last executing test programs: 12m2.874290554s ago: executing program 32 (id=2085): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_mount_image$ext4(&(0x7f0000002500)='ext4\x00', &(0x7f0000002540)='./file0\x00', 0x400, &(0x7f0000002580)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f00000025c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000002a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002ac0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002b00)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000002b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002c40), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002c80)=0x2) recvmmsg(r1, &(0x7f0000002cc0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000002d00)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002d40), 0x400000000000ec0, 0x2, &(0x7f0000002d80)={0x77359400}) 1m29.606414881s ago: executing program 33 (id=3915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x1, 0x9, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002c00)={r0, &(0x7f0000002a80)="ee648bcb52d6", &(0x7f0000002b80)=""/90}, 0x20) 1m19.415870651s ago: executing program 4 (id=4035): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, r4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r5, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 1m18.172663918s ago: executing program 4 (id=4050): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x54, 0x0, 0x0, 0xc8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x10, 0x8, 0x40, 0x0, 0x0, {[@generic={0x4, 0x3, "cf"}, @generic={0x4, 0x12, "a26f866342d4e76fd7a899ccfdfd7674"}, @timestamp={0x8, 0xa, 0x1000004, 0x80}, @exp_fastopen={0xfe, 0x4}, @generic={0x3, 0x6, "88143639"}]}}}}}}}, 0x0) 1m18.135866652s ago: executing program 4 (id=4053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) 1m17.591699667s ago: executing program 4 (id=4057): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m17.545689492s ago: executing program 4 (id=4061): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002400)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000002600)={0x11, 0x11, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002880)='./proc\x00', 0x1df) mount(0x0, &(0x7f00000028c0)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000002900)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000002940)='myproc\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002980)='myproc/iomem\x00', 0x0, 0x0) read(r3, &(0x7f00000029c0), 0xfa0) syz_clone3(&(0x7f0000002a00)={0x104284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, {r3}}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002ac0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002b00)='./config\x00', &(0x7f0000002b40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b80)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002bc0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000002c00)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r4, &(0x7f0000002c40)='Mid', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000002c80)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000002cc0)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0xc700, 0x131) write(r6, &(0x7f0000002d40)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002dc0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002e00)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, &(0x7f0000002e80)='dummy_udc.0', 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x0, 0x9fffc, 0x8, 0x2, 0x200022, 0x0}) syz_open_procfs(0x0, 0x0) 1m17.444870412s ago: executing program 4 (id=4064): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)="fd7ae67f55361b27487978b79734f4d90f19a34a") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x5000000d, 0x240, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x17) 1m16.759601602s ago: executing program 34 (id=4064): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)="fd7ae67f55361b27487978b79734f4d90f19a34a") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x5000000d, 0x240, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x17) 56.11407065s ago: executing program 6 (id=4305): r0 = epoll_create1(0x0) r1 = socket(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xb0000014}) 56.043612237s ago: executing program 6 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfd}]}, 0x34}}, 0x4000080) 55.992733362s ago: executing program 6 (id=4313): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8840) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x10008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 55.566089846s ago: executing program 6 (id=4317): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000001c0)={[{@nogrpid}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nogrpid}, {@grpjquota}, {@dioread_nolock}]}, 0x3, 0x446, &(0x7f0000000440)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./dev\x00', &(0x7f0000000bc0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000c40)=@filename='./dev/sda1\x00', &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000d00)='./mnt\x00') syz_mount_image$msdos(&(0x7f0000000d40), &(0x7f0000000d80)='.