last executing test programs: 8.509016832s ago: executing program 1 (id=323): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x3010018, &(0x7f00000003c0), 0x5, 0x4c3, &(0x7f0000000ac0)="$eJzs3U1oXNUeAPD/nXw0L01f8j54r3SV9wp9fZQmTad5pdAH7apQtGArKOjC0EzStJO2NCmYLMQP0IoK7aYbi6ALBekirlQEkS5ERXDRjaAUVBAbSKtVpAshcu/MxLSZpE1Tc2n8/eBwz7kzc89/5uSeueefSxLAH1ZnROyKiIaI2BIR7dX9hWqJJyslfV6pOHEoLUlMTx+4mkQSEXuLE4dqx0qq29XVA7RExIUPI1ob5/Y7MjZ+pK9cLp2otrtHh493j4yNbx4a7hssDZaOFnu2F4vF3h3F3rv2Xn/45fCZd67vef7sle8//ebi2+eT2BVt1cdmv4+7pTM6Zz6T2RqTiP/f7c5y1pJ3ACza+fvPvJR3DADA8kuv8f8aEf/Orv/boyEqF+uHJx+91h7XBuZ7XcfPr1xezjgBAACAOzcd7bEz3QIAAAArViEi2iIpdFXvBWiLQqGrq3IP79+jtVA+NjK6aeDYyaP9kd0r2xFNhYGhcql2r3BHNCVpuyer/9beelO7GBF/iYhT7X/K2l0Hj5X7805+AAAAwArXFnHpkWfe/efqedb/qS/b844SAAAAWIp0/b/mUmv2p7p+ss4HAACAFSld/1979srHYf0PAAAAK1Zt/T/zf7hUVFRUZip5z1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw1/R0EtMAAADAipZ3/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHvL3uLEoVpZrj4n9yxXT8xnandEdFTGv1QtlUcaoyXbtkRTRLT+mETjrNclEdGwxL67NkR0xqbPTz/x3VtpierP4RIPyz1i4uu8IyBPzdvyjoA8rXsg7wjI02en8o6APF2cyjsC8rT/QN4RkKd9/8s7AvL08tW8I+CD3RGxpV7+rxBrs20lC3Rz/qchyxAtzSfnIjqj69vZ++bmfwqTS+yGBUztjtgZEaU5+b9C7SkdDdXWmixV2JQMDJVLWyLizxGxMZpWpe2eBfrYu/ZC3UzPi/9Ix//kvlr+Ly1p/7VcYDWOycZVN76uv2+0b6nvm4qppyLWNdYb/2Qm/5vMk/9ddZt9vPfV/uF6+69/lI7/C+8vPP78nqZfjfhP3fM/mXlOWuseHT7ePTI2vnlouG+wNFg6WuzZXiwWe3cUe7uz+aC7NivM9ebTr9f9pv/XwWz+HzP++UnP/9aFxz+b/0fGxo/0lculEyOL7+O5DWfrfoe/cTYd/+YLdzL/NycPZgE2V/c93jc6eqInojm5b+7+rYuPeaWqfR61zysd/43r63//167/KvN/Yc78/7fqtlD5FeK8/vva5br7vzidjn/xIed/ftLx77/F+Z/ccP4vvvLY+v0b6/X9cGTXf+duff5vy4KpHcT1363d7gDlHScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMz2awAAAP//MEf3BQ==") openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000"], 0x4, 0x0) setreuid(0xee01, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 8.308340352s ago: executing program 1 (id=325): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 8.143815111s ago: executing program 1 (id=328): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)="a13ae3a65aaead78", 0x8}], 0x1, 0x7ffffe, 0x0, 0x12) (async) fallocate(r0, 0x3, 0x7, 0x8000c62) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010004000000080000000400000005"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setxattr$security_ima(0x0, 0x0, &(0x7f0000000380)=@v2={0x5, 0x1, 0x8, 0x9}, 0x9, 0x0) (async) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x9, 0x20, {0x20, 0x2e, "42d04735566e08f58c18c3bddf8e30425479395e48bcb46fe3989e71aeeb"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x20, 0x30, 0x1b, "7d1df982b80d2b7d1cf28387054b52cdbadc122788dd590962f948"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x0) (async) syz_usb_control_io$lan78xx(r3, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x0, 0x9, 0x25, {0x25, 0xf, "af30583b0dd1044b8720566e8302eaa30e919e01ff5ca2399788390bfc28324d17872f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000b80)={0x34, &(0x7f0000000980)={0x40, 0x16, 0xa3, "85f553fc0156e7c7e76420a8b47b191da4b2bd192faa0c7cd183e09e2477bba6ec36971760ee7cb6ba1e8795744b5df94c241f77ebfa7423fe7a95921ea25864be2d9c8e0e6949a6ae44d975ce43253794f39a511302f0e4f4e35384505f82645f32933fdd5227a6b9ab65b25fac368780c93e3225fc4d5f6ad711af9fb832548e8750b8cf4087b322b0e3a07699bc14d7fd911d87d3cc39c75ca0af7ea116322e29b0"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000000ac0)={0xc0, 0xa1, 0x4, 0x3fa003dc}, &(0x7f0000000b00)={0x40, 0xa0, 0x4, 0x3bababef}, &(0x7f0000000b40)={0xc0, 0xa2, 0x2f, "857180b82558a5c15f52d15f4166629da01db4c6ee423bb39621ebe598c0251a051a6fbe17686ee98cd2da51ae1ca2"}}) (async) openat(r4, &(0x7f0000000280)='./file0\x00', 0x551003, 0x207) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") (async) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 8.096637532s ago: executing program 3 (id=329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x300, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 8.037144196s ago: executing program 3 (id=330): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0x70010000], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f8) 7.959480219s ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) futex_waitv(&(0x7f0000001f40)=[{0x7, &(0x7f00000000c0), 0x82}, {0x5, &(0x7f0000000100)=0x7, 0x2}, {0x1000, &(0x7f0000000140)=0x5, 0x82}, {0x80000000, &(0x7f0000000180)=0xb, 0x82}, {0x0, &(0x7f00000001c0)=0x7ff, 0x2}, {0xfb6, &(0x7f0000000200)=0x7, 0x82}, {0x1, &(0x7f0000000240)=0x4, 0x2}, {0x101, &(0x7f0000000280)=0x2, 0x82}, {0x1, &(0x7f00000002c0)=0xc5, 0x2}, {0x7a12, &(0x7f0000000300)=0x7, 0x82}, {0x25c8, &(0x7f0000000340)=0x401, 0x2}, {0x1, &(0x7f0000000380)=0xffffffffffffffff, 0x2}, {0x7, &(0x7f00000003c0)=0x4, 0x82}, {0x80000000, &(0x7f0000000400)=0xac2542b, 0x82}, {0x8, &(0x7f0000000440)=0x1, 0x82}, {0x78e, &(0x7f0000000480)=0x3, 0x2}, {0x7, &(0x7f0000000580)=0x2, 0x2}, {0xd, &(0x7f00000005c0)=0xfffffffffffff001, 0x82}, {0x6, &(0x7f0000000600)=0x1, 0x82}, {0x5, &(0x7f0000000640)=0x7, 0x82}, {0x4, &(0x7f0000000680)=0x4, 0x82}, {0x40, &(0x7f00000006c0)=0x9, 0x82}, {0x7, &(0x7f0000000780)=0x3, 0x2}, {0x1, &(0x7f00000007c0)=0x10001, 0x2}, {0xffff, &(0x7f0000000800)=0x4, 0x82}, {0x8000000000000000, &(0x7f0000000840)=0xffffffff, 0x2}, {0x5, &(0x7f0000000880)=0xe0000000000}, {0x2, &(0x7f00000008c0)=0x4, 0x2}, {0x4a, &(0x7f0000000900)=0x3, 0x2}, {0x2, &(0x7f0000000940)=0x7, 0x82}, {0xa6, &(0x7f0000000980)=0x100000001, 0x2}, {0x9, &(0x7f00000009c0)=0x2b, 0x2}, {0x0, &(0x7f0000000a00)=0x1, 0x2}, {0xfffffffffffffff9, &(0x7f0000000a40)=0x9, 0x82}, {0xffffffffffffffc0, &(0x7f0000000a80)=0x8e3c, 0x2}, {0x2, &(0x7f0000000ac0)=0x5cd, 0x82}, {0x2, &(0x7f0000000b00)=0x29, 0x80}, {0xa4c, &(0x7f0000000b40)=0x5, 0x2}, {0x6, &(0x7f0000000b80), 0x82}, {0x101, &(0x7f0000000bc0)=0x4, 0x82}, {0x869, &(0x7f0000000c00)=0xc3ac, 0x2}, {0x1ff, &(0x7f0000000c40)=0x39e, 0x82}, {0x4, &(0x7f0000000c80)=0xbe1, 0x2}, {0x5, &(0x7f0000000cc0)=0xf, 0x2}, {0x600000, &(0x7f0000000d00)=0xffffffffffffffdf, 0x2}, {0x6, &(0x7f0000000d40)=0x7, 0x2}, {0x28, &(0x7f0000000d80)=0x8, 0x82}, {0x0, &(0x7f0000000dc0)=0xfffffffffffffff8, 0x2}, {0x2, &(0x7f0000000e00)=0x3, 0x82}, {0x7, &(0x7f0000000e40)=0x3, 0x2}, {0x1, &(0x7f0000000e80)=0x2, 0xfd1903db91411181}, {0x4, &(0x7f0000000ec0)=0x100000001, 0x82}, {0x584de5fa, &(0x7f0000000f00)=0xb, 0x82}, {0xfffffffffffffffb, &(0x7f0000000f40)=0x1, 0x82}, {0x7f, &(0x7f0000000f80)=0x3, 0x82}, {0x3, &(0x7f0000000fc0)=0x8, 0x82}, {0x7466, &(0x7f0000001000)=0x5, 0x2}, {0x80, &(0x7f0000001040)=0xc, 0x82}, {0x5, &(0x7f0000001080)=0x1, 0x2}, {0xffffffffffff0001, &(0x7f00000010c0)=0xfff, 0x2}, {0x100000000, &(0x7f0000001100)=0x7}, {0x1, &(0x7f0000001140)=0x6, 0x2}, {0x2, &(0x7f0000001180)=0xea6, 0x2}, {0x7f, &(0x7f00000011c0)=0x5, 0x82}, {0x6, &(0x7f0000001200)=0x100, 0x82}, {0x1ff, &(0x7f0000001240)=0xfffffffffffffffb, 0x2}, {0xfffffffffffffffd, &(0x7f0000001280)=0x1000, 0x2}, {0x6df, &(0x7f00000012c0)=0x7, 0x82}, {0x2, &(0x7f0000001300)=0x1, 0x82}, {0x0, &(0x7f0000001340)=0xd, 0x82}, {0x59cc37, &(0x7f0000001380)=0x246}, {0x546, &(0x7f00000013c0)=0x7, 0xf6e58576f9f143ac}, {0xfffffffffffffffd, &(0x7f0000001400)=0x3, 0x82}, {0x9, &(0x7f0000001440)=0x8, 0x2}, {0xfffffffffffffffd, &(0x7f0000001480)=0xffffffffffff4810, 0x2}, {0xc, &(0x7f00000014c0)=0x8, 0x82}, {0x9, &(0x7f0000001500)=0x6, 0x82}, {0xb, &(0x7f0000001540), 0x2}, {0x4, &(0x7f0000001580)=0x1}, {0x6, &(0x7f00000015c0)=0xffff, 0x2}, {0x2, &(0x7f0000001600), 0x82}, {0x6190, &(0x7f0000001640)=0x9, 0x82}, {0xffffffff80000001, &(0x7f0000001680)=0x7fff, 0x2}, {0x3, &(0x7f00000016c0)=0x10, 0x82}, {0x6a01, &(0x7f0000001700)=0x4, 0x2}, {0x1, &(0x7f0000001740)=0x8a4, 0x82}, {0x3, &(0x7f0000001780)=0x7fff, 0x82}, {0x6, &(0x7f00000017c0)=0x4, 0x82}, {0x77c6c1b5, &(0x7f0000001800)=0x6dda, 0x6}, {0x4, &(0x7f0000001840)=0x4, 0x82}, {0xfffffffffffffffc, &(0x7f0000001880)=0x1, 0x2}, {0x4, &(0x7f00000018c0)=0x3e90928, 0x82}, {0x4, &(0x7f0000001900)=0x3, 0x2}, {0x9, &(0x7f0000001940)=0x19, 0x82}, {0x2, &(0x7f0000001980), 0x82}, {0x100, &(0x7f00000019c0)=0x5, 0x82}, {0xe, &(0x7f0000001a00)=0x5, 0x82}, {0x8, &(0x7f0000001a40)=0x8}, {0x4, &(0x7f0000001a80)=0xef, 0x82}, {0x3, &(0x7f0000001ac0)=0xb, 0x82}, {0xb, &(0x7f0000001b00)=0x45, 0x82}, {0xfffffffffffffffa, &(0x7f0000001b40)=0x3, 0x82}, {0x4, &(0x7f0000001b80)}, {0x4, &(0x7f0000001bc0)=0x933, 0x2}, {0x3, &(0x7f0000001c00)=0x4, 0x82}, {0x5, &(0x7f0000001c40)=0x8000, 0x2}, {0xc, &(0x7f0000001c80)=0xffff, 0x82}, {0x3, &(0x7f0000001cc0)=0x80000000, 0x82}, {0x80000000, &(0x7f0000001d00)=0x9, 0x2}, {0x2, &(0x7f0000001d40)=0x9, 0x82}, {0x8, &(0x7f0000001d80)=0xffffffffffffffff, 0x82}, {0x80000000, &(0x7f0000001dc0)=0x1, 0x82}, {0x6, &(0x7f0000001e00)=0x3, 0x82}, {0x8, &(0x7f0000001e40)=0x8, 0x82}, {0x5, &(0x7f0000001e80)=0x8000000000000000, 0x82}, {0x8001, &(0x7f0000001ec0)=0x1, 0x82}, {0x74e, &(0x7f0000001f00)=0x4, 0x82}], 0x75, 0x0, &(0x7f0000002a40), 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xcad3a0532936884a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 7.128331961s ago: executing program 1 (id=336): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.935440449s ago: executing program 1 (id=341): syslog(0x0, &(0x7f0000000000)=""/41, 0x29) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020001052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709058202000207fc00090503", @ANYRES64], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4c, &(0x7f0000001180)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x16, 0x0, 0x0, @empty, @mcast2, {[@routing={0x84, 0x0, 0x1}], "223427d5c9a46b9fa14172170a01"}}}}}, 0x0) syslog(0x2, &(0x7f0000000080)=""/103, 0x67) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x270, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0xff, 0x807fffff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0xc8, 0x38, 0x1, 0x1}}, @common=@set={{0x40}, {{0x1, [0x2, 0x5, 0x0, 0x5, 0x2, 0x2], 0x9}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x6, 0x5, 0x5b0c5b6f2175e255, 0x6], 0x5, 0x4}, {0x1, [0x4, 0x1, 0x2, 0x2, 0x2, 0x1], 0x1, 0x4}}}}, {{@uncond, 0x0, 0x110, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x2, 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xa, 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 5.172272126s ago: executing program 4 (id=357): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 5.048193962s ago: executing program 1 (id=358): syz_read_part_table(0x1056, &(0x7f0000001080)="$eJzszz0KwkAUBOBJyCYRhHQWHiInEaw8mpU38Cx2HkYsRCE/V1CL72sGdmf38cJPNUvW60H7TKp9nzF1LiVJOY7Je5KmmztJ7nO9y6su57K8TT/dJWWTZJu01WFYf+7mWcOjn3J3S07XL60JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/tEwAA//9B1w6I") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff}, 0x1c, 0x0, 0x0, &(0x7f0000002600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x2, 0x84) (async) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) pipe(0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xfffffdef) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0x40, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c041}, 0x80) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000400)={{r4, &(0x7f0000000040)='ethtool\x00', 0x701082, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x1]}, {0x2, 0x101, 0x9a30, 0x8000}}, 0xfffffc70, &(0x7f0000000100), &(0x7f0000000200)=0xf}, {[0x9, 0x0, 0x1, 0xffffffff]}, 0x1ff, 0x93, &(0x7f0000000340)=""/147}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0xd0, 0xd0, 0x1d0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ip={@empty, @broadcast, 0xff, 0xffffff00, 'pimreg\x00', 'bridge0\x00', {0xff}, {}, 0x67, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x0, 0xfc5e5348f00d0e4c, 0x7, 0x4], 0x6, 0x1}, {0x1, [0x8, 0x2, 0x2, 0x2, 0x3, 0x3], 0x1, 0x6}}}}, {{@ip={@broadcast, @local, 0xff000000, 0xff, 'veth1_macvtap\x00', 'ip_vti0\x00', {}, {0xff}, 0x5c, 0x0, 0x20}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x7e02, 0xc]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffffff, 0xffffffff], 0x4e23, 0x4e21, 0x4e24, 0x4e21, 0x44f7e728, 0x8, 0x3, 0xfffffff8, 0x8}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x8, 0x11, 0x9, 0xe}}, @common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x7, 0x1, 0x5, 0x5], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x8798, [0x5, 0x4, 0x4, 0x2, 0x1], 0x3, 0x2}, {0x1, [0x3, 0x2, 0x0, 0x2, 0x0, 0x5], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000280)={0x1d, r8}, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x3, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r10, 0x80047453, 0x0) r12 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f0000000300)='THAWED\x00', 0x7) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xc5) 4.867321471s ago: executing program 3 (id=359): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4, 0x5510, &(0x7f00000020c0)="$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") r1 = syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file1\x00', 0x10408, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}, 0x2, 0x0, &(0x7f0000000840)="15e1df86a7726b2dbe0e560e59e5360d78861d8fc0a8f8691ea1bf445c21dc9b9d24150c56d78f0afb53f854bcaca77bc38ce0b3aa6796908e67e9b21316d242cfb8b7b24c4882b5587e7067dec3b89f66184f1d4253e91ce365e83b40df32a87e6e8d116395e221c96b46e2ba9c974ecc4838fc6f7861783bb7d8a00af228c0fb23af29174947aaae1173e6e37133f5a57c681c8b635a44ffa8fe30fedb9431cc5037dbb09f49a46b8aeae80fd4f1fc4cddd05ff75344a3741eab7f58e6d472825cdceedb793e7ace4ddfe28cba152e7864b6e4b8e2e08b519d80a8ce19ff9cf3d03b85980669acfb5356bdd14c5e1fd27947cb1ee007a6") openat(r1, &(0x7f0000000040)='./file1\x00', 0x40000, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x8400, 0x1ce) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0xe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x6040, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) waitid(0x1, r8, 0x0, 0x8, &(0x7f0000000340)) mount$fuse(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x80428, &(0x7f0000000ac0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xe00}}, {@allow_other}, {@allow_other}, {@blksize}], [{@smackfsroot={'smackfsroot', 0x3d, 'allow_other'}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '+\\:![D'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[%'}}, {@subj_role={'subj_role', 0x3d, ']%'}}, {@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@dont_hash}, {@uid_gt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r6, 0x80, 0x20, 0xf, 0x4, {{0x1b, 0x4, 0x1, 0x6, 0x6c, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x17, 0x3, [{0x7, 0x11, "a0e032bdbaf1dfd1d7bfc454177482"}]}, @rr={0x7, 0x13, 0xd7, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2]}, @timestamp={0x44, 0x24, 0xac, 0x0, 0xf, [0x1, 0x7, 0xfffffffc, 0x31, 0x0, 0x5, 0x3ff, 0x6]}, @end, @lsrr={0x83, 0x7, 0x6d, [@multicast2]}, @end]}}}}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.553723086s ago: executing program 3 (id=363): socket$inet6(0xa, 0x3, 0x7) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x80) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 2.774849414s ago: executing program 2 (id=366): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000003f00000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.472870739s ago: executing program 3 (id=369): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000"], 0x4, 0x0) setreuid(0xee01, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 2.347486225s ago: executing program 32 (id=369): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [], 0x6b}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000"], 0x4, 0x0) setreuid(0xee01, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 2.323415756s ago: executing program 0 (id=370): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$inet6(0xa, 0x3, 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x9f, 0x1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x800) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001880)='./file0\x00', 0x814, &(0x7f0000002400)={[{@uid={'uid', 0x3d, r5}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@sys_tz}, {@gid}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) 2.140677325s ago: executing program 0 (id=371): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25160000001800018000000000000097c6376aee30a1d6ffaad7e18cf1b0d0e10800000000000000e8fd69594aa4a166fc78e24f5b270da35dffb9801eef31a3f9f5c782afccc4bbb3efe8b94c8985136174129e9e7b622e29787bc450f1f6ce35775283ded5d46b352d76cb7c5819fb7970d52a1b67498611a2a9be808d77a9c94c57df33214836e305325c1acea37c525de032f8833826a681f060bbc395ae86c6c436ebc5ee69550aa015d3b9b4c8deb726298d041157f466319f63bcdb1a186ecd49b4c4cbe8354f3fda8fd84898d17cacb0e4ba6216452c34ae"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_tables_targets\x00') read$FUSE(r5, &(0x7f0000004980)={0x2020}, 0x2020) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000002840)=""/219, 0xdb}], 0x1, 0x80000001, 0x8000007) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @mcast1, 0x7ff}, 0x1c) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0xbb8, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x5}, 0x7, 0x4e, 0x4, 0x7, 0x25, 'syz1\x00', "7d365426864aa0196e7cd4275c7a2a88c0902fc7963c8f9aeb7e4889f0b86fb6", "059f67381a5cfb9ccabdbf9d11495be9a719884c2d9ffbfe199ff8f225af0400", [{0x0, 0x7, {0x3, 0x1}}, {0x7ff, 0x4, {0x3, 0x385}}, {0x5, 0xfff, {0x2, 0x3}}, {0x1d3a, 0xb6, {0x0, 0x56}}, {0x5, 0x4, {0x1, 0x4a3}}, {0x1ff, 0x7fff, {0x3, 0x8}}, {0xfffa, 0x3, {0x1, 0x57}}, {0xfb, 0x9, {0x2, 0xbb0}}, {0x6, 0x7, {0x2, 0x101}}, {0x3, 0x5, {0x2, 0x8001}}, {0x800, 0x6, {0x2, 0xfff}}, {0xfffe, 0x80, {0x3, 0x6}}, {0x7a4, 