last executing test programs: 28.025048899s ago: executing program 2 (id=42): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 27.97448549s ago: executing program 2 (id=43): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) io_setup(0x5, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 27.937675281s ago: executing program 2 (id=44): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x50) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 27.779840795s ago: executing program 2 (id=45): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setresgid(0xee00, 0xee01, 0x0) r0 = getegid() r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) setfsgid(r0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x3808084, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlink(&(0x7f0000000180)='./file1\x00') 27.614365409s ago: executing program 2 (id=46): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000640)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x2900}}, 0x1006) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) 27.493681182s ago: executing program 2 (id=47): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001c00)='./file2\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b801000038000000640200000a0400000f002000020005"], 0xa78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 27.493580852s ago: executing program 32 (id=47): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001c00)='./file2\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460502028d04000000000000000300060004400000b801000038000000640200000a0400000f002000020005"], 0xa78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 27.007507024s ago: executing program 5 (id=48): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fstat(r0, &(0x7f0000005d00)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 26.932252135s ago: executing program 5 (id=52): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0x40, 0xfff, 0x5, 0x831a, 0x3, "040000000000e7ffffc73cfdf7ff000800", 0x26, 0x42c}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 26.885832887s ago: executing program 5 (id=56): syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1}}}}}]}}, 0x0) rt_sigqueueinfo(0x0, 0x38, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2ca, &(0x7f00000009c0)="$eJzs3UFrHFUcAPD/bHZnt/Gwe/AkggN68FSaXr1skBSKe1JyUA8abAuSBKGFQCs4ePLqxaOfQBC8+SW8CH4AwQ/gzR4KT2Z2xp2mu5ssdBu1v99h88+893/v/2ZfNglhXz59/fT4ThH3vi5/j9Eoi940pvE4i0n0opVSSrEw/TYAgP+yxynFn2nukinT6iGLiNF2SwMAtmTj7/8/bb0kAGDLPvjwo/f2Z7OD94tiFLdOvzk7rH6zrz7O2/fvxedxEnfjRozjyfxvAe1PC9XjrZRS2S8qk3jrtDw7rDJPP/mlGX+/nWgvxjGpo6fzb88O9oq5Tn5Z1bHbzD+t5r8Z43h1yfy3Zwc3l+THYR5vv9mp/3qM49fP4os4iTt1EYv8r/aK4t303V9fflyVV+Vn5dnhsO63kHZe3LMCAAAAAAAAAAAAAAAAAAAAAMD/3fXm7Jxh1Of3VJea83d2nlSfDKJoTZ4+n2een7UDnTsfqEzxfUrDfsTs4EZRFKnpuMjvx2v96F/NqgEAAAAAAAAAAAAAAAAAAODf5cHDR8dHJyd37y8JftuNWNG0ImhPA2jf1n9B1s6qpmnnyhvx6PhouHrATlOvCddMGjttnyzi4e6a5UR/0I482egmbB5cW1XzDz9uOuDo4j6Ddffn+QTt7jo+yuKfpl5nsw2j7Txqn9Ofu+Pkccm58lVN6eLt1wnypU3jjdeev1IH5Zo+ka0r7J0/5neuuZKdX0Ve39Wl6YP6NI5BN/3c3ohNlvPsa0VWf1nnz/X1BwAAAAAAAAAAAAAAAAAAWFi86feZpmsXpPbScGtlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMALtfj//xsEZZN8ic553H9wxUsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJfB3AAAA//+HPVT/") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwrite64(r1, 0x0, 0x0, 0x200) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_OPEN(r1, &(0x7f0000009a40)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x20) 24.567602053s ago: executing program 5 (id=78): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ea765f10520c2da052f00102030109021b0001063b020309050b0340000a0a0d0000000000000000"], 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x79e, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000200)='\f', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0xfffffeb1) fadvise64(r0, 0xfe53, 0x0, 0x4) r3 = syz_open_dev$vcsa(0x0, 0x1, 0x102) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0'}, 0xb) syz_usb_connect(0x5, 0x3f0, &(0x7f0000000740)=ANY=[@ANYBLOB="120150026de38c105e040f04767f010203010902de03020008800c0904b4800b78cc00100905800220000705050905090420000382040725010c800500ee218a6c3b3be8b8656f1c5ddcccfc47745e6ad0c9355f7c99ad4179c4046b4c15165985aa83433001f46dd9d2587fb7ab02f503c7ba60f5c7c3ba1afca9eb5af8953cdeef5fc3661152226d6c7db7dac21f3fb57a2b2860b79d77d194af7756e735acc73bbbf5fc202d961d5dbf3654eed781032e9a5b7fe8457dd29bcdb0f49d3363c9dbfb0abebdd913065c048fc00d7bc9a4f1233049aca8ae91f9c6b5c84a6ed160431ad749ebe770249571f4d467e54bf527662937f114290e9753b97970597b73ba77d620c25eb1a065fe7cac2f44d2819cb2ce63d8dd99df1c76a4e183af31171d873ef621add13cffee09050003ff033b800809050900d701060801c823cd1a4d929c132722a8c5fe391396de46073eab822b6e23161313ee736aba03387a14a485964d2be447791fc9a8eaaa5ff096fd0b65b3dc4cc406f13e1cab2a6da0efc8519d49a993ef6750078e1abcdbb7837ab7cec7b1d1699014f5a83ab3bb856c090e09000000074181bb2c6a18fb19f83b596d205535e27ccc9b6bcae5958d3bba0e5f4830c2796f93a78c4b07000a535a36451186ab2c53f5c5c4bcded44a2ded30d7e9d66b4e41664a83b4d6031985b1eaeb0c66d83763529c7930e2881f13ea3079c0090580004000810204090505004000053e880725010405020009050802ff0106370284312435f4ffc1b87641804e96b5d0ba9dd949bdd4562d63a4b783b293116d4d0963faf3e91351189572da7a34d904f4d6fc91ac83fdd2fa3be73436f8fb7d86d8d5303283514da8e033f74e6a4182cbffd98cd2bfb9bd1690695469de3175404b0b615780e93a64d32e564103cf5fbe33affa5585ca5a9dee1e116020967f1adf3a2c0009050f10ff0304070807250100fd0400132da85dc8b3b55399d99ee56f26d38c4356840905060c0004ffb805072501000700040725010cbe040009050802200000b30c0905031b10006c09fd30088afc1df3d438efd2285835084050c7a7fcb65540309dc19b9a67961847183d10d336eb176adaca15f7638e76e3250725010c40060009044cdc0203400b0709050f0010000b06011423cf5f2f251d1ad5d1cabe6ceab319a5080fc63810c05c8e06310edf016994067d22f2cea30f37611023d33868b367bf93b2ee090d9ca5940a464c9ba0993cbbd389fd8309f0e9"], &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x4, 0xb, 0x8c, 0x161}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}}) 24.417997386s ago: executing program 5 (id=80): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x3c, r0, 0x801, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "645b63949c"}]}, 0x3c}}, 0x0) 24.383019257s ago: executing program 33 (id=80): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x3c, r0, 0x801, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "645b63949c"}]}, 0x3c}}, 0x0) 3.387268838s ago: executing program 6 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) 3.355280578s ago: executing program 6 (id=328): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)=0xd4) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_clone(0x5b800080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fff0000}, {0x3, 0x7f, 0x1, 0x8}, {0x6, 0x81, 0xd, 0x6}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.85213174s ago: executing program 4 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 2.708543614s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 2.558149198s ago: executing program 1 (id=336): socket(0x10, 0x80002, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.414866281s ago: executing program 6 (id=338): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 2.095619349s ago: executing program 6 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = open(0x0, 0x167842, 0x1fb) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000300012800b00010067656e65766500002000028014001200fc0100000000000000000000000000000800011504000000"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000040)=0xf, 0x4) 1.942595293s ago: executing program 4 (id=342): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_gettime(0x9f958be980f4f906, 0x0) 1.864577835s ago: executing program 4 (id=344): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.784285067s ago: executing program 4 (id=345): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.754425557s ago: executing program 0 (id=346): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0xfffe, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "c91bf7df9dd0b84f608fbedda7424a9d10a6942270a7082ce92a61700d89985b", "d94d0434e1c1f6eca9d69cfbce50ab04", {"7af01cefca63087a6c8adedf3c94cf6e", "5134f91f2ed8d67f9c790bdc908862fc"}}}}}}}, 0x0) 1.739793927s ago: executing program 0 (id=347): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.684309919s ago: executing program 3 (id=348): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)=0xd4) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_clone(0x5b800080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.680611089s ago: executing program 0 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x104) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.375541666s ago: executing program 0 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000083900000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0xc0) 1.314748518s ago: executing program 0 (id=351): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x10, 0x800000000000000, 0xffffff7ffffffffd, 0xb, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0) 1.314275038s ago: executing program 1 (id=352): r0 = socket$inet6(0xa, 0x80002, 0x88) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x2a04009, &(0x7f00000002c0)=ANY=[], 0x0, 0x2fe, &(0x7f0000032680)="$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") bind$vsock_stream(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.192362921s ago: executing program 6 (id=353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5c}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 1.192161021s ago: executing program 6 (id=354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000140)=0x2) 949.191237ms ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 869.147479ms ago: executing program 3 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}, 0x44}], 0x1, 0x20, 0x0) 816.41806ms ago: executing program 3 (id=357): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130) pwrite64(r0, 0x0, 0x0, 0x8080c61) 816.22416ms ago: executing program 3 (id=358): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) waitid(0x0, 0x0, 0x0, 0x2100000a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4008080) 465.044318ms ago: executing program 1 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x18, r1, 0x309, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 451.235379ms ago: executing program 1 (id=360): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$eJzs3c9vG1UeAPDv2EmaNNUmjVa72z1sI61WrbTbpEnbVYQ4tFdUReWHuMCB0KSlNG2jJghSkJpK5YKEuCCExIkD5b+Ail57ghMHLpxQpQhQuSFhZHsmiRM7P5zEU3U+H8n1zHuevO80+Xpmnt8bB1BYw9V/ShFHImIuiRhIllbquiKtHK6/7vGv712sPpKoVF78eSiStCx7fZI+96cb90bEt98kMVTe2O784q2rU7OzMzfT9dGFa3Oj84u3Tly5NnV55vLM9fH/j0+cOX1mYuxkW/t1e2PRb+fvvvn2wAeTr3zx2e/J2Jc/TCZxNp5LX7h2P/bKcAzX/k+SjVX9E3vdWE7K6d9JpVKpZGVJV74xsX3Z7687Iv4eA1GO1V/eQLz/fK7BAfuqktTfu4EiStrK/769DwTosOw8ILu2X38dXMrlrATohOVz9Q6AjfnfVe8bjN5a38DBx0ms7dZJIqK9nrlGhyLi4YPJu5ceTN6NfeqHA5pbuhMR/2iW/0kt/wejNwZr+V9qyP/qecGF9Lla/kKb7a/vKpb/0Dn1/O/dNP+jRf6/Vn2+Xc/h19tqvXftyht9Dfnf1+4uAQAAAAAAQGHdPxcR/1v5/L9n9fO30sr4n2gy/qc/Is7uQfvD69Y3fv5ferQHzQBNLJ+LeLbp+N9SNvp3sLxmCutgdCeXrszOnIyIv0TE8eg+UF0f26SNEx8Ofdqqbjgd/5c9qu0/TMcCpnE86jrQuM301MLULnYZSC3fifI/m47/TVaO/0mT43/1nWFum20M/efehVZ1W+c/sF8qn0cca3r8X71rRbL5/TlGa+cDo9lZwUb/evejr1q1327+u8UE7N7ynYiDm+f/YLL2fj3zO2/j1GJXpVVdu+f/PclLtbsK9aRl70wtLNwci+hJzperpQ3l4zuPGZ5GWT5k+VLN/+P/Xs3/cpP+v2bn/30RsbTuZye/NM4pzvztj/4fW8Xj/B/yU83/6R0d/3e+MH5v8OtW7W/v+H+6dqw/npbo/4O6T7I07eluKG+Sjl3NqjoeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BUoRcSiS0sjKcqk0MhLRHxF/jYOl2RvzC/+9dOOt69PVutr3/5eyb/odqK8n2ff/D65ZH1+3fioiDkfEx+W+2vrIxRuz03nvPAAAAAAAAAAAAAAAAAAAADwh+lvM/6/6qZx3dMC+68o7ACA3TfL/uzziADrP8R+KS/5Dccl/KC75D8Ul/6G4Ns//Vyc6FgjQcY7/UFzyHwAAAAAAniqHj97/PomIpWf6ao+qnrSuO9fIgP1WyjsAIDdu8QPFZegPFJdrfCDZor635UZbbbmZuYu72BgAAAAAAAAAAAAACufYEfP/oajM/4fiMv8fiiub/3805ziAznOND8QWM/mbzv/fcqs1XGgAAAAAAAAAAAAAwK7NL966OjU7O3PTwsttbJWNas49+PYWKpXK7Wr4T0o8e7+QpCPUO9JoNhS+83vas50dzOb6be8nb3yvONCh9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRnwEAAP//4Fgg0g==") openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x9}) close_range(r1, 