last executing test programs: 14.434871433s ago: executing program 1 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) gettid() timer_settime(0x0, 0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000000)='\x00', 0x1, 0xc891, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14.264258577s ago: executing program 1 (id=382): timer_create(0x7, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 13.269880312s ago: executing program 1 (id=389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.172077154s ago: executing program 0 (id=390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0xf, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 12.425052523s ago: executing program 0 (id=393): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r1, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.422507053s ago: executing program 2 (id=394): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) close(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800704, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x6}}, 0x30) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010025bd", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) fallocate(r4, 0x3, 0x800000, 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) 9.962457136s ago: executing program 2 (id=397): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.936023487s ago: executing program 1 (id=398): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) close(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800704, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x6}}, 0x30) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010025bd7000eaffffff000003", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) fallocate(r4, 0x3, 0x800000, 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) 9.933994577s ago: executing program 0 (id=399): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x74001, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x25dfdbfe, {0x2, 0x18, 0xa0, 0xc8, r3}}, 0x34}}, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x22, 0xfd, 0xfffff02c}, {0x6, 0x70, 0x0, 0x2000000}]}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000000000080010000000d00000000000000", @ANYRES32, @ANYBLOB="04000000000000000003d0000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100000) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000000240)=""/236) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000200)={0xfffffffffffffff4, 0xfffffffffffffff7, 0x5, 0x3ff, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x1049, &(0x7f0000001c00)="$eJzsz7ENwjAUBNDDBBwJgRgBRmGI7JNRqChYMsghFCwQpXivsL58Z1sOGzIlKfPUJ7n+h6ffsJ/XekzG2/05PMq3PrYTZaq1pZf0bWO5qdXT5Zzk8NotT6TL8F7nXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwbZ8AAAD//yFSBzw=") listen(r1, 0x29cc) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000040d240f010000000000"], 0x0) 9.254934254s ago: executing program 4 (id=401): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sigaltstack(&(0x7f0000000140)={0x0, 0x80000003}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x16, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}]}}}}}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.389077003s ago: executing program 0 (id=402): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x2, 0x9, 0x4, 0x8000c66, 0x6, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x5, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336c3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x8000004, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x2000000, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x2], [0x20000002, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0xa, 0x97f7, 0x3, 0xd, 0x7, 0x89, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x40000002, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x8, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x10, 0x9, 0x81, 0x7, 0x9d8b, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x10000, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0x40, 0x6, 0x6, 0x14000, 0x3, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.304244825s ago: executing program 3 (id=403): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) close(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800704, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2, 0x6}}, 0x30) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010025bd7000eaffffff0000", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) fallocate(r4, 0x3, 0x800000, 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) 5.170998578s ago: executing program 2 (id=404): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 5.169926538s ago: executing program 4 (id=405): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.440903536s ago: executing program 1 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.662908616s ago: executing program 4 (id=407): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x2, 0x9, 0x4, 0x8000c66, 0x6, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x5, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336c3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x8000004, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x2000000, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x2], [0x20000002, 0xffffeffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0xa, 0x97f7, 0x3, 0xd, 0x7, 0x89, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x40000002, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x8, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x10, 0x9, 0x81, 0x7, 0x9d8b, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x10000, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0x40, 0x6, 0x6, 0x14000, 0x3, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.661798206s ago: executing program 0 (id=408): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e804003e005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604000c002b8008000200000001001400030076657468305f766c616e0000000000000a000100aa"], 0x4c}}, 0x48000) 3.586378778s ago: executing program 3 (id=409): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) 3.11369616s ago: executing program 3 (id=410): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sigaltstack(&(0x7f0000000140)={0x0, 0x80000003}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x16, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}]}}}}}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.071699191s ago: executing program 4 (id=411): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) setpriority(0x0, r1, 0x28b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x311500, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190ec) 2.750651119s ago: executing program 0 (id=412): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x74001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x25dfdbfe, {0x2, 0x18, 0xa0, 0xc8, r3}}, 0x34}}, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x22, 0xfd, 0xfffff02c}, {0x6, 0x70, 0x0, 0x2000000}]}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000000000080010000000d00000000000000", @ANYRES32, @ANYBLOB="04000000000000000003d0000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100000) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000000240)=""/236) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000200)={0xfffffffffffffff4, 0xfffffffffffffff7, 0x5, 0x3ff, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x1049, &(0x7f0000001c00)="$eJzsz7ENwjAUBNDDBBwJgRgBRmGI7JNRqChYMsghFCwQpXivsL58Z1sOGzIlKfPUJ7n+h6ffsJ/XekzG2/05PMq3PrYTZaq1pZf0bWO5qdXT5Zzk8NotT6TL8F7nXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwbZ8AAAD//yFSBzw=") listen(r1, 0x29cc) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000040d240f010000000000"], 0x0) 2.384050319s ago: executing program 4 (id=413): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x64) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000001840)='./file2\x00', 0x210081, &(0x7f0000000400)=ANY=[], 0xf7, 0x1501, &(0x7f0000001980)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) fallocate(r1, 0x10, 0x6, 0x10001) read(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobarrier}, {@journal_async_commit}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x5, 0x4fa, &(0x7f00000005c0)="$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") inotify_init1(0x80800) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) 2.366065809s ago: executing program 3 (id=414): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x5, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query], &(0x7f00000001c0)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x49f3, 0x7ff}, 0x10, 0x0, r0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0xb}, 0x94) 1.720218665s ago: executing program 1 (id=415): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x74001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x22, 0xfd, 0xfffff02c}, {0x6, 0x70, 0x0, 0x2000000}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000000000080010000000d00000000000000", @ANYRES32, @ANYBLOB="04000000000000000003d0000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100000) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000240)=""/236) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000200)={0xfffffffffffffff4, 0xfffffffffffffff7, 0x5, 0x3ff, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x1049, &(0x7f0000001c00)="$eJzsz7ENwjAUBNDDBBwJgRgBRmGI7JNRqChYMsghFCwQpXivsL58Z1sOGzIlKfPUJ7n+h6ffsJ/XekzG2/05PMq3PrYTZaq1pZf0bWO5qdXT5Zzk8NotT6TL8F7nXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwbZ8AAAD//yFSBzw=") listen(r1, 0x29cc) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000040d240f010000000000"], 0x0) 1.711387146s ago: executing program 3 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) 1.55232879s ago: executing program 2 (id=417): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x5, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f00000001c0)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x49f3, 0x7ff}, 0x10, 0x0, r0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0xb}, 0x94) 1.084064872s ago: executing program 2 (id=418): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) setpriority(0x0, r1, 0x28b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x311500, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f0000000040)={0xffffffffffffba63, 0x1}) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190ec) 580.336394ms ago: executing program 2 (id=419): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x74001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x22, 0xfd, 0xfffff02c}, {0x6, 0x70, 0x0, 0x2000000}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000000000080010000000d00000000000000", @ANYRES32, @ANYBLOB="04000000000000000003d0000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100000) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000240)=""/236) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000200)={0xfffffffffffffff4, 0xfffffffffffffff7, 0x5, 0x3ff, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x1049, &(0x7f0000001c00)="$eJzsz7ENwjAUBNDDBBwJgRgBRmGI7JNRqChYMsghFCwQpXivsL58Z1sOGzIlKfPUJ7n+h6ffsJ/XekzG2/05PMq3PrYTZaq1pZf0bWO5qdXT5Zzk8NotT6TL8F7nXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwbZ8AAAD//yFSBzw=") listen(r1, 0x29cc) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000040d240f010000000000"], 0x0) 1.22098ms ago: executing program 3 (id=420): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400010000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0x12, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 4 (id=421): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) write(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x5, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query], &(0x7f00000001c0)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x49f3, 0x7ff}, 0x10, 0x0, r0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0xb}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 22.047752][ T30] audit: type=1400 audit(1785806859.588:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.051680][ T277] cgroup: Unknown subsys name 'net' [ 22.070540][ T30] audit: type=1400 audit(1785806859.588:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.098249][ T30] audit: type=1400 audit(1785806859.618:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.098732][ T277] cgroup: Unknown subsys name 'devices' [ 22.211394][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.217045][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.357954][ T30] audit: type=1400 audit(1785806859.898:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.381207][ T30] audit: type=1400 audit(1785806859.898:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.406059][ T30] audit: type=1400 audit(1785806859.898:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.434039][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.442959][ T30] audit: type=1400 audit(1785806859.988:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.468413][ T30] audit: type=1400 audit(1785806859.988:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.512525][ T30] audit: type=1400 audit(1785806860.058:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.538183][ T30] audit: type=1400 audit(1785806860.058:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.538216][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.153600][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.160744][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.168187][ T287] device bridge_slave_0 entered promiscuous mode [ 23.176303][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.183440][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.190999][ T287] device bridge_slave_1 entered promiscuous mode [ 23.202671][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.209826][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.217548][ T286] device bridge_slave_0 entered promiscuous mode [ 23.234187][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.241301][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.248724][ T286] device bridge_slave_1 entered promiscuous mode [ 23.273236][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.280400][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287780][ T285] device bridge_slave_0 entered promiscuous mode [ 23.310008][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.317164][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.324658][ T285] device bridge_slave_1 entered promiscuous mode [ 23.366540][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.373700][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.381209][ T288] device bridge_slave_0 entered promiscuous mode [ 23.399813][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.406893][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.414404][ T288] device bridge_slave_1 entered promiscuous mode [ 23.444964][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.452104][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.459659][ T289] device bridge_slave_0 entered promiscuous mode [ 23.468156][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.475407][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.482894][ T289] device bridge_slave_1 entered promiscuous mode [ 23.591454][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.598541][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.643878][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.651072][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.658357][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.665430][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.697982][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.705183][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.712548][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.719640][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.731491][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.738805][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.746177][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.753867][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.761186][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.769670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.777140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.807278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.815605][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.824093][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.833108][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.840309][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.869796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.878620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.887125][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.894256][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.901896][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.910182][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.917212][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.924648][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.932669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.940964][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.947997][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.955499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.963771][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.970856][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.978317][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.986520][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.993588][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.001103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.017339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.045712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.055814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.063905][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.084369][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.092532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.101010][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.108056][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.115672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.124208][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.131304][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.139173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.147123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.158882][ T286] device veth0_vlan entered promiscuous mode [ 24.174478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.183255][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.191916][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.200140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.208219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.216797][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.225132][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.232229][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.239949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.248247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.256745][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.263834][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.271360][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.279745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.287754][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.295970][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.304067][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.311733][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.322356][ T285] device veth0_vlan entered promiscuous mode [ 24.328625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.336860][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.352641][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.360256][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.367669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.376073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.384319][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.392619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.400777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.408833][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.432739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.440955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.448917][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.457601][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.466197][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.474692][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.483169][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.491680][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.500056][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.507929][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.517883][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.525522][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.536436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.545264][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.555252][ T286] device veth1_macvtap entered promiscuous mode [ 24.562728][ T288] device veth0_vlan entered promiscuous mode [ 24.580466][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.588117][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.596559][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.605105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.613731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.622757][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.630826][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.638861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.646536][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.654847][ T289] device veth0_vlan entered promiscuous mode [ 24.667301][ T287] device veth0_vlan entered promiscuous mode [ 24.673678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.681882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.690232][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.697731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.709726][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.717983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.726350][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.735150][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.750172][ T288] device veth1_macvtap entered promiscuous mode [ 24.757730][ T289] device veth1_macvtap entered promiscuous mode [ 24.764999][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.777445][ T285] device veth1_macvtap entered promiscuous mode [ 24.787547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.795396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.803868][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.812289][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.820192][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.828331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.836664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.845030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.855694][ T287] device veth1_macvtap entered promiscuous mode [ 24.878681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.891269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.901991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.911273][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.919711][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.928310][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.936811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.945339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.953763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.962820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.972043][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.004368][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.023222][ T312] ======================================================= [ 25.023222][ T312] WARNING: The mand mount option has been deprecated and [ 25.023222][ T312] and is ignored by this kernel. Remove the mand [ 25.023222][ T312] option from the mount to silence this warning. [ 25.023222][ T312] ======================================================= [ 25.095556][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.105956][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.115745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.336597][ T317] loop0: detected capacity change from 0 to 1024 [ 25.442628][ T317] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 25.453249][ T317] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 25.467469][ T317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 25.475271][ T317] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 25.491576][ T317] EXT4-fs (loop0): 1 orphan inode deleted [ 25.497716][ T317] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 