\x00', 0x820f8, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, &(0x7f0000000e00)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f00000008c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x103) 55.027842221s ago: executing program 6 (id=4321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000008}, 0x0) 54.500453845s ago: executing program 6 (id=4332): r0 = open(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlinkat(r0, 0x0, 0x200) mkdirat(r0, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f00000002c0)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') mknodat(r0, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00', 0xc000, 0xe3) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) epoll_wait(r3, 0x0, 0x0, 0x5) symlinkat(0x0, r3, 0x0) 54.45248737s ago: executing program 35 (id=4332): r0 = open(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlinkat(r0, 0x0, 0x200) mkdirat(r0, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f00000002c0)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') mknodat(r0, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00', 0xc000, 0xe3) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) epoll_wait(r3, 0x0, 0x0, 0x5) symlinkat(0x0, r3, 0x0) 47.739962833s ago: executing program 0 (id=4407): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) 47.692800507s ago: executing program 0 (id=4409): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 46.807528237s ago: executing program 0 (id=4419): r0 = socket(0x10, 0x803, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) 46.78771816s ago: executing program 0 (id=4422): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='.\x00', 0x0, 0x8b7848, 0x0) 46.728817185s ago: executing program 0 (id=4423): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x93549f2b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x2, 0x8, 0x9}], 0x10, 0x10001}, 0x94) 46.617735327s ago: executing program 0 (id=4424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a00)) rt_tgsigqueueinfo(0x0, 0x0, 0x18, 0x0) 46.380908291s ago: executing program 36 (id=4424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a00)) rt_tgsigqueueinfo(0x0, 0x0, 0x18, 0x0) 42.326699373s ago: executing program 1 (id=4488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff58, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) r1 = creat(0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x0) 41.96482294s ago: executing program 1 (id=4497): r0 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x200, 0x0) lseek(r0, 0xe, 0x2) 41.896324277s ago: executing program 1 (id=4500): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)={[{@nombcache}, {@user_xattr}]}, 0x2, 0x797, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x2942, 0x98) write$P9_RREADLINK(r0, &(0x7f00000015c0)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0xfe53, 0x0, 0x4) 40.557874233s ago: executing program 1 (id=4516): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000001c0)={[{@nogrpid}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nogrpid}, {@grpjquota}, {@dioread_nolock}]}, 0x3, 0x446, &(0x7f0000000440)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./dev\x00', &(0x7f0000000bc0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000c40)=@filename='./dev/sda1\x00', &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000d00)='./mnt\x00') syz_mount_image$msdos(&(0x7f0000000d40), &(0x7f0000000d80)='.\x00', 0x820f8, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, &(0x7f0000000e00)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f00000008c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x103) 40.251445504s ago: executing program 1 (id=4527): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000000c0)={[{@errors_remount}, {@discard}]}, 0x4, 0x50a, &(0x7f0000000540)="$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") modify_ldt$read_default(0x2, 0x0, 0x0) 39.120690809s ago: executing program 1 (id=4535): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x2800088, &(0x7f0000000880)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000980)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000c80)='./binderfs2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 39.11542949s ago: executing program 37 (id=4535): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x2800088, &(0x7f0000000880)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000980)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000c80)='./binderfs2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 38.81940904s ago: executing program 5 (id=4550): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r4, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 37.908993573s ago: executing program 5 (id=4557): syz_open_procfs$namespace(0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r3, &(0x7f0000000400), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x1, 0x2, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) recvfrom$inet(r3, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 