0xffffffffffffffff, 0x0) 289.054503ms ago: executing program 3 (id=361): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 251.741744ms ago: executing program 1 (id=362): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x3544e, 0x0) 86.334378ms ago: executing program 1 (id=363): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000000)={0x2, 0x3}) pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) 270.22µs ago: executing program 4 (id=364): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x1219, 0xbc0a, 0x1, &(0x7f0000000080)={[0x4]}, 0x8) 0s ago: executing program 3 (id=365): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x5, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xa}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e6f1099, 0x6, 0x1, 0xbe, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.158' (ED25519) to the list of known hosts. [ 21.139533][ T30] audit: type=1400 audit(1786409912.479:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.140641][ T277] cgroup: Unknown subsys name 'net' [ 21.162380][ T30] audit: type=1400 audit(1786409912.479:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.190164][ T30] audit: type=1400 audit(1786409912.509:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.190320][ T277] cgroup: Unknown subsys name 'devices' [ 21.360558][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.366315][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.473243][ T30] audit: type=1400 audit(1786409912.809:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.497002][ T30] audit: type=1400 audit(1786409912.809:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.521900][ T30] audit: type=1400 audit(1786409912.809:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.527862][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.556578][ T30] audit: type=1400 audit(1786409912.889:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.582263][ T30] audit: type=1400 audit(1786409912.889:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.608997][ T30] audit: type=1400 audit(1786409912.949:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.609484][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.634857][ T30] audit: type=1400 audit(1786409912.949:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.227615][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.234826][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.242312][ T285] device bridge_slave_0 entered promiscuous mode [ 22.249308][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.256918][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.264541][ T285] device bridge_slave_1 entered promiscuous mode [ 22.334475][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.341593][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.349080][ T287] device bridge_slave_0 entered promiscuous mode [ 22.355789][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.363488][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.370890][ T286] device bridge_slave_0 entered promiscuous mode [ 22.383081][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.390258][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.397652][ T287] device bridge_slave_1 entered promiscuous mode [ 22.404282][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.411360][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.418815][ T286] device bridge_slave_1 entered promiscuous mode [ 22.437579][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.444666][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.452308][ T289] device bridge_slave_0 entered promiscuous mode [ 22.461970][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.469981][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.477395][ T289] device bridge_slave_1 entered promiscuous mode [ 22.593688][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.601266][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.611517][ T288] device bridge_slave_0 entered promiscuous mode [ 22.639846][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.647175][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.655300][ T288] device bridge_slave_1 entered promiscuous mode [ 22.676332][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.683404][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.690706][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.697850][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.751159][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.758346][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.765654][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.772716][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.781392][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.788447][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.795753][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.802860][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.858211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.866365][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.873837][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.881416][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.891632][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.898931][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.906108][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.929116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.937379][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.944532][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.952066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.960454][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.967491][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.975470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.983068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.990567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.999119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.007414][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.014454][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.021883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.030851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.039165][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.046391][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.071133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.079304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.087579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.095271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.103907][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.110957][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.118876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.127218][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134299][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.141704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.150019][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.157043][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.164482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.172776][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.179981][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.187404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.195396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.205598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.218085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.247877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.255880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.263874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.272385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.280632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.289308][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.296479][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.303940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.312597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.327657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.336163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.344581][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.351720][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.369281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.378959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.387310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.395774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.406583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.415001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.423780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.432122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.443955][ T285] device veth0_vlan entered promiscuous mode [ 23.455853][ T289] device veth0_vlan entered promiscuous mode [ 23.462117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.470805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.479628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.487602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.495913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.503963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.512214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.520535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.528524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.536191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.543823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.551561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.559018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.566432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.575370][ T287] device veth0_vlan entered promiscuous mode [ 23.587098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.595468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.606073][ T285] device veth1_macvtap entered promiscuous mode [ 23.614696][ T286] device veth0_vlan entered promiscuous mode [ 23.622149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.630677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.639066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.646696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.654704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.663597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.671562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.682907][ T289] device veth1_macvtap entered promiscuous mode [ 23.692139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.700408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.708479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.717015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.725801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.735508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.743832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.759090][ T287] device veth1_macvtap entered promiscuous mode [ 23.769541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.777198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.785408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.793967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.803203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.811529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.819800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.827881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.836326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.859508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.868369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.868431][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 