25.705800][ T327] loop3: detected capacity change from 0 to 512 [ 28.670786][ T326] hub 8-0:1.0: USB hub found [ 28.675611][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 28.675627][ T30] audit: type=1400 audit(1785806863.098:102): avc: denied { create } for pid=314 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.701141][ T326] hub 8-0:1.0: 1 port detected [ 29.069985][ T327] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 29.083430][ T327] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 29.095519][ T327] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.182337][ T341] hub 8-0:1.0: USB hub found [ 29.188247][ T341] hub 8-0:1.0: 1 port detected [ 29.262077][ T323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.659158][ T30] audit: type=1400 audit(1785806863.168:103): avc: denied { connect } for pid=314 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.678961][ T30] audit: type=1400 audit(1785806865.898:104): avc: denied { write } for pid=319 comm="syz.2.3" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.688158][ T343] loop1: detected capacity change from 0 to 512 [ 29.710691][ T348] loop0: detected capacity change from 0 to 512 [ 29.718139][ T30] audit: type=1400 audit(1785806866.198:105): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.738391][ T30] audit: type=1400 audit(1785806866.248:106): avc: denied { mount } for pid=319 comm="syz.2.3" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.760517][ T30] audit: type=1400 audit(1785806866.258:107): avc: denied { search } for pid=319 comm="syz.2.3" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 29.782460][ T30] audit: type=1400 audit(1785806866.258:108): avc: denied { write } for pid=319 comm="syz.2.3" name="trace_marker" dev="tracefs" ino=13073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.798375][ T343] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.9: iget: bad i_size value: 38620345925642 [ 29.805831][ T30] audit: type=1400 audit(1785806866.258:109): avc: denied { open } for pid=319 comm="syz.2.3" path="/0/debug/tracing/trace_marker" dev="tracefs" ino=13073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.819782][ T343] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.9: couldn't read orphan inode 15 (err -117) [ 29.853972][ T30] audit: type=1400 audit(1785806866.318:110): avc: denied { create } for pid=330 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.675940][ T343] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.687180][ T348] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.700379][ T348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.740635][ T30] audit: type=1400 audit(1785806866.328:111): avc: denied { write } for pid=330 comm="syz.4.6" name="igmp6" dev="proc" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.760270][ T348] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.776255][ T348] EXT4-fs (loop0): 1 truncate cleaned up [ 30.783091][ T348] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 32.606943][ T8] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 32.666394][ T366] loop2: detected capacity change from 0 to 512 [ 32.676432][ T368] loop3: detected capacity change from 0 to 512 [ 32.684221][ T8] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 156 with error 28 [ 32.696918][ T8] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.696918][ T8] [ 32.706629][ T8] EXT4-fs (loop1): Total free blocks count 0 [ 32.714354][ T366] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.724290][ T8] EXT4-fs (loop1): Free/Dirty block details [ 32.730260][ T8] EXT4-fs (loop1): free_blocks=0 [ 32.735282][ T8] EXT4-fs (loop1): dirty_blocks=156 [ 32.741631][ T8] EXT4-fs (loop1): Block reservation details [ 32.754940][ T8] EXT4-fs (loop1): i_reserved_data_blocks=156 [ 32.763997][ T366] EXT4-fs (loop2): 1 truncate cleaned up [ 32.769774][ T366] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 32.789682][ T368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.814705][ T368] EXT4-fs (loop3): 1 truncate cleaned up [ 32.821142][ T368] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 36.838964][ T380] loop1: detected capacity change from 0 to 512 [ 36.903098][ T380] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.15: inode has both inline data and extents flags [ 36.917858][ T380] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.15: couldn't read orphan inode 15 (err -117) [ 36.931044][ T380] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.968002][ T384] loop0: detected capacity change from 0 to 512 [ 36.980248][ T384] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.992330][ T384] EXT4-fs (loop0): 1 truncate cleaned up [ 36.998073][ T384] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 37.027733][ T387] loop3: detected capacity change from 0 to 512 [ 37.135103][ T387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.161314][ T387] EXT4-fs (loop3): 1 truncate cleaned up [ 37.167108][ T387] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 37.418532][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 37.418555][ T30] audit: type=1400 audit(1785806874.958:136): avc: denied { create } for pid=394 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.539117][ T30] audit: type=1400 audit(1785806875.048:137): avc: denied { connect } for pid=394 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.552359][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.616645][ T412] loop0: detected capacity change from 0 to 512 [ 40.650098][ T412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.664612][ T412] EXT4-fs (loop0): 1 truncate cleaned up [ 40.699940][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.709509][ T412] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 40.739701][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.749963][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.758349][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.766770][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.775196][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.783732][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.792058][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 40.800483][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.808787][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 40.817051][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.830879][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.839198][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.847696][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.866122][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.932510][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 41.000983][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.023187][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 41.031433][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.039891][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.048044][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.056614][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.066540][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.125301][ T419] loop3: detected capacity change from 0 to 512 [ 41.134877][ T422] loop4: detected capacity change from 0 to 512 [ 41.340746][ T422] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.26: inode has both inline data and extents flags [ 41.354818][ T422] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.26: couldn't read orphan inode 15 (err -117) [ 41.368983][ T422] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.449180][ T419] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.24: inode has both inline data and extents flags [ 41.465807][ T419] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.24: couldn't read orphan inode 15 (err -117) [ 41.479918][ T419] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.989285][ C0] sched: RT throttling activated [ 42.296551][ T30] audit: type=1400 audit(1785806879.838:138): avc: denied { ioctl } for pid=434 comm="syz.3.28" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.324166][ T435] binder: 434:435 ioctl 4018620d 0 returned -22 [ 42.331141][ T30] audit: type=1400 audit(1785806879.868:139): avc: denied { set_context_mgr } for pid=434 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 42.352513][ T30] audit: type=1400 audit(1785806879.868:140): avc: denied { map } for pid=434 comm="syz.3.28" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.917512][ T439] loop2: detected capacity change from 0 to 512 [ 45.325847][ T441] loop1: detected capacity change from 0 to 512 [ 47.127953][ T441] EXT4-fs: failed to create workqueue [ 47.133493][ T441] EXT4-fs (loop1): mount failed [ 47.269176][ T450] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 47.295347][ T30] audit: type=1400 audit(1785806884.808:141): avc: denied { read } for pid=446 comm="syz.4.32" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.317873][ T30] audit: type=1400 audit(1785806884.808:142): avc: denied { open } for pid=446 comm="syz.4.32" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.341206][ T30] audit: type=1400 audit(1785806884.808:143): avc: denied { ioctl } for pid=446 comm="syz.4.32" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.368377][ T452] loop2: detected capacity change from 0 to 512 [ 47.403147][ T452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.427237][ T452] EXT4-fs (loop2): 1 truncate cleaned up [ 47.486060][ T461] hub 8-0:1.0: USB hub found [ 47.491197][ T461] hub 8-0:1.0: 1 port detected [ 47.499685][ T30] audit: type=1400 audit(1785806885.038:144): avc: denied { write } for pid=455 comm="syz.1.34" name="trace_marker" dev="tracefs" ino=13073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 47.539356][ T452] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 47.562905][ T30] audit: type=1400 audit(1785806885.038:145): avc: denied { open } for pid=455 comm="syz.1.34" path="/5/debug/tracing/trace_marker" dev="tracefs" ino=13073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 49.315888][ T30] audit: type=1400 audit(1785806886.298:146): avc: denied { setattr } for pid=451 comm="syz.2.31" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.360817][ T449] loop0: detected capacity change from 0 to 512 [ 50.320612][ T30] audit: type=1400 audit(1785806887.868:147): avc: denied { read write } for pid=473 comm="syz.2.38" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.354397][ T30] audit: type=1400 audit(1785806887.888:148): avc: denied { open } for pid=473 comm="syz.2.38" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.391135][ T449] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 50.746581][ T478] loop4: detected capacity change from 0 to 512 [ 51.049416][ T381] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 51.085557][ T30] audit: type=1400 audit(1785806887.888:149): avc: denied { ioctl } for pid=473 comm="syz.2.38" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.161803][ T478] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.39: inode has both inline data and extents flags [ 51.175743][ T478] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.39: couldn't read orphan inode 15 (err -117) [ 51.188610][ T478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.264082][ T478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'. [ 51.769370][ T381] usb 3-1: Using ep0 maxpacket: 8 [ 51.909617][ T489] loop4: detected capacity change from 0 to 512 [ 51.954009][ T489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.008153][ T491] loop0: detected capacity change from 0 to 512 [ 52.022275][ T493] loop3: detected capacity change from 0 to 512 [ 52.030849][ T489] EXT4-fs (loop4): 1 truncate cleaned up [ 52.036550][ T489] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 52.068453][ T491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.095690][ T491] EXT4-fs (loop0): 1 truncate cleaned up [ 52.101774][ T491] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 52.250660][ T493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.489938][ T381] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 52.518564][ T381] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 54.079354][ T381] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 54.110944][ T493] EXT4-fs (loop3): 1 truncate cleaned up [ 54.116715][ T493] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 54.146550][ T381] usb 3-1: config 16 has no interface number 0 [ 54.162702][ T504] loop1: detected capacity change from 0 to 512 [ 54.169144][ T381] usb 3-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 54.198764][ T381] usb 3-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 54.212846][ T381] usb 3-1: config 16 interface 48 has no altsetting 0 [ 55.864688][ T30] audit: type=1400 audit(1785806893.178:150): avc: denied { write } for pid=516 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 55.886358][ T381] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.905865][ T381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.949683][ T381] usb 3-1: can't set config #16, error -71 [ 56.332853][ T526] loop3: detected capacity change from 0 to 512 [ 56.386511][ T526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.445940][ T381] usb 3-1: USB disconnect, device number 2 [ 56.486176][ T526] EXT4-fs (loop3): 1 truncate cleaned up [ 56.492151][ T526] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 56.560475][ T537] hub 8-0:1.0: USB hub found [ 56.566784][ T537] hub 8-0:1.0: 1 port detected [ 56.689220][ T538] loop4: detected capacity change from 0 to 512 [ 56.879463][ T30] audit: type=1400 audit(1785806894.418:151): avc: denied { mount } for pid=535 comm="syz.1.53" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.840928][ T538] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.50: inode has both inline data and extents flags [ 57.855319][ T538] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.50: couldn't read orphan inode 15 (err -117) [ 57.971261][ T30] audit: type=1400 audit(1785806894.468:152): avc: denied { mounton } for pid=535 comm="syz.1.53" path="/9/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 58.039355][ T538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.100162][ T530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.50'. [ 58.137479][ T30] audit: type=1400 audit(1785806895.678:153): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.353925][ T553] process 'syz.1.56' launched './file2' with NULL argv: empty string added [ 59.369793][ T30] audit: type=1400 audit(1785806896.908:154): avc: denied { execute } for pid=547 comm="syz.1.56" name="file2" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.392602][ T554] hub 8-0:1.0: USB hub found [ 59.399364][ T554] hub 8-0:1.0: 1 port detected [ 59.401117][ T30] audit: type=1400 audit(1785806896.908:155): avc: denied { execute_no_trans } for pid=547 comm="syz.1.56" path="/10/file2" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.459562][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 59.592823][ T564] hub 8-0:1.0: USB hub found [ 59.597707][ T564] hub 8-0:1.0: 1 port detected [ 59.738153][ T565] loop4: detected capacity change from 0 to 512 [ 62.014703][ T566] netlink: 44 bytes leftover after parsing attributes in process `syz.3.55'. [ 62.362263][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 62.504309][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.531288][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 62.560257][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.578458][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.598260][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.608926][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.668618][ T565] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.58: inode has both inline data and extents flags [ 62.682005][ T565] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.58: couldn't read orphan inode 15 (err -117) [ 62.694146][ T565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.793867][ T578] loop1: detected capacity change from 0 to 512 [ 63.962181][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.066021][ T578] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.60: inode has both inline data and extents flags [ 64.080285][ T578] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.60: couldn't read orphan inode 15 (err -117) [ 64.092939][ T578] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.209058][ T582] loop3: detected capacity change from 0 to 512 [ 64.312430][ T582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.342691][ T582] EXT4-fs (loop3): 1 truncate cleaned up [ 64.348470][ T582] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 64.720875][ T563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 64.780836][ T578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 65.222412][ T593] loop0: detected capacity change from 0 to 512 [ 65.254147][ T593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.315631][ T593] EXT4-fs (loop0): 1 truncate cleaned up [ 65.329351][ T593] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 65.393798][ T602] hub 8-0:1.0: USB hub found [ 65.398593][ T602] hub 8-0:1.0: 1 port detected [ 65.478862][ T574] loop2: detected capacity change from 0 to 512 [ 65.518551][ T574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.917680][ T30] audit: type=1400 audit(1785806903.408:156): avc: denied { create } for pid=571 comm="syz.2.62" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 65.960372][ T30] audit: type=1400 audit(1785806903.418:157): avc: denied { read } for pid=571 comm="syz.2.62" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.156163][ T610] loop2: detected capacity change from 0 to 512 [ 66.202985][ T610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.922515][ T624] hub 8-0:1.0: USB hub found [ 67.927392][ T624] hub 8-0:1.0: 1 port detected [ 67.945054][ T625] hub 8-0:1.0: USB hub found [ 67.949994][ T625] hub 8-0:1.0: 1 port detected [ 68.606148][ T30] audit: type=1400 audit(1785806905.568:158): avc: denied { mount } for pid=615 comm="syz.3.73" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.632739][ T610] EXT4-fs (loop2): 1 truncate cleaned up [ 68.638619][ T610] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 68.663286][ T627] loop4: detected capacity change from 0 to 512 [ 68.751159][ T30] audit: type=1400 audit(1785806906.298:159): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.780067][ T627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.584832][ T627] EXT4-fs (loop4): 1 truncate cleaned up [ 69.602459][ T627] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 69.639326][ T499] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 70.560956][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 70.571662][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.580117][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 70.588610][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.597315][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.623852][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.635673][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.644450][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.756668][ T648] loop1: detected capacity change from 0 to 512 [ 70.841783][ T648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.851927][ T499] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.914051][ T653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 71.132726][ T648] EXT4-fs (loop1): 1 truncate cleaned up [ 71.154574][ T648] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 71.316795][ T642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1219 sclass=netlink_route_socket pid=642 comm=syz.4.78 [ 71.332729][ T30] audit: type=1400 audit(1785806908.878:160): avc: denied { write } for pid=646 comm="syz.3.80" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.359433][ T499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.679096][ T499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.749389][ T499] usb 1-1: string descriptor 0 read error: -71 [ 71.756401][ T499] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 71.796629][ T499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.899409][ T499] usb 1-1: can't set config #1, error -71 [ 72.197211][ T668] hub 8-0:1.0: USB hub found [ 72.202193][ T668] hub 8-0:1.0: 1 port detected [ 72.250230][ T499] usb 1-1: USB disconnect, device number 2 [ 72.598760][ T673] loop1: detected capacity change from 0 to 512 [ 74.672406][ T675] loop0: detected capacity change from 0 to 1024 [ 74.693045][ T30] audit: type=1326 audit(1785806912.238:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.717816][ T30] audit: type=1326 audit(1785806912.238:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.742941][ T30] audit: type=1326 audit(1785806912.238:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.777731][ T30] audit: type=1326 audit(1785806912.238:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81a601784e code=0x7ffc0000 [ 74.820036][ T30] audit: type=1326 audit(1785806912.238:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.844660][ T30] audit: type=1326 audit(1785806912.238:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.867948][ T675] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 74.876677][ T30] audit: type=1326 audit(1785806912.238:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.906110][ T30] audit: type=1326 audit(1785806912.238:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 74.931796][ T675] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.949860][ T673] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.85: inode has both inline data and extents flags [ 74.963205][ T673] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.85: couldn't read orphan inode 15 (err -117) [ 74.976116][ T675] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.983128][ T673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.995094][ T675] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.87: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.036563][ T30] audit: type=1326 audit(1785806912.238:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=676 comm="syz.3.86" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a6057019 code=0x7ffc0000 [ 75.063245][ T672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'. [ 75.073216][ T675] EXT4-fs (loop0): 1 orphan inode deleted [ 75.087408][ T675] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 75.610751][ T707] loop1: detected capacity change from 0 to 512 [ 75.625312][ T707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.641169][ T707] EXT4-fs (loop1): 1 truncate cleaned up [ 75.647060][ T707] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 75.787798][ T711] loop2: detected capacity change from 0 to 512 [ 75.812830][ T711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.815851][ T713] binder: 712:713 ioctl c0306201 0 returned -14 [ 75.828766][ T711] EXT4-fs (loop2): 1 truncate cleaned up [ 76.606067][ T711] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 77.872693][ T290] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 77.962441][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 77.962465][ T30] audit: type=1400 audit(1785806915.468:210): avc: denied { read } for pid=712 comm="syz.3.96" dev="nsfs" ino=4026532572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.997076][ T30] audit: type=1400 audit(1785806915.468:211): avc: denied { open } for pid=712 comm="syz.3.96" path="net:[4026532572]" dev="nsfs" ino=4026532572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.429812][ T30] audit: type=1400 audit(1785806915.978:212): avc: denied { relabelfrom } for pid=725 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.476643][ T30] audit: type=1400 audit(1785806915.998:213): avc: denied { relabelto } for pid=725 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.911579][ T734] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 78.959392][ T290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.079441][ T290] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 79.172478][ T736] loop4: detected capacity change from 0 to 512 [ 79.186243][ T290] usb 1-1: can't read configurations, error -71 [ 79.226331][ T738] loop0: detected capacity change from 0 to 512 [ 79.245660][ T740] loop3: detected capacity change from 0 to 512 [ 79.279915][ T736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.290971][ T738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.317641][ T740] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.350581][ T736] EXT4-fs (loop4): 1 truncate cleaned up [ 79.358502][ T738] EXT4-fs (loop0): 1 truncate cleaned up [ 79.364481][ T740] EXT4-fs (loop3): 1 truncate cleaned up [ 79.370342][ T736] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 79.390209][ T738] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 79.419358][ T740] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 82.369336][ T499] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 