last executing test programs: 10.609184219s ago: executing program 2 (id=213): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1, 0x7fffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000200)={0x1, "b4be8421a3f3090ceb57129c83bb1a1562ae2050097bc3a277628b8fb36a28da220fdf81608f602bc11cfdaec03d294cfbdd855de75763122def77a5c75d51a8"}) 7.060652446s ago: executing program 2 (id=229): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="12000075a24bfc6e323cd700", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdir(&(0x7f0000000140)='./file0\x00', 0x86) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) openat$incfs(r4, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000300004608000000080000180000000000000800000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500ec0000000000de219e06258c24e2c177ff0055041c8fe689cad61de7332f11509fa61153d06ec416d01530e04585f7f4d493151694b5f03066a0d8c4ffe23f6ad91442f1df0d5f0632175e26efe93751e0c3965fac139367b98064a562f391f2fb57673e9ae0f09ecbd9addaec04fe24d0223514aa7fab5956e20d64469045ea7396c35e606cd68bb98c9086726834ff94b89fc27e2e2f1e569d0ec156d9d70f9e0861cc620ddb7fa540f51c9a7f96f0c29efc7055ae494252184a7ba8efb64f3ea7b14b6d97b12fd7602c4f18cb9df915b1a34b72"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5.627789232s ago: executing program 0 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) setuid(0xee01) futimesat(r2, &(0x7f0000000000)='./sys\x00', &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) dup3(r3, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.626418492s ago: executing program 2 (id=237): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="12000075a24bfc6e323cd700", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdir(&(0x7f0000000140)='./file0\x00', 0x86) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) openat$incfs(r4, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 4.218281666s ago: executing program 4 (id=241): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) keyctl$read(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000001a80)={0x610803, 0x100, 0x10}, 0x18) kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16=r3, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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") setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x4, 0x4, 0x0, 0x0, [@mcast1, @mcast1]}, 0x1) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000400), 0xffffffffffff0001, 0x880c0) 4.172468337s ago: executing program 2 (id=242): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', 0x2000092, &(0x7f0000000240)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a29605e556230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f7906b9c1bdab7792758b5b922106ac372d3ce2b35f8f4be09093c7e96e0ebe3c6", @ANYRES32=0x0], 0x1, 0x105a7, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x410c01, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xf504, 0x0) 3.828213376s ago: executing program 0 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x12, r0, 0x2da8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4073, 0xfe9, 0x0, 0x0, 0xffffffffffffffc3}, &(0x7f0000000000)=0x40) 3.820740346s ago: executing program 0 (id=246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x92b, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') pread64(r1, &(0x7f0000000500)=""/195, 0xc3, 0xea) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) futex(&(0x7f00000001c0), 0x6, 0x202, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380), 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) socket$inet6(0xa, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 3.621228701s ago: executing program 4 (id=247): symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0x1a, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.410308727s ago: executing program 4 (id=249): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff9, 0x0, 0x1) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x8, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf63, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x90, 0x23}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff, 0x8, 0x0, "6068c140c2b1"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x81, 0x6, {0x7, 0x25, 0x1, 0xc, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x6, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xda8, 0x3ff, 0x2, "9c153768af9b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0xa, {0x7, 0x25, 0x1, 0x4, 0x3, 0x6}}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x8, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf63, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x90, 0x23}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff, 0x8, 0x0, "6068c140c2b1"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x81, 0x6, {0x7, 0x25, 0x1, 0xc, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x6, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xda8, 0x3ff, 0x2, "9c153768af9b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0xa, {0x7, 0x25, 0x1, 0x4, 0x3, 0x6}}}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2004c804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000078102600000000eed3356df4a9012be2"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3.294978869s ago: executing program 3 (id=250): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) tkill(r1, 0x14) r4 = getpgid(0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x80, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x2a8f2}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="800034ca05000000", 0x8, 0x10000051, &(0x7f0000000080)={0xa, 0xfffd, 0x7, @mcast2, 0x300}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) (async) gettid() (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) tkill(r1, 0x14) (async) getpgid(0x0) (async) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x80, r4}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x2a8f2}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="800034ca05000000", 0x8, 0x10000051, &(0x7f0000000080)={0xa, 0xfffd, 0x7, @mcast2, 0x300}, 0x1c) (async) 3.170341312s ago: executing program 3 (id=251): r0 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ac}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x788, 0x6a28, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x0, 0x1}]}}}}}, 0x0) 3.169990382s ago: executing program 3 (id=252): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x80803, 0x87) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac3) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000140)="b7", 0x1}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) (async) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000400)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@usrquota}, {@nodelalloc}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodioread_nolock}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7, 0x2, 0x3, 0x42}, 0x50) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) shutdown(r6, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r8, &(0x7f0000000240), 0x0}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) fallocate(r9, 0x20, 0x0, 0x8000) (async) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") (async) ioctl$XFS_IOC_FSBULKSTAT(r5, 0xc0205865, &(0x7f00000012c0)={&(0x7f0000000280)=0x80000000008688, 0x7, &(0x7f0000003280), &(0x7f0000001280)}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0xb50, 0x920, 0xc8, 0x8, 0x0, 0x5803, 0xa80, 0x2e8, 0x2e8, 0xa80, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x920, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x80000, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0xfffffffc, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0x3}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xfc}, {0xfd}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x87}, {0x8, 0x4ade}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0xb, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x4, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0xfff7, 0x8, 0x1, 0x0, "f4f373d196b068477bf1c55ee0269727152a61d42288bffba02c5f4813ee70966ec57a6905fc9dfc91200cc4815d73bc49557566701e806a1b11633df8e77785"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000180)={&(0x7f0000000080), 0x0, 0x2, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x2}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) 3.124722594s ago: executing program 3 (id=253): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="12000075a24bfc6e323cd700", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdir(&(0x7f0000000140)='./file0\x00', 0x86) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) openat$incfs(r4, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3.067149515s ago: executing program 1 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x20004800}, 0x2404c040) 2.942270998s ago: executing program 1 (id=255): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1030c1, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x4b40) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, r0, 0x84, 0x75ea, 0xffffffff, 0x200000000000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1030c1, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x15) (async) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x4b40) (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, r0, 0x84, 0x75ea, 0xffffffff, 0x200000000000000}) (async) 2.933412508s ago: executing program 0 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x12, r0, 0x2da8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4073, 0xfe9, 0x0, 0x0, 0xffffffffffffffc3}, &(0x7f0000000000)=0x40) 2.532068668s ago: executing program 2 (id=257): unshare(0x400) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000080)={[{}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x1, 0x453, &(0x7f0000000ac0)="$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") r1 = socket$unix(0x1, 0x1, 0x0) timerfd_create(0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.324648963s ago: executing program 0 (id=258): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) rmdir(0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0xc) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r1], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0xb4, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x146, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) 1.826282626s ago: executing program 1 (id=259): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7fa962bfffff, 0x13012, r1, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r0, 0x954c3000) 1.769056797s ago: executing program 1 (id=260): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8812, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1536, &(0x7f0000000a40)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) unshare(0x24020400) (async) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x0) 1.734264797s ago: executing program 3 (id=261): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020600) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="12000075a24bfc6e323cd700", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdir(&(0x7f0000000140)='./file0\x00', 0x86) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 978.868986ms ago: executing program 0 (id=262): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x325441) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x30, 0x28, {0x28, 0x11, "c2631385269c99e0acdf5f2c3cbdeacc918d2fb73637cc6e442a52973661d609005544380000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 430.2094ms ago: executing program 1 (id=263): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f00000032c0)={0x1, [{0x0, 0x160, 0x7fffffff, &(0x7f0000000100)="03cb2614a3f9c0442a953b9fac033f3a6ad6713b402a59ddf4a1bedb497e49771c8cf23ec8b6a4610148b505"}, {0x3, 0x1e0, 0xfffff349, &(0x7f00000001c0)="ccdcdb3e2e9e0d00279f2998acf06db5dc5a3cb066b22853556dc60f5512069e91e9877c05a2db728f0058adfe4be68a8a05923ec0103576002fafe6"}, {0x0, 0x6d8, 0xfffffff9, &(0x7f0000000200)="317a09302fd24b7c019f442498944388d25dc4e146da9dd3f041f86e80e4edc7f5e425994a23d454b4ca850b9216e06e10b653586ce7f34f698988db3358ddf8f5554a92b3fac1df27f59ff155ff9eeef43717432fb100315ca94d4a8fbe92c4130d436601c5352dd3995af4e3aeb5027de86e1483f722496cb94e977c86d6a4005e5957271bbfe69f3e99126f7659e2ddf9671e58aed402ecb070b46b4f4d75f807ed1cbc6700b00bb9b55619c5c54a5561e4c4fe50c526de915a96e962f202ea9c572b3a4054b3c7de332c77225bbf8eb7c3a08d2a475730caaa"}, {0x1, 0x8000, 0x100, &(0x7f0000000380)="cd20c70360792525376b5cee2983bf14d26a0b943668235efd3dc55ccecf244e94373806b2417dc4fe2354ef9c282ccc42424e57822e080656639add48ce9451e8cac483fc4699946d2e04c8f999ce659e1f6e42547f2977ea49f0de648d39d1a8c6af3cb445fae0025d5c94159f2162548b3c3112f21a461bbad2d67f4b25acff5324e17e2d3fa379b0b8615221696f6006e2002f8d291cce4e1d264281ae401b5ae1438dede159c1056c358f5de13a4966cfeedf81e251f42755807f84eb13c3bcf5ceb12ec67fad7f3120566b067164633911c8c977dacad8519fc17f9e92aeeedb929510b28ff3f137112119e037090c003abc1a1c8520e76f0be8a39c06d825fd3b2cf15b125d825d33fa6ede377ac4ccddaef50790ffd1635fdb6db0fd834f204201b55b602bd918048b6ddc24763461d0b2a3af32a0585f04564f517f22af085dac9435a69840ea16e3eba907e1e8227282472d231e72c043890acf4565cece54531819d69e3619438096696a4bb2f7df0e00c2fc7f4782f4285827f4c0186d820cafc50b87142853bb6d121b9024ec6e055282f36dfebb4b77338f7a25b45f4ee722dc93a55729507f1f79a49666ec953d4fcd084f61f6c2342d4cd57161a9fea0dfb23efb4172e43e1148fe210722f694e65b9a18087415cf0c6e835ad278bc08eb12e3931970ce2598239ff1084502ad54f751ce8c03a7887afbbe30702b59e8911d0836909bda5a3519940ec542baa32ca266cc12d976f8bfb833985e89ca2e731be5215a684cc1ce709b9ada7b5a835668223e5e059026e62d6bdc39d5eefbfafbdffd4b3ebaeb57ab77466f588398cd29390fbd3bcde8970b7727a8ec82eba86d648f7a61eac6481ea1b0706204bc777617136493e813a5e5fda183b8aa218cc4c01fd4371e1d542569360e70efb114b61c6f22f2712150bffbe555a7e9b59ee7f02272c7b4e546982e9993f7b3ce119ac7dc96358edeb8f1226b45a2a1da382fd065abf50b61568fa161ae92bcf1ba26cef9cd18f23064be475145e8a124d38ad44ad169c736397bce8a3cd2a74a3207e132b040b24fd4d93ef9d24cd3f08fadb8573ac1930469b54524005f0adbcbe211308b101b5f4649dc510393f3e86aab4fe6fd3330e2ff311d97d26f5193a54de6be72f92acb5f601f89756c106b35e65b14767026a9071e3677dd73910818801bc66c56265e875e839c44ab8474f3e087bb6cf0353cc6ce853bf3869b77f3386d35f2da3c577746a2f1d0b363b918d7a1f02c681e56f0ca5b3203546b4dd0bf64197fd98d6e6ed447183f6c1d83e6bb4e5d5a38d55cca57a0e407c82930e2c10662e2b550beb48bfdfc68e84acbe8e738fef6d9b62447233dd46225b0a19c34af18e8a01e64884b50bace319f6bb7c6aee32221d460427f4f6c3eb4eef3a6c6f8d3061de0fac6b3a182e98bbac926c5ad385c01bfd2c9796fa4e6678a22be97fc1a4dfdf6c0503f27a6ceffffea8e0ade53a3704f2ca8446ae474f927d94404c3585b13023c50828bef0f8f783ca689e1ff2e411fc2effe5127cf781a656287b4e8181df8a1a4c64fa7a2365b222521b6ab6247b15c771b6c48dffe4eb11659ac9a95e2e9f5f5fa67e4c4beb40f93d959c79e3f9b0bc812e07d6c2b36ba223b1500f5bc8f05835ba69407f1506548afbcb05739c4e519e51ab771c204ebad1fca0c9827206c68427e48d08ab4d29d465181c4cc7c99dd563b6e5e6ca5c142fffb9d91dfed5b0945c5c08d0c463d655d54834f06bd7389f2815f2abde2b322d335d0d59442241f3e64a41427698cdb96e86a9abb022692f44c35799d59cc63eea2446eeae077c3ebe4b5468742c2518efda810595e4d50f1a0d6398af0ba105c03ab6b96a0b3ebf096afcd151efa64194f95c1224a3bb81e0dc8c2b6d9aa4487bc913fe090f39b2df82474a269a9121bdeefaaab216157eaeb5006ac122705375242bc7da7f7a5546d6fdcd2e6b85c6640aacdc5c5e82612923a5416515a5d7997ccc1c80bfb6ce89c55ea7d966ba07d4f8c701c659724bad2830799fa68e6637628067e974c439d825e62f637f8cb34db36fdce64e73bed7d72ce6b02a70a0a7c445b0124f3df80470c21c226bd99e4ef2705b035dd266578c815f85a16fcca76d35cdc752c47d10bc1cb4741c96e70318f09aaf10d7bbf226c6d3d584b4ee1f9cb20ea7ab6b290f1b41dc36941b39cec991d240f289a00bf46daf729dff601a6e5482ebde798a0ab6e07d9f6a781be4026cd3ff6e3333a5cd564bb09c4c15ced55b3a21c10ef5aa1f6537d80006ff2bf1893feb2596c0bd2de8cfec427410f362beca06c72a07e91ba4f0696a031e38af5b30caa4f3c1038e16904ac2bbd20be9bbed002156bb201a2c9cc53f7e43e78c60de08bfaf9be0f6bce04e2f9f2546668a968be0a5d736174ba63bc20899d0fd970b8db0e68afe6615db1a74e5278ce7019e7c359e2a3d14231837b968164d21a83f60ced06bffdb437587c49f8afe4e5e395b5b938ccf97fb9655ea3c6b87ace0c21c18e1262897d83d032efe8397cc9b72917594ffa08f2f72110f6919f62be989d84570ceefe5021c285ab40ae397e780b7f196d5fc14c5321358f3d4b85f5ec05a247da1affd62cea8c187bb68e15ba0f64162198de70fdcd47e45baac78710b5c8af053b8f1a94