37.012800754s ago: executing program 5 (id=4563): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002400)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002ac0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002b00)='./config\x00', &(0x7f0000002b40)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0xc700, 0x131) 37.003661115s ago: executing program 5 (id=4564): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000003c0)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x2, 0x3, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002f80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000003000)='./file2\x00', &(0x7f0000003040)=[0x2], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 36.899829425s ago: executing program 5 (id=4566): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r4, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 36.296815637s ago: executing program 5 (id=4568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x8e40, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f0000000ec0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 36.259020281s ago: executing program 38 (id=4568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x8e40, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f0000000ec0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 14.960301048s ago: executing program 2 (id=4663): r0 = socket$inet6(0xa, 0x3, 0xff) socket(0x10, 0x0, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x80000000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x840, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) dup2(r0, r0) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000ec0)="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", 0x2ad, r6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000340)=0x6, 0x4) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 13.584790557s ago: executing program 2 (id=4669): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000009e0000006a0a00ff0000", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x95, &(0x7f0000000340)=""/149}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000600000000000000000000100018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.610688716s ago: executing program 7 (id=4671): syz_mount_image$ext4(&(0x7f0000002500)='ext4\x00', &(0x7f0000002540)='./file0\x00', 0x400, &(0x7f0000002580)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f00000025c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000002a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002ac0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002b00)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b80)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000002c80)=0x2) recvmmsg(r1, &(0x7f0000002cc0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000002d00)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002d40), 0x400000000000ec0, 0x2, &(0x7f0000002d80)={0x77359400}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1, 0xa3, 0x7400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=@newlink={0x3c, 0x29, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0xff2c}]}, 0x31}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x9}, {0x9, 0x5, 0xb, 0x2, 0x400, 0x8, 0x8, 0xd}, {0x9, 0x5, 0x3, 0x3, 0x20, 0xd, 0x5, 0x7f}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f0000000c40)={0x14, &(0x7f0000000b80)={0x20, 0x2, 0x47, {0x47, 0x2, "8ed094c02040b0ef88dbff046f0e7ebcfba3db8de408e1fcca2e02115294c16112c35e5f4ebb9a15886ff6e49d131f866a307cc8ab42ccbdb57c6a684645a03be09689557b"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000001200)={0x1c, &(0x7f0000000c80)={0x20, 0x60, 0xed, "420430f9c1e9b79b33563f1525c547ebab4df01560a77d83ccd4978cd6369b78ba7c49eb85441a3f24609a225223316a70ba6adb2d2e70a9ab0df2d130b36f9b5f4bb77ed393db1da5f30684b72aae1bf20108925b97cb6596fbcbf12b17cdb557d7973ca784e2d2d7a4868627ca648e47cdc38990923974d044866b0164e4682169a2f2e4ad17d51fa1e39aa8dfd6307f7aba738d312aeb6260c67db09fe1f1176420eaa3642694d538dc27f468a19129442f14b01e05e40a576dfe34ac0b931a032097c5113baa20ade153aafdd324291f0f97d1e078f98f6eef042334b45a46136862e333221a87f2c32184"}, &(0x7f0000000d80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000011c0)={0x21, 0x0, 0x3, "0fceb8"}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x6243, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002380)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000023c0)={0x10, 0x0, &(0x7f0000002400)=[@dead_binder_done={0x40086310, 0x1}, @enter_looper]}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001280)={'pimreg\x00', 0x5005}) write$tun(r6, &(0x7f0000001380)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0xf98, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, [@dstopts={0x2c, 0x0, '\x00', [@pad1]}, @srh={0x2b, 0x20000000000001bb, 0x4, 0x0, 0x10, 0x18, 0x6}, @srh={0x2f, 0x4, 0x4, 0x2, 0x1, 0x40, 0x10, [@mcast2, @private0]}], "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"}}}}}, 0xfca) 10.881617443s ago: executing program 9 (id=4672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) 10.879333933s