82.493003][ T774] loop1: detected capacity change from 0 to 512 [ 82.512199][ T774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.530757][ T774] EXT4-fs (loop1): 1 truncate cleaned up [ 82.536465][ T774] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 82.643087][ T30] audit: type=1400 audit(1785806920.188:214): avc: denied { name_bind } for pid=780 comm="syz.2.114" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.708177][ T30] audit: type=1400 audit(1785806920.208:215): avc: denied { node_bind } for pid=780 comm="syz.2.114" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 83.025363][ T39] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 83.025395][ T290] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 83.417704][ T791] hub 8-0:1.0: USB hub found [ 83.422619][ T791] hub 8-0:1.0: 1 port detected [ 83.539537][ T290] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.579416][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.599884][ T797] hub 8-0:1.0: USB hub found [ 83.605670][ T797] hub 8-0:1.0: 1 port detected [ 83.799794][ T290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.810416][ T290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.839422][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.850268][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.049447][ T20] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 84.079392][ T290] usb 1-1: string descriptor 0 read error: -22 [ 84.085717][ T290] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 84.094924][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.119412][ T39] usb 4-1: string descriptor 0 read error: -22 [ 84.125678][ T39] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 84.134804][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.143844][ T290] usb 1-1: 0:1 : does not exist [ 84.148747][ T290] usb 1-1: 0:2 : does not exist [ 84.351817][ T30] audit: type=1400 audit(1785806921.898:216): avc: denied { write } for pid=769 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.374136][ T30] audit: type=1400 audit(1785806921.898:217): avc: denied { read } for pid=769 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.469417][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.501429][ T805] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.569341][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.589313][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.639333][ T290] usb 1-1: 6:0: cannot get min/max values for control 4 (id 6) [ 84.720924][ T39] usb 4-1: 0:1 : does not exist [ 84.725843][ T39] usb 4-1: 0:2 : does not exist [ 84.731032][ T290] usb 1-1: USB disconnect, device number 5 [ 84.829349][ T20] usb 2-1: string descriptor 0 read error: -22 [ 84.835653][ T20] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 84.844889][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.939360][ T39] usb 4-1: 6:0: cannot get min/max values for control 4 (id 6) [ 85.073593][ T20] usb 2-1: 0:1 : does not exist [ 85.078517][ T20] usb 2-1: 0:2 : does not exist [ 85.083778][ T39] usb 4-1: USB disconnect, device number 2 [ 85.289347][ T20] usb 2-1: 6:0: cannot get min/max values for control 4 (id 6) [ 85.291882][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.380990][ T20] usb 2-1: USB disconnect, device number 2 [ 85.887859][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.931054][ T833] loop1: detected capacity change from 0 to 512 [ 85.985662][ T833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.041051][ T837] loop3: detected capacity change from 0 to 512 [ 86.047479][ T833] EXT4-fs (loop1): 1 truncate cleaned up [ 86.053906][ T833] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 86.204458][ T837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.866713][ T837] EXT4-fs (loop3): 1 truncate cleaned up [ 86.897190][ T837] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 86.899866][ T847] loop1: detected capacity change from 0 to 512 [ 86.933378][ T850] loop0: detected capacity change from 0 to 512 [ 87.005579][ T847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.030999][ T847] EXT4-fs (loop1): 1 truncate cleaned up [ 87.036733][ T847] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 87.070853][ T850] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.913308][ T860] loop4: detected capacity change from 0 to 512 [ 87.927152][ T850] EXT4-fs (loop0): 1 truncate cleaned up [ 87.933865][ T850] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 88.215591][ T860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.258997][ T860] EXT4-fs (loop4): 1 truncate cleaned up [ 88.576006][ T860] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 89.660486][ T898] loop0: detected capacity change from 0 to 1024 [ 89.668439][ T900] loop2: detected capacity change from 0 to 512 [ 89.675516][ T898] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 89.690915][ T898] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 89.700115][ T898] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.706587][ T898] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.146: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.720587][ T898] EXT4-fs (loop0): 1 orphan inode deleted [ 89.724092][ T902] loop1: detected capacity change from 0 to 512 [ 89.726375][ T898] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 89.752808][ T900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.780780][ T900] EXT4-fs (loop2): 1 truncate cleaned up [ 89.790217][ T900] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 89.811097][ T902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.834597][ T902] EXT4-fs (loop1): 1 truncate cleaned up [ 89.840491][ T902] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 89.982985][ T911] loop0: detected capacity change from 0 to 512 [ 91.682955][ T911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.020903][ T911] EXT4-fs (loop0): 1 truncate cleaned up [ 92.056263][ T911] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 92.445446][ T928] netlink: 44 bytes leftover after parsing attributes in process `syz.2.150'. [ 92.525956][ T926] loop3: detected capacity change from 0 to 512 [ 93.037957][ T926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.074572][ T926] EXT4-fs (loop3): 1 truncate cleaned up [ 93.087031][ T926] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 96.345603][ T940] loop2: detected capacity change from 0 to 512 [ 96.924440][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.950144][ T940] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.155: inode has both inline data and extents flags [ 96.963855][ T940] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.155: couldn't read orphan inode 15 (err -117) [ 96.976029][ T940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.992747][ T940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 97.761133][ T957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.158'. [ 99.910418][ T967] loop0: detected capacity change from 0 to 512 [ 101.274037][ T957] syz.1.158 (957) used greatest stack depth: 22024 bytes left [ 103.202087][ T979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.164'. [ 103.919630][ T983] loop4: detected capacity change from 0 to 512 [ 103.994083][ T983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.010399][ T990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.165'. [ 104.230400][ T991] hub 8-0:1.0: USB hub found [ 104.283162][ T991] hub 8-0:1.0: 1 port detected [ 104.294969][ T994] loop3: detected capacity change from 0 to 512 [ 104.310620][ T983] EXT4-fs (loop4): 1 truncate cleaned up [ 104.316425][ T983] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 104.340696][ T994] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.352918][ T994] EXT4-fs (loop3): 1 truncate cleaned up [ 104.358686][ T994] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 106.230314][ T1014] loop1: detected capacity change from 0 to 512 [ 107.070274][ T1014] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.171: inode has both inline data and extents flags [ 107.084089][ T1014] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.171: couldn't read orphan inode 15 (err -117) [ 107.097246][ T1014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.755708][ T1027] loop3: detected capacity change from 0 to 512 [ 107.823492][ T1026] loop4: detected capacity change from 0 to 512 [ 109.086134][ T1027] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.174: inode has both inline data and extents flags [ 109.099603][ T1027] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.174: couldn't read orphan inode 15 (err -117) [ 109.111628][ T1027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.167541][ T1036] loop2: detected capacity change from 0 to 512 [ 110.609308][ T1037] loop0: detected capacity change from 0 to 512 [ 112.149619][ T1026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.214001][ T1037] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.177: inode has both inline data and extents flags [ 112.214146][ T1026] EXT4-fs: failed to create workqueue [ 112.228006][ T1037] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.177: couldn't read orphan inode 15 (err -117) [ 112.236510][ T1040] loop1: detected capacity change from 0 to 512 [ 112.244766][ T1037] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.264842][ T1026] EXT4-fs (loop4): mount failed [ 112.296609][ T1034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'. [ 112.330494][ T1044] loop3: detected capacity change from 0 to 512 [ 112.370409][ T1044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.380437][ T1040] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.396704][ T1040] EXT4-fs (loop1): 1 truncate cleaned up [ 112.402624][ T1044] EXT4-fs (loop3): 1 truncate cleaned up [ 112.444445][ T1044] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 112.502702][ T1040] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 114.961182][ T1065] loop0: detected capacity change from 0 to 512 [ 116.126258][ T1065] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.183: inode has both inline data and extents flags [ 116.715876][ T1065] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.183: couldn't read orphan inode 15 (err -117) [ 116.775307][ T1065] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.777836][ T1076] loop4: detected capacity change from 0 to 512 [ 116.891522][ T1076] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.915646][ T1076] EXT4-fs (loop4): 1 truncate cleaned up [ 116.922870][ T1076] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 116.974596][ T1084] hub 8-0:1.0: USB hub found [ 116.980080][ T1084] hub 8-0:1.0: 1 port detected [ 117.580884][ T1092] loop0: detected capacity change from 0 to 512 [ 117.677860][ T1092] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.190: inode has both inline data and extents flags [ 117.691382][ T1092] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.190: couldn't read orphan inode 15 (err -117) [ 117.709705][ T1092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.727438][ T1092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 117.763233][ T1096] binder: 1095:1096 ioctl c0306201 0 returned -14 [ 118.325140][ T1110] hub 8-0:1.0: USB hub found [ 118.330426][ T1110] hub 8-0:1.0: 1 port detected [ 118.866619][ T1119] hub 8-0:1.0: USB hub found [ 118.871442][ T1119] hub 8-0:1.0: 1 port detected [ 118.919442][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.996819][ T1123] hub 8-0:1.0: USB hub found [ 119.001783][ T1123] hub 8-0:1.0: 1 port detected [ 119.249313][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 119.369359][ T60] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 119.377694][ T60] usb 4-1: config 16 has an invalid interface number: 48 but max is 0 [ 119.386044][ T60] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 119.396534][ T60] usb 4-1: config 16 has no interface number 0 [ 119.402870][ T60] usb 4-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 119.414142][ T60] usb 4-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 119.427669][ T60] usb 4-1: config 16 interface 48 has no altsetting 0 [ 119.434674][ T60] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.439357][ T290] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.451494][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.609331][ T20] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 119.703615][ T30] audit: type=1400 audit(1785806957.248:218): avc: denied { create } for pid=1115 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.791775][ T290] usb 3-1: Using ep0 maxpacket: 8 [ 119.869721][ T30] audit: type=1400 audit(1785806957.248:219): avc: denied { connect } for pid=1115 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.869752][ T30] audit: type=1400 audit(1785806957.388:220): avc: denied { create } for pid=1115 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.869778][ T30] audit: type=1400 audit(1785806957.388:221): avc: denied { write } for pid=1115 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.002406][ T290] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 120.011718][ T290] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 120.020175][ T290] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 120.030737][ T290] usb 3-1: config 16 has no interface number 0 [ 120.036951][ T290] usb 3-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 120.048414][ T290] usb 3-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 120.069497][ T290] usb 3-1: config 16 interface 48 has no altsetting 0 [ 120.076383][ T290] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.085388][ T60] usb 4-1: string descriptor 0 read error: -71 [ 120.088387][ T60] usb 4-1: USB disconnect, device number 3 [ 120.105251][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.216188][ T1138] loop4: detected capacity change from 0 to 512 [ 120.338453][ T1138] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.203: inode has both inline data and extents flags [ 120.353019][ T1138] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.203: couldn't read orphan inode 15 (err -117) [ 120.366322][ T1138] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.441390][ T1138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.203'. [ 121.199385][ T290] usb 3-1: string descriptor 0 read error: -71 [ 121.221756][ T290] usb 3-1: USB disconnect, device number 4 [ 121.310003][ T1147] loop1: detected capacity change from 0 to 512 [ 121.317323][ T1147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.327361][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.340778][ T1150] loop3: detected capacity change from 0 to 512 [ 121.350202][ T1147] EXT4-fs (loop1): 1 truncate cleaned up [ 121.363927][ T1147] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 121.389661][ T1150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.425851][ T1150] EXT4-fs (loop3): 1 truncate cleaned up [ 121.431914][ T1150] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 121.451376][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.468952][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.709376][ T20] usb 1-1: string descriptor 0 read error: -71 [ 122.716211][ T20] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 122.747433][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.785373][ T20] usb 1-1: can't set config #1, error -71 [ 122.797862][ T20] usb 1-1: USB disconnect, device number 6 [ 122.860499][ T1183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.216'. [ 122.881118][ T30] audit: type=1400 audit(1785806960.428:222): avc: denied { create } for pid=1181 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.221652][ T30] audit: type=1400 audit(1785806960.518:223): avc: denied { write } for pid=1181 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.260686][ T1183] loop4: detected capacity change from 0 to 8192 [ 123.268730][ T1173] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 123.277108][ T30] audit: type=1400 audit(1785806960.808:224): avc: denied { listen } for pid=1181 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.388662][ T1195] loop2: detected capacity change from 0 to 512 [ 123.420148][ T1195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.432611][ T1195] EXT4-fs (loop2): 1 truncate cleaned up [ 123.438350][ T1195] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 123.529312][ T290] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 124.601073][ T1204] loop1: detected capacity change from 0 to 512 [ 127.155832][ T1204] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.220: inode has both inline data and extents flags [ 127.172132][ T1204] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.220: couldn't read orphan inode 15 (err -117) [ 127.184443][ T1204] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.190901][ T290] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 127.239610][ T1203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 127.254564][ T290] usb 5-1: can't read configurations, error -71 [ 127.262007][ T1220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 127.334564][ T1220] loop2: detected capacity change from 0 to 8192 [ 127.434224][ T1226] loop3: detected capacity change from 0 to 512 [ 127.695322][ T1226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.779818][ T1231] loop1: detected capacity change from 0 to 512 [ 127.808738][ T1226] EXT4-fs (loop3): 1 truncate cleaned up [ 127.814813][ T1226] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 127.835264][ T1231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.883395][ T1231] EXT4-fs (loop1): 1 truncate cleaned up [ 127.889100][ T1231] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 128.001325][ T39] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 129.211957][ T1243] loop1: detected capacity change from 0 to 512 [ 129.221619][ T1245] binder: 1244:1245 ioctl 4018620d 0 returned -22 [ 129.249441][ T290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.270926][ T1243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.336381][ T1243] EXT4-fs (loop1): 1 truncate cleaned up [ 129.356218][ T1243] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 129.429744][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.489331][ T290] usb 5-1: Using ep0 maxpacket: 8 [ 129.622448][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 129.989757][ T290] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 130.046269][ T290] usb 5-1: config 16 has an invalid interface number: 48 but max is 0 [ 130.201557][ T290] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 130.259776][ T290] usb 5-1: config 16 has no interface number 0 [ 130.266009][ T290] usb 5-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 130.278007][ T290] usb 5-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 130.291757][ T290] usb 5-1: config 16 interface 48 has no altsetting 0 [ 130.298623][ T290] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.308276][ T290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.316350][ T39] usb 3-1: string descriptor 0 read error: -71 [ 130.323030][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.332599][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.374879][ T39] usb 3-1: can't set config #1, error -71 [ 130.408629][ T1265] hub 8-0:1.0: USB hub found [ 130.413784][ T1265] hub 8-0:1.0: 1 port detected [ 130.450515][ T39] usb 3-1: USB disconnect, device number 5 [ 130.786332][ T1269] loop2: detected capacity change from 0 to 512 [ 133.230122][ T1268] loop1: detected capacity change from 0 to 512 [ 133.354327][ T1269] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.237: inode has both inline data and extents flags [ 133.368013][ T1269] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.237: couldn't read orphan inode 15 (err -117) [ 133.380916][ T1269] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.425737][ T1269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 133.735920][ T1275] hub 8-0:1.0: USB hub found [ 133.741052][ T1275] hub 8-0:1.0: 1 port detected [ 133.748732][ T290] usb 5-1: string descriptor 0 read error: -71 [ 133.841740][ T290] usb 5-1: USB disconnect, device number 3 [ 133.947023][ T1278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'. [ 134.074519][ T1278] loop0: detected capacity change from 0 to 8192 [ 134.107208][ T30] audit: type=1400 audit(1785806971.648:225): avc: denied { create } for pid=1284 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.142388][ T30] audit: type=1400 audit(1785806971.668:226): avc: denied { setopt } for pid=1284 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.164328][ T1287] loop2: detected capacity change from 0 to 512 [ 134.222470][ T30] audit: type=1400 audit(1785806971.768:227): avc: denied { listen } for pid=1276 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.250630][ T1287] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.264241][ T1287] EXT4-fs (loop2): 1 truncate cleaned up [ 134.270027][ T1287] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 134.821694][ T20] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 141.318045][ T20] usb 1-1: unable to read config index 0 descriptor/all [ 141.345702][ T20] usb 1-1: can't read configurations, error -110 [ 141.556718][ T1318] hub 8-0:1.0: USB hub found [ 141.561613][ T1318] hub 8-0:1.0: 1 port detected [ 141.627748][ T1324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 141.727858][ T1324] loop3: detected capacity change from 0 to 8192 [ 141.877077][ T1331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.255'. [ 142.232843][ T1333] loop1: detected capacity change from 0 to 512 [ 142.289289][ T60] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 142.301371][ T1335] loop2: detected capacity change from 0 to 512 [ 142.322772][ T1333] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 142.370540][ T1335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.431998][ T1335] EXT4-fs (loop2): 1 truncate cleaned up [ 142.437814][ T1335] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 142.653051][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.694883][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.715333][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 142.813113][ T1345] loop0: detected capacity change from 0 to 512 [ 142.939336][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 142.973804][ T1345] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.259: inode has both inline data and extents flags [ 142.988942][ T1345] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.259: couldn't read orphan inode 15 (err -117) [ 143.002602][ T1345] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.062822][ T1345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'. [ 143.189576][ T26] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 143.216241][ T26] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 143.283328][ T26] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 143.367202][ T26] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.779294][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.989406][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.998521][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.006927][ T60] usb 4-1: SerialNumber: syz [ 144.059873][ T60] rndis_host: probe of 4-1:1.0 failed with error -22 [ 144.202949][ T1355] hub 8-0:1.0: USB hub found [ 144.207979][ T1355] hub 8-0:1.0: 1 port detected [ 144.292772][ T444] usb 4-1: USB disconnect, device number 4 [ 144.533639][ T1361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.263'. [ 144.585217][ T1361] loop1: detected capacity change from 0 to 8192 [ 144.909284][ T444] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 144.973737][ T1372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 145.016261][ T1372] loop0: detected capacity change from 0 to 8192 [ 145.031233][ T30] audit: type=1400 audit(1785806982.578:228): avc: denied { listen } for pid=1370 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 145.067827][ T1377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.269'. [ 145.097746][ T1377] loop3: detected capacity change from 0 to 8192 [ 145.279333][ T444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.289562][ T444] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 145.319344][ T6] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 145.379340][ T444] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.388523][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.396584][ T444] usb 2-1: SerialNumber: syz [ 145.409292][ T290] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 145.477720][ T444] rndis_host: probe of 2-1:1.0 failed with error -22 [ 145.498879][ T444] usb 5-1: USB disconnect, device number 4 [ 146.082390][ T20] usb 2-1: USB disconnect, device number 4 [ 146.180194][ T1389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 146.299374][ T290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.310275][ T290] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 146.377466][ T1391] loop2: detected capacity change