0x5, {0x1, 0x6}}, {0x6f8, 0xa, {0x0, 0x7f}}, {0x4, 0xfffd, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x9}}, {0xff, 0x1, {0x0, 0x9}}, {0x81, 0xcd51, {0x1, 0x9c3d}}, {0x800, 0x4, {0x2, 0x1}}, {0x4, 0x7, {0x3, 0x1000}}, {0x1, 0x3, {0x1, 0x25f}}, {0x4, 0x8}, {0x3, 0x6, {0x2, 0x3}}, {0xf3, 0x7f, {0x3, 0x600000}}, {0x5, 0x2, {0x2, 0x1}}, {0x4, 0xffff, {0x1, 0x5}}, {0x1, 0x1, {0x0, 0x6}}, {0x4a96, 0xe, {0x2, 0x9c6c}}, {0xffc0, 0x5, {0x0, 0xb}}, {0x3567, 0x9, {0x1, 0x2fe}}, {0x2, 0x7, {0x1, 0x6b}}, {0x1, 0x5, {0x1, 0x5}}, {0x60ab, 0x3, {0x2, 0x401}}, {0x1ff, 0x2, {0x2, 0x7fffffff}}, {0x10, 0x6eb, {0x1, 0xfffff003}}, {0xffff, 0x1800, {0x1, 0x530}}, {0x8, 0x18, {0x1, 0x5}}, {0x9, 0x1, {0x2, 0x80}}, {0xe6, 0x1, {0x1, 0x6c2}}, {0xff1d, 0x0, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x3, 0x2a, 0x3, 0x5, 0xf, 'syz1\x00', "bc71719ee1df6150b353c2534335782961785143e8d92607b39fd620f8b25304", "36621ea8ca82e54de12d5f77e474697e24155a04f70f7c9d3f1621a4b27746a8", [{0x7, 0xac, {0x2, 0x6}}, {0x9, 0xc, {0x2, 0x1}}, {0x3, 0xfffe, {0x2}}, {0x8, 0x3, {0x0, 0xb6f1}}, {0x6, 0x5, {0x0, 0xfffffff7}}, {0x2, 0x8, {0x3, 0x8}}, {0x5, 0x48d7, {0x1, 0x3}}, {0x0, 0x3, {0x1, 0xc2}}, {0xcc, 0x2d, {0x2, 0x1221}}, {0x9, 0x93, {0x1, 0x6}}, {0x93, 0x6, {0x2, 0x9}}, {0x0, 0x1, {0x2, 0x29}}, {0x5fc, 0x4, {0x0, 0x2}}, {0xfff, 0x6, {0x2, 0x5}}, {0x3, 0x0, {0x1, 0x8}}, {0xfff, 0x7, {0x2, 0x7}}, {0x3, 0xc3e, {0x1, 0x5}}, {0x7, 0xca6c, {0x2, 0x10000}}, {0xd, 0x9, {0x0, 0x5}}, {0x6fc8, 0x6, {0x2, 0x6}}, {0x3, 0x7f, {0x3, 0x1}}, {0xfff, 0x8, {0x2, 0x7fff}}, {0x2, 0x3, {0x3, 0x1}}, {0x1, 0x8, {0x0, 0xfffffc01}}, {0x8000, 0x1, {0x2, 0x2}}, {0xfff9, 0xe47, {0x2, 0x5}}, {0x1, 0x7b, {0x1, 0x3}}, {0x7, 0xd4, {0x3, 0x7}}, {0xb, 0x3, {0x1, 0x7ff}}, {0x3, 0x2, {0x3, 0x80}}, {0x2, 0x8, {0x2, 0x6}}, {0xf6a7, 0xe3, {0x1, 0x1}}, {0x6, 0xfff8, {0x2, 0x8}}, {0x1000, 0x2, {0x1, 0xf}}, {0x3, 0x8001, {0x3, 0x7}}, {0x6, 0xfff, {0x2, 0x3}}, {0x36, 0x9, {0x1, 0x1}}, {0x8000, 0x0, {0x2, 0x5d4b}}, {0x3, 0x0, {0x0, 0x7}}, {0xed, 0x6, {0xfe1394628a650198, 0x3}}]}}}, {{0x254, 0x1, {{0x3}, 0x29, 0x4, 0xd7db, 0x7, 0x16, 'syz1\x00', "e7bc2f89675bceea078fa803ba803f711fd170dcb17538e5f8450659a027d312", "b72a0d2cae612fce97deb90bceace004107d00364bb73e06a39ea77fcb089540", [{0x9, 0x8, {0x3, 0x3}}, {0x3, 0x9, {0x3, 0x4}}, {0x5, 0x0, {0x3, 0x4}}, {0x8, 0x0, {0x3, 0x7}}, {0x1, 0x6, {0x1, 0x6}}, {0x8, 0x7f, {0x2}}, {0xa, 0xefa, {0x3, 0x8}}, {0x81, 0x25, {0x2, 0x3ff}}, {0xe000, 0x4, {0x3, 0x4}}, {0x3ff, 0x3, {0x1}}, {0xff, 0x7f, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0xb9bd539}}, {0x6, 0x0, {0x1}}, {0x2, 0x5, {0x1, 0x8}}, {0x2, 0x5, {0x2, 0x595d}}, {0xe, 0x9, {0x3, 0x2}}, {0x800, 0x8, {0x1, 0x4}}, {0x7f, 0xb6, {0x0, 0x80000000}}, {0x1, 0x5, {0x0, 0x71bf}}, {0x2, 0x0, {0x2, 0xfd5f}}, {0x0, 0x2, {0x1, 0x16733756}}, {0xe16, 0x10, {0x2, 0x4}}, {0x1000, 0x8, {0x0, 0x5}}, {0x400, 0x2, {0x0, 0x5}}, {0x40, 0x7, {0x2, 0x7}}, {0x6, 0xfffa, {0x2, 0x2}}, {0x7, 0xdc, {0x1, 0x8001}}, {0x5c9, 0x0, {0x1, 0x5}}, {0x98, 0x1, {0x0, 0xc}}, {0x3, 0xffff, {0x3, 0x5}}, {0x8000, 0x2, {0x1, 0xc40}}, {0xc, 0x0, {0x0, 0x3}}, {0x4, 0x5, {0x1, 0x80}}, {0x4000, 0x8, {0x0, 0xd}}, {0x4, 0x3, {0x7}}, {0x7ff, 0x8001, {0x0, 0x2}}, {0x0, 0x7, {0x0, 0x6}}, {0x8, 0x1, {0x3, 0x9a5b}}, {0x51, 0x6, {0x2, 0x8}}, {0x3, 0xfff, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x9, 0x5, 0x9, 0x1c44, 0x6, 'syz0\x00', "ce8c917f505d2cec58a3feb8d318e8f01ba4e7b74c97142c1f26d9b67a734fcd", "20eb8f88d82015b449a1f608077bdde6b8e6f02182dc4eb9d4d90c28b93a4a1f", [{0x0, 0x7, {0x1, 0x4}}, {0x1, 0x1000, {0x0, 0xc}}, {0x6, 0x4, {0x3, 0xfff}}, {0xfa5b, 0xf9, {0x1, 0x6}}, {0x1, 0x8, {0x3, 0x2}}, {0x2aa0, 0x7ff, {0x3, 0x9}}, {0xfff, 0x0, {0x3}}, {0xfdee, 0xa6, {0x2, 0xb}}, {0x8, 0xb, {0x2, 0x6}}, {0xb243, 0x1, {0x1, 0x31}}, {0x1, 0xe, {0x3, 0x10000}}, {0x3, 0x2, {0x2, 0x3000000}}, {0x8, 0x4, {0x0, 0x400}}, {0x0, 0x0, {0x3, 0x4}}, {0x973, 0x2, {0x2, 0x7}}, {0x8000, 0x9, {0x2, 0x2}}, {0x4, 0x4, {0x0, 0x6}}, {0x28, 0x3cd3, {0x2, 0x1}}, {0x40, 0xd, {0x1, 0x4}}, {0x7, 0xa0, {0x2, 0x6}}, {0xfffc, 0x6477, {0x3, 0x9}}, {0x9, 0x6, {0x2e39e4b173f42c0, 0x80}}, {0xc, 0xffd6, {0x2, 0x179}}, {0xc, 0x7, {0x3, 0x91cc}}, {0x606, 0x7, {0x2}}, {0x0, 0x2, {0x1, 0x9}}, {0xff, 0xeff, {0x2, 0x10}}, {0x17d, 0x7, {0x0, 0x7fffffff}}, {0x3ff, 0x0, {0xb30f98682de72580, 0x7}}, {0x3, 0x0, {0x2, 0x2}}, {0xec7d, 0x7, {0x1, 0xcc}}, {0x7, 0x8, {0x3, 0x8}}, {0x3, 0x0, {0x1, 0x8000}}, {0x1ff, 0x25, {0x2, 0x41}}, {0x8, 0x0, {0x3, 0x9}}, {0x4, 0x1, {0x0, 0x5a10}}, {0xae, 0x4, {0x1, 0x9}}, {0x1000, 0x40, {0x1, 0xac89}}, {0x7, 0x0, {0x3, 0x7}}, {0x8, 0x6, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x7ba}, 0x3, 0x3, 0x800, 0x7f, 0xf, 'syz0\x00', "d5e24c424d7b59b8ffcb2de5dc44430aa554a168ee8169e1b0840904f0cf6e85", "d30bb1e02d5f5597a6d7f42db0fad3cde66fb4cf600c624b8b364e307bf36d00", [{0x1, 0xb007, {0x2, 0x3}}, {0x7, 0x5, {0x3, 0x90846eb5}}, {0xf, 0x9, {0x0, 0x3}}, {0x9, 0x7, {0x3, 0x400}}, {0x5, 0x4, {0x3, 0x200}}, {0x488, 0x7fff, {0x1, 0x10001}}, {0x7, 0x6, {0x0, 0x5}}, {0x2, 0xa, {0x2}}, {0x5, 0xf101, {0x2, 0x7}}, {0x10, 0x3ff, {0x3, 0x3ff}}, {0x7, 0x2, {0x1, 0x4}}, {0xa, 0xd48f, {0x3}}, {0x6, 0xd, {0x3, 0x78000000}}, {0x3, 0x9, {0x2, 0x7}}, {0x3, 0x6, {0x2, 0x3}}, {0x6, 0x3, {0x0, 0x8e7}}, {0x8, 0x7, {0x3, 0xfffffffa}}, {0x0, 0x3, {0x3, 0x8001}}, {0x4a, 0xfffe, {0x3, 0x7}}, {0x2, 0x3, {0x3, 0x2a}}, {0x957c, 0x2, {0x3, 0x6}}, {0x2, 0x4, {0x1, 0x8}}, {0x8, 0xfff8, {0x1, 0xfff}}, {0x200, 0x463, {0x3, 0x40}}, {0xe, 0x400, {0x0, 0x8}}, {0x0, 0x2, {0x3, 0x7bc}}, {0x2, 0x5bbb, {0x0, 0x51b2}}, {0x6, 0x3, {0x3}}, {0x8000, 0xf65b, {0x2}}, {0x1, 0x8, {0x3, 0x7f}}, {0x6, 0x8, {0x1, 0x5}}, {0x6, 0x6, {0x1, 0xffff}}, {0x1ff, 0x29, {0x1, 0x8000}}, {0x3, 0x1000, {0x2, 0x6}}, {0x2, 0x0, {0x0, 0x8}}, {0x2, 0xff69, {0x0, 0x10001}}, {0x1ff, 0x8000, {0x1, 0xf}}, {0x6, 0x308a, {0x0, 0x1}}, {0x101, 0xc0c, {0x2, 0xf}}, {0x1, 0x0, {0x1, 0x1000}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x25, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @empty}}}, 0x108) close(r0) socket$inet6(0xa, 0x3, 0x7) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="0000180000000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$key(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x7, 0xa, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bb0, 0x2, {0x6, 0x33, 0x7f, 0x8, 0x0, 0x7, 0x0, @in6=@remote, @in=@local}}]}, 0x50}}, 0x80000) 1.875186508s ago: executing program 0 (id=372): socket(0xb, 0x5, 0x8bf1) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x24}}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r1, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000380)="d7330a59", 0x4}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x40010) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)=@secondary) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') (async) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) (async, rerun: 64) r8 = userfaultfd(0x80001) (rerun: 64) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) 1.679753698s ago: executing program 0 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004300)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffef81, 0x6288b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x5c}, 0x1, 0x0, 0x40000000000000, 0x1}, 0x0) 1.63290694s ago: executing program 4 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 1.603662682s ago: executing program 0 (id=375): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000001a0000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000d80)='./file2\x00', 0x1008002, &(0x7f0000000d00), 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x180c081, &(0x7f0000000ec0)={[], [{@uid_eq}, {@pcr={'pcr', 0x3d, 0x800000007}}, {@obj_role={'obj_role', 0x3d, '{['}}, {@seclabel}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'cgroup.procs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security.selinux\x00'}}, {@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0xcf}}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) close(r3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40000000, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000440)=[@rdmsr={0x66, 0x18, {0x400000b4}}], 0x18}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xe, 0x5, 0xfffffffffffffff6, 0x8000009654, 0x1, 0x7fffffff, 0x3, 0x10, 0xb, 0x80000000000000, 0x200cc0, 0x2, 0x5, 0x94d2, 0x0, 0x0, 0x809, 0x0, 0xff, 0x6, 0x40}) 1.552350064s ago: executing program 4 (id=376): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) 1.552108144s ago: executing program 2 (id=377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) finit_module(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0xffffffffffffff9d}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) 1.383811152s ago: executing program 2 (id=378): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) 1.307854146s ago: executing program 4 (id=380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0xffb0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.184596892s ago: executing program 2 (id=381): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$inet6(0xa, 0x3, 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x9f, 0x1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x800) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001880)='./file0\x00', 0x814, &(0x7f0000002400)={[{@uid={'uid', 0x3d, r5}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@sys_tz}, {@gid}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) 1.040328699s ago: executing program 4 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3, 0x0, 0xffffefd3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2000}, 0x1c) 975.349132ms ago: executing program 2 (id=383): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @multicast2}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000c80)=""/254, 0xfe}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/129, 0x81}], 0x8}, 0x5}], 0x3, 0x2100, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{r4, 0x6000}], 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r5) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000006c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r6, @ANYBLOB="000329bd7000fddbdf250e000000080005000080ffff5000018014000300e0000002000000000000000000000000060004004e22000008000900620000000700060064680000080008000100010008000800f8ffffff0600010002000000060001000a0000001400028006000e004e20000008000900040000002c0001800600010002000000070006006e710000060004004e220000080008005fb10000060004004e2100000800050000000000080005000080000034000180060001000a00000006006de824380c020032000000060004004e200000060001000200000008000b00736970000600020000000000fb0f13b88dadb6d8d192ed2308c37db95d078310d83dfab08ef405821d137035cf5cc3587cfcc7b57c556daf999bd1c14409a1810563755f1167c06880a60ffa6e1ee625c93787"], 0xf0}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000801) readv(r5, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000802, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macceltic,time_offset=0x0000000000000003,gid=', @ANYRESHEX=r8, @ANYBLOB="2c666d61736b3d30303030303000303030263030303030303030303030362c696f636861727365743d63703836332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c757466382c646d61736b3d3030303030303030303030303030303030303030a930312c00"], 0x1, 0x1537, &(0x7f00000034c0)="$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") syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2008010, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsname}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x31, 0x32, 0x39, 0x34, 0x34, 0x32, 0x63], 0x2d, [0x37, 0x61, 0x2, 0x31], 0x2d, [0x66, 0x32, 0x65, 0x5d], 0x2d, [0x65, 0x37, 0x34, 0xd8eca8c07acf362e], 0x2d, [0x66, 0x33, 0x38, 0x64, 0x32, 0x31, 0x34, 0x30]}}}, {@subj_role={'subj_role', 0x3d, 'ethtool\x00'}}]}}, 0x1, 0x0, &(0x7f0000000380)="4e9602d6c798ad") r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$describe(0x6, r9, &(0x7f0000000100)=""/140, 0x8c) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000000)) 825.33973ms ago: executing program 0 (id=384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 132.214454ms ago: executing program 4 (id=385): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x10, 0x0, 0x5}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x178, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendfile(r2, r3, 0x0, 0x7a680000) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=386): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f00000001c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@fat=@quiet}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@flush}]}, 0x29, 0x33e, &(0x7f0000000480)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="0105"], 0x90) syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): 8 [ 29.787045][ T365] dump_stack+0x15/0x24 [ 29.791238][ T365] should_fail_ex+0x3d4/0x520 [ 29.795967][ T365] ? getname_flags+0xb9/0x500 [ 29.800848][ T365] __should_failslab+0xac/0xf0 [ 29.805648][ T365] should_failslab+0x9/0x20 [ 29.810177][ T365] kmem_cache_alloc+0x3b/0x330 [ 29.814979][ T365] getname_flags+0xb9/0x500 [ 29.819508][ T365] ? __cfi_vfs_write+0x10/0x10 [ 29.824315][ T365] getname+0x19/0x20 [ 29.828236][ T365] do_sys_openat2+0xeb/0x810 [ 29.832867][ T365] ? __kasan_check_write+0x14/0x20 [ 29.838016][ T365] ? do_sys_open+0xe0/0xe0 [ 29.842467][ T365] ? ksys_write+0x1f4/0x250 [ 29.847004][ T365] ? __cfi_ksys_write+0x10/0x10 [ 29.851884][ T365] __x64_sys_openat+0x136/0x160 [ 29.856793][ T365] x64_sys_call+0x783/0x9a0 [ 29.861336][ T365] do_syscall_64+0x4c/0xa0 [ 29.865792][ T365] ? clear_bhb_loop+0x30/0x80 [ 29.870506][ T365] ? clear_bhb_loop+0x30/0x80 [ 29.875481][ T365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.879492][ T340] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 29.881403][ T365] RIP: 0033:0x7fed2579c799 [ 29.894088][ T365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.913815][ T365] RSP: 002b:00007fed26724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 29.922258][ T365] RAX: ffffffffffffffda RBX: 00007fed25a15fa0 RCX: 00007fed2579c799 [ 29.930264][ T365] RDX: 0000000000109942 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 29.938240][ T365] RBP: 00007fed26724090 R08: 0000000000000000 R09: 0000000000000000 [ 29.946214][ T365] R10: 000000000000017c R11: 0000000000000246 R12: 0000000000000001 [ 29.954187][ T365] R13: 00007fed25a16038 R14: 00007fed25a15fa0 R15: 00007ffed22aa1e8 [ 29.962168][ T365] [ 30.135972][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.407395][ T341] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.420105][ T368] syz.4.5 (368) used greatest stack depth: 21504 bytes left [ 30.604376][ T341] usb 2-1: Using ep0 maxpacket: 32 [ 30.613957][ T341] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.640781][ T341] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 30.652010][ T341] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 30.663001][ T341] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 30.685153][ T341] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.702087][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.727355][ T341] usb 2-1: SerialNumber: syz [ 30.747432][ T351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.771040][ T351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.788573][ T341] hub 2-1:1.0: bad descriptor, ignoring hub [ 30.804744][ T341] hub: probe of 2-1:1.0 failed with error -5 [ 30.936313][ T370] loop2: detected capacity change from 0 to 40427 [ 31.078038][ T370] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 31.151187][ T341] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 31.161954][ T341] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 31.167942][ T370] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.176170][ T370] F2FS-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 31.217689][ T341] usb 2-1: USB disconnect, device number 2 [ 31.264647][ T376] loop0: detected capacity change from 0 to 40427 [ 31.279768][ T376] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 31.332261][ T376] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.347926][ T376] F2FS-fs (loop0): invalid crc value [ 31.370927][ T376] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.444599][ T376] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.454857][ T376] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.518327][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 31.518343][ T28] audit: type=1400 audit(1774093156.914:139): avc: denied { create } for pid=375 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.547931][ T28] audit: type=1400 audit(1774093156.934:140): avc: denied { setopt } for pid=375 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.570851][ T28] audit: type=1400 audit(1774093156.934:141): avc: denied { map } for pid=375 comm="syz.0.14" path="socket:[15127]" dev="sockfs" ino=15127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.600685][ T402] loop4: detected capacity change from 0 to 1024 [ 31.604439][ T28] audit: type=1400 audit(1774093156.934:142): avc: denied { read accept } for pid=375 comm="syz.0.14" path="socket:[15127]" dev="sockfs" ino=15127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.630110][ T403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 31.638107][ T402] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 31.648083][ T402] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: inode #8: comm syz.4.19: inode has both inline data and extents flags [ 31.663913][ T402] EXT4-fs (loop4): no journal found [ 31.675707][ T28] audit: type=1400 audit(1774093156.984:143): avc: denied { create } for pid=400 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.701751][ T28] audit: type=1400 audit(1774093156.994:144): avc: denied { mounton } for pid=400 comm="syz.2.18" path="/4/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.738582][ T404] option changes via remount are deprecated (pid=400 comm=syz.2.18) [ 31.749669][ T28] audit: type=1400 audit(1774093157.134:145): avc: denied { remount } for pid=400 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.770727][ T403] loop2: detected capacity change from 0 to 128 [ 31.781061][ T28] audit: type=1400 audit(1774093157.174:146): avc: denied { write } for pid=401 comm="syz.4.19" name="mcfilter6" dev="proc" ino=4026532517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.805061][ T403] ======================================================= [ 31.805061][ T403] WARNING: The mand mount option has been deprecated and [ 31.805061][ T403] and is ignored by this kernel. Remove the mand [ 31.805061][ T403] option from the mount to silence this warning. [ 31.805061][ T403] ======================================================= [ 31.840339][ T403] cgroup: Unknown subsys name 'mangle' [ 31.848539][ T28] audit: type=1400 audit(1774093157.244:147): avc: denied { write } for pid=400 comm="syz.2.18" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.877654][ T403] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 32.136899][ T410] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 32.183345][ T28] audit: type=1400 audit(1774093157.574:148): avc: denied { setattr } for pid=413 comm="syz.3.23" name="NETLINK" dev="sockfs" ino=16371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.210840][ T414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 32.243256][ T417] loop0: detected capacity change from 0 to 1024 [ 32.250721][ T417] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 32.260902][ T417] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: inode #8: comm syz.0.20: inode has both inline data and extents flags [ 32.275134][ T417] EXT4-fs (loop0): no journal found [ 33.057364][ T427] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.167043][ T422] loop3: detected capacity change from 0 to 40427 [ 33.177838][ T422] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 33.185648][ T422] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 33.206367][ T422] F2FS-fs (loop3): invalid crc value [ 33.235547][ T422] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 33.265287][ T427] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 33.278681][ T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.286964][ T422] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 33.286972][ T427] usb 3-1: Product: syz [ 33.286989][ T422] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.294938][ T427] usb 3-1: Manufacturer: syz [ 33.315902][ T427] usb 3-1: SerialNumber: syz [ 33.547334][ T335] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.735626][ T458] loop4: detected capacity change from 0 to 1024 [ 33.743863][ T458] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 33.754081][ T458] EXT4-fs error (device loop4): ext4_get_journal_inode:5743: inode #8: comm syz.4.37: inode has both inline data and extents flags [ 33.768079][ T458] EXT4-fs (loop4): no journal found [ 33.789620][ T394] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.862313][ T335] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 33.870644][ T335] usb 1-1: config 0 has no interface number 0 [ 33.877003][ T335] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 33.888597][ T335] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 33.898637][ T335] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 33.909796][ T335] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 33.921258][ T335] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 33.930373][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.938482][ T335] usb 1-1: Product: syz [ 33.942776][ T335] usb 1-1: Manufacturer: syz [ 33.947472][ T335] usb 1-1: SerialNumber: syz [ 33.955438][ T335] usb 1-1: config 0 descriptor?? [ 33.966254][ T335] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 33.979182][ T335] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input4 [ 34.166814][ T335] usb 1-1: USB disconnect, device number 2 [ 34.209495][ T335] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 34.461695][ T475] loop3: detected capacity change from 0 to 1024 [ 34.524387][ T475] EXT4-fs: Ignoring removed bh option [ 34.639542][ T475] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 34.654648][ T475] EXT4-fs (loop3): barriers disabled [ 34.660446][ T475] JBD2: no valid journal superblock found [ 34.666354][ T475] EXT4-fs (loop3): error loading journal [ 34.786928][ T482] loop3: detected capacity change from 0 to 1024 [ 34.794108][ T482] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 34.805847][ T482] EXT4-fs error (device loop3): ext4_get_journal_inode:5743: inode #8: comm syz.3.43: inode has both inline data and extents flags [ 34.819752][ T482] EXT4-fs (loop3): no journal found [ 34.861450][ T485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 34.884071][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.891805][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.933590][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.945347][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.957525][ T335] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 34.965818][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.974148][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.995754][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.011941][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.022318][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.055002][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.201523][ T493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 35.216971][ T493] netlink: 92 bytes leftover after parsing attributes in process `syz.1.46'. [ 35.289138][ T485] syz.4.44 (485) used greatest stack depth: 18992 bytes left [ 35.317672][ T335] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.520657][ T335] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 35.531306][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.544391][ T335] usb 1-1: Product: syz [ 35.548880][ T335] usb 1-1: Manufacturer: syz [ 35.553653][ T335] usb 1-1: SerialNumber: syz [ 35.562203][ T335] usb 1-1: config 0 descriptor?? [ 35.570397][ T335] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 35.640450][ T288] usb 3-1: USB disconnect, device number 2 [ 35.672855][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 35.701542][ T506] loop2: detected capacity change from 0 to 256 [ 35.713702][ T506] FAT-fs (loop2): Directory bread(block 64) failed [ 35.720465][ T506] FAT-fs (loop2): Directory bread(block 65) failed [ 35.727068][ T506] FAT-fs (loop2): Directory bread(block 66) failed [ 35.734051][ T506] FAT-fs (loop2): Directory bread(block 67) failed [ 35.740658][ T506] FAT-fs (loop2): Directory bread(block 68) failed [ 35.747191][ T506] FAT-fs (loop2): Directory bread(block 69) failed [ 35.753819][ T506] FAT-fs (loop2): Directory bread(block 70) failed [ 35.760394][ T506] FAT-fs (loop2): Directory bread(block 71) failed [ 35.766958][ T506] FAT-fs (loop2): Directory bread(block 72) failed [ 35.773545][ T506] FAT-fs (loop2): Directory bread(block 73) failed [ 35.852678][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 35.862583][ T508] netlink: 76 bytes leftover after parsing attributes in process `syz.3.53'. [ 35.877476][ T451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 35.891515][ T508] Zero length message leads to an empty skb [ 35.911295][ T510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (12 ns). Using initial count to start timer. [ 36.036928][ T24] usb 5-1: device descriptor read/64, error -71 [ 36.096085][ T517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.345307][ T520] FAULT_INJECTION: forcing a failure. [ 36.345307][ T520] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.359022][ T520] CPU: 0 PID: 520 Comm: syz.1.56 Not tainted syzkaller #0 [ 36.366176][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 36.376354][ T520] Call Trace: [ 36.379662][ T520] [ 36.382620][ T520] __dump_stack+0x21/0x24 [ 36.386991][ T520] dump_stack_lvl+0x110/0x170 [ 36.391706][ T520] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.396772][ T520] dump_stack+0x15/0x24 [ 36.400973][ T520] should_fail_ex+0x3d4/0x520 [ 36.405699][ T520] should_fail+0xb/0x10 [ 36.409901][ T520] should_fail_usercopy+0x1a/0x20 [ 36.414977][ T520] strncpy_from_user+0x24/0x2d0 [ 36.419865][ T520] ? getname_flags+0xb9/0x500 [ 36.424580][ T520] getname_flags+0xf4/0x500 [ 36.429116][ T520] ? __cfi_vfs_write+0x10/0x10 [ 36.433916][ T520] getname+0x19/0x20 [ 36.437864][ T520] do_sys_openat2+0xeb/0x810 [ 36.442498][ T520] ? __kasan_check_write+0x14/0x20 [ 36.447459][ T24] usb 5-1: device descriptor read/64, error -71 [ 36.447642][ T520] ? do_sys_open+0xe0/0xe0 [ 36.458339][ T520] ? ksys_write+0x1f4/0x250 [ 36.462872][ T520] ? __cfi_ksys_write+0x10/0x10 [ 36.467752][ T520] __x64_sys_openat+0x136/0x160 [ 36.472638][ T520] x64_sys_call+0x783/0x9a0 [ 36.477172][ T520] do_syscall_64+0x4c/0xa0 [ 36.481629][ T520] ? clear_bhb_loop+0x30/0x80 [ 36.486332][ T520] ? clear_bhb_loop+0x30/0x80 [ 36.491119][ T520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.497030][ T520] RIP: 0033:0x7f2d8479c799 [ 36.501467][ T520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.521182][ T520] RSP: 002b:00007f2d856ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.529630][ T520] RAX: ffffffffffffffda RBX: 00007f2d84a15fa0 RCX: 00007f2d8479c799 [ 36.537630][ T520] RDX: 0000000000109942 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 36.545634][ T520] RBP: 00007f2d856ea090 R08: 0000000000000000 R09: 0000000000000000 [ 36.553633][ T520] R10: 000000000000017c R11: 0000000000000246 R12: 0000000000000001 [ 36.561634][ T520] R13: 00007f2d84a16038 R14: 00007f2d84a15fa0 R15: 00007ffd1f924c28 [ 36.569731][ T520] [ 36.666306][ T524] loop2: detected capacity change from 0 to 512 [ 36.677448][ T451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 36.692029][ T451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 36.711039][ T394] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.724020][ T524] loop2: detected capacity change from 0 to 256 [ 36.724180][ T394] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.732190][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 36.747534][ T524] FAT-fs (loop2): Unrecognized mount option "shortname=winntf8=0" or missing value [ 36.867652][ T451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 36.927381][ T24] usb 5-1: device descriptor read/64, error -71 [ 36.974132][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 36.974156][ T28] audit: type=1400 audit(1774093162.364:169): avc: denied { ioctl } for pid=531 comm="syz.2.62" path="socket:[17437]" dev="sockfs" ino=17437 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.186990][ T522] loop3: detected capacity change from 0 to 131072 [ 37.197434][ T24] usb 5-1: device descriptor read/64, error -71 [ 37.203844][ T522] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 37.226269][ T522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.243692][ T522] F2FS-fs (loop3): invalid crc value [ 37.278447][ T522] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.327387][ T24] usb usb5-port1: attempt power cycle [ 37.368932][ T522] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.377168][ T522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 37.393756][ T28] audit: type=1400 audit(1774093162.784:170): avc: denied { mount } for pid=521 comm="syz.3.57" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.512118][ T28] audit: type=1400 audit(1774093162.904:171): avc: denied { create } for pid=521 comm="syz.3.57" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.556266][ T28] audit: type=1400 audit(1774093162.944:172): avc: denied { mounton } for pid=521 comm="syz.3.57" path="/16/bus/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.615285][ T28] audit: type=1400 audit(1774093162.974:173): avc: denied { write } for pid=521 comm="syz.3.57" name="bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.660447][ T28] audit: type=1400 audit(1774093162.974:174): avc: denied { add_name } for pid=521 comm="syz.3.57" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.700731][ T28] audit: type=1400 audit(1774093162.974:175): avc: denied { setattr } for pid=521 comm="syz.3.57" name="work" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.737387][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 37.748271][ T28] audit: type=1400 audit(1774093162.974:176): avc: denied { remove_name } for pid=521 comm="syz.3.57" name="#7" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.778415][ T24] usb 5-1: device descriptor read/8, error -71 [ 37.788497][ T28] audit: type=1400 audit(1774093162.974:177): avc: denied { rename } for pid=521 comm="syz.3.57" name="#7" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.810461][ T28] audit: type=1400 audit(1774093162.974:178): avc: denied { unlink } for pid=521 comm="syz.3.57" name="#7" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.905761][ T528] loop1: detected capacity change from 0 to 131072 [ 37.928376][ T24] usb 5-1: device descriptor read/8, error -71 [ 37.976692][ T528] F2FS-fs (loop1): invalid crc value [ 38.004660][ T528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.034209][ T548] loop2: detected capacity change from 0 to 256 [ 38.046647][ T548] FAT-fs (loop2): Directory bread(block 64) failed [ 38.053275][ T548] FAT-fs (loop2): Directory bread(block 65) failed [ 38.059874][ T548] FAT-fs (loop2): Directory bread(block 66) failed [ 38.066429][ T548] FAT-fs (loop2): Directory bread(block 67) failed [ 38.073055][ T548] FAT-fs (loop2): Directory bread(block 68) failed [ 38.079633][ T548] FAT-fs (loop2): Directory bread(block 69) failed [ 38.086210][ T548] FAT-fs (loop2): Directory bread(block 70) failed [ 38.092892][ T548] FAT-fs (loop2): Directory bread(block 71) failed [ 38.099517][ T548] FAT-fs (loop2): Directory bread(block 72) failed [ 38.106064][ T548] FAT-fs (loop2): Directory bread(block 73) failed [ 38.176527][ T528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 38.216817][ T551] loop3: detected capacity change from 0 to 1024 [ 38.228161][ T551] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 38.238460][ T551] EXT4-fs error (device loop3): ext4_get_journal_inode:5743: inode #8: comm syz.3.63: inode has both inline data and extents flags [ 38.238747][ T6] usb 1-1: USB disconnect, device number 3 [ 38.258524][ T551] EXT4-fs (loop3): no journal found [ 38.264252][ T528] F2FS-fs (loop1): inconsistent node block, nid:7, node_footer[nid:327687,ino:7,ofs:0,cpver:1219692001,blkaddr:4611] [ 38.276749][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 38.504011][ T554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 38.520422][ T24] usb 5-1: device descriptor read/8, error -71 [ 39.532975][ T562] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 39.611562][ T24] usb 5-1: device descriptor read/8, error -71 [ 39.737399][ T24] usb usb5-port1: unable to enumerate USB device [ 39.745643][ T578] loop1: detected capacity change from 0 to 128 [ 39.840698][ T578] syz.1.68: attempt to access beyond end of device [ 39.840698][ T578] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 39.950614][ T567] loop3: detected capacity change from 0 to 40427 [ 39.980098][ T567] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 40.004431][ T567] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.023741][ T567] F2FS-fs (loop3): invalid crc value [ 40.058876][ T567] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.089867][ T589] loop4: detected capacity change from 0 to 512 [ 40.129776][ T592] netlink: 92 bytes leftover after parsing attributes in process `syz.1.78'. [ 40.153879][ T589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.217437][ T589] EXT4-fs (loop4): shut down requested (2) [ 40.228762][ T589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 40.245112][ T567] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.252384][ T589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 40.261786][ T567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.289445][ T287] EXT4-fs (loop4): unmounting filesystem. [ 40.591540][ T624] netlink: 4772 bytes leftover after parsing attributes in process `syz.3.88'. [ 40.624485][ T627] process 'syz.4.91' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 41.157371][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 41.311490][ T641] loop0: detected capacity change from 0 to 512 [ 41.328806][ T641] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 41.355339][ T641] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 41.366536][ T641] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.374912][ T641] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e01c, mo2=0000] [ 41.383158][ T641] EXT4-fs (loop0): too many log groups per flexible block group [ 41.391448][ T641] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 41.398660][ T641] EXT4-fs (loop0): mount failed [ 41.555694][ T655] netlink: 63 bytes leftover after parsing attributes in process `syz.4.100'. [ 41.585155][ T657] netlink: 136 bytes leftover after parsing attributes in process `syz.0.101'. [ 