ago: executing program 8 (id=4673): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000002b00)='./config\x00', &(0x7f0000002b40)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0xc700, 0x131) 10.865606905s ago: executing program 8 (id=4674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x184) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r4, 0x2b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) getrlimit(0x4, &(0x7f0000000280)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000300)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r8 = dup(r7) write$FUSE_BMAP(r8, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472612d235f28022c7266646e6f3dcfb81fc064e2a727455f5c24ca6e021dfe8b6f3909943f4d549b3f691806b137813391cf948594e6a2311caa961670048f82e4536881ed5915161a259e0125d4c7e42dcde00e3b0803e4d7d80850fede1b2e345938fa3b8ea651ca3898d5a731f72acded79d6692c2bf0531c73b5f7a8c6cd71606e7ad0a337e8274a01f9747cfe9301a07cba2b4df115cff65ca765fbca79676db68f797a1491e2ae011ac7a8d6ab2ef8a0fef284f5f059fe6722201bd2ce01f0b7e1bc55dd1a65314b330cfdc485be6fc7d665309f8f5779e879315cc586c7ce", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) 10.80284367s ago: executing program 3 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./debug\x00', 0x1ff) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) 9.159019608s ago: executing program 9 (id=4675): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, r4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r5, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 9.158518238s ago: executing program 2 (id=4676): syz_mount_image$ext4(&(0x7f0000002500)='ext4\x00', &(0x7f0000002540)='./file0\x00', 0x400, &(0x7f0000002580)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f00000025c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000002a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002ac0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002b00)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000002b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002c40), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002c80)=0x2) recvmmsg(r1, &(0x7f0000002cc0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000002d00)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002d40), 0x400000000000ec0, 0x2, &(0x7f0000002d80)={0x77359400}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1, 0xa3, 0x7400) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=@newlink={0x3c, 0x29, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0xff2c}]}, 0x31}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x9}, {0x9, 0x5, 0xb, 0x2, 0x400, 0x8, 0x8, 0xd}, {0x9, 0x5, 0x3, 0x3, 0x20, 0xd, 0x5, 0x7f}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000c40)={0x14, &(0x7f0000000b80)={0x20, 0x2, 0x47, {0x47, 0x2, "8ed094c02040b0ef88dbff046f0e7ebcfba3db8de408e1fcca2e02115294c16112c35e5f4ebb9a15886ff6e49d131f866a307cc8ab42ccbdb57c6a684645a03be09689557b"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000001200)={0x1c, &(0x7f0000000c80)={0x20, 0x60, 0xed, "420430f9c1e9b79b33563f1525c547ebab4df01560a77d83ccd4978cd6369b78ba7c49eb85441a3f24609a225223316a70ba6adb2d2e70a9ab0df2d130b36f9b5f4bb77ed393db1da5f30684b72aae1bf20108925b97cb6596fbcbf12b17cdb557d7973ca784e2d2d7a4868627ca648e47cdc38990923974d044866b0164e4682169a2f2e4ad17d51fa1e39aa8dfd6307f7aba738d312aeb6260c67db09fe1f1176420eaa3642694d538dc27f468a19129442f14b01e05e40a576dfe34ac0b931a032097c5113baa20ade153aafdd324291f0f97d1e078f98f6eef042334b45a46136862e333221a87f2c32184"}, &(0x7f0000000d80)={0xa1, 0x1, 0x400, "09b5bac94e4123fe42f394c9432331346679804107ca5434f1113957fd80df8e8acfd03e68a1ca46d530d92d4d62e9f015b0223452ca2c70c64a6e6fcbe5cf2b63a82d12609d12e3cbe3668a6def83621bccf813fbbdfd65c74080b1cfc945e18ff6e3a00a5b05bd9d4c49a2b437a8f6f13638602d79047132a4e748866f763eee8aef4d88df32af4b25b27a9d4988f7f807d80287ddc731900bdbbc7ed4e7560a1ccf3cf9d2af5671ff536959a1ff967420b1cc72a57147da1430aa71e42dd354eaa5e6240cc60d0ff7add597e6e624c6c4d4e367a570c6920df8680152f3d72b7022fa83a22a16931de8c4a2e9e79a821f81815f5c9bd370018aec39deda6bd4e3fc230373d30a10cdc225f41c45a25bad9048ae56231fc870f5a61bd8e5924729d8e090c3656abc61071ef510a065f9bb4c98eaaa6d87fb529b4173930325d1ac3977af447f0f4598c606fa3d62d7eca0fc6d6c67e34591188d63b5389ead5812426555f121d4ecead61f5dfb0c491188b8cc57a58e5bfdb3720eea9fe3f5e70797e0ddb045d808be7a1ee3ff2af387da103468c703934a6e77d5ac08ba4262d33507733189d424613c8f2c1a33320d89ef63181777a35cf5b67d177494019f067c4997d73c6c12cb404877273b056a91912ac9f6e46a94961f773a252eb4e84f55661cdb76b54cfd0f5d4d69745c7a1d54cf1258c2ccfa2ec5c79bd2686255f6adb2ac4abffb99edb229cd2af63e8bbe87614997490be637c12ac786458ad26f5daf4d92617a8dc6a5a1b1aff2e8b3deefe91c3be3124b0f0b04f21a39c075918d2d11e339dc770075cff6ced9168d338f6d9acacc71d2671dd4cde09d6b8ca76a4baf8f65263925e2d087e66d0427d853492faa2612e52641d49f3d899719e2c7206e22ec648cd6e0bf71d38ff8a5093ce9aa09200b22762d4603b22a8d9bb5ec70d17aaacf76b0f9e4c42f6ad50e5ae730c471975115a4120c5871fbc229f129fabe1dd514efa5986ab5c06a8638d767a9c29c486e11f913c7b8ee652a905ade190afba62f8f4611bdc1c21d27bcc152dd44e30d06c128b98e3134bf7f784a5a4da1c2af34cb4d971f699a69dd8206c21f581d919910ca97240efbfe4a2831a4ab6e0fa55803940c5811adaa0c4fa652c555be58f388862fa6f4a5871d58d6d8728c4652762f34d4aeeddab4bcdff612ec89acb7a9de01ecaeaed03aaefa8a5692e06dd5dc3e948c11f11383f8181df018a2d2af2e962ecbfea86d79b42e00b9e40c9414e273ec4436e440a38352657bb1cbdcaae7b62718545274f961a5df81ec2d291866a4e87d28846689172e982358d7b5c03ce80314ae1d63ddc3e851c03d22e645843becc3700865ba0c4be1be81a04d79d2c761b3830a98b5518ecfb844590774512d8c18f7c6e2e2ed04a08e46e10d8ef09e071bbdc57b057f"}, &(0x7f00000011c0)={0x21, 