ac49e3ef12362d027376754451c01965cfc016b63eb746844beebd644154cb4540c1a6fd358ff68c54bf9540d3c005f688ff10440cb580bd080bba34797ac459a276977ea0cfb8a69ed42628f2e2840e38aef515d0431014cbca15f449c36821cc8ac158dbdfcc5617b08162d51fc234436a04b492239c36decfea6b75dd265882ddd810193094e38ef279d5a315e731cec41cc6483b5501492cda740a500119b4ce44073de1814da46d052b95c1ec74bac8fe23c46f79971b115347cd6dd65ef9c91a010de3bebfbd9163d854fa201248801e8f2fd63f2faee8a57ee627d745ae383159b31ee2d26132e918e5dbcb1d6eb3fb89ad4698c0ab1de0d544044cae551996c65476e8728a6c7a3ff7f0addefdeefc80dcab5451129b107604989b118faeb7175c24ff754233875e10af5ca43be842653d5c5c368238f2cf9ca824c1ff4dc16d31626822da19fa14d56fcd41d9a3e68a3eb863b659f84132fbd06f82d25ff0044bfc30b1813d6b948503136fb86cbca5e2d193d80167ec919bb689c7e06f2724732de16c38f43b9c6d17a6f2ab7ac11689df3e746e89ec37e50ee4ec14c8b7712cb1e4bdc0538a4dd57f0a64d5d457e11716523928b3d5b511f71e9d1c081b76f23489605b75f4f6190f9e59d9904b7ed42867b4ccaa9722d50932788f9179cd7415b9d4e56820727766e13da351ffead4812b0394ef444ca1635f9c505d9b340676fec2d7056cdadd36fc6dbe4cab3528130e85f6e279683d47116f63a92eabb95a235fd12b09703851ebbc461eeb029d52100517890ea25de6dc46305464f9f452166c9a985a8aae0da5f108e4a86c34b9721eeb891e36a4f0047a8abd92f8c16cbbd62ccf3c92f214363e42e9152ebc92817c9f3ea2ace9504853305f69f135d95de79896a7c051a1ac11c7f1b334daf4ebea78f229b4163170496943f961e64186dc4995b1de19691d1c9b09dd88b43dc5af88d548d3113ea0d7ef972c32c1e36d69eaa916aad4d42b620720bdad9a8f6a683046e069d33f682137b2a064af680bf6a745803b38bd3a013dac58c108c9170301bfdc2bc2787f950be7593dcc56cfcf719a1bda0d8dd71a654e8160a4800e1ad32a4c3a48b495f636d94db919e6d2cc165abacd635d5a5af082395e81f98ad24877aaef980f969af578779f207f25713801a2f37d29044af92cde11408c12c2897a6e9e8ffabcfb0b9faafde21c2cfd8a65c8152751ce0168873d6ea315becd723d45412a8e25c5edfa007253bc08c4af279cb25c45f5843b72c4a64d920fdf208b6644697662ac5f885ee5964317c5037307fe24e47249ed4fcd381a49f7dfd48ac7acae88ebef7b8b0d2984e5ee46edf36aced725ad5844ab3c0f0454bc6ed1d63ab1615e9c0bd12f4431db7cfba35d6ce24d807931149bf8c82944eedd797f937c654a1caa4ec9f41d8573ec87d7578c0db2abcddd546a62c970541e90f783474f2dd12c2bf32380c574942ee16a8fc821654ae70e6f86825721e1809b9f76ae7c90d795d6e9eb694fad733bce6f3a68ea22557a4c39ecf4634c214c83ba617d4d4457ddc654a89560e4873e4eeac7f6554bd58b687a47b6d4d210f1a223df03ce065d38c132ab9732f6c9c77590f97bae7d93164b6be3d9fc9dc463c2204dbdc9fa99388b25d99f6bb8f964fea9787a1514510e686b9007f5939e0861024f21aaabee295efc067f488ea4d52024ae111cbac1e5c72ed891bacabc06618d858f9f531f2078ddb8ae9c72e8613c540578978c530d7064fd85631f25c76673958621f97ff1c39b57955aaf6acacb260f317196cf67384558a77cd2c2389c10ada0601ef04ca4ccec97958a53c1887aa099f12402fc8e3214e02e5f03ff9611b07031f4a4b209452126e60789ed7642e4f7e9b44e12961395432a58778b3fcf2e1694ac9bd510572145312fa2f01bf4547d575bd22ef72ba22af504649659221513309e006a829f54946feeb9e3bdb87d9ad13263b793b1b4e4f6b4ef539abd08a36b478d29b040e35b781d1dead4fa21f0b146239d838451b7b0ab450c268824e718a50f0d0a730a3a04d7afcb06ec681737d1fdbd2ac68444eeeca463a29262f3534648e6abb428d9030d86c4ca11b42141fb9814a4b44f7c55ea04f8415cdf6cbc0002b6bacfed5b6af9623c8d69e79d8546ddf13bb0eb25cd74f862a9a0b1d6de201fbb56b4d165d000b7b07f8903176e37449da5e97729a699df0f305951db4b52829f086061591209dbffa2f37e93beb26ed6c7a43ee94f2af56766f6d6615d33d1f8616007b3c89d45ff62965c3bc83f7a78297abaeab5854e32e79f3ba3aa2887fd221aab679f8a324500e8ea36787a850ed90821abb6506f55823467f92ba8c83aa07e1a03926aefbdc3d426f2c6c1c1d9639c3547a89969a0a436786f340823e9f12c19b29b38ea93f6ee7e7a33ed3177885129df0d15c852eee5ef361d940abeefd65eb73bb8b41af39b0e1071e65d94528e8d2577c87049e418cf7d1bda34233a7e54bb354e4e03a2b9d7f5810e0f6a224ad6e2ee0901c33fdc8a9149736f3cee423033b47249188657b1cd909f05e7e92f468b308c06193e0518a36a8e58bd7b5d97149b8ffa1b6436d2e8679e60f30305e5c57838d1417338799f8d3da331711e3a9998baf4c08d752747f82c9a093eb90783858ad6e10f1036bc5ab98b1f4516114f750947d7ad88382dc7ad25153037fbdac7a289c957b1591b2a1d2d8e53fb2e07b3403de698672b50ae7aba5e4d36c2455b0af52e8df1ebba9f6196d13185e266764b8a8594f8b3cfca06371b1593560eb7ffce43b50b01af183358b317dce698cdc7f8850b6b80c168814b9d6fa3ba546b2a0c4ed7fb3f7957fe100dd436ea054294b24544060880c43f78b7a88c3505677a5a758bc6a1ef9b901c19dd2d85dbb99ed507afa7f4c26246319a0272861f2059d5ecabe84b0514d986b09b12094998b750d02af3265a9f03a3fc71cbd9ecfe9f873c7844a28ee86a551ac2f06150beda755eaa5ad6fee66a2fdee25c44070d911c9d603e4c066818e7f1be0f1fd7843d3b566a1327a5f49e5730"}, {0x3, 0x8000, 0x7, &(0x7f0000001b40)="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"}, {0x1, 0x7f0, 0x40, &(0x7f0000002b40)="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"}, {0x0, 0x318, 0x4, &(0x7f0000002c40)="d90c5e820b86ebc6164d91a66499369131fe5a371817ed13ace9e04dbfad803f72223314fa57c8cbc219e5a7b70e651ac9b25a87e96709c1bb9ccf90d8921049038ed7c99e11b7821c667fa8c78813f5db8688be84cf8ec988daf294618061052ea27c"}, {0x1, 0x460, 0xe769, &(0x7f0000002cc0)="0cd38c633d4e3bdc43930e6cd8b95c6e07e81e869ea2ed8dde7c9990c770be858318faf1a504dbb5ac995e495032568a02868a7a70847ca88d9a3304193fdd5157cbabed1ab2dcba3de381ed0928f36b78b6163400d11f69159289e35b46815ea0a139c6deacfc086613cf2d04a1107af8ff4e2b60e9ff8a4f155c7a29f22ca9d629cae460e06da574365147"}, {0x1, 0x138, 0x8001, &(0x7f0000002d80)="f1a40c917ad5d51534e598233d69b57a66f7448dbc725bb25f238320a3c8b240a56ed070b7f49d"}, {0x2, 0x640, 0x5, &(0x7f0000002dc0)="afa01abfe4e93d49f8f14b34462fac75c4dd430fd4179dfc28e710b82a2fbbc739756740e1b9beded47e0001e8e2fd132d05f387f823f33be2aa56c0e0ca4d1397781d44d56857a88656abd69c084e4261d3b3ea52fdc41a17a2c3b72c44037940d2ed76919bf84c7d8a02a3004913d2e7166e7d6add926e1c3e7d22df959981a7b62edd8330639a1c867e6928d0713868689b8e284b2c5a1553335dba46986c557e5a1aaea3f7663368d81a3f178c60888ecaa805d6ea4fbff34733464c7b099aa6d10317c3faf3"}, {0x3, 0x2e8, 0x0, &(0x7f0000002ec0)="86cbcef0a6c22bade2137e7bb26067a12ec79aa7d0dccfb5e3493b7b5a95a798f8132621dcbf92ed2a4dd716c66d3c44ee2e5bdf002d98bd8365349aff8cf7c8c10f1daf0d528d2f814bc80a2621a84460c11ea1e9298af2e050627bec"}, {0x2, 0x408, 0x5, &(0x7f0000002f40)="df007137e8801866f4da2adf18e1728a3506b97c6ce2a0b6b893b2cdc1fe0f61b7fe6c8d8cadfdeb07d1a2c6c823e5256166c51f51a8fb1c5599a186258e7b42911ad16b40deb094eb41e12cdf3f5186212dca38ba3992edc4252b041df06d784cc0b37fac13cdc6216a716e17630e194419895292dc59274b4c862acc606552be"}, {0x1, 0x98, 0x2, &(0x7f0000003000)="54b488793746f8721954b14bed44894e844c44"}, {0x2, 0x758, 0x2, &(0x7f0000003040)="3cc45318bb76a7dae1b92580a3f6e1ff3d9008dc8206aa416d76a1370f541ae408045761fdefbe44e6ae163b85982db647653b03c29e70eb3dd451c2a4af447bcd06ab4e40655e5747047cf536466b5bd47518be66c83dbb2fdacc4cac2386a0a4f525825e4ca4b5a554f258e0e84e7a0636664f4271bc4b610baeffd4eaceb5f3ce166c1e85590101fcfebcfc1fe6b51e9eabc017fa727af197898730f390248db3f23bd91ef1e5505cfc4a190828a444efdee30ae7b8fffc371571c76b7e43562ed18c8321acf86fd15a7c06e1e507d2838f43d5ef8265bb3aaf1ee4f0d60469a5afe2ddd3a6925c4ba6"}, {0x1, 0x630, 0x4, &(0x7f0000003140)="90d8e05cd6e038d275d8778b9d3dc69354252f40b7eec7d886e39557307f719aac1cec8124b0c67c9ddbe38242a99507c8384492ded17fc7c61c82d2145d576073ae49bd0c6168e29a90a0b75e574609e450fb729f634132a51bddc114ada1a34676605cf564de29df3aa9b3bef2c0057c3ff77b5affb1b521efbe2fa880f5e916677393410a73415a5799e13c0e0bc8eae309ee73de00e0c4799bd6b52f8ef4f4f20c6e469044bbb31d1f8ac089325bfb0afd7e615bd3a806ff3d2842929b5ec7f013b5ddcc"}, {0x3, 0x298, 0x1, &(0x7f0000003240)="32f24940fda16aedaf16a8670b964dc6215da75ac3436ccf9b60c61db544ba2bd110a80c61cbee386a9b3afc014a0781f65faf67fed95e9f02c7484f503683f1bca527905970ae4d7b8d3d189338eb355476fa"}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2400) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000001380)={{&(0x7f000015d000/0x2000)=nil, 0x2000}}) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4), 0x1f80}], 0x1d0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 326.170442ms ago: executing program 3 (id=264): syz_usb_connect$hid(0x2, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000405804115000000000000109022400"], 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x40}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'macsec0\x00', @remote}) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000240)={0x1, 0x0, 0x1}) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r3) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}, {0x30, 0x1, [@m_ife={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x81, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0x1, 0x4, 0x20, 0x24}, 0x22, &(0x7f00000000c0)={0x5, 0xf, 0x22, 0x3, [@generic={0x6, 0x10, 0x44777bd112215f8e, "d78dc9"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "85b74b655b88934cc7042a73104359cb"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x404}}, {0xb1, &(0x7f0000000140)=@string={0xb1, 0x3, "df68853f943f607e3d6b8e279fe484a94c0c13cb7c0010ab2c66b9b88f723d20e756b45c0def8cb37fdbf78b71b5053485918218637ac5e6de45cc80a98c0cfa12a5bbb83341e9c4127658e5b057f499a54c15d0d7aa95c68a6ef6e6fc8e69e078e5d2e6ecd34350a0d1ee615319eed70dca6a56435103324bc1842fbe5fe8d319546f91b7fbadd9da581ee85bacf19ffff88eecdd3de44eafa9d1659f88ff82cbd6e850271aa7301c0f35d11d019a"}}]}) 281.755733ms ago: executing program 4 (id=265): syz_open_dev$usbmon(&(0x7f0000000080), 0x3c, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x43e}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r4) (async) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="c22e33e604006b1e0ea662f724b87443f7613397afdeb6ccac04ee1f0a5896d565cc0e8e290600587c2dac19d290bfe63477084ef442dcd318fca500"/80]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) r11 = socket$unix(0x1, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 22.30779ms ago: executing program 1 (id=266): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = syz_clone3(&(0x7f0000000180)={0x2a7a26080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) setpriority(0x0, 0x0, 0x2a14b58) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x406) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000600), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x288180, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x444843, 0x82) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000480), 0x8, 0x537100) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f00000005c0)={0x494e, 0xb0f, 0xb, 0xd049, 0x6, 0xfffffffb}) r7 = openat(r5, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x200041, 0x0) close(r7) (async) getdents64(r5, &(0x7f0000000200)=""/179, 0xb3) syz_clone3(&(0x7f0000000540)={0x8b209000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000003c0)=""/186, 0xba, &(0x7f0000000640)=""/209, &(0x7f0000000380)=[r0, r0, r0], 0x3}, 0x58) 21.97307ms ago: executing program 4 (id=267): r0 = io_uring_setup(0xd71, &(0x7f0000001a00)={0x0, 0x7f2b, 0x10000, 0xfffffffc, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYRES16=r0, @ANYBLOB="90473997d6fad5e631a380c8fd9398e97493c96266d726b169593d710184079de5c05aef0823c2b64ea8566e6cbf0de11dd834dc175925abc62431362f51a074acc07c9332daa0ee8cd05985c65b68013ecd73b5f0421b1b87ea956b7938d7ea8e87d614eeeda0d2367d1bcd3d7862fcee882e35f6f5be20bd5a1c76e5001453b566284360fed7e846cafae2c725ee72fbbea1a65094595dfeda3d83b41ab1368a79c22f50cdcbc729d700b053fb391eafede1823445738b53121a3fb65e095a6a174ecb3113b0", @ANYRESHEX, @ANYRES32=r1], 0x48) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x8b, 0x0, 0x9}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000021c0)={r2, &(0x7f0000002000)="013e291e28974a7eb104484dc0247a0b25daaeb8a04d0ebf2ec1f988b15ddd86def9f0c7728b163d17ad57710b5f86da5f600c88c472f96fcf08a9570b0f4ed395471160e4f7b10be017e8e580581257739bfca5d85ab91f8b8542cf2dd22f8fa4b0535a89cb21fd04205a8564c08b7b021f1ec90fcb8f3324cc27f43ecfeb01094dd20e3632c907a704ea054de7187dd864529aec4bf50e55ad5b317a554a5f5cde22c4bb5ac1ee932fb841d159525f006295bb9f46a02e76108e29fdbcdb", &(0x7f00000020c0)=""/249, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000d003900000000557b1f318b5de9edd64bc709c05babfd0000b4a518daaecc", @ANYRES32=r7], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000002200)=0x5) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004"], 0x50) (async) unshare(0x24020400) r13 = syz_open_procfs$pagemap(0x0, &(0x7f00000013c0)) pwrite64(r13, 0x0, 0x0, 0xffffffff) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) r14 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r14, &(0x7f0000000180)="86c4efc2a7", 0x5) (async) execveat(r14, &(0x7f0000000200)='./file1\x00', &(0x7f0000002380)={[&(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000002340)='exfat\x00']}, &(0x7f0000000400)={[&(0x7f00000003c0)='($-\xd9/&^%\x00']}, 0x400) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x2000000000000182, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000001dc0)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303000303031302c7569643dc985e64aa8a6d5530c668f058b8b16138ac14a0e707a70293fefc89362d933010ac6187211978dbbfb747c08a56a247de2d956097d79a232c11e6f5c65c70bd2f947e97db181002f240218ff63d4e16c235648274670c3fc9c038ddf7ca73b535187f600c4a1662f583dcd76ca0de219e4c8325bdacaae1a31b9d8d7077d9c0f60f7244a6ebbd29ac6bb6df246ae609a4511", @ANYRESHEX=0x0, @ANYBLOB="2c756d6e736b3d30303030303030303030303030303030303030363134332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c6572726f72733d72cf66031c6c1e21ec47bce4a4656d6f756e742d726f2c757466382c696f63686172736574"], 0x1, 0x1540, &(0x7f0000000880)="$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") 12.05505ms ago: executing program 2 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x12, r0, 0x2da8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4073, 0xfe9, 0x0, 0x0, 0xffffffffffffffc3}, &(0x7f0000000000)=0x40) 0s ago: executing program 4 (id=269): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0xe}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x8000000, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bind$unix(r1, 0x0, 0x0) write(r0, &(0x7f00000002c0)='0\n', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 21.957631][ T30] audit: type=1400 audit(1786007786.194:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.961912][ T277] cgroup: Unknown subsys name 'net' [ 21.980838][ T30] audit: type=1400 audit(1786007786.194:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.008230][ T30] audit: type=1400 audit(1786007786.224:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.008788][ T277] cgroup: Unknown subsys name 'devices' [ 22.148626][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.154283][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.265032][ T30] audit: type=1400 audit(1786007786.494:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.288228][ T30] audit: type=1400 audit(1786007786.494:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.313196][ T30] audit: type=1400 audit(1786007786.494:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.321582][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.345214][ T30] audit: type=1400 audit(1786007786.574:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.370697][ T30] audit: type=1400 audit(1786007786.574:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.400811][ T30] audit: type=1400 audit(1786007786.634:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.401948][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.426434][ T30] audit: type=1400 audit(1786007786.634:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.046134][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.053280][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.060820][ T286] device bridge_slave_0 entered promiscuous mode [ 23.077664][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.084736][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.092249][ T286] device bridge_slave_1 entered promiscuous mode [ 23.129229][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.136338][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.143726][ T287] device bridge_slave_0 entered promiscuous mode [ 23.150874][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.157958][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.165430][ T287] device bridge_slave_1 entered promiscuous mode [ 23.178132][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.185310][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.193018][ T285] device bridge_slave_0 entered promiscuous mode [ 23.202627][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.209906][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.217415][ T285] device bridge_slave_1 entered promiscuous mode [ 23.232333][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.239660][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.247554][ T289] device bridge_slave_0 entered promiscuous mode [ 23.263561][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.270737][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.278293][ T289] device bridge_slave_1 entered promiscuous mode [ 23.310632][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.317843][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.325264][ T288] device bridge_slave_0 entered promiscuous mode [ 23.332285][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.339414][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.346938][ T288] device bridge_slave_1 entered promiscuous mode [ 23.510302][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.517410][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.524745][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.531822][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.551498][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.558634][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.565940][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.573028][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.598057][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.605139][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.612474][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.619577][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.632440][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.639546][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.646858][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.653929][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.665081][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.672182][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.679494][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.686562][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.720167][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.727795][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.735239][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.743248][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.750747][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.758000][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.765208][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.772512][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.779703][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.786987][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.795097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.802688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.829433][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.837195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.844876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.853459][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.860587][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.868302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.875790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.884084][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.891303][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.899118][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.907436][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.914524][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.922064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.930353][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.937451][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.944798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.953059][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.960108][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.989529][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.998066][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.005107][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.012678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.020910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.029009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.037099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.045058][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.067422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.075624][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.083725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.091345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.099269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.107732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.115961][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.123063][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.130612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.139131][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.147419][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.154452][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.167963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.175522][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.185712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.194737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.215254][ T285] device veth0_vlan entered promiscuous mode [ 24.222498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.231185][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.239772][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.248344][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.256659][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.263692][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.271188][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.279641][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.287946][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.295026][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.302474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.310930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.319506][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.327480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.336834][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.344387][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.352027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.360755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.374055][ T286] device veth0_vlan entered promiscuous mode [ 24.384358][ T287] device veth0_vlan entered promiscuous mode [ 24.396357][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.404507][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.412846][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.421546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.429731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.437890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.445787][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.453878][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.462053][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.470330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.478571][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.486070][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.493710][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.501255][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.513176][ T285] device veth1_macvtap entered promiscuous mode [ 24.524475][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.532742][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.541182][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.559891][ T288] device veth0_vlan entered promiscuous mode [ 24.568049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.576197][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.583930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.591652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.600025][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.608411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.616925][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.625199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.633694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.642268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.650821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.659352][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.667989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.678094][ T286] device veth1_macvtap entered promiscuous mode [ 24.691120][ T289] device veth0_vlan entered promiscuous mode [ 24.698120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.705854][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.714137][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.722503][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.731236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.739533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.747161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.755829][ T287] device veth1_macvtap entered promiscuous mode [ 24.772979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.780802][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.789242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.797973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.806206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.831201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.839727][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.848591][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 24.849698][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.864581][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.872966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.881430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.892593][ T288] device veth1_macvtap entered promiscuous mode [ 24.905323][ T289] device veth1_macvtap entered promiscuous mode [ 24.924602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.935264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.946254][ T309] loop1: detected capacity change from 0 to 512 [ 24.977929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.987790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.996708][ T309] ======================================================= [ 24.996708][ T309] WARNING: The mand mount option has been deprecated and [ 24.996708][ T309] and is ignored by this kernel. Remove the mand [ 24.996708][ T309] option from the mount to silence this warning. [ 24.996708][ T309] ======================================================= [ 25.016641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.068140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.076889][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.085209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.106030][ T317] loop2: detected capacity change from 0 to 512 [ 25.213996][ T309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.228043][ T309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 25.240562][ T309] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 26.379834][ T312] sched: RT throttling activated [ 26.654762][ T324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.347272][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.354393][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.363530][ T327] Zero length message leads to an empty skb [ 27.658644][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 27.658660][ T30] audit: type=1400 audit(1786007791.674:106): avc: denied { create } for pid=316 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.693774][ T330] loop4: detected capacity change from 0 to 128 [ 27.701846][ T30] audit: type=1400 audit(1786007791.674:107): avc: denied { write } for pid=316 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.731887][ T330] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 27.759571][ T330] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.770868][ T330] ext2 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.781444][ T30] audit: type=1400 audit(1786007791.674:108): avc: denied { read } for pid=316 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.807600][ T333] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 27.912767][ T30] audit: type=1400 audit(1786007791.884:109): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.933113][ T30] audit: type=1400 audit(1786007792.004:110): avc: denied { mount } for pid=329 comm="syz.4.6" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.955102][ T30] audit: type=1400 audit(1786007792.054:111): avc: denied { write } for pid=329 comm="syz.4.6" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.977063][ T30] audit: type=1400 audit(1786007792.054:112): avc: denied { add_name } for pid=329 comm="syz.4.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.002447][ T330] input: syz1 as /devices/virtual/input/input4 [ 28.119046][ T30] audit: type=1400 audit(1786007792.054:113): avc: denied { create } for pid=329 comm="syz.4.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.156408][ T30] audit: type=1400 audit(1786007792.054:114): avc: denied { read write open } for pid=329 comm="syz.4.6" path="/1/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.237045][ T30] audit: type=1400 audit(1786007792.054:115): avc: denied { create } for pid=308 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.239471][ T342] loop0: detected capacity change from 0 to 512 [ 28.273824][ T344] xt_hashlimit: size too large, truncated to 1048576 [ 29.414270][ T352] loop2: detected capacity change from 0 to 512 [ 29.516698][ T354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 29.736360][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.516418][ T306] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 30.524783][ T306] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 30.535568][ T306] usb 4-1: config 0 has no interface number 0 [ 30.546330][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.553948][ T361] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.568029][ T368] loop2: detected capacity change from 0 to 512 [ 30.706446][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 30.715729][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.724418][ T306] usb 4-1: Product: syz [ 30.953155][ T306] usb 4-1: Manufacturer: syz [ 30.957905][ T306] usb 4-1: SerialNumber: syz [ 30.966038][ T306] usb 4-1: config 0 descriptor?? [ 30.986476][ T306] usb 4-1: can't set config #0, error -71 [ 30.995174][ T306] usb 4-1: USB disconnect, device number 2 [ 31.016388][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.116381][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.127397][ T361] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 31.135662][ T361] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 31.168678][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.179644][ T361] usb 2-1: config 0 has no interface number 0 [ 31.189954][ T6] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 31.234114][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.397044][ T6] usb 1-1: config 0 descriptor?? [ 32.403439][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.419018][ T379] loop3: detected capacity change from 0 to 512 [ 32.436484][ T361] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 32.446425][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.454451][ T361] usb 2-1: Product: syz [ 32.459362][ T361] usb 2-1: Manufacturer: syz [ 32.463987][ T361] usb 2-1: SerialNumber: syz [ 32.472540][ T361] usb 2-1: config 0 descriptor?? [ 32.477867][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.489007][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.499058][ T20] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 32.508326][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.519439][ T20] usb 5-1: config 0 descriptor?? [ 32.698845][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.705976][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.836642][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.884492][ T364] Illegal XDP return value 4294967282, expect packet loss! [ 32.962522][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.972724][ T39] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 32.981913][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.990987][ T39] usb 3-1: config 0 descriptor?? [ 33.157918][ T20] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 33.165458][ T20] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 33.177486][ T6] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 33.184969][ T6] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 33.197334][ T20] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 33.205610][ T6] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 33.213264][ T20] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 33.225309][ T6] hid-steam 0003:28DE:1142.0003: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 33.306365][ T6] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 33.314393][ T20] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 33.334863][ T6] hid-steam 0003:28DE:1142.0002: No HID_FEATURE_REPORT submitted - nothing to read [ 33.344647][ T20] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 33.477981][ T39] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 33.485932][ T39] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 33.498057][ T39] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 33.510848][ T39] hid-steam 0003:28DE:1142.0006: hidraw2: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 33.733930][ T39] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 33.742075][ T39] hid-steam 0003:28DE:1142.0005: No HID_FEATURE_REPORT submitted - nothing to read [ 33.826495][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 33.826520][ T30] audit: type=1400 audit(1786007798.044:133): avc: denied { create } for pid=355 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.934619][ T39] usb 5-1: USB disconnect, device number 2 [ 33.976656][ T30] audit: type=1400 audit(1786007798.094:134): avc: denied { setopt } for pid=363 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.042278][ T39] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 34.577061][ T321] usb 2-1: USB disconnect, device number 2 [ 34.826526][ T60] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 37.726362][ T321] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.892202][ T20] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 37.942470][ T409] xt_hashlimit: size too large, truncated to 1048576 [ 37.978773][ T414] loop1: detected capacity change from 0 to 512 [ 38.052623][ T419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 38.817555][ T392] usb 3-1: USB disconnect, device number 2 [ 39.387790][ T392] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 39.413012][ T427] loop3: detected capacity change from 0 to 512 [ 39.505373][ T432] loop0: detected capacity change from 0 to 512 [ 39.846984][ T366] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.934472][ T392] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.403880][ T6] usb 1-1: USB disconnect, device number 2 [ 40.413789][ T6] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 40.502351][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.509492][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.895844][ T443] loop0: detected capacity change from 0 to 512 [ 40.917963][ T443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.929068][ T443] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 40.976388][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.987605][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.997779][ T366] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 41.007033][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.019712][ T366] usb 5-1: config 0 descriptor?? [ 41.028135][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.062576][ T366] usb 5-1: can't set config #0, error -71 [ 41.063078][ T448] loop4: detected capacity change from 0 to 512 [ 41.075585][ T366] usb 5-1: USB disconnect, device number 3 [ 41.086383][ T392] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 41.094556][ T392] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 41.104939][ T392] usb 3-1: config 0 has no interface number 0 [ 41.116341][ T403] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.303822][ T448] EXT4-fs (loop4): Test dummy encryption mode enabled [ 41.364663][ T448] EXT4-fs (loop4): Ignoring removed oldalloc option [ 41.416967][ T392] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 41.430770][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.451018][ T448] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 41.469725][ T392] usb 3-1: Product: syz [ 41.474024][ T392] usb 3-1: Manufacturer: syz [ 41.480305][ T392] usb 3-1: SerialNumber: syz [ 41.546576][ T403] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 41.563244][ T30] audit: type=1400 audit(1786007805.794:135): avc: denied { create } for pid=447 comm="syz.4.34" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.611104][ T403] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 41.643021][ T392] usb 3-1: config 0 descriptor?? [ 41.659868][ T448] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 41.671752][ T403] usb 4-1: config 0 has no interface number 0 [ 41.699433][ T453] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 41.759985][ T453] overlayfs: conflicting lowerdir path [ 41.767933][ T30] audit: type=1400 audit(1786007805.914:136): avc: denied { create } for pid=447 comm="syz.4.34" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.789484][ T30] audit: type=1400 audit(1786007805.924:137): avc: denied { mounton } for pid=447 comm="syz.4.34" path="/7/file0/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.919460][ T30] audit: type=1400 audit(1786007805.924:138): avc: denied { write } for pid=447 comm="syz.4.34" name="bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.966239][ T30] audit: type=1400 audit(1786007805.924:139): avc: denied { add_name } for pid=447 comm="syz.4.34" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.987359][ T30] audit: type=1400 audit(1786007805.924:140): avc: denied { setattr } for pid=447 comm="syz.4.34" name="work" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.009292][ T403] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 42.018519][ T30] audit: type=1400 audit(1786007805.984:141): avc: denied { remove_name } for pid=447 comm="syz.4.34" name="#1" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.040547][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.051858][ T403] usb 4-1: Product: syz [ 42.056059][ T403] usb 4-1: Manufacturer: syz [ 42.060933][ T403] usb 4-1: SerialNumber: syz [ 42.065654][ T30] audit: type=1400 audit(1786007805.984:142): avc: denied { rename } for pid=447 comm="syz.4.34" name="#1" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.091254][ T403] usb 4-1: config 0 descriptor?? [ 42.105872][ T30] audit: type=1400 audit(1786007805.994:143): avc: denied { unlink } for pid=447 comm="syz.4.34" name="#1" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.128197][ T30] audit: type=1400 audit(1786007805.994:144): avc: denied { unlink } for pid=447 comm="syz.4.34" name="#2" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.248424][ T461] loop0: detected capacity change from 0 to 128 [ 42.466968][ T461] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 42.477858][ T461] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.488776][ T461] ext2 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.503939][ T461] input: syz1 as /devices/virtual/input/input5 [ 42.546375][ T20] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 42.554683][ T20] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 42.565674][ T20] usb 2-1: config 0 has no interface number 0 [ 42.726507][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 42.735664][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.743751][ T20] usb 2-1: Product: syz [ 42.747996][ T20] usb 2-1: Manufacturer: syz [ 42.752631][ T20] usb 2-1: SerialNumber: syz [ 42.760938][ T20] usb 2-1: config 0 descriptor?? [ 42.796599][ T366] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.166400][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.177623][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.187410][ T366] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 43.196503][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.205210][ T366] usb 5-1: config 0 descriptor?? [ 43.508786][ T20] usb 3-1: USB disconnect, device number 3 [ 44.165513][ T403] usb 4-1: USB disconnect, device number 3 [ 44.755616][ T392] usb 2-1: USB disconnect, device number 4 [ 44.842500][ T366] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 44.850231][ T366] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 44.861950][ T484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 44.898362][ T366] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 44.907361][ T366] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 45.907752][ T366] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 45.915715][ T366] hid-steam 0003:28DE:1142.0007: No HID_FEATURE_REPORT submitted - nothing to read [ 45.976366][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.992254][ T490] loop2: detected capacity change from 0 to 512 [ 46.008656][ T493] loop4: detected capacity change from 0 to 512 [ 46.015973][ T366] usb 5-1: USB disconnect, device number 4 [ 46.023717][ T495] loop1: detected capacity change from 0 to 512 [ 46.030251][ T366] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 46.050776][ T490] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.061194][ T490] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 46.496743][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.503933][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.179836][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 47.179850][ T30] audit: type=1400 audit(1786007811.414:149): avc: denied { read } for pid=489 comm="syz.2.44" dev="nsfs" ino=4026532533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.938312][ T506] loop2: detected capacity change from 0 to 512 [ 47.966395][ T30] audit: type=1400 audit(1786007811.444:150): avc: denied { open } for pid=489 comm="syz.2.44" path="net:[4026532533]" dev="nsfs" ino=4026532533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.989793][ T30] audit: type=1400 audit(1786007812.164:151): avc: denied { map } for pid=509 comm="syz.3.49" path="socket:[16910]" dev="sockfs" ino=16910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 48.026359][ T20] usb 1-1: device descriptor read/all, error -71 [ 48.087431][ T506] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.111849][ T506] EXT4-fs (loop2): Ignoring removed oldalloc option [ 48.128877][ T506] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 49.209512][ T403] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 50.607604][ T530] loop0: detected capacity change from 0 to 512 [ 50.615181][ T30] audit: type=1400 audit(1786007814.844:152): avc: denied { read } for pid=504 comm="syz.2.47" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.666422][ T306] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.746673][ T537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 50.803795][ T30] audit: type=1400 audit(1786007815.034:153): avc: denied { remove_name } for pid=288 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.902437][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.909636][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.060777][ T30] audit: type=1400 audit(1786007815.034:154): avc: denied { rmdir } for pid=288 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.150781][ T30] audit: type=1400 audit(1786007815.044:155): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.173393][ T30] audit: type=1400 audit(1786007815.044:156): avc: denied { unlink } for pid=288 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.196179][ T30] audit: type=1400 audit(1786007815.054:157): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.240015][ T30] audit: type=1400 audit(1786007815.234:158): avc: denied { rmdir } for pid=288 comm="syz-executor" name="work" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 51.355147][ T366] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.376445][ T306] usb 5-1: device descriptor read/all, error -71 [ 53.101758][ T550] loop4: detected capacity change from 0 to 131072 [ 53.636629][ T553] loop2: detected capacity change from 0 to 131072 [ 53.669915][ T549] loop0: detected capacity change from 0 to 512 [ 53.680131][ T550] F2FS-fs (loop4): Test dummy encryption mode enabled [ 53.687041][ T553] F2FS-fs (loop2): Test dummy encryption mode enabled [ 53.696130][ T553] F2FS-fs (loop2): invalid crc value [ 53.701685][ T550] F2FS-fs (loop4): invalid crc value [ 53.767441][ T553] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.797268][ T549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.809229][ T553] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 53.819670][ T366] usb 4-1: device descriptor read/all, error -71 [ 53.821731][ T549] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 53.832093][ T553] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 53.844108][ T553] F2FS-fs (loop2): Start checkpoint disabled! [ 54.073738][ T550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.135084][ T550] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 54.811209][ T550] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 54.818312][ T550] F2FS-fs (loop4): Start checkpoint disabled! [ 54.974698][ T566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.66'. [ 55.053153][ T30] audit: type=1400 audit(1786007819.284:159): avc: denied { read write } for pid=564 comm="syz.4.66" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.078091][ T566] binder: 564:566 ioctl c0306201 0 returned -14 [ 55.094044][ T30] audit: type=1400 audit(1786007819.314:160): avc: denied { open } for pid=564 comm="syz.4.66" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.489812][ T30] audit: type=1400 audit(1786007819.314:161): avc: denied { ioctl } for pid=564 comm="syz.4.66" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.541266][ T580] loop2: detected capacity change from 0 to 512 [ 56.636317][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 56.776289][ T366] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 57.066357][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.089436][ T580] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.099346][ T580] EXT4-fs (loop2): Ignoring removed oldalloc option [ 57.118260][ T586] loop3: detected capacity change from 0 to 512 [ 57.124622][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.144989][ T20] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 57.164748][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.183704][ T20] usb 2-1: config 0 descriptor?? [ 57.262436][ T580] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 57.603913][ T597] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.611047][ T597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.397851][ T30] audit: type=1400 audit(1786007822.634:162): avc: denied { read append } for pid=598 comm="syz.3.74" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.516846][ T30] audit: type=1400 audit(1786007822.654:163): avc: denied { open } for pid=598 comm="syz.3.74" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.176377][ T366] usb usb4-port1: attempt power cycle [ 59.187134][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 59.198233][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 59.230182][ T613] loop0: detected capacity change from 0 to 512 [ 59.369938][ T607] loop4: detected capacity change from 0 to 131072 [ 59.377569][ T20] usb 2-1: USB disconnect, device number 6 [ 59.671231][ T607] F2FS-fs (loop4): Test dummy encryption mode enabled [ 59.679002][ T607] F2FS-fs (loop4): invalid crc value [ 59.696362][ T30] audit: type=1400 audit(1786007823.924:164): avc: denied { watch } for pid=616 comm="syz.3.79" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 59.718576][ T613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.768962][ T607] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.805506][ T607] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 59.816858][ T607] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 59.823592][ T607] F2FS-fs (loop4): Start checkpoint disabled! [ 59.830694][ T613] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 59.847588][ T607] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 60.070791][ T615] loop2: detected capacity change from 0 to 131072 [ 60.117069][ T615] F2FS-fs (loop2): Test dummy encryption mode enabled [ 60.124871][ T615] F2FS-fs (loop2): invalid crc value [ 60.149384][ T615] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.183331][ T615] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 60.194486][ T615] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 60.201849][ T615] F2FS-fs (loop2): Start checkpoint disabled! [ 60.212055][ T615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 61.443889][ T638] loop3: detected capacity change from 0 to 131072 [ 61.909640][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.047248][ T638] F2FS-fs (loop3): Test dummy encryption mode enabled [ 62.066294][ T638] F2FS-fs (loop3): invalid crc value [ 62.728541][ T638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.763310][ T638] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 62.774839][ T638] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 62.781653][ T638] F2FS-fs (loop3): Start checkpoint disabled! [ 62.866440][ T638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 63.388821][ T652] loop4: detected capacity change from 0 to 512 [ 63.474855][ T655] loop3: detected capacity change from 0 to 512 [ 63.704759][ T655] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.726328][ T655] EXT4-fs (loop3): Ignoring removed oldalloc option [ 64.210965][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.218097][ T669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.116368][ T20] usb 2-1: unable to read config index 0 descriptor/all [ 65.123530][ T20] usb 2-1: can't read configurations, error -71 [ 65.154955][ T655] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 65.203536][ T30] audit: type=1400 audit(1786007829.434:165): avc: denied { create } for pid=676 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.294948][ T30] audit: type=1400 audit(1786007829.454:166): avc: denied { write } for pid=676 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.370626][ T30] audit: type=1400 audit(1786007829.454:167): avc: denied { nlmsg_write } for pid=676 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.545060][ T653] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 65.760895][ T691] loop3: detected capacity change from 0 to 512 [ 65.794292][ T691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.817342][ T691] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 66.420607][ T699] loop0: detected capacity change from 0 to 512 [ 66.483460][ T701] capability: warning: `syz.3.101' uses 32-bit capabilities (legacy support in use) [ 66.988335][ T699] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #11: comm syz.0.100: iget: bad extended attribute block 2 [ 67.034865][ T699] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.100: couldn't read orphan inode 11 (err -117) [ 67.060405][ T713] loop1: detected capacity change from 0 to 128 [ 67.086429][ T653] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 67.100751][ T653] usb 3-1: can't read configurations, error -71 [ 67.107954][ T699] EXT4-fs (loop0): 1 truncate cleaned up [ 67.113625][ T699] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 67.197528][ T30] audit: type=1400 audit(1786007831.434:168): avc: denied { mount } for pid=692 comm="syz.0.100" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.198971][ T693] serial 00:04: in use; can't configure [ 67.224969][ T713] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 67.238564][ T722] loop2: detected capacity change from 0 to 512 [ 67.246202][ T713] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.258250][ T30] audit: type=1400 audit(1786007831.494:169): avc: denied { mount } for pid=708 comm="syz.1.105" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.280432][ T713] ext2 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.524181][ T722] EXT4-fs (loop2): Test dummy encryption mode enabled [ 67.680688][ T722] EXT4-fs (loop2): Ignoring removed oldalloc option [ 67.763866][ T713] input: syz1 as /devices/virtual/input/input9 [ 68.333003][ T287] EXT4-fs error (device loop0): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 68.347210][ T30] audit: type=1400 audit(1786007832.564:170): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.368606][ T722] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 68.402915][ T287] EXT4-fs error (device loop0): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 68.426344][ T30] audit: type=1400 audit(1786007832.654:171): avc: denied { unlink } for pid=721 comm="syz.2.107" name="#9" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.858919][ T30] audit: type=1400 audit(1786007833.094:172): avc: denied { mounton } for pid=740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.023180][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.062591][ T746] loop4: detected capacity change from 0 to 512 [ 70.086289][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.093847][ T740] device bridge_slave_0 entered promiscuous mode [ 70.287857][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.295101][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.309695][ T740] device bridge_slave_1 entered promiscuous mode [ 70.325454][ T746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.339093][ T746] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 70.374241][ T753] loop3: detected capacity change from 0 to 4096 [ 70.413129][ T753] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.428349][ T10] device bridge_slave_1 left promiscuous mode [ 70.434526][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.442695][ T10] device bridge_slave_0 left promiscuous mode [ 70.449478][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.456906][ T753] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 70.467068][ T753] System zones: 0-5 [ 70.473037][ T10] device veth1_macvtap left promiscuous mode [ 70.505713][ T10] device veth0_vlan left promiscuous mode [ 70.516526][ T753] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,noload,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 70.666301][ T653] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.678579][ T753] EXT4-fs (loop3): shut down requested (0) [ 70.689049][ T30] audit: type=1400 audit(1786007834.924:173): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 70.712376][ T30] audit: type=1400 audit(1786007834.924:174): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.734022][ T30] audit: type=1400 audit(1786007834.924:175): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.922947][ T30] audit: type=1400 audit(1786007834.924:176): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.250752][ T30] audit: type=1400 audit(1786007834.924:177): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.536909][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.544520][ T30] audit: type=1400 audit(1786007834.924:178): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.568058][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.603251][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.622580][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.636800][ T30] audit: type=1400 audit(1786007834.924:179): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.659919][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.667036][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.695018][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.705355][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.725440][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.732536][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.770898][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.790939][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.800027][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.817197][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.835509][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.863386][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.876630][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.895273][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.906554][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.915296][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.923758][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.932249][ T740] device veth0_vlan entered promiscuous mode [ 71.948656][ T764] loop4: detected capacity change from 0 to 512 [ 71.949307][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.975118][ T740] device veth1_macvtap entered promiscuous mode [ 71.986204][ T766] loop3: detected capacity change from 0 to 512 [ 71.992848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.001465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.010211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.019554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.045780][ T764] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.060553][ T764] EXT4-fs (loop4): Ignoring removed oldalloc option [ 72.117772][ T764] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 72.136432][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.151346][ T773] loop0: detected capacity change from 0 to 512 [ 72.155391][ T653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.167574][ T653] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 72.176676][ T653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.194153][ T653] usb 3-1: config 0 descriptor?? [ 72.408584][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.415701][ T778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.895422][ T30] audit: type=1400 audit(1786007837.124:180): avc: denied { name_bind } for pid=784 comm="syz.3.125" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.896752][ T653] usbhid 3-1:0.0: can't add hid device: -71 [ 72.933316][ T653] usbhid: probe of 3-1:0.0 failed with error -71 [ 72.944665][ T653] usb 3-1: USB disconnect, device number 6 [ 73.088309][ T794] loop0: detected capacity change from 0 to 512 [ 73.168302][ T794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.186406][ T794] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 73.362179][ T800] loop0: detected capacity change from 0 to 8192 [ 73.446658][ T800] FAT-fs (loop0): Unrecognized mount option "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" or missing value [ 74.573515][ T815] loop2: detected capacity change from 0 to 512 [ 74.795904][ T815] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.909747][ T815] EXT4-fs (loop2): Ignoring removed oldalloc option [ 75.189346][ T815] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 75.668318][ T826] loop3: detected capacity change from 0 to 256 [ 75.708403][ T30] audit: type=1400 audit(1786007839.944:181): avc: denied { append } for pid=823 comm="syz.0.136" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.824260][ T831] loop2: detected capacity change from 0 to 128 [ 75.893982][ T833] loop1: detected capacity change from 0 to 512 [ 75.906820][ T831] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 75.919732][ T831] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.930681][ T831] ext2 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.946508][ T833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.957939][ T833] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 75.968815][ T30] audit: type=1400 audit(1786007840.204:182): avc: denied { setattr } for pid=830 comm="syz.2.138" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.003959][ T30] audit: type=1400 audit(1786007840.234:183): avc: denied { setattr } for pid=830 comm="syz.2.138" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.096287][ T20] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.096299][ T392] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 76.133391][ T806] loop4: detected capacity change from 0 to 131072 [ 76.144029][ T806] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 76.152328][ T806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.165881][ T806] F2FS-fs (loop4): invalid crc value [ 76.207129][ T806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.278737][ T806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.295992][ T806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 76.382850][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 76.446445][ T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 76.456347][ T392] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.468648][ T392] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.506632][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.519478][ T20] usb 1-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 76.528778][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.539888][ T20] usb 1-1: config 0 descriptor?? [ 76.577055][ T20] usb 1-1: Found UVC 0.00 device (05a9:2640) [ 76.586029][ T20] usb 1-1: No valid video chain found. [ 76.656372][ T392] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 76.670597][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.686303][ T392] usb 4-1: Product: syz [ 76.690621][ T392] usb 4-1: Manufacturer: syz [ 76.700722][ T392] usb 4-1: SerialNumber: syz [ 76.716780][ T30] audit: type=1400 audit(1786007840.954:184): avc: denied { relabelfrom } for pid=858 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.751257][ T30] audit: type=1400 audit(1786007840.974:185): avc: denied { relabelto } for pid=858 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.779590][ T829] UDC core: couldn't find an available UDC or it's busy: -16 [ 76.790513][ T30] audit: type=1400 audit(1786007841.014:186): avc: denied { create } for pid=828 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.810058][ T829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.828559][ T30] audit: type=1400 audit(1786007841.014:187): avc: denied { connect } for pid=828 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.886361][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.906361][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.916305][ T39] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 76.925397][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.947200][ T39] usb 3-1: config 0 descriptor?? [ 77.083503][ T30] audit: type=1400 audit(1786007841.314:188): avc: denied { write } for pid=825 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.102982][ T403] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 77.120638][ T30] audit: type=1400 audit(1786007841.344:189): avc: denied { create } for pid=825 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.214159][ T866] loop3: detected capacity change from 0 to 512 [ 77.267935][ T866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.276482][ T392] usb 4-1: 0:1 : does not exist [ 77.281423][ T392] usb 4-1: BAAD GENERIC IO: no channels? [ 77.296325][ T866] EXT4-fs (loop3): Ignoring removed oldalloc option [ 77.303136][ T392] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 77.313220][ T392] usb 4-1: USB disconnect, device number 7 [ 77.325363][ T20] usb 1-1: USB disconnect, device number 5 [ 77.344199][ T866] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 77.361339][ T870] binder: 869:870 unknown command 0 [ 77.367958][ T403] usb 2-1: Using ep0 maxpacket: 8 [ 77.412026][ T870] binder: 869:870 ioctl c0306201 2000000004c0 returned -22 [ 77.448359][ T30] audit: type=1400 audit(1786007841.684:190): avc: denied { create } for pid=869 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.506357][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 77.516895][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.538281][ T39] usb 3-1: USB disconnect, device number 7 [ 77.556317][ T403] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.656331][ T403] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 77.664659][ T403] usb 2-1: config 2 has no interface number 0 [ 77.689296][ T403] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x8 