last executing test programs: 47.587774906s ago: executing program 3 (id=4): socketpair(0xa, 0x5, 0xffff, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000200)=""/144, 0x33, 0x90, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x31}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000480)="06fa03076844ba8cb89e14f04305af3e", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000240)={0x120001, 0x0, {[0x101, 0x7, 0xf, 0x6, 0x0, 0x8001, 0x2, 0x5]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 45.352255542s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340), 0x1, 0x445, &(0x7f0000000d40)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_misc(r2, &(0x7f00000001c0)="077db85e6ea4ceb2", 0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001300)) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000380)={0x100, 0x15400000, 0x1, 0x0, 0xfff8, 0x1000000000000024, 0x0, &(0x7f0000000300)=[{0xffffffff, 0xfe, 0x4}, {0x3, 0x101}, {0x15, 0x101}, {0x11, 0x1ff, 0x1}, {0xa, 0xfe, 0x3}, {0x0, 0xfe, 0xac}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000d2c127861a02030300000000ff00004000000000000800010001000000"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x5, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c76, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x1006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x5, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x8093a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x6, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x223, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xea7c, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) 43.978645355s ago: executing program 3 (id=9): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x48e, &(0x7f0000000d00)="$eJzs3M1vVFUbAPDnTj+AAm/7In6AKFU0NhpbWlBZuACjiQtNTHSBy9oWRAo1bTVCiFYXuDQk7o1LE/8CV7ox6srErbo2JMSwAXVzzZ25t50ZZsZp6TDA/H7J0HPuuZdznnvumZ5zb2cC6Fmj2T9JxI6I+DUihivZ2h1GKz+uX70w89fVCzNJpOnrfybl/a5dvTBT7Foct73IrNRur7Z07vzp6fn5ucU8P7F85t2JpXPnnz51Zvrk3Mm5s1NHjhw+NPncs1PPbEqcWZuu7f1wYd+el9+89OrM8Utv/fh1UsRfE8f77f+nW1uWjjbY1lckHm+/ljvCzqp00t/FhrAub0dE1l0D5fE/HH2x1nnD8dInXW0c0FFpmqZbmhevpMBdLIlutwDojvz3fBKxMpOtgavX883dPQu8K8cq4WRxX89flZL+KOX7DNStbzdTdiaPr/z9RfaKuvspAACd8O2xys9i7rc2/yjVTPKO5s+GRiLi/xGxKyLuiYjdEXFvRNwXEfdHxANVxzR67lOv/iHJjfOf0uUNBdambP73fP5sq3b+V8z+YqQvz+0sxz+QnDg1P3cwIv4XEWMxsCXLT7ao47sXf/msWdlo1fwve2X1F3PBvB2X++tu0M1OL0/fTMzVrnwcsbe/UfzJ6iw/68c9EbF3/8bqOPXkV/ualf13/C1swjIk/TLiiUr/r0Rd/IWk9fPJia0xP3dworgqbvTTzxdfa1b/TcW/CbL+H2p4/a/GP5JUP69dWn8dF3/7tOmaps3rf7D6mOz6H0zeKKeLgg+ml5cXJyMGk1fy7Ufz7bX1lfebWts/i3/sQOPxvyvWzsSDEZFdxA9FxMMRsT9v+yMR8WhEHGgR/w8vPPbOxuPvrCz+2XX1f9NE8Wx7bnEgaor6Tn//Tbmk6KyRFvEn0aD/D5dTY/mWdt7/WrZ08WauZgAAALjzlCJiRySl8dV0qTQ+Xvl7+d0xVJpfWFp+6sTCe2dnK58RGImBUnGna3j1fmisTObL+uL+6FRd/lB+3/jzvm3l/PjMwvxst4OHHre9yfjP/NHX7dYBHXf3/DkfsF4bHf9pmn60yU0BbrF1jf/BzrUDuOWGzP+hdzUY/9vq8i2+IwC4kzX6/W9hD73B/B96l/EPvcv4h961gfH/+1AnGgLcSvkn4fvb+YB/xxLZ+0/3am8nETUtTNMuNWPw9jgb5USUulZ7bPDwsS6dsX/yL9u8PTquzUS335kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2x78BAAD//xsC4og=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@uuid_auto}, {@xino_off}, {@verity_on}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 43.540896152s ago: executing program 3 (id=11): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x4009, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() get_robust_list(r2, &(0x7f0000000400)=0x0, &(0x7f0000000440)) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x2, 0x2, 0x98d, 0x7fff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x2000, 0x2000, &(0x7f0000fee000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000380)="0f20c035000001000f22c00f017b37c402f52ba5ac26dad2b9800000c00f3235004000000f30440f20c0350a000000440f22c00f20c035200000000f22c06740d25a3e3e660f38dd2e67440f0135d2f3ed8664260f01c8", 0x57}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x80000001, @private2, 0x4}, 0x1c) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="b0a87930a7a29fe69e325939e96b4329a8d9e7d492b0e15166064df4e4b84cc1a7d62e623e15a93aa65df2fc9787f3db0c9f01758ddc5a0bae2d86303757ba71067164699be666aab9fd49b68c59a022a7df184090bb10bf845d790eb220bea62885cb4d2757fa1e66095f73f3a68fa41bff823e51c9e94b2b35ce8609ae3d45818ac928608596b000376cf12a37d86de579515d7c9d56b2686b66263d9340dad5b3e3946ae16007d59637400700000093a0446733a1de5a65ea8eacb4d9362d65c136936bfdf73602422f2031988e3a25e201c7", 0x125}], 0x1, 0x0, 0x0, 0x2c}, 0x20000881) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00'}, 0x94) 43.241377214s ago: executing program 3 (id=12): prctl$PR_SET_TIMERSLACK(0x1d, 0x5f) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x550, &(0x7f0000000800)="$eJzs3d9rZFcdAPDvnWSy2d1sk6oPWmgttrJbdGc2jW2DD20F0aeCWN/XmMyGsJPMkkzaTSg6+QsEERV80hdfBP8AQRZ88VGEBX1WqCiiWwV9qL1yZ+4kcXInmaaTZDP5fODuPef++n5PNufm3rmHOwFcWM9GxOsR8UGapi9ExHS+vJRP0epM2XbvPXpnMZuSSNM3/55Eki/LNkvTNO0e82q+22REfP2rEd9K9gWczOdb23cX6vXael6tNlfvVTe2tm+urC4s15Zra3Nzsy/PvzL/0vytobTzWkS8+uU//+C7P/vKq7/6/Nt/uv3XG9/O0prK13fbcQzjh63sNL18abJnh/VjBnscZe0pv59XLg+2z85JJgQAQF/ZNf7HIuIzEfFCTMfY4ZezAAAAwDmUvjYV7yed53cFJvosBwAAAM6RUnsMbFKq5GMBpqJUqlQ6Y3g/EVdK9cZG83N3GptrS52xsjNRLt1Zqddu5WOFZ6KcZPXZdnmv/mJPfS4inoyI709fbtcri4360ll/+AEAAAAXxNWe+/9/TXfu/w+XnE5yAAAAwPDMnHUCAAAAwIlz/w8AAAAjrXzWCQAAAAAn7mtvvJFNaff7r5fe2tq823jr5lJt425ldXOxsthYv1dZbjSW2+/sWz3qePVG494XYm3zfrVZ22hWr21t315tbK41b6/E5Kk0CAAAADjgyU8/+EMSEa0vXm5PmYmzTgo4FeO7pe47PQt6/x+f6MzfPaWkgFMxNsA2714qXu46Ac638d4Fffo6MHqM/weO+kaPvoN3ftuZlYacDwAAMHzXP1X8/P/o6/mWS34453RiuLh6nv+n0we2cIaAUdV+/j/oQB6nAhgp5YFGAAKj7KM+/z9amn6ohAAAgKGbak9JqZJ/vDcVpVKlEnGt/bWA5eTOSr12KyKeiIjfT5cvZfXZ9p7JkfcMAAAAAAAAAAAAAAAAAAAAAAAAAEBHmiaRAgAAACMtovSX5Nedd/lfn35+qvfzgYnkP+2vBJ6IiLd//OYP7y80m+uz2fJ/7C5v/ihf/uJZfIIBAAAA9Orep7fn/z7rbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89emexOw2w+eVhxf3blyJipij+eEy255NRjogr/0xifN9+SUSMDSF+ayciPlkUP8nS2g1ZFH8YP4TWTtJK2wrjx0z+UyiKf3UI8eEie5Cdf14v6v+vxbPteXH/G4/4v/px9T//xe75b6xP/782YIynHv6i2jf+TsRT48Xnv278pE/85waKXo5vfmN7u9/a9CcR17t/f9pnvP0R9krV5uq96sbW9s2V1YXl2nJtbW5u9uX5V+Zfmr9VvbNSr+X/Fsb43tO//OCw9l8p/PuX5Nn0b//zBccbK8j/vw/vP/p4t9I6GP/GcwXxf/PTfIuD8Ut5nM/m5Wz99W651Snv98zPf/fMYe1f2mt/+cP8/9/od9BeBzrK04P96gAAJ2Jja/vuQr1eWx/ZQnaX/hikcZzCRDwWaYxu4TtZ4eGwDpimaZr1qYJVDyJikOMk0Skkw+qepeJ89gp9Q3QSmDzDcxMAADBcexf9R2/reTMAAAAAAAAAAAAAAAAAAACcjNN4y1pvzL1XICfDeIU2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQ/C8AAP//gkLY7A==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 43.198853846s ago: executing program 32 (id=12): prctl$PR_SET_TIMERSLACK(0x1d, 0x5f) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3e}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x550, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 7.009008808s ago: executing program 2 (id=235): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x957c, 0x80, 0x1, 0x8a}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x891d, 0x4, 0x3, 0x16d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4277, 0x2, 0x1, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc335, 0x800, 0x2, 0xf5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeada, 0x20, 0x1, 0x2ff}}], 0x4, &(0x7f0000000080)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x3, 0xb92, 0x0, &(0x7f0000000600)=@buf_512="2f2a352b353c225e6f799752c9cf07c7ad1b22582a0c63e1c8ed39ca5eed9ad22660d378b6a854a9a0b3454e44ed991ab4e077787be4ff7c1f3c68617ef07bec321084d4ed3ef1d5330c8cbd2f3db61c0fe7cbf029fd1c9699f39e83aea41e81da37b18ef497b7766c0c56831e324e3df2bd7b7078164f75dae29608cfbd0b5511adf6d624cab72acd328cb2bafb78bfad08c714c666419afbc75555257aea4c122ed29a55ea09a31b1b6af67aedbdadee26cdc1f6d9b3a71b0f1ac5075fcf23980d3ab1e27bf9d0e11725a802080ceb50c7adc8e135e4b5f2aa54adcbed633ecf22fd41ad46200a921630cd881d1ba4607812378a9ed6c8b104ca1d43fa552741f333f6e0b174b0c2995746f51b49c8c6793d294267914d6fd408e5470ae6bb92171405f37c30242e1507c2039dbdcadb188051727a38aaa6ccb6df0d2dbd2f03e3668942d61ad3f4de23fc69bb3452a444d189d7a4980f57de02afd450d2792145c4676153ca984b378f885d3b39ac97d209c7656329fdcedf8707c02cfc62ade02c968fc0d0b89bfe366ac6546d3f5a97f583fe29bbe06a33672ec33e1434bc758da6c013324cdb07b08d6b7454dfe0b29542068e41d01f7746d132f5bfcb9514bcad81efd93dc13fd473b22f85d04b5bb2bab1e66a29ceebb1c67284e2e5e8c6bc98ec077463ed4fddf47bc6f5f0301496385c9c9ad067ca6890d25739e1"}}, &(0x7f0000001680)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xf21a5dc3ddee5620, @broadcast, @local, @local, @rand_addr=0x64010102}}}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0x5}]}}, 0x0, 0x26}, 0x20) socket(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x24020400) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) unshare(0x8040800) pwritev(r0, &(0x7f0000001800)=[{&(0x7f00000016c0)="ce151a4e42834608d75e9933e02de9e024b408d17a08c668d77950945d06460296db182bac95d85893035e031e9dda0a7817958fb7914e816a95cdadaf28d5a913a67b0a1d", 0x45}, {&(0x7f0000001740)="2b59efe0543a9191ee963ddfff9d1dd2637dd97006c6f9020788ef31cb7fdb177f95449eef73c53592868501ed76f80e600c6b4abf70ba0dcab1142eccf55946b1432459a87b8e3df0f4035fb45a4241a04fdf6ce2c2efffeeecf7f0966b795a241b8765b6a3dda9cc3f7a8b5e3189f52e1692418adabe05aedc76fb65048133b288118435c4d165b41f5748a430be85967d4232d7856810385b5b9d6cc2eb438feeb0db82ff2ea1702a42a5036e6613", 0xb0}], 0x2, 0x400, 0x11e) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 5.194216249s ago: executing program 0 (id=242): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4046040) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x3009}}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x3, 0x0, 0x93]}, &(0x7f0000000140)=0x44) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000200)}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[], 0x5, 0x1215, &(0x7f0000001840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r5, r5, 0x0, 0x7a680000) 4.561608503s ago: executing program 5 (id=251): r0 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000040)='pimreg\x00'}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x7, "f6e7f3e9"}, @local=@item_012={0x2, 0x2, 0x1, "00f5"}]}}, 0x0}, 0x0) add_key$fscrypt_provisioning(&(0x7f00000087c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000006162636465666768696a6b6c6d6e6f707172737475767778797a30313233343536e409b5aff4d1b4ab4ef36c70ca5fb813f98beaf8e459760ed9201bb3f5394d1e41ad98ef51f03304ad787d5283a7560f9e3cefb0aaa979b4ec3234ae6ed0b9d42322a9a8f7f52d4ad18a71e558172c2c34b99c83"], 0x29, 0xfffffffffffffffe) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x3, 0x7, 0x411}) 4.020403564s ago: executing program 4 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (rerun: 64) io_setup(0x10001, &(0x7f0000002480)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x29, 0x0, &(0x7f0000000380)="e2ff2040f844962e79cfec7ec6830fcb7ee5718298c24eb6b74b78578503279da605b897175e5d816a", 0x0}, 0x50) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = eventfd2(0x8008, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x60000000}) (async) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000240)="a8302666155d0b5b2d", 0x9}], 0x1) (async) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x17) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r6 = syz_open_pts(r2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) fcntl$setsig(r7, 0xa, 0x11) (async) r8 = gettid() r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r8) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x32}) ioctl$UI_DEV_CREATE(r9, 0x5501) (async) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0xb) (async) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000180)=0x2000007f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 3.801729483s ago: executing program 2 (id=255): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x3, 0x8}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@utf8}, {@rodir}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@numtail}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp863'}}]}, 0x81, 0x2c1, &(0x7f0000001880)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) write(r2, &(0x7f0000000140)='S', 0x1) sendfile(r2, r1, 0x0, 0x80000002) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x3, 0x0, 0x1, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa000000000000000000007400f5000000019078ac1e0001ac1414aa03019078036100004600000000000004002f000bac141410ac1414bb44440001000086dd00000000ac1414bb00000000ac14143200150000e00000010000004fe0000002000000007f00000100000000ac1414aa00000004e000000100004000"], 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)="e7c323ac09309f244cefeac972024b69c597ab1f0486ddde148b9f2668adf9184839bbb44c3d20fc", 0x28}], 0x1) 3.739014925s ago: executing program 4 (id=256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.477242035s ago: executing program 4 (id=257): socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.214792244s ago: executing program 2 (id=259): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB="30a20000", @ANYRESDEC=r5, @ANYBLOB="010000000000000000000c00000004000380180001801400020076657468305f746f5f626f6e64000000"], 0x30}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000000)='^', 0x1}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000001b80)="9031adbfc803d3a5e5a676622b29a4e7cdda1b9290c3688397f9ebbadbe44dc93d8de1dd9cd7951e33997d6d814baa7d56815472d37adff2ac56a2f651ca81f04e2d9df8c1d75ffa10a485bd12c974f3929e2f4e587b363f9e0ccd1e636a4d71b0616d3838dc8bcd1afca5e25d8c59f58645838dfd8fed9f350588ba2dc12716feddf29f8a", 0x85}, {&(0x7f0000000240)="40b0d217f0e5d5dc0a6f1b2cb9ef0ce8931aa0a00393237d0625d9c2fd5c9f2642974ffb7dea", 0x26}, {&(0x7f0000001c80)="caff8b15f84a9d785b37db602745f00fb7f98818834c3c98b5885b76c1c001b8edcacffca08bd2889ab95bb08fc6179348f880f3dcba1c1b37ab5203eb03", 0x3e}], 0x5, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5], 0x68}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000007c0)="5cf4b05e1d1756cdbeb58c6c9f62dff016c2e9b03fd33955a8ce5a3d43c9634ce3a6d82f2a80fa5a7ab14e195c847e1e3345802a0355379c9b4bc50ad8f7a7e1349ac805b6f5a072782a62372f3e7d6fa6c1aeb016462b0df44da708323999472daf94f7be0b6d4c21b3bf5a89dce60ecc222e97dd852b28909b4392e433991e04", 0x81}, {&(0x7f0000000880)="75439d3859165a88e56b7cf4b625aec61d8e23663460b92e2b7e91e27c2b7917d21182ac95f90277800200e7ff965965de73fb79a93772088ec7c2d3702bc6373c1acbf01b6502e3b0e42eb41b4ec68e3209f721c9c6e15e56bec6837911467e2a7c68b92468f659d820357c00fceebc5817e145de44830be48dae", 0x7b}, {&(0x7f0000000b80)="fcf70792076cc496d68925bd79cb0376dea4127aa54ef83966e1f28e10f7499b8ddb552d50083e2061a930a61fccff79b3737c770ac38e04516835e9d06e0809561be83738b5fe2cada5f27d00e2f790794d96e8a3603b7cfd081dd5b4df9bd066967df162bd9eb8b62a9f2b24542312fd5e344bed4be9f948dd8d2259538f18ccaced5fda9dfc0a7b353f3ad69070cf98b6c9a2e196f93076549989f139067f99a258bcbe72bfaf96f8cc374cb045e678ebc8337ebae47285cf927da7e2458bf04eeb24f688", 0xc6}, {&(0x7f0000000900)="123e944f7c003252dd36190c6b7a591000000000000000c4779691dd4aa1ef840bef7ca50124a299a135b111d5ae79f65fc900", 0x33}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a00)="e9ee5e", 0x3}], 0x1}}], 0x5, 0x2401c444) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa3c81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000b00)={0x79, 0x0, 0xc}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="170000000000000000000000070000004406fc5cad8c00001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414caeeb11874ab7e9e00"], 0x38}, 0x4000004) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="9789b5", 0x3}], 0x1}}], 0x1, 0x800) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x3, 0x50, 0x2, 0xa6}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="d33a2a36dad4de2fbaeb65e1b523a74a784d7494c6162a35546ea6ad233e49fbb116ae9e225aaf7f23af74b070ffc67fb30889dc061377eb51587e99d793cb8e84a03355c5aa9037322e7558ea83341065d2017ded158da8424fcacada2ff6e02c9b53fde44004dd6d1b1d6ad2be0d7d5f8c8661824625fe5d47028e0d5f2d82cc3fe72de148e92e2d73fc2f06d82234d6312099cb698ca3838bd2ec4e8fac80364e70ea100a9d6b872c8057f08960e7c7971ee7aca59bab12c54c0ed74f721480e8d116cd9a", 0xc6}, {&(0x7f0000000580)="a1e91f23bc748c55ded82c189bd7fa6904b83a617502d606ed1bd96eb3110c9a003fdfc5ff4b4021c490089c8d4b", 0x2e}], 0x2}, 0x24004080) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x4, 0x4) 2.213083764s ago: executing program 5 (id=260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) listen(r0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="00001000bf851000000000000000009500000000000000000000854a41459861412f7df62a524f"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvfrom$inet(r0, 0x0, 0x0, 0x40000020, 0x0, 0x64) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x0, 0x2, 0x80, 0xfffffffe}, {0x6, 0x3, 0x1, 0x8001}]}) 2.212601324s ago: executing program 0 (id=261): unshare(0x22020400) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x5693, 0x200, 0x2, 0x1b}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xef49, 0x0, 0x3, 0x139}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20dc, 0x400, 0x1, 0x1ea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f1c, 0x20000, 0x1, 0x2c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7c8, 0x800, 0x2, 0x173}}], 0x4, &(0x7f00000014c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x80}, 0x0, 0x0, '\x00', {0x3, 0x53b, 0x0, &(0x7f00000004c0)=@buf_4k="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"}}, &(0x7f0000001540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x101040) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) (async, rerun: 32) fsync(r2) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x2020) read$watch_queue(r5, &(0x7f0000000340)=""/133, 0x85) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000003c40)={{{@in6=@local, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000003d40)=0xe8) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x5, 0x0, [{0xbf9, 0x0, 0x9}, {0x0, 0x0, 0x98}, {0x2bc, 0x0, 0x6}, {0x96f, 0x0, 0x7fff}, {0x8a9, 0x0, 0x6}]}) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x3b, 0x4048044) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000003b80)=[{&(0x7f0000001580)=""/160, 0xa0}, {&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f0000001740)=""/71, 0x47}, {&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/194, 0xc2}, {&(0x7f0000002940)=""/73, 0x49}, {&(0x7f00000029c0)=""/237, 0xed}, {&(0x7f0000002ac0)=""/156, 0x9c}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0xa) (rerun: 64) ioctl$RTC_UIE_ON(r0, 0x7003) 2.206510174s ago: executing program 4 (id=262): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffa, 0xffdffff6, 0x8, 0x9}) (async) ioctl$TCXONC(r1, 0x540a, 0x2) (async) r2 = syz_open_pts(r1, 0x2000) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x6537) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x3) (async) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x12000921) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) userfaultfd(0x80800) (async) close(r4) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.206794543s ago: executing program 4 (id=264): bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x40) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x11, &(0x7f0000000000)={[{@errors_continue}, {@dioread_nolock}]}, 0x1, 0xbfc, &(0x7f0000001800)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 806.634099ms ago: executing program 0 (id=265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1418000, &(0x7f0000000100), 0x3e, 0x525, &(0x7f0000000cc0)="$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") 806.280069ms ago: executing