0x0, 0x3, "0fceb8"}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x6243, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002380)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000023c0)={0x10, 0x0, &(0x7f0000002400)=[@dead_binder_done={0x40086310, 0x1}, @enter_looper]}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001280)={'pimreg\x00', 0x5005}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r7, &(0x7f0000001380)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0xf98, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, [@dstopts={0x2c, 0x0, '\x00', [@pad1]}, @srh={0x2b, 0x20000000000001bb, 0x4, 0x0, 0x10, 0x18, 0x6}, @srh={0x2f, 0x4, 0x4, 0x2, 0x1, 0x40, 0x10, [@mcast2, @private0]}], "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"}}}}}, 0xfca) 9.157640368s ago: executing program 8 (id=4677): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000940)=""/4113, 0x1011) mkdir(&(0x7f0000001ac0)='dir0\x00', 0x80) mount(0x0, &(0x7f0000001b00)='dir0\x00', &(0x7f0000001b40)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000001bc0)=""/4, 0x1) 9.157190208s ago: executing program 7 (id=4678): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x4000087, 0x2, 0x0) r2 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r3, 0xfff0}, 0x0, 0x0, 0x0) 8.386428477s ago: executing program 3 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./debug\x00', 0x1ff) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) 6.627122705s ago: executing program 9 (id=4679): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 6.626734536s ago: executing program 8 (id=4680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000400), 0x4000087, 0x2, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={0x0, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) 6.626432085s ago: executing program 7 (id=4681): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8840) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x10008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 6.455570753s ago: executing program 7 (id=4682): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900090400000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000340)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x50) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@broadcast, @random="10bd73d1f531", @void, {@ipv4={0x800, @udp={{0x13, 0x4, 0x3, 0x8, 0xb0, 0x67, 0x0, 0x8c, 0x11, 0x0, @private=0xa010100, @remote, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x14, 0xe9, 0x1, 0xb, [{@rand_addr=0x64010102, 0x1}, {@empty, 0xfffffff7}]}, @ssrr={0x89, 0x17, 0xd2, [@multicast2, @private=0xa010102, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp={0x44, 0x4, 0x8e, 0x0, 0xc}]}}, {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "5120c845a02eb2cf187092e17542e7601cc83e711fef5bbe39b0bc4550496e7b", "501716473d6f9d8d236c77d9c8b77dbf", {"0525e8dc834953d6676322b93c70f9e3", "869cfe00000000000000006800"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)='`', 0x1}], 0x1, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004000000000000000000000007fac6c5daf820e3e9755cacfb3cbe6865f4e9381ebfce15f31b4c6442fa0561f209769c40aaf03b92d43204f9ce56be7fc715e0b22c44ed8c4c1d9ec9ef4de419fd526a98c95e98067a27027f55a045b70937455a58e7cea97c35472a64d4d8a1bcc3b1d60a5eb6b6f4543bafed0b9b8f8461eaac668b1ce51b3ec30ca2d3ddb3fe79561279d3a0421dc314730d459054380c5b151ce7140f59db521ed21534a789815f7cd14cfe5ba46885f97b689e278ed04d365104f3bf05b20"], 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000004c0)={0x90000010}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000600000000000000000000100018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.450351623s ago: executing program 3 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./debug\x00', 0x1ff) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) 4.61030917s ago: executing program 9 (id=4683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) 4.609821501s ago: executing program 2 (id=4684): mkdirat(0xffffffffffffff9c, &(0x7f0000002ac0)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000002b40)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0xc700, 0x131) 4.609303301s ago: executing program 8 (id=4685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) 4.590426152s ago: executing program 2 (id=4686): mount$cgroup(0x0, &(0x7f0000000500)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@nofavordynmods}, {@release_agent={'release_agent', 0x3d, './cgroup.cpu/cpuset.cpus'}}, {@cpuset_v2_mode}]}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x8, 