cfi_mutex_lock+0x10/0x10 [ 60.084224][ T1242] ? __kasan_check_write+0x14/0x20 [ 60.090977][ T1242] ? __cfi_cgroup_file_write+0x10/0x10 [ 60.096578][ T1242] kernfs_fop_write_iter+0x307/0x470 [ 60.102868][ T1242] vfs_write+0x5ef/0xd00 [ 60.107252][ T1242] ? __cfi_vfs_write+0x10/0x10 [ 60.112846][ T1242] ? __cfi_mutex_lock+0x10/0x10 [ 60.118658][ T1242] ? __fdget_pos+0x2cd/0x380 [ 60.124682][ T1242] ? ksys_write+0x70/0x260 [ 60.130454][ T1242] ksys_write+0x14a/0x260 [ 60.135148][ T1242] ? __cfi_ksys_write+0x10/0x10 [ 60.140649][ T1242] ? fpregs_restore_userregs+0x128/0x260 [ 60.146498][ T1242] __x64_sys_write+0x7b/0x90 [ 60.151554][ T1242] x64_sys_call+0x27b/0x9a0 [ 60.156599][ T1242] do_syscall_64+0x4c/0xa0 [ 60.162103][ T1242] ? clear_bhb_loop+0x30/0x80 [ 60.167947][ T1242] ? clear_bhb_loop+0x30/0x80 [ 60.172720][ T1242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.178914][ T1242] RIP: 0033:0x7f511db9e2d9 [ 60.183521][ T1242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.204573][ T1242] RSP: 002b:00007f511ea76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.213348][ T1242] RAX: ffffffffffffffda RBX: 00007f511de25fa0 RCX: 00007f511db9e2d9 [ 60.221814][ T1242] RDX: 0000000000000006 RSI: 00002000000002c0 RDI: 0000000000000003 [ 60.230425][ T1242] RBP: 00007f511dc35888 R08: 0000000000000000 R09: 0000000000000000 [ 60.238657][ T1242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.249074][ T1242] R13: 00007f511de26038 R14: 00007f511de25fa0 R15: 00007fff992d3f48 [ 60.257395][ T1242] [ 60.260616][ T1241] CPU: 1 PID: 1241 Comm: syz.3.329 Not tainted syzkaller #0 [ 60.269373][ T1241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.281059][ T1241] Call Trace: [ 60.284923][ T1241] [ 60.288233][ T1241] __dump_stack+0x21/0x24 [ 60.292745][ T1241] dump_stack_lvl+0x110/0x170 [ 60.297822][ T1241] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.303501][ T1241] dump_stack+0x15/0x24 [ 60.307879][ T1241] should_fail_ex+0x3bf/0x510 [ 60.313165][ T1241] should_fail+0xb/0x10 [ 60.317638][ T1241] should_fail_usercopy+0x1a/0x20 [ 60.322896][ T1241] _copy_from_user+0x1e/0xc0 [ 60.327543][ T1241] strndup_user+0xb6/0x150 [ 60.332092][ T1241] __se_sys_mount+0xdf/0x390 [ 60.336886][ T1241] ? __this_cpu_preempt_check+0x13/0x20 [ 60.342559][ T1241] ? __x64_sys_mount+0xd0/0xd0 [ 60.347352][ T1241] ? __kasan_check_write+0x14/0x20 [ 60.353079][ T1241] ? fpregs_restore_userregs+0x128/0x260 [ 60.358919][ T1241] __x64_sys_mount+0xbf/0xd0 [ 60.363538][ T1241] x64_sys_call+0x65d/0x9a0 [ 60.368058][ T1241] do_syscall_64+0x4c/0xa0 [ 60.372685][ T1241] ? clear_bhb_loop+0x30/0x80 [ 60.377388][ T1241] ? clear_bhb_loop+0x30/0x80 [ 60.382346][ T1241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.388906][ T1241] RIP: 0033:0x7fb00139e2d9 [ 60.394394][ T1241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.416485][ T1241] RSP: 002b:00007fb0021e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.425554][ T1241] RAX: ffffffffffffffda RBX: 00007fb001625fa0 RCX: 00007fb00139e2d9 [ 60.435018][ T1241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 60.444682][ T1241] RBP: 00007fb001435888 R08: 0000000000000000 R09: 0000000000000000 [ 60.453520][ T1241] R10: 0000000000114000 R11: 0000000000000246 R12: 0000000000000000 [ 60.462602][ T1241] R13: 00007fb001626038 R14: 00007fb001625fa0 R15: 00007ffd472a1e78 [ 60.471297][ T1241] [ 60.701504][ T1267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.339'. [ 60.808712][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 60.808729][ T28] audit: type=1400 audit(1791905239.652:284): avc: denied { setopt } for pid=1281 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.857668][ T1284] FAULT_INJECTION: forcing a failure. [ 60.857668][ T1284] name failslab, interval 1, probability 0, space 0, times 0 [ 60.876885][ T1284] CPU: 1 PID: 1284 Comm: syz.2.346 Not tainted syzkaller #0 [ 60.885723][ T1284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.896728][ T1284] Call Trace: [ 60.900413][ T1284] [ 60.903686][ T1284] __dump_stack+0x21/0x24 [ 60.909740][ T1284] dump_stack_lvl+0x110/0x170 [ 60.915782][ T1284] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.921485][ T1284] dump_stack+0x15/0x24 [ 60.926310][ T1284] should_fail_ex+0x3bf/0x510 [ 60.931236][ T1284] __should_failslab+0xac/0xf0 [ 60.936051][ T1284] should_failslab+0x9/0x20 [ 60.940950][ T1284] __kmem_cache_alloc_node+0x3d/0x2d0 [ 60.946499][ T1284] ? security_prepare_creds+0x4e/0x150 [ 60.952020][ T1284] ? security_prepare_creds+0x4e/0x150 [ 60.958434][ T1284] __kmalloc+0xa4/0x1e0 [ 60.963033][ T1284] security_prepare_creds+0x4e/0x150 [ 60.968807][ T1284] prepare_creds+0x428/0x610 [ 60.975059][ T1284] __sys_setreuid+0x104/0x980 [ 60.980426][ T1284] ? fpregs_restore_userregs+0x128/0x260 [ 60.988656][ T1284] __x64_sys_setreuid+0x5a/0x70 [ 60.994718][ T1284] x64_sys_call+0x37e/0x9a0 [ 60.999982][ T1284] do_syscall_64+0x4c/0xa0 [ 61.005049][ T1284] ? clear_bhb_loop+0x30/0x80 [ 61.010136][ T1284] ? clear_bhb_loop+0x30/0x80 [ 61.015429][ T1284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.021544][ T1284] RIP: 0033:0x7fbb0579e2d9 [ 61.026261][ T1284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.047218][ T1284] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 61.057355][ T1284] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 61.066469][ T1284] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 61.075813][ T1284] RBP: 00007fbb05835888 R08: 0000000000000000 R09: 0000000000000000 [ 61.085683][ T1284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.097014][ T1284] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 61.107540][ T1284] [ 61.112706][ T583] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.151779][ T202] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.212396][ T1296] loop2: detected capacity change from 0 to 512 [ 61.223826][ T28] audit: type=1400 audit(1791905240.072:285): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.343312][ T583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.355997][ T583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.394739][ T583] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 61.444552][ T583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.460958][ T28] audit: type=1400 audit(1791905240.302:286): avc: denied { name_bind } for pid=1297 comm="syz.1.353" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.611695][ T202] usb 5-1: Using ep0 maxpacket: 32 [ 61.622623][ T202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.641696][ T202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.661698][ T202] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.689642][ T202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.715199][ T202] usb 5-1: config 0 descriptor?? [ 61.729791][ T202] hub 5-1:0.0: USB hub found [ 61.983509][ T583] usb 6-1: config 0 descriptor?? [ 61.991822][ T202] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 61.995973][ T1303] loop2: detected capacity change from 0 to 1024 [ 62.011547][ T1303] EXT4-fs: Ignoring removed bh option [ 62.033436][ T1303] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 62.046164][ T28] audit: type=1400 audit(1791905240.892:287): avc: denied { create } for pid=1302 comm="syz.2.354" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.068798][ T28] audit: type=1400 audit(1791905240.892:288): avc: denied { read write } for pid=1302 comm="syz.2.354" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.093745][ T28] audit: type=1400 audit(1791905240.892:289): avc: denied { open } for pid=1302 comm="syz.2.354" path="/10/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.120828][ T1100] EXT4-fs (loop2): unmounting filesystem. [ 62.205393][ T202] usbhid 5-1:0.0: can't add hid device: -71 [ 62.212687][ T202] usbhid: probe of 5-1:0.0 failed with error -71 [ 62.252022][ T202] usb 5-1: USB disconnect, device number 4 [ 62.265389][ T1322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.361'. [ 62.290483][ T1324] loop3: detected capacity change from 0 to 512 [ 62.309635][ T1324] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.318413][ T1324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 62.327356][ T1324] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.334440][ T1324] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.340848][ T1324] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 62.351403][ T1324] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.367284][ T1324] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 62.375084][ T1324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.362: bg 0: block 40: padding at end of block bitmap is not set [ 62.391435][ T1324] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 62.392525][ T583] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 62.401187][ T1324] EXT4-fs (loop3): 1 truncate cleaned up [ 62.409077][ T794] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.416286][ T1324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.441848][ T583] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 62.458234][ T583] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 62.468333][ T1324] EXT4-fs (loop3): shut down requested (1) [ 62.475468][ T28] audit: type=1400 audit(1791905241.322:290): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.501484][ T28] audit: type=1400 audit(1791905241.322:291): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.524329][ T28] audit: type=1400 audit(1791905241.322:292): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.546902][ T289] EXT4-fs (loop3): unmounting filesystem. [ 62.592253][ T583] hid-led: probe of 0003:1D34:000A.0002 failed with error -71 [ 62.603850][ T583] usb 6-1: USB disconnect, device number 4 [ 62.651891][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 62.662031][ T794] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 62.670389][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.683751][ T794] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 62.706154][ T1331] loop3: detected capacity change from 0 to 256 [ 62.728783][ T1331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 62.886214][ T794] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 63.011671][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 63.028613][ T794] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 63.041840][ T794] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 63.049538][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 63.064869][ T794] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 63.088093][ T794] usb 3-1: string descriptor 0 read error: -22 [ 63.101409][ T794] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 63.110824][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.320211][ T1355] loop1: detected capacity change from 0 to 512 [ 63.328429][ T794] usb 3-1: USB disconnect, device number 6 [ 63.329649][ T1355] EXT4-fs: Ignoring removed bh option [ 63.344179][ T1355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.364535][ T1355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.374398][ T1355] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.480182][ T1362] FAULT_INJECTION: forcing a failure. [ 63.480182][ T1362] name failslab, interval 1, probability 0, space 0, times 0 [ 63.494022][ T1362] CPU: 0 PID: 1362 Comm: syz.3.373 Not tainted syzkaller #0 [ 63.501608][ T1362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.501720][ T583] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.513865][ T1362] Call Trace: [ 63.513881][ T1362] [ 63.513890][ T1362] __dump_stack+0x21/0x24 [ 63.513926][ T1362] dump_stack_lvl+0x110/0x170 [ 63.513949][ T1362] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.513973][ T1362] ? kasan_save_alloc_info+0x1f/0x30 [ 63.550587][ T1362] dump_stack+0x15/0x24 [ 63.554961][ T1362] should_fail_ex+0x3bf/0x510 [ 63.560096][ T1362] __should_failslab+0xac/0xf0 [ 63.565056][ T1362] should_failslab+0x9/0x20 [ 63.570448][ T1362] slab_pre_alloc_hook+0x30/0x1d0 [ 63.575656][ T1362] ? __d_alloc+0x4c6/0x6d0 [ 63.580275][ T1362] kmem_cache_alloc_lru+0x49/0x280 [ 63.585650][ T1362] ? new_inode_pseudo+0x8f/0x1f0 [ 63.591059][ T1362] ? __d_rehash+0x1b4/0x210 [ 63.595677][ T1362] new_inode_pseudo+0x8f/0x1f0 [ 63.600490][ T1362] new_inode+0x28/0x1e0 [ 63.604939][ T1362] fuse_ctl_add_dentry+0x93/0x470 [ 63.610566][ T1362] fuse_ctl_add_conn+0x26a/0x370 [ 63.615535][ T1362] ? __cfi_fuse_ctl_add_conn+0x10/0x10 [ 63.621279][ T1362] ? mutex_lock+0x93/0x1b0 [ 63.626004][ T1362] ? _raw_spin_unlock+0x4c/0x70 [ 63.634114][ T1362] fuse_fill_super_common+0x11bf/0x19c0 [ 63.640061][ T1362] fuse_fill_super+0x6d/0x250 [ 63.646441][ T1362] get_tree_nodev+0xc4/0x170 [ 63.651308][ T1362] ? __cfi_fuse_fill_super+0x10/0x10 [ 63.657227][ T1362] fuse_get_tree+0x2e9/0x4f0 [ 63.662554][ T1362] vfs_get_tree+0x9a/0x270 [ 63.667313][ T1362] do_new_mount+0x251/0xb40 [ 63.673052][ T1362] ? security_capable+0x99/0xc0 [ 63.680356][ T1362] path_mount+0x640/0xfd0 [ 63.686960][ T1362] __se_sys_mount+0x320/0x390 [ 63.692421][ T1362] ? __this_cpu_preempt_check+0x13/0x20 [ 63.698279][ T1362] ? __x64_sys_mount+0xd0/0xd0 [ 63.704376][ T1362] ? __kasan_check_write+0x14/0x20 [ 63.710258][ T1362] ? fpregs_restore_userregs+0x128/0x260 [ 63.716799][ T1362] __x64_sys_mount+0xbf/0xd0 [ 63.721912][ T1362] x64_sys_call+0x65d/0x9a0 [ 63.727168][ T1362] do_syscall_64+0x4c/0xa0 [ 63.732075][ T1362] ? clear_bhb_loop+0x30/0x80 [ 63.736875][ T1362] ? clear_bhb_loop+0x30/0x80 [ 63.741705][ T1362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.748046][ T1362] RIP: 0033:0x7fb00139e2d9 [ 63.752476][ T1362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.752873][ T583] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.773769][ T1362] RSP: 002b:00007fb0021e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.773802][ T1362] RAX: ffffffffffffffda RBX: 00007fb001625fa0 RCX: 00007fb00139e2d9 [ 63.773816][ T1362] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 63.773827][ T1362] RBP: 00007fb001435888 R08: 00002000000004c0 R09: 0000000000000000 [ 63.773838][ T1362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.773848][ T1362] R13: 00007fb001626038 R14: 00007fb001625fa0 R15: 00007ffd472a1e78 [ 63.773864][ T1362] [ 63.839301][ T288] EXT4-fs (loop1): unmounting filesystem. [ 63.843061][ T583] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.847894][ T202] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.867029][ T583] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.915666][ T583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.932334][ T583] usb 5-1: SerialNumber: syz [ 64.052811][ T202] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.064051][ T202] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.074522][ T202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.091167][ T202] usb 6-1: config 0 descriptor?? [ 64.147445][ T583] usb 5-1: invalid UAC_HEADER (v1) [ 64.155327][ T583] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 64.166549][ T583] usb 5-1: USB disconnect, device number 5 [ 64.173386][ T1385] random: crng reseeded on system resumption [ 64.201039][ T1385] Unrecognized hibernate image header format! [ 64.208351][ T1385] PM: hibernation: Image mismatch: architecture specific data [ 64.334200][ T1392] FAULT_INJECTION: forcing a failure. [ 64.334200][ T1392] name failslab, interval 1, probability 0, space 0, times 0 [ 64.349922][ T1392] CPU: 0 PID: 1392 Comm: syz.2.385 Not tainted syzkaller #0 [ 64.357693][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.368309][ T1392] Call Trace: [ 64.371735][ T1392] [ 64.374771][ T1392] __dump_stack+0x21/0x24 [ 64.379295][ T1392] dump_stack_lvl+0x110/0x170 [ 64.384197][ T1392] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.389496][ T1392] dump_stack+0x15/0x24 [ 64.393760][ T1392] should_fail_ex+0x3bf/0x510 [ 64.399503][ T1392] __should_failslab+0xac/0xf0 [ 64.404473][ T1392] should_failslab+0x9/0x20 [ 64.409160][ T1392] __kmem_cache_alloc_node+0x3d/0x2d0 [ 64.415834][ T1392] ? kvm_dev_ioctl+0xa54/0x1200 [ 64.420726][ T1392] ? kasan_save_alloc_info+0x1f/0x30 [ 64.426491][ T1392] ? kvm_dev_ioctl+0xa54/0x1200 [ 64.431601][ T1392] kmalloc_trace+0x29/0xb0 [ 64.436142][ T1392] kvm_dev_ioctl+0xa54/0x1200 [ 64.440921][ T1392] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 64.446520][ T1392] ? security_file_ioctl+0x95/0xc0 [ 64.452103][ T1392] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 64.457692][ T1392] __se_sys_ioctl+0x12f/0x1b0 [ 64.462674][ T1392] __x64_sys_ioctl+0x7b/0x90 [ 64.467493][ T1392] x64_sys_call+0x58b/0x9a0 [ 64.472394][ T1392] do_syscall_64+0x4c/0xa0 [ 64.477114][ T1392] ? clear_bhb_loop+0x30/0x80 [ 64.482458][ T1392] ? clear_bhb_loop+0x30/0x80 [ 64.487460][ T1392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.493741][ T1392] RIP: 0033:0x7fbb0579e2d9 [ 64.498693][ T1392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.520916][ T1392] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.531236][ T1392] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 64.539672][ T1392] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 64.548720][ T1392] RBP: 00007fbb05835888 R08: 0000000000000000 R09: 0000000000000000 [ 64.557216][ T1392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.565975][ T1392] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 64.574823][ T1392] [ 64.579156][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.822549][ T1417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 64.916706][ T1427] loop4: detected capacity change from 0 to 1024 [ 65.138203][ T1427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.386135][ T287] EXT4-fs (loop4): unmounting filesystem. [ 65.503644][ T1440] device syzkaller0 entered promiscuous mode [ 65.515656][ T1440] tipc: Started in network mode [ 65.521003][ T1440] tipc: Node identity e2fbfea76272, cluster identity 4711 [ 65.529071][ T1440] tipc: Enabled bearer , priority 0 [ 65.542777][ T1429] loop3: detected capacity change from 0 to 40427 [ 65.563969][ T1429] F2FS-fs (loop3): invalid crc value [ 65.570616][ T1429] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.614281][ T1447] loop4: detected capacity change from 0 to 512 [ 65.622539][ T1447] EXT4-fs: Ignoring removed oldalloc option [ 65.634079][ T1429] F2FS-fs (loop3): Start checkpoint disabled! [ 65.642452][ T1429] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 65.645835][ T1447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.650692][ T1429] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 65.789823][ T1456] futex_wake_op: syz.3.407 tries to shift op by -1; fix this program [ 65.802684][ T793] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 66.013125][ T793] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.032376][ T793] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 66.045567][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.056618][ T793] usb 3-1: Product: syz [ 66.062404][ T793] usb 3-1: Manufacturer: syz [ 66.068328][ T793] usb 3-1: SerialNumber: syz [ 66.279693][ T1439] tipc: Resetting bearer [ 66.293758][ T1439] tipc: Disabling bearer [ 66.332715][ T793] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 66.345192][ T793] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 66.353740][ T793] usb 3-1: unit 1 not found! [ 66.369240][ T793] usb 3-1: USB disconnect, device number 7 [ 66.377378][ T6] usb 6-1: USB disconnect, device number 5 [ 66.437937][ T1501] loop1: detected capacity change from 0 to 256 [ 66.457271][ T1501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1501 comm=syz.1.431 [ 66.468488][ T287] EXT4-fs (loop4): unmounting filesystem. [ 66.502244][ T1503] loop4: detected capacity change from 0 to 512 [ 66.514364][ T1503] EXT4-fs: Ignoring removed nobh option [ 66.543568][ T1503] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #3: comm syz.4.423: corrupted inode contents [ 66.560545][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 66.560566][ T28] audit: type=1400 audit(1791905245.392:312): avc: denied { read write } for pid=1508 comm="syz.1.426" name="report_desc" dev="configfs" ino=22109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 66.563546][ T1503] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #3: comm syz.4.423: mark_inode_dirty error [ 66.570167][ T28] audit: type=1400 audit(1791905245.392:313): avc: denied { open } for pid=1508 comm="syz.1.426" path="/92/config/usb_gadget/g1/functions/hid.usb0/report_desc" dev="configfs" ino=22109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 66.603170][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.612428][ T1503] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #3: comm syz.4.423: corrupted inode contents [ 66.671708][ T28] audit: type=1400 audit(1791905245.512:314): avc: denied { shutdown } for pid=1512 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.703473][ T1503] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.423: mark_inode_dirty error [ 66.719087][ T1503] Quota error (device loop4): write_blk: dquota write failed [ 66.728554][ T1503] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 66.728651][ T28] audit: type=1400 audit(1791905245.512:315): avc: denied { read } for pid=1512 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.739195][ T1503] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.423: Failed to acquire dquot type 0 [ 66.771711][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.772190][ T1503] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.423: corrupted inode contents [ 66.791721][ T1503] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #16: comm syz.4.423: mark_inode_dirty error [ 66.805038][ T1503] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.423: corrupted inode contents [ 66.817832][ T1503] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.423: mark_inode_dirty error [ 66.829524][ T1503] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.423: corrupted inode contents [ 66.841717][ T1503] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 66.852763][ T1503] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #16: comm syz.4.423: corrupted inode contents [ 66.865104][ T1503] EXT4-fs error (device loop4): ext4_truncate:4327: inode #16: comm syz.4.423: mark_inode_dirty error [ 66.876541][ T1503] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 66.886738][ T1503] EXT4-fs (loop4): 1 truncate cleaned up [ 66.893854][ T1503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.903460][ T1503] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.930670][ T1515] FAULT_INJECTION: forcing a failure. [ 66.930670][ T1515] name failslab, interval 1, probability 0, space 0, times 0 [ 66.943444][ T1515] CPU: 1 PID: 1515 Comm: syz.2.428 Not tainted syzkaller #0 [ 66.948162][ T28] audit: type=1400 audit(1791905245.792:316): avc: denied { read append } for pid=1502 comm="syz.4.423" path="/77/file0/memory.swap.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.951025][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.951039][ T1515] Call Trace: [ 66.951046][ T1515] [ 66.951053][ T1515] __dump_stack+0x21/0x24 [ 66.977679][ T6] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 66.986797][ T1515] dump_stack_lvl+0x110/0x170 [ 66.986839][ T1515] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.986863][ T1515] ? stack_trace_save+0xa6/0xf0 [ 66.997455][ T6] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 66.999281][ T1515] ? __stack_depot_save+0x36/0x490 [ 67.010997][ T6] usb 6-1: config 220 has no interface number 2 [ 67.014080][ T1515] ? avc_has_perm_noaudit+0x390/0x490 [ 67.014120][ T1515] dump_stack+0x15/0x24 [ 67.014144][ T1515] should_fail_ex+0x3bf/0x510 [ 67.014164][ T1515] __should_failslab+0xac/0xf0 [ 67.019736][ T6] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 67.024550][ T1515] should_failslab+0x9/0x20 [ 67.024584][ T1515] slab_pre_alloc_hook+0x30/0x1d0 [ 67.035161][ T6] usb 6-1: config 220 interface 0 has no altsetting 0 [ 67.040052][ T1515] ? expand_files+0xd0/0x6a0 [ 67.047266][ T6] usb 6-1: config 220 interface 76 has no altsetting 0 [ 67.053278][ T1515] kmem_cache_alloc_lru+0x49/0x280 [ 67.053321][ T1515] ? __d_alloc+0x34/0x6d0 [ 67.058220][ T6] usb 6-1: config 220 interface 1 has no altsetting 0 [ 67.063652][ T1515] __d_alloc+0x34/0x6d0 [ 67.063696][ T1515] ? _raw_spin_lock+0x94/0xf0 [ 67.072200][ T6] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 67.082260][ T1515] d_alloc_pseudo+0x1d/0x70 [ 67.082305][ T1515] alloc_file_pseudo+0xe0/0x200 [ 67.082328][ T1515] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 67.082351][ T1515] anon_inode_getfd+0xd6/0x1d0 [ 67.087364][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.092605][ T1515] __se_sys_timerfd_create+0x302/0x490 [ 67.092647][ T1515] ? __this_cpu_preempt_check+0x13/0x20 [ 67.092673][ T1515] ? __x64_sys_timerfd_create+0x70/0x70 [ 67.100878][ T6] usb 6-1: Product: syz [ 67.105038][ T1515] ? fpregs_restore_userregs+0x128/0x260 [ 67.105070][ T1515] __x64_sys_timerfd_create+0x5b/0x70 [ 67.105098][ T1515] x64_sys_call+0x30e/0x9a0 [ 67.112717][ T6] usb 6-1: Manufacturer: syz [ 67.117960][ T1515] do_syscall_64+0x4c/0xa0 [ 67.122574][ T6] usb 6-1: SerialNumber: syz [ 67.130225][ T1515] ? clear_bhb_loop+0x30/0x80 [ 67.130262][ T1515] ? clear_bhb_loop+0x30/0x80 [ 67.130284][ T1515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.247948][ T1515] RIP: 0033:0x7fbb0579e2d9 [ 67.252476][ T1515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.272553][ T1515] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 67.281269][ T1515] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 67.289265][ T1515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 67.297537][ T1515] RBP: 00007fbb05835888 R08: 0000000000000000 R09: 0000000000000000 [ 67.306051][ T1515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.314343][ T1515] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 67.322512][ T1515] [ 67.330792][ T287] EXT4-fs (loop4): unmounting filesystem. [ 67.439944][ T1531] loop1: detected capacity change from 0 to 1024 [ 67.460335][ T1531] EXT4-fs: Ignoring removed bh option [ 67.464134][ T6] usb 6-1: selecting invalid altsetting 0 [ 67.474427][ T6] usb 6-1: selecting invalid altsetting 0 [ 67.481296][ T6] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 67.488635][ T6] usb 6-1: No valid video chain found. [ 67.492104][ T1536] loop2: detected capacity change from 0 to 512 [ 67.513005][ T6] usb 6-1: USB disconnect, device number 6 [ 67.524003][ T1536] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.525476][ T1531] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.536255][ T1536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.547906][ T28] audit: type=1400 audit(1791905246.392:317): avc: denied { ioctl } for pid=1529 comm="syz.1.434" path="/95/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.576802][ T1536] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.436: bad orphan inode 131083 [ 67.602458][ T1536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.626559][ T288] EXT4-fs (loop1): unmounting filesystem. [ 67.672119][ T1100] EXT4-fs (loop2): unmounting filesystem. [ 67.694127][ T1548] device syzkaller0 entered promiscuous mode [ 67.701251][ T451] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 67.712039][ T1548] tipc: Enabled bearer , priority 0 [ 67.729035][ T1546] tipc: Resetting bearer [ 67.736485][ T1550] fido_id[1550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.739550][ T1552] FAULT_INJECTION: forcing a failure. [ 67.739550][ T1552] name failslab, interval 1, probability 0, space 0, times 0 [ 67.764862][ T1552] CPU: 1 PID: 1552 Comm: syz.4.442 Not tainted syzkaller #0 [ 67.767186][ T1546] tipc: Disabling bearer [ 67.772276][ T1552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.772291][ T1552] Call Trace: [ 67.772297][ T1552] [ 67.772303][ T1552] __dump_stack+0x21/0x24 [ 67.772339][ T1552] dump_stack_lvl+0x110/0x170 [ 67.772365][ T1552] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.809762][ T1552] ? __cfi_futex_wait+0x10/0x10 [ 67.814628][ T1552] dump_stack+0x15/0x24 [ 67.818903][ T1552] should_fail_ex+0x3bf/0x510 [ 67.823596][ T1552] __should_failslab+0xac/0xf0 [ 67.828544][ T1552] should_failslab+0x9/0x20 [ 67.833135][ T1552] __kmem_cache_alloc_node+0x3d/0x2d0 [ 67.838658][ T1552] ? io_ring_ctx_alloc+0x54/0xb00 [ 67.843787][ T1552] ? __cfi_kvmalloc_node+0x10/0x10 [ 67.848917][ T1552] ? io_ring_ctx_alloc+0x54/0xb00 [ 67.854018][ T1552] kmalloc_trace+0x29/0xb0 [ 67.859177][ T1552] io_ring_ctx_alloc+0x54/0xb00 [ 67.864105][ T1552] io_uring_create+0x29a/0xde1 [ 67.869129][ T1552] __x64_sys_io_uring_setup+0x21b/0x230 [ 67.874963][ T1552] ? __kasan_check_write+0x14/0x20 [ 67.880560][ T1552] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 67.887213][ T1552] ? __kasan_check_write+0x14/0x20 [ 67.892868][ T1552] ? fpregs_restore_userregs+0x128/0x260 [ 67.898515][ T1552] ? switch_fpu_return+0xe/0x10 [ 67.903461][ T1552] x64_sys_call+0x4ab/0x9a0 [ 67.908153][ T1552] do_syscall_64+0x4c/0xa0 [ 67.912668][ T1552] ? clear_bhb_loop+0x30/0x80 [ 67.917360][ T1552] ? clear_bhb_loop+0x30/0x80 [ 67.921692][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 67.922038][ T1552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.935861][ T1552] RIP: 0033:0x7f442cd9e2d9 [ 67.940357][ T1552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.963041][ T1552] RSP: 002b:00007f442dc35fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 67.971652][ T1552] RAX: ffffffffffffffda RBX: 0000200000000580 RCX: 00007f442cd9e2d9 [ 67.980292][ T1552] RDX: 0000200000000640 RSI: 0000200000000580 RDI: 0000000000007042 [ 67.981747][ T202] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 67.988455][ T1552] RBP: 00007f442ce35888 R08: 0000000000000000 R09: 0000000000000000 [ 67.988476][ T1552] R10: 0000200000000680 R11: 0000000000000206 R12: 0000200000000640 [ 67.988490][ T1552] R13: 0000200000000680 R14: 0000200000000600 R15: 00007ffc56cdf4c8 [ 67.988509][ T1552] [ 68.072324][ T28] audit: type=1400 audit(1791905246.922:318): avc: denied { append } for pid=1559 comm="syz.4.446" name="uprobe_events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.097367][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 68.108276][ T28] audit: type=1400 audit(1791905246.922:319): avc: denied { setopt } for pid=1562 comm="syz.5.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.121715][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 68.132381][ T1560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1560 comm=syz.4.446 [ 68.147257][ T6] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 68.163914][ T6] usb 2-1: config 0 has no interface number 0 [ 68.185845][ T6] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 68.202780][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.214348][ T202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.231708][ T6] usb 2-1: Product: syz [ 68.236681][ T6] usb 2-1: Manufacturer: syz [ 68.243168][ T202] usb 4-1: config 0 has no interfaces? [ 68.252505][ T202] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 68.264030][ T6] usb 2-1: SerialNumber: syz [ 68.275643][ T202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.288607][ T6] usb 2-1: config 0 descriptor?? [ 68.300421][ T202] usb 4-1: Product: syz [ 68.312035][ T202] usb 4-1: Manufacturer: syz [ 68.318316][ T202] usb 4-1: SerialNumber: syz [ 68.335004][ T202] usb 4-1: config 0 descriptor?? [ 68.548865][ T451] usb 4-1: USB disconnect, device number 5 [ 68.619745][ T1583] FAULT_INJECTION: forcing a failure. [ 68.619745][ T1583] name failslab, interval 1, probability 0, space 0, times 0 [ 68.635255][ T1583] CPU: 1 PID: 1583 Comm: syz.4.454 Not tainted syzkaller #0 [ 68.646553][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.659767][ T1583] Call Trace: [ 68.664026][ T1583] [ 68.668072][ T1583] __dump_stack+0x21/0x24 [ 68.673589][ T1583] dump_stack_lvl+0x110/0x170 [ 68.680435][ T1583] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.685625][ T1583] ? dst_alloc+0x191/0x1e0 [ 68.691902][ T1583] ? ip_route_output_key_hash_rcu+0x13f8/0x2160 [ 68.701010][ T1583] ? ip_route_output_flow+0x143/0x300 [ 68.708643][ T1583] ? __inet_stream_connect+0x267/0xe80 [ 68.715687][ T1583] dump_stack+0x15/0x24 [ 68.721180][ T1583] should_fail_ex+0x3bf/0x510 [ 68.729029][ T1583] ? __inet_hash_connect+0x7ce/0x1fd0 [ 68.734725][ T1583] __should_failslab+0xac/0xf0 [ 68.740942][ T1583] should_failslab+0x9/0x20 [ 68.746995][ T1583] kmem_cache_alloc+0x3b/0x320 [ 68.752872][ T1583] __inet_hash_connect+0x7ce/0x1fd0 [ 68.759366][ T1583] ? __cfi___inet_check_established+0x10/0x10 [ 68.766553][ T1583] ? siphash_2u64+0x25/0x2a0 [ 68.772514][ T1583] ? __cfi___inet_hash_connect+0x10/0x10 [ 68.778907][ T1583] ? secure_ipv4_port_ephemeral+0xcd/0x170 [ 68.785393][ T1583] ? __cfi_secure_ipv4_port_ephemeral+0x10/0x10 [ 68.793511][ T1583] ? percpu_counter_add_batch+0x13c/0x160 [ 68.800410][ T1583] inet_hash_connect+0xb6/0x140 [ 68.808225][ T1583] tcp_v4_connect+0xb91/0x1760 [ 68.814289][ T1583] ? tcp_sendmsg_fastopen+0x1d3/0x600 [ 68.821658][ T1583] ? tcp_sendmsg_locked+0x356d/0x39f0 [ 68.829396][ T1583] ? tcp_sendmsg+0x2f/0x50 [ 68.834574][ T1583] ? __cfi_tcp_v4_connect+0x10/0x10 [ 68.843773][ T1583] __inet_stream_connect+0x267/0xe80 [ 68.850579][ T1583] ? __cfi___inet_stream_connect+0x10/0x10 [ 68.862478][ T1583] ? kasan_save_alloc_info+0x1f/0x30 [ 68.870159][ T1583] ? __kasan_kmalloc+0x95/0xb0 [ 68.876536][ T1583] ? tcp_sendmsg_fastopen+0x1d3/0x600 [ 68.883723][ T1583] ? kmalloc_trace+0x40/0xb0 [ 68.889448][ T1583] tcp_sendmsg_fastopen+0x3ac/0x600 [ 68.895414][ T1583] tcp_sendmsg_locked+0x356d/0x39f0 [ 68.901612][ T1583] ? avc_has_perm+0x163/0x250 [ 68.908552][ T1583] ? __kasan_check_write+0x14/0x20 [ 68.914527][ T1583] ? _raw_spin_lock_bh+0x94/0xf0 [ 68.920011][ T1583] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 68.926550][ T1583] ? __local_bh_enable_ip+0x58/0x80 [ 68.933879][ T1583] ? _raw_spin_unlock_bh+0x50/0x60 [ 68.939801][ T1583] ? lock_sock_nested+0x212/0x290 [ 68.947778][ T1583] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 68.956471][ T1583] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 68.962925][ T1583] tcp_sendmsg+0x2f/0x50 [ 68.968373][ T1583] inet_sendmsg+0xb6/0xd0 [ 68.973662][ T1583] __sys_sendto+0x4ac/0x660 [ 68.981016][ T1583] ? __cfi___sys_sendto+0x10/0x10 [ 68.987895][ T1583] ? __this_cpu_preempt_check+0x13/0x20 [ 68.994957][ T1583] ? xfd_validate_state+0x70/0x150 [ 69.001913][ T1583] ? __kasan_check_write+0x14/0x20 [ 69.008107][ T1583] __x64_sys_sendto+0xe5/0x100 [ 69.014722][ T1583] x64_sys_call+0x83/0x9a0 [ 69.020922][ T1583] do_syscall_64+0x4c/0xa0 [ 69.026510][ T1583] ? clear_bhb_loop+0x30/0x80 [ 69.032165][ T1583] ? clear_bhb_loop+0x30/0x80 [ 69.038254][ T1583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.045220][ T1583] RIP: 0033:0x7f442cd9e2d9 [ 69.051738][ T1583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.077199][ T1583] RSP: 002b:00007f442dc36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.089657][ T1583] RAX: ffffffffffffffda RBX: 00007f442d025fa0 RCX: 00007f442cd9e2d9 [ 69.099243][ T1583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 69.110213][ T1583] RBP: 00007f442ce35888 R08: 0000200000000100 R09: 0000000000000010 [ 69.121711][ T1583] R10: 00000000200047fd R11: 0000000000000246 R12: 0000000000000000 [ 69.132882][ T1583] R13: 00007f442d026038 R14: 00007f442d025fa0 R15: 00007ffc56cdf4c8 [ 69.144023][ T1583] [ 69.193597][ T1586] loop4: detected capacity change from 0 to 256 [ 69.236763][ T1588] loop4: detected capacity change from 0 to 1024 [ 69.289264][ T1594] device syzkaller0 entered promiscuous mode [ 69.379883][ T1597] loop2: detected capacity change from 0 to 256 [ 69.404426][ T1594] tipc: Started in network mode [ 69.413185][ T1594] tipc: Node identity ba8133466e59, cluster identity 4711 [ 69.424886][ T1594] tipc: Enabled bearer , priority 0 [ 70.490870][ T1597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 70.689018][ T1593] tipc: Resetting bearer [ 70.697334][ T1593] tipc: Disabling bearer [ 70.713412][ T202] usb 2-1: USB disconnect, device number 5 [ 70.771337][ T39] tipc: Node number set to 3570938694 [ 70.868382][ T1621] 9pnet_fd: Insufficient options for proto=fd [ 71.007468][ T1634] loop3: detected capacity change from 0 to 2048 [ 71.082638][ T1634] loop3: p1 < > [ 71.159406][ T338] udevd[338]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 71.270374][ T1641] device syzkaller0 entered promiscuous mode [ 71.307183][ T1641] tipc: Started in network mode [ 71.332099][ T1641] tipc: Node identity feeb86e4a2da, cluster identity 4711 [ 71.390523][ T1641] tipc: Enabled bearer , priority 0 [ 71.431011][ T1640] tipc: Resetting bearer [ 71.443164][ T1640] tipc: Disabling bearer [ 71.578713][ T1646] loop3: detected capacity change from 0 to 512 [ 71.624563][ T1646] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.671951][ T1646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 71.735953][ T1646] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.771970][ T1646] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #13: comm syz.3.478: iget: bad i_size value: 12154761577498 [ 71.791961][ T1646] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.478: couldn't read orphan inode 13 (err -117) [ 71.822172][ T1646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.844302][ T1646] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.478: dx entry: limit 65535 != root limit 120 [ 71.877056][ T1646] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.478: Corrupt directory, running e2fsck is recommended [ 71.940931][ T289] EXT4-fs (loop3): unmounting filesystem. [ 71.987127][ T1655] loop3: detected capacity change from 0 to 256 [ 72.327690][ T1667] FAULT_INJECTION: forcing a failure. [ 72.327690][ T1667] name failslab, interval 1, probability 0, space 0, times 0 [ 72.357322][ T1668] loop4: detected capacity change from 0 to 128 [ 72.370118][ T1667] CPU: 1 PID: 1667 Comm: syz.1.486 Not tainted syzkaller #0 [ 72.377755][ T1667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.390619][ T1667] Call Trace: [ 72.395426][ T1667] [ 72.398744][ T1667] __dump_stack+0x21/0x24 [ 72.404010][ T1667] dump_stack_lvl+0x110/0x170 [ 72.409040][ T1667] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.414408][ T1667] ? _raw_spin_lock+0x94/0xf0 [ 72.422155][ T1667] dump_stack+0x15/0x24 [ 72.427542][ T1667] should_fail_ex+0x3bf/0x510 [ 72.433673][ T1667] ? __kernfs_new_node+0xe1/0x670 [ 72.440041][ T1667] __should_failslab+0xac/0xf0 [ 72.448083][ T1667] should_failslab+0x9/0x20 [ 72.453438][ T1667] kmem_cache_alloc+0x3b/0x320 [ 72.459916][ T1667] __kernfs_new_node+0xe1/0x670 [ 72.466142][ T1667] ? kernfs_new_node+0x260/0x260 [ 72.472093][ T1667] ? kernfs_add_one+0x485/0x590 [ 72.477222][ T1667] ? __kernfs_create_file+0x1ff/0x270 [ 72.484590][ T1667] kernfs_new_node+0x150/0x260 [ 72.491315][ T1667] kernfs_create_link+0xa4/0x200 [ 72.497679][ T1667] sysfs_do_create_link_sd+0x8a/0x110 [ 72.504172][ T1667] sysfs_create_link+0x68/0x80 [ 72.510792][ T1667] device_add+0x580/0xec0 [ 72.516342][ T1667] hci_register_dev+0x317/0x960 [ 72.523461][ T1667] hci_uart_tty_ioctl+0x8a7/0xa70 [ 72.529568][ T1667] ? __cfi_hci_uart_tty_ioctl+0x10/0x10 [ 72.535868][ T1667] tty_ioctl+0x8ef/0xc60 [ 72.540816][ T1667] ? __cfi_tty_ioctl+0x10/0x10 [ 72.545820][ T1667] __se_sys_ioctl+0x12f/0x1b0 [ 72.550650][ T1667] __x64_sys_ioctl+0x7b/0x90 [ 72.555502][ T1667] x64_sys_call+0x58b/0x9a0 [ 72.560505][ T1667] do_syscall_64+0x4c/0xa0 [ 72.565072][ T1667] ? clear_bhb_loop+0x30/0x80 [ 72.569976][ T1667] ? clear_bhb_loop+0x30/0x80 [ 72.575745][ T1667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.582137][ T1667] RIP: 0033:0x7f5e89f9e2d9 [ 72.587393][ T1667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.608179][ T1667] RSP: 002b:00007f5e8ae08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.617189][ T1667] RAX: ffffffffffffffda RBX: 00007f5e8a225fa0 RCX: 00007f5e89f9e2d9 [ 72.625332][ T1667] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 72.633695][ T1667] RBP: 00007f5e8a035888 R08: 0000000000000000 R09: 0000000000000000 [ 72.642149][ T1667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.650685][ T1667] R13: 00007f5e8a226038 R14: 00007f5e8a225fa0 R15: 00007ffcd5292998 [ 72.659223][ T1667] [ 72.679328][ T1667] Bluetooth: Can't register HCI device [ 72.707076][ T1668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.717486][ T1668] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.733228][ T1668] syz.4.485 (pid 1668) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 72.766705][ T202] kernel write not supported for file /rfkill (pid: 202 comm: kworker/0:2) [ 72.767803][ T287] EXT4-fs (loop4): unmounting filesystem. [ 73.021842][ T1691] device syzkaller0 entered promiscuous mode [ 73.050019][ T1691] tipc: Enabled bearer , priority 0 [ 73.259552][ T1693] loop2: detected capacity change from 0 to 40427 [ 73.277668][ T1693] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 73.285272][ T202] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.307028][ T1693] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 73.319298][ T1693] F2FS-fs (loop2): invalid crc value [ 73.327127][ T1693] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.341778][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.353828][ T1693] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 73.361400][ T1693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.381697][ T19] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 73.393890][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 73.393908][ T28] audit: type=1400 audit(1791905252.242:321): avc: denied { setattr } for pid=1692 comm="syz.2.496" path="/43/bus" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.491750][ T202] usb 5-1: Using ep0 maxpacket: 8 [ 73.498580][ T202] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 73.510743][ T202] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.521109][ T202] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.532391][ T202] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.576993][ T202] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.586769][ T202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.595795][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.604234][ T202] usb 5-1: Device is not authorized for usage [ 73.616037][ T6] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 73.627543][ T19] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 73.641671][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.652555][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.661547][ T6] usb 4-1: Product: syz [ 73.666150][ T19] usb 6-1: Product: syz [ 73.670728][ T19] usb 6-1: Manufacturer: syz [ 73.676383][ T6] usb 4-1: Manufacturer: syz [ 73.682565][ T19] usb 6-1: SerialNumber: syz [ 73.687396][ T6] usb 4-1: SerialNumber: syz [ 73.804399][ T28] audit: type=1400 audit(1791905252.652:322): avc: denied { nlmsg_read } for pid=1708 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.857782][ T1711] loop1: detected capacity change from 0 to 16 [ 73.875279][ T1711] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.914075][ T1690] tipc: Resetting bearer [ 73.920541][ T6] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 73.928718][ T6] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 73.929013][ T1690] tipc: Disabling bearer [ 73.942351][ T6] usb 4-1: unit 1 not found! [ 73.966051][ T6] usb 4-1: USB disconnect, device number 6 [ 74.132266][ T1720] FAULT_INJECTION: forcing a failure. [ 74.132266][ T1720] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.147697][ T1720] CPU: 0 PID: 1720 Comm: syz.2.506 Not tainted syzkaller #0 [ 74.156202][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.166734][ T1720] Call Trace: [ 74.170418][ T1720] [ 74.173363][ T1720] __dump_stack+0x21/0x24 [ 74.178953][ T1720] dump_stack_lvl+0x110/0x170 [ 74.183755][ T1720] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.188800][ T1720] dump_stack+0x15/0x24 [ 74.193054][ T1720] should_fail_ex+0x3bf/0x510 [ 74.198169][ T1720] should_fail+0xb/0x10 [ 74.201799][ T794] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 74.202774][ T1720] get_futex_key+0x143/0xb10 [ 74.215729][ T1720] ? __cfi_get_futex_key+0x10/0x10 [ 74.220871][ T1720] ? ttwu_queue_wakelist+0x307/0x4d0 [ 74.226190][ T1720] futex_wait_setup+0xb8/0x260 [ 74.230983][ T1720] ? __cfi_futex_wait_setup+0x10/0x10 [ 74.236755][ T1720] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 74.242871][ T1720] ? futex_setup_timer+0xb0/0xc0 [ 74.248743][ T1720] futex_wait+0x1ce/0x900 [ 74.253909][ T1720] ? __cfi_futex_wait+0x10/0x10 [ 74.259027][ T1720] ? __cfi_futex_wake+0x10/0x10 [ 74.263965][ T1720] ? vhost_vring_ioctl+0x456/0x1200 [ 74.269260][ T1720] do_futex+0x2e2/0x430 [ 74.273420][ T1720] ? __cfi_do_futex+0x10/0x10 [ 74.278183][ T1720] ? vhost_vsock_dev_ioctl+0x327/0xda0 [ 74.284017][ T1720] __se_sys_futex+0x136/0x310 [ 74.288816][ T1720] ? __x64_sys_futex+0x100/0x100 [ 74.293756][ T1720] ? fput+0x154/0x1a0 [ 74.297754][ T1720] __x64_sys_futex+0xe5/0x100 [ 74.302526][ T1720] x64_sys_call+0x7ec/0x9a0 [ 74.307222][ T1720] do_syscall_64+0x4c/0xa0 [ 74.311685][ T1720] ? clear_bhb_loop+0x30/0x80 [ 74.316999][ T1720] ? clear_bhb_loop+0x30/0x80 [ 74.321688][ T1720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.327587][ T1720] RIP: 0033:0x7fbb0579e2d9 [ 74.332122][ T1720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.351818][ T1720] RSP: 002b:00007fbb065a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.360417][ T1720] RAX: ffffffffffffffda RBX: 00007fbb05a25fa8 RCX: 00007fbb0579e2d9 [ 74.368584][ T1720] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb05a25fa8 [ 74.376661][ T1720] RBP: 00007fbb05a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.384630][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.392697][ T1720] R13: 00007fbb05a26038 R14: 00007ffd5789b790 R15: 00007ffd5789b878 [ 74.400716][ T1720] [ 74.416888][ T1724] FAULT_INJECTION: forcing a failure. [ 74.416888][ T1724] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.430258][ T1724] CPU: 1 PID: 1724 Comm: syz.2.507 Not tainted syzkaller #0 [ 74.437605][ T1724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.447933][ T1724] Call Trace: [ 74.451233][ T1724] [ 74.454259][ T1724] __dump_stack+0x21/0x24 [ 74.458678][ T1724] dump_stack_lvl+0x110/0x170 [ 74.463409][ T1724] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.468473][ T1724] ? __switch_to+0x56f/0x1070 [ 74.473351][ T1724] dump_stack+0x15/0x24 [ 74.477810][ T1724] should_fail_ex+0x3bf/0x510 [ 74.482507][ T1724] should_fail+0xb/0x10 [ 74.486690][ T1724] get_futex_key+0x6a4/0xb10 [ 74.491466][ T1724] ? __cfi_get_futex_key+0x10/0x10 [ 74.496637][ T1724] ? __schedule+0xcbb/0x1700 [ 74.501442][ T1724] ? futex_setup_timer+0xb0/0xc0 [ 74.506450][ T1724] futex_wait_requeue_pi+0x2af/0x9b0 [ 74.511762][ T1724] ? __cfi_futex_wait_requeue_pi+0x10/0x10 [ 74.517741][ T1724] ? futex_unqueue+0x132/0x160 [ 74.522741][ T1724] ? __cfi_futex_wait+0x10/0x10 [ 74.527671][ T1724] ? __cfi_futex_wake+0x10/0x10 [ 74.532846][ T1724] ? vfs_write+0xa51/0xd00 [ 74.537553][ T1724] do_futex+0x188/0x430 [ 74.541938][ T1724] ? __cfi_do_futex+0x10/0x10 [ 74.546654][ T1724] ? __kasan_check_write+0x14/0x20 [ 74.551953][ T1724] ? mutex_unlock+0x8f/0x230 [ 74.556544][ T1724] __se_sys_futex+0x136/0x310 [ 74.561305][ T1724] ? __x64_sys_futex+0x100/0x100 [ 74.566338][ T1724] ? ksys_write+0x1fa/0x260 [ 74.570929][ T1724] ? __kasan_check_write+0x14/0x20 [ 74.576070][ T1724] __x64_sys_futex+0xe5/0x100 [ 74.581026][ T1724] x64_sys_call+0x7ec/0x9a0 [ 74.585726][ T1724] do_syscall_64+0x4c/0xa0 [ 74.590512][ T1724] ? clear_bhb_loop+0x30/0x80 [ 74.595282][ T1724] ? clear_bhb_loop+0x30/0x80 [ 74.599963][ T1724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.605879][ T1724] RIP: 0033:0x7fbb0579e2d9 [ 74.610490][ T1724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.630202][ T1724] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.638806][ T1724] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 74.646876][ T1724] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000 [ 74.654883][ T1724] RBP: 00007fbb05835888 R08: 0000200000000380 R09: 0000000000000001 [ 74.663062][ T1724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.671429][ T1724] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 74.680355][ T1724] [ 74.707485][ T1726] FAULT_INJECTION: forcing a failure. [ 74.707485][ T1726] name failslab, interval 1, probability 0, space 0, times 0 [ 74.722669][ T28] audit: type=1400 audit(1791905253.552:323): avc: denied { append } for pid=1727 comm="syz.3.509" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.724691][ T1726] CPU: 1 PID: 1726 Comm: syz.2.508 Not tainted syzkaller #0 [ 74.753123][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.763283][ T1726] Call Trace: [ 74.766570][ T1726] [ 74.769692][ T1726] __dump_stack+0x21/0x24 [ 74.774054][ T1726] dump_stack_lvl+0x110/0x170 [ 74.779114][ T1726] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.784340][ T1726] dump_stack+0x15/0x24 [ 74.788622][ T1726] should_fail_ex+0x3bf/0x510 [ 74.793323][ T1726] ? security_inode_alloc+0x33/0x120 [ 74.798631][ T1726] __should_failslab+0xac/0xf0 [ 74.803453][ T1726] should_failslab+0x9/0x20 [ 74.807980][ T1726] kmem_cache_alloc+0x3b/0x320 [ 74.812754][ T1726] security_inode_alloc+0x33/0x120 [ 74.817980][ T1726] inode_init_always+0x6ee/0x950 [ 74.822945][ T1726] new_inode_pseudo+0xa2/0x1f0 [ 74.827768][ T1726] __ns_get_path+0x169/0x490 [ 74.832478][ T1726] ns_get_path+0x66/0xa0 [ 74.836758][ T1726] proc_ns_get_link+0xf7/0x210 [ 74.841806][ T1726] ? __cfi_proc_ns_get_link+0x10/0x10 [ 74.847635][ T1726] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 74.853547][ T1726] ? security_inode_follow_link+0xd5/0x120 [ 74.859639][ T1726] ? __cfi_proc_ns_get_link+0x10/0x10 [ 74.865036][ T1726] pick_link+0x6d7/0xe30 [ 74.869422][ T1726] step_into+0xc27/0xf00 [ 74.873683][ T1726] ? __d_add+0x4e5/0x7d0 [ 74.878169][ T1726] ? set_root+0x400/0x400 [ 74.882859][ T1726] path_openat+0xf21/0x2f30 [ 74.888439][ T1726] ? do_filp_open+0x420/0x420 [ 74.893133][ T1726] do_filp_open+0x1ee/0x420 [ 74.898158][ T1726] ? __cfi_do_filp_open+0x10/0x10 [ 74.903463][ T1726] ? alloc_fd+0x4c1/0x570 [ 74.908015][ T1726] do_sys_openat2+0x15e/0x820 [ 74.912901][ T1726] ? __se_sys_futex+0x136/0x310 [ 74.918525][ T1726] ? do_sys_open+0xe0/0xe0 [ 74.923480][ T1726] ? __this_cpu_preempt_check+0x13/0x20 [ 74.930188][ T1726] ? xfd_validate_state+0x70/0x150 [ 74.935690][ T1726] __x64_sys_openat+0x136/0x160 [ 74.940740][ T1726] x64_sys_call+0x783/0x9a0 [ 74.945522][ T1726] do_syscall_64+0x4c/0xa0 [ 74.950590][ T1726] ? clear_bhb_loop+0x30/0x80 [ 74.955283][ T1726] ? clear_bhb_loop+0x30/0x80 [ 74.960177][ T1726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.966477][ T1726] RIP: 0033:0x7fbb0575eb0e [ 74.970910][ T1726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.991179][ T1726] RSP: 002b:00007fbb065a3f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.999953][ T1726] RAX: ffffffffffffffda RBX: 00007fbb065a46c0 RCX: 00007fbb0575eb0e [ 75.008367][ T1726] RDX: 0000000000000000 RSI: 00007fbb05834fb6 RDI: ffffffffffffff9c [ 75.016829][ T1726] RBP: 00007fbb05835888 R08: 0000000000000000 R09: 0000000000000000 [ 75.024823][ T1726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.032972][ T1726] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 75.040973][ T1726] [ 75.071716][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 75.081020][ T794] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 75.090399][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.098816][ T794] usb 2-1: Product: syz [ 75.105707][ T794] usb 2-1: Manufacturer: syz [ 75.110352][ T794] usb 2-1: SerialNumber: syz [ 75.121785][ T794] r8152-cfgselector 2-1: config 0 descriptor?? [ 75.174575][ T1741] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.329464][ T794] r8152-cfgselector 2-1: Unknown version 0x0030 [ 75.336081][ T794] r8152-cfgselector 2-1: bad CDC descriptors [ 75.519557][ T1755] FAULT_INJECTION: forcing a failure. [ 75.519557][ T1755] name failslab, interval 1, probability 0, space 0, times 0 [ 75.532664][ T1755] CPU: 1 PID: 1755 Comm: syz.2.518 Not tainted syzkaller #0 [ 75.540165][ T1755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.550510][ T1755] Call Trace: [ 75.553914][ T1755] [ 75.557558][ T1755] __dump_stack+0x21/0x24 [ 75.565685][ T1755] dump_stack_lvl+0x110/0x170 [ 75.570772][ T1755] ? __cfi_dump_stack_lvl+0x8/0x8 [ 75.576216][ T1755] dump_stack+0x15/0x24 [ 75.580523][ T1755] should_fail_ex+0x3bf/0x510 [ 75.585605][ T1755] __should_failslab+0xac/0xf0 [ 75.590506][ T1755] should_failslab+0x9/0x20 [ 75.595156][ T1755] __kmem_cache_alloc_node+0x3d/0x2d0 [ 75.600706][ T1755] ? security_prepare_creds+0x4e/0x150 [ 75.606401][ T1755] ? security_prepare_creds+0x4e/0x150 [ 75.611914][ T1755] __kmalloc+0xa4/0x1e0 [ 75.616393][ T1755] security_prepare_creds+0x4e/0x150 [ 75.622413][ T1755] prepare_creds+0x428/0x610 [ 75.629232][ T1755] __sys_setresgid+0x619/0x990 [ 75.635034][ T1755] __x64_sys_setresgid+0x7a/0x90 [ 75.640653][ T1755] x64_sys_call+0x808/0x9a0 [ 75.646259][ T1755] do_syscall_64+0x4c/0xa0 [ 75.651204][ T1755] ? clear_bhb_loop+0x30/0x80 [ 75.656871][ T1755] ? clear_bhb_loop+0x30/0x80 [ 75.662269][ T1755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.668869][ T1755] RIP: 0033:0x7fbb0579e2d9 [ 75.674119][ T1755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.699231][ T1755] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 75.713013][ T1755] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 75.723021][ T1755] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.733921][ T1755] RBP: 00007fbb05835888 R08: 0000000000000000 R09: 0000000000000000 [ 75.743617][ T1755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.754107][ T1755] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 75.762999][ T1755] [ 75.772120][ T794] r8152-cfgselector 2-1: Unknown version 0x0000 [ 75.792820][ T794] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 75.815396][ T1758] device syzkaller0 entered promiscuous mode [ 75.824173][ T1758] tipc: Enabled bearer , priority 0 [ 76.000554][ T6] usb 5-1: USB disconnect, device number 6 [ 76.017345][ T28] audit: type=1400 audit(1791905254.862:324): avc: denied { create } for pid=1759 comm="syz.4.520" name="#15" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.045602][ T28] audit: type=1400 audit(1791905254.862:325): avc: denied { link } for pid=1759 comm="syz.4.520" name="#15" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.069981][ T28] audit: type=1400 audit(1791905254.862:326): avc: denied { rename } for pid=1759 comm="syz.4.520" name="#16" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.144308][ T39] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 76.244864][ T1764] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.748915][ T28] audit: type=1400 audit(1791905255.592:327): avc: denied { append } for pid=1790 comm="syz.4.532" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.787969][ T6] usb 6-1: USB disconnect, device number 7 [ 76.804100][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.819648][ T28] audit: type=1400 audit(1791905255.662:328): avc: denied { getopt } for pid=1794 comm="syz.5.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.833967][ T39] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 76.842970][ T19] tipc: Node number set to 2156527271 [ 76.881708][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.890130][ T39] usb 3-1: Product: syz [ 76.910951][ T39] usb 3-1: Manufacturer: syz [ 76.917543][ T39] usb 3-1: SerialNumber: syz [ 77.011790][ T19] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 77.192812][ T19] usb 2-1: config 0 has an invalid interface number: 72 but max is 0 [ 77.210702][ T39] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.216209][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.230750][ T39] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 77.231006][ T1757] tipc: Resetting bearer [ 77.241766][ T39] usb 3-1: unit 1 not found! [ 77.248259][ T1816] ip_tables: iptables: counters copy to user failed while replacing table [ 77.263196][ T1757] tipc: Disabling bearer [ 77.265417][ T39] usb 3-1: USB disconnect, device number 8 [ 77.284144][ T19] usb 2-1: config 0 has no interface number 0 [ 77.294647][ T19] usb 2-1: too many endpoints for config 0 interface 72 altsetting 30: 52, using maximum allowed: 30 [ 77.314493][ T19] usb 2-1: config 0 interface 72 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 77.340058][ T19] usb 2-1: config 0 interface 72 has no altsetting 0 [ 77.349782][ T19] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.362030][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.372027][ T19] usb 2-1: config 0 descriptor?? [ 77.580414][ T19] usb 2-1: string descriptor 0 read error: -71 [ 77.598400][ T19] usb 2-1: USB disconnect, device number 7 [ 77.794829][ T1827] loop4: detected capacity change from 0 to 256 [ 77.801714][ T28] audit: type=1400 audit(1791905256.642:329): avc: denied { read } for pid=1828 comm="syz.3.547" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.833431][ T28] audit: type=1400 audit(1791905256.642:330): avc: denied { open } for pid=1828 comm="syz.3.547" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.864101][ T1827] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 78.101674][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 78.186427][ T1872] device syzkaller0 entered promiscuous mode [ 78.234936][ T1872] tipc: Enabled bearer , priority 0 [ 78.322883][ T19] usb 4-1: config 1 has an invalid interface number: 238 but max is 1 [ 78.338626][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.363232][ T19] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 78.386568][ T19] usb 4-1: config 1 has no interface number 2 [ 78.401334][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.413007][ T19] usb 4-1: config 1 interface 238 has no altsetting 0 [ 78.420241][ T19] usb 4-1: config 1 interface 1 has no altsetting 0 [ 78.434832][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.445554][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.454368][ T19] usb 4-1: Product: syz [ 78.458756][ T19] usb 4-1: Manufacturer: syz [ 78.463827][ T19] usb 4-1: SerialNumber: syz [ 78.571678][ T202] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 78.675992][ T19] usb 4-1: selecting invalid altsetting 0 [ 78.692859][ T19] usb 4-1: selecting invalid altsetting 0 [ 78.710956][ T19] cdc_ncm 4-1:1.0: bind() failure [ 78.738774][ T19] usb 4-1: USB disconnect, device number 7 [ 78.785512][ T202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.812444][ T202] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 78.827779][ T202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.844599][ T202] usb 3-1: Product: syz [ 78.857115][ T202] usb 3-1: Manufacturer: syz [ 78.870032][ T202] usb 3-1: SerialNumber: syz [ 79.084963][ T1871] tipc: Resetting bearer [ 79.093892][ T202] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 79.104120][ T202] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 79.104223][ T1871] tipc: Disabling bearer [ 79.121753][ T202] usb 3-1: unit 1 not found! [ 79.135089][ T202] usb 3-1: USB disconnect, device number 9 [ 79.147457][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.211842][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 79.211859][ T28] audit: type=1400 audit(1791905258.062:332): avc: denied { relabelfrom } for pid=1912 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.253656][ T28] audit: type=1400 audit(1791905258.092:333): avc: denied { relabelto } for pid=1912 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.311186][ T1916] loop4: detected capacity change from 0 to 256 [ 79.321005][ T1916] exfat: Deprecated parameter 'utf8' [ 79.342236][ T1916] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 79.363717][ T28] audit: type=1400 audit(1791905258.202:334): avc: denied { remove_name } for pid=1915 comm="syz.4.576" name="file0" dev="loop4" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.439625][ T28] audit: type=1400 audit(1791905258.202:335): avc: denied { rename } for pid=1915 comm="syz.4.576" name="file0" dev="loop4" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.467353][ T19] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 79.476949][ T28] audit: type=1400 audit(1791905258.202:336): avc: denied { rmdir } for pid=1915 comm="syz.4.576" name="bus" dev="loop4" ino=1048696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.727663][ T1926] FAULT_INJECTION: forcing a failure. [ 79.727663][ T1926] name failslab, interval 1, probability 0, space 0, times 0 [ 79.746068][ T1926] CPU: 1 PID: 1926 Comm: syz.2.579 Not tainted syzkaller #0 [ 79.755787][ T1926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.768913][ T1926] Call Trace: [ 79.774325][ T1926] [ 79.778348][ T1926] __dump_stack+0x21/0x24 [ 79.783377][ T1926] dump_stack_lvl+0x110/0x170 [ 79.789432][ T1926] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.795055][ T1926] ? __kasan_check_read+0x11/0x20 [ 79.801714][ T1926] ? call_rcu+0xb84/0xf50 [ 79.806554][ T1926] dump_stack+0x15/0x24 [ 79.811441][ T1926] should_fail_ex+0x3bf/0x510 [ 79.816777][ T1926] ? mas_alloc_nodes+0x2d8/0x850 [ 79.822027][ T1926] __should_failslab+0xac/0xf0 [ 79.827432][ T1926] should_failslab+0x9/0x20 [ 79.832174][ T1926] kmem_cache_alloc+0x3b/0x320 [ 79.838129][ T1926] mas_alloc_nodes+0x2d8/0x850 [ 79.843827][ T1926] mas_preallocate+0xe3d/0x1430 [ 79.849307][ T1926] ? __cfi_mas_preallocate+0x10/0x10 [ 79.856111][ T1926] ? rwsem_write_trylock+0x136/0x300 [ 79.863280][ T1926] vma_expand+0x437/0xad0 [ 79.868827][ T1926] mmap_region+0xf04/0x2130 [ 79.874086][ T1926] ? __cfi_mmap_region+0x10/0x10 [ 79.880507][ T1926] ? cap_mmap_addr+0x165/0x2e0 [ 79.885438][ T1926] ? get_unmapped_area+0x30c/0x370 [ 79.890924][ T1926] do_mmap+0x858/0xdd0 [ 79.896612][ T1926] ? __cfi_do_mmap+0x10/0x10 [ 79.901514][ T1926] ? do_futex+0x2e2/0x430 [ 79.906404][ T1926] vm_mmap_pgoff+0x206/0x3f0 [ 79.911321][ T1926] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 79.916823][ T1926] ? xfd_validate_state+0x70/0x150 [ 79.922844][ T1926] ksys_mmap_pgoff+0xf6/0x1d0 [ 79.928249][ T1926] ? __kasan_check_write+0x14/0x20 [ 79.934294][ T1926] __x64_sys_mmap+0xfa/0x110 [ 79.939118][ T1926] x64_sys_call+0x8fd/0x9a0 [ 79.944454][ T1926] do_syscall_64+0x4c/0xa0 [ 79.949089][ T1926] ? clear_bhb_loop+0x30/0x80 [ 79.954256][ T1926] ? clear_bhb_loop+0x30/0x80 [ 79.960573][ T1926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.967402][ T1926] RIP: 0033:0x7fbb0579e2d9 [ 79.972843][ T1926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.998672][ T1926] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 80.009225][ T1926] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 80.019055][ T1926] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 80.028032][ T1926] RBP: 00007fbb05835888 R08: ffffffffffffffff R09: 000000001c5f1000 [ 80.037537][ T1926] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 80.046204][ T1926] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 80.055708][ T1926] [ 80.058998][ T1926] ------------[ cut here ]------------ [ 80.064841][ T1926] kernel BUG at mm/mmap.c:2854! [ 80.070593][ T1926] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 80.078730][ T1926] CPU: 1 PID: 1926 Comm: syz.2.579 Not tainted syzkaller #0 [ 80.087286][ T1926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.098159][ T1926] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 80.104711][ T1926] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 d9 45 09 00 e9 d2 f9 ff ff e8 3f b3 c3 ff 0f 0b e8 38 b3 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 80.128442][ T1926] RSP: 0018:ffffc900072cfa40 EFLAGS: 00010283 [ 80.135151][ T1926] RAX: ffffffff81adbb08 RBX: 0000200000b36000 RCX: 0000000000080000 [ 80.144811][ T1926] RDX: ffffc900042c5000 RSI: 00000000000445fc RDI: 00000000000445fd [ 80.153117][ T1926] RBP: ffffc900072cfc30 R08: ffff8881326a5100 R09: 0000000000000003 [ 80.162159][ T1926] R10: 0000000000000003 R11: 0000000000000002 R12: 0000200000b35fff [ 80.171131][ T1926] R13: 0000200000b36000 R14: dffffc0000000000 R15: 0000200000000000 [ 80.179837][ T1926] FS: 00007fbb065a46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 80.191884][ T1926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.199737][ T1926] CR2: 0000200000001800 CR3: 000000014fa16000 CR4: 00000000003526a0 [ 80.212730][ T1926] Call Trace: [ 80.216681][ T1926] [ 80.220356][ T1926] ? __cfi_mmap_region+0x10/0x10 [ 80.229135][ T1926] ? cap_mmap_addr+0x165/0x2e0 [ 80.235502][ T1926] ? get_unmapped_area+0x30c/0x370 [ 80.242467][ T1926] do_mmap+0x858/0xdd0 [ 80.248158][ T1926] ? __cfi_do_mmap+0x10/0x10 [ 80.253727][ T1926] ? do_futex+0x2e2/0x430 [ 80.258802][ T1926] vm_mmap_pgoff+0x206/0x3f0 [ 80.264585][ T1926] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 80.271637][ T1926] ? xfd_validate_state+0x70/0x150 [ 80.278381][ T1926] ksys_mmap_pgoff+0xf6/0x1d0 [ 80.285632][ T1926] ? __kasan_check_write+0x14/0x20 [ 80.292866][ T1926] __x64_sys_mmap+0xfa/0x110 [ 80.298281][ T1926] x64_sys_call+0x8fd/0x9a0 [ 80.303380][ T1926] do_syscall_64+0x4c/0xa0 [ 80.309437][ T1926] ? clear_bhb_loop+0x30/0x80 [ 80.314944][ T1926] ? clear_bhb_loop+0x30/0x80 [ 80.320875][ T1926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.328372][ T1926] RIP: 0033:0x7fbb0579e2d9 [ 80.334204][ T1926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.357187][ T1926] RSP: 002b:00007fbb065a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 80.366777][ T1926] RAX: ffffffffffffffda RBX: 00007fbb05a25fa0 RCX: 00007fbb0579e2d9 [ 80.375468][ T1926] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 80.384065][ T1926] RBP: 00007fbb05835888 R08: ffffffffffffffff R09: 000000001c5f1000 [ 80.393648][ T1926] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 80.402956][ T1926] R13: 00007fbb05a26038 R14: 00007fbb05a25fa0 R15: 00007ffd5789b878 [ 80.411493][ T1926] [ 80.414624][ T1926] Modules linked in: [ 80.419047][ T1926] ---[ end trace 0000000000000000 ]--- [ 80.427002][ T1926] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 80.427808][ T19] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 80.434377][ T1926] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 d9 45 09 00 e9 d2 f9 ff ff e8 3f b3 c3 ff 0f 0b e8 38 b3 c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 80.434405][ T1926] RSP: 0018:ffffc900072cfa40 EFLAGS: 00010283 [ 80.434425][ T1926] RAX: ffffffff81adbb08 RBX: 0000200000b36000 RCX: 0000000000080000 [ 80.434439][ T1926] RDX: ffffc900042c5000 RSI: 00000000000445fc RDI: 00000000000445fd [ 80.434451][ T1926] RBP: ffffc900072cfc30 R08: ffff8881326a5100 R09: 0000000000000003 [ 80.434464][ T1926] R10: 0000000000000003 R11: 0000000000000002 R12: 0000200000b35fff [ 80.434477][ T1926] R13: 0000200000b36000 R14: dffffc0000000000 R15: 0000200000000000 [ 80.473282][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.473962][ T1926] FS: 00007fbb065a46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 80.497456][ T19] usb 6-1: Product: syz [ 80.501327][ T1926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.501352][ T1926] CR2: 0000200000001800 CR3: 000000014fa16000 CR4: 00000000003526a0 [ 80.501376][ T1926] Kernel panic - not syncing: Fatal exception [ 80.510326][ T1926] Kernel Offset: disabled [ 80.572203][ T1926] Rebooting in 86400 seconds..