23.877052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.893740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.902354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.911170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.920382][ T286] device veth1_macvtap entered promiscuous mode [ 23.957767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.975251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.984266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.993232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.001116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.010511][ T288] device veth0_vlan entered promiscuous mode [ 24.021631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.031084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.053132][ T317] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 24.065400][ T288] device veth1_macvtap entered promiscuous mode [ 24.073060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.081629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.091128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.099543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.107836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.120254][ T317] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 24.158726][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.171168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.180783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.189416][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.226015][ T323] loop4: detected capacity change from 0 to 4096 [ 24.237771][ T325] loop3: detected capacity change from 0 to 512 [ 24.248738][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.266085][ T327] loop2: detected capacity change from 0 to 1024 [ 24.303113][ T327] ======================================================= [ 24.303113][ T327] WARNING: The mand mount option has been deprecated and [ 24.303113][ T327] and is ignored by this kernel. Remove the mand [ 24.303113][ T327] option from the mount to silence this warning. [ 24.303113][ T327] ======================================================= [ 24.341347][ T323] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.363061][ T325] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 24.380983][ T325] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.411667][ T327] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 24.450921][ T327] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,data_err=ignore,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 24.472572][ T327] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.494156][ T325] syz.3.4 (325) used greatest stack depth: 22592 bytes left [ 24.508880][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 24.538778][ T327] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 24.546232][ T327] EXT4-fs warning (device loop2): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 24.640533][ T346] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.658641][ T6] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.678994][ T6] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.699985][ T6] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 24.728880][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 24.735658][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 24.758608][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.769380][ T6] usb 1-1: config 0 descriptor?? [ 24.830067][ T352] loop2: detected capacity change from 0 to 128 [ 24.916642][ T352] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,user_xattr,,errors=continue. Quota mode: none. [ 24.934948][ T352] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.968642][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.058671][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.168008][ T356] loop2: detected capacity change from 0 to 512 [ 25.209054][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 25.240355][ T6] wacom 0003:056A:0002.0001: unbalanced collection at end of report description [ 25.250422][ T6] wacom 0003:056A:0002.0001: parse failed [ 25.256336][ T6] wacom: probe of 0003:056A:0002.0001 failed with error -22 [ 25.266599][ T358] 9pnet: p9_errstr2errno: server reported unknown error @cDB| [ 25.310031][ T356] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 25.322759][ T356] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 25.338801][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 25.370353][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 25.381683][ T356] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.15: directory missing '.' [ 25.387585][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.402149][ T39] usb 4-1: config 0 descriptor?? [ 25.473817][ T60] usb 1-1: USB disconnect, device number 2 [ 25.480957][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.492352][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.503707][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.523627][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.533247][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.542429][ T20] usb 5-1: config 0 descriptor?? [ 25.598699][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.830362][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.880231][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0xd [ 25.887297][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0xd [ 25.894382][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x7 [ 25.901425][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x4 [ 25.908475][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.916448][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.923577][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.931785][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.939809][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.946875][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.953933][ T39] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 25.961735][ T39] wacom 0003:056A:0057.0002: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.3-1/input0 [ 25.968753][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.987683][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.000939][ T20] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 26.009212][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.025044][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.034769][ T20] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 26.050579][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.063039][ T6] usb 2-1: config 0 descriptor?? [ 26.068956][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 26.119192][ T291] usb 4-1: USB disconnect, device number 2 [ 26.188755][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.199748][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.209886][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.219440][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.228208][ T26] usb 3-1: config 0 descriptor?? [ 26.269352][ T26] hub 3-1:0.0: USB hub found [ 26.478699][ T26] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 26.529438][ T6] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 26.538351][ T6] plantronics 0003:047F:FFFF.0004: hiddev97,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 26.699276][ T291] usb 5-1: USB disconnect, device number 2 [ 26.748085][ T6] usb 2-1: USB disconnect, device number 2 [ 26.883207][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 26.883222][ T30] audit: type=1400 audit(1786409918.219:146): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 26.927809][ T30] audit: type=1400 audit(1786409918.259:147): avc: denied { ioctl } for pid=382 comm="syz.0.24" path="socket:[15958]" dev="sockfs" ino=15958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.958222][ T26] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 27.278740][ T26] usb 3-1: USB disconnect, device number 2 [ 27.328638][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.407542][ T394] loop4: detected capacity change from 0 to 512 [ 27.460461][ T394] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 27.596017][ T30] audit: type=1400 audit(1786409918.819:148): avc: denied { mount } for pid=389 comm="syz.4.27" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.688765][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.814566][ T30] audit: type=1400 audit(1786409918.899:149): avc: denied { read write } for pid=389 comm="syz.4.27" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.418560][ C0] sched: RT throttling activated [ 28.430641][ T30] audit: type=1400 audit(1786409918.899:150): avc: denied { open } for pid=389 comm="syz.4.27" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.440690][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.455719][ T30] audit: type=1400 audit(1786409919.139:151): avc: denied { create } for pid=395 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.486681][ T26] usb 2-1: config 0 has no interfaces? [ 28.492746][ T26] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 28.501991][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.514528][ T26] usb 2-1: config 0 descriptor?? [ 28.546036][ T30] audit: type=1400 audit(1786409919.149:152): avc: denied { setopt } for pid=395 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.572728][ T405] loop2: detected capacity change from 0 to 512 [ 28.582510][ T30] audit: type=1400 audit(1786409919.149:153): avc: denied { ioctl } for pid=395 comm="syz.3.29" path="socket:[16391]" dev="sockfs" ino=16391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.610371][ T30] audit: type=1400 audit(1786409919.149:154): avc: denied { write } for pid=395 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.631292][ T30] audit: type=1400 audit(1786409919.879:155): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.668596][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 28.696698][ T405] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 28.715425][ T405] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.798898][ T6] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.812750][ T6] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.832024][ T420] event trace: Could not enable event p [ 28.878672][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.879657][ T425] loop2: detected capacity change from 0 to 1024 [ 28.949726][ T425] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.39: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.958986][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.974375][ T6] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 28.974393][ T425] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.39: Failed to acquire dquot type 0 [ 28.983358][ T6] usb 1-1: Product: syz [ 28.995176][ T425] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.39: Freeing blocks not in datazone - block = 0, count = 4096 [ 28.999147][ T6] usb 1-1: Manufacturer: syz [ 29.012648][ T425] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.39: Invalid inode bitmap blk 0 in block_group 0 [ 29.031272][ T45] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 29.031356][ T425] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 29.055230][ T6] hub 1-1:4.0: USB hub found [ 29.060182][ T45] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 29.060486][ T425] EXT4-fs (loop2): 1 orphan inode deleted [ 29.078661][ T425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; nodiscard,discard,grpquota,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 