41.594499][ T657] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 41.726700][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 41.897360][ T451] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 42.088724][ T451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.100271][ T451] usb 4-1: not running at top speed; connect to a high speed hub [ 42.123498][ T451] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 42.149368][ T451] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 42.173132][ T451] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 42.183076][ T451] usb 4-1: config 129 has no interface number 0 [ 42.189697][ T451] usb 4-1: config 129 has no interface number 1 [ 42.196120][ T451] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 42.209684][ T451] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 42.220866][ T451] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 42.234398][ T451] usb 4-1: config 129 interface 135 has no altsetting 0 [ 42.248544][ T451] usb 4-1: config 129 interface 5 has no altsetting 0 [ 42.264415][ T451] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 42.283845][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.293942][ T451] usb 4-1: Product: syz [ 42.302419][ T451] usb 4-1: Manufacturer: syz [ 42.307158][ T451] usb 4-1: SerialNumber: syz [ 42.345559][ T678] loop1: detected capacity change from 0 to 256 [ 42.365044][ T678] exfat: Deprecated parameter 'namecase' [ 42.379615][ T678] exfat: Deprecated parameter 'namecase' [ 42.388421][ T678] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 42.414921][ T675] loop0: detected capacity change from 0 to 131072 [ 42.422722][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 42.422737][ T28] audit: type=1400 audit(2000000001.790:210): avc: denied { remount } for pid=674 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.457946][ T28] audit: type=1400 audit(2000000001.800:211): avc: denied { read write } for pid=674 comm="syz.0.109" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 42.523282][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.542179][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.544026][ T28] audit: type=1400 audit(2000000001.800:212): avc: denied { open } for pid=674 comm="syz.0.109" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 42.573753][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.593147][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.607966][ T28] audit: type=1400 audit(2000000001.820:213): avc: denied { write } for pid=677 comm="syz.1.110" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.614012][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.650437][ T686] overlayfs: missing 'lowerdir' [ 42.667566][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.694858][ T690] loop2: detected capacity change from 0 to 1024 [ 42.696115][ T28] audit: type=1400 audit(2000000001.820:214): avc: denied { add_name } for pid=677 comm="syz.1.110" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.710653][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.730611][ T690] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 42.741163][ T690] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: inode #8: comm syz.2.115: inode has both inline data and extents flags [ 42.755421][ T690] EXT4-fs (loop2): no journal found [ 42.807573][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.828254][ T28] audit: type=1400 audit(2000000001.820:215): avc: denied { associate } for pid=677 comm="syz.1.110" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.861102][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.891014][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.910869][ T689] loop4: detected capacity change from 0 to 8192 [ 42.924216][ T28] audit: type=1400 audit(2000000001.820:216): avc: denied { read write open } for pid=677 comm="syz.1.110" path="/20/file0/bus" dev="loop1" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.022782][ T28] audit: type=1400 audit(2000000002.320:217): avc: denied { watch watch_reads } for pid=688 comm="syz.4.114" path="/30/file2/file0" dev="loop4" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 43.114602][ T28] audit: type=1400 audit(2000000002.340:218): avc: denied { mounton } for pid=688 comm="syz.4.114" path="/30/file2/file0/file0" dev="loop4" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 43.138365][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.151480][ T451] usb 4-1: MIDIStreaming interface descriptor not found [ 43.169234][ T451] usb 4-1: USB disconnect, device number 2 [ 43.206979][ T28] audit: type=1400 audit(2000000002.350:219): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 43.329859][ T6] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.339011][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.347025][ T6] usb 2-1: Product: syz [ 43.351263][ T6] usb 2-1: Manufacturer: syz [ 43.356672][ T6] usb 2-1: SerialNumber: syz [ 43.377336][ T491] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.558579][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.569643][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.579468][ T491] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 43.587479][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 43.597360][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.606209][ T491] usb 1-1: config 0 descriptor?? [ 43.663556][ T707] loop2: detected capacity change from 0 to 4096 [ 43.670214][ T709] overlayfs: workdir and upperdir must be separate subtrees [ 43.682369][ T707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.719561][ T712] loop3: detected capacity change from 0 to 1024 [ 43.726562][ T712] EXT4-fs: Ignoring removed bh option [ 43.745092][ T712] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 43.761313][ T712] EXT4-fs (loop3): barriers disabled [ 43.766663][ T712] JBD2: no valid journal superblock found [ 43.772603][ T712] EXT4-fs (loop3): error loading journal [ 43.787338][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 43.792948][ T24] usb 5-1: too many configurations: 108, using maximum allowed: 8 [ 43.808930][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 43.819711][ T24] usb 5-1: can't read configurations, error -22 [ 43.827841][ T285] EXT4-fs (loop2): unmounting filesystem. [ 43.977338][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.035831][ T491] usbhid 1-1:0.0: can't add hid device: -71 [ 44.042000][ T491] usbhid: probe of 1-1:0.0 failed with error -71 [ 44.049517][ T491] usb 1-1: USB disconnect, device number 4 [ 44.145129][ T730] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 44.155369][ T730] EXT4-fs error (device loop2): ext4_get_journal_inode:5743: inode #8: comm syz.2.128: inode has both inline data and extents flags [ 44.169173][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 44.169222][ T730] EXT4-fs (loop2): no journal found [ 44.180533][ T24] usb 5-1: too many configurations: 108, using maximum allowed: 8 [ 44.241836][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 44.250633][ T24] usb 5-1: can't read configurations, error -22 [ 44.257052][ T24] usb usb5-port1: attempt power cycle [ 44.568792][ T734] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 44.579181][ T734] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: inode #8: comm syz.0.129: inode has both inline data and extents flags [ 44.592954][ T734] EXT4-fs (loop0): no journal found [ 44.667353][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 44.697749][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 44.703393][ T24] usb 5-1: too many configurations: 108, using maximum allowed: 8 [ 44.729521][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 44.753846][ T24] usb 5-1: can't read configurations, error -22 [ 44.917360][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 44.957682][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 44.963649][ T24] usb 5-1: too many configurations: 108, using maximum allowed: 8 [ 44.978042][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 249 [ 45.009527][ T24] usb 5-1: can't read configurations, error -22 [ 45.016182][ T24] usb usb5-port1: unable to enumerate USB device [ 45.079979][ T743] xt_CT: No such helper "pptp" [ 45.106613][ T745] set_capacity_and_notify: 2 callbacks suppressed [ 45.106626][ T745] loop2: detected capacity change from 0 to 512 [ 45.123582][ T745] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.137646][ T745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.150633][ T745] EXT4-fs (loop2): 1 orphan inode deleted [ 45.156384][ T745] EXT4-fs (loop2): 1 truncate cleaned up [ 45.162120][ T745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.172241][ T745] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.133: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 45.198348][ T285] EXT4-fs (loop2): unmounting filesystem. [ 45.245771][ T753] loop2: detected capacity change from 0 to 2048 [ 45.510926][ T755] fuse: Bad value for 'group_id' [ 45.564871][ T24] usb 2-1: USB disconnect, device number 3 [ 45.628982][ T760] FAULT_INJECTION: forcing a failure. [ 45.628982][ T760] name failslab, interval 1, probability 0, space 0, times 0 [ 45.642259][ T760] CPU: 0 PID: 760 Comm: syz.1.139 Not tainted syzkaller #0 [ 45.649507][ T760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.659596][ T760] Call Trace: [ 45.662904][ T760] [ 45.665858][ T760] __dump_stack+0x21/0x24 [ 45.670224][ T760] dump_stack_lvl+0x110/0x170 [ 45.674935][ T760] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.680011][ T760] dump_stack+0x15/0x24 [ 45.684215][ T760] should_fail_ex+0x3d4/0x520 [ 45.688942][ T760] __should_failslab+0xac/0xf0 [ 45.693750][ T760] ? sock_kmalloc+0x99/0xf0 [ 45.698301][ T760] should_failslab+0x9/0x20 [ 45.702855][ T760] __kmem_cache_alloc_node+0x3d/0x2c0 [ 45.708266][ T760] ? sock_kmalloc+0x99/0xf0 [ 45.712816][ T760] __kmalloc+0xa1/0x1e0 [ 45.717030][ T760] sock_kmalloc+0x99/0xf0 [ 45.721406][ T760] ____sys_sendmsg+0x1bb/0x990 [ 45.726240][ T760] ? __sys_sendmsg_sock+0x40/0x40 [ 45.731295][ T760] ? import_iovec+0x7c/0xb0 [ 45.735813][ T760] ___sys_sendmsg+0x2a2/0x360 [ 45.740877][ T760] ? __sys_sendmsg+0x290/0x290 [ 45.745715][ T760] ? kstrtouint+0x74/0xe0 [ 45.750062][ T760] ? __fdget+0x19c/0x220 [ 45.754830][ T760] __sys_sendmmsg+0x2cc/0x4e0 [ 45.759530][ T760] ? __cfi___sys_sendmmsg+0x10/0x10 [ 45.764751][ T760] ? __cfi_ksys_write+0x10/0x10 [ 45.769623][ T760] __x64_sys_sendmmsg+0xa0/0xb0 [ 45.774508][ T760] x64_sys_call+0x3f5/0x9a0 [ 45.779069][ T760] do_syscall_64+0x4c/0xa0 [ 45.783545][ T760] ? clear_bhb_loop+0x30/0x80 [ 45.788921][ T760] ? clear_bhb_loop+0x30/0x80 [ 45.793634][ T760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.799542][ T760] RIP: 0033:0x7f2d8479c799 [ 45.803983][ T760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.823595][ T760] RSP: 002b:00007f2d856ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 45.832019][ T760] RAX: ffffffffffffffda RBX: 00007f2d84a15fa0 RCX: 00007f2d8479c799 [ 45.839995][ T760] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 45.847979][ T760] RBP: 00007f2d856ea090 R08: 0000000000000000 R09: 0000000000000000 [ 45.855972][ T760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.864062][ T760] R13: 00007f2d84a16038 R14: 00007f2d84a15fa0 R15: 00007ffd1f924c28 [ 45.872056][ T760] [ 45.922275][ T770] loop1: detected capacity change from 0 to 1024 [ 45.933710][ T770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.956535][ T770] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 46.076403][ T283] EXT4-fs (loop1): unmounting filesystem. [ 46.099533][ T798] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 46.108272][ T798] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 46.262793][ T809] netlink: 25 bytes leftover after parsing attributes in process `syz.4.151'. [ 46.272025][ T809] device gretap0 entered promiscuous mode [ 46.937324][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 46.984598][ T835] loop2: detected capacity change from 0 to 512 [ 47.001175][ T842] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 47.018344][ T835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.040322][ T835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=835 comm=syz.2.161 [ 47.065555][ T846] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 47.129989][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.144892][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.155286][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 47.165030][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.189034][ T24] usb 4-1: config 0 descriptor?? [ 47.357350][ T335] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.414424][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 47.421152][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 47.446485][ T24] usb 4-1: USB disconnect, device number 3 [ 47.501650][ T288] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 47.558738][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.576193][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.594944][ T335] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 47.607046][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.619505][ T335] usb 2-1: config 0 descriptor?? [ 47.676695][ T863] xt_bpf: check failed: parse error [ 47.687319][ T288] usb 5-1: Using ep0 maxpacket: 32 [ 47.693612][ T288] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 47.712212][ T288] usb 5-1: config 4 has no interface number 0 [ 47.722311][ T288] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.743637][ T288] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 47.762882][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.781573][ T288] hub 5-1:4.128: USB hub found [ 47.802879][ T285] EXT4-fs (loop2): unmounting filesystem. [ 47.971419][ T870] loop3: detected capacity change from 0 to 256 [ 47.978985][ T288] hub 5-1:4.128: 19 ports detected [ 47.984203][ T288] hub 5-1:4.128: Using single TT (err -22) [ 48.009337][ T288] hub 5-1:4.128: insufficient power available to use all downstream ports [ 48.019855][ T870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 48.062066][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 48.062080][ T28] audit: type=1400 audit(2000000007.430:291): avc: denied { mount } for pid=869 comm="syz.3.171" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.157351][ T28] audit: type=1400 audit(2000000007.460:292): avc: denied { getopt } for pid=869 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.182347][ T288] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 48.197322][ T288] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 48.237390][ T28] audit: type=1400 audit(2000000007.490:293): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.257898][ T288] usb 5-1: USB disconnect, device number 10 [ 48.307398][ T28] audit: type=1400 audit(2000000007.610:294): avc: denied { read } for pid=873 comm="syz.3.173" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.367593][ T28] audit: type=1400 audit(2000000007.740:295): avc: denied { nlmsg_write } for pid=873 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.427325][ T28] audit: type=1400 audit(2000000007.740:296): avc: denied { connect } for pid=873 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.630183][ T28] audit: type=1400 audit(2000000008.000:297): avc: denied { accept } for pid=877 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.697325][ T28] audit: type=1400 audit(2000000008.040:298): avc: denied { read write } for pid=877 comm="syz.1.174" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.753396][ T880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 48.777488][ T28] audit: type=1400 audit(2000000008.040:299): avc: denied { open } for pid=877 comm="syz.1.174" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.807380][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.845376][ T28] audit: type=1400 audit(2000000008.190:300): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.889489][ T884] loop1: detected capacity change from 0 to 256 [ 48.896262][ T884] exfat: Deprecated parameter 'namecase' [ 48.938562][ T884] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 49.019943][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.037455][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.065859][ T24] usb 4-1: Product: syz [ 49.075979][ T24] usb 4-1: Manufacturer: syz [ 49.091002][ T24] usb 4-1: SerialNumber: syz [ 49.104586][ T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.134534][ T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.154345][ T891] netlink: 280 bytes leftover after parsing attributes in process `syz.0.180'. [ 49.250279][ T895] loop0: detected capacity change from 0 to 256 [ 49.266617][ T895] FAT-fs (loop0): Directory bread(block 64) failed [ 49.273369][ T895] FAT-fs (loop0): Directory bread(block 65) failed [ 49.280441][ T895] FAT-fs (loop0): Directory bread(block 66) failed [ 49.287031][ T895] FAT-fs (loop0): Directory bread(block 67) failed [ 49.293642][ T895] FAT-fs (loop0): Directory bread(block 68) failed [ 49.300230][ T895] FAT-fs (loop0): Directory bread(block 69) failed [ 49.306841][ T895] FAT-fs (loop0): Directory bread(block 70) failed [ 49.313443][ T895] FAT-fs (loop0): Directory bread(block 71) failed [ 49.320035][ T895] FAT-fs (loop0): Directory bread(block 72) failed [ 49.326613][ T895] FAT-fs (loop0): Directory bread(block 73) failed [ 49.472000][ T896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 49.637810][ T335] usbhid 2-1:0.0: can't add hid device: -71 [ 49.643823][ T335] usbhid: probe of 2-1:0.0 failed with error -71 [ 49.677408][ T335] usb 2-1: USB disconnect, device number 4 [ 49.861282][ T888] loop2: detected capacity change from 0 to 131072 [ 49.872653][ T888] F2FS-fs (loop2): invalid crc value [ 49.886138][ T888] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.947958][ T888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 49.964855][ T888] FAULT_INJECTION: forcing a failure. [ 49.964855][ T888] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.992701][ T888] CPU: 1 PID: 888 Comm: syz.2.179 Not tainted syzkaller #0 [ 49.999972][ T888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.010062][ T888] Call Trace: [ 50.013783][ T888] [ 50.016747][ T888] __dump_stack+0x21/0x24 [ 50.021117][ T888] dump_stack_lvl+0x110/0x170 [ 50.025838][ T888] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.030909][ T888] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 50.036678][ T888] dump_stack+0x15/0x24 [ 50.040871][ T888] should_fail_ex+0x3d4/0x520 [ 50.045607][ T888] should_fail_alloc_page+0x61/0x90 [ 50.050859][ T888] prepare_alloc_pages+0x148/0x600 [ 50.056027][ T888] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 50.061274][ T888] __alloc_pages+0x15b/0x610 [ 50.065918][ T888] ? __cfi___alloc_pages+0x10/0x10 [ 50.071081][ T888] ? xas_start+0x31e/0x3e0 [ 50.075704][ T888] __folio_alloc+0x12/0x40 [ 50.080170][ T888] __filemap_get_folio+0x6ee/0xa60 [ 50.085340][ T888] ? __cfi___filemap_get_folio+0x10/0x10 [ 50.091017][ T888] pagecache_get_page+0x2b/0x110 [ 50.095997][ T888] f2fs_get_read_data_page+0x189/0x850 [ 50.101488][ T888] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 50.107510][ T888] f2fs_find_data_page+0x198/0x3a0 [ 50.112646][ T888] f2fs_readdir+0x49e/0x990 [ 50.117177][ T888] ? __cfi_f2fs_readdir+0x10/0x10 [ 50.122225][ T888] ? avc_policy_seqno+0x1b/0x70 [ 50.127107][ T888] ? down_read_killable+0xbc/0x110 [ 50.132235][ T888] ? __cfi_down_read_killable+0x10/0x10 [ 50.137809][ T888] ? fsnotify_perm+0x269/0x5b0 [ 50.142591][ T888] ? security_file_permission+0x94/0xb0 [ 50.148160][ T888] iterate_dir+0x271/0x610 [ 50.152592][ T888] ? __cfi_f2fs_readdir+0x10/0x10 [ 50.157638][ T888] __se_sys_getdents+0xf2/0x250 [ 50.162502][ T888] ? fput+0x154/0x1a0 [ 50.166520][ T888] ? __x64_sys_getdents+0x90/0x90 [ 50.171564][ T888] ? ksys_write+0x1f4/0x250 [ 50.176083][ T888] ? __cfi_filldir+0x10/0x10 [ 50.180686][ T888] ? __cfi_ksys_write+0x10/0x10 [ 50.185564][ T888] ? debug_smp_processor_id+0x17/0x20 [ 50.190982][ T888] __x64_sys_getdents+0x7b/0x90 [ 50.195870][ T888] x64_sys_call+0x212/0x9a0 [ 50.200576][ T888] do_syscall_64+0x4c/0xa0 [ 50.205025][ T888] ? clear_bhb_loop+0x30/0x80 [ 50.209730][ T888] ? clear_bhb_loop+0x30/0x80 [ 50.214704][ T888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.220645][ T888] RIP: 0033:0x7fed2579c799 [ 50.225162][ T888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.244891][ T888] RSP: 002b:00007fed26724028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 50.253317][ T888] RAX: ffffffffffffffda RBX: 00007fed25a15fa0 RCX: 00007fed2579c799 [ 50.261301][ T888] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 50.269320][ T888] RBP: 00007fed26724090 R08: 0000000000000000 R09: 0000000000000000 [ 50.277392][ T888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.285392][ T888] R13: 00007fed25a16038 R14: 00007fed25a15fa0 R15: 00007ffed22aa1e8 [ 50.293388][ T888] [ 50.355437][ T886] loop4: detected capacity change from 0 to 131072 [ 50.363124][ T886] F2FS-fs (loop4): invalid crc value [ 50.377759][ T886] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.435581][ T886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 50.677404][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 50.709122][ T917] device ip6gre1 entered promiscuous mode [ 51.006546][ T930] loop2: detected capacity change from 0 to 1024 [ 51.067600][ T930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.102781][ T285] EXT4-fs (loop2): unmounting filesystem. [ 51.199889][ T934] xt_bpf: check failed: parse error [ 51.213485][ T938] loop2: detected capacity change from 0 to 256 [ 51.230357][ T938] FAT-fs (loop2): Directory bread(block 64) failed [ 51.236955][ T938] FAT-fs (loop2): Directory bread(block 65) failed [ 51.243597][ T938] FAT-fs (loop2): Directory bread(block 66) failed [ 51.250162][ T938] FAT-fs (loop2): Directory bread(block 67) failed [ 51.256814][ T938] FAT-fs (loop2): Directory bread(block 68) failed [ 51.263476][ T938] FAT-fs (loop2): Directory bread(block 69) failed [ 51.270052][ T938] FAT-fs (loop2): Directory bread(block 70) failed [ 51.276593][ T938] FAT-fs (loop2): Directory bread(block 71) failed [ 51.283239][ T938] FAT-fs (loop2): Directory bread(block 72) failed [ 51.289807][ T938] FAT-fs (loop2): Directory bread(block 73) failed [ 51.383686][ T491] usb 4-1: USB disconnect, device number 4 [ 51.426581][ T939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 51.857845][ T919] loop0: detected capacity change from 0 to 131072 [ 51.882685][ T919] F2FS-fs (loop0): Test dummy encryption mode enabled [ 51.897906][ T919] F2FS-fs (loop0): invalid crc value [ 51.924552][ T919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 51.934625][ T948] loop3: detected capacity change from 0 to 40427 [ 51.958805][ T948] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 51.983180][ T948] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.003939][ T948] F2FS-fs (loop3): invalid crc value [ 52.028847][ T948] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.035583][ T919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.088482][ T958] FAULT_INJECTION: forcing a failure. [ 52.088482][ T958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.137801][ T958] CPU: 0 PID: 958 Comm: syz.2.201 Not tainted syzkaller #0 [ 52.145057][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.155149][ T958] Call Trace: [ 52.158458][ T958] [ 52.161427][ T958] __dump_stack+0x21/0x24 [ 52.165800][ T958] dump_stack_lvl+0x110/0x170 [ 52.170518][ T958] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.175584][ T958] dump_stack+0x15/0x24 [ 52.179777][ T958] should_fail_ex+0x3d4/0x520 [ 52.184497][ T958] should_fail+0xb/0x10 [ 52.188688][ T958] should_fail_usercopy+0x1a/0x20 [ 52.193748][ T958] _copy_from_user+0x1e/0xc0 [ 52.198468][ T958] ____sys_sendmsg+0x30a/0x990 [ 52.203279][ T958] ? __sys_sendmsg_sock+0x40/0x40 [ 52.208358][ T958] ? import_iovec+0x7c/0xb0 [ 52.212903][ T958] ___sys_sendmsg+0x2a2/0x360 [ 52.217712][ T958] ? __sys_sendmsg+0x290/0x290 [ 52.222554][ T958] ? kstrtouint+0x74/0xe0 [ 52.226943][ T958] ? __fdget+0x19c/0x220 [ 52.231221][ T958] __sys_sendmmsg+0x2cc/0x4e0 [ 52.235947][ T958] ? __cfi___sys_sendmmsg+0x10/0x10 [ 52.241205][ T958] ? __cfi_ksys_write+0x10/0x10 [ 52.246105][ T958] __x64_sys_sendmmsg+0xa0/0xb0 [ 52.251008][ T958] x64_sys_call+0x3f5/0x9a0 [ 52.255552][ T958] do_syscall_64+0x4c/0xa0 [ 52.260019][ T958] ? clear_bhb_loop+0x30/0x80 [ 52.264748][ T958] ? clear_bhb_loop+0x30/0x80 [ 52.269464][ T958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.275392][ T958] RIP: 0033:0x7fed2579c799 [ 52.279925][ T958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.299569][ T958] RSP: 002b:00007fed26724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.308033][ T958] RAX: ffffffffffffffda RBX: 00007fed25a15fa0 RCX: 00007fed2579c799 [ 52.316048][ T958] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 52.324060][ T958] RBP: 00007fed26724090 R08: 0000000000000000 R09: 0000000000000000 [ 52.332062][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.340084][ T958] R13: 00007fed25a16038 R14: 00007fed25a15fa0 R15: 00007ffed22aa1e8 [ 52.348103][ T958] [ 52.357438][ T948] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 52.374081][ T948] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.454812][ T961] device gretap1 entered promiscuous mode [ 52.511288][ T967] 9pnet_fd: Insufficient options for proto=fd [ 52.557402][ T969] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 52.617409][ T491] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.761833][ T982] netlink: 84 bytes leftover after parsing attributes in process `syz.4.211'. [ 52.803936][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.825104][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.837980][ T491] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 52.847464][ T335] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 52.857404][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.866384][ T491] usb 1-1: config 0 descriptor?? [ 52.877373][ T988] netlink: 84 bytes leftover after parsing attributes in process `syz.2.208'. [ 52.906881][ T989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42890 (85780 ns) > initial count (12 ns). Using initial count to start timer. [ 53.027361][ T335] usb 2-1: device descriptor read/64, error -71 [ 53.124485][ T985] loop3: detected capacity change from 0 to 40427 [ 53.139935][ T985] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.155513][ T985] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.170486][ T985] F2FS-fs (loop3): invalid crc value [ 53.195634][ T985] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.274599][ T491] playstation 0003:054C:0DF2.0001: collection stack underflow [ 53.285730][ T491] playstation 0003:054C:0DF2.0001: item 0 2 0 12 parsing failed [ 53.293881][ T985] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.298868][ T491] playstation 0003:054C:0DF2.0001: Parse failed [ 53.301383][ T335] usb 2-1: device descriptor read/64, error -71 [ 53.313595][ T491] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 53.314780][ T985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.477477][ T491] usb 1-1: USB disconnect, device number 5 [ 53.493960][ T349] kworker/u4:4: attempt to access beyond end of device [ 53.493960][ T349] loop3: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 53.628439][ T335] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 53.787333][ T335] usb 2-1: device descriptor read/64, error -71 [ 54.025132][ T1008] xt_bpf: check failed: parse error [ 54.025832][ T1003] loop4: detected capacity change from 0 to 40427 [ 54.052506][ T1003] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 54.067359][ T335] usb 2-1: device descriptor read/64, error -71 [ 54.083816][ T1003] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 54.104357][ T1003] F2FS-fs (loop4): invalid crc value [ 54.135101][ T1003] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 54.197330][ T1003] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 54.204783][ T1003] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.212427][ T335] usb usb2-port1: attempt power cycle [ 54.316723][ T1010] loop0: detected capacity change from 0 to 40427 [ 54.339110][ T1010] F2FS-fs (loop0): invalid crc value [ 54.374160][ T1010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.572186][ T1010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.728045][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 54.728061][ T28] audit: type=1400 audit(2000000014.100:340): avc: denied { ioctl } for pid=1009 comm="syz.0.215" path="/37/file0/file0" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.767130][ T1010] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 54.783826][ T335] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 54.838403][ T335] usb 2-1: device descriptor read/8, error -71 [ 54.939593][ T28] audit: type=1400 audit(2000000014.310:341): avc: denied { create } for pid=1021 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.941967][ T1022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1022 comm=syz.4.221 [ 54.999800][ T335] usb 2-1: device descriptor read/8, error -71 [ 55.029045][ T28] audit: type=1400 audit(2000000014.400:342): avc: denied { setopt } for pid=1021 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.106968][ T28] audit: type=1400 audit(2000000014.470:343): avc: denied { read } for pid=1033 comm="syz.0.226" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.158678][ T28] audit: type=1400 audit(2000000014.470:344): avc: denied { open } for pid=1033 comm="syz.0.226" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.213385][ T28] audit: type=1400 audit(2000000014.480:345): avc: denied { ioctl } for pid=1033 comm="syz.0.226" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.244568][ T28] audit: type=1400 audit(2000000014.480:346): avc: denied { set_context_mgr } for pid=1033 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.272174][ T28] audit: type=1400 audit(2000000014.490:347): avc: denied { write } for pid=1033 comm="syz.0.226" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.297388][ T335] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 55.305655][ T1052] loop0: detected capacity change from 0 to 256 [ 55.313043][ T28] audit: type=1400 audit(2000000014.490:348): avc: denied { map } for pid=1033 comm="syz.0.226" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.337211][ T28] audit: type=1400 audit(2000000014.490:349): avc: denied { call } for pid=1033 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.358509][ T1052] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3842e3fb, utbl_chksum : 0xe619d30d) [ 55.365178][ T335] usb 2-1: device descriptor read/8, error -71 [ 55.371521][ T1052] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 0) [ 55.384966][ T1052] exFAT-fs (loop0): failed to load alloc-bitmap [ 55.391344][ T1052] exFAT-fs (loop0): failed to recognize exfat type [ 55.491838][ T1060] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.234'. [ 55.538365][ T335] usb 2-1: device descriptor read/8, error -71 [ 55.615196][ T1069] loop3: detected capacity change from 0 to 512 [ 55.617624][ T491] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 55.636684][ T1069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.647840][ T1069] EXT4-fs (loop3): shut down requested (2) [ 55.654187][ T1069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 55.667674][ T335] usb usb2-port1: unable to enumerate USB device [ 55.708975][ T1069] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 55.941727][ T286] EXT4-fs (loop3): unmounting filesystem. [ 56.042012][ T491] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.058394][ T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.079857][ T491] usb 3-1: Product: syz [ 56.092343][ T491] usb 3-1: Manufacturer: syz [ 56.101125][ T491] usb 3-1: SerialNumber: syz [ 56.125479][ T1072] loop1: detected capacity change from 0 to 40427 [ 56.147110][ T1072] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 56.157540][ T1072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 56.194535][ T1072] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.271955][ T1072] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 56.287365][ T1072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.497521][ T1091] netlink: 'syz.0.244': attribute type 11 has an invalid length. [ 56.675837][ T1091] x_tables: duplicate underflow at hook 1 [ 56.911552][ T1076] loop3: detected capacity change from 0 to 131072 [ 56.929761][ T1076] F2FS-fs (loop3): invalid crc value [ 56.946312][ T1076] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.040402][ T1076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 57.078610][ T1099] xt_bpf: check failed: parse error [ 57.230882][ T1111] loop3: detected capacity change from 0 to 256 [ 57.244040][ T1111] FAT-fs (loop3): Directory bread(block 64) failed [ 57.250707][ T1111] FAT-fs (loop3): Directory bread(block 65) failed [ 57.258068][ T1111] FAT-fs (loop3): Directory bread(block 66) failed [ 57.264631][ T1111] FAT-fs (loop3): Directory bread(block 67) failed [ 57.271312][ T1111] FAT-fs (loop3): Directory bread(block 68) failed [ 57.277911][ T1111] FAT-fs (loop3): Directory bread(block 69) failed [ 57.284509][ T1111] FAT-fs (loop3): Directory bread(block 70) failed [ 57.291124][ T1111] FAT-fs (loop3): Directory bread(block 71) failed [ 57.297969][ T1111] FAT-fs (loop3): Directory bread(block 72) failed [ 57.304500][ T1111] FAT-fs (loop3): Directory bread(block 73) failed [ 57.327423][ T491] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 57.481788][ T1113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 57.528914][ T491] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.539299][ T491] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 57.549382][ T491] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.567331][ T491] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 57.576473][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.584561][ T491] usb 5-1: Product: syz [ 57.588820][ T491] usb 5-1: Manufacturer: syz [ 57.593460][ T491] usb 5-1: SerialNumber: syz [ 57.770094][ T1115] loop0: detected capacity change from 0 to 512 [ 57.778286][ T1115] EXT4-fs: Ignoring removed orlov option [ 57.785981][ T1115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.796536][ T1115] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.806701][ T1115] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.252: bg 0: block 248: padding at end of block bitmap is not set [ 57.809422][ T491] usb 5-1: 0:2 : does not exist [ 57.826220][ T491] usb 5-1: unit 5 not found! [ 57.826235][ T1115] EXT4-fs error (device loop0): ext4_acquire_dquot:6822: comm syz.0.252: Failed to acquire dquot type 1 [ 57.832224][ T491] usb 5-1: unit 2 not found! [ 57.846864][ T1115] EXT4-fs (loop0): 1 truncate cleaned up [ 57.858348][ T491] usb 5-1: USB disconnect, device number 11 [ 57.873991][ T1115] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.888830][ T1115] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 57.908135][ T1115] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 57.915044][ T1115] ext4 filesystem being remounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.963307][ T1120] loop1: detected capacity change from 0 to 512 [ 57.979239][ T1120] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.994638][ T1120] EXT4-fs (loop1): mount failed [ 58.068833][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.123754][ T491] usb 3-1: USB disconnect, device number 3 [ 58.136829][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 58.200163][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 58.316968][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 58.382061][ T335] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 58.427394][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 58.434803][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.592387][ T24] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 58.605469][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.622480][ T335] usb 2-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 58.642122][ T24] usb 1-1: Product: syz [ 58.652976][ T1150] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 58.657601][ T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.672463][ T24] usb 1-1: Manufacturer: syz [ 58.677096][ T24] usb 1-1: SerialNumber: syz [ 58.690202][ T1152] loop3: detected capacity change from 0 to 256 [ 58.702725][ T1152] FAT-fs (loop3): Directory bread(block 64) failed [ 58.709359][ T1152] FAT-fs (loop3): Directory bread(block 65) failed [ 58.715946][ T1152] FAT-fs (loop3): Directory bread(block 66) failed [ 58.722568][ T1152] FAT-fs (loop3): Directory bread(block 67) failed [ 58.729191][ T1152] FAT-fs (loop3): Directory bread(block 68) failed [ 58.735753][ T1152] FAT-fs (loop3): Directory bread(block 69) failed [ 58.742351][ T1152] FAT-fs (loop3): Directory bread(block 70) failed [ 58.748909][ T1152] FAT-fs (loop3): Directory bread(block 71) failed [ 58.755482][ T1152] FAT-fs (loop3): Directory bread(block 72) failed [ 58.762060][ T1152] FAT-fs (loop3): Directory bread(block 73) failed [ 58.824411][ T335] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.842328][ T24] usb 1-1: config 0 descriptor?? [ 58.857833][ T24] plusb: probe of 1-1:0.0 failed with error -22 [ 58.866288][ T335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.887352][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.895431][ T335] usb 2-1: Product: syz [ 58.899683][ T335] usb 2-1: Manufacturer: syz [ 58.906386][ T335] usb 2-1: SerialNumber: syz [ 58.946205][ T1155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 59.049859][ T491] usb 1-1: USB disconnect, device number 6 [ 59.056057][ T1157] loop2: detected capacity change from 0 to 1024 [ 59.072750][ T1157] EXT4-fs: Ignoring removed bh option [ 59.080082][ T1157] EXT4-fs (loop2): unsupported inode size: 143 [ 59.086387][ T1157] EXT4-fs (loop2): blocksize: 1024 [ 59.138830][ T335] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 59.151996][ T335] cdc_ncm 2-1:1.0: bind() failure [ 59.165822][ T335] usb 2-1: USB disconnect, device number 9 [ 59.172246][ T1165] loop2: detected capacity change from 0 to 512 [ 59.190992][ T1165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.220629][ T1165] EXT4-fs (loop2): shut down requested (2) [ 59.226830][ T1165] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 59.236051][ T1165] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 59.252362][ T285] EXT4-fs (loop2): unmounting filesystem. [ 59.328869][ T1175] loop2: detected capacity change from 0 to 1024 [ 59.346072][ T1175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.381290][ T1175] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 59.466195][ T285] EXT4-fs (loop2): unmounting filesystem. [ 59.501816][ T1182] netlink: 72 bytes leftover after parsing attributes in process `syz.4.273'. [ 59.586970][ T284] EXT4-fs (loop0): unmounting filesystem. [ 59.597686][ T1186] device syzkaller1 entered promiscuous mode [ 59.607180][ T1186] xt_hashlimit: size too large, truncated to 1048576 [ 59.709371][ T1180] F2FS-fs (loop2): invalid crc value [ 59.758161][ T1180] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.819626][ T1200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.828339][ T335] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 59.855784][ T1200] EXT4-fs (loop0): shut down requested (2) [ 59.862631][ T1180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.870608][ T1200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 59.898441][ T1180] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 59.922214][ T1200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 60.011445][ T284] EXT4-fs (loop0): unmounting filesystem. [ 60.027484][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 60.035601][ T335] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.063274][ T335] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 60.091348][ T335] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 60.127242][ T1213] FAT-fs (loop0): Directory bread(block 64) failed [ 60.133898][ T1213] FAT-fs (loop0): Directory bread(block 65) failed [ 60.140528][ T1213] FAT-fs (loop0): Directory bread(block 66) failed [ 60.147083][ T1213] FAT-fs (loop0): Directory bread(block 67) failed [ 60.153698][ T1213] FAT-fs (loop0): Directory bread(block 68) failed [ 60.160274][ T1213] FAT-fs (loop0): Directory bread(block 69) failed [ 60.166859][ T1213] FAT-fs (loop0): Directory bread(block 70) failed [ 60.173430][ T1213] FAT-fs (loop0): Directory bread(block 71) failed [ 60.180038][ T1213] FAT-fs (loop0): Directory bread(block 72) failed [ 60.186613][ T1213] FAT-fs (loop0): Directory bread(block 73) failed [ 60.221657][ T1193] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 60.266636][ T335] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 60.275970][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 60.276013][ T28] audit: type=1400 audit(2000000019.640:376): avc: denied { write } for pid=1216 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.290389][ T335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.322787][ T1213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 60.342016][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.357344][ T335] usb 5-1: SerialNumber: syz [ 60.368323][ T1184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 60.390461][ T1184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 60.411091][ T335] hub 5-1:1.0: bad descriptor, ignoring hub [ 60.417070][ T335] hub: probe of 5-1:1.0 failed with error -5 [ 60.436971][ T1225] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 60.510168][ T28] audit: type=1400 audit(2000000019.800:377): avc: denied { mounton } for pid=1223 comm="syz.3.289" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 60.535244][ T335] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 60.618775][ T1184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 60.641460][ T451] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 60.661328][ T1184] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1184 comm=syz.4.274 [ 60.678720][ T28] audit: type=1400 audit(2000000020.050:378): avc: denied { write } for pid=1183 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.858681][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.867945][ T451] usb 2-1: not running at top speed; connect to a high speed hub [ 60.889618][ T451] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 60.976862][ T451] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.005891][ T451] usb 2-1: config 1 interface 0 has no altsetting 0 [ 61.022098][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 61.031624][ T451] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 61.052749][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.073679][ T451] usb 2-1: Product: ࠂ [ 61.085598][ T451] usb 2-1: Manufacturer: 眃䇡拋郕醟瘢Ꚋ픽랜鴤侓夢ҳ巶淫樄卓责ꄼ椹巀熆Ỏ췽묖莪๸귇뻸堀㵒槫⦲鯌뙊╂쪚哵췞㵕娊嵃뀿澡亳ꍯ┗䡏㮬神ᛶᒪ䦇恢↰㠜푘峽㙧梾袥ﲼ犂帥嶃䱚撙流၍㣹佢觪帺殍ೣ궃晵▭䀯郑伟悽䙏籫ⳃ郩 [ 61.161981][ T451] usb 2-1: SerialNumber: ⡗욹ᶴ㐭䢠盖殟荑铧䳐᥽騶艇㡎惄⯻솴萀偤嫶걋Ⱟ쟊联䗢找襇᷉漌乧汝换볂륄⸟⎟葳ﯟ㖙㻰竌࿱횑媏鍾ࢃ맩坟霃顝텯耛訷䢸೔導䤼ᐐ콖 [ 61.230940][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 61.238930][ T1193] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.319827][ T335] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 61.378661][ T335] usb 5-1: USB disconnect, device number 12 [ 61.467058][ T451] usb 2-1: USB disconnect, device number 10 [ 61.510071][ T1250] set_capacity_and_notify: 4 callbacks suppressed [ 61.510103][ T1250] loop2: detected capacity change from 0 to 256 [ 61.530442][ T1250] FAT-fs (loop2): Directory bread(block 64) failed [ 61.537020][ T1250] FAT-fs (loop2): Directory bread(block 65) failed [ 61.543705][ T1250] FAT-fs (loop2): Directory bread(block 66) failed [ 61.550390][ T1250] FAT-fs (loop2): Directory bread(block 67) failed [ 61.556997][ T1250] FAT-fs (loop2): Directory bread(block 68) failed [ 61.563859][ T1250] FAT-fs (loop2): Directory bread(block 69) failed [ 61.570481][ T1250] FAT-fs (loop2): Directory bread(block 70) failed [ 61.577031][ T1250] FAT-fs (loop2): Directory bread(block 71) failed [ 61.583645][ T1250] FAT-fs (loop2): Directory bread(block 72) failed [ 61.590229][ T1250] FAT-fs (loop2): Directory bread(block 73) failed [ 61.678521][ T1250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 61.761539][ T1238] loop0: detected capacity change from 0 to 131072 [ 61.769184][ T1238] F2FS-fs (loop0): invalid crc value [ 61.775765][ T1238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.831779][ T1238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.198915][ T28] audit: type=1400 audit(2000000021.570:379): avc: denied { connect } for pid=1266 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.259589][ T1270] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 62.405832][ T1281] loop0: detected capacity change from 0 to 4096 [ 62.446920][ T1281] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.461157][ T1277] loop1: detected capacity change from 0 to 1024 [ 62.611680][ T1281] EXT4-fs (loop0): Test dummy encryption mode enabled [ 62.789179][ T1277] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.805423][ T1281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.827041][ T1281] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 62.861845][ T284] EXT4-fs (loop0): unmounting filesystem. [ 62.869837][ T1277] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 62.957228][ T1290] loop0: detected capacity change from 0 to 512 [ 62.997969][ T283] EXT4-fs (loop1): unmounting filesystem. [ 63.005957][ T1290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 63.074691][ T28] audit: type=1400 audit(2000000022.440:380): avc: denied { setattr } for pid=1289 comm="syz.0.311" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.128075][ T284] EXT4-fs (loop0): unmounting filesystem. [ 63.448650][ T1299] xt_bpf: check failed: parse error [ 63.537371][ T491] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 63.728699][ T491] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.747537][ T491] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 63.756555][ T491] usb 1-1: config 1 has no interface number 1 [ 63.772846][ T491] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 63.817927][ T491] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.837187][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.853757][ T1293] loop1: detected capacity change from 0 to 131072 [ 63.860571][ T491] usb 1-1: Product: syz [ 63.864779][ T491] usb 1-1: Manufacturer: syz [ 63.869466][ T491] usb 1-1: SerialNumber: syz [ 63.884709][ T1293] F2FS-fs (loop1): invalid crc value [ 63.901229][ T1293] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.977412][ T1293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 64.078310][ T1295] loop0: detected capacity change from 0 to 128 [ 64.085238][ T28] audit: type=1400 audit(2000000023.440:381): avc: denied { mounton } for pid=1294 comm="syz.0.313" path="/68/file0" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.138523][ T1295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.171833][ T1295] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.219178][ T1295] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x1b) [ 64.296371][ T1317] netlink: 168 bytes leftover after parsing attributes in process `syz.4.320'. [ 64.317447][ T28] audit: type=1400 audit(2000000023.680:382): avc: denied { sqpoll } for pid=1294 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.366187][ T1322] loop4: detected capacity change from 0 to 1024 [ 64.375724][ T1322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.411693][ T1305] loop3: detected capacity change from 0 to 40427 [ 64.418645][ T1322] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 64.441422][ T1305] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.454226][ T1305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.462789][ T1327] loop1: detected capacity change from 0 to 512 [ 64.470462][ T1305] F2FS-fs (loop3): invalid crc value [ 64.512474][ T1327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.521703][ T1305] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.558448][ T287] EXT4-fs (loop4): unmounting filesystem. [ 64.580888][ T283] EXT4-fs (loop1): unmounting filesystem. [ 64.586895][ T1305] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.596551][ T1305] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.769400][ T1342] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.328: inode has both inline data and extents flags [ 64.787500][ T1342] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.328: couldn't read orphan inode 15 (err -117) [ 64.803152][ T1342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.817187][ T1347] binder: BINDER_SET_CONTEXT_MGR already set [ 64.823551][ T1347] binder: 1346:1347 ioctl 4018620d 200000000040 returned -16 [ 64.863229][ T1351] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.920289][ T28] audit: type=1400 audit(2000000024.290:383): avc: granted { setsecparam } for pid=1356 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 64.939517][ T28] audit: type=1400 audit(2000000024.290:384): avc: granted { setsecparam } for pid=1356 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 64.958591][ T28] audit: type=1400 audit(2000000024.290:385): avc: denied { ioctl } for pid=1356 comm="syz.4.333" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x54d2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 65.127391][ T451] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 65.207382][ T335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 65.317390][ T451] usb 2-1: Using ep0 maxpacket: 16 [ 65.324953][ T451] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.339221][ T451] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.351947][ T451] usb 2-1: config 0 interface 0 has no altsetting 0 [ 65.362420][ T451] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 65.373945][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.387454][ T335] usb 4-1: device descriptor read/64, error -71 [ 65.406794][ T451] usb 2-1: config 0 descriptor?? [ 65.418420][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 65.418437][ T28] audit: type=1400 audit(2000000024.790:394): avc: denied { ioctl } for pid=1341 comm="syz.1.328" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.449873][ T28] audit: type=1400 audit(2000000024.790:395): avc: denied { ioctl } for pid=1341 comm="syz.1.328" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.488088][ T28] audit: type=1400 audit(2000000024.850:396): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.522536][ T28] audit: type=1400 audit(2000000024.850:397): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.546780][ T28] audit: type=1400 audit(2000000024.850:398): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.573495][ T28] audit: type=1400 audit(2000000024.890:399): avc: denied { ioctl } for pid=1354 comm="syz.3.332" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.599860][ T28] audit: type=1400 audit(2000000024.890:400): avc: denied { ioctl } for pid=1354 comm="syz.3.332" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.625209][ T28] audit: type=1400 audit(2000000024.890:401): avc: denied { ioctl } for pid=1354 comm="syz.3.332" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.655290][ T28] audit: type=1400 audit(2000000024.970:402): avc: denied { create } for pid=1362 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.676284][ T335] usb 4-1: device descriptor read/64, error -71 [ 65.688878][ T451] usbhid 2-1:0.0: can't add hid device: -71 [ 65.701490][ T451] usbhid: probe of 2-1:0.0 failed with error -71 [ 65.719773][ T283] EXT4-fs (loop1): unmounting filesystem. [ 65.724062][ T451] usb 2-1: USB disconnect, device number 11 [ 65.732316][ T28] audit: type=1400 audit(2000000024.970:403): avc: denied { create } for pid=1362 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.967423][ T335] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 66.137333][ T335] usb 4-1: device descriptor read/64, error -71 [ 66.267386][ T341] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 66.407366][ T335] usb 4-1: device descriptor read/64, error -71 [ 66.447342][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 66.454204][ T341] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 66.465856][ T341] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 