has invalid maxpacket 1024 [ 77.719820][ T403] usb 2-1: config 2 interface 232 has no altsetting 0 [ 77.906335][ T403] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 77.915478][ T392] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 77.925567][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.955944][ T403] usb 2-1: Product: syz [ 77.965980][ T403] usb 2-1: Manufacturer: syz [ 77.971035][ T403] usb 2-1: SerialNumber: syz [ 77.981916][ T901] FAULT_INJECTION: forcing a failure. [ 77.981916][ T901] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.996566][ T860] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 78.045798][ T901] CPU: 0 PID: 901 Comm: syz.2.154 Not tainted syzkaller #0 [ 78.053180][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.063274][ T901] Call Trace: [ 78.066568][ T901] [ 78.069539][ T901] __dump_stack+0x21/0x30 [ 78.073904][ T901] dump_stack_lvl+0x110/0x170 [ 78.078594][ T901] ? show_regs_print_info+0x20/0x20 [ 78.083838][ T901] dump_stack+0x15/0x20 [ 78.088012][ T901] should_fail+0x3ab/0x500 [ 78.092465][ T901] should_fail_usercopy+0x1a/0x20 [ 78.097507][ T901] _copy_to_user+0x20/0x90 [ 78.101943][ T901] simple_read_from_buffer+0xe9/0x160 [ 78.107333][ T901] proc_fail_nth_read+0x1a6/0x220 [ 78.112379][ T901] ? proc_fault_inject_write+0x310/0x310 [ 78.118041][ T901] ? security_file_permission+0x83/0xa0 [ 78.123612][ T901] ? proc_fault_inject_write+0x310/0x310 [ 78.129270][ T901] vfs_read+0x28c/0xc20 [ 78.133445][ T901] ? kernel_read+0x1f0/0x1f0 [ 78.138060][ T901] ? __kasan_check_write+0x14/0x20 [ 78.143196][ T901] ? mutex_lock+0x9b/0x1c0 [ 78.147652][ T901] ? wait_for_completion_killable_timeout+0x10/0x10 [ 78.154274][ T901] ? __fget_files+0x2e1/0x340 [ 78.158979][ T901] ? __fdget_pos+0x2d2/0x380 [ 78.163592][ T901] ? ksys_read+0x70/0x260 [ 78.167943][ T901] ksys_read+0x14a/0x260 [ 78.172201][ T901] ? vfs_write+0xfd0/0xfd0 [ 78.176634][ T901] ? debug_smp_processor_id+0x17/0x20 [ 78.182028][ T901] __x64_sys_read+0x7b/0x90 [ 78.186550][ T901] x64_sys_call+0x96d/0x9a0 [ 78.191070][ T901] do_syscall_64+0x4c/0xa0 [ 78.195504][ T901] ? clear_bhb_loop+0x50/0xa0 [ 78.200224][ T901] ? clear_bhb_loop+0x50/0xa0 [ 78.204931][ T901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.210861][ T901] RIP: 0033:0x7f0f78a0b90e [ 78.215303][ T901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.235055][ T901] RSP: 002b:00007f0f774a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.236847][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 78.243489][ T901] RAX: ffffffffffffffda RBX: 00007f0f774a46c0 RCX: 00007f0f78a0b90e [ 78.243508][ T901] RDX: 000000000000000f RSI: 00007f0f774a40a0 RDI: 0000000000000007 [ 78.243520][ T901] RBP: 00007f0f774a4090 R08: 0000000000000000 R09: 0000000000000000 [ 78.243532][ T901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.243543][ T901] R13: 00007f0f78cd3038 R14: 00007f0f78cd2fa0 R15: 00007ffe79922078 [ 78.288576][ T901] [ 78.330692][ T905] loop2: detected capacity change from 0 to 512 [ 78.341783][ T906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 78.376998][ T908] tipc: Enabling of bearer rejected, failed to enable media [ 78.398056][ T908] loop0: detected capacity change from 0 to 512 [ 78.450242][ T905] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 78.465042][ T908] EXT4-fs (loop0): Ignoring removed nobh option [ 78.486354][ T392] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 78.499412][ T392] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.512637][ T392] usb 4-1: config 1 interface 0 has no altsetting 0 [ 78.520436][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #3: comm syz.0.157: corrupted inode contents [ 78.534029][ T908] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #3: comm syz.0.157: mark_inode_dirty error [ 78.555706][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #3: comm syz.0.157: corrupted inode contents [ 78.576374][ T908] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.157: mark_inode_dirty error [ 78.596616][ T908] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.157: Failed to acquire dquot type 0 [ 78.625331][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.157: corrupted inode contents [ 78.667384][ T908] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #16: comm syz.0.157: mark_inode_dirty error [ 78.706561][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.157: corrupted inode contents [ 78.726397][ T392] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 78.732041][ T908] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.157: mark_inode_dirty error [ 78.745831][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.754785][ T392] usb 4-1: Product: င [ 78.763644][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.157: corrupted inode contents [ 78.766336][ T392] usb 4-1: Manufacturer: В [ 78.786409][ T908] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 78.805969][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #16: comm syz.0.157: corrupted inode contents [ 78.806470][ T392] usb 4-1: SerialNumber: ခ [ 78.842064][ T908] EXT4-fs error (device loop0): ext4_truncate:4317: inode #16: comm syz.0.157: mark_inode_dirty error [ 78.856358][ T876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.866316][ T876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.869484][ T908] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 78.903104][ T908] EXT4-fs (loop0): 1 truncate cleaned up [ 78.926335][ T908] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,nobh,,errors=continue. Quota mode: writeback. [ 78.946363][ T908] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.991032][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #18: comm syz.0.157: corrupted inode contents [ 79.006403][ T919] loop2: detected capacity change from 0 to 40427 [ 79.015831][ T908] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #18: comm syz.0.157: mark_inode_dirty error [ 79.039452][ T908] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #18: comm syz.0.157: corrupted inode contents [ 79.051979][ T908] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2954: inode #18: comm syz.0.157: mark_inode_dirty error [ 79.065673][ T908] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2957: inode #18: comm syz.0.157: mark inode dirty (error -117) [ 79.078402][ T908] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117) [ 79.088026][ T876] UDC core: couldn't find an available UDC or it's busy: -16 [ 79.111136][ T876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.135485][ T923] loop2: detected capacity change from 0 to 512 [ 79.163920][ T876] UDC core: couldn't find an available UDC or it's busy: -16 [ 79.181619][ T876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.197856][ T896] loop4: detected capacity change from 0 to 131072 [ 79.207681][ T876] UDC core: couldn't find an available UDC or it's busy: -16 [ 79.215131][ T876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.223783][ T923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.233920][ T923] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 79.244194][ T896] F2FS-fs (loop4): Test dummy encryption mode enabled [ 79.264507][ T896] F2FS-fs (loop4): invalid crc value [ 79.306927][ T896] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.337904][ T392] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 7 proto 1 vid 0x04B8 pid 0x0202 [ 79.358285][ T896] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 79.372621][ T392] usb 4-1: USB disconnect, device number 8 [ 79.387909][ T392] usblp0: removed [ 79.398010][ T896] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 79.407564][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 79.417956][ T896] F2FS-fs (loop4): Start checkpoint disabled! [ 79.427015][ T896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 79.796578][ T403] usb 2-1: invalid MIDI in EP 0 [ 79.802226][ T403] snd-usb-audio: probe of 2-1:2.232 failed with error -22 [ 79.820473][ T403] usb 2-1: USB disconnect, device number 9 [ 79.826465][ T60] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 79.897674][ T941] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 79.906414][ T941] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 79.973218][ T952] loop0: detected capacity change from 0 to 2048 [ 79.997772][ T952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.008666][ T952] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.118888][ T950] loop3: detected capacity change from 0 to 40427 [ 80.143492][ T957] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 80.151858][ T957] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 80.168596][ T950] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.178262][ T950] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.219634][ T950] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.255401][ T964] loop4: detected capacity change from 0 to 4096 [ 80.256390][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.282984][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.301397][ T60] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 80.314733][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.325752][ T950] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 80.335026][ T60] usb 3-1: config 0 descriptor?? [ 80.340274][ T950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.351752][ T971] loop0: detected capacity change from 0 to 512 [ 80.362050][ T964] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.447794][ T971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.470855][ T971] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 80.756345][ T403] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.799221][ T977] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000002,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 80.892636][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 80.892652][ T30] audit: type=1400 audit(1786007845.124:207): avc: denied { mounton } for pid=976 comm="syz.0.175" path="/18/file1/file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.922816][ T977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 80.936332][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 80.942476][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 80.957124][ T60] usb 3-1: USB disconnect, device number 8 [ 80.998432][ T30] audit: type=1400 audit(1786007845.204:208): avc: denied { link } for pid=976 comm="syz.0.175" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.074628][ T403] usb 5-1: device descriptor read/64, error -71 [ 81.108519][ T30] audit: type=1400 audit(1786007845.344:209): avc: denied { validate_trans } for pid=984 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 81.112669][ T985] binder: 984:985 ioctl 4018620d 0 returned -22 [ 81.164817][ T30] audit: type=1400 audit(1786007845.344:210): avc: denied { bind } for pid=984 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.204678][ T30] audit: type=1400 audit(1786007845.344:211): avc: denied { name_bind } for pid=984 comm="syz.3.178" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 81.265087][ T30] audit: type=1400 audit(1786007845.344:212): avc: denied { node_bind } for pid=984 comm="syz.3.178" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 81.298048][ T989] binder: 984:989 ioctl c0306201 0 returned -14 [ 81.324213][ T985] xt_hashlimit: size too large, truncated to 1048576 [ 81.368275][ T991] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.382799][ T30] audit: type=1400 audit(1786007845.614:213): avc: denied { ioctl } for pid=990 comm="syz.1.180" path="socket:[18869]" dev="sockfs" ino=18869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.461549][ T30] audit: type=1400 audit(1786007845.614:214): avc: denied { bind } for pid=990 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.482343][ T996] xt_hashlimit: size too large, truncated to 1048576 [ 81.532911][ T30] audit: type=1400 audit(1786007845.764:215): avc: denied { write } for pid=995 comm="syz.1.182" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.576296][ T403] usb 5-1: device descriptor read/64, error -71 [ 82.186278][ T403] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.202298][ T999] F2FS-fs (loop2): Test dummy encryption mode enabled [ 82.211223][ T999] F2FS-fs (loop2): invalid crc value [ 82.241285][ T999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.275895][ T999] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 82.287171][ T999] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 82.293895][ T999] F2FS-fs (loop2): Start checkpoint disabled! [ 82.315348][ T999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 82.931975][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.939238][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.014658][ T1011] set_capacity_and_notify: 3 callbacks suppressed [ 83.014684][ T1011] loop1: detected capacity change from 0 to 512 [ 83.199523][ T1015] loop3: detected capacity change from 0 to 16 [ 83.218546][ T1022] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 83.240956][ T1015] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.358184][ T30] audit: type=1400 audit(1786007847.564:216): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 83.725488][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.732623][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.213054][ T1013] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 85.226692][ T1013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.313226][ T1045] loop2: detected capacity change from 0 to 128 [ 85.326619][ T1013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.388339][ T1045] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 85.404254][ T1013] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 85.418113][ T1045] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.843413][ T1045] ext2 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.856323][ T1013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.869967][ T1013] usb 1-1: config 0 descriptor?? [ 85.880025][ T1045] input: syz1 as /devices/virtual/input/input13 [ 86.130456][ T1059] loop4: detected capacity change from 0 to 512 [ 86.477951][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.485151][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.499510][ T403] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 86.846370][ T1013] usbhid 1-1:0.0: can't add hid device: -71 [ 86.852717][ T1013] usbhid: probe of 1-1:0.0 failed with error -71 [ 86.872651][ T1013] usb 1-1: USB disconnect, device number 6 [ 87.077091][ T403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.100409][ T403] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.119708][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.122288][ T1065] loop3: detected capacity change from 0 to 131072 [ 87.136224][ T403] usb 2-1: config 0 descriptor?? [ 87.175450][ T1069] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=512 (1024 ns) > initial count (256 ns). Using initial count to start timer. [ 87.199828][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 87.199843][ T30] audit: type=1400 audit(1786007851.434:219): avc: denied { write } for pid=1068 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.230062][ T1065] F2FS-fs (loop3): Test dummy encryption mode enabled [ 87.237965][ T1065] F2FS-fs (loop3): invalid crc value [ 87.246298][ T1065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.280881][ T1065] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 87.292180][ T1065] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 87.299161][ T1065] F2FS-fs (loop3): Start checkpoint disabled! [ 87.306174][ T1065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 87.399178][ T1076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 87.453407][ T1084] loop4: detected capacity change from 0 to 1024 [ 87.528526][ T1084] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 87.607411][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 87.630893][ T403] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 87.652554][ T403] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 87.691856][ T1091] loop4: detected capacity change from 0 to 1024 [ 87.739648][ T1091] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 87.752469][ T1091] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 87.766776][ T1091] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.792796][ T1100] loop3: detected capacity change from 0 to 512 [ 87.820725][ T1091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 87.831179][ T1091] System zones: 0-1, 3-36 [ 87.848445][ T1102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 87.851812][ T1091] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 87.899339][ T653] usb 2-1: USB disconnect, device number 10 [ 88.118977][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.126074][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.426289][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.532427][ T1114] loop1: detected capacity change from 0 to 2048 [ 88.558110][ T1114] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.570824][ T30] audit: type=1400 audit(1786008108.795:220): avc: denied { rename } for pid=1112 comm="syz.1.214" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.593803][ T1113] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 88.596423][ T403] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 88.609454][ T1113] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.628372][ T1113] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.628372][ T1113] [ 88.638795][ T1113] EXT4-fs (loop1): Total free blocks count 0 [ 88.644955][ T1113] EXT4-fs (loop1): Free/Dirty block details [ 88.651715][ T1113] EXT4-fs (loop1): free_blocks=4096 [ 88.657117][ T1113] EXT4-fs (loop1): dirty_blocks=64 [ 88.662467][ T1113] EXT4-fs (loop1): Block reservation details [ 88.668704][ T1113] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 88.675999][ T1112] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 88.696191][ T1112] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.696191][ T1112] [ 88.725417][ T30] audit: type=1400 audit(1786008108.945:221): avc: denied { watch } for pid=1117 comm="syz.0.215" path="/28" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.749237][ T1120] loop3: detected capacity change from 0 to 1024 [ 88.778727][ T1120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.788343][ T1120] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.795625][ T1120] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.217: Invalid inode table block 0 in block_group 0 [ 88.810133][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 88.826380][ T20] usb 5-1: config index 0 descriptor too short (expected 57901, got 45) [ 88.836336][ T1120] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 88.849745][ T1124] loop0: detected capacity change from 0 to 2048 [ 88.856297][ T20] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 88.869082][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 88.875625][ T1120] EXT4-fs error (device loop3): ext4_quota_write:6639: inode #3: comm syz.3.217: mark_inode_dirty error [ 88.891954][ T20] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 88.904978][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 88.911753][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.922183][ T1120] Quota error (device loop3): write_blk: dquota write failed [ 88.930061][ T20] usb 5-1: config 0 has no interfaces? [ 88.935995][ T1124] loop0: p1 p3 < > p4 < p5 > [ 88.940974][ T1124] loop0: partition table partially beyond EOD, truncated [ 88.948342][ T1120] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 88.958617][ T20] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 88.967277][ T1124] loop0: p1 size 196608 extends beyond EOD, truncated [ 88.969909][ T1120] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.217: Failed to acquire dquot type 0 [ 88.979622][ T1124] loop0: p3 start 4284289 is beyond EOD, truncated [ 88.993656][ T1124] loop0: p5 size 196608 extends beyond EOD, truncated [ 89.001685][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.012868][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.013144][ T20] usb 5-1: config 0 descriptor?? [ 89.021217][ T1120] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.217: Invalid inode table block 0 in block_group 0 [ 89.038900][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.045536][ T1120] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 89.056033][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.056576][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.065175][ T1120] EXT4-fs error (device loop3): ext4_ext_truncate:4487: inode #15: comm syz.3.217: mark_inode_dirty error [ 89.085427][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.092500][ T1120] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.217: Invalid inode table block 0 in block_group 0 [ 89.105586][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.221071][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.230977][ T403] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 89.240083][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.248952][ T403] usb 3-1: config 0 descriptor?? [ 89.254050][ T1120] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 89.265961][ T101] loop0: p1 p3 < > p4 < p5 > [ 89.280016][ T101] loop0: partition table partially beyond EOD, truncated [ 89.289649][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.296217][ T1120] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 89.297202][ T101] loop0: p1 size 196608 extends beyond EOD, [ 89.306007][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.320475][ T101] truncated [ 89.324148][ T101] loop0: p3 start 4284289 is beyond EOD, truncated [ 89.330936][ T1120] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.217: Invalid inode table block 0 in block_group 0 [ 89.344085][ T101] loop0: p5 size 196608 extends beyond EOD, truncated [ 89.354229][ T1013] usb 5-1: USB disconnect, device number 9 [ 89.361493][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.376611][ T1120] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 89.387044][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.393596][ T1120] EXT4-fs error (device loop3): ext4_truncate:4317: inode #15: comm syz.3.217: mark_inode_dirty error [ 89.405077][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.411813][ T1120] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 89.421207][ T1120] EXT4-fs (loop3): Remounting filesystem read-only [ 89.446545][ T1120] EXT4-fs (loop3): 1 truncate cleaned up [ 89.462507][ T1120] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 89.543141][ T1120] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.217: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 89.563184][ T1120] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.217: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 89.581908][ T30] audit: type=1400 audit(1786008109.795:222): avc: denied { read write } for pid=1119 comm="syz.3.217" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.616837][ T1120] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.217: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 89.635490][ T30] audit: type=1400 audit(1786008109.795:223): avc: denied { open } for pid=1119 comm="syz.3.217" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.668160][ T30] audit: type=1400 audit(1786008109.835:224): avc: denied { create } for pid=1119 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.716202][ T1130] loop1: detected capacity change from 0 to 131072 [ 89.727786][ T403] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 89.736641][ T403] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 89.748482][ T403] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 89.756227][ T403] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 89.756997][ T1130] F2FS-fs (loop1): Test dummy encryption mode enabled [ 89.776675][ T1130] F2FS-fs (loop1): invalid crc value [ 89.783430][ T1130] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.817526][ T1130] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 89.827068][ T403] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 89.831652][ T1130] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 89.841723][ T1130] F2FS-fs (loop1): Start checkpoint disabled! [ 89.848618][ T1130] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 89.851753][ T403] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 89.926547][ T30] audit: type=1400 audit(1786008366.163:225): avc: denied { create } for pid=1139 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.140006][ T1151] IPv6: sit1: Disabled Multicast RS [ 90.151706][ T30] audit: type=1400 audit(1786008366.383:226): avc: denied { create } for pid=1147 comm="syz.3.224" dev="anon_inodefs" ino=19110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.202190][ T1155] 9pnet: Insufficient options for proto=fd [ 90.217396][ T1155] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 90.478141][ T1159] loop1: detected capacity change from 0 to 2048 [ 91.035168][ T1162] loop1: detected capacity change from 0 to 512 [ 91.076423][ T403] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 91.268146][ T1165] loop0: detected capacity change from 0 to 16 [ 91.317082][ T1165] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.356317][ T20] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 91.402341][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.409482][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.596532][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 91.716363][ T20] usb 5-1: config 9 has an invalid interface number: 189 but max is 0 [ 91.724652][ T20] usb 5-1: config 9 has an invalid interface association descriptor of length 2, skipping [ 91.734667][ T20] usb 5-1: config 9 has no interface number 0 [ 92.069813][ T1013] usb 3-1: USB disconnect, device number 9 [ 92.082654][ T1013] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 92.891546][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.898853][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.942321][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 92.942336][ T30] audit: type=1400 audit(1786008369.173:230): avc: denied { write } for pid=1179 comm="syz.1.233" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 93.057289][ T30] audit: type=1400 audit(1786008369.283:231): avc: denied { name_bind } for pid=1185 comm="syz.0.235" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 93.082063][ T30] audit: type=1400 audit(1786008369.283:232): avc: denied { node_bind } for pid=1185 comm="syz.0.235" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 93.106921][ T1190] loop1: detected capacity change from 0 to 256 [ 93.194987][ T30] audit: type=1400 audit(1786008369.423:233): avc: denied { mount } for pid=1187 comm="syz.1.236" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 93.230797][ T1194] loop4: detected capacity change from 0 to 512 [ 93.237256][ T20] usb 5-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 93.296064][ T30] audit: type=1400 audit(1786008369.483:234): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 93.604817][ T1197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 93.699429][ T1194] EXT4-fs (loop4): 1 orphan inode deleted [ 93.725912][ T1194] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.302427][ T1204] loop3: detected capacity change from 0 to 512 [ 94.316677][ T1194] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.336380][ T30] audit: type=1400 audit(1786008369.983:235): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.381784][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.389883][ T20] usb 5-1: Product: syz [ 94.406362][ T20] usb 5-1: can't set config #9, error -71 [ 94.416361][ T20] usb 5-1: USB disconnect, device number 10 [ 94.552173][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.559325][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.675029][ T1214] loop1: detected capacity change from 0 to 8192 [ 94.795348][ T1214] attempt to access beyond end of device [ 94.795348][ T1214] loop1: rw=0, want=57848, limit=8192 [ 94.831231][ T1214] Buffer I/O error on dev loop1, logical block 57847, async page read [ 94.857555][ T1214] attempt to access beyond end of device [ 94.857555][ T1214] loop1: rw=0, want=57848, limit=8192 [ 94.870481][ T1219] loop0: detected capacity change from 0 to 512 [ 94.888287][ T1214] Buffer I/O error on dev loop1, logical block 57847, async page read [ 94.906011][ T1220] attempt to access beyond end of device [ 94.906011][ T1220] loop1: rw=0, want=57848, limit=8192 [ 94.929766][ T1220] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 94.946015][ T1220] FAT-fs (loop1): Filesystem has been set read-only [ 94.960181][ T1213] attempt to access beyond end of device [ 94.960181][ T1213] loop1: rw=0, want=57848, limit=8192 [ 94.983840][ T1213] Buffer I/O error on dev loop1, logical block 57847, async page read [ 94.992514][ T1219] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.011817][ T1214] attempt to access beyond end of device [ 95.011817][ T1214] loop1: rw=0, want=57848, limit=8192 [ 95.024067][ T1219] EXT4-fs (loop0): 1 truncate cleaned up [ 95.035997][ T1219] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.055108][ T1214] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.066408][ T1213] attempt to access beyond end of device [ 95.066408][ T1213] loop1: rw=0, want=57848, limit=8192 [ 95.073865][ T1223] loop2: detected capacity change from 0 to 7 [ 95.086385][ T30] audit: type=1400 audit(1786008371.323:236): avc: denied { append } for pid=1218 comm="syz.0.246" path="/37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuacct.usage_sys" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.092397][ T1213] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.157038][ T1220] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 95.175484][ T1220] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 95.197308][ T1224] attempt to access beyond end of device [ 95.197308][ T1224] loop1: rw=0, want=57848, limit=8192 [ 95.220829][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 95.230893][ T1224] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.246381][ T1214] attempt to access beyond end of device [ 95.246381][ T1214] loop1: rw=0, want=57848, limit=8192 [ 95.265288][ T30] audit: type=1400 audit(1786008371.493:237): avc: denied { setattr } for pid=1218 comm="syz.0.246" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.283462][ T1214] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.313269][ T1224] attempt to access beyond end of device [ 95.313269][ T1224] loop1: rw=0, want=57848, limit=8192 [ 95.333121][ T1224] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.346551][ T1229] UDC core: couldn't find an available UDC or it's busy: -16 [ 95.349119][ T1214] attempt to access beyond end of device [ 95.349119][ T1214] loop1: rw=0, want=57848, limit=8192 [ 95.364573][ T1229] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.389936][ T1214] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.399871][ T30] audit: type=1400 audit(1786008371.633:238): avc: denied { lock } for pid=1231 comm="syz.3.250" path="socket:[19171]" dev="sockfs" ino=19171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.408083][ T1214] Buffer I/O error on dev loop1, logical block 57847, async page read [ 95.441141][ T30] audit: type=1400 audit(1786008371.663:239): avc: denied { ioctl } for pid=1231 comm="syz.3.250" path="socket:[19173]" dev="sockfs" ino=19173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.504142][ T1207] loop2: detected capacity change from 0 to 131072 [ 95.510850][ T403] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 95.524618][ T1207] F2FS-fs (loop2): Test dummy encryption mode enabled [ 95.552009][ T1207] F2FS-fs (loop2): invalid crc value [ 95.602939][ T1207] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.668739][ T1207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.705587][ T1254] loop1: detected capacity change from 0 to 1024 [ 96.042643][ T1254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.216624][ T403] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.813973][ T1265] loop0: detected capacity change from 0 to 512 [ 96.886444][ T403] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.909987][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.925762][ T1269] loop1: detected capacity change from 0 to 256 [ 