29.128658][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 29.137925][ T432] UDC core: couldn't find an available UDC or it's busy: -16 [ 29.146328][ T432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.206192][ T436] SELinux: failed to load policy [ 29.218615][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.231423][ T438] loop2: detected capacity change from 0 to 512 [ 29.269661][ T6] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 29.288730][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.290474][ T438] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 29.314027][ T438] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.354176][ T438] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.44: Invalid block bitmap block 0 in block_group 0 [ 29.427534][ T442] loop2: detected capacity change from 0 to 256 [ 29.459335][ T442] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.471020][ T442] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 29.481602][ T442] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 29.498653][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 29.528733][ T26] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 29.544016][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.552501][ T26] usb 4-1: Manufacturer: ᰉ [ 29.557205][ T26] usb 4-1: SerialNumber: syz [ 29.610649][ T286] syz-executor (286) used greatest stack depth: 22056 bytes left [ 29.648713][ T20] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 29.666137][ T20] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.677987][ T20] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 29.691799][ T20] usb 5-1: config 0 interface 0 has no altsetting 0 [ 29.698527][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 29.708463][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.718092][ T20] usb 5-1: config 0 descriptor?? [ 29.726370][ T367] usb 1-1: USB disconnect, device number 3 [ 29.736956][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.744410][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.752486][ T444] device bridge_slave_0 entered promiscuous mode [ 29.761791][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.769356][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.777157][ T444] device bridge_slave_1 entered promiscuous mode [ 29.831716][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.840666][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.851957][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.860375][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.868981][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.876037][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.883645][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.894705][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.903509][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.912300][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.918779][ T26] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 29.919388][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.943388][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.952968][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.967753][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.982595][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.990642][ T26] usb 4-1: unit 37 not found! [ 29.995559][ T26] usb 4-1: unit 0 not found! [ 29.996219][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.007827][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.018701][ T444] device veth0_vlan entered promiscuous mode [ 30.028654][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.044606][ T444] device veth1_macvtap entered promiscuous mode [ 30.067044][ T26] usb 4-1: USB disconnect, device number 3 [ 30.084805][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.099196][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.149861][ T8] device bridge_slave_1 left promiscuous mode [ 30.156133][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.187509][ T456] usb usb8: usbfs: process 456 (syz.0.51) did not claim interface 8 before use [ 30.196884][ T8] device bridge_slave_0 left promiscuous mode [ 30.206190][ T20] lg-g15 0003:046D:C227.0006: unknown main item tag 0x3 [ 30.229579][ T20] lg-g15 0003:046D:C227.0006: ignoring exceeding usage max [ 30.238272][ T20] lg-g15 0003:046D:C227.0006: item fetching failed at offset 22/23 [ 30.247517][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.255024][ T464] loop0: detected capacity change from 0 to 512 [ 30.257386][ T20] lg-g15: probe of 0003:046D:C227.0006 failed with error -22 [ 30.279674][ T464] FAT-fs (loop0): count of clusters too big (3932158) [ 30.286616][ T464] FAT-fs (loop0): Can't find a valid FAT filesystem [ 30.286943][ T8] device veth1_macvtap left promiscuous mode [ 30.303631][ T6] usb 2-1: USB disconnect, device number 3 [ 30.312852][ T8] device veth0_vlan left promiscuous mode [ 30.370534][ T468] SELinux: failed to load policy [ 30.747368][ T314] usb 5-1: USB disconnect, device number 3 [ 30.807633][ T487] loop1: detected capacity change from 0 to 16 [ 30.830434][ T487] erofs: (device loop1): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffc [ 30.888716][ T20] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.209986][ T397] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 31.273835][ T497] loop4: detected capacity change from 0 to 16 [ 31.280953][ T497] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.291636][ T497] attempt to access beyond end of device [ 31.291636][ T497] loop4: rw=524288, want=32, limit=16 [ 31.303508][ T497] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 31.366470][ T499] loop4: detected capacity change from 0 to 512 [ 31.408780][ T20] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 31.417927][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.424410][ T499] FAT-fs (loop4): count of clusters too big (3932158) [ 31.428856][ T20] usb 6-1: Product: syz [ 31.437154][ T20] usb 6-1: Manufacturer: syz [ 31.437874][ T499] FAT-fs (loop4): Can't find a valid FAT filesystem [ 31.442202][ T20] usb 6-1: SerialNumber: syz [ 31.498715][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.506287][ T291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.598920][ T397] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.609723][ T397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.891046][ T466] loop5: detected capacity change from 0 to 256 [ 31.910884][ T466] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.933942][ T466] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.950677][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 31.950693][ T30] audit: type=1400 audit(1786409923.289:203): avc: denied { mounton } for pid=465 comm="syz.5.56" path="/2/file0/bus" dev="loop5" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 32.088776][ T291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.099142][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.109690][ T397] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.118883][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.121081][ T20] usb 6-1: USB disconnect, device number 2 [ 32.128600][ T397] usb 1-1: Product: syz [ 32.137109][ T26] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.146113][ T291] usb 4-1: config 0 has no interfaces? [ 32.151813][ T291] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 32.161240][ T397] usb 1-1: Manufacturer: syz [ 32.165996][ T397] usb 1-1: SerialNumber: syz [ 32.170937][ T26] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.182091][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.191563][ T291] usb 4-1: config 0 descriptor?? [ 32.348723][ T26] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 32.349444][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.357963][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.382051][ T26] usb 2-1: Product: syz [ 32.386236][ T26] usb 2-1: Manufacturer: syz [ 32.390910][ T26] usb 2-1: SerialNumber: syz [ 32.466652][ T515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 32.508780][ T397] usb 1-1: 0:2 : does not exist [ 32.514085][ T397] usb 1-1: unit 9 not found! [ 32.521174][ T397] usb 1-1: USB disconnect, device number 4 [ 32.558280][ T30] audit: type=1400 audit(1786409923.889:204): avc: denied { sys_admin } for pid=516 comm="syz.4.76" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 32.579806][ T30] audit: type=1400 audit(1786409923.889:205): avc: denied { mount } for pid=516 comm="syz.4.76" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.587574][ T444] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 32.609754][ T30] audit: type=1400 audit(1786409923.889:206): avc: denied { create } for pid=516 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.631731][ T444] FAT-fs (loop5): Filesystem has been set read-only [ 32.638703][ T444] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 32.698257][ T522] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4044617448 (258855516672 ns) > initial count (110676013376 ns). Using initial count to start timer. [ 32.768654][ T26] usb 2-1: 0:2 : does not exist [ 32.777599][ T26] usb 2-1: USB disconnect, device number 4 [ 32.785140][ T307] udevd[307]: setting mode of /dev/bus/usb/002/004 to 020664 failed: Read-only file system [ 32.788225][ T529] UDC core: couldn't find an available UDC or it's busy: -16 [ 32.798587][ T30] audit: type=1400 audit(1786409924.139:207): avc: denied { mount } for pid=527 comm="syz.4.83" name="/" dev="configfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.823936][ T529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.828861][ T307] udevd[307]: setting owner of /dev/bus/usb/002/004 to uid=0, gid=0 failed: Read-only file system [ 32.846551][ T30] audit: type=1400 audit(1786409924.169:208): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.879244][ T531] loop4: detected capacity change from 0 to 16 [ 32.922655][ T532] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.930052][ T532] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.937963][ T532] device bridge_slave_0 entered promiscuous mode [ 32.951110][ T531] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.960347][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.967764][ T532] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.969347][ T313] udevd[313]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 32.998997][ T532] device bridge_slave_1 entered promiscuous mode [ 33.030124][ T30] audit: type=1400 audit(1786409924.369:209): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.036060][ T313] udevd[313]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7d3f.tmp-b7:4' failed: Read-only file system [ 33.064580][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.100807][ T416] udevd[416]: symlink '../bus/usb/002/004' '/dev/char/189:131.tmp-c189:131' failed: Read-only file system [ 33.116415][ T313] udevd[313]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 33.132314][ T30] audit: type=1400 audit(1786409924.469:210): avc: denied { sys_module } for pid=546 comm="syz.0.90" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 33.141349][ T549] loop4: detected capacity change from 0 to 128 [ 33.154286][ T547] Invalid ELF header magic: != ELF [ 33.171080][ T416] udevd[416]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 33.172981][ T30] audit: type=1400 audit(1786409924.499:211): avc: denied { module_load } for pid=546 comm="syz.0.90" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 33.183849][ T313] udevd[313]: symlink '../bus/usb/002/004' '/dev/char/189:131.tmp-c189:131' failed: Read-only file system [ 33.234678][ T30] audit: type=1400 audit(1786409924.569:212): avc: denied { create } for pid=550 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 33.256836][ T549] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none. [ 33.289559][ T549] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.296342][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.328712][ T532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.336011][ T532] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.343094][ T532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.364188][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.371948][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.380075][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.402708][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.411375][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.418521][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.427067][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.436248][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.443352][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.460452][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.474902][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.499693][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.511823][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.521242][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.529265][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.538122][ T532] device veth0_vlan entered promiscuous mode [ 33.588474][ T532] device veth1_macvtap entered promiscuous mode [ 33.597592][ T565] loop1: detected capacity change from 0 to 256 [ 33.659730][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.674432][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.700810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.709974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.711481][ T567] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 33.732577][ T321] device bridge_slave_1 left promiscuous mode [ 33.738445][ T567] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.738997][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.762986][ T321] device bridge_slave_0 left promiscuous mode [ 33.776072][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.785528][ T321] device veth1_macvtap left promiscuous mode [ 33.791635][ T321] device veth0_vlan left promiscuous mode [ 33.928697][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 34.048741][ T26] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.059844][ T26] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.070115][ T26] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 34.083398][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.090170][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 34.099365][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.108298][ T26] usb 1-1: config 0 descriptor?? [ 34.158632][ T20] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 34.231110][ T314] usb 4-1: USB disconnect, device number 4 [ 34.277441][ T580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 34.286647][ T580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 34.355245][ T592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'. [ 34.380305][ T596] set_capacity_and_notify: 1 callbacks suppressed [ 34.380318][ T596] loop1: detected capacity change from 0 to 1024 [ 34.408669][ T20] usb 7-1: Using ep0 maxpacket: 32 [ 34.425755][ T596] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.427445][ T598] loop3: detected capacity change from 0 to 512 [ 34.450526][ T596] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 34.529626][ T598] FAT-fs (loop3): count of clusters too big (3932158) [ 34.536550][ T598] FAT-fs (loop3): Can't find a valid FAT filesystem [ 34.558644][ T20] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 34.567488][ T20] usb 7-1: config 0 has no interface number 0 [ 34.585660][ T607] loop1: detected capacity change from 0 to 512 [ 34.589268][ T20] usb 7-1: config 0 interface 184 has no altsetting 0 [ 34.648716][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 34.654958][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 34.655323][ T607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.662657][ T26] usb 1-1: USB disconnect, device number 5 [ 34.691599][ T607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.705307][ T607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 34.713865][ T607] System zones: 1-12 [ 34.718139][ T607] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.112: bad orphan inode 131072 [ 34.729907][ T607] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 34.817738][ T614] loop1: detected capacity change from 0 to 512 [ 34.824162][ T20] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.833430][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.841509][ T20] usb 7-1: Product: syz [ 34.845692][ T20] usb 7-1: Manufacturer: syz [ 34.850949][ T20] usb 7-1: SerialNumber: syz [ 34.856796][ T20] usb 7-1: config 0 descriptor?? [ 34.864870][ T614] EXT4-fs (loop1): 1 truncate cleaned up [ 34.870815][ T614] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 34.899086][ T20] smsc75xx v1.0.0 [ 34.998725][ T477] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.103381][ T621] loop0: detected capacity change from 0 to 512 [ 35.140435][ T621] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 35.153826][ T621] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.278857][ T626] loop0: detected capacity change from 0 to 256 [ 35.338854][ T20] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 35.362249][ T477] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.437804][ T20] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 35.473784][ T477] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.509979][ T20] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 35.537841][ T477] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.573997][ T20] smsc75xx: probe of 7-1:0.184 failed with error -61 [ 35.593527][ T649] loop1: detected capacity change from 0 to 512 [ 35.615611][ T647] loop0: detected capacity change from 0 to 4096 [ 35.642560][ T647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.683539][ T649] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 35.710717][ T649] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 35.729982][ T649] EXT4-fs (loop1): 1 truncate cleaned up [ 35.735669][ T649] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="jqfmt=vfsold,noload,nombcache,usrjquota="norecovery,data_err=abort,init_itable,,errors=continue. Quota mode: writeback. [ 35.757018][ T477] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 35.769869][ T477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.770417][ T656] loop3: detected capacity change from 0 to 16 [ 35.778105][ T477] usb 5-1: Product: syz [ 35.788499][ T477] usb 5-1: Manufacturer: syz [ 35.797427][ T477] usb 5-1: SerialNumber: syz [ 35.803472][ T649] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsold,grpjquota="jqfmt=vfsold,noload,nombcache,usrjquota="norecovery,data_err=abort,init_itable,. Quota mode: writeback. [ 35.859116][ T477] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 35.865940][ T477] usb 5-1: No valid video chain found. [ 35.887604][ T656] erofs: (device loop3): mounted with root inode @ nid 36. [ 35.923495][ T656] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 14 @ nid 36 [ 36.011559][ T663] loop3: detected capacity change from 0 to 16 [ 36.063986][ T477] usb 5-1: USB disconnect, device number 4 [ 36.092391][ T663] erofs: (device loop3): mounted with root inode @ nid 36. [ 36.118658][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.638812][ T6] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 36.648112][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.660267][ T6] usb 2-1: Product: syz [ 36.664904][ T6] usb 2-1: Manufacturer: syz [ 36.669676][ T6] usb 2-1: SerialNumber: syz [ 36.681006][ T676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.694175][ T676] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.710749][ T676] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 36.785124][ T45] attempt to access beyond end of device [ 36.785124][ T45] loop0: rw=1, want=146, limit=128 [ 36.796758][ T45] Buffer I/O error on dev loop0, logical block 145, lost async page write [ 36.806435][ T45] attempt to access beyond end of device [ 36.806435][ T45] loop0: rw=1, want=147, limit=128 [ 36.820707][ T45] Buffer I/O error on dev loop0, logical block 146, lost async page write [ 36.829534][ T45] attempt to access beyond end of device [ 36.829534][ T45] loop0: rw=1, want=148, limit=128 [ 36.840739][ T45] Buffer I/O error on dev loop0, logical block 147, lost async page write [ 36.855848][ T45] attempt to access beyond end of device [ 36.855848][ T45] loop0: rw=1, want=149, limit=128 [ 36.860124][ T684] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 36.866787][ T45] Buffer I/O error on dev loop0, logical block 148, lost async page write [ 36.881461][ T684] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.890157][ T45] attempt to access beyond end of device [ 36.890157][ T45] loop0: rw=1, want=150, limit=128 [ 36.911737][ T45] Buffer I/O error on dev loop0, logical block 149, lost async page write [ 36.925097][ T45] attempt to access beyond end of device [ 36.925097][ T45] loop0: rw=1, want=151, limit=128 [ 36.936090][ T477] usb 7-1: USB disconnect, device number 2 [ 36.943461][ T45] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 36.952895][ T658] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.966650][ T658] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.092748][ T684] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.143: Invalid inode table block 0 in block_group 0 [ 37.108087][ T684] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 37.124675][ T684] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.143: mark_inode_dirty error [ 37.137168][ T684] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.143: Invalid inode table block 0 in block_group 0 [ 37.155737][ T684] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 37.170580][ T684] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.143: mark_inode_dirty error [ 37.184547][ T6] usb 2-1: USB disconnect, device number 5 [ 37.207218][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 37.365369][ T313] udevd[313]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 37.386254][ T307] udevd[307]: symlink '../../loop4' '/dev/disk/by-diskseq/115.tmp-b7:4' failed: Read-only file system [ 37.399942][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.530008][ T416] udevd[416]: symlink '../../loop4' '/dev/disk/by-diskseq/115.tmp-b7:4' failed: Read-only file system [ 37.559899][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 37.575616][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 37.595874][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/116.tmp-b7:3' failed: Read-only file system [ 37.678259][ T416] udevd[416]: symlink '../../loop1' '/dev/disk/by-diskseq/111.tmp-b7:1' failed: Read-only file system [ 37.695057][ T416] udevd[416]: symlink '../../loop1' '/dev/disk/by-diskseq/111.tmp-b7:1' failed: Read-only file system [ 37.706119][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 37.706138][ T30] audit: type=1400 audit(1786409929.039:228): avc: denied { view } for pid=725 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.732008][ T728] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 37.732008][ T728] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 37.732008][ T728] [ 37.738409][ T416] udevd[416]: symlink '../../loop1' '/dev/disk/by-diskseq/117.tmp-b7:1' failed: Read-only file system [ 37.769109][ T728] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 37.780132][ T728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.786582][ T728] EXT4-fs error (device loop1): ext4_quota_enable:6431: comm syz.1.159: Bad quota inum: 4087, type: 0 [ 37.798687][ T728] EXT4-fs (loop1): Remounting filesystem read-only [ 37.805237][ T728] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=4087). Please run e2fsck to fix. [ 37.821103][ T728] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 37.828018][ T728] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,bsdgroups,norecovery,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 37.848662][ T504] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.898602][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 37.969112][ T30] audit: type=1400 audit(1786409929.309:229): avc: denied { name_bind } for pid=733 comm="syz.0.162" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 37.995362][ T736] SELinux: policydb string does not match my string SE Linux [ 38.003342][ T736] SELinux: failed to load policy [ 38.021880][ T30] audit: type=1400 audit(1786409929.359:230): avc: denied { ioctl } for pid=739 comm="syz.0.164" path="socket:[18387]" dev="sockfs" ino=18387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.070154][ T30] audit: type=1400 audit(1786409929.409:231): avc: denied { name_bind } for pid=747 comm="syz.1.168" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.070761][ T748] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 38.108438][ T748] syz.1.168 (748) used greatest stack depth: 21736 bytes left [ 38.122496][ T746] FAT-fs (loop0): count of clusters too big (3932158) [ 38.128635][ T504] usb 5-1: Using ep0 maxpacket: 32 [ 38.129439][ T746] FAT-fs (loop0): Can't find a valid FAT filesystem [ 38.149049][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 38.195045][ T30] audit: type=1400 audit(1786409929.529:232): avc: denied { bind } for pid=745 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.214533][ T30] audit: type=1400 audit(1786409929.529:233): avc: denied { name_bind } for pid=745 comm="syz.0.167" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 38.235780][ T30] audit: type=1400 audit(1786409929.529:234): avc: denied { node_bind } for pid=745 comm="syz.0.167" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.258628][ T504] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 38.266932][ T504] usb 5-1: config 0 has no interface number 0 [ 38.273669][ T504] usb 5-1: config 0 interface 184 has no altsetting 0 [ 38.308676][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 38.389611][ T6] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 38.400852][ T314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.455025][ T754] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.170: invalid block [ 38.466685][ T754] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.170: invalid indirect mapped block 10 (level 1) [ 38.480785][ T754] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.170: invalid indirect mapped block 8 (level 1) [ 38.488825][ T504] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 38.494720][ T754] EXT4-fs (loop3): 1 truncate cleaned up [ 38.504138][ T504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.509516][ T754] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nojournal_checksum,,errors=continue. Quota mode: none. [ 38.517306][ T504] usb 5-1: Product: syz [ 38.542416][ T504] usb 5-1: Manufacturer: syz [ 38.547144][ T504] usb 5-1: SerialNumber: syz [ 38.552556][ T504] usb 5-1: config 0 descriptor?? [ 38.588694][ T6] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 38.598204][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.599283][ T504] smsc75xx v1.0.0 [ 38.612774][ T6] usb 7-1: Product: syz [ 38.617308][ T6] usb 7-1: Manufacturer: syz [ 38.622601][ T6] usb 7-1: SerialNumber: syz [ 38.641674][ T757] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.171: invalid block [ 38.648770][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 38.658827][ T757] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.171: invalid indirect mapped block 10 (level 1) [ 38.672320][ T757] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.171: invalid indirect mapped block 8 (level 1) [ 38.685897][ T757] EXT4-fs (loop3): 1 truncate cleaned up [ 38.691597][ T757] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.776886][ T30] audit: type=1400 audit(1786409930.109:235): avc: denied { getopt } for pid=763 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.796767][ T314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.796793][ T314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 38.796824][ T314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.796855][ T314] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 38.836360][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.842782][ T764] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 38.861754][ T30] audit: type=1400 audit(1786409930.199:236): avc: denied { mounton } for pid=763 comm="syz.3.174" path="/33/file0/file0" dev="loop3" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.862852][ T764] incfs: iterate_incfs_dir / -22 [ 38.899228][ T314] hub 2-1:1.0: bad descriptor, ignoring hub [ 38.911425][ T314] hub: probe of 2-1:1.0 failed with error -5 [ 38.917580][ T314] cdc_wdm 2-1:1.0: skipping garbage [ 38.934371][ T314] cdc_wdm 2-1:1.0: skipping garbage [ 38.940888][ T6] usb 7-1: 1:1 : bogus bTerminalLink 255 [ 38.941014][ T30] audit: type=1400 audit(1786409930.289:237): avc: denied { rmdir } for pid=288 comm="syz-executor" name=".index" dev="loop3" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.946753][ T314] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 38.976718][ T6] snd-usb-audio: probe of 7-1:1.0 failed with error -2 [ 39.008640][ T6] usb 7-1: 1:1 : bogus bTerminalLink 255 [ 39.028847][ T6] snd-usb-audio: probe of 7-1:1.1 failed with error -2 [ 39.032086][ T504] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 39.048719][ T6] usb 7-1: 1:1 : bogus bTerminalLink 255 [ 39.053030][ T504] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 39.067818][ T504] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 39.068749][ T6] snd-usb-audio: probe of 7-1:1.2 failed with error -2 [ 39.078260][ T504] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 39.131192][ T6] usb 7-1: USB disconnect, device number 3 [ 39.268213][ T779] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.299780][ T779] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.358672][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.428881][ T20] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 39.457025][ T785] set_capacity_and_notify: 11 callbacks suppressed [ 39.457047][ T785] loop2: detected capacity change from 0 to 7 [ 39.474753][ T313] loop2: [ 39.479404][ T785] loop2: [ 39.531120][ T793] loop6: detected capacity change from 0 to 512 [ 39.594214][ T793] FAT-fs (loop6): count of clusters too big (3932158) [ 39.601243][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 39.605089][ T793] FAT-fs (loop6): Can't find a valid FAT filesystem [ 39.718863][ T26] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30 [ 39.729953][ T26] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.741012][ T26] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.750888][ T26] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 39.764743][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.858686][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 39.867918][ T26] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 39.876228][ T26] usb 4-1: Manufacturer: syz [ 39.881831][ T26] usb 4-1: config 0 descriptor?? [ 40.108686][ T504] usb 2-1: USB disconnect, device number 6 [ 40.354412][ T26] apple 0003:05AC:029C.0007: unknown main item tag 0x2 [ 40.380644][ T26] apple 0003:05AC:029C.0007: unknown main item tag 0x1 [ 40.399816][ T26] apple 0003:05AC:029C.0007: unknown main item tag 0xe [ 40.406761][ T26] apple 0003:05AC:029C.0007: unknown main item tag 0x3 [ 40.414156][ T26] apple 0003:05AC:029C.0007: unknown main item tag 0x4 [ 40.421313][ T26] apple 0003:05AC:029C.0007: unknown main item tag 0x0 [ 40.429621][ T26] apple 0003:05AC:029C.0007: hidraw0: USB HID v0.01 Device [syz] on usb-dummy_hcd.3-1/input0 [ 40.552144][ T504] usb 4-1: USB disconnect, device number 5 [ 40.595760][ T823] Illegal XDP return value 4294967274, expect packet loss! [ 40.638188][ T825] SELinux: failed to load policy [ 40.659796][ T829] loop1: detected capacity change from 0 to 256 [ 40.692073][ T829] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 40.720729][ T20] usb 5-1: USB disconnect, device number 5 [ 40.750901][ T833] loop6: detected capacity change from 0 to 512 [ 40.777343][ T829] smpboot: CPU 1 is now offline [ 40.826348][ T829] x86: Booting SMP configuration: [ 40.831673][ T829] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 40.838297][ T0] kvm-clock: cpu 1, msr 70c5041, secondary cpu clock [ 40.839577][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 40.862858][ T843] loop0: detected capacity change from 0 to 512 [ 40.869411][ T833] FAT-fs (loop6): count of clusters too big (3932158) [ 40.882217][ T843] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 40.900902][ T833] FAT-fs (loop6): Can't find a valid FAT filesystem [ 40.975875][ T843] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 41.021182][ T843] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.056061][ T853] process 'syz.1.206' launched './file1' with NULL argv: empty string added [ 41.149416][ T866] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 41.167039][ T864] loop4: detected capacity change from 0 to 512 [ 41.189258][ T866] syz.0.208 (866) used greatest stack depth: 21576 bytes left [ 41.257209][ T864] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x000000000000000e,,errors=continue. Quota mode: writeback. [ 41.360676][ T864] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 1601862003 (only 1 groups) [ 41.577822][ T884] loop6: detected capacity change from 0 to 512 [ 41.618619][ T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.667140][ T884] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.957092][ T906] loop1: detected capacity change from 0 to 1024 [ 41.978669][ T20] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 41.987461][ T20] usb 1-1: config 0 has no interface number 0 [ 41.993957][ T20] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.020125][ T906] EXT4-fs (loop1): Ignoring removed bh option [ 42.035221][ T906] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.047418][ T906] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 42.058664][ T906] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 42.068468][ T906] EXT4-fs (loop1): failed to open journal device unknown-block(0,5) -6 [ 42.189269][ T20] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 42.199055][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.207179][ T20] usb 1-1: Product: syz [ 42.211719][ T20] usb 1-1: Manufacturer: syz [ 42.216413][ T20] usb 1-1: SerialNumber: syz [ 42.221611][ T20] usb 1-1: config 0 descriptor?? [ 42.461020][ T504] usb 1-1: USB disconnect, device number 6 [ 42.683264][ T416] udevd[416]: symlink '../../loop6' '/dev/disk/by-diskseq/143.tmp-b7:6' failed: Read-only file system [ 42.744027][ T416] udevd[416]: symlink '../../loop4' '/dev/disk/by-diskseq/141.tmp-b7:4' failed: Read-only file system [ 42.775667][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/127.tmp-b7:3' failed: Read-only file system [ 42.779042][ T915] loop3: detected capacity change from 0 to 512 [ 42.980018][ T915] FAT-fs (loop3): count of clusters too big (3932158) [ 43.059226][ T915] FAT-fs (loop3): Can't find a valid FAT filesystem [ 43.111496][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/146.tmp-b7:3' failed: Read-only file system [ 43.117722][ T313] udevd[313]: symlink '../../loop1' '/dev/disk/by-diskseq/145.tmp-b7:1' failed: Read-only file system [ 43.135491][ T919] loop1: detected capacity change from 0 to 512 [ 43.142006][ T768] udevd[768]: symlink '../../loop0' '/dev/disk/by-diskseq/139.tmp-b7:0' failed: Read-only file system [ 43.142402][ T919] EXT4-fs (loop1): Ignoring removed bh option [ 43.164339][ T919] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 43.169845][ T313] udevd[313]: symlink '../../loop1' '/dev/disk/by-diskseq/147.tmp-b7:1' failed: Read-only file system [ 43.174440][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/146.tmp-b7:3' failed: Read-only file system [ 43.184585][ T313] udevd[313]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 43.201594][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/146.tmp-b7:3' failed: Read-only file system [ 43.220666][ T919] EXT4-fs (loop1): 1 truncate cleaned up [ 43.226805][ T919] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,abort,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 43.677163][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 43.677207][ T30] audit: type=1400 audit(1786409935.009:252): avc: denied { write } for pid=939 comm="syz.4.233" name="usb_gadget" dev="configfs" ino=1899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.780943][ T943] HTB: quantum of class FFF10001 is big. Consider r2q change. [ 43.842908][ T30] audit: type=1400 audit(1786409935.049:253): avc: denied { add_name } for pid=939 comm="syz.4.233" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.961771][ T30] audit: type=1400 audit(1786409935.049:254): avc: denied { create } for pid=939 comm="syz.4.233" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 44.059122][ T952] erofs: (device loop6): mounted with root inode @ nid 36. [ 44.064663][ T30] audit: type=1400 audit(1786409935.059:255): avc: denied { write } for pid=939 comm="syz.4.233" name="p_chmask" dev="configfs" ino=18996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 44.159442][ T952] erofs: (device loop6): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 44.208741][ T952] erofs: (device loop6): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 44.212061][ T30] audit: type=1400 audit(1786409935.059:256): avc: denied { open } for pid=939 comm="syz.4.233" path="/50/config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask" dev="configfs" ino=18996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 44.271535][ T952] erofs: (device loop6): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 44.348822][ T952] erofs: (device loop6): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 44.380547][ T952] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 44.542367][ T967] set_capacity_and_notify: 1 callbacks suppressed [ 44.542386][ T967] loop1: detected capacity change from 0 to 512 [ 44.681127][ T967] FAT-fs (loop1): count of clusters too big (3932158) [ 44.734628][ T967] FAT-fs (loop1): Can't find a valid FAT filesystem [ 44.999290][ T30] audit: type=1400 audit(1786409936.339:257): avc: denied { unmount } for pid=974 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.061878][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 45.208607][ T397] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 45.404280][ T992] loop1: detected capacity change from 0 to 512 [ 45.424114][ T30] audit: type=1400 audit(1786409936.759:258): avc: denied { map } for pid=995 comm="syz.6.253" path="/24/tracing/uprobe_events" dev="tracefs" ino=12353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 45.456449][ T30] audit: type=1400 audit(1786409936.789:259): avc: denied { execute } for pid=995 comm="syz.6.253" path="/24/tracing/uprobe_events" dev="tracefs" ino=12353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 45.489344][ T992] FAT-fs (loop1): count of clusters too big (3932158) [ 45.503578][ T992] FAT-fs (loop1): Can't find a valid FAT filesystem [ 45.638709][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.658594][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.680313][ T397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.721867][ T397] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.736196][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.758938][ T397] usb 4-1: config 0 descriptor?? [ 46.085101][ T30] audit: type=1400 audit(1786409937.419:260): avc: denied { wake_alarm } for pid=1010 comm="syz.4.259" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.098606][ T1006] fuse: Bad value for 'fd' [ 46.243394][ T397] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 46.347314][ T397] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.580755][ T397] usb 4-1: USB disconnect, device number 6 [ 46.978605][ T1009] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 47.388665][ T1009] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 47.397202][ T1009] usb 1-1: config 0 has no interface number 0 [ 47.403534][ T1009] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.613172][ T1009] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 47.623161][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.632037][ T1009] usb 1-1: Product: syz [ 47.636527][ T1009] usb 1-1: Manufacturer: syz [ 47.641953][ T1009] usb 1-1: SerialNumber: syz [ 47.648996][ T1009] usb 1-1: config 0 descriptor?? [ 47.843271][ T416] udevd[416]: symlink '../../loop6' '/dev/disk/by-diskseq/151.tmp-b7:6' failed: Read-only file system [ 47.896335][ T6] usb 1-1: USB disconnect, device number 7 [ 48.035916][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/148.tmp-b7:3' failed: Read-only file system [ 48.148660][ T1009] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 48.413232][ T416] udevd[416]: symlink '../../loop0' '/dev/disk/by-diskseq/139.tmp-b7:0' failed: Read-only file system [ 48.451500][ T1071] kvm [1070]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2, nop [ 48.455284][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/148.tmp-b7:3' failed: Read-only file system [ 48.484388][ T313] udevd[313]: symlink '../../loop0' '/dev/disk/by-diskseq/139.tmp-b7:0' failed: Read-only file system [ 49.143717][ T1009] usb 7-1: not running at top speed; connect to a high speed hub [ 49.268676][ T1009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.357040][ T1009] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 49.370140][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.371281][ T416] udevd[416]: symlink '../../loop3' '/dev/disk/by-diskseq/148.tmp-b7:3' failed: Read-only file system [ 49.392209][ T1083] overlayfs: failed to clone upperpath [ 49.583803][ T416] udevd[416]: symlink '../../loop0' '/dev/disk/by-diskseq/139.tmp-b7:0' failed: Read-only file system [ 49.622566][ T1009] usb 7-1: USB disconnect, device number 4 [ 49.710796][ T1095] loop0: detected capacity change from 0 to 512 [ 49.779130][ T1095] FAT-fs (loop0): count of clusters too big (3932158) [ 49.786979][ T1095] FAT-fs (loop0): Can't find a valid FAT filesystem [ 50.001841][ T30] audit: type=1400 audit(1786409941.339:261): avc: denied { mount } for pid=1102 comm="syz.4.293" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 50.008980][ T1105] loop1: detected capacity change from 0 to 256 [ 50.339599][ T30] audit: type=1400 audit(1786409941.609:262): avc: denied { bind } for pid=1104 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.120250][ T1111] loop6: detected capacity change from 0 to 40427 [ 51.263319][ T30] audit: type=1400 audit(1786409942.569:263): avc: denied { write } for pid=1115 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.611104][ T1111] F2FS-fs (loop6): invalid crc value [ 51.765907][ T1111] F2FS-fs (loop6): Found nat_bits in checkpoint [ 51.835427][ T1111] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 51.968662][ T30] audit: type=1400 audit(1786409943.299:264): avc: denied { execute_no_trans } for pid=1140 comm="syz.0.306" path="/62/file1" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.994762][ T1143] loop1: detected capacity change from 0 to 128 [ 52.017840][ T1111] attempt to access beyond end of device [ 52.017840][ T1111] loop6: rw=2049, want=81920, limit=40427 [ 52.038837][ T30] audit: type=1400 audit(1786409943.349:265): avc: denied { write } for pid=1146 comm="syz.0.307" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.038906][ T1111] attempt to access beyond end of device [ 52.038906][ T1111] loop6: rw=2049, want=53248, limit=40427 [ 52.071272][ T30] audit: type=1400 audit(1786409943.369:266): avc: denied { create } for pid=1148 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.122812][ T1111] attempt to access beyond end of device [ 52.122812][ T1111] loop6: rw=2049, want=77824, limit=40427 [ 52.153349][ T1111] attempt to access beyond end of device [ 52.153349][ T1111] loop6: rw=2049, want=85848, limit=40427 [ 52.229249][ T1143] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.241002][ T1143] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.841755][ T532] attempt to access beyond end of device [ 52.841755][ T532] loop6: rw=2049, want=45104, limit=40427 [ 52.968978][ T1143] EXT4-fs warning (device loop1): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 3335596986 [ 53.084404][ T30] audit: type=1400 audit(1786409944.419:267): avc: denied { read } for pid=1167 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.227005][ T1185] loop3: detected capacity change from 0 to 512 [ 53.240351][ T1184] loop1: detected capacity change from 0 to 4096 [ 53.261988][ T1184] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.279223][ T1185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.341453][ T1185] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.379007][ T1185] EXT4-fs (loop3): 1 truncate cleaned up [ 53.384709][ T1185] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 53.872740][ T1208] loop0: detected capacity change from 0 to 16 [ 54.013480][ T1208] erofs: (device loop0): mounted with root inode @ nid 36. [ 54.356831][ T1212] loop1: detected capacity change from 0 to 2048 [ 54.371430][ T1216] loop3: detected capacity change from 0 to 512 [ 54.430185][ T1212] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 54.447952][ T1212] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.329: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.498847][ T1212] EXT4-fs (loop1): Remounting filesystem read-only [ 54.597913][ T1216] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,abort,,errors=continue. Quota mode: writeback. [ 54.613841][ T1216] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.625953][ T1216] EXT4-fs error (device loop3): ext4_resize_begin:61: comm syz.3.331: resize_inode disabled but reserved GDT blocks non-zero [ 55.080486][ T1242] loop3: detected capacity change from 0 to 256 [ 55.192048][ T30] audit: type=1400 audit(1786409946.529:268): avc: denied { create } for pid=1239 comm="syz.6.