66.477773][ T341] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 66.489594][ T341] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 66.504942][ T341] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.514884][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.523670][ T341] usb 2-1: SerialNumber: syz [ 66.537489][ T335] usb usb4-port1: attempt power cycle [ 66.543285][ T1382] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 66.572620][ T1388] set_capacity_and_notify: 1 callbacks suppressed [ 66.572633][ T1388] loop4: detected capacity change from 0 to 131072 [ 66.588006][ T1388] F2FS-fs (loop4): invalid crc value [ 66.595766][ T1388] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.635988][ T1388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 66.755943][ T1382] xt_hashlimit: size too large, truncated to 1048576 [ 66.860892][ T1402] x_tables: duplicate underflow at hook 3 [ 66.912080][ T1404] loop4: detected capacity change from 0 to 1024 [ 66.929994][ T1404] EXT4-fs: Ignoring removed bh option [ 66.936178][ T1404] EXT4-fs: Ignoring removed oldalloc option [ 66.942442][ T1404] EXT4-fs: Ignoring removed nobh option [ 66.956396][ T1404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.967929][ T335] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 67.009392][ T1404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.009470][ T335] usb 4-1: device descriptor read/8, error -71 [ 67.148955][ T1407] netlink: 68 bytes leftover after parsing attributes in process `syz.4.348'. [ 67.169034][ T335] usb 4-1: device descriptor read/8, error -71 [ 67.172287][ T1407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'. [ 67.250088][ T1404] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.348: Allocating blocks 497-513 which overlap fs metadata [ 67.276030][ T341] usb 2-1: USB disconnect, device number 12 [ 67.290796][ T1404] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.348: Allocating blocks 497-513 which overlap fs metadata [ 67.319146][ T1403] EXT4-fs (loop4): pa ffff8881334cda80: logic 48, phys. 177, len 21 [ 67.327238][ T1403] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 67.358179][ T287] EXT4-fs (loop4): unmounting filesystem. [ 67.437398][ T335] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 67.498311][ T335] usb 4-1: device descriptor read/8, error -71 [ 67.648921][ T335] usb 4-1: device descriptor read/8, error -71 [ 67.767382][ T335] usb usb4-port1: unable to enumerate USB device [ 67.860598][ T1432] loop1: detected capacity change from 0 to 8192 [ 67.920141][ T1432] loop1: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 67.920339][ T1432] loop1: p1 size 100663296 extends beyond EOD, truncated [ 68.100720][ T1432] loop1: p2 start 591104 is beyond EOD, truncated [ 68.123433][ T1432] loop1: p5 size 100663296 extends beyond EOD, truncated [ 68.144112][ T1432] loop1: p6 start 591104 is beyond EOD, truncated [ 68.163298][ T1432] loop1: p7 size 100663296 extends beyond EOD, truncated [ 68.178550][ T1432] loop1: p8 start 591104 is beyond EOD, truncated [ 68.185070][ T1432] loop1: p9 size 100663296 extends beyond EOD, truncated [ 68.208670][ T1432] loop1: p10 start 591104 is beyond EOD, truncated [ 68.215281][ T1432] loop1: p11 size 100663296 extends beyond EOD, truncated [ 68.232629][ T1413] loop2: detected capacity change from 0 to 131072 [ 68.245116][ T1432] loop1: p12 start 591104 is beyond EOD, truncated [ 68.264241][ T1432] loop1: p13 size 100663296 extends beyond EOD, truncated [ 68.272764][ T1413] F2FS-fs (loop2): invalid crc value [ 68.282285][ T1432] loop1: p14 start 591104 is beyond EOD, truncated [ 68.285479][ T1413] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.299057][ T1432] loop1: p15 size 100663296 extends beyond EOD, truncated [ 68.331963][ T1432] loop1: p16 start 591104 is beyond EOD, truncated [ 68.358774][ T1432] loop1: p17 size 100663296 extends beyond EOD, truncated [ 68.376903][ T1413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 68.386938][ T1432] loop1: p18 start 591104 is beyond EOD, truncated [ 68.407349][ T1432] loop1: p19 size 100663296 extends beyond EOD, truncated [ 68.417072][ T1413] F2FS-fs (loop2): inconsistent node block, nid:7, node_footer[nid:327687,ino:7,ofs:0,cpver:1219692001,blkaddr:4611] [ 68.434897][ T1432] loop1: p20 start 591104 is beyond EOD, truncated [ 68.447415][ T1432] loop1: p21 size 100663296 extends beyond EOD, truncated [ 68.466020][ T1432] loop1: p22 start 591104 is beyond EOD, truncated [ 68.474870][ T1432] loop1: p23 size 100663296 extends beyond EOD, truncated [ 68.493041][ T1432] loop1: p24 start 591104 is beyond EOD, truncated [ 68.500208][ T1436] loop3: detected capacity change from 0 to 40427 [ 68.506721][ T1432] loop1: p25 size 100663296 extends beyond EOD, truncated [ 68.528958][ T1436] F2FS-fs (loop3): fault_type options not supported [ 68.545305][ T1432] loop1: p26 start 591104 is beyond EOD, truncated [ 68.555660][ T1436] F2FS-fs (loop3): fault_injection options not supported [ 68.577770][ T1432] loop1: p27 size 100663296 extends beyond EOD, truncated [ 68.585257][ T1436] F2FS-fs (loop3): Image doesn't support compression [ 68.602916][ T1436] F2FS-fs (loop3): invalid crc value [ 68.609410][ T1432] loop1: p28 start 591104 is beyond EOD, truncated [ 68.621877][ T1432] loop1: p29 size 100663296 extends beyond EOD, truncated [ 68.635012][ T1432] loop1: p30 start 591104 is beyond EOD, truncated [ 68.642192][ T1432] loop1: p31 size 100663296 extends beyond EOD, truncated [ 68.649423][ T1436] F2FS-fs (loop3): Found nat_bits in checkpoint [ 68.668780][ T1432] loop1: p32 start 591104 is beyond EOD, truncated [ 68.675350][ T1432] loop1: p33 size 100663296 extends beyond EOD, truncated [ 68.701423][ T1432] loop1: p34 start 591104 is beyond EOD, truncated [ 68.713305][ T1432] loop1: p35 size 100663296 extends beyond EOD, truncated [ 68.730732][ T1436] F2FS-fs (loop3): Start checkpoint disabled! [ 68.739373][ T1432] loop1: p36 start 591104 is beyond EOD, truncated [ 68.745931][ T1432] loop1: p37 size 100663296 extends beyond EOD, truncated [ 68.758592][ T1436] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 68.778000][ T1432] loop1: p38 start 591104 is beyond EOD, truncated [ 68.784803][ T1432] loop1: p39 size 100663296 extends beyond EOD, truncated [ 68.792034][ T1436] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 68.818277][ T1432] loop1: p40 start 591104 is beyond EOD, truncated [ 68.824866][ T1432] loop1: p41 size 100663296 extends beyond EOD, truncated [ 68.843987][ T1432] loop1: p42 start 591104 is beyond EOD, truncated [ 68.857398][ T1432] loop1: p43 size 100663296 extends beyond EOD, truncated [ 68.869196][ T1436] fuse: Bad value for 'fd' [ 68.896206][ T1432] loop1: p44 start 591104 is beyond EOD, truncated [ 68.906112][ T1432] loop1: p45 size 100663296 extends beyond EOD, truncated [ 68.923633][ T491] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 68.937774][ T491] usb 1-1: found format II with max.bitrate = 26774, frame size=65535 [ 68.940169][ T1432] loop1: p46 start 591104 is beyond EOD, truncated [ 68.957451][ T491] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 68.975492][ T491] usb 1-1: found format II with max.bitrate = 26774, frame size=65535 [ 69.008008][ T491] usb 1-1: USB disconnect, device number 7 [ 69.034925][ T1432] loop1: p47 size 100663296 extends beyond EOD, truncated [ 69.054475][ T284] EXT4-fs (loop0): unmounting filesystem. [ 69.061505][ T1432] loop1: p48 start 591104 is beyond EOD, truncated [ 69.095381][ T1432] loop1: p49 size 100663296 extends beyond EOD, truncated [ 69.118665][ T1432] loop1: p50 start 591104 is beyond EOD, truncated [ 69.149601][ T1432] loop1: p51 size 100663296 extends beyond EOD, truncated [ 69.182213][ T1432] loop1: p52 start 591104 is beyond EOD, truncated [ 69.193896][ T1432] loop1: p53 size 100663296 extends beyond EOD, truncated [ 69.235054][ T1432] loop1: p54 start 591104 is beyond EOD, truncated [ 69.242641][ T1453] loop0: detected capacity change from 0 to 1024 [ 69.247672][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.261139][ T1432] loop1: p55 size 100663296 extends beyond EOD, truncated [ 69.288159][ T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.312432][ T1432] loop1: p56 start 591104 is beyond EOD, truncated [ 69.333373][ T1432] loop1: p57 size 100663296 extends beyond EOD, truncated [ 69.337007][ T286] F2FS-fs (loop3): access invalid blkaddr:4043309056 [ 69.352756][ T1453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.356466][ T286] CPU: 1 PID: 286 Comm: syz-executor Not tainted syzkaller #0 [ 69.369157][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.379249][ T286] Call Trace: [ 69.382559][ T286] [ 69.385533][ T286] __dump_stack+0x21/0x24 [ 69.389909][ T286] dump_stack_lvl+0x110/0x170 [ 69.394631][ T286] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.399696][ T286] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 69.405641][ T286] dump_stack+0x15/0x24 [ 69.409838][ T286] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 69.415432][ T286] f2fs_is_valid_blkaddr+0x23/0x30 [ 69.420583][ T286] f2fs_map_blocks+0xd43/0x3ba0 [ 69.425477][ T286] ? mempool_alloc_slab+0x1d/0x30 [ 69.430544][ T286] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 69.435866][ T286] ? xas_start+0x317/0x3e0 [ 69.440316][ T286] ? xas_load+0x39e/0x3b0 [ 69.444675][ T286] ? xa_load+0xad/0xd0 [ 69.447780][ T1432] loop1: p58 start 591104 is beyond EOD, truncated [ 69.448772][ T286] f2fs_mpage_readpages+0xa6c/0x1bb0 [ 69.455397][ T1432] loop1: p59 size 100663296 extends beyond EOD, [ 69.460707][ T286] ? dquot_release_reservation_block+0xa0/0xa0 [ 69.460740][ T286] ? cgroup_rstat_updated+0xf5/0x360 [ 69.460763][ T286] ? xas_nomem+0x6b/0x1f0 [ 69.482902][ T286] f2fs_readahead+0xfc/0x240 [ 69.487533][ T286] ? __cfi_f2fs_readahead+0x10/0x10 [ 69.492781][ T286] read_pages+0x1c2/0xde0 [ 69.497157][ T286] ? __cfi___filemap_add_folio+0x10/0x10 [ 69.502865][ T286] ? page_cache_ra_unbounded+0x730/0x730 [ 69.508548][ T286] ? folio_add_lru+0x26a/0x480 [ 69.513360][ T286] page_cache_ra_unbounded+0x5e5/0x730 [ 69.518861][ T286] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 69.524882][ T286] ? __alloc_pages+0x610/0x610 [ 69.528162][ T1432] truncated [ 69.529683][ T286] ? __cfi_gfp_zone+0x10/0x10 [ 69.537493][ T286] page_cache_ra_order+0x389/0xb90 [ 69.542747][ T286] ? __cfi_native_flush_tlb_one_user+0x10/0x10 [ 69.548943][ T286] ? __kasan_check_read+0x11/0x20 [ 69.553998][ T286] ? __cfi_page_cache_ra_order+0x10/0x10 [ 69.559692][ T286] ondemand_readahead+0x82a/0xdc0 [ 69.564744][ T286] ? get_delayacct_enabled+0x19/0x30 [ 69.570089][ T286] ? page_cache_sync_ra+0x490/0x490 [ 69.575323][ T286] page_cache_sync_ra+0x41b/0x490 [ 69.580375][ T286] f2fs_readdir+0x46f/0x990 [ 69.584898][ T286] ? cgroup_rstat_updated+0xf5/0x360 [ 69.590196][ T286] ? __cfi_f2fs_readdir+0x10/0x10 [ 69.595265][ T286] ? handle_mm_fault+0x1841/0x26c0 [ 69.600655][ T286] ? down_read_killable+0xbc/0x110 [ 69.605784][ T286] ? __cfi_down_read_killable+0x10/0x10 [ 69.611373][ T286] ? fsnotify_perm+0x269/0x5b0 [ 69.616163][ T286] ? security_file_permission+0x94/0xb0 [ 69.621793][ T286] iterate_dir+0x271/0x610 [ 69.626278][ T286] ? __cfi_f2fs_readdir+0x10/0x10 [ 69.631346][ T286] __se_sys_getdents64+0xf2/0x250 [ 69.636395][ T286] ? __x64_sys_getdents64+0x90/0x90 [ 69.641639][ T286] ? __cfi_filldir64+0x10/0x10 [ 69.646423][ T286] ? do_user_addr_fault+0x9ac/0x1050 [ 69.651736][ T286] ? debug_smp_processor_id+0x17/0x20 [ 69.657126][ T286] __x64_sys_getdents64+0x7b/0x90 [ 69.662168][ T286] x64_sys_call+0x15c/0x9a0 [ 69.666690][ T286] do_syscall_64+0x4c/0xa0 [ 69.671130][ T286] ? clear_bhb_loop+0x30/0x80 [ 69.675917][ T286] ? clear_bhb_loop+0x30/0x80 [ 69.680616][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.686525][ T286] RIP: 0033:0x7f120e9c5133 [ 69.691047][ T286] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 69.710666][ T286] RSP: 002b:00007ffdb2c4b398 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 69.719095][ T286] RAX: ffffffffffffffda RBX: 000055557bf60910 RCX: 00007f120e9c5133 [ 69.727083][ T286] RDX: 0000000000008000 RSI: 000055557bf60940 RDI: 0000000000000005 [ 69.735079][ T286] RBP: 000055557bf60940 R08: 00007f120ebece20 R09: 0000000000000001 [ 69.743076][ T286] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557bf60914 [ 69.751073][ T286] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffdb2c4d640 [ 69.759166][ T286] [ 69.764292][ T1432] loop1: p60 start 591104 is beyond EOD, truncated [ 69.778512][ T1432] loop1: p61 size 100663296 extends beyond EOD, truncated [ 69.800376][ T1432] loop1: p62 start 591104 is beyond EOD, truncated [ 69.813207][ T1458] loop2: detected capacity change from 0 to 2048 [ 69.820015][ T1432] loop1: p63 size 100663296 extends beyond EOD, truncated [ 69.828925][ T1432] loop1: p64 start 591104 is beyond EOD, truncated [ 69.835970][ T1449] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 69.843918][ T1432] loop1: p65 size 100663296 extends beyond EOD, truncated [ 69.852935][ T1432] loop1: p66 start 591104 is beyond EOD, truncated [ 69.860581][ T286] syz-executor: attempt to access beyond end of device [ 69.860581][ T286] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 69.883850][ T1432] loop1: p67 size 100663296 extends beyond EOD, truncated [ 69.897002][ T286] syz-executor: attempt to access beyond end of device [ 69.897002][ T286] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 69.910917][ T1432] loop1: p68 start 591104 is beyond EOD, truncated [ 69.919340][ T1432] loop1: p69 size 100663296 extends beyond EOD, truncated [ 69.936785][ T1432] loop1: p70 start 591104 is beyond EOD, truncated [ 69.957358][ T1432] loop1: p71 size 100663296 extends beyond EOD, truncated [ 70.003458][ T1432] loop1: p72 start 591104 is beyond EOD, truncated [ 70.017362][ T1432] loop1: p73 size 100663296 extends beyond EOD, truncated [ 70.028932][ T1432] loop1: p74 start 591104 is beyond EOD, truncated [ 70.031592][ T334] kworker/u4:3: attempt to access beyond end of device [ 70.031592][ T334] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 70.035496][ T1432] loop1: p75 size 100663296 extends beyond EOD, truncated [ 70.057528][ T284] EXT4-fs (loop0): unmounting filesystem. [ 70.064516][ T1432] loop1: p76 start 591104 is beyond EOD, truncated [ 70.077375][ T1432] loop1: p77 size 100663296 extends beyond EOD, truncated [ 70.093366][ T1432] loop1: p78 start 591104 is beyond EOD, truncated [ 70.106463][ T1432] loop1: p79 size 100663296 extends beyond EOD, truncated [ 70.135814][ T1432] loop1: p80 start 591104 is beyond EOD, truncated [ 70.158374][ T1432] loop1: p81 size 100663296 extends beyond EOD, truncated [ 70.176902][ T1432] loop1: p82 start 591104 is beyond EOD, truncated [ 70.197333][ T1432] loop1: p83 size 100663296 extends beyond EOD, truncated [ 70.241042][ T1432] loop1: p84 start 591104 is beyond EOD, truncated [ 70.277475][ T1432] loop1: p85 size 100663296 extends beyond EOD, truncated [ 70.317983][ T1432] loop1: p86 start 591104 is beyond EOD, truncated [ 70.353981][ T1432] loop1: p87 size 100663296 extends beyond EOD, truncated [ 70.388538][ T1432] loop1: p88 start 591104 is beyond EOD, truncated [ 70.410359][ T1432] loop1: p89 size 100663296 extends beyond EOD, truncated [ 70.425663][ T1473] tipc: Enabling of bearer rejected, failed to enable media [ 70.441237][ T1432] loop1: p90 start 591104 is beyond EOD, truncated [ 70.459801][ T1432] loop1: p91 size 100663296 extends beyond EOD, truncated [ 70.486723][ T1432] loop1: p92 start 591104 is beyond EOD, truncated [ 70.509877][ T1432] loop1: p93 size 100663296 extends beyond EOD, truncated [ 70.535928][ T1432] loop1: p94 start 591104 is beyond EOD, truncated [ 70.556699][ T1432] loop1: p95 size 100663296 extends beyond EOD, truncated [ 70.567257][ T28] kauditd_printk_skb: 406 callbacks suppressed [ 70.584262][ T28] audit: type=1400 audit(70.550:810): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.615626][ T1432] loop1: p96 start 591104 is beyond EOD, truncated [ 70.632763][ T1432] loop1: p97 size 100663296 extends beyond EOD, truncated [ 70.651027][ T1432] loop1: p98 start 591104 is beyond EOD, truncated [ 70.662236][ T28] audit: type=1400 audit(70.550:811): avc: denied { read write open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.691733][ T1432] loop1: p99 size 100663296 extends beyond EOD, truncated [ 70.716519][ T1432] loop1: p100 start 591104 is beyond EOD, truncated [ 70.739328][ T1432] loop1: p101 size 100663296 extends beyond EOD, truncated [ 70.771639][ T1432] loop1: p102 start 591104 is beyond EOD, truncated [ 70.773407][ T28] audit: type=1400 audit(70.550:812): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.793722][ T1432] loop1: p103 size 100663296 extends beyond EOD, truncated [ 70.835067][ T1478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 70.845664][ T28] audit: type=1400 audit(70.560:813): avc: denied { execmem } for pid=1474 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.862514][ T1432] loop1: p104 start 591104 is beyond EOD, truncated [ 70.884276][ T28] audit: type=1400 audit(70.640:814): avc: denied { mount } for pid=1475 comm="syz.0.370" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.894730][ T1432] loop1: p105 size 100663296 extends beyond EOD, truncated [ 70.950284][ T1432] loop1: p106 start 591104 is beyond EOD, truncated [ 70.971379][ T28] audit: type=1400 audit(70.690:815): avc: denied { create } for pid=1475 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.971421][ T1432] loop1: p107 size 100663296 extends beyond