program 1 (id=266): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1d3202, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpgid(0xffffffffffffffff) 804.196099ms ago: executing program 1 (id=267): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xee00, 0xee00, 0x0) ioctl$TCGETS(r1, 0x560d, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f0000000300)={0x0, 0x989680}, 0x0) 802.685519ms ago: executing program 5 (id=268): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba0000000000eeffffff000000", @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x808, &(0x7f0000002280)=ANY=[@ANYBLOB='sys_tz,iocharset=cp874,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000007,allow_utime=00000000000000000004612,keep_last_dots,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152b, &(0x7f0000003300)="$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") r7 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@data_writeback}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) fallocate(r0, 0x15, 0x10, 0x1000f7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="850000002f000000620a00ff140000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000010000192f654d065deffdd6ac8d6e626439584fb779d64b92bb8a078022a9874723d3c1c7ddd1e64a34e00d9d89402aaad9a0462faf86373dfdea1aa6bb1db8dd26a38c96337429b72d5107bc7e7fd187b734b8d7"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000340)='./file1\x00', 0x2000408, &(0x7f0000000800)=ANY=[@ANYBLOB="e6004cd24fbe4960c56d5d03ec08d60c5f5c3e076645523dbfafcd9452560c3ffb", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000001000,default_permissions,default_permissions,allow_other,blksize=0x0000000000000c00,allow_other,default_permissions,max_read=0x0000000000000003,appraise,pcr=00000000000000000060,fowner<', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=,&%+{,dont_measure,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000600)="dfa6391a54d61f766ccd7a3ed5eca0b74d5506eab77f7ba9490abf66d7ed9aace1503e216b9fffa883bc2e39d8aa569c529aeb58afb11c1ad7c2f370972f01addbe0c5386d0f63de5bbfc247529b265828ba2ae2fd335e6a663f62dea66c31a48ede2bdb0dfd10dc3923506cc7ed72d5a798b2bce9e0f3595638211684f66367d37a519a") symlinkat(&(0x7f0000000540)='./file0/file0\x00', r7, &(0x7f0000000580)='./file1\x00') 800.197149ms ago: executing program 2 (id=269): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000)={[{@inlinecrypt}, {@resuid}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}]}, 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x389400, 0x24) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000180)='mnt/encrypted_dir\x00') open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) accept$unix(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='veth0_virt_wifi\x00', 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pivot_root(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') 749.283301ms ago: executing program 1 (id=270): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x80, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfb, 0x50, 0x3, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x10, 0x40, 0x0, 0x4000cfe}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) 747.064351ms ago: executing program 4 (id=271): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDISABIO(r4, 0x4b37) syz_usb_control_io$hid(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), 0xfffffffffffffffc, 0x0) r5 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000040)=ANY=[], 0x2, 0x550d, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r6, 0x0, &(0x7f00000018c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="20142f000000a78671eaa6821dc3673c49b310cd1d8e5afee3298112f2d7a5d913b3d50f1699cd00f7529ad18c53a072dd2fbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, &(0x7f0000005940)={0x14, &(0x7f0000000280)={0x40, 0x5, 0xc7, {0xc7, 0x22, "6089c1c9b85799972e1505fef09f03cadb1f840da2db31d9a3f97d24238c50f47db8d59fe314ca8f88a4dea91ef8b83584ce2a1b73bfaf3cad95a8dc9c00899b633fc1bd83d4ea1ab8494ce8d1f5295acecc71251795bbe0c79dd3a610d785a70050c75e00a34a3374b0ea0cb4fad4fa5a007eb453c3b9acf20510dd78522633b0840502589c48212dd883675bf5f02d2bdc50d39965d0ed9ff5a96ae3380f1aef9af98b881ae9111d7f0db98d1b23a679d2cde21071cdc4081a648345ee92d6f3be0d68b5"}}, &(0x7f0000005900)={0x0, 0x3, 0x33, @string={0x33, 0x3, "5fe2095044cf06fcdb01e56266f194fd2cb5eb389f3f49869feeb19fcef6cb09e55f14800e8a3f1ad4c8fc7af7c992843b"}}}, &(0x7f0000005b80)={0x34, &(0x7f0000005980)={0x40, 0x9, 0x9f, "82cf6e3cb985d91c80b4a3f5fdba7910af2b2eb91b644d62749430dd4e703f1a6cf17546810b98fa525758cfd1765d5f9990c48e797566c31e684f46b9c7167fbaf89a2ba3089e45fd8dc0d06529c4ea7c7f169fbe8fc89b650db25aca14b0518924484767d0150d28a59c2b0e0a1f4487c910ed5cdf443de8eb2ef820213c996c09098cd582c2a2d2b34a2bf2fa55af8f737337b21f8d6286ab4a5e4d0001"}, &(0x7f0000005a40)={0x0, 0xa, 0x1}, &(0x7f0000005a80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000005ac0)={0x20, 0x0, 0x28, {0x26, "28b1a8682072a6c369890fdc85897e0ce2d583651bd682d2fa91dae6d7c4a0629f5530639224"}}, &(0x7f0000005b00)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000005b40)={0x20, 0x0, 0x1, 0x6}}) pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0xecc) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 738.961871ms ago: executing program 0 (id=272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x7) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000304000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x101a02, 0x44) sendfile(r3, r3, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x11a02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 702.184313ms ago: executing program 1 (id=273): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'vcan0\x00', 0x3}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000001c0)={0x5, 0x5, 0x0, [{0x7, 0x80000001, 0x5, 0xf1, 0x80, 0xf, 0x6, '\x00', 0x9}, {0x3, 0x7, 0x7, 0x8, 0xd, 0x0, 0xf1, '\x00', 0x3}, {0x8000000000000000, 0x8, 0x8, 0x10, 0x1, 0x63, 0x8, '\x00', 0x84e}, {0x9, 0x9, 0x4, 0x2f, 0x3, 0xb, 0x80, '\x00', 0x476a}, {0x200, 0x200, 0x4, 0x3, 0x8, 0x10, 0x82}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x110, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x110}}, 0x4000001) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x4, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20048001) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000ac0)='bpf_lsm_sb_remount\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x6, 0xb, 0x3, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0xda2162dd189490b8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf91}, @jmp={0x5, 0x1, 0x5, 0x2, 0xb, 0x30, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x9, 0x82, &(0x7f00000009c0)=""/130, 0x40f00, 0x0, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0}, 0x94) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x220000, &(0x7f0000000e80)={[{@uid={'uid', 0x3d, r10}}, {@uid={'uid', 0x3d, r11}}, {@gid={'gid', 0x3d, r12}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000f00)) r13 = dup3(r1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000000f80)={0x1128, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x10f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x455}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "21b046325babc154cf39bd23060900de89712fcb90141607f41b8a4276db6ec517c7eafb007f51d4468c3ea3025c90c776eee802f2c4b673b4383358b4697284d2122a62272e0a8f11af42225fa9ceb948c7bf72642ae5593a9bd47e8c2feb88e67d577d7e17815ef0874999c9caaf9afd8938f18b3334477c7e282f26fa324755f15205e4f2aa8334bcc2af4ba9666acd21d30084a46da5d7c657a8f251ddde5feeb63988bc"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "1cf272d62ee6cf6f48af544b5dd14f92df444cbd3c394b9252fe63"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x1128}, 0x1, 0x0, 0x0, 0x140}, 0x1) bind$unix(r13, &(0x7f0000002140)=@file={0xc6c136150353e1c9, './file0\x00'}, 0x6e) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r9, 0x40106e8c, &(0x7f00000021c0)=[0x8, 0xc000000000000000]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002200)={0x2, 0xfffff85d, 0xfffffffe, 0x40, 0x5}, 0x14) r14 = syz_open_dev$loop(&(0x7f0000002240), 0x553c, 0x40000) ioctl$BLKREPORTZONE(r14, 0xc0101282, &(0x7f0000002280)={0x5, 0x1, 0x0, [{0xce, 0x6, 0x6, 0x3c, 0x2, 0x8, 0x1, '\x00', 0x1}]}) 519.87212ms ago: executing program 0 (id=274): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0x2, 0x5bc, &(0x7f00000004c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x8}}, 0x28) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0xeb, 0x3, 0x9, 0x76, 0x1, 0x3, 0x3, 0x5, 0x2e5, 0x40, 0x12f, 0x3ff, 0x8, 0x38, 0x3, 0xa, 0x1, 0x3f69}, [{0x6d214c67b7e26e37, 0x3, 0xffffffffffffffff, 0x8, 0x3, 0x5, 0xf1, 0x2}, {0x70000000, 0xffffffff, 0x8, 0x8000000000000000, 0x6, 0xa7d0, 0x7a}, {0x6, 0x2, 0x8000, 0x7, 0xb0c, 0xffffffff, 0x5, 0x52f}], "9e06eed97630c905c99a214e73bca665de73ac582a2d9f5c14d3a20d9f07d8d67f713e2c5221649e8f1715b0bfda5a9dff092717c05b7079f86f69499599509f74df96a6c25757a70d857de627bef1084cdcb2065b98740582de6f74750a95db3106a6ce061306f66c07b9de730d3e76ab62cb7cf5509574f1d720bc7860b9426e4b068382e62ef25291832c80f85b69c52e983c31c2a3040ea7e8177f835c", ['\x00', '\x00', '\x00', '\x00']}, 0x587) 519.52907ms ago: executing program 2 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x43}, [], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 482.322661ms ago: executing program 1 (id=276): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000006, 0x50, 0xffffffffffffffff, 0x4786d000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000001c0)={0x80, 0x0, 0x100000001}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcdf2502202001000000000020000008000800ac14142c080004"], 0x2c}}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) io_setup(0xffff8000, &(0x7f0000000080)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000600)=0xe8) r7 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x880020, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@dont_measure}]}}, 0x0, 0x0, &(0x7f00000002c0)="a3517e2361193652773a8ed55e34eea1e19652438998ad156cfbab8708447e544700658a278023924842978c2af9307eec94d02eaf64b873dc1e7e88b9e9") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x4}}}}}}, 0x0) io_cancel(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x10, r7, &(0x7f0000000300)="7ba64a4aad8f5d398e666782fda6c45dd47de41b313a7e18e8cc0aab05", 0x1d, 0x8001, 0x0, 0x3}, &(0x7f0000000380)) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f00000001c0)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$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") 380.960295ms ago: executing program 2 (id=277): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62020600) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x371, &(0x7f0000002980)="$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") setresuid(0xee00, 0xee00, 0x0) setreuid(0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0xffffffffffffffff, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) pwrite64(r4, 0x0, 0x0, 0xbfc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x6, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x12023, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), &(0x7f0000000600)=ANY=[@ANYRES8=r3], 0xf8, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='l', 0x1}], 0x1) 346.877706ms ago: executing program 0 (id=278): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$eJzs3M9rHGUfAPDvTJP+zPtuXngP4kmoWKF2k6ZqT0LEc6HQP6AuySSETLIhu6ndNWDrwYMgqAhae9H/wIsieCn9HxTBm4IHQWsaDwUPkdnspu12E9c26Zb4+cDsfJ9nZvb7fNvJww7sswH8az1TvCQRIxFxPiJK7f40Ig62osMRVzbPu722OrW+tjqVxMbGhVtJcVmrr/NeSXt/LFqXxFMRcXM44uTbD+atNZrzlTzPltvtsfrC0lit0Tw1t1CZzWazxYnx8TNnXp546cXxXav1vTe/+O3dr1/79tOzC3++cuuF6SQmW3VHVx27afPfZDgmu/oX9yLZACWDHgAAAH0pPucfiIih1qfUUhxoRQAAAMB+snFoAwAAANj3khj0CAAAAIC91fkewO211anO9ji/f/DrqxExendt8fpW/qHWGuKIwzEcEUfXk/tWJiSbl8EjuXI1Im5M9rj/k/b99/C6V65bI/3kuVHMP5O95r90a/6JHvPPUOe3Ex5RZ/5bf2D+u5v/wDbz3/k+cxxaPvHdtvmvRjw91Ct/spU/6eSv3Lkv/+t95v9y5Icftzu28XnEieid/95cO/w+xNjMXJ61X3vmOP7VWyd3qv/odvmTrvrvua7oW+qz/p+uT8xuN5cU+Z8/vvP/f6/8xT3xfnscaUR80N4X7Q+7cjx3c/zaTvVPb1P/TvmLvs/6rP+bd5o/93kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKQRMRJJWt6K07RcjjgWEf+Po2lerdVPzlRXFqeLYxGjMZzOzOXZeESUNttJ0T7diu+2J7raZyLifxHxUelIq12equbTgy4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALcciYiSStBwRaUT8UUrTcnnQowIAAAB23eigBwAAAADsOc//AAAAsP91Pf9fqwxqIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB+dv7cuWLbWF9bnSra05caK/PVS6ems7R9RnV5qTxbrc7mWXmquvB375dXq0tnY3Hl8lg9q9XHao3mxYXqymL94txCZTa7mA3veUUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jJHWlqTliEhbcZqWyxH/iYjRGE5m5vJsPCL+GxHfl4YPFe3Tgx40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu67WaM5X8jxbFggEuxwcbv+VPSnj+SfBjtPGkccyOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NjVGs35Sp5ny7VBjwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDBSn9JIqLYTpSeHek+ejC5U2rtI+KN6xc+vlyp15dPF/2/b/XXP2n3Twxi/AAAAEC3znN65zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgX7VGc76S59nyHgaDrhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg4fwUAAP//zWnHag==") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x13, 0xb7, "539d2782571c5cae4c3bd34c70f67ba12cf5b0823d451336aa0944db33f62d8d9d51d29e331c2e2e59df1a0b3aba318aaa187120b06b2e479b8d3b7819d0d4e67b9cd86b9602988ee459d7c971045f55fc3b3aec874858eb0cb6753eaa349fc6dc0a04487069f9a714dee32215dd0d07c5da5c30f4b55f00682a463e8a5986e097fd427ea7b7f6a911c2ac0c374e3a64c81c96ce854d77adeb632e6d91d95da68356374738520e98e176d1ddcaed889b2d77855aa5c71b"}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "aa93"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010cd0c800040000102030109026e000301034003080b0003012330050904000000010130"], 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 345.935826ms ago: executing program 5 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000040000000000681df2df5ee0a462e073", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000140)="3c6312c8fa9ecec3f53b56a32a53cdfadf546ae14a2524b8f1e4f2a8459d9ed85ec6e055b83487d69b0d9c0adb2747af7c40ae1ae71c86c9f038402fccdc0105dd22feb9dbbe223343fab2ae6a876672f25191fe229559ec7c2482ec22e701d3e0db0a3cd85aee293c37970bd263374485ca2af0ae1b01bc14edcecf29a6079788677d6aa6c0e7b6fdcc9ca2e831725596222e6ccf1750bb47afc213979060c9798a6063ca0c3aae2170fcac6ad45e6790435f4ba924ba337af904fb5fa0a01ae6065a61a32f", &(0x7f0000000240)=""/112}, 0x20) 345.337266ms ago: executing program 5 (id=280): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x1f6, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/19, 0x13}}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000004c0)=0x10001, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/psched\x00') read$FUSE(r4, &(0x7f00000267c0)={0x2020}, 0x2020) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) openat$cgroup_ro(r4, &(0x7f0000000580)='blkio.bfq.empty_time\x00', 0x0, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000680)=@req={0x4, 0x3, 0x7}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="88b11b3a3ee8", 0x6, 0x4040080, &(0x7f00000000c0)={0x11, 0x88a8, r8, 0x1, 0x3, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x9d, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0x4) 919.18µs ago: executing program 1 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0x3, 0xb78, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0xaa8, 0x20a, 0x278, 0xaa8, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @empty, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0\x00', 'team_slave_0\x00', {0xff}, {}, 0x6, 0x0, 0x1, 0x60}, 0x0, 0x8b0, 0x8d8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x1, 0x1}, {0xb51, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0xfffffffd, 0x3}, {0xffffffff, 0x3}, {0x100}, {0x4, 0x2}, {0x21760000, 0x2}, {0xfffffffa}, {0x5, 0x1}], [{0x5, 0x1}, {0xd2b, 0x6}, {0x7fffffff, 0x9}, {0x2e0, 0x5}, {0x0, 0x68b}, {0x0, 0x9}, {0x6, 0x1}, {0x8743, 0x6}, {0x4, 0x9}, {0x81a, 0x7}, {0x5, 0x2}], 0x0, 0x6}, {[{0x10, 0x1}, {0x8}, {0x3, 0x3}, {0x2, 0x2}, {0xfff, 0x2}, {0x1400000, 0x3}, {0x7, 0x2}, {0xe, 0x3}, {0x8, 0x3}, {0xda, 0x1}, {0x1000, 0x1}], [{0x7, 0x5}, {0x2, 0x8}, {0x3, 0xc0000000}, {0x7052, 0x6}, {0x7f, 0xe5e}, {0xc466, 0x7}, {0x1, 0x641}, {0x6, 0x7}, {0x1, 0x6}, {0x4e124b62, 0x7}, {0xffff, 0x6}], 0x8, 0x4}, {[{0x4, 0x2}, {0x0, 0x2}, {0xfffffff2, 0x1}, {0x9d54838, 0x3}, {0xffffffff, 0x3}, {0x7}, {0x80000001}, {0x1, 0x2}, {0x3, 0x3}, {0x4, 0x2}], [{0x37, 0x3}, {0xfffffbff, 0x9}, {0x8, 0x8}, {0xf2e, 0x8}, {0x3, 0x7ffd}, {0x3, 0xff}, {0x4, 0xac7}, {0xfffffffb, 0x80}, {0xf, 0x10000}, {0x7, 0x43db}, {0x7fffffff, 0x81}], 0x5, 0x5}, {[{0x3, 0x3}, {0x6, 0x2}, {0x81, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0xd, 0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x5}, {0x2ca7}, {0xff}], [{0x0, 0x7}, {0x7fffffff, 0xfffffffa}, {0x2, 0x80}, {0x4, 0x1}, {0x8, 0x952}, {0x0, 0xffff}, {0x0, 0x100}, {0xfffffffc, 0x9}, {0xce, 0x5}, {0x4, 0x5}, {0x1, 0x80000000}], 0x6, 0x6}, {[{0xfffff498, 0x2}, {0x5, 0x2}, {0x76d3}, {0x5d, 0x1}, {0xffff, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x613}, {0xc9, 0x3}, {0x5, 0x3}, {0xc, 0x2}], [{0x101, 0x7}, {0x2, 0x3}, {0x8000}, {0x9, 0xebdf}, {0x200, 0x100000}, {0x6, 0x4}, {0x5, 0x3ff}, {0x0, 0x8f9}, {0x3ff, 0x3}, {0x8, 0x5}, {0x6, 0xecc1}], 0x1, 0x6}, {[{0x3, 0x2}, {0xd, 0x2}, {0x9, 0x3}, {0xb351, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x18000}, {0xfff, 0x2}, {0x2, 0x3}], [{0x7, 0x3099f6cb}, {0x40, 0x56f6f111}, {0x1000, 0xebe}, {0x7, 0xb4a}, {0x5, 0x4}, {0x5, 0x7}, {0x7, 0x7}, {0x7fff, 0xf748}, {0x73c, 0x4}, {0x7, 0x8}, {0xfffffff8, 0x3}], 0x6, 0x2}, {[{0xd, 0x1}, {0x7}, {0xffff, 0x1}, {0xd, 0x3}, {0x9, 0x1}, {0x4, 0x2}, {}, {0x6, 0x2}, {0xf, 0x1}, {0x3}, {0x6, 0x3}], [{0x40, 0x74}, {0x3, 0xff}, {0x4, 0xf9ff}, {0x9, 0xffffffff}, {0x0, 0x6}, {0x5, 0x3}, {0x9}, {0x6}, {0x3, 0xffff8000}, {0x9, 0x3}, {0x101, 0x10}], 0x8, 0xb}, {[{0x4, 0x2}, {0x8, 0x2}, {0x7bf}, {0x9, 0x2}, {0x80000001}, {0x0, 0x3}, {0xc42, 0x2}, {0x3, 0x1}, {0x2}, {0x7, 0x3}, {0x0, 0x1}], [{0x0, 0xf}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0xfa}, {0x4, 0x2}, {0x6, 0x59f}, {0x3, 0x7}, {0x70, 0x3}, {0x8, 0xf}, {0x7fffffff, 0x3}, {0x2, 0x7}], 0x9, 0x3}, {[{0x47f, 0x1}, {0x8000, 0x1}, {0xb0be2b9, 0x2}, {0x7, 0x1}, {0xe27b}, {0x0, 0x1}, {0x80000000, 0x1}, {0x3, 0x2}, {0x6, 0xf896f4c654c104c7}, {0x1, 0x21273ee1c38bc91}, {0x4, 0x3}], [{0xffffb242, 0x3}, {0x6, 0x80}, {0x800, 0x80}, {0xff, 0x7}, {0xb1, 0x2}, {0x4, 0x7}, {0xf, 0x2}, {0x1, 0x100}, {0x7af2, 0x2}, {0x6}, {0x7, 0x4}], 0x9, 0x5}, {[{0x1dd, 0x3}, {0x1, 0x1}, {0xffff, 0x2}, {0xfffffffc, 0x1}, {0x8}, {0x7, 0x3}, {0x2}, {0x6, 0x2}, {0x1c0}, {0x9}, {0xa, 0x3}], [{0x0, 0x101}, {0x0, 0x10000}, {0xda, 0xa7f4}, {0x5, 0xffff}, {0x8, 0x9}, {0xc, 0xff}, {0xf97807a, 0x5}, {0x3, 0x2}, {0x200, 0x10000}, {0x4, 0x8}, {0xf, 0x6}], 0xb, 0xa}, {[{0xc9e, 0x1}, {}, {0x9, 0x1}, {0x6}, {0xcc}, {0x5, 0x3}, {0x7, 0x2}, {0x1000, 0x3}, {0x7f, 0x3}, {0x2, 0x1}, {0xffff0001, 0x3}], [{0x3, 0x1800000}, {0x9b0, 0x5}, {}, {0x9, 0x3}, {0xd9, 0x6}, {0x7, 0x2}, {0x7fff, 0x4}, {0x1, 0x9f35}, {0x3}, {0x3, 0xf}, {0x10}], 0x3}], 0xc}}, @common=@hl={{0x28}, {0x3, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:dhcp_etc_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = getpgid(0xffffffffffffffff) setpgid(r5, r6) unshare(0x40400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r3, r2, 0x0) connect$unix(r7, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x46}, 0x80) 0s ago: executing program 5 (id=282): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r1, r2+60000000}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x5, 0x80ea5}) timer_settime(r0, 0x1, &(0x7f0000000140), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setrlimit(0xb, &(0x7f00000002c0)={0x8001, 0x4}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300004577b0a9631989d6edc9e866c3e37aa8fcd8b5db080afae3750f099ba942aeac05234e78610984715547f6e7d96000b694d697de5c1eb84ed0aa9353e27e18baf80d8cab392849b4fc4a7a12c458907104a315b4bcd3988ddf5eb82aa2261ab7961f8eb3fbd99f05004b0bf34617a6638a3109e5e91778", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000300)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000a0774556ccd0df461b20bcfaffffffffffffff7da9a4590833a88c28acb15ec457e4671522e175762e1d7fd4a3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x5, 0x4, 0x6, 0x1, r7}, 0x50) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) (async) timer_create(0x3, 0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r1, r2+60000000}, {0x0, 0x9}}, 0x0) (async) setrlimit(0xf, &(0x7f00000000c0)={0x5, 0x80ea5}) (async) timer_settime(r0, 0x1, &(0x7f0000000140), 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setrlimit(0xb, &(0x7f00000002c0)={0x8001, 0x4}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300004577b0a9631989d6edc9e866c3e37aa8fcd8b5db080afae3750f099ba942aeac05234e78610984715547f6e7d96000b694d697de5c1eb84ed0aa9353e27e18baf80d8cab392849b4fc4a7a12c458907104a315b4bcd3988ddf5eb82aa2261ab7961f8eb3fbd99f05004b0bf34617a6638a3109e5e91778", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000300)) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000a0774556ccd0df461b20bcfaffffffffffffff7da9a4590833a88c28acb15ec457e4671522e175762e1d7fd4a3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x5, 0x4, 0x6, 0x1, r7}, 0x50) (async) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) (async) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered disabled state [ 24.120562][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.127946][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.135826][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.143125][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.150403][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.157825][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.165066][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.172428][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.179774][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.187662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.195214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.225132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.233335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.241426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.249267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.257684][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.264770][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.272492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.280766][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.287808][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.295298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.303545][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.310570][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.318057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.326321][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333401][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.340775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.349276][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.356378][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.363972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.372276][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.379361][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.399677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.407318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.414918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.423440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.431642][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.438707][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.446712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.455057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.463237][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.470274][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.477716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.486325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.494572][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.501601][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.509036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.517505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.525993][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.533066][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.544241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.552451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.573600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.581802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.591107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.601681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.609828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.617896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.626114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.634495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.642412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.650915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.661050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.682524][ T290] device veth0_vlan entered promiscuous mode [ 24.690773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.699170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.707393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.715976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.724978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.732860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.741189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.748895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.773430][ T290] device veth1_macvtap entered promiscuous mode [ 24.780837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.789577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.798714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.817243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.826161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.834342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.842389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.850602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.859255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.867745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.875854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.884360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.891868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.906227][ T289] device veth0_vlan entered promiscuous mode [ 24.918113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.926641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.935479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.943306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.950719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.959210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.971990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.982852][ T287] device veth0_vlan entered promiscuous mode [ 24.991581][ T289] device veth1_macvtap entered promiscuous mode [ 25.000002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.008080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.016409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.024959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.033517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.040993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.049217][ T288] device veth0_vlan entered promiscuous mode [ 25.065452][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 25.084203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.092624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.101484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.110053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.118631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.127145][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.139055][ T286] device veth0_vlan entered promiscuous mode [ 25.151112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.165217][ T286] device veth1_macvtap entered promiscuous mode [ 25.183514][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.192135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.200191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.207837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.216989][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.225692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.238735][ T287] device veth1_macvtap entered promiscuous mode [ 25.252115][ T288] device veth1_macvtap entered promiscuous mode [ 25.284263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.343360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.363526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.395369][ T313] loop2: detected capacity change from 0 to 40427 [ 25.403286][ T313] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 25.412638][ T313] F2FS-fs (loop2): invalid crc value [ 25.418247][ T313] F2FS-fs (loop2): invalid crc value [ 25.423796][ T313] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 25.431370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.439859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.448272][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.456503][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.465090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.473981][ T312] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 25.483093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.507389][ T316] loop4: detected capacity change from 0 to 512 [ 25.514084][ T316] EXT4-fs: Ignoring removed bh option [ 25.520482][ T316] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 25.540681][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.557910][ T316] EXT4-fs (loop4): 1 truncate cleaned up [ 25.563666][ T316] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 25.564062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.590639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.599340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.699631][ T327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.995867][ T303] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.281355][ T289] EXT4-fs (loop4): unmounting filesystem. [ 27.353323][ T303] usb 1-1: Using ep0 maxpacket: 16 [ 27.387044][ T303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 27.462532][ T303] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 27.517740][ T303] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 27.562627][ T303] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 27.607971][ T303] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 27.643019][ T335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.660684][ T303] usb 1-1: config 1 interface 0 has no altsetting 0 [ 27.690612][ T303] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 27.730358][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.787730][ T303] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 27.894893][ T335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.910132][ T335] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 27.921418][ T344] loop3: detected capacity change from 0 to 512 [ 27.928706][ T344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.943793][ T344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 27.954130][ T344] EXT4-fs (loop3): invalid inodes per group: 0 [ 27.954130][ T344] [ 27.964704][ T335] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 27.996898][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.005267][ T335] usb 3-1: Product: syz [ 28.009554][ T335] usb 3-1: Manufacturer: syz [ 28.169789][ T335] usb 3-1: SerialNumber: syz [ 28.194656][ T303] scsi host1: usb-storage 1-1:1.0 [ 28.372052][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 28.372093][ T28] audit: type=1400 audit(1781512028.085:122): avc: denied { create } for pid=342 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.843049][ T303] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.871844][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 28.959045][ T349] netlink: 'syz.3.8': attribute type 3 has an invalid length. [ 28.982930][ C0] sched: RT throttling activated [ 28.986714][ T28] audit: type=1400 audit(1781512028.165:123): avc: denied { connect } for pid=342 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.992579][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 29.011714][ T28] audit: type=1400 audit(1781512028.185:124): avc: denied { ioctl } for pid=342 comm="syz.3.8" path="socket:[15264]" dev="sockfs" ino=15264 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.045037][ T303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 29.060673][ T303] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 29.096643][ T349] netlink: 'syz.3.8': attribute type 3 has an invalid length. [ 29.127859][ T303] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 29.195758][ T28] audit: type=1400 audit(1781512028.505:125): avc: denied { write } for pid=342 comm="syz.3.8" path="socket:[15263]" dev="sockfs" ino=15263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.197459][ T303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.222464][ T28] audit: type=1400 audit(1781512028.525:126): avc: denied { write } for pid=342 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.263145][ T353] loop3: detected capacity change from 0 to 512 [ 29.269111][ T303] usb 5-1: Product: syz [ 29.271841][ T353] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 29.279204][ T303] usb 5-1: Manufacturer: syz [ 29.302383][ T303] usb 5-1: SerialNumber: syz [ 29.308061][ T353] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.9: bg 0: block 104: invalid block bitmap [ 29.320732][ T24] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 29.330081][ T353] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 29.359502][ T353] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.9: invalid indirect mapped block 1 (level 1) [ 29.379491][ T353] EXT4-fs (loop3): 1 truncate cleaned up [ 29.385907][ T353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 29.400225][ T28] audit: type=1400 audit(1781512029.125:127): avc: denied { map } for pid=323 comm="syz.0.1" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.425092][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.442838][ T353] overlayfs: unrecognized mount option "verity=on" or missing value [ 29.454584][ T28] audit: type=1400 audit(1781512029.165:128): avc: denied { mounton } for pid=352 comm="syz.3.9" path="/2/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.476213][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.489225][ T353] ======================================================= [ 29.489225][ T353] WARNING: The mand mount option has been deprecated and [ 29.489225][ T353] and is ignored by this kernel. Remove the mand [ 29.489225][ T353] option from the mount to silence this warning. [ 29.489225][ T353] ======================================================= [ 29.490044][ T28] audit: type=1400 audit(1781512029.215:129): avc: denied { create } for pid=357 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.546236][ T28] audit: type=1400 audit(1781512029.255:130): avc: denied { mount } for pid=352 comm="syz.3.9" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 29.568238][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.577323][ T353] incfs: Can't find or create .index dir in ./file0 [ 29.584138][ T28] audit: type=1400 audit(1781512029.295:131): avc: denied { mounton } for pid=352 comm="syz.3.9" path="/2/file0/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 29.613295][ T353] incfs: mount failed -1 [ 29.621493][ T359] incfs: Can't find or create .index dir in ./file0 [ 29.628694][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.638777][ T359] incfs: mount failed -1 [ 29.692147][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.703940][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.714987][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.726066][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.737013][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.748159][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.759194][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.770144][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.781154][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.792403][ T287] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 29.803532][ T310] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 29.845237][ T346] sddr09: could not read card info [ 29.850503][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 29.860040][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 29.866595][ T10] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 29.874338][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 29.880798][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 29.883384][ T6] usb 1-1: USB disconnect, device number 2 [ 29.898447][ T335] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 29.911962][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 29.920315][ T287] EXT4-fs (loop3): unmounting filesystem. [ 29.938852][ T287] syz-executor (287) used greatest stack depth: 21832 bytes left [ 29.951558][ T335] usb 3-1: USB disconnect, device number 2 [ 30.004041][ T310] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 30.017181][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.034981][ T310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.044247][ T310] usb 2-1: config 1 has no interface number 1 [ 30.055550][ T310] usb 2-1: string descriptor 0 read error: -22 [ 30.069747][ T365] loop2: detected capacity change from 0 to 2048 [ 30.071239][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.101944][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.113846][ T365] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0003] [ 30.122310][ T365] System zones: 0-7 [ 30.127357][ T365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.130593][ T310] usb 2-1: MIDIStreaming interface descriptor not found [ 30.155789][ T365] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.14: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 30.172385][ T310] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 30.183514][ T365] EXT4-fs (loop2): Remounting filesystem read-only [ 30.195329][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.236809][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.304887][ T312] udevd[312]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 30.321608][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.328960][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.336674][ T370] device bridge_slave_0 entered promiscuous mode [ 30.344654][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.351805][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.360103][ T370] device bridge_slave_1 entered promiscuous mode [ 30.396251][ T379] loop0: detected capacity change from 0 to 128 [ 30.405046][ T362] udevd[362]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 30.422316][ T379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.432159][ T379] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.444619][ T8] device bridge_slave_1 left promiscuous mode [ 30.450802][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.459111][ T8] device bridge_slave_0 left promiscuous mode [ 30.467546][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.476310][ T8] device veth1_macvtap left promiscuous mode [ 30.482420][ T8] device veth0_vlan left promiscuous mode [ 30.496363][ T348] usb 2-1: USB disconnect, device number 2 [ 30.543129][ T310] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 30.623550][ T288] EXT4-fs (loop0): unmounting filesystem. [ 30.663781][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.670924][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.678266][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.685335][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.711355][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.719396][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.727240][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.736331][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.748660][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.754154][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.765082][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.776642][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.783062][ T310] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 30.806596][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.815278][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.822366][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.830124][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.849113][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.860170][ T310] usb 3-1: config 0 descriptor?? [ 30.867712][ T310] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 30.880419][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.888903][ T303] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 30.899953][ T303] usb 5-1: USB disconnect, device number 2 [ 30.918896][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.929945][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.943757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.951825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.961305][ T370] device veth0_vlan entered promiscuous mode [ 30.968472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.976150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.988439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.996909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.012434][ T370] device veth1_macvtap entered promiscuous mode [ 31.028355][ T393] loop1: detected capacity change from 0 to 512 [ 31.037370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.045545][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.050413][ T393] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.054859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.090295][ T393] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.20: bad orphan inode 13 [ 31.093716][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.100946][ T393] ext4_test_bit(bit=12, block=18) = 1 [ 31.115833][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.119713][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.140095][ T393] is_bad_inode(inode)=0 [ 31.145302][ T393] NEXT_ORPHAN(inode)=0 [ 31.149400][ T393] max_ino=32 [ 31.153002][ T24] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 31.160654][ T388] loop4: detected capacity change from 0 to 1024 [ 31.167346][ T393] i_nlink=1 [ 31.170540][ T393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.220500][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.261566][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.283709][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.303540][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.325615][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.353556][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.394274][ T24] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 31.405776][ T388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.414300][ T24] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.427474][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.428154][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.445955][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 31.455169][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.464373][ T24] usb 1-1: config 0 descriptor?? [ 31.473154][ T386] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.476076][ T403] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.706826][ T393] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 31.799163][ T405] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 31.934526][ T24] wacom 0003:056A:00C5.0001: unknown main item tag 0x2 [ 31.942534][ T405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.20: bg 0: block 248: padding at end of block bitmap is not set [ 31.957424][ T347] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.980472][ T24] wacom 0003:056A:00C5.0001: unknown main item tag 0x7 [ 32.036597][ T24] wacom 0003:056A:00C5.0001: hidraw0: USB HID v9.0d Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 32.155067][ T347] usb 6-1: unable to get BOS descriptor or descriptor too short [ 32.191515][ T347] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 32.345818][ T405] syz.1.20 (405) used greatest stack depth: 21184 bytes left [ 32.417524][ T347] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 32.531317][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.629074][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.636426][ T347] usb 6-1: Product: syz [ 32.646156][ T347] usb 6-1: Manufacturer: syz [ 32.663209][ T347] usb 6-1: SerialNumber: syz [ 32.711442][ T409] loop1: detected capacity change from 0 to 256 [ 32.737344][ T409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 32.770450][ T409] 9pnet_fd: Insufficient options for proto=fd [ 32.798594][ T289] EXT4-fs (loop4): unmounting filesystem. [ 32.827710][ T414] binder: Unknown parameter 'euid<00000000000000000000' [ 32.870324][ T419] loop1: detected capacity change from 0 to 512 [ 32.913328][ T419] EXT4-fs: Ignoring removed bh option [ 32.921731][ T419] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 32.934101][ T419] EXT4-fs (loop1): 1 truncate cleaned up [ 32.939797][ T419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.959316][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.975435][ T425] loop1: detected capacity change from 0 to 16 [ 32.984381][ T425] erofs: (device loop1): mounted with root inode @ nid 36. [ 33.173007][ T303] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.263022][ T361] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.277504][ T6] usb 3-1: USB disconnect, device number 3 [ 33.333017][ T303] usb 5-1: device descriptor read/64, error -71 [ 33.419209][ T427] loop2: detected capacity change from 0 to 40427 [ 33.429893][ T427] F2FS-fs (loop2): fault_injection options not supported [ 33.437169][ T427] F2FS-fs (loop2): fault_type options not supported [ 33.443978][ T361] usb 2-1: Using ep0 maxpacket: 8 [ 33.449818][ T427] F2FS-fs (loop2): invalid crc value [ 33.450412][ T361] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 33.463397][ T361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.475418][ T427] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.486199][ T361] usb 2-1: config 0 has no interface number 0 [ 33.493828][ T361] usb 2-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.505666][ T361] usb 2-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.516254][ T361] usb 2-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 33.538908][ T361] usb 2-1: config 0 interface 1 has no altsetting 0 [ 33.546037][ T361] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 33.555307][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.560366][ T427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.574746][ T361] usb 2-1: config 0 descriptor?? [ 33.590404][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 33.590419][ T28] audit: type=1400 audit(1781512033.305:157): avc: denied { write open } for pid=426 comm="syz.2.28" path="/4/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.595803][ T427] syz.2.28: attempt to access beyond end of device [ 33.595803][ T427] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.604016][ T28] audit: type=1400 audit(1781512033.305:158): avc: denied { ioctl } for pid=426 comm="syz.2.28" path="/4/file0/file1" dev="loop2" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.656710][ T28] audit: type=1400 audit(1781512033.305:159): avc: denied { read } for pid=426 comm="syz.2.28" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.656884][ T303] usb 5-1: device descriptor read/64, error -71 [ 33.681253][ T290] syz-executor: attempt to access beyond end of device [ 33.681253][ T290] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 33.797554][ T28] audit: type=1400 audit(1781512033.515:160): avc: denied { name_bind } for pid=431 comm="syz.2.29" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 33.867125][ T24] usb 1-1: USB disconnect, device number 3 [ 33.886189][ T436] loop0: detected capacity change from 0 to 256 [ 33.891469][ T28] audit: type=1326 audit(1781512033.605:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.0.30" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b9ce59 code=0x7ffc0000 [ 33.918990][ T28] audit: type=1326 audit(1781512033.605:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.0.30" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f89d7b9ce59 code=0x7ffc0000 [ 33.947267][ T28] audit: type=1326 audit(1781512033.605:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.0.30" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89d7b9cbc2 code=0x7ffc0000 [ 33.972664][ T28] audit: type=1326 audit(1781512033.605:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.0.30" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89d7b5d68e code=0x7ffc0000 [ 33.997364][ T28] audit: type=1326 audit(1781512033.605:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.0.30" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f89d7b9cc87 code=0x7ffc0000 [ 33.999537][ T361] hid (null): unknown global tag 0xa3 [ 34.022845][ T303] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.035319][ T28] audit: type=1326 audit(1781512033.605:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.0.30" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89d7b5d68e code=0x7ffc0000 [ 34.199279][ T361] uclogic 0003:28BD:0078.0002: pen parameters not found [ 34.203069][ T303] usb 5-1: device descriptor read/64, error -71 [ 34.206481][ T361] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring [ 34.299582][ T347] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 34.315534][ T347] usb 6-1: USB disconnect, device number 2 [ 34.323293][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.363000][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 34.388339][ T445] loop2: detected capacity change from 0 to 16 [ 34.397873][ T445] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.483075][ T303] usb 5-1: device descriptor read/64, error -71 [ 34.544227][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.565407][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.593024][ T24] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 34.607553][ T303] usb usb5-port1: attempt power cycle [ 34.617550][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.629849][ T24] usb 1-1: config 0 descriptor?? [ 34.686659][ T347] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 34.964931][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.004245][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.014706][ T347] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 35.023997][ T303] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 35.031970][ T347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.042559][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 35.050480][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 35.074476][ T303] usb 5-1: device descriptor read/8, error -71 [ 35.148785][ T347] usb 6-1: config 0 descriptor?? [ 35.169012][ T24] usb 1-1: USB disconnect, device number 4 [ 35.264489][ T303] usb 5-1: device descriptor read/8, error -71 [ 35.493087][ T348] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.533047][ T303] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 35.564629][ T303] usb 5-1: device descriptor read/8, error -71 [ 35.664883][ T347] hid-generic 0003:04F3:0755.0003: unbalanced delimiter at end of report description [ 35.677006][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.700696][ T348] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 35.714451][ T303] usb 5-1: device descriptor read/8, error -71 [ 35.733903][ T347] hid-generic: probe of 0003:04F3:0755.0003 failed with error -22 [ 35.757661][ T466] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport unix [ 35.778669][ T348] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 35.808963][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.817984][ T348] usb 3-1: Product: syz [ 35.822632][ T348] usb 3-1: Manufacturer: syz [ 35.828180][ T348] usb 3-1: SerialNumber: syz [ 35.833783][ T303] usb usb5-port1: unable to enumerate USB device [ 35.992291][ T361] usb 2-1: USB disconnect, device number 3 [ 36.006154][ T309] usb 6-1: USB disconnect, device number 3 [ 36.042530][ T471] loop1: detected capacity change from 0 to 512 [ 36.049357][ T471] EXT4-fs: Ignoring removed bh option [ 36.059172][ T471] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 36.070177][ T471] EXT4-fs (loop1): 1 truncate cleaned up [ 36.076072][ T471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.098498][ T286] EXT4-fs (loop1): unmounting filesystem. [ 36.112683][ T475] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 36.275800][ T486] overlayfs: missing 'lowerdir' [ 36.412997][ T467] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 36.563036][ T361] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 36.592990][ T467] usb 5-1: Using ep0 maxpacket: 8 [ 36.599624][ T467] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.614233][ T467] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 36.626079][ T467] usb 5-1: config 1 interface 0 has no altsetting 0 [ 36.635959][ T467] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 36.645204][ T467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.653400][ T467] usb 5-1: Product: syz [ 36.657631][ T467] usb 5-1: Manufacturer: syz [ 36.662292][ T467] usb 5-1: SerialNumber: syz [ 36.668344][ T469] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 36.713862][ T494] loop5: detected capacity change from 0 to 40427 [ 36.723561][ T494] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 36.729994][ T494] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 36.738780][ T494] F2FS-fs (loop5): invalid crc_offset: 1 [ 36.746303][ T494] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 36.764638][ T361] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 36.779314][ T361] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 36.793546][ T361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.800220][ T361] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 36.810006][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.819870][ T361] usb 2-1: config 0 descriptor?? [ 36.825448][ T494] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 36.832614][ T494] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 36.855981][ T370] syz-executor: attempt to access beyond end of device [ 36.855981][ T370] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.879968][ T467] usb 5-1: USB disconnect, device number 7 [ 36.912988][ T6] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 36.966746][ T502] loop5: detected capacity change from 0 to 512 [ 36.973594][ T502] EXT4-fs: Ignoring removed bh option [ 36.981793][ T502] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 36.992886][ T502] EXT4-fs (loop5): 1 truncate cleaned up [ 37.000092][ T502] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 37.027841][ T370] EXT4-fs (loop5): unmounting filesystem. [ 37.094460][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.105710][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.115769][ T6] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 37.125062][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.134470][ T6] usb 1-1: config 0 descriptor?? [ 37.228675][ T361] apple 0003:05AC:0274.0004: unknown main item tag 0x1 [ 37.235666][ T361] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 37.242582][ T361] apple 0003:05AC:0274.0004: unknown main item tag 0xd [ 37.249497][ T361] apple 0003:05AC:0274.0004: invalid report_count 24906 [ 37.256639][ T361] apple 0003:05AC:0274.0004: item 0 2 1 9 parsing failed [ 37.263952][ T361] apple 0003:05AC:0274.0004: parse failed [ 37.269717][ T361] apple: probe of 0003:05AC:0274.0004 failed with error -22 [ 37.323012][ T310] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 37.399033][ T511] 9pnet_fd: Insufficient options for proto=fd [ 37.459811][ T467] usb 2-1: USB disconnect, device number 4 [ 37.504152][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.515163][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.525012][ T310] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 37.534127][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.542784][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 37.555754][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 37.562592][ T310] usb 6-1: config 0 descriptor?? [ 37.570224][ T6] usb 1-1: USB disconnect, device number 5 [ 37.767719][ T348] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 37.794237][ T310] usbhid 6-1:0.0: can't add hid device: -71 [ 37.800428][ T310] usbhid: probe of 6-1:0.0 failed with error -71 [ 37.815375][ T348] usb 3-1: USB disconnect, device number 4 [ 37.823087][ T310] usb 6-1: USB disconnect, device number 4 [ 37.829664][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.931582][ T528] loop2: detected capacity change from 0 to 512 [ 37.945450][ T528] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 37.963052][ T528] EXT4-fs (loop2): 1 truncate cleaned up [ 37.968752][ T528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.983978][ T528] EXT4-fs (loop2): unmounting filesystem. [ 38.145819][ T541] loop0: detected capacity change from 0 to 512 [ 38.152528][ T541] EXT4-fs: Ignoring removed bh option [ 38.169641][ T541] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 38.194731][ T541] EXT4-fs (loop0): 1 truncate cleaned up [ 38.208483][ T541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.265924][ T288] EXT4-fs (loop0): unmounting filesystem. [ 