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.440282][ T30] audit: type=1400 audit(1786409946.779:269): avc: denied { write } for pid=1258 comm="syz.0.347" name="protocols" dev="proc" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.491788][ T30] audit: type=1400 audit(1786409946.809:270): avc: denied { write } for pid=1258 comm="syz.0.347" path="/proc/162/net/protocols" dev="proc" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.692017][ T30] audit: type=1400 audit(1786409946.809:271): avc: denied { create } for pid=1258 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.797355][ T30] audit: type=1400 audit(1786409946.809:272): avc: denied { bind } for pid=1258 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.823582][ T1268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'. [ 55.849490][ T1270] loop1: detected capacity change from 0 to 512 [ 55.857592][ T1270] FAT-fs (loop1): count of clusters too big (3932158) [ 55.864747][ T1270] FAT-fs (loop1): Can't find a valid FAT filesystem [ 56.118686][ T1122] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 56.245413][ T6] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 56.291667][ T30] audit: type=1400 audit(1786409947.629:273): avc: denied { read } for pid=1280 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.358600][ T1122] usb 1-1: Using ep0 maxpacket: 16 [ 56.478680][ T1122] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.488904][ T1122] usb 1-1: config 0 has no interfaces? [ 56.494493][ T1122] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 56.503602][ T1122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.512412][ T1122] usb 1-1: config 0 descriptor?? [ 56.538652][ T6] usb 7-1: Using ep0 maxpacket: 32 [ 56.668678][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.679672][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.690164][ T6] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 56.699407][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.708461][ T6] usb 7-1: config 0 descriptor?? [ 56.716114][ T1292] loop1: detected capacity change from 0 to 1024 [ 56.752496][ T1292] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 56.764759][ T1292] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 56.772637][ T1292] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,quota,,errors=continue. Quota mode: writeback. [ 56.795727][ T30] audit: type=1400 audit(1786409948.129:274): avc: denied { lock } for pid=1291 comm="syz.1.360" path="/64/file0/cpuset.effective_cpus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.872283][ T1297] loop3: detected capacity change from 0 to 512 [ 56.921473][ T1297] EXT4-fs (loop3): Test dummy encryption mode enabled [ 56.936502][ T1297] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.361: inode has both inline data and extents flags [ 56.950200][ T30] audit: type=1326 audit(1786409948.289:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1301 comm="syz.1.362" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdaa260d9 code=0x7ffc0000 [ 56.956321][ T1297] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.361: couldn't read orphan inode 15 (err -117) [ 56.988438][ T1297] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 57.010446][ T30] audit: type=1326 audit(1786409948.329:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1301 comm="syz.1.362" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbbdaa260d9 code=0x7ffc0000 [ 57.035790][ T30] audit: type=1326 audit(1786409948.329:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1301 comm="syz.1.362" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdaa260d9 code=0x7ffc0000 [ 57.039817][ T1297] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 57.158199][ T1312] ================================================================== [ 57.166284][ T1312] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 57.174665][ T1312] Read of size 8 at addr ffff88810f9590c0 by task syz.3.365/1312 [ 57.182484][ T1312] [ 57.184807][ T1312] CPU: 0 PID: 1312 Comm: syz.3.365 Not tainted syzkaller #0 [ 57.192101][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.202160][ T1312] Call Trace: [ 57.205664][ T1312] [ 57.208597][ T1312] __dump_stack+0x21/0x30 [ 57.212957][ T1312] dump_stack_lvl+0x110/0x170 [ 57.217648][ T1312] ? show_regs_print_info+0x20/0x20 [ 57.222846][ T1312] ? load_image+0x3f0/0x3f0 [ 57.227497][ T1312] print_address_description+0x7f/0x2c0 [ 57.233137][ T1312] ? tc_setup_flow_action+0x88e/0x3200 [ 57.238601][ T1312] kasan_report+0x10f/0x150 [ 57.243112][ T1312] ? tc_setup_flow_action+0x88e/0x3200 [ 57.248575][ T1312] __asan_report_load8_noabort+0x14/0x20 [ 57.254261][ T1312] tc_setup_flow_action+0x88e/0x3200 [ 57.259551][ T1312] mall_replace_hw_filter+0x2db/0x8d0 [ 57.264922][ T1312] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 57.270998][ T1312] ? mall_set_parms+0x520/0x520 [ 57.275894][ T1312] ? tcf_exts_destroy+0xb0/0xb0 [ 57.280804][ T1312] ? pcpu_alloc+0x1118/0x16f0 [ 57.285525][ T1312] ? mall_set_parms+0x1e4/0x520 [ 57.290854][ T1312] mall_change+0x544/0x760 [ 57.295402][ T1312] ? __kasan_check_write+0x14/0x20 [ 57.300670][ T1312] ? mall_get+0xa0/0xa0 [ 57.304844][ T1312] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 57.310749][ T1312] ? mall_get+0xa0/0xa0 [ 57.314910][ T1312] tc_new_tfilter+0x13df/0x1990 [ 57.319776][ T1312] ? tcf_gate_entry_destructor+0x20/0x20 [ 57.325495][ T1312] ? security_capable+0x87/0xb0 [ 57.330340][ T1312] ? ns_capable+0x8c/0xf0 [ 57.335100][ T1312] ? netlink_net_capable+0x125/0x160 [ 57.340557][ T1312] ? tcf_gate_entry_destructor+0x20/0x20 [ 57.346266][ T1312] rtnetlink_rcv_msg+0x83c/0xcb0 [ 57.351200][ T1312] ? 0xffffffffa002c000 [ 57.355347][ T1312] ? rtnetlink_bind+0x80/0x80 [ 57.360120][ T1312] ? avc_has_perm_noaudit+0x390/0x490 [ 57.365652][ T1312] ? memcpy+0x56/0x70 [ 57.369726][ T1312] ? avc_has_perm_noaudit+0x30a/0x490 [ 57.375219][ T1312] ? arch_stack_walk+0xee/0x140 [ 57.380068][ T1312] ? avc_denied+0x1b0/0x1b0 [ 57.385093][ T1312] ? stack_trace_save+0xa6/0xf0 [ 57.390063][ T1312] ? avc_has_perm+0x163/0x250 [ 57.394743][ T1312] ? avc_has_perm_noaudit+0x490/0x490 [ 57.400104][ T1312] ? x64_sys_call+0x4b/0x9a0 [ 57.404693][ T1312] ? selinux_nlmsg_lookup+0x39d/0x440 [ 57.410062][ T1312] netlink_rcv_skb+0x1e9/0x430 [ 57.415058][ T1312] ? rtnetlink_bind+0x80/0x80 [ 57.419769][ T1312] ? netlink_ack+0xb10/0xb10 [ 57.424735][ T1312] ? _copy_from_iter+0x4a4/0x10a0 [ 57.429797][ T1312] ? __netlink_lookup+0x387/0x3b0 [ 57.434837][ T1312] rtnetlink_rcv+0x1c/0x20 [ 57.439294][ T1312] netlink_unicast+0x86c/0xa30 [ 57.444604][ T1312] netlink_sendmsg+0x879/0xb80 [ 57.449366][ T1312] ? netlink_getsockopt+0x530/0x530 [ 57.454560][ T1312] ? security_socket_sendmsg+0x82/0xa0 [ 57.460021][ T1312] ? netlink_getsockopt+0x530/0x530 [ 57.465317][ T1312] ____sys_sendmsg+0x5be/0x8f0 [ 57.470077][ T1312] ? __sys_sendmsg_sock+0x40/0x40 [ 57.475119][ T1312] ? import_iovec+0x7c/0xb0 [ 57.479975][ T1312] ___sys_sendmsg+0x236/0x2e0 [ 57.484829][ T1312] ? __sys_sendmsg+0x280/0x280 [ 57.489704][ T1312] ? sock_show_fdinfo+0xa0/0xa0 [ 57.494693][ T1312] ? __fdget+0x1a1/0x230 [ 57.498962][ T1312] __x64_sys_sendmsg+0x201/0x2d0 [ 57.504019][ T1312] ? ___sys_sendmsg+0x2e0/0x2e0 [ 57.509057][ T1312] ? __kasan_check_write+0x14/0x20 [ 57.514169][ T1312] ? switch_fpu_return+0x15d/0x2c0 [ 57.519401][ T1312] x64_sys_call+0x4b/0x9a0 [ 57.523855][ T1312] do_syscall_64+0x4c/0xa0 [ 57.528537][ T1312] ? clear_bhb_loop+0x50/0xa0 [ 57.533384][ T1312] ? clear_bhb_loop+0x50/0xa0 [ 57.538092][ T1312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.544165][ T1312] RIP: 0033:0x7fdeaf4d80d9 [ 57.548624][ T1312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.568562][ T1312] RSP: 002b:00007fdeadf31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.577081][ T1312] RAX: ffffffffffffffda RBX: 00007fdeaf75ffa0 RCX: 00007fdeaf4d80d9 [ 57.585051][ T1312] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 57.593021][ T1312] RBP: 00007fdeaf56f024 R08: 0000000000000000 R09: 0000000000000000 [ 57.601012][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.608976][ T1312] R13: 00007fdeaf760038 R14: 00007fdeaf75ffa0 R15: 00007fffd02ed118 [ 57.616975][ T1312] [ 57.619996][ T1312] [ 57.622332][ T1312] Allocated by task 1312: [ 57.626675][ T1312] __kasan_kmalloc+0xd4/0x100 [ 57.631360][ T1312] __kmalloc+0x13d/0x2c0 [ 57.635598][ T1312] tcf_idr_create+0x5f/0x790 [ 57.640193][ T1312] tcf_idr_create_from_flags+0x61/0x70 [ 57.645661][ T1312] tcf_gact_init+0x342/0x570 [ 57.650258][ T1312] tcf_action_init_1+0x3fd/0x6b0 [ 57.655194][ T1312] tcf_action_init+0x233/0x7a0 [ 57.659967][ T1312] tcf_exts_validate+0x24a/0x580 [ 57.665326][ T1312] mall_set_parms+0x48/0x520 [ 57.670090][ T1312] mall_change+0x478/0x760 [ 57.674580][ T1312] tc_new_tfilter+0x13df/0x1990 [ 57.679510][ T1312] rtnetlink_rcv_msg+0x83c/0xcb0 [ 57.684476][ T1312] netlink_rcv_skb+0x1e9/0x430 [ 57.689377][ T1312] rtnetlink_rcv+0x1c/0x20 [ 57.693797][ T1312] netlink_unicast+0x86c/0xa30 [ 57.698561][ T1312] netlink_sendmsg+0x879/0xb80 [ 57.703338][ T1312] ____sys_sendmsg+0x5be/0x8f0 [ 57.708110][ T1312] ___sys_sendmsg+0x236/0x2e0 [ 57.712929][ T1312] __x64_sys_sendmsg+0x201/0x2d0 [ 57.717875][ T1312] x64_sys_call+0x4b/0x9a0 [ 57.722520][ T1312] do_syscall_64+0x4c/0xa0 [ 57.726980][ T1312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.732880][ T1312] [ 57.735294][ T1312] The buggy address belongs to the object at ffff88810f959000 [ 57.735294][ T1312] which belongs to the cache kmalloc-192 of size 192 [ 57.749506][ T1312] The buggy address is located 0 bytes to the right of [ 57.749506][ T1312] 192-byte region [ffff88810f959000, ffff88810f9590c0) [ 57.763210][ T1312] The buggy address belongs to the page: [ 57.768846][ T1312] page:ffffea00043e5640 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810f959900 pfn:0x10f959 [ 57.780467][ T1312] flags: 0x4000000000000200(slab|zone=1) [ 57.786103][ T1312] raw: 4000000000000200 ffffea00049e8280 0000000800000008 ffff888100042c00 [ 57.794698][ T1312] raw: ffff88810f959900 000000008010000f 00000001ffffffff 0000000000000000 [ 57.803277][ T1312] page dumped because: kasan: bad access detected [ 57.809858][ T1312] page_owner tracks the page as allocated [ 57.815592][ T1312] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 4400442112, free_ts 4400421645 [ 57.831386][ T1312] post_alloc_hook+0x192/0x1b0 [ 57.836240][ T1312] prep_new_page+0x1c/0x110 [ 57.840828][ T1312] get_page_from_freelist+0x2c3a/0x2cd0 [ 57.846382][ T1312] __alloc_pages+0x1a2/0x460 [ 57.850997][ T1312] new_slab+0xa0/0x4d0 [ 57.855171][ T1312] ___slab_alloc+0x3ac/0x840 [ 57.859772][ T1312] __slab_alloc+0x49/0x90 [ 57.864248][ T1312] kmem_cache_alloc_trace+0x146/0x270 [ 57.869626][ T1312] kernfs_fop_open+0x375/0xbb0 [ 57.874419][ T1312] do_dentry_open+0x82a/0x1010 [ 57.879177][ T1312] vfs_open+0x73/0x80 [ 57.883170][ T1312] path_openat+0x26e6/0x2f80 [ 57.887758][ T1312] do_filp_open+0x1df/0x400 [ 57.892254][ T1312] do_sys_openat2+0x15e/0x7f0 [ 57.896923][ T1312] __x64_sys_openat+0x136/0x160 [ 57.902133][ T1312] x64_sys_call+0x219/0x9a0 [ 57.906648][ T1312] page last free stack trace: [ 57.911318][ T1312] free_unref_page_prepare+0x5fa/0x600 [ 57.916776][ T1312] free_unref_page+0xae/0x540 [ 57.921447][ T1312] __free_pages+0x6c/0x100 [ 57.925945][ T1312] free_pages+0x82/0x90 [ 57.930127][ T1312] selinux_genfs_get_sid+0x20b/0x250 [ 57.935417][ T1312] inode_doinit_with_dentry+0x884/0xd90 [ 57.940967][ T1312] selinux_d_instantiate+0x27/0x40 [ 57.946075][ T1312] security_d_instantiate+0x9e/0xf0 [ 57.951288][ T1312] d_splice_alias+0x6d/0x390 [ 57.956057][ T1312] kernfs_iop_lookup+0x2c2/0x310 [ 57.961003][ T1312] path_openat+0x1436/0x2f80 [ 57.965613][ T1312] do_filp_open+0x1df/0x400 [ 57.970842][ T1312] do_sys_openat2+0x15e/0x7f0 [ 57.975534][ T1312] __x64_sys_openat+0x136/0x160 [ 57.980391][ T1312] x64_sys_call+0x219/0x9a0 [ 57.984892][ T1312] do_syscall_64+0x4c/0xa0 [ 57.989321][ T1312] [ 57.991657][ T1312] Memory state around the buggy address: [ 57.997307][ T1312] ffff88810f958f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.005391][ T1312] ffff88810f959000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.013447][ T1312] >ffff88810f959080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 58.021723][ T1312] ^ [ 58.027887][ T1312] ffff88810f959100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.036069][ T1312] ffff88810f959180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.044274][ T1312] ================================================================== [ 58.052337][ T1312] Disabling lock debugging due to kernel taint [ 58.204911][ T306] usb 1-1: USB disconnect, device number 8 [ 58.428685][ T6] usbhid 7-1:0.0: can't add hid device: -71 [ 58.434756][ T6] usbhid: probe of 7-1:0.0 failed with error -71 [ 58.442259][ T6] usb 7-1: USB disconnect, device number 5