EOD, truncated [ 71.058526][ T1432] loop1: p108 start 591104 is beyond EOD, truncated [ 71.065287][ T1432] loop1: p109 size 100663296 extends beyond EOD, truncated [ 71.072618][ T28] audit: type=1400 audit(70.690:816): avc: denied { getopt } for pid=1475 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.109779][ T1432] loop1: p110 start 591104 is beyond EOD, truncated [ 71.110720][ T28] audit: type=1400 audit(70.730:817): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.137414][ T1432] loop1: p111 size 100663296 extends beyond EOD, truncated [ 71.189564][ T28] audit: type=1400 audit(70.730:818): avc: denied { read write open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.217123][ T1432] loop1: p112 start 591104 is beyond EOD, truncated [ 71.248957][ T1432] loop1: p113 size 100663296 extends beyond EOD, truncated [ 71.287840][ T28] audit: type=1400 audit(70.730:819): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.302701][ T1432] loop1: p114 start 591104 is beyond EOD, truncated [ 71.332575][ T1432] loop1: p115 size 100663296 extends beyond EOD, truncated [ 71.349269][ T1432] loop1: p116 start 591104 is beyond EOD, truncated [ 71.355995][ T1432] loop1: p117 size 100663296 extends beyond EOD, truncated [ 71.365041][ T1432] loop1: p118 start 591104 is beyond EOD, truncated [ 71.371753][ T1432] loop1: p119 size 100663296 extends beyond EOD, truncated [ 71.381580][ T1432] loop1: p120 start 591104 is beyond EOD, truncated [ 71.388818][ T1432] loop1: p121 size 100663296 extends beyond EOD, truncated [ 71.389447][ T1496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 71.399713][ T1432] loop1: p122 start 591104 is beyond EOD, truncated [ 71.411918][ T1432] loop1: p123 size 100663296 extends beyond EOD, truncated [ 71.422728][ T1432] loop1: p124 start 591104 is beyond EOD, truncated [ 71.429817][ T1432] loop1: p125 size 100663296 extends beyond EOD, truncated [ 71.438323][ T1432] loop1: p126 start 591104 is beyond EOD, truncated [ 71.445211][ T1493] loop0: detected capacity change from 0 to 1024 [ 71.445635][ T1432] loop1: p127 size 100663296 extends beyond EOD, truncated [ 71.461951][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.464400][ T1432] loop1: p128 start 591104 is beyond EOD, truncated [ 71.476071][ T1432] loop1: p129 size 100663296 extends beyond EOD, truncated [ 71.489237][ T1479] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.498442][ T1432] loop1: p130 start 591104 is beyond EOD, truncated [ 71.505189][ T1432] loop1: p131 size 100663296 extends beyond EOD, truncated [ 71.515025][ T1479] device bridge_slave_0 entered promiscuous mode [ 71.520403][ T1432] loop1: p132 start 591104 is beyond EOD, truncated [ 71.528350][ T1432] loop1: p133 size 100663296 extends beyond EOD, truncated [ 71.536870][ T1432] loop1: p134 start 591104 is beyond EOD, truncated [ 71.537237][ T1493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.543919][ T1432] loop1: p135 size 100663296 extends beyond EOD, truncated [ 71.562380][ T1432] loop1: p136 start 591104 is beyond EOD, truncated [ 71.569736][ T1432] loop1: p137 size 100663296 extends beyond EOD, truncated [ 71.575798][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.580239][ T1432] loop1: p138 start 591104 is beyond EOD, truncated [ 71.590928][ T1432] loop1: p139 size 100663296 extends beyond EOD, truncated [ 71.599621][ T1432] loop1: p140 start 591104 is beyond EOD, truncated [ 71.606351][ T1432] loop1: p141 size 100663296 extends beyond EOD, truncated [ 71.615174][ T1432] loop1: p142 start 591104 is beyond EOD, truncated [ 71.623094][ T1432] loop1: p143 size 100663296 extends beyond EOD, truncated [ 71.627442][ T1479] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.634689][ T1432] loop1: p144 start 591104 is beyond EOD, truncated [ 71.644279][ T1432] loop1: p145 size 100663296 extends beyond EOD, truncated [ 71.652768][ T1432] loop1: p146 start 591104 is beyond EOD, truncated [ 71.659502][ T1432] loop1: p147 size 100663296 extends beyond EOD, truncated [ 71.667990][ T1432] loop1: p148 start 591104 is beyond EOD, truncated [ 71.674636][ T1432] loop1: p149 size 100663296 extends beyond EOD, truncated [ 71.682664][ T1479] device bridge_slave_1 entered promiscuous mode [ 71.684560][ T1432] loop1: p150 start 591104 is beyond EOD, truncated [ 71.697500][ T1432] loop1: p151 size 100663296 extends beyond EOD, truncated [ 71.705982][ T1432] loop1: p152 start 591104 is beyond EOD, truncated [ 71.712739][ T1432] loop1: p153 size 100663296 extends beyond EOD, truncated [ 71.721261][ T1432] loop1: p154 start 591104 is beyond EOD, truncated [ 71.728425][ T1432] loop1: p155 size 100663296 extends beyond EOD, truncated [ 71.736001][ T349] device bridge_slave_1 left promiscuous mode [ 71.741271][ T1432] loop1: p156 start 591104 is beyond EOD, truncated [ 71.743706][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.755361][ T1432] loop1: p157 size 100663296 extends beyond EOD, truncated [ 71.781438][ T1493] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 71.796246][ T1432] loop1: p158 start 591104 is beyond EOD, truncated [ 71.813961][ T349] device bridge_slave_0 left promiscuous mode [ 71.815443][ T1432] loop1: p159 size 100663296 extends beyond EOD, truncated [ 71.841672][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.880345][ T349] device veth1_macvtap left promiscuous mode [ 71.886457][ T349] device veth0_vlan left promiscuous mode [ 71.915884][ T1432] loop1: p160 start 591104 is beyond EOD, truncated [ 71.922663][ T1432] loop1: p161 size 100663296 extends beyond EOD, truncated [ 71.931434][ T1432] loop1: p162 start 591104 is beyond EOD, truncated [ 71.940315][ T1432] loop1: p163 size 100663296 extends beyond EOD, truncated [ 71.959169][ T1432] loop1: p164 start 591104 is beyond EOD, truncated [ 71.969231][ T1432] loop1: p165 size 100663296 extends beyond EOD, truncated [ 71.987768][ T1432] loop1: p166 start 591104 is beyond EOD, truncated [ 71.996661][ T1432] loop1: p167 size 100663296 extends beyond EOD, truncated [ 72.020720][ T1432] loop1: p168 start 591104 is beyond EOD, truncated [ 72.030663][ T1432] loop1: p169 size 100663296 extends beyond EOD, truncated [ 72.059169][ T1432] loop1: p170 start 591104 is beyond EOD, truncated [ 72.063325][ T284] EXT4-fs (loop0): unmounting filesystem. [ 72.065828][ T1432] loop1: p171 size 100663296 extends beyond EOD, truncated [ 72.077870][ T1432] loop1: p172 start 591104 is beyond EOD, truncated [ 72.102347][ T1432] loop1: p173 size 100663296 extends beyond EOD, truncated [ 72.125388][ T1432] loop1: p174 start 591104 is beyond EOD, truncated [ 72.132726][ T1432] loop1: p175 size 100663296 extends beyond EOD, truncated [ 72.154678][ T1432] loop1: p176 start 591104 is beyond EOD, truncated [ 72.163044][ T1432] loop1: p177 size 100663296 extends beyond EOD, truncated [ 72.180690][ T1432] loop1: p178 start 591104 is beyond EOD, truncated [ 72.201076][ T1432] loop1: p179 size 100663296 extends beyond EOD, truncated [ 72.211429][ T1432] loop1: p180 start 591104 is beyond EOD, truncated [ 72.218818][ T1432] loop1: p181 size 100663296 extends beyond EOD, truncated [ 72.229957][ T1432] loop1: p182 start 591104 is beyond EOD, truncated [ 72.246924][ T1432] loop1: p183 size 100663296 extends beyond EOD, truncated [ 72.258188][ T1432] loop1: p184 start 591104 is beyond EOD, truncated [ 72.264870][ T1432] loop1: p185 size 100663296 extends beyond EOD, truncated [ 72.275474][ T1432] loop1: p186 start 591104 is beyond EOD, truncated [ 72.282669][ T1432] loop1: p187 size 100663296 extends beyond EOD, truncated [ 72.294165][ T1432] loop1: p188 start 591104 is beyond EOD, truncated [ 72.307665][ T1432] loop1: p189 size 100663296 extends beyond EOD, truncated [ 72.328682][ T1432] loop1: p190 start 591104 is beyond EOD, truncated [ 72.335336][ T1432] loop1: p191 size 100663296 extends beyond EOD, truncated [ 72.347805][ T1515] loop2: detected capacity change from 0 to 256 [ 72.377019][ T1432] loop1: p192 start 591104 is beyond EOD, truncated [ 72.405044][ T1515] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 72.418301][ T1432] loop1: p193 size 100663296 extends beyond EOD, truncated [ 72.426738][ T1432] loop1: p194 start 591104 is beyond EOD, truncated [ 72.434037][ T1432] loop1: p195 size 100663296 extends beyond EOD, truncated [ 72.449817][ T1432] loop1: p196 start 591104 is beyond EOD, truncated [ 72.456954][ T1513] fuse: Invalid rootmode [ 72.462723][ T1432] loop1: p197 size 100663296 extends beyond EOD, truncated [ 72.471761][ T1432] loop1: p198 start 591104 is beyond EOD, truncated [ 72.478903][ T1432] loop1: p199 size 100663296 extends beyond EOD, truncated [ 72.497653][ T1432] loop1: p200 start 591104 is beyond EOD, truncated [ 72.504312][ T1432] loop1: p201 size 100663296 extends beyond EOD, truncated [ 72.546317][ T1432] loop1: p202 start 591104 is beyond EOD, truncated [ 72.554569][ T1432] loop1: p203 size 100663296 extends beyond EOD, truncated [ 72.563615][ T1432] loop1: p204 start 591104 is beyond EOD, truncated [ 72.570569][ T1432] loop1: p205 size 100663296 extends beyond EOD, truncated [ 72.579085][ T1432] loop1: p206 start 591104 is beyond EOD, truncated [ 72.585749][ T1432] loop1: p207 size 100663296 extends beyond EOD, truncated [ 72.594064][ T1432] loop1: p208 start 591104 is beyond EOD, truncated [ 72.600745][ T1432] loop1: p209 size 100663296 extends beyond EOD, truncated [ 72.609211][ T1432] loop1: p210 start 591104 is beyond EOD, truncated [ 72.615843][ T1432] loop1: p211 size 100663296 extends beyond EOD, truncated [ 72.624382][ T1432] loop1: p212 start 591104 is beyond EOD, truncated [ 72.631508][ T1432] loop1: p213 size 100663296 extends beyond EOD, truncated [ 72.642220][ T1432] loop1: p214 start 591104 is beyond EOD, truncated [ 72.656926][ T1432] loop1: p215 size 100663296 extends beyond EOD, truncated [ 72.698409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.710250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.724179][ T1432] loop1: p216 start 591104 is beyond EOD, truncated [ 72.730957][ T1432] loop1: p217 size 100663296 extends beyond EOD, truncated [ 72.754622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.765878][ T1432] loop1: p218 start 591104 is beyond EOD, truncated [ 72.773522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.775290][ T1432] loop1: p219 size 100663296 extends beyond EOD, truncated [ 72.790381][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.797580][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.805592][ T1432] loop1: p220 start 591104 is beyond EOD, truncated [ 72.813821][ T1432] loop1: p221 size 100663296 extends beyond EOD, truncated [ 72.821605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.829173][ T1432] loop1: p222 start 591104 is beyond EOD, truncated [ 72.835797][ T1432] loop1: p223 size 100663296 extends beyond EOD, truncated [ 72.847977][ T1528] loop4: detected capacity change from 0 to 2048 [ 72.854512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.863845][ T1432] loop1: p224 start 591104 is beyond EOD, truncated [ 72.883248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.891711][ T1432] loop1: p225 size 100663296 extends beyond EOD, truncated [ 72.911712][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.914826][ T1432] loop1: p226 start 591104 is beyond EOD, [ 72.918831][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.943799][ T1432] truncated [ 72.947026][ T1432] loop1: p227 size 100663296 extends beyond EOD, truncated [ 72.958294][ T1432] loop1: p228 start 591104 is beyond EOD, truncated [ 72.975103][ T1432] loop1: p229 size 100663296 extends beyond EOD, truncated [ 72.988534][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.998149][ T1528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.014061][ T1533] loop2: detected capacity change from 0 to 256 [ 73.030714][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.039123][ T1432] loop1: p230 start 591104 is beyond EOD, truncated [ 73.060416][ T1528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 73.077195][ T1533] FAT-fs (loop2): Directory bread(block 64) failed [ 73.084440][ T1533] FAT-fs (loop2): Directory bread(block 65) failed [ 73.091053][ T1533] FAT-fs (loop2): Directory bread(block 66) failed [ 73.097625][ T1533] FAT-fs (loop2): Directory bread(block 67) failed [ 73.104203][ T1533] FAT-fs (loop2): Directory bread(block 68) failed [ 73.106394][ T1432] loop1: p231 size 100663296 extends beyond EOD, [ 73.110874][ T1533] FAT-fs (loop2): Directory bread(block 69) failed [ 73.111176][ T1533] FAT-fs (loop2): Directory bread(block 70) failed [ 73.130415][ T1533] FAT-fs (loop2): Directory bread(block 71) failed [ 73.136991][ T1533] FAT-fs (loop2): Directory bread(block 72) failed [ 73.143569][ T1533] FAT-fs (loop2): Directory bread(block 73) failed [ 73.154751][ T1432] truncated [ 73.162426][ T1528] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 73.183326][ T1432] loop1: p232 start 591104 is beyond EOD, truncated [ 73.200135][ T1528] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.200135][ T1528] [ 73.226876][ T1432] loop1: p233 size 100663296 extends beyond EOD, truncated [ 73.264815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.273041][ T1528] EXT4-fs (loop4): Total free blocks count 0 [ 73.279136][ T1528] EXT4-fs (loop4): Free/Dirty block details [ 73.285054][ T1528] EXT4-fs (loop4): free_blocks=2415919504 [ 73.291021][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.299165][ T1528] EXT4-fs (loop4): dirty_blocks=48 [ 73.299454][ T1432] loop1: p234 start 591104 is beyond EOD, truncated [ 73.304307][ T1528] EXT4-fs (loop4): Block reservation details [ 73.304321][ T1528] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 73.449188][ T1479] device veth0_vlan entered promiscuous mode [ 73.457503][ T1432] loop1: p235 size 100663296 extends beyond EOD, truncated [ 73.469184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.523847][ T1432] loop1: p236 start 591104 is beyond EOD, truncated [ 73.580828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.599766][ T1432] loop1: p237 size 100663296 extends beyond EOD, truncated SYZFAIL: proc stdout read failed (errno 5: Input/output error) [ 73.646344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.654000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.662688][ T1536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 73.674550][ T1432] loop1: p238 start 591104 is beyond EOD, truncated [ 73.688598][ T1432] loop1: p239 size 100663296 extends beyond EOD, truncated [ 73.728812][ T1432] loop1: p240 start 591104 is beyond EOD, truncated [ 73.735527][ T1432] loop1: p241 size 100663296 extends beyond EOD, truncated [ 73.779945][ T1432] loop1: p242 start 591104 is beyond EOD, truncated [ 73.786597][ T1432] loop1: p243 size 100663296 extends beyond EOD, truncated [ 73.813099][ T1432] loop1: p244 start 591104 is beyond EOD, truncated [ 73.835964][ T1432] loop1: p245 size 100663296 extends beyond EOD, truncated [ 73.907900][ T334] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.929672][ T1432] loop1: p246 start 591104 is beyond EOD, truncated [ 73.936351][ T1432] loop1: p247 size 100663296 extends beyond EOD, truncated [ 73.979067][ T1432] loop1: p248 start 591104 is beyond EOD, truncated [ 73.985725][ T1432] loop1: p249 size 100663296 extends beyond EOD, truncated [ 74.019408][ T1432] loop1: p250 start 591104 is beyond EOD, truncated [ 74.026178][ T1432] loop1: p251 size 100663296 extends beyond EOD, truncated [ 74.048567][ T1432] loop1: p252 start 591104 is beyond EOD, truncated [ 74.055217][ T1432] loop1: p253 size 100663296 extends beyond EOD, truncated [ 74.064593][ T1432] loop1: p254 start 591104 is beyond EOD, truncated [ 74.071728][ T1432] loop1: p255 size 100663296 extends beyond EOD, truncated [ 75.538711][ T349] device bridge_slave_1 left promiscuous mode [ 75.544904][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.618254][ T349] device bridge_slave_0 left promiscuous mode [ 75.638722][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.748911][ T349] device bridge_slave_1 left promiscuous mode [ 75.755116][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.848210][ T349] device bridge_slave_0 left promiscuous mode [ 75.854432][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.971471][ T349] device bridge_slave_1 left promiscuous mode [ 75.991511][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.069071][ T349] device bridge_slave_0 left promiscuous mode [ 76.075265][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.161664][ T349] device veth0_vlan left promiscuous mode [ 76.179517][ T349] device veth1_macvtap left promiscuous mode [ 76.227947][ T349] device veth0_vlan left promiscuous mode [ 76.270269][ T349] device veth1_macvtap left promiscuous mode [ 76.276460][ T349] device veth0_vlan left promiscuous mode [ 79.830849][ T349] device bridge_slave_1 left promiscuous mode [ 79.845341][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.878258][ T349] device bridge_slave_0 left promiscuous mode [ 79.885415][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.899107][ T349] device bridge_slave_1 left promiscuous mode [ 79.905303][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.916582][ T349] device bridge_slave_0 left promiscuous mode [ 79.937511][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.951815][ T349] device veth1_macvtap left promiscuous mode [ 79.987930][ T349] device veth0_vlan left promiscuous mode [ 80.017132][ T349] device veth1_macvtap left promiscuous mode [ 80.040055][ T349] device veth0_vlan left promiscuous mode