0x8, 0x60, 0x10, 0x8}, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3009}}, {0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="be038733818841e8efde85d7416fb371c3d62509f1d57d2e7a840299f731f6479785b862f5ffc91ba15dd4994a776a02c7efb922260ecd52fd5bdbd62fada59fd0bda21dd6b91c80fd947abe945346e217047e35b25e324c41f53d9f71f760788de0f960c95b823e0ff6c530e9c6a2429e7ed6654bab76427ba930d6bd6bc0c7d1570fe52e130b4baae1de2ff51b5bdc91268b7c48b8563081aba48ead5a1ad28d63043fb7625901a01af739a5852bf6344c3bddc1cf4453e7606b0174de"]}, {0x0, 0x0}]}) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000102010100000000410000000a0000003c0001802c00118014000300fe80000000000000000000000000002505000400000000000000000000000000000000010c0002800500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000e00)={@id={0x2, 0x0, @d}}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030002000000000083cd00"/28], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ec0)={'veth0_to_bond\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'gretap0\x00', &(0x7f0000000f40)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000640)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000680)={0x0, @local, @local}, &(0x7f00000006c0)=0xc) 4.51868904s ago: executing program 3 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./debug\x00', 0x1ff) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) 2.586868116s ago: executing program 9 (id=4687): openat(0xffffffffffffff9c, 0x0, 0x141442, 0x41) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000a40)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='enable_event:sched:sched_process_fork', 0x25) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000580), 0x4000087, 0x2, 0x0) unshare(0x62000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) r8 = socket(0x28, 0x801, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000340)=0xb2, 0x4) shutdown(r8, 0x1) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) 2.586527436s ago: executing program 8 (id=4688): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000009e0000006a0a00ff0000", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x95, &(0x7f0000000340)=""/149}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000600000000000000000000100018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.586195636s ago: executing program 7 (id=4689): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x184) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r4, 0x2b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) getrlimit(0x4, &(0x7f0000000280)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000300)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r8 = dup(r7) write$FUSE_BMAP(r8, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472612d235f28022c7266646e6f3dcfb81fc064e2a727455f5c24ca6e021dfe8b6f3909943f4d549b3f691806b137813391cf948594e6a2311caa961670048f82e4536881ed5915161a259e0125d4c7e42dcde00e3b0803e4d7d80850fede1b2e345938fa3b8ea651ca3898d5a731f72acded79d6692c2bf0531c73b5f7a8c6cd71606e7ad0a337e8274a01f9747cfe9301a07cba2b4df115cff65ca765fbca79676db68f797a1491e2ae011ac7a8d6ab2ef8a0fef284f5f059fe6722201bd2ce01f0b7e1bc55dd1a65314b330cfdc485be6fc7d665309f8f5779e879315cc586c7ce63", @ANYRESHEX=r6, @ANYBLOB=',wfdno', @ANYRESHEX=r7, @ANYBLOB=',\x00']) 2.460267599s ago: executing program 3 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./debug\x00', 0x1ff) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) 457.717543ms ago: executing program 9 (id=4690): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, r4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r5, 0xfff0}, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) 456.785233ms ago: executing program 2 (id=4691): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000940)=""/4113, 0x1011) mkdir(&(0x7f0000001ac0)='dir0\x00', 0x80) mount(0x0, &(0x7f0000001b00)='dir0\x00', &(0x7f0000001b40)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000001bc0)=""/4, 0x1) 456.049003ms ago: executing program 7 (id=4692): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x4000087, 0x2, 0x0) r2 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000cc0)={r3, 0xfff0}, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=4569): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./debug\x00', 0x1ff) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000ac0)='./debug\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}]}}) kernel console output (not intermixed with test programs): gal pblock 2 (length 1) [ 1332.575955][T14311] FAULT_INJECTION: forcing a failure. [ 1332.575955][T14311] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.602413][T14311] CPU: 0 PID: 14311 Comm: syz.1.4138 Not tainted syzkaller #0 [ 1332.602745][T14301] tipc: Resetting bearer [ 1332.609911][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1332.609927][T14311] Call Trace: [ 1332.609935][T14311] [ 1332.609944][T14311] __dump_stack+0x21/0x30 [ 1332.636271][T14311] dump_stack_lvl+0x110/0x170 [ 1332.640979][T14311] ? show_regs_print_info+0x20/0x20 [ 1332.646213][T14311] dump_stack+0x15/0x20 [ 1332.650382][T14311] should_fail+0x3ab/0x500 [ 1332.654816][T14311] __should_failslab+0xa4/0xe0 [ 1332.659598][T14311] should_failslab+0x9/0x20 [ 1332.664115][T14311] slab_pre_alloc_hook+0x39/0xd0 [ 1332.669091][T14311] __kmalloc+0x6d/0x2c0 [ 1332.673265][T14311] ? get_callchain_buffers+0x15b/0x370 [ 1332.678738][T14311] get_callchain_buffers+0x15b/0x370 [ 1332.684038][T14311] stack_map_alloc+0x39a/0x570 [ 1332.688898][T14311] map_create+0x3f4/0x1fa0 [ 1332.693327][T14311] __sys_bpf+0x2ff/0x7d0 [ 1332.697586][T14311] ? bpf_link_show_fdinfo+0x330/0x330 [ 1332.702967][T14311] ? __kasan_check_write+0x14/0x20 [ 1332.708093][T14311] ? switch_fpu_return+0x15d/0x2c0 [ 1332.713227][T14311] __x64_sys_bpf+0x7c/0x90 [ 1332.717657][T14311] x64_sys_call+0x4b9/0x9a0 [ 1332.722174][T14311] do_syscall_64+0x4c/0xa0 [ 1332.726608][T14311] ? clear_bhb_loop+0x50/0xa0 [ 1332.731300][T14311] ? clear_bhb_loop+0x50/0xa0 [ 1332.735992][T14311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1332.741899][T14311] RIP: 0033:0x7f128b15a559 [ 1332.746324][T14311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.765950][T14311] RSP: 002b:00007f1289bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1332.774379][T14311] RAX: ffffffffffffffda RBX: 00007f128b3e0fa0 RCX: 00007f128b15a559 [ 1332.782372][T14311] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 0000000000000000 [ 1332.790369][T14311] RBP: 00007f128b1f1b20 R08: 0000000000000000 R09: 0000000000000000 [ 1332.798363][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.806355][T14311] R13: 00007f128b3e1038 R14: 00007f128b3e0fa0 R15: 00007ffc65b5d7f8 [ 1332.814357][T14311] [ 1332.822648][T14296] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1332.837605][T14301] tipc: Disabling bearer [ 1332.843490][T14296] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.4131: lblock 0 mapped to illegal pblock 48 (length 1) [ 1332.846491][T14306] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1332.870950][T14296] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1332.870964][T14306] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.896360][T14296] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.4131: Failed to acquire dquot type 0 [ 1332.915146][T14296] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 1332.933999][T14296] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.4131: mark_inode_dirty error [ 1332.950252][T14296] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 1332.961098][T14296] EXT4-fs (loop0): 1 orphan inode deleted [ 1332.966937][T14296] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1332.974307][ T30] audit: type=1400 audit(1792948021.254:441): avc: denied { ioctl } for pid=14320 comm="syz.6.4143" path="socket:[83643]" dev="sockfs" ino=83643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1333.010784][ T3946] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1333.038607][ T30] audit: type=1400 audit(1792948021.304:442): avc: denied { read } for pid=14320 comm="syz.6.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1333.911455][ T3946] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1333.919952][ T3946] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 1333.949583][ T30] audit: type=1400 audit(1792948021.314:443): avc: denied { create } for pid=14295 comm="syz.0.4131" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1333.996362][ T8] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1334.011259][ T8] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1334.022691][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:0: Failed to release dquot type 0 [ 1334.051048][T10255] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1334.073777][T10255] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 1334.099426][T10255] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 1334.197592][T14349] device syzkaller0 entered promiscuous mode [ 1334.231272][T14349] tipc: Started in network mode [ 1334.236892][T14363] loop7: detected capacity change from 0 to 512 [ 1334.245948][T14349] tipc: Node identity 921ee1b73f4, cluster identity 4711 [ 1334.263120][T14349] tipc: Enabled bearer , priority 0 [ 1334.286232][T14348] tipc: Resetting bearer [ 1334.307997][T14348] tipc: Disabling bearer [ 1334.336152][T14363] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 1334.349467][T14363] System zones: 0-2, 18-18, 34-34 [ 1334.366368][T14363] EXT4-fs (loop7): 1 orphan inode deleted [ 1334.372380][T14363] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,debug,user_xattr,dioread_nolock,stripe=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 1334.398294][T14363] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.424402][T14363] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.4156: corrupted xattr block 6 [ 1334.446584][T14363] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 1334.461496][T14363] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.4156: corrupted xattr block 6 [ 1334.494295][T14381] loop5: detected capacity change from 0 to 512 [ 1334.502091][T14363] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 