from 0 to 512 [ 146.409405][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.419998][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 146.460135][ T1391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.472529][ T1391] EXT4-fs (loop2): 1 truncate cleaned up [ 146.478317][ T1391] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 146.489529][ T290] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.506659][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.514725][ T290] usb 4-1: SerialNumber: syz [ 146.529362][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.541522][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.551508][ T6] usb 1-1: SerialNumber: syz [ 146.613731][ T290] rndis_host: probe of 4-1:1.0 failed with error -22 [ 146.647723][ T6] rndis_host: probe of 1-1:1.0 failed with error -22 [ 146.795426][ T6] usb 4-1: USB disconnect, device number 5 [ 146.850765][ T290] usb 1-1: USB disconnect, device number 9 [ 148.036927][ T1425] loop2: detected capacity change from 0 to 512 [ 148.129671][ T1425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.422449][ T1425] EXT4-fs (loop2): 1 truncate cleaned up [ 149.428304][ T1425] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 150.783193][ T1495] loop1: detected capacity change from 0 to 512 [ 150.792614][ T1494] loop4: detected capacity change from 0 to 512 [ 150.845351][ T1495] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.305: inode has both inline data and extents flags [ 150.858766][ T1495] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.305: couldn't read orphan inode 15 (err -117) [ 150.874796][ T1495] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.896103][ T1495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 150.928401][ T1494] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.304: inode has both inline data and extents flags [ 150.977277][ T1494] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.304: couldn't read orphan inode 15 (err -117) [ 151.028221][ T1494] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.182179][ T1494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 151.479330][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.719377][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 151.732341][ T1518] loop4: detected capacity change from 0 to 512 [ 151.739334][ T290] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.750432][ T1518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.771197][ T1518] EXT4-fs (loop4): 1 truncate cleaned up [ 151.776898][ T1518] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 151.839328][ T26] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 151.857616][ T26] usb 4-1: config 16 has an invalid interface number: 48 but max is 0 [ 151.866415][ T26] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 151.877008][ T26] usb 4-1: config 16 has no interface number 0 [ 151.883293][ T26] usb 4-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 151.894521][ T26] usb 4-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 151.908067][ T26] usb 4-1: config 16 interface 48 has no altsetting 0 [ 151.915026][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.924247][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.979270][ T290] usb 1-1: Using ep0 maxpacket: 16 [ 152.232793][ T290] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 152.232826][ T290] usb 1-1: config 0 has no interface number 0 [ 152.232852][ T290] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 152.232881][ T290] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 152.329367][ T26] usb 4-1: string descriptor 0 read error: -71 [ 152.341578][ T26] usb 4-1: USB disconnect, device number 6 [ 152.389357][ T290] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 152.398628][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.413035][ T290] usb 1-1: Product: syz [ 152.417340][ T290] usb 1-1: Manufacturer: syz [ 152.423645][ T290] usb 1-1: SerialNumber: syz [ 152.434015][ T290] usb 1-1: config 0 descriptor?? [ 152.459492][ T1505] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.466771][ T1505] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.684155][ T1505] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.699318][ T1505] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.757178][ T1532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 152.798554][ T1532] loop4: detected capacity change from 0 to 8192 [ 152.949470][ T290] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 153.109277][ T26] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 153.536800][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.548318][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 153.639865][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.661284][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.706605][ T1544] loop1: detected capacity change from 0 to 512 [ 153.773077][ T26] usb 5-1: SerialNumber: syz [ 153.810050][ T290] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.932989][ T290] asix: probe of 1-1:0.34 failed with error -71 [ 153.945066][ T1544] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.317: inode has both inline data and extents flags [ 153.959938][ T1544] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.317: couldn't read orphan inode 15 (err -117) [ 153.972533][ T1544] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.041994][ T1544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'. [ 154.070005][ T26] rndis_host: probe of 5-1:1.0 failed with error -22 [ 154.196069][ T26] usb 5-1: USB disconnect, device number 5 [ 154.196108][ T290] usb 1-1: USB disconnect, device number 10 [ 155.810253][ T1578] loop2: detected capacity change from 0 to 8192 [ 156.196062][ T1588] loop1: detected capacity change from 0 to 512 [ 156.363132][ T1588] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.329: inode has both inline data and extents flags [ 156.377080][ T1588] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.329: couldn't read orphan inode 15 (err -117) [ 156.390294][ T1588] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.460480][ T1588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 157.307331][ T20] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 157.549345][ T26] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 157.719313][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.729957][ T20] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 157.819478][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.829117][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.837871][ T20] usb 3-1: SerialNumber: syz [ 157.911034][ T20] rndis_host: probe of 3-1:1.0 failed with error -22 [ 157.949408][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.995594][ T1618] loop4: detected capacity change from 0 to 8192 [ 158.049383][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.059717][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.202643][ T290] usb 3-1: USB disconnect, device number 6 [ 158.409350][ T26] usb 1-1: string descriptor 0 read error: -22 [ 158.415627][ T26] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 158.425203][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.429336][ T20] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 158.470253][ T26] usb 1-1: 0:1 : does not exist [ 158.475633][ T26] usb 1-1: 0:2 : does not exist [ 158.489982][ T26] usb 1-1: unit 0 not found! [ 158.804125][ T26] usb 1-1: USB disconnect, device number 11 [ 158.829358][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.849267][ T20] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 158.969327][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.982550][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.005841][ T20] usb 5-1: SerialNumber: syz [ 159.060162][ T20] rndis_host: probe of 5-1:1.0 failed with error -22 [ 159.070229][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.981564][ T307] usb 5-1: USB disconnect, device number 6 [ 160.188713][ T1655] loop4: detected capacity change from 0 to 512 [ 160.660601][ T1655] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.351: inode has both inline data and extents flags [ 160.674817][ T1655] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.351: couldn't read orphan inode 15 (err -117) [ 160.687927][ T1655] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.757404][ T1655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.351'. [ 161.317529][ T1665] loop2: detected capacity change from 0 to 256 [ 161.346099][ T1670] loop4: detected capacity change from 0 to 256 [ 161.365757][ T1665] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d) [ 161.379280][ T20] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 161.434574][ T1670] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d) [ 161.486677][ T1673] loop0: detected capacity change from 0 to 256 [ 161.509489][ T1673] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d) [ 161.523904][ T30] audit: type=1400 audit(1785806999.068:229): avc: denied { write } for pid=1664 comm="syz.2.354" name="file2" dev="loop2" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.564008][ T30] audit: type=1400 audit(1785806999.068:230): avc: denied { open } for pid=1664 comm="syz.2.354" name="file2" dev="loop2" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.672734][ T30] audit: type=1400 audit(1785806999.218:231): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 161.809380][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.851836][ T1689] loop1: detected capacity change from 0 to 512 [ 161.897345][ T1689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.932534][ T1689] EXT4-fs (loop1): 1 truncate cleaned up [ 162.074728][ T1689] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 162.246012][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.261449][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.349305][ T20] usb 4-1: string descriptor 0 read error: -71 [ 162.355606][ T20] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 162.364754][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.389350][ T20] usb 4-1: can't set config #1, error -71 [ 162.408976][ T20] usb 4-1: USB disconnect, device number 7 [ 163.149299][ T39] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 163.569351][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.769353][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.813642][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.279327][ T39] usb 3-1: string descriptor 0 read error: -22 [ 164.287663][ T39] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 164.305006][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.429880][ T39] usb 3-1: 0:1 : does not exist [ 164.436955][ T39] usb 3-1: 0:2 : does not exist [ 164.515491][ T39] usb 3-1: unit 4 not found! [ 164.589578][ T1741] loop3: detected capacity change from 0 to 512 [ 164.782848][ T1741] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.373: inode has both inline data and extents flags [ 164.796928][ T1741] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.373: couldn't read orphan inode 15 (err -117) [ 164.810595][ T1741] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.005388][ T1741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'. [ 165.375604][ T1756] loop0: detected capacity change from 0 to 512 [ 166.008132][ T1758] loop4: detected capacity change from 0 to 256 [ 166.661513][ T39] usb 3-1: USB disconnect, device number 7 [ 166.705788][ T1756] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.377: inode has both inline data and extents flags [ 166.719180][ T1756] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.377: couldn't read orphan inode 15 (err -117) [ 166.731258][ T1756] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.787746][ T1758] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d) [ 166.953821][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.259350][ T30] audit: type=1400 audit(1785807004.798:232): avc: denied { write } for pid=1770 comm="syz.1.382" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.101249][ T1824] loop2: detected capacity change from 0 to 512 [ 169.692100][ T1824] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.394: inode has both inline data and extents flags [ 169.706135][ T1824] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.394: couldn't read orphan inode 15 (err -117) [ 169.719958][ T1824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.797323][ T1824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 169.813204][ T30] audit: type=1400 audit(1785807007.278:233): avc: denied { mount } for pid=1816 comm="syz.2.394" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.904592][ T1830] loop3: detected capacity change from 0 to 512 [ 171.273322][ T30] audit: type=1400 audit(1785807008.798:234): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 171.401964][ T1830] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.396: inode has both inline data and extents flags [ 171.415749][ T1830] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.396: couldn't read orphan inode 15 (err -117) [ 171.429049][ T1830] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.872781][ T1835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 171.988024][ T1835] loop0: detected capacity change from 0 to 8192 [ 172.209849][ T1846] loop1: detected capacity change from 0 to 512 [ 175.809323][ T30] audit: type=1400 audit(1785807013.078:235): avc: denied { remount } for pid=1842 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.848220][ T1846] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.398: inode has both inline data and extents flags [ 175.870289][ T1846] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.398: couldn't read orphan inode 15 (err -117) [ 175.883310][ T1846] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.930341][ T1844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 176.074090][ T1862] loop2: detected capacity change from 0 to 512 [ 176.774765][ T1864] loop3: detected capacity change from 0 to 512 [ 176.828103][ T1862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.881062][ T1864] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.403: inode has both inline data and extents flags [ 176.894842][ T1864] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.403: couldn't read orphan inode 15 (err -117) [ 176.908635][ T1864] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.982305][ T1864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.403'. [ 177.533925][ T1862] EXT4-fs (loop2): 1 truncate cleaned up [ 177.539793][ T1862] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 177.809829][ T1883] netlink: 'syz.0.408': attribute type 2 has an invalid length. [ 177.817613][ T1883] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 177.929976][ T30] audit: type=1400 audit(1785807015.398:236): avc: denied { write } for pid=1878 comm="syz.3.409" path="socket:[27842]" dev="sockfs" ino=27842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.109042][ T1884] syz.3.409 (1884) used greatest stack depth: 21832 bytes left [ 178.737566][ T1896] SELinux: failed to load policy [ 178.812880][ T30] audit: type=1400 audit(1785807016.238:237): avc: denied { load_policy } for pid=1895 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 178.861458][ T1902] loop4: detected capacity change from 0 to 256 [ 178.878934][ T1900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.412'. [ 179.360656][ T1902] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 179.453416][ T30] audit: type=1400 audit(1785807016.998:238): avc: denied { write } for pid=1901 comm="syz.4.413" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.489776][ T30] audit: type=1400 audit(1785807017.038:239): avc: denied { add_name } for pid=1901 comm="syz.4.413" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.567788][ T1902] exFAT-fs (loop4): invalid start cluster (12296) [ 179.588005][ T1900] loop0: detected capacity change from 0 to 8192 [ 179.593040][ T1902] attempt to access beyond end of device [ 179.593040][ T1902] loop4: rw=524288, want=696, limit=256 [ 179.605435][ T30] audit: type=1400 audit(1785807017.038:240): avc: denied { create } for pid=1901 comm="syz.4.413" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.605467][ T30] audit: type=1400 audit(1785807017.038:241): avc: denied { associate } for pid=1901 comm="syz.4.413" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.605494][ T30] audit: type=1400 audit(1785807017.108:242): avc: denied { read } for pid=1901 comm="syz.4.413" name="file1" dev="loop4" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.693211][ T1909] loop1: detected capacity change from 0 to 8192 [ 179.700502][ T1902] attempt to access beyond end of device [ 179.700502][ T1902] loop4: rw=524288, want=952, limit=256 [ 179.739456][ T1902] attempt to access beyond end of device [ 179.739456][ T1902] loop4: rw=0, want=448, limit=256 [ 179.755810][ T30] audit: type=1400 audit(1785807017.128:243): avc: denied { map } for pid=1901 comm="syz.4.413" path="/85/file2/file1" dev="loop4" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.919441][ T290] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 179.951454][ T30] audit: type=1400 audit(1785807017.128:244): avc: denied { execute } for pid=1901 comm="syz.4.413" path="/85/file2/file1" dev="loop4" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.978918][ T1902] attempt to access beyond end of device [ 179.978918][ T1902] loop4: rw=0, want=448, limit=256 [ 180.168738][ T1902] attempt to access beyond end of device [ 180.168738][ T1902] loop4: rw=0, want=448, limit=256 [ 180.445513][ T1918] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 180.455779][ T1918] SELinux: failed to load policy [ 180.674650][ T1902] attempt to access beyond end of device [ 180.674650][ T1902] loop4: rw=0, want=448, limit=256 [ 180.712254][ T1902] attempt to access beyond end of device [ 180.712254][ T1902] loop4: rw=0, want=448, limit=256 [ 180.733253][ T1902] attempt to access beyond end of device [ 180.733253][ T1902] loop4: rw=0, want=448, limit=256 [ 180.747245][ T1921] loop2: detected capacity change from 0 to 8192 [ 180.759093][ T1902] attempt to access beyond end of device [ 180.759093][ T1902] loop4: rw=0, want=448, limit=256 [ 180.930575][ T1902] attempt to access beyond end of device [ 180.930575][ T1902] loop4: rw=0, want=448, limit=256 [ 180.994361][ T1927] dummy_hcd dummy_hcd.0: remove, state 1 [ 181.000208][ T1927] usb usb1: USB disconnect, device number 1 [ 181.040009][ T290] usb usb1-port1: attempt power cycle [ 181.069366][ T26] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 181.093095][ T1927] dummy_hcd dummy_hcd.0: stopped [ 181.098167][ T1927] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 181.630985][ T39] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 181.789514][ T290] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.879388][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.899314][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 181.900657][ T1906] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 181.924062][ T1906] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 181.932488][ T1906] CPU: 0 PID: 1906 Comm: syz.0.412 Not tainted syzkaller #0 [ 181.939780][ T1906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.949990][ T1906] RIP: 0010:set_link_state+0x2a/0x1210 [ 181.955495][ T1906] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 08 40 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 f8 77 7f fe 4d 8b 75 00 49 8d 95 8b [ 181.975214][ T1906] RSP: 0018:ffffc90000b47760 EFLAGS: 00010046 [ 181.981297][ T1906] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811023e2c0 [ 181.989282][ T1906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.989592][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.997283][ T1906] RBP: ffffc90000b477e8 R08: 0000000000000003 R09: 0000000000000004 [ 182.007710][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.015333][ T1906] R10: dffffc0000000000 R11: fffff52000168eec R12: 0000000000000000 [ 182.015350][ T1906] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810b73c000 [ 182.015363][ T1906] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 182.039398][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 182.040361][ T1906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.055095][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.062246][ T1906] CR2: 00007f64b2f9b000 CR3: 00000001266b6000 CR4: 00000000003506b0 [ 182.062269][ T1906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.062280][ T1906] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.062292][ T1906] Call Trace: [ 182.062297][ T1906] [ 182.062314][ T1906] dummy_pullup+0xcd/0x130 [ 182.070950][ T290] usb 4-1: Using ep0 maxpacket: 32 [ 182.076908][ T1906] ? dummy_set_selfpowered+0x150/0x150 [ 182.076937][ T1906] usb_gadget_disconnect+0xe0/0x330 [ 182.076957][ T1906] usb_gadget_remove_driver+0x46/0x310 [ 182.076978][ T1906] usb_gadget_unregister_driver+0x181/0x480 [ 182.076998][ T1906] ? kasan_quarantine_put+0x34/0x190 [ 182.077020][ T1906] raw_release+0xda/0x260 [ 182.077038][ T1906] ? raw_open+0x3d0/0x3d0 [ 182.077055][ T1906] __fput+0x22b/0x900 [ 182.092708][ T26] usb 2-1: SerialNumber: syz [ 182.093023][ T1906] ____fput+0x15/0x20 [ 182.107462][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 182.107495][ T30] audit: type=1400 audit(1785807019.598:249): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 182.111754][ T1906] task_work_run+0x127/0x190 [ 182.111779][ T1906] do_exit+0xb70/0x29a0 [ 182.111798][ T1906] ? __up+0x160/0x160 [ 182.111818][ T1906] ? put_task_struct+0x90/0x90 [ 182.111838][ T1906] ? __kasan_check_write+0x14/0x20 [ 182.111859][ T1906] ? _raw_spin_lock_irq+0x95/0xf0 [ 182.119186][ T30] audit: type=1400 audit(1785807019.598:250): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.122447][ T1906] do_group_exit+0x149/0x310 [ 182.122471][ T1906] ? __kasan_check_write+0x14/0x20 [ 182.122492][ T1906] ? recalc_sigpending+0x1c4/0x230 [ 182.122512][ T1906] get_signal+0x64f/0x1430 [ 182.122535][ T1906] arch_do_signal_or_restart+0xe2/0x1100 [ 182.122556][ T1906] ? _raw_spin_unlock+0x4d/0x70 [ 182.122575][ T1906] ? finish_task_switch+0x16b/0x790 [ 182.122596][ T1906] ? switch_mm_irqs_off+0x730/0x960 [ 182.122616][ T1906] ? __schedule+0xbd7/0x14a0 [ 182.122636][ T1906] ? get_sigframe_size+0x10/0x10 [ 182.122657][ T1906] ? fput_many+0x15a/0x1a0 [ 182.122677][ T1906] ? __kasan_check_read+0x11/0x20 [ 182.127918][ T30] audit: type=1400 audit(1785807019.598:251): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.133365][ T1906] exit_to_user_mode_loop+0xa7/0xe0 [ 182.133385][ T1906] exit_to_user_mode_prepare+0x87/0xd0 [ 182.133403][ T1906] syscall_exit_to_user_mode+0x1a/0x30 [ 182.133422][ T1906] do_syscall_64+0x58/0xa0 [ 182.133437][ T1906] ? clear_bhb_loop+0x50/0xa0 [ 182.133456][ T1906] ? clear_bhb_loop+0x50/0xa0 [ 182.133474][ T1906] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.144502][ T26] rndis_host: probe of 2-1:1.0 failed with error -22 [ 182.144680][ T1906] RIP: 0033:0x7f288556dcab [ 182.369488][ T1906] Code: Unable to access opcode bytes at RIP 0x7f288556dc81. [ 182.376867][ T1906] RSP: 002b:00007f2883fa3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.385296][ T1906] RAX: fffffffffffffffc RBX: 000000000000000a RCX: 00007f288556dcab [ 182.393286][ T1906] RDX: 00007f2883fa4fd0 RSI: 0000000080085502 RDI: 000000000000000a [ 182.401299][ T1906] RBP: 00007f2883fa4fd0 R08: 0000000000000040 R09: 00007f2883fa3fc8 [ 182.409288][ T1906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 182.417275][ T1906] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f288562386a [ 182.425265][ T1906] [ 182.428315][ T1906] Modules linked in: [ 182.432240][ T1906] ---[ end trace c59aebb063900da7 ]--- [ 182.437709][ T1906] RIP: 0010:set_link_state+0x2a/0x1210 [ 182.443185][ T1906] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 08 40 fe 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 f8 77 7f fe 4d 8b 75 00 49 8d 95 8b [ 182.462809][ T1906] RSP: 0018:ffffc90000b47760 EFLAGS: 00010046 [ 182.468884][ T1906] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811023e2c0 [ 182.476888][ T1906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.484873][ T1906] RBP: ffffc90000b477e8 R08: 0000000000000003 R09: 0000000000000004 [ 182.492857][ T1906] R10: dffffc0000000000 R11: fffff52000168eec R12: 0000000000000000 [ 182.500844][ T1906] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810b73c000 [ 182.508831][ T1906] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 182.517776][ T1906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.524393][ T1906] CR2: 00007f64b2f9b000 CR3: 00000001266b6000 CR4: 00000000003506b0 [ 182.532379][ T1906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.540361][ T1906] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.548345][ T1906] Kernel panic - not syncing: Fatal exception [ 182.554694][ T1906] Kernel Offset: disabled [ 182.559038][ T1906] Rebooting in 86400 seconds..