96.937366][ T403] usb 5-1: Product: syz [ 96.941732][ T403] usb 5-1: Manufacturer: syz [ 96.993051][ T403] usb 5-1: SerialNumber: syz [ 97.011885][ T1269] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x19f634d8, utbl_chksum : 0xe619d30d) [ 97.159763][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.166993][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.566798][ T403] usb 5-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 97.588186][ T403] usb 5-1: found format II with max.bitrate = 4095, frame size=8 [ 97.633735][ T403] usb 5-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 97.766684][ T403] usb 5-1: found format II with max.bitrate = 4095, frame size=8 [ 98.246350][ T403] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 98.257639][ T403] usb 5-1: found format II with max.bitrate = 3496, frame size=1023 [ 98.294841][ T1283] loop1: detected capacity change from 0 to 1024 [ 98.306384][ T403] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 98.333439][ T1283] EXT4-fs (loop1): Ignoring removed oldalloc option [ 98.341697][ T1283] EXT4-fs (loop1): Ignoring removed oldalloc option [ 98.351065][ T1283] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.356214][ T403] usb 5-1: found format II with max.bitrate = 3496, frame size=1023 [ 98.392163][ T1288] loop2: detected capacity change from 0 to 512 [ 98.393966][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 98.393998][ T30] audit: type=1400 audit(1786008374.623:245): avc: denied { read } for pid=1291 comm="syz.4.265" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.424171][ T1283] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 98.447862][ T1288] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.465879][ T30] audit: type=1400 audit(1786008374.633:246): avc: denied { open } for pid=1291 comm="syz.4.265" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.474629][ T1288] EXT4-fs (loop2): 1 truncate cleaned up [ 98.505150][ T403] usb 5-1: USB disconnect, device number 11 [ 98.512714][ T1288] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 98.539356][ T1013] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 98.553756][ T1292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 98.565711][ T30] audit: type=1400 audit(1786008374.793:247): avc: denied { map } for pid=1282 comm="syz.1.263" path="/48/file1/blkio.bfq.io_service_time" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.599820][ T1288] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.257: Logical block already allocated [ 98.611637][ T30] audit: type=1400 audit(1786008374.833:248): avc: denied { create } for pid=1287 comm="syz.2.257" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 98.626367][ T1288] EXT4-fs (loop2): Remounting filesystem read-only [ 98.694042][ T1304] ================================================================== [ 98.702193][ T1304] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 98.710393][ T1304] Read of size 4 at addr ffff88811a83b470 by task syz.4.269/1304 [ 98.718147][ T1304] [ 98.720515][ T1304] CPU: 1 PID: 1304 Comm: syz.4.269 Not tainted syzkaller #0 [ 98.727856][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.737944][ T1304] Call Trace: [ 98.741257][ T1304] [ 98.744216][ T1304] __dump_stack+0x21/0x30 [ 98.748595][ T1304] dump_stack_lvl+0x110/0x170 [ 98.753314][ T1304] ? show_regs_print_info+0x20/0x20 [ 98.758552][ T1304] ? load_image+0x3f0/0x3f0 [ 98.763099][ T1304] print_address_description+0x7f/0x2c0 [ 98.768717][ T1304] ? unaccount_page_cache_page+0x6f1/0x760 [ 98.774559][ T1304] kasan_report+0x10f/0x150 [ 98.779100][ T1304] ? unaccount_page_cache_page+0x6f1/0x760 [ 98.785050][ T1304] __asan_report_load4_noabort+0x14/0x20 [ 98.790714][ T1304] unaccount_page_cache_page+0x6f1/0x760 [ 98.796391][ T1304] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.803285][ T1304] __delete_from_page_cache+0xbe/0x470 [ 98.808782][ T1304] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 98.815810][ T1304] ? __kasan_check_write+0x14/0x20 [ 98.820932][ T1304] ? __kasan_check_read+0x11/0x20 [ 98.825981][ T1304] ? workingset_eviction+0x402/0x9f0 [ 98.831435][ T1304] __remove_mapping+0x601/0x990 [ 98.836320][ T1304] ? remove_mapping+0xa0/0xa0 [ 98.841004][ T1304] ? __kasan_check_read+0x11/0x20 [ 98.846036][ T1304] shrink_page_list+0x2a24/0x5800 [ 98.851080][ T1304] ? shrink_page_list+0x8e1/0x5800 [ 98.856206][ T1304] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 98.862394][ T1304] ? __this_cpu_preempt_check+0x13/0x20 [ 98.867956][ T1304] ? __mod_zone_page_state+0x8e/0xd0 [ 98.873245][ T1304] ? isolate_lru_pages+0xff1/0x11f0 [ 98.878455][ T1304] ? should_run_aging+0x410/0x410 [ 98.883484][ T1304] ? cgroup_rstat_updated+0x30/0x360 [ 98.888770][ T1304] ? _raw_spin_lock_irq+0x95/0xf0 [ 98.893823][ T1304] ? __this_cpu_preempt_check+0x13/0x20 [ 98.899387][ T1304] ? __count_memcg_events+0xad/0x120 [ 98.904686][ T1304] shrink_lruvec+0x1297/0x3a40 [ 98.909545][ T1304] ? down_read_trylock+0x317/0x630 [ 98.914658][ T1304] ? __kasan_check_write+0x14/0x20 [ 98.919774][ T1304] ? mem_cgroup_shrink_node+0x550/0x550 [ 98.925325][ T1304] ? shrink_slab+0x91b/0x9d0 [ 98.930118][ T1304] ? __kasan_check_write+0x14/0x20 [ 98.935254][ T1304] ? _raw_spin_lock+0x94/0xf0 [ 98.939938][ T1304] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 98.945761][ T1304] ? inactive_is_low+0x160/0x2f0 [ 98.950739][ T1304] ? css_next_descendant_pre+0x1e1/0x210 [ 98.956406][ T1304] ? mem_cgroup_iter+0x465/0x6c0 [ 98.961359][ T1304] shrink_node+0x11ee/0x2a40 [ 98.965963][ T1304] ? allow_direct_reclaim+0x370/0x370 [ 98.971352][ T1304] ? _raw_spin_lock_irq+0x95/0xf0 [ 98.976404][ T1304] ? _raw_spin_lock_irqsave+0x130/0x130 [ 98.981977][ T1304] do_try_to_free_pages+0x5a7/0x1580 [ 98.987298][ T1304] ? try_to_free_pages+0xc50/0xc50 [ 98.992429][ T1304] ? propagate_protected_usage+0x84/0x250 [ 98.998181][ T1304] try_to_free_mem_cgroup_pages+0x261/0x610 [ 99.004081][ T1304] ? shrink_lruvec+0x3a40/0x3a40 [ 99.009044][ T1304] ? mutex_unlock+0x8f/0x230 [ 99.013667][ T1304] mem_cgroup_force_empty_write+0x130/0x170 [ 99.019569][ T1304] ? memcg_stat_show+0x1360/0x1360 [ 99.024707][ T1304] cgroup_file_write+0x294/0x560 [ 99.029659][ T1304] ? cgroup_seqfile_stop+0xc0/0xc0 [ 99.034769][ T1304] ? mutex_lock+0x9b/0x1c0 [ 99.039211][ T1304] ? wait_for_completion_killable_timeout+0x10/0x10 [ 99.045808][ T1304] ? __kasan_check_write+0x14/0x20 [ 99.050938][ T1304] ? cgroup_seqfile_stop+0xc0/0xc0 [ 99.056056][ T1304] kernfs_fop_write_iter+0x2bd/0x400 [ 99.061362][ T1304] vfs_write+0x831/0xfd0 [ 99.065614][ T1304] ? file_end_write+0x1b0/0x1b0 [ 99.070475][ T1304] ? wait_for_completion_killable_timeout+0x10/0x10 [ 99.077070][ T1304] ? __fget_files+0x2e1/0x340 [ 99.081751][ T1304] ? __fdget_pos+0x2d2/0x380 [ 99.086342][ T1304] ? ksys_write+0x70/0x260 [ 99.090769][ T1304] ksys_write+0x14a/0x260 [ 99.095112][ T1304] ? __ia32_sys_read+0x90/0x90 [ 99.099873][ T1304] ? __kasan_check_write+0x14/0x20 [ 99.104997][ T1304] ? switch_fpu_return+0x15d/0x2c0 [ 99.110119][ T1304] __x64_sys_write+0x7b/0x90 [ 99.114713][ T1304] x64_sys_call+0x8ef/0x9a0 [ 99.119218][ T1304] do_syscall_64+0x4c/0xa0 [ 99.123636][ T1304] ? clear_bhb_loop+0x50/0xa0 [ 99.128315][ T1304] ? clear_bhb_loop+0x50/0xa0 [ 99.133008][ T1304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.138904][ T1304] RIP: 0033:0x7f9e62edf0d9 [ 99.143342][ T1304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.162968][ T1304] RSP: 002b:00007f9e61938028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.171397][ T1304] RAX: ffffffffffffffda RBX: 00007f9e63166fa0 RCX: 00007f9e62edf0d9 [ 99.179376][ T1304] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 99.187349][ T1304] RBP: 00007f9e62f76024 R08: 0000000000000000 R09: 0000000000000000 [ 99.195327][ T1304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.203317][ T1304] R13: 00007f9e63167038 R14: 00007f9e63166fa0 R15: 00007ffcf04353a8 [ 99.211296][ T1304] [ 99.214334][ T1304] [ 99.216681][ T1304] Allocated by task 285: [ 99.220930][ T1304] __kasan_kmalloc+0xd4/0x100 [ 99.225612][ T1304] __kmalloc+0x13d/0x2c0 [ 99.229854][ T1304] kvmalloc_node+0x211/0x320 [ 99.234440][ T1304] xt_alloc_table_info+0x3b/0xa0 [ 99.239391][ T1304] do_ip6t_set_ctl+0x865/0xd80 [ 99.244159][ T1304] nf_setsockopt+0x272/0x2a0 [ 99.248747][ T1304] ipv6_setsockopt+0x258f/0x3750 [ 99.253684][ T1304] tcp_setsockopt+0x22b/0x1e90 [ 99.258467][ T1304] sock_common_setsockopt+0xa0/0xb0 [ 99.263677][ T1304] __sys_setsockopt+0x2e9/0x470 [ 99.268524][ T1304] __x64_sys_setsockopt+0xbf/0xd0 [ 99.273550][ T1304] x64_sys_call+0x982/0x9a0 [ 99.278061][ T1304] do_syscall_64+0x4c/0xa0 [ 99.282498][ T1304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.288420][ T1304] [ 99.290756][ T1304] Freed by task 285: [ 99.294643][ T1304] kasan_set_track+0x4a/0x70 [ 99.299238][ T1304] kasan_set_free_info+0x23/0x40 [ 99.304189][ T1304] ____kasan_slab_free+0x125/0x160 [ 99.309300][ T1304] __kasan_slab_free+0x11/0x20 [ 99.314100][ T1304] slab_free_freelist_hook+0xc2/0x190 [ 99.319508][ T1304] kfree+0xc4/0x270 [ 99.323324][ T1304] kvfree+0x35/0x40 [ 99.327150][ T1304] xt_free_table_info+0x16d/0x1b0 [ 99.332179][ T1304] __do_replace+0x801/0x9f0 [ 99.336691][ T1304] do_ip6t_set_ctl+0xa98/0xd80 [ 99.341464][ T1304] nf_setsockopt+0x272/0x2a0 [ 99.346050][ T1304] ipv6_setsockopt+0x258f/0x3750 [ 99.350982][ T1304] tcp_setsockopt+0x22b/0x1e90 [ 99.355905][ T1304] sock_common_setsockopt+0xa0/0xb0 [ 99.361133][ T1304] __sys_setsockopt+0x2e9/0x470 [ 99.365995][ T1304] __x64_sys_setsockopt+0xbf/0xd0 [ 99.371049][ T1304] x64_sys_call+0x982/0x9a0 [ 99.375734][ T1304] do_syscall_64+0x4c/0xa0 [ 99.380158][ T1304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.386077][ T1304] [ 99.388415][ T1304] Last potentially related work creation: [ 99.394125][ T1304] kasan_save_stack+0x3a/0x60 [ 99.398804][ T1304] __kasan_record_aux_stack+0xd2/0x100 [ 99.404276][ T1304] kasan_record_aux_stack_noalloc+0xb/0x10 [ 99.410098][ T1304] insert_work+0x51/0x310 [ 99.414424][ T1304] __queue_work+0x8e1/0xc60 [ 99.418929][ T1304] queue_work_on+0xde/0x150 [ 99.423431][ T1304] destroy_super_rcu+0xd1/0xe0 [ 99.428197][ T1304] rcu_do_batch+0x4c1/0xbf0 [ 99.432697][ T1304] rcu_core+0x4a3/0xef0 [ 99.436854][ T1304] rcu_core_si+0x9/0x10 [ 99.441019][ T1304] handle_softirqs+0x250/0x560 [ 99.445813][ T1304] __irq_exit_rcu+0x52/0xf0 [ 99.450313][ T1304] irq_exit_rcu+0x9/0x10 [ 99.454651][ T1304] sysvec_apic_timer_interrupt+0x58/0xc0 [ 99.460295][ T1304] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 99.466316][ T1304] [ 99.468654][ T1304] Second to last potentially related work creation: [ 99.475233][ T1304] kasan_save_stack+0x3a/0x60 [ 99.479904][ T1304] __kasan_record_aux_stack+0xd2/0x100 [ 99.485365][ T1304] kasan_record_aux_stack_noalloc+0xb/0x10 [ 99.491170][ T1304] call_rcu+0x10b/0xf60 [ 99.495328][ T1304] __put_super+0x26b/0x2d0 [ 99.499753][ T1304] deactivate_locked_super+0xd4/0x100 [ 99.505133][ T1304] mount_bdev+0x2ab/0x3c0 [ 99.509464][ T1304] f2fs_mount+0x34/0x40 [ 99.513622][ T1304] legacy_get_tree+0xed/0x190 [ 99.518325][ T1304] vfs_get_tree+0x89/0x260 [ 99.522873][ T1304] do_new_mount+0x251/0xb40 [ 99.527385][ T1304] path_mount+0x640/0xff0 [ 99.531736][ T1304] __se_sys_mount+0x320/0x390 [ 99.536419][ T1304] __x64_sys_mount+0xbf/0xd0 [ 99.541032][ T1304] x64_sys_call+0x6bf/0x9a0 [ 99.545535][ T1304] do_syscall_64+0x4c/0xa0 [ 99.549948][ T1304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.555854][ T1304] [ 99.558172][ T1304] The buggy address belongs to the object at ffff88811a83b000 [ 99.558172][ T1304] which belongs to the cache kmalloc-2k of size 2048 [ 99.572230][ T1304] The buggy address is located 1136 bytes inside of [ 99.572230][ T1304] 2048-byte region [ffff88811a83b000, ffff88811a83b800) [ 99.585692][ T1304] The buggy address belongs to the page: [ 99.591339][ T1304] page:ffffea00046a0e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a838 [ 99.601578][ T1304] head:ffffea00046a0e00 order:3 compound_mapcount:0 compound_pincount:0 [ 99.609903][ T1304] flags: 0x4000000000010200(slab|head|zone=1) [ 99.615988][ T1304] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043200 [ 99.624571][ T1304] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 99.633162][ T1304] page dumped because: kasan: bad access detected [ 99.639578][ T1304] page_owner tracks the page as allocated [ 99.645287][ T1304] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 286, ts 51400283949, free_ts 51389246823 [ 99.665705][ T1304] post_alloc_hook+0x192/0x1b0 [ 99.670485][ T1304] prep_new_page+0x1c/0x110 [ 99.674988][ T1304] get_page_from_freelist+0x2c3a/0x2cd0 [ 99.680533][ T1304] __alloc_pages+0x1a2/0x460 [ 99.685124][ T1304] new_slab+0xa0/0x4d0 [ 99.689213][ T1304] ___slab_alloc+0x3ac/0x840 [ 99.693817][ T1304] __slab_alloc+0x49/0x90 [ 99.698171][ T1304] __kmalloc+0x16a/0x2c0 [ 99.702428][ T1304] kvmalloc_node+0x211/0x320 [ 99.707013][ T1304] alloc_fdtable+0x10b/0x2e0 [ 99.711603][ T1304] dup_fd+0x896/0xad0 [ 99.715578][ T1304] copy_files+0x76/0xe0 [ 99.719742][ T1304] copy_process+0x10d4/0x3280 [ 99.724418][ T1304] kernel_clone+0x233/0x960 [ 99.728942][ T1304] __x64_sys_clone+0x198/0x210 [ 99.733705][ T1304] x64_sys_call+0x41f/0x9a0 [ 99.738205][ T1304] page last free stack trace: [ 99.742870][ T1304] free_unref_page_prepare+0x5fa/0x600 [ 99.748336][ T1304] free_unref_page+0xae/0x540 [ 99.753024][ T1304] __free_pages+0x6c/0x100 [ 99.757450][ T1304] __free_slab+0xe5/0x1e0 [ 99.761795][ T1304] __unfreeze_partials+0x15a/0x190 [ 99.766909][ T1304] put_cpu_partial+0xc6/0x120 [ 99.771595][ T1304] __slab_free+0x1d4/0x290 [ 99.776019][ T1304] ___cache_free+0x104/0x120 [ 99.780627][ T1304] qlink_free+0x4d/0x90 [ 99.784781][ T1304] qlist_free_all+0x5f/0xb0 [ 99.789285][ T1304] kasan_quarantine_reduce+0x14a/0x170 [ 99.794760][ T1304] __kasan_slab_alloc+0x2f/0xe0 [ 99.799630][ T1304] slab_post_alloc_hook+0x4f/0x2b0 [ 99.804745][ T1304] __kmalloc+0x120/0x2c0 [ 99.808988][ T1304] __vmalloc_node_range+0x384/0xad0 [ 99.814188][ T1304] vzalloc+0x78/0x90 [ 99.818084][ T1304] [ 99.820399][ T1304] Memory state around the buggy address: [ 99.826037][ T1304] ffff88811a83b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.834130][ T1304] ffff88811a83b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.842219][ T1304] >ffff88811a83b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.850278][ T1304] ^ [ 99.858004][ T1304] ffff88811a83b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.866076][ T1304] ffff88811a83b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.874129][ T1304] ================================================================== [ 99.882205][ T1304] Disabling lock debugging due to kernel taint [ 99.889106][ T26] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 100.146355][ T1013] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.153125][ T1013] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 100.162261][ T1013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.170831][ T1013] usb 1-1: config 0 descriptor?? [ 100.256316][ T26] usb 4-1: config index 0 descriptor too short (expected 36, got 10) [ 100.264478][ T26] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 100.271763][ T26] usb 4-1: config 0 has no interfaces? [ 100.277300][ T26] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 100.286380][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.294953][ T26] usb 4-1: config 0 descriptor?? [ 100.540515][ T1285] loop3: detected capacity change from 0 to 256 [ 100.599604][ T1285] UDC core: couldn't find an available UDC or it's busy: -16 [ 100.607149][ T1285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.615141][ T20] usb 4-1: USB disconnect, device number 9 [ 100.646597][ T1013] hid (null): global environment stack underflow [ 100.654173][ T1013] hid (null): usage index exceeded [ 100.664002][ T1013] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x1 [ 100.671143][ T1013] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x6 [ 100.678331][ T1013] hid-led 0003:0FC5:B080.000C: global environment stack underflow [ 100.686164][ T1013] hid-led 0003:0FC5:B080.000C: item 0 4 1 11 parsing failed [ 100.693687][ T1013] hid-led: probe of 0003:0FC5:B080.000C failed with error -22 [ 100.848623][ T1013] usb 1-1: USB disconnect, device number 7