38.283918][ T467] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.343026][ T310] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 38.453121][ T467] usb 2-1: device descriptor read/64, error -71 [ 38.494381][ T548] capability: warning: `syz.0.63' uses deprecated v2 capabilities in a way that may be insecure [ 38.733068][ T467] usb 2-1: device descriptor read/64, error -71 [ 38.782956][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 38.789281][ T310] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 38.802569][ T310] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 38.812747][ T310] usb 6-1: config 2 has no interface number 0 [ 38.823035][ T310] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 38.838198][ T310] usb 6-1: config 2 interface 88 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.859369][ T310] usb 6-1: config 2 interface 88 has no altsetting 0 [ 38.871759][ T310] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 38.885034][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.899345][ T310] usb 6-1: Product: syz [ 38.906697][ T310] usb 6-1: Manufacturer: syz [ 38.915457][ T310] usb 6-1: SerialNumber: syz [ 38.927886][ T531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 38.939159][ T310] asix: probe of 6-1:2.88 failed with error -22 [ 39.002973][ T467] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.026509][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 39.026524][ T28] audit: type=1400 audit(1781512038.745:192): avc: denied { watch } for pid=549 comm="syz.2.64" path="/13" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.058307][ T28] audit: type=1400 audit(1781512038.775:193): avc: denied { write } for pid=549 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.083992][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.101021][ T28] audit: type=1400 audit(1781512038.775:194): avc: denied { nlmsg_write } for pid=549 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.129312][ T28] audit: type=1400 audit(1781512038.815:195): avc: denied { name_bind } for pid=549 comm="syz.2.64" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.191375][ T467] usb 2-1: device descriptor read/64, error -71 [ 39.202872][ T28] audit: type=1400 audit(1781512038.815:196): avc: denied { node_bind } for pid=549 comm="syz.2.64" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 39.236002][ T553] loop0: detected capacity change from 0 to 128 [ 39.254055][ T553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.263183][ T553] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.299980][ T556] loop2: detected capacity change from 0 to 256 [ 39.333687][ T556] FAT-fs (loop2): bogus sectors per cluster 0 [ 39.353046][ T556] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 39.388982][ T553] EXT4-fs error (device loop0): make_indexed_dir:2333: inode #2: block 63: comm syz.0.65: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 39.408520][ T531] loop5: detected capacity change from 0 to 40427 [ 39.415584][ T556] FAT-fs (loop2): Can't find a valid FAT filesystem [ 39.423271][ T531] F2FS-fs (loop5): fault_injection options not supported [ 39.430679][ T531] F2FS-fs (loop5): fault_type options not supported [ 39.437750][ T531] F2FS-fs (loop5): invalid crc value [ 39.450641][ T28] audit: type=1400 audit(1781512039.165:197): avc: denied { ioctl } for pid=559 comm="syz.4.67" path="socket:[17137]" dev="sockfs" ino=17137 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.468784][ T531] F2FS-fs (loop5): Found nat_bits in checkpoint [ 39.489424][ T288] EXT4-fs (loop0): unmounting filesystem. [ 39.503110][ T467] usb 2-1: device descriptor read/64, error -71 [ 39.514952][ T556] loop2: detected capacity change from 0 to 256 [ 39.545143][ T556] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 39.577688][ T28] audit: type=1400 audit(1781512039.295:198): avc: denied { ioctl } for pid=555 comm="syz.2.66" path="socket:[17139]" dev="sockfs" ino=17139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.605903][ T556] exFAT-fs (loop2): error, invalid size(size(0) > aligned(9223372036854777344) [ 39.605903][ T556] [ 39.617247][ T556] exFAT-fs (loop2): Filesystem has been set read-only [ 39.624378][ T28] audit: type=1400 audit(1781512039.325:199): avc: denied { write } for pid=555 comm="syz.2.66" name="file0" dev="loop2" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.653702][ T467] usb usb2-port1: attempt power cycle [ 39.663027][ T28] audit: type=1400 audit(1781512039.325:200): avc: denied { add_name } for pid=555 comm="syz.2.66" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.672371][ T531] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 39.683718][ T28] audit: type=1400 audit(1781512039.325:201): avc: denied { associate } for pid=555 comm="syz.2.66" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.961671][ T348] usb 6-1: USB disconnect, device number 5 [ 40.093010][ T309] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.113077][ T467] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.144747][ T467] usb 2-1: device descriptor read/8, error -71 [ 40.223098][ T303] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.285056][ T309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.294305][ T467] usb 2-1: device descriptor read/8, error -71 [ 40.322467][ T309] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 40.336936][ T309] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 40.347885][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.356606][ T309] usb 1-1: Product: syz [ 40.361184][ T309] usb 1-1: Manufacturer: syz [ 40.366658][ T309] usb 1-1: SerialNumber: syz [ 40.442993][ T303] usb 3-1: Using ep0 maxpacket: 8 [ 40.450131][ T303] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 40.459949][ T303] usb 3-1: config 179 has no interface number 0 [ 40.466910][ T303] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 40.479049][ T303] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 40.491769][ T303] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.504324][ T303] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 40.541604][ T303] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 40.555289][ T348] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 40.573149][ T467] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.600253][ T303] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 40.610385][ T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.620573][ T467] usb 2-1: device descriptor read/8, error -71 [ 40.643283][ T579] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 40.655247][ T370] syz-executor: attempt to access beyond end of device [ 40.655247][ T370] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 40.765044][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.778194][ T467] usb 2-1: device descriptor read/8, error -71 [ 40.808027][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.890855][ T348] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 40.903369][ T467] usb usb2-port1: unable to enumerate USB device [ 40.933389][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.969350][ T348] usb 5-1: config 0 descriptor?? [ 40.982981][ T467] usb 3-1: USB disconnect, device number 5 [ 40.989108][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 40.989143][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 41.017406][ T588] loop5: detected capacity change from 0 to 512 [ 41.027053][ T588] EXT4-fs: Ignoring removed bh option [ 41.036230][ T588] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 41.063901][ T586] loop2: detected capacity change from 0 to 8192 [ 41.065321][ T588] EXT4-fs (loop5): 1 truncate cleaned up [ 41.079567][ T588] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 41.137392][ T370] EXT4-fs (loop5): unmounting filesystem. [ 41.174366][ T595] device syzkaller0 entered promiscuous mode [ 41.187475][ T595] tipc: Started in network mode [ 41.192453][ T595] tipc: Node identity 6a9eca69402, cluster identity 4711 [ 41.199701][ T595] tipc: Enabled bearer , priority 0 [ 41.207206][ T595] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.225072][ T595] tipc: Resetting bearer [ 41.232611][ T595] tipc: Disabling bearer [ 41.276786][ T592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.298424][ T592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.386287][ T348] usbhid 5-1:0.0: can't add hid device: -71 [ 41.392338][ T348] usbhid: probe of 5-1:0.0 failed with error -71 [ 41.409327][ T348] usb 5-1: USB disconnect, device number 8 [ 41.453207][ T600] loop2: detected capacity change from 0 to 40427 [ 41.469381][ T600] F2FS-fs (loop2): Unrecognized mount option "noinline_" or missing value [ 41.932204][ T614] netlink: 'syz.1.82': attribute type 28 has an invalid length. [ 41.940124][ T614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 41.953681][ T614] loop1: detected capacity change from 0 to 512 [ 41.965570][ T614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.986948][ T615] fuse: Bad value for 'fd' [ 42.000706][ T614] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.82: invalid indirect mapped block 4294967295 (level 0) [ 42.015437][ T614] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.82: invalid indirect mapped block 4294967295 (level 1) [ 42.037308][ T614] EXT4-fs (loop1): 1 orphan inode deleted [ 42.043395][ T614] EXT4-fs (loop1): 1 truncate cleaned up [ 42.049132][ T614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.065824][ T614] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.085859][ T614] syz.1.82 (614) used greatest stack depth: 20944 bytes left [ 42.094804][ T619] loop4: detected capacity change from 0 to 512 [ 42.112898][ T286] EXT4-fs (loop1): unmounting filesystem. [ 42.120669][ T620] Zero length message leads to an empty skb [ 42.208129][ T625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=625 comm=syz.4.85 [ 42.228435][ T627] loop1: detected capacity change from 0 to 512 [ 42.240039][ T627] EXT4-fs: Ignoring removed bh option [ 42.265412][ T627] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 42.295537][ T636] loop4: detected capacity change from 0 to 1024 [ 42.302549][ T627] EXT4-fs (loop1): 1 truncate cleaned up [ 42.308295][ T627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.342239][ T286] EXT4-fs (loop1): unmounting filesystem. [ 42.377425][ T644] loop1: detected capacity change from 0 to 512 [ 42.387367][ T644] ext3: Bad value for 'commit' [ 42.398653][ T644] loop1: detected capacity change from 0 to 256 [ 42.513002][ T467] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.555970][ T309] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 42.570583][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.586797][ T309] usb 1-1: USB disconnect, device number 6 [ 42.603014][ T310] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 42.660368][ T647] process 'syz.0.93' launched '/dev/fd/4' with NULL argv: empty string added [ 42.663032][ T303] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 42.676810][ T467] usb 3-1: device descriptor read/64, error -71 [ 42.782990][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 42.789648][ T310] usb 6-1: config 0 has an invalid interface descriptor of length 8, skipping [ 42.798775][ T310] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 42.806205][ T310] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.822541][ T310] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 42.831882][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.839954][ T310] usb 6-1: Product: syz [ 42.844216][ T310] usb 6-1: Manufacturer: syz [ 42.848830][ T310] usb 6-1: SerialNumber: syz [ 42.854241][ T310] r8152-cfgselector 6-1: config 0 descriptor?? [ 42.874179][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.885381][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.895318][ T303] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 42.910719][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.920169][ T303] usb 5-1: config 0 descriptor?? [ 42.963001][ T467] usb 3-1: device descriptor read/64, error -71 [ 43.161749][ T654] loop0: detected capacity change from 0 to 40427 [ 43.168909][ T654] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 43.176890][ T654] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.185998][ T654] F2FS-fs (loop0): invalid crc value [ 43.193131][ T654] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.233017][ T467] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.242341][ T654] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.250158][ T654] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.423011][ T467] usb 3-1: device descriptor read/64, error -71 [ 43.429936][ T663] loop0: detected capacity change from 0 to 1024 [ 43.545292][ T663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.557280][ T663] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.618698][ T303] usbhid 5-1:0.0: can't add hid device: -71 [ 43.645285][ T303] usbhid: probe of 5-1:0.0 failed with error -71 [ 43.659441][ T667] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm syz.0.97: lblock 8 mapped to illegal pblock 8 (length 4) [ 43.677827][ T303] usb 5-1: USB disconnect, device number 9 [ 43.689304][ T667] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 43.702669][ T667] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.702669][ T667] [ 43.712786][ T467] usb 3-1: device descriptor read/64, error -71 [ 43.720853][ T667] EXT4-fs error (device loop0): ext4_ext_remove_space:2930: inode #15: comm syz.0.97: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 43.780576][ T668] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: block 8: comm syz.0.97: lblock 8 mapped to illegal pblock 8 (length 1) [ 43.796446][ T668] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: block 8: comm syz.0.97: lblock 8 mapped to illegal pblock 8 (length 1) [ 43.845304][ T42] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:2: lblock 3 mapped to illegal pblock 3 (length 3) [ 43.861604][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 43.876595][ T42] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.876595][ T42] [ 43.890478][ T42] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 43.906130][ T467] usb usb3-port1: attempt power cycle [ 43.913503][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 43.926460][ T42] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.926460][ T42] [ 43.937282][ T42] EXT4-fs (loop0): Total free blocks count 0 [ 43.944256][ T42] EXT4-fs (loop0): Free/Dirty block details [ 43.950544][ T42] EXT4-fs (loop0): free_blocks=0 [ 44.312978][ T467] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.344089][ T467] usb 3-1: device descriptor read/8, error -71 [ 44.479862][ T674] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.493984][ T467] usb 3-1: device descriptor read/8, error -71 [ 44.498127][ T681] EXT4-fs: Ignoring removed bh option [ 44.505739][ T674] EXT4-fs (loop1): Test dummy encryption mode enabled [ 44.526332][ T681] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 44.536812][ T674] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec128, mo2=0003] [ 44.546847][ T674] System zones: 0-5 [ 44.551572][ T674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.560507][ T681] EXT4-fs (loop0): 1 truncate cleaned up [ 44.560532][ T681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.579888][ T674] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 44.593529][ T288] EXT4-fs (loop0): unmounting filesystem. [ 44.614516][ T286] EXT4-fs (loop1): unmounting filesystem. [ 44.686624][ T689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.726169][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 44.726183][ T28] audit: type=1400 audit(1781512044.445:223): avc: denied { ioctl } for pid=688 comm="syz.0.103" path="/19/file2/file1" dev="loop0" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.783125][ T467] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.793008][ T348] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 44.865394][ T467] usb 3-1: device descriptor read/8, error -71 [ 44.985129][ T348] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.000317][ T348] usb 5-1: config 9 has an invalid interface number: 102 but max is 0 [ 45.036496][ T348] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 45.048625][ T467] usb 3-1: device descriptor read/8, error -71 [ 45.089307][ T348] usb 5-1: config 9 has no interface number 0 [ 45.116888][ T348] usb 5-1: config 9 interface 102 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.143039][ T303] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.172741][ T348] usb 5-1: config 9 interface 102 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.186679][ T467] usb usb3-port1: unable to enumerate USB device [ 45.257511][ T348] usb 5-1: config 9 interface 102 has no altsetting 0 [ 45.334729][ T303] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.382449][ T348] usb 5-1: string descriptor 0 read error: -22 [ 45.426307][ T303] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 45.542662][ T348] usb 5-1: New USB device found, idVendor=06c6, idProduct=0100, bcdDevice=e3.7f [ 45.609847][ T303] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 45.692023][ T700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.704688][ T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.766601][ T303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.776165][ T700] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.884909][ T303] usb 2-1: Product: syz [ 45.975504][ T303] usb 2-1: Manufacturer: syz [ 45.980398][ T303] usb 2-1: SerialNumber: syz [ 46.110147][ T48] usb 5-1: USB disconnect, device number 10 [ 46.252681][ T310] r8152-cfgselector 6-1: Unknown version 0x0000 [ 46.260016][ T310] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 46.398275][ T290] EXT4-fs (loop2): unmounting filesystem. [ 46.638040][ T716] set_capacity_and_notify: 4 callbacks suppressed [ 46.638059][ T716] loop2: detected capacity change from 0 to 512 [ 46.682644][ T716] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.694753][ T716] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.874964][ T703] loop5: detected capacity change from 0 to 131072 [ 46.892438][ T703] F2FS-fs (loop5): invalid crc value [ 46.912993][ T6] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 46.924379][ T703] F2FS-fs (loop5): Found nat_bits in checkpoint [ 46.965314][ T703] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 47.012996][ T703] @0Ù: renamed from bond_slave_1 [ 47.094339][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.108101][ T28] audit: type=1400 audit(1781512046.835:224): avc: denied { setattr } for pid=715 comm="syz.2.111" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.132781][ T729] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 47.145491][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.165463][ T6] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 47.179492][ T729] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.189632][ T28] audit: type=1400 audit(1781512046.905:225): avc: denied { append } for pid=715 comm="syz.2.111" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.217880][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.234453][ T6] usb 5-1: config 0 descriptor?? [ 47.241645][ T729] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.111: Failed to acquire dquot type 0 [ 47.257054][ T28] audit: type=1400 audit(1781512046.975:226): avc: denied { create } for pid=715 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.402565][ T28] audit: type=1400 audit(1781512047.115:227): avc: denied { write } for pid=688 comm="syz.0.103" name="file7" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.433005][ T28] audit: type=1400 audit(1781512047.115:228): avc: denied { rename } for pid=688 comm="syz.0.103" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.458274][ T288] EXT4-fs (loop0): unmounting filesystem. [ 47.514434][ T28] audit: type=1400 audit(1781512047.115:229): avc: denied { reparent } for pid=688 comm="syz.0.103" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.537814][ T28] audit: type=1400 audit(1781512047.115:230): avc: denied { add_name } for pid=688 comm="syz.0.103" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.668962][ T303] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 47.681218][ T303] usb 2-1: USB disconnect, device number 9 [ 47.907107][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.682291][ T738] loop0: detected capacity change from 0 to 40427 [ 48.707452][ T738] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 48.740959][ T738] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 48.749510][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 48.755576][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 48.762790][ T6] usb 5-1: USB disconnect, device number 11 [ 48.769991][ T738] F2FS-fs (loop0): invalid crc value [ 48.788755][ T753] device batadv_slave_1 entered promiscuous mode [ 48.796546][ T752] loop5: detected capacity change from 0 to 256 [ 48.803505][ T738] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 48.816830][ T752] FAT-fs (loop5): Unrecognized mount option "./file1" or missing value [ 48.876114][ T738] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 48.886624][ T738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.984683][ T750] device batadv_slave_1 left promiscuous mode [ 49.053935][ T768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.122'. [ 49.101808][ T770] input: syz1 as /devices/virtual/input/input7 [ 49.297533][ T290] EXT4-fs (loop2): unmounting filesystem. [ 49.393005][ T6] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.483423][ T777] mmap: syz.2.125 (777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.584140][ T6] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 49.597933][ T6] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 49.607697][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.616081][ T6] usb 2-1: Product: syz [ 49.620554][ T6] usb 2-1: Manufacturer: syz [ 49.625649][ T6] usb 2-1: SerialNumber: syz [ 49.675494][ T786] netlink: 292 bytes leftover after parsing attributes in process `syz.5.128'. [ 49.943340][ T335] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 49.957633][ T786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=786 comm=syz.5.128 [ 50.043036][ T467] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 50.184848][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.219767][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.255074][ T467] usb 5-1: unable to get BOS descriptor or descriptor too short [ 50.272741][ T467] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 50.298097][ T335] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 50.347382][ T467] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 50.361285][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.410439][ T467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.443454][ T335] usb 3-1: config 0 descriptor?? [ 50.497195][ T467] usb 5-1: Product: syz [ 50.523090][ T467] usb 5-1: Manufacturer: syz [ 50.546968][ T467] usb 5-1: SerialNumber: syz [ 50.843397][ T6] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.853019][ T6] usb 2-1: unit 2 not found! [ 50.864089][ T6] usb 2-1: USB disconnect, device number 10 [ 51.082128][ T335] usbhid 3-1:0.0: can't add hid device: -71 [ 51.100187][ T335] usbhid: probe of 3-1:0.0 failed with error -71 [ 51.195076][ T335] usb 3-1: USB disconnect, device number 10 [ 51.334305][ T6] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.541396][ T6] usb 2-1: device descriptor read/64, error -71 [ 51.605632][ T361] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 51.815846][ T799] netlink: 112 bytes leftover after parsing attributes in process `syz.2.131'. [ 51.849374][ T801] loop2: detected capacity change from 0 to 512 [ 51.869180][ T801] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.132: inode has both inline data and extents flags [ 51.884144][ T361] usb 6-1: Using ep0 maxpacket: 16 [ 51.889733][ T801] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.132: couldn't read orphan inode 15 (err -117) [ 51.902007][ T801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.933926][ T290] EXT4-fs (loop2): unmounting filesystem. [ 52.003269][ T6] usb 2-1: device descriptor read/64, error -71 [ 52.013951][ T361] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.024132][ T361] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.035276][ T361] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.044418][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 52.044488][ T28] audit: type=1400 audit(1781512051.755:317): avc: denied { read } for pid=806 comm="syz.0.134" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.073088][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.077984][ T28] audit: type=1400 audit(1781512051.755:318): avc: denied { open } for pid=806 comm="syz.0.134" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.081119][ T361] usb 6-1: Product: syz [ 52.106073][ T28] audit: type=1400 audit(1781512051.755:319): avc: denied { ioctl } for pid=806 comm="syz.0.134" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.109831][ T361] usb 6-1: Manufacturer: syz [ 52.134657][ T28] audit: type=1400 audit(1781512051.755:320): avc: denied { set_context_mgr } for pid=806 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 52.140431][ T361] usb 6-1: SerialNumber: syz [ 52.190753][ T814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.136'. [ 52.215579][ T817] Non-string source [ 52.219512][ T817] Non-string source [ 52.223636][ T817] Non-string source [ 52.227753][ T817] Non-string source [ 52.231803][ T817] Non-string source [ 52.235966][ T817] Non-string source [ 52.239901][ T817] Non-string source [ 52.244008][ T817] Non-string source [ 52.248030][ T817] Non-string source [ 52.251979][ T817] Non-string source [ 52.255948][ T817] Non-string source [ 52.256242][ T335] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 52.260337][ T817] Non-string source [ 52.271297][ T817] Non-string source [ 52.275341][ T817] Non-string source [ 52.279291][ T817] Non-string source [ 52.283275][ T817] Non-string source [ 52.287215][ T817] Non-string source [ 52.291168][ T817] Non-string source [ 52.295361][ T817] Non-string source [ 52.299315][ T817] Non-string source [ 52.303853][ T817] Non-string source [ 52.307898][ T817] Non-string source [ 52.311810][ T817] Non-string source [ 52.316117][ T817] Non-string source [ 52.320042][ T817] Non-string source [ 52.324156][ T817] Non-string source [ 52.328212][ T817] Non-string source [ 52.332143][ T817] Non-string source [ 52.336348][ T817] Non-string source [ 52.340396][ T817] Non-string source [ 52.344520][ T817] Non-string source [ 52.348446][ T817] Non-string source [ 52.352487][ T817] Non-string source [ 52.367021][ T28] audit: type=1400 audit(1781512052.085:321): avc: denied { connect } for pid=795 comm="syz.5.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.387677][ T361] usb 6-1: 0:2 : does not exist [ 52.401724][ T361] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 52.421780][ T361] usb 6-1: USB disconnect, device number 7 [ 52.452965][ T335] usb 3-1: Invalid ep0 maxpacket: 64 [ 52.493027][ T348] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 52.530767][ T467] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 52.543751][ T467] usb 5-1: USB disconnect, device number 12 [ 52.599405][ T28] audit: type=1400 audit(1781512052.315:322): avc: denied { write } for pid=822 comm="syz.4.140" name="usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.602254][ T823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=823 comm=syz.4.140 [ 52.623077][ T28] audit: type=1400 audit(1781512052.315:323): avc: denied { open } for pid=822 comm="syz.4.140" path="/dev/usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.635532][ T335] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 52.694874][ T348] usb 1-1: config 4 has an invalid interface number: 180 but max is 0 [ 52.703262][ T348] usb 1-1: config 4 has no interface number 0 [ 52.709378][ T348] usb 1-1: config 4 interface 180 has no altsetting 0 [ 52.717991][ T348] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a08, bcdDevice=67.c6 [ 52.727290][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.735544][ T348] usb 1-1: Product: syz [ 52.739847][ T348] usb 1-1: Manufacturer: І [ 52.744746][ T348] usb 1-1: SerialNumber: syz [ 52.817714][ T28] audit: type=1400 audit(1781512052.535:324): avc: denied { map } for pid=822 comm="syz.4.140" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.843007][ T335] usb 3-1: Invalid ep0 maxpacket: 64 [ 52.843447][ T6] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.856602][ T335] usb usb3-port1: attempt power cycle [ 52.955719][ T28] audit: type=1400 audit(1781512052.675:325): avc: denied { create } for pid=811 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.978778][ T348] usb 1-1: USB disconnect, device number 7 [ 52.987473][ T28] audit: type=1400 audit(1781512052.675:326): avc: denied { read write } for pid=811 comm="syz.0.135" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.054182][ T6] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.064034][ T6] usb 2-1: config 1 interface 0 has no altsetting 0 [ 53.072878][ T6] usb 2-1: string descriptor 0 read error: -22 [ 53.079450][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.088540][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.262984][ T335] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 53.293358][ T335] usb 3-1: Invalid ep0 maxpacket: 64 [ 53.402986][ T797] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 53.442992][ T335] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 53.473391][ T335] usb 3-1: Invalid ep0 maxpacket: 64 [ 53.478821][ T335] usb usb3-port1: unable to enumerate USB device [ 53.502119][ T6] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 53.512807][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0005/input/input8 [ 53.534297][ T831] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.541618][ T831] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.584922][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.600703][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.611141][ T6] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 53.624823][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.641421][ T797] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 53.651244][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.663994][ T797] usb 6-1: config 0 descriptor?? [ 53.725596][ T348] usb 2-1: USB disconnect, device number 12 [ 53.815921][ T834] loop0: detected capacity change from 0 to 40427 [ 53.826245][ T834] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 53.833688][ T834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 53.842044][ T834] F2FS-fs (loop0): Image doesn't support compression [ 53.848892][ T834] F2FS-fs (loop0): Image doesn't support compression [ 53.856357][ T834] F2FS-fs (loop0): invalid crc value [ 53.862485][ T834] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 53.876103][ T834] F2FS-fs (loop0): NAT is corrupt, run fsck to fix it [ 53.883374][ T834] F2FS-fs (loop0): Failed to initialize F2FS node manager (-22) [ 54.076332][ T797] hid-generic 0003:04F3:0755.0006: unbalanced delimiter at end of report description [ 54.080205][ T837] loop0: detected capacity change from 0 to 40427 [ 54.087603][ T797] hid-generic: probe of 0003:04F3:0755.0006 failed with error -22 [ 54.100367][ T837] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 54.107911][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.132706][ T837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 54.139620][ T839] loop4: detected capacity change from 0 to 512 [ 54.147399][ T837] F2FS-fs (loop0): Image doesn't support compression [ 54.155509][ T837] F2FS-fs (loop0): Image doesn't support compression [ 54.158264][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.165025][ T837] F2FS-fs (loop0): invalid crc value [ 54.183688][ T839] EXT4-fs: Ignoring removed bh option [ 54.193200][ T837] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 54.210081][ T839] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 54.219353][ T837] F2FS-fs (loop0): NAT is corrupt, run fsck to fix it [ 54.222061][ T839] EXT4-fs (loop4): 1 truncate cleaned up [ 54.226836][ T837] F2FS-fs (loop0): Failed to initialize F2FS node manager (-22) [ 54.232007][ T839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.279370][ T289] EXT4-fs (loop4): unmounting filesystem. [ 54.290609][ T291] usb 6-1: USB disconnect, device number 8 [ 54.324634][ T846] loop4: detected capacity change from 0 to 512 [ 54.373202][ T850] loop4: detected capacity change from 0 to 256 [ 54.383640][ T850] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 54.953076][ T467] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.072335][ T850] exFAT-fs (loop4): error, invalid size(size(12288) > aligned(9223372036854777344) [ 55.072335][ T850] [ 55.185290][ T467] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.215742][ T467] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 55.273736][ T850] exFAT-fs (loop4): Filesystem has been set read-only [ 55.323982][ T467] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 55.461341][ T467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.612319][ T467] usb 1-1: Product: syz [ 55.728230][ T467] usb 1-1: Manufacturer: syz [ 55.811564][ T467] usb 1-1: SerialNumber: syz [ 55.951279][ T875] loop5: detected capacity change from 0 to 1024 [ 55.958064][ T875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.984465][ T875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 56.013163][ T370] EXT4-fs (loop5): unmounting filesystem. [ 56.042726][ T889] loop2: detected capacity change from 0 to 2048 [ 56.047490][ T891] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.051821][ T889] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.063867][ T889] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.080430][ T889] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 56.193027][ T348] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 56.303170][ T917] loop1: detected capacity change from 0 to 16 [ 56.310197][ T917] erofs: (device loop1): mounted with root inode @ nid 36. [ 56.680752][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 56.868895][ T348] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 56.889225][ T348] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 56.905131][ T348] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 56.914820][ T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.929953][ T348] usb 5-1: Product: syz [ 56.935162][ T348] usb 5-1: Manufacturer: syz [ 56.940227][ T348] usb 5-1: SerialNumber: syz [ 56.950838][ T348] usb 5-1: config 0 descriptor?? [ 56.957928][ T869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 56.973373][ T869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 57.206073][ T869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 57.220653][ T869] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 57.463534][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.474728][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.484730][ T24] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 57.495552][ T467] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 57.503388][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.522216][ T930] loop2: detected capacity change from 0 to 128 [ 57.537859][ T348] Error reading MAC address [ 57.546309][ T467] usb 1-1: USB disconnect, device number 8 [ 57.556464][ T348] usb 5-1: USB disconnect, device number 13 [ 57.566313][ T24] usb 6-1: config 0 descriptor?? [ 57.573091][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 57.773117][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 57.781463][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.786158][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.803041][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.818854][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.832092][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 57.845484][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.849209][ T945] loop0: detected capacity change from 0 to 40427 [ 57.863282][ T947] netlink: 'syz.2.180': attribute type 5 has an invalid length. [ 57.870994][ T947] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.180'. [ 57.873426][ T945] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 57.886690][ T945] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 57.888916][ T6] usb 2-1: config 0 descriptor?? [ 57.902467][ T945] F2FS-fs (loop0): invalid crc value [ 57.940872][ T945] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 57.976571][ T945] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 57.983870][ T945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 57.990536][ T24] hid-generic 0003:04F3:0755.0007: unbalanced delimiter at end of report description [ 58.001363][ T24] hid-generic: probe of 0003:04F3:0755.0007 failed with error -22 [ 58.015239][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 58.015256][ T28] audit: type=1400 audit(1781512057.735:339): avc: denied { ioctl } for pid=944 comm="syz.0.179" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.106131][ T945] device syzkaller0 entered promiscuous mode [ 58.174922][ T288] syz-executor: attempt to access beyond end of device [ 58.174922][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.189876][ T953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.204255][ T953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.216270][ T24] usb 6-1: USB disconnect, device number 9 [ 58.243308][ T961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.264501][ T961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.271486][ T6] microsoft 0003:045E:07DA.0008: unknown main item tag 0x4 [ 58.318245][ T966] loop2: detected capacity change from 0 to 256 [ 58.325020][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input10 [ 58.347008][ T6] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 58.373115][ T28] audit: type=1400 audit(1781512058.095:340): avc: denied { mount } for pid=965 comm="syz.2.185" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 58.408390][ T28] audit: type=1400 audit(1781512058.125:341): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 58.445002][ T28] audit: type=1326 audit(1781512058.155:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99ce59 code=0x7ffc0000 [ 58.483931][ T24] usb 2-1: USB disconnect, device number 13 [ 58.492953][ T467] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 58.515123][ T28] audit: type=1326 audit(1781512058.155:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f695e99ce59 code=0x7ffc0000 [ 58.540705][ T28] audit: type=1326 audit(1781512058.155:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99ce59 code=0x7ffc0000 [ 58.559092][ T980] fido_id[980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 58.565985][ T28] audit: type=1326 audit(1781512058.155:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f695e95d68e code=0x7ffc0000 [ 58.608754][ T28] audit: type=1326 audit(1781512058.155:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f695e95d68e code=0x7ffc0000 [ 58.637415][ T28] audit: type=1326 audit(1781512058.155:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f695e95d68e code=0x7ffc0000 [ 58.662248][ T28] audit: type=1326 audit(1781512058.155:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=977 comm="syz.2.187" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99ce59 code=0x7ffc0000 [ 58.703425][ T978] loop2: detected capacity change from 0 to 8192 [ 58.748176][ T978] loop2: p1 p2 p3 p4 [ 58.753242][ T978] loop2: p1 start 51379968 is beyond EOD, truncated [ 58.759892][ T978] loop2: p2 start 4293394690 is beyond EOD, truncated [ 58.767833][ T978] loop2: p3 size 100663552 extends beyond EOD, truncated [ 58.793125][ T467] usb 5-1: Using ep0 maxpacket: 32 [ 58.802882][ T467] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 58.828464][ T978] loop2: p4 size 50331648 extends beyond EOD, truncated [ 58.836786][ T467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.893087][ T467] usb 5-1: Product: syz [ 59.060171][ T467] usb 5-1: Manufacturer: syz [ 59.178246][ T467] usb 5-1: SerialNumber: syz [ 59.493514][ T991] loop5: detected capacity change from 0 to 512 [ 59.626135][ T991] EXT4-fs: Ignoring removed bh option [ 59.657312][ T991] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 59.933066][ T348] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 59.943727][ T991] EXT4-fs (loop5): 1 truncate cleaned up [ 59.984487][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.985514][ T991] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 60.005145][ T362] udevd[362]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 60.223729][ T1004] loop0: detected capacity change from 0 to 512 [ 60.992875][ T1004] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 61.273231][ T370] EXT4-fs (loop5): unmounting filesystem. [ 61.354827][ T1010] loop4: detected capacity change from 0 to 1024 [ 61.381386][ T1010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.405139][ T1010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.413831][ T1010] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.463644][ T289] EXT4-fs (loop4): unmounting filesystem. [ 61.554143][ T467] usb 5-1: USB disconnect, device number 14 [ 61.564016][ T348] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 61.574986][ T1014] loop5: detected capacity change from 0 to 512 [ 61.593826][ T1003] loop0: detected capacity change from 0 to 1024 [ 61.600775][ T1003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.611098][ T348] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.611321][ T1014] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.194: corrupted in-inode xattr [ 61.638041][ T1003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.661795][ T1014] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.194: couldn't read orphan inode 15 (err -117) [ 61.669682][ T348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 61.683615][ T1014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 61.723723][ T1014] overlayfs: upper fs does not support tmpfile. [ 61.733004][ T348] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 61.777270][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.790474][ T370] EXT4-fs (loop5): unmounting filesystem. [ 61.797775][ T348] usb 3-1: config 0 descriptor?? [ 61.803440][ T995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.811077][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.870186][ T288] EXT4-fs (loop0): unmounting filesystem. [ 61.933011][ T291] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 61.941548][ T1025] overlayfs: './file0' not a directory [ 61.957259][ T1027] loop5: detected capacity change from 0 to 512 [ 62.065422][ T317] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.078853][ T1030] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1030 comm=syz.0.200 [ 62.124182][ T291] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 62.134435][ T291] usb 2-1: config 0 has no interface number 0 [ 62.146824][ T291] usb 2-1: config 0 interface 41 has no altsetting 0 [ 62.167391][ T291] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 62.178967][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.187314][ T291] usb 2-1: Product: syz [ 62.191760][ T291] usb 2-1: Manufacturer: syz [ 62.196676][ T291] usb 2-1: SerialNumber: syz [ 62.240030][ T291] usb 2-1: config 0 descriptor?? [ 62.319962][ T317] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.425563][ T1045] netlink: 6 bytes leftover after parsing attributes in process `syz.4.205'. [ 62.697487][ T317] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.737141][ T1027] set_capacity_and_notify: 9 callbacks suppressed [ 62.737168][ T1027] loop5: detected capacity change from 0 to 512 [ 62.753089][ T317] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.767660][ T317] Buffer I/O error on dev loop5, logical block 0, async page read [ 63.168998][ T1052] device syz_tun entered promiscuous mode [ 63.257130][ T1053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.266578][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 63.266592][ T28] audit: type=1400 audit(1781512062.985:383): avc: denied { read } for pid=1056 comm="syz.5.208" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.328433][ T1052] syz_tun: refused to change device tx_queue_len [ 63.357698][ T291] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 63.377813][ T1065] loop5: detected capacity change from 0 to 512 [ 63.385327][ T1053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.394634][ T28] audit: type=1400 audit(1781512063.015:384): avc: denied { sqpoll } for pid=1056 comm="syz.5.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.421502][ T1052] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 63.449429][ T1065] EXT4-fs: Ignoring removed bh option [ 63.463489][ T1065] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 63.502191][ T1065] EXT4-fs (loop5): 1 truncate cleaned up [ 63.510804][ T1069] loop4: detected capacity change from 0 to 512 [ 63.518574][ T1065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 63.540411][ T1069] EXT4-fs: Ignoring removed bh option [ 63.544314][ T348] usbhid 3-1:0.0: can't add hid device: -71 [ 63.551813][ T348] usbhid: probe of 3-1:0.0 failed with error -71 [ 63.565845][ T348] usb 3-1: USB disconnect, device number 15 [ 63.578898][ T1069] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 63.590548][ T1069] EXT4-fs (loop4): 1 truncate cleaned up [ 63.601498][ T1069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.620098][ T291] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 63.640354][ T370] EXT4-fs (loop5): unmounting filesystem. [ 63.646297][ T28] audit: type=1400 audit(1781512063.365:385): avc: denied { remount } for pid=1068 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.648056][ T1069] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.211: bg 0: block 465: padding at end of block bitmap is not set [ 63.677548][ T291] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 63.703588][ T291] CoreChips: probe of 2-1:0.41 failed with error -71 [ 63.711198][ T289] EXT4-fs (loop4): unmounting filesystem. [ 63.721674][ T1074] loop5: detected capacity change from 0 to 512 [ 63.721691][ T291] usb 2-1: USB disconnect, device number 14 [ 63.744847][ T28] audit: type=1400 audit(1781512063.465:386): avc: denied { map } for pid=1075 comm="syz.4.214" path="socket:[19075]" dev="sockfs" ino=19075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.769831][ T1077] netlink: 'syz.4.214': attribute type 3 has an invalid length. [ 63.778648][ T1074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 63.788832][ T1077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.804561][ T28] audit: type=1400 audit(1781512063.495:387): avc: denied { read } for pid=1075 comm="syz.4.214" path="socket:[19075]" dev="sockfs" ino=19075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.836707][ T1074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.213'. [ 63.845710][ T467] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 63.846208][ T28] audit: type=1400 audit(1781512063.555:388): avc: denied { create } for pid=1073 comm="syz.5.213" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.939068][ T370] EXT4-fs (loop5): unmounting filesystem. [ 63.953100][ T348] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 63.966145][ T28] audit: type=1400 audit(1781512063.685:389): avc: denied { write } for pid=1085 comm="syz.5.218" path="socket:[20017]" dev="sockfs" ino=20017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.002985][ T467] usb 1-1: device descriptor read/64, error -71 [ 64.034076][ T1094] loop5: detected capacity change from 0 to 128 [ 64.040728][ T1094] journal_path: Non-blockdev passed as '' [ 64.046945][ T1094] EXT4-fs: error: could not find journal device path [ 64.055336][ T362] udevd[362]: incorrect ext4 checksum on /dev/loop5 [ 64.074350][ T1096] loop5: detected capacity change from 0 to 512 [ 64.081386][ T1096] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.091127][ T1096] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 64.100303][ T1096] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 64.108879][ T1096] System zones: 0-2, 18-18, 34-34 [ 64.116143][ T1096] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.222: bad orphan inode 15 [ 64.126828][ T1096] ext4_test_bit(bit=14, block=18) = 1 [ 64.132318][ T1096] is_bad_inode(inode)=0 [ 64.136732][ T1096] NEXT_ORPHAN(inode)=2264924160 [ 64.141677][ T1096] max_ino=32 [ 64.145335][ T1096] i_nlink=0 [ 64.148828][ T1096] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #15: comm syz.5.222: corrupted inode contents [ 64.160964][ T348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.171265][ T348] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.183194][ T1096] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #15: comm syz.5.222: mark_inode_dirty error [ 64.194959][ T1096] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #15: comm syz.5.222: corrupted inode contents [ 64.207027][ T1096] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2945: inode #15: comm syz.5.222: mark_inode_dirty error [ 64.219335][ T1096] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2948: inode #15: comm syz.5.222: mark inode dirty (error -117) [ 64.232178][ T1096] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 64.241391][ T1096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 64.287451][ T348] usb 3-1: too many endpoints for config 1 interface 1 altsetting 109: 71, using maximum allowed: 30 [ 64.298652][ T348] usb 3-1: config 1 interface 1 altsetting 109 has an invalid endpoint descriptor of length 2, skipping [ 64.309847][ T348] usb 3-1: config 1 interface 1 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 71 [ 64.322979][ T348] usb 3-1: config 1 interface 1 has no altsetting 0 [ 64.344132][ T348] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.353289][ T467] usb 1-1: device descriptor read/64, error -71 [ 64.359614][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.367726][ T348] usb 3-1: Product: syz [ 64.371948][ T348] usb 3-1: Manufacturer: syz [ 64.376701][ T348] usb 3-1: SerialNumber: syz [ 64.459530][ T348] usb 3-1: bad CDC descriptors [ 64.633194][ T467] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 64.833237][ T467] usb 1-1: device descriptor read/64, error -71 [ 64.927270][ T1103] loop4: detected capacity change from 0 to 512 [ 65.131987][ T1103] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 65.147531][ T1103] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.224: corrupted in-inode xattr [ 65.176561][ T1103] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 65.192976][ T467] usb 1-1: device descriptor read/64, error -71 [ 65.209158][ T1103] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.270436][ T1103] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 65.287960][ T1103] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.224'. [ 65.301825][ T1103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1103 comm=syz.4.224 [ 65.333283][ T467] usb usb1-port1: attempt power cycle [ 65.379878][ T289] EXT4-fs (loop4): unmounting filesystem. [ 65.434078][ T1105] raw_sendmsg: syz.5.222 forgot to set AF_INET. Fix it! [ 65.479748][ T28] audit: type=1400 audit(1781512065.195:390): avc: denied { wake_alarm } for pid=1110 comm="syz.1.227" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.588859][ T28] audit: type=1400 audit(1781512065.305:391): avc: denied { map } for pid=1122 comm="syz.1.229" path="socket:[19151]" dev="sockfs" ino=19151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.653011][ T1125] loop1: detected capacity change from 0 to 256 [ 65.710260][ T370] EXT4-fs (loop5): unmounting filesystem. [ 65.727337][ T28] audit: type=1400 audit(1781512065.445:392): avc: denied { getopt } for pid=1129 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.743154][ T467] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 65.784135][ T467] usb 1-1: device descriptor read/8, error -71 [ 65.867730][ T1130] loop5: detected capacity change from 0 to 40427 [ 65.898972][ T1132] loop5: detected capacity change from 0 to 256 [ 65.910177][ T1132] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.928706][ T1132] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 65.934941][ T467] usb 1-1: device descriptor read/8, error -71 [ 65.937411][ T1132] FAT-fs (loop5): Filesystem has been set read-only [ 65.951479][ T1132] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 66.171203][ T348] usb 3-1: USB disconnect, device number 16 [ 66.232819][ T467] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 66.264458][ T467] usb 1-1: device descriptor read/8, error -71 [ 66.293867][ T1139] EXT4-fs: Ignoring removed bh option [ 66.301539][ T1139] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 66.312222][ T1139] EXT4-fs (loop4): 1 truncate cleaned up [ 66.333435][ T1139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.449185][ T467] usb 1-1: device descriptor read/8, error -71 [ 66.583271][ T467] usb usb1-port1: unable to enumerate USB device [ 66.853035][ T348] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 66.956203][ T289] EXT4-fs (loop4): unmounting filesystem. [ 67.354925][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.633393][ T1147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.656411][ T348] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 67.738857][ T348] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 67.752770][ T1147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 67.903255][ T1147] System zones: 1-12 [ 67.908702][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.917395][ T1155] set_capacity_and_notify: 2 callbacks suppressed [ 67.917411][ T1155] loop5: detected capacity change from 0 to 256 [ 67.931779][ T1147] EXT4-fs (loop0): 1 truncate cleaned up [ 67.937699][ T348] usb 3-1: Product: syz [ 67.941979][ T1147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.951090][ T348] usb 3-1: Manufacturer: syz [ 67.972982][ T348] usb 3-1: SerialNumber: syz [ 68.006569][ T1159] loop4: detected capacity change from 0 to 256 [ 68.029043][ T288] EXT4-fs (loop0): unmounting filesystem. [ 68.036044][ T1159] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 68.134974][ T1164] xt_hashlimit: size too large, truncated to 1048576 [ 68.423698][ T1174] loop5: detected capacity change from 0 to 512 [ 68.474620][ T1176] loop1: detected capacity change from 0 to 2048 [ 68.494492][ T1174] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.503940][ T1174] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.518309][ T1176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.529851][ T1176] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.563362][ T370] EXT4-fs (loop5): unmounting filesystem. [ 68.574542][ T291] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 68.605077][ T1188] syz.5.249 uses obsolete (PF_INET,SOCK_PACKET) [ 68.624562][ T1192] loop5: detected capacity change from 0 to 128 [ 68.631510][ T1192] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 68.645148][ T362] udevd[362]: incorrect ext4 checksum on /dev/loop5 [ 68.648533][ T1192] Invalid argument reading file caps for ./file0 [ 68.753011][ T291] usb 1-1: Using ep0 maxpacket: 16 [ 68.761085][ T291] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 68.770254][ T291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.778297][ T291] usb 1-1: Product: syz [ 68.782597][ T291] usb 1-1: Manufacturer: syz [ 68.787281][ T291] usb 1-1: SerialNumber: syz [ 68.822999][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 68.942986][ T797] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 68.985631][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 68.985647][ T28] audit: type=1400 audit(1781512068.705:400): avc: denied { mount } for pid=1195 comm="syz.4.252" name="/" dev="ramfs" ino=19289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.016686][ T6] usb 2-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 69.027677][ T6] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 69.036843][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.049734][ T6] usb 2-1: config 0 descriptor?? [ 69.061524][ T6] usb 2-1: bad CDC descriptors [ 69.124117][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.135307][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.145181][ T797] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 69.154333][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.170243][ T797] usb 6-1: config 0 descriptor?? [ 69.245760][ T1204] input: syz0 as /devices/virtual/input/input11 [ 69.252390][ T1207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 69.262564][ T1207] netem: change failed [ 69.295296][ T1163] loop0: detected capacity change from 0 to 8192 [ 69.303479][ T1163] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.322586][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.331817][ T1163] FAT-fs (loop0): Filesystem has been set read-only [ 69.338772][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.376093][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.386141][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.397095][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.406385][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.417133][ T348] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 69.429390][ T28] audit: type=1400 audit(1781512069.145:401): avc: denied { create } for pid=1175 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.448811][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.459944][ T6] usb 2-1: USB disconnect, device number 15 [ 69.468954][ T348] usb 3-1: USB disconnect, device number 17 [ 69.476270][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.496805][ T28] audit: type=1400 audit(1781512069.175:402): avc: denied { setopt } for pid=1175 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.506729][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.561230][ T28] audit: type=1400 audit(1781512069.255:403): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.587465][ T797] isku 0003:1E7D:319C.0009: invalid report_size -369891338 [ 69.589665][ T28] audit: type=1400 audit(1781512069.255:404): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.603943][ T797] isku 0003:1E7D:319C.0009: item 0 4 1 7 parsing failed [ 69.633973][ T1210] loop2: detected capacity change from 0 to 256 [ 69.647296][ T28] audit: type=1400 audit(1781512069.255:405): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=3372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.669990][ T797] isku 0003:1E7D:319C.0009: parse failed [ 69.678769][ T28] audit: type=1400 audit(1781512069.255:406): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.679380][ T1163] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 69.714097][ T797] isku: probe of 0003:1E7D:319C.0009 failed with error -22 [ 69.725677][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.787343][ T28] audit: type=1400 audit(1781512069.255:407): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.837853][ T348] usb 6-1: USB disconnect, device number 10 [ 69.839063][ T28] audit: type=1400 audit(1781512069.405:408): avc: denied { read } for pid=1219 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.882785][ T28] audit: type=1400 audit(1781512069.405:409): avc: denied { open } for pid=1219 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.164194][ T286] EXT4-fs (loop1): unmounting filesystem. [ 70.499480][ T1234] loop1: detected capacity change from 0 to 128 [ 71.982952][ T291] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 71.992544][ T291] usb 1-1: USB disconnect, device number 13 [ 72.175601][ T1270] loop0: detected capacity change from 0 to 512 [ 72.244275][ T1270] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.257951][ T1269] loop4: detected capacity change from 0 to 4096 [ 72.334544][ T1277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 72.347576][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.385259][ T1269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.404552][ T1269] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.449844][ T289] EXT4-fs (loop4): unmounting filesystem. [ 72.456344][ T1282] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.503154][ T1282] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.705806][ T290] EXT4-fs (loop2): unmounting filesystem. [ 72.721203][ T1277] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 72.758241][ T1277] fuse: Unknown parameter 'æ' [ 72.785339][ T1296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.803070][ T797] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 72.811794][ T1304] EXT4-fs: failed to create workqueue [ 72.837284][ T1304] EXT4-fs (loop2): mount failed [ 72.851164][ T288] EXT4-fs (loop0): unmounting filesystem. [ 72.909657][ T1299] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.940562][ T1316] set_capacity_and_notify: 5 callbacks suppressed [ 72.940580][ T1316] loop2: detected capacity change from 0 to 256 [ 72.960992][ T1299] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.276: Failed to acquire dquot type 1 [ 72.989899][ T1316] FAT-fs (loop2): Directory bread(block 64) failed [ 72.996729][ T1316] FAT-fs (loop2): Directory bread(block 65) failed [ 73.003805][ T1299] EXT4-fs (loop1): 1 truncate cleaned up [ 73.006231][ T1316] FAT-fs (loop2): Directory bread(block 66) failed [ 73.010060][ T1299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.016805][ T1316] FAT-fs (loop2): Directory bread(block 67) failed [ 73.025408][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.032390][ T1316] FAT-fs (loop2): Directory bread(block 68) failed [ 73.049167][ T1316] FAT-fs (loop2): Directory bread(block 69) failed [ 73.052733][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.056069][ T1316] FAT-fs (loop2): Directory bread(block 70) failed [ 73.056093][ T1316] FAT-fs (loop2): Directory bread(block 71) failed [ 73.056128][ T1316] FAT-fs (loop2): Directory bread(block 72) failed [ 73.056147][ T1316] FAT-fs (loop2): Directory bread(block 73) failed [ 73.099971][ T797] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 73.109130][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.133596][ T797] usb 5-1: config 0 descriptor?? [ 73.153043][ T1143] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 73.171043][ T286] EXT4-fs (loop1): unmounting filesystem. [ 73.237921][ T1328] ================================================================== [ 73.246050][ T1328] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 73.254167][ T1328] Read of size 4 at addr ffff888110560400 by task syz.5.282/1328 [ 73.261919][ T1328] [ 73.264269][ T1328] CPU: 0 PID: 1328 Comm: syz.5.282 Not tainted syzkaller #0 [ 73.271571][ T1328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 73.281687][ T1328] Call Trace: [ 73.284997][ T1328] [ 73.287956][ T1328] __dump_stack+0x21/0x24 [ 73.292320][ T1328] dump_stack_lvl+0x110/0x170 [ 73.297022][ T1328] ? __cfi_dump_stack_lvl+0x8/0x8 [ 73.302075][ T1328] ? _raw_spin_lock_bh+0x94/0xf0 [ 73.307046][ T1328] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 73.312802][ T1328] print_address_description+0x71/0x200 [ 73.318385][ T1328] print_report+0x4a/0x60 [ 73.322742][ T1328] kasan_report+0x122/0x150 [ 73.327257][ T1328] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 73.332996][ T1328] __asan_report_load4_noabort+0x14/0x20 [ 73.338658][ T1328] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 73.344217][ T1328] pppol2tp_release+0x150/0x2b0 [ 73.349085][ T1328] sock_close+0xc9/0x220 [ 73.353343][ T1328] ? __cfi_sock_close+0x10/0x10 [ 73.358219][ T1328] __fput+0x1fd/0x8f0 [ 73.362244][ T1328] ____fput+0x15/0x20 [ 73.366254][ T1328] task_work_run+0x1e1/0x250 [ 73.371924][ T1328] ? __cfi_task_work_run+0x10/0x10 [ 73.377075][ T1328] ? __kasan_check_write+0x14/0x20 [ 73.382214][ T1328] do_exit+0xa7c/0x27c0 [ 73.386405][ T1328] ? ttwu_do_wakeup+0x468/0x490 [ 73.391286][ T1328] ? __cfi_do_exit+0x10/0x10 [ 73.395909][ T1328] ? try_to_wake_up+0x6c6/0x1250 [ 73.400968][ T1328] ? __kasan_check_write+0x14/0x20 [ 73.406107][ T1328] ? _raw_spin_lock_irq+0x95/0xf0 [ 73.411155][ T1328] do_group_exit+0x21b/0x2e0 [ 73.415768][ T1328] ? __kasan_check_write+0x14/0x20 [ 73.420900][ T1328] ? recalc_sigpending+0x168/0x1c0 [ 73.426031][ T1328] get_signal+0x1382/0x14f0 [ 73.430559][ T1328] arch_do_signal_or_restart+0xd1/0x11c0 [ 73.436205][ T1328] ? do_futex+0x2bf/0x430 [ 73.440553][ T1328] ? __cfi_do_futex+0x10/0x10 [ 73.445237][ T1328] ? __kasan_check_write+0x14/0x20 [ 73.450364][ T1328] ? _raw_spin_lock_irq+0x95/0xf0 [ 73.455412][ T1328] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 73.461580][ T1328] ? __se_sys_futex+0x136/0x310 [ 73.466445][ T1328] ? __kasan_check_write+0x14/0x20 [ 73.471565][ T1328] exit_to_user_mode_loop+0x7a/0xb0 [ 73.476777][ T1328] exit_to_user_mode_prepare+0x87/0xd0 [ 73.482266][ T1328] syscall_exit_to_user_mode+0x1a/0x30 [ 73.487736][ T1328] do_syscall_64+0x58/0xa0 [ 73.492171][ T1328] ? clear_bhb_loop+0x30/0x80 [ 73.496860][ T1328] ? clear_bhb_loop+0x30/0x80 [ 73.501543][ T1328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.507485][ T1328] RIP: 0033:0x7f3fe399ce59 [ 73.511917][ T1328] Code: Unable to access opcode bytes at 0x7f3fe399ce2f. [ 73.518942][ T1328] RSP: 002b:00007f3fe483b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.527384][ T1328] RAX: 0000000000000001 RBX: 00007f3fe3c15fa8 RCX: 00007f3fe399ce59 [ 73.535359][ T1328] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fe3c15fac [ 73.543338][ T1328] RBP: 00007f3fe3c15fa0 R08: 000bf23cbb65ba6c R09: 0000000000000000 [ 73.551317][ T1328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.559298][ T1328] R13: 00007f3fe3c16038 R14: 00007ffc37c60260 R15: 00007ffc37c60348 [ 73.567292][ T1328] [ 73.570335][ T1328] [ 73.572663][ T1328] Allocated by task 1328: [ 73.577095][ T1328] kasan_set_track+0x4b/0x70 [ 73.581703][ T1328] kasan_save_alloc_info+0x1f/0x30 [ 73.586823][ T1328] __kasan_kmalloc+0x95/0xb0 [ 73.591429][ T1328] __kmalloc+0xb4/0x1e0 [ 73.595598][ T1328] l2tp_session_create+0x38/0xbd0 [ 73.600634][ T1328] pppol2tp_connect+0xbf5/0x1640 [ 73.605601][ T1328] __sys_connect+0x3da/0x460 [ 73.610198][ T1328] __x64_sys_connect+0x7a/0x90 [ 73.614968][ T1328] x64_sys_call+0x88d/0x9a0 [ 73.619479][ T1328] do_syscall_64+0x4c/0xa0 [ 73.623908][ T1328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.629819][ T1328] [ 73.632148][ T1328] Freed by task 390: [ 73.636079][ T1328] kasan_set_track+0x4b/0x70 [ 73.640713][ T1328] kasan_save_free_info+0x2b/0x40 [ 73.645785][ T1328] ____kasan_slab_free+0x132/0x180 [ 73.650914][ T1328] __kasan_slab_free+0x11/0x20 [ 73.655697][ T1328] slab_free_freelist_hook+0xc2/0x190 [ 73.661085][ T1328] __kmem_cache_free+0xb7/0x1b0 [ 73.665957][ T1328] kfree+0x6f/0xf0 [ 73.669707][ T1328] l2tp_session_put+0xaf/0x1a0 [ 73.674509][ T1328] l2tp_session_delete+0x3df/0x4d0 [ 73.679640][ T1328] l2tp_tunnel_del_work+0x199/0x410 [ 73.684857][ T1328] process_one_work+0x717/0xc30 [ 73.689716][ T1328] worker_thread+0xa4d/0x11d0 [ 73.694402][ T1328] kthread+0x281/0x320 [ 73.698480][ T1328] ret_from_fork+0x1f/0x30 [ 73.702909][ T1328] [ 73.705256][ T1328] The buggy address belongs to the object at ffff888110560400 [ 73.705256][ T1328] which belongs to the cache kmalloc-512 of size 512 [ 73.719314][ T1328] The buggy address is located 0 bytes inside of [ 73.719314][ T1328] 512-byte region [ffff888110560400, ffff888110560600) [ 73.732421][ T1328] [ 73.734752][ T1328] The buggy address belongs to the physical page: [ 73.741183][ T1328] page:ffffea0004415800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110560 [ 73.751447][ T1328] head:ffffea0004415800 order:2 compound_mapcount:0 compound_pincount:0 [ 73.759779][ T1328] flags: 0x4000000000010200(slab|head|zone=1) [ 73.765869][ T1328] raw: 4000000000010200 ffffea000441a400 dead000000000002 ffff888100042f00 [ 73.775333][ T1328] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 73.783925][ T1328] page dumped because: kasan: bad access detected [ 73.790439][ T1328] page_owner tracks the page as allocated [ 73.796202][ T1328] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 289, tgid 289 (syz-executor), ts 23814790428, free_ts 23762125101 [ 73.817420][ T1328] post_alloc_hook+0x1f5/0x210 [ 73.822217][ T1328] prep_new_page+0x1c/0x110 [ 73.826739][ T1328] get_page_from_freelist+0x2ca9/0x2d20 [ 73.832309][ T1328] __alloc_pages+0x1fa/0x610 [ 73.836918][ T1328] alloc_slab_page+0x6e/0xf0 [ 73.841518][ T1328] new_slab+0x98/0x3e0 [ 73.845594][ T1328] ___slab_alloc+0x70f/0xb70 [ 73.850201][ T1328] __slab_alloc+0x5e/0xa0 [ 73.854545][ T1328] __kmem_cache_alloc_node+0x204/0x2d0 [ 73.860017][ T1328] kmalloc_trace+0x29/0xb0 [ 73.864445][ T1328] inetdev_init+0x81/0x510 [ 73.868873][ T1328] inetdev_event+0x1f4/0x10a0 [ 73.873563][ T1328] raw_notifier_call_chain+0xa1/0x110 [ 73.878946][ T1328] call_netdevice_notifiers+0x119/0x190 [ 73.884530][ T1328] register_netdevice+0x1186/0x1550 [ 73.889745][ T1328] veth_newlink+0x66a/0xd60 [ 73.894257][ T1328] page last free stack trace: [ 73.898948][ T1328] free_unref_page_prepare+0x80c/0x820 [ 73.904419][ T1328] free_unref_page+0x93/0x530 [ 73.909129][ T1328] __free_pages+0x67/0x100 [ 73.913552][ T1328] __free_slab+0xc7/0x1a0 [ 73.917885][ T1328] __unfreeze_partials+0x15a/0x190 [ 73.923000][ T1328] put_cpu_partial+0xa9/0x100 [ 73.927686][ T1328] __slab_free+0x1c4/0x280 [ 73.932123][ T1328] ___cache_free+0xbf/0xd0 [ 73.936588][ T1328] qlist_free_all+0xc6/0x140 [ 73.941222][ T1328] kasan_quarantine_reduce+0x14a/0x170 [ 73.946687][ T1328] __kasan_slab_alloc+0x24/0x80 [ 73.951545][ T1328] slab_post_alloc_hook+0x4f/0x2d0 [ 73.956696][ T1328] __kmem_cache_alloc_node+0x194/0x2d0 [ 73.962176][ T1328] kmalloc_trace+0x29/0xb0 [ 73.966602][ T1328] ref_tracker_alloc+0x16b/0x4a0 [ 73.971554][ T1328] netdev_queue_update_kobjects+0x181/0x470 [ 73.977466][ T1328] [ 73.979795][ T1328] Memory state around the buggy address: [ 73.985425][ T1328] ffff888110560300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.993538][ T1328] ffff888110560380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.001619][ T1328] >ffff888110560400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.009685][ T1328] ^ [ 74.013756][ T1328] ffff888110560480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.021914][ T1328] ffff888110560500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.029990][ T1328] ================================================================== [ 74.039868][ T1328] Disabling lock debugging due to kernel taint [ 74.058099][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 74.058122][ T28] audit: type=1400 audit(1781512073.775:434): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 74.087364][ T1143] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.112859][ T1328] ------------[ cut here ]------------ [ 74.118415][ T1328] WARNING: CPU: 1 PID: 1328 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 74.128660][ T1328] Modules linked in: [ 74.132588][ T1328] CPU: 1 PID: 1328 Comm: syz.5.282 Tainted: G B syzkaller #0 [ 74.141439][ T1328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 74.151579][ T1328] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 74.157217][ T28] audit: type=1400 audit(1781512073.805:435): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.157964][ T1328] Code: 5d c3 e8 3c c2 d5 fc be 02 00 00 00 eb 0a e8 30 c2 d5 fc be 01 00 00 00 4c 89 f7 e8 03 21 cd fd e9 0f ff ff ff e8 19 c2 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 c2 d5 fc 4c 89 f7 be 03 [ 74.198942][ T1328] RSP: 0018:ffffc9000599f7f0 EFLAGS: 00010293 [ 74.205066][ T1328] RAX: ffffffff849b9307 RBX: ffff8881314f1000 RCX: ffff88810d643cc0 [ 74.209837][ T28] audit: type=1400 audit(1781512073.805:436): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.213113][ T1328] RDX: 0000000000000000 RSI: 0000000018d2da00 RDI: 000000000c04eb7d [ 74.213128][ T1328] RBP: ffffc9000599f810 R08: ffffffff87b747e7 R09: 1ffffffff0f6e8fc [ 74.213143][ T1328] R10: dffffc0000000000 R11: fffffbfff0f6e8fd R12: dffffc0000000000 [ 74.213159][ T1328] R13: dffffc0000000000 R14: 0000000018d2da00 R15: ffff888110560400 [ 74.246138][ T28] audit: type=1400 audit(1781512073.805:437): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.250375][ T1328] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 74.258794][ T28] audit: type=1400 audit(1781512073.805:438): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.266386][ T1328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.266404][ T1328] CR2: 00007f3fe47d7ff8 CR3: 0000000133053000 CR4: 00000000003526a0 [ 74.266422][ T1328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.266434][ T1328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.266447][ T1328] Call Trace: [ 74.266452][ T1328] [ 74.266460][ T1328] pppol2tp_release+0x150/0x2b0 [ 74.266490][ T1328] sock_close+0xc9/0x220 [ 74.287273][ T28] audit: type=1400 audit(1781512073.815:439): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.296052][ T1328] ? __cfi_sock_close+0x10/0x10 [ 74.326402][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.331099][ T1328] __fput+0x1fd/0x8f0 [ 74.331134][ T1328] ____fput+0x15/0x20 [ 74.354356][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.358236][ T1328] task_work_run+0x1e1/0x250 [ 74.371606][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.385381][ T1328] ? __cfi_task_work_run+0x10/0x10 [ 74.394152][ T28] audit: type=1400 audit(1781512073.815:440): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.397220][ T1328] ? __kasan_check_write+0x14/0x20 [ 74.413633][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.416756][ T1328] do_exit+0xa7c/0x27c0 [ 74.435005][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.451334][ T1328] ? ttwu_do_wakeup+0x468/0x490 [ 74.475111][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.479398][ T1328] ? __cfi_do_exit+0x10/0x10 [ 74.487117][ T797] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 74.490974][ T1328] ? try_to_wake_up+0x6c6/0x1250 [ 74.501126][ T797] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 74.502883][ T1328] ? __kasan_check_write+0x14/0x20 [ 74.502933][ T1328] ? _raw_spin_lock_irq+0x95/0xf0 [ 74.524192][ T1328] do_group_exit+0x21b/0x2e0 [ 74.528824][ T1328] ? __kasan_check_write+0x14/0x20 [ 74.533978][ T1328] ? recalc_sigpending+0x168/0x1c0 [ 74.539120][ T1328] get_signal+0x1382/0x14f0 [ 74.543677][ T1328] arch_do_signal_or_restart+0xd1/0x11c0 [ 74.549346][ T1328] ? do_futex+0x2bf/0x430 [ 74.553736][ T1328] ? __cfi_do_futex+0x10/0x10 [ 74.558445][ T1328] ? __kasan_check_write+0x14/0x20 [ 74.563619][ T1328] ? _raw_spin_lock_irq+0x95/0xf0 [ 74.568668][ T1328] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.574870][ T1328] ? __se_sys_futex+0x136/0x310 [ 74.579746][ T1328] ? __kasan_check_write+0x14/0x20 [ 74.583748][ T797] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 74.584915][ T1328] exit_to_user_mode_loop+0x7a/0xb0 [ 74.598162][ T1328] exit_to_user_mode_prepare+0x87/0xd0 [ 74.603671][ T1328] syscall_exit_to_user_mode+0x1a/0x30 [ 74.609166][ T1328] do_syscall_64+0x58/0xa0 [ 74.613640][ T1328] ? clear_bhb_loop+0x30/0x80 [ 74.618354][ T1328] ? clear_bhb_loop+0x30/0x80 [ 74.623089][ T1328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.629019][ T1328] RIP: 0033:0x7f3fe399ce59 [ 74.633502][ T1328] Code: Unable to access opcode bytes at 0x7f3fe399ce2f. [ 74.640533][ T1328] RSP: 002b:00007f3fe483b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.648997][ T1328] RAX: 0000000000000001 RBX: 00007f3fe3c15fa8 RCX: 00007f3fe399ce59 [ 74.657044][ T1328] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fe3c15fac [ 74.665086][ T1328] RBP: 00007f3fe3c15fa0 R08: 000bf23cbb65ba6c R09: 0000000000000000 [ 74.673107][ T1328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.681108][ T1328] R13: 00007f3fe3c16038 R14: 00007ffc37c60260 R15: 00007ffc37c60348 [ 74.689158][ T1328] [ 74.692204][ T1328] ---[ end trace 0000000000000000 ]--- [ 74.698296][ T1143] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.707438][ T1143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.715616][ T1143] usb 1-1: SerialNumber: syz [ 75.130489][ T1143] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 75.141048][ T1143] usb 1-1: USB disconnect, device number 14 [ 75.296661][ T1290] loop4: detected capacity change from 0 to 40427 [ 75.303903][ T1290] F2FS-fs (loop4): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 75.311867][ T1290] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.320877][ T1290] F2FS-fs (loop4): invalid crc value [ 75.327743][ T1290] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.365742][ T1290] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 75.372828][ T1290] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.388441][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.397258][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.405773][ T797] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 75.419231][ T797] usb 5-1: USB disconnect, device number 15 [ 75.439986][ T1340] fido_id[1340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 75.916174][ T289] syz-executor: attempt to access beyond end of device [ 75.916174][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427