1334.542103][T14385] device syzkaller0 entered promiscuous mode [ 1334.591538][T14381] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 1334.653971][T14381] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.464944][T14440] FAULT_INJECTION: forcing a failure. [ 1335.464944][T14440] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.477692][T14442] FAULT_INJECTION: forcing a failure. [ 1335.477692][T14442] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.477746][T14442] CPU: 1 PID: 14442 Comm: syz.6.4181 Not tainted syzkaller #0 [ 1335.477767][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1335.477780][T14442] Call Trace: [ 1335.477787][T14442] [ 1335.477794][T14442] __dump_stack+0x21/0x30 [ 1335.518607][T14442] dump_stack_lvl+0x110/0x170 [ 1335.523378][T14442] ? show_regs_print_info+0x20/0x20 [ 1335.528618][T14442] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1335.534136][T14442] ? _raw_spin_lock+0xf0/0xf0 [ 1335.539035][T14442] dump_stack+0x15/0x20 [ 1335.543263][T14442] should_fail+0x3ab/0x500 [ 1335.547716][T14442] __should_failslab+0xa4/0xe0 [ 1335.552508][T14442] should_failslab+0x9/0x20 [ 1335.557042][T14442] slab_pre_alloc_hook+0x39/0xd0 [ 1335.562007][T14442] ? new_inode_pseudo+0x7a/0x210 [ 1335.566997][T14442] kmem_cache_alloc+0x44/0x260 [ 1335.571790][T14442] new_inode_pseudo+0x7a/0x210 [ 1335.576595][T14442] new_inode+0x28/0x1e0 [ 1335.580775][T14442] devpts_pty_new+0xd6/0x670 [ 1335.585388][T14442] ? __kasan_check_write+0x14/0x20 [ 1335.590623][T14442] ? mutex_unlock+0x8f/0x230 [ 1335.595261][T14442] ? devpts_kill_index+0x40/0x40 [ 1335.600225][T14442] ? _raw_spin_unlock+0x4d/0x70 [ 1335.605100][T14442] ? tty_add_file+0x15d/0x170 [ 1335.609800][T14442] ptmx_open+0x1c3/0x2e0 [ 1335.614067][T14442] chrdev_open+0x585/0x5f0 [ 1335.618525][T14442] ? cd_forget+0x170/0x170 [ 1335.622978][T14442] ? fsnotify_perm+0x3e9/0x5b0 [ 1335.627883][T14442] ? cd_forget+0x170/0x170 [ 1335.632351][T14442] do_dentry_open+0x82a/0x1010 [ 1335.637248][T14442] vfs_open+0x73/0x80 [ 1335.641258][T14442] path_openat+0x26e6/0x2f80 [ 1335.645870][T14442] ? __kasan_slab_alloc+0xc9/0xe0 [ 1335.650920][T14442] ? slab_post_alloc_hook+0x4f/0x2b0 [ 1335.656399][T14442] ? __x64_sys_openat+0x136/0x160 [ 1335.661442][T14442] ? x64_sys_call+0x219/0x9a0 [ 1335.666432][T14442] ? do_syscall_64+0x4c/0xa0 [ 1335.671048][T14442] ? do_filp_open+0x400/0x400 [ 1335.675756][T14442] do_filp_open+0x1df/0x400 [ 1335.680295][T14442] ? vfs_tmpfile+0x2d0/0x2d0 [ 1335.684915][T14442] do_sys_openat2+0x15e/0x7f0 [ 1335.689610][T14442] ? __se_sys_futex+0x135/0x330 [ 1335.694489][T14442] ? do_sys_open+0xe0/0xe0 [ 1335.698934][T14442] ? __x64_sys_futex+0x100/0x100 [ 1335.703898][T14442] __x64_sys_openat+0x136/0x160 [ 1335.708769][T14442] x64_sys_call+0x219/0x9a0 [ 1335.713296][T14442] do_syscall_64+0x4c/0xa0 [ 1335.717733][T14442] ? clear_bhb_loop+0x50/0xa0 [ 1335.722431][T14442] ? clear_bhb_loop+0x50/0xa0 [ 1335.727130][T14442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1335.733061][T14442] RIP: 0033:0x7f6a49657559 [ 1335.737495][T14442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.757145][T14442] RSP: 002b:00007f6a480af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1335.765585][T14442] RAX: ffffffffffffffda RBX: 00007f6a498ddfa0 RCX: 00007f6a49657559 [ 1335.773582][T14442] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1335.781575][T14442] RBP: 00007f6a496eeb20 R08: 0000000000000000 R09: 0000000000000000 [ 1335.789567][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.797569][T14442] R13: 00007f6a498de038 R14: 00007f6a498ddfa0 R15: 00007ffecec005d8 [ 1335.805571][T14442] [ 1335.808608][T14440] CPU: 0 PID: 14440 Comm: syz.7.4189 Not tainted syzkaller #0 [ 1335.816100][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1335.826351][T14440] Call Trace: [ 1335.829643][T14440] [ 1335.832589][T14440] __dump_stack+0x21/0x30 [ 1335.836945][T14440] dump_stack_lvl+0x110/0x170 [ 1335.841632][T14440] ? show_regs_print_info+0x20/0x20 [ 1335.846846][T14440] dump_stack+0x15/0x20 [ 1335.851042][T14440] should_fail+0x3ab/0x500 [ 1335.855595][T14440] __should_failslab+0xa4/0xe0 [ 1335.860383][T14440] should_failslab+0x9/0x20 [ 1335.864900][T14440] slab_pre_alloc_hook+0x39/0xd0 [ 1335.869850][T14440] ? __request_module+0x2c3/0x920 [ 1335.874971][T14440] __kmalloc_track_caller+0x6c/0x2c0 [ 1335.880300][T14440] ? __request_module+0x2c3/0x920 [ 1335.885358][T14440] kstrdup+0x36/0x70 [ 1335.889283][T14440] __request_module+0x2c3/0x920 [ 1335.894169][T14440] ? rwsem_read_trylock+0x2af/0x640 [ 1335.899398][T14440] ? _trace_android_vh_delayacct_thrashing_end+0x110/0x110 [ 1335.906614][T14440] ? __crypto_alg_lookup+0x482/0x4b0 [ 1335.912063][T14440] ? up_read+0x56/0x1d0 [ 1335.916260][T14440] ? crypto_alg_lookup+0x197/0x1e0 [ 1335.921396][T14440] crypto_alg_mod_lookup+0xa4/0x710 [ 1335.926611][T14440] crypto_alloc_tfm_node+0x13b/0x340 [ 1335.931910][T14440] crypto_alloc_aead+0x30/0x40 [ 1335.936694][T14440] esp_init_state+0x4f4/0xf40 [ 1335.941490][T14440] ? __kasan_kmalloc+0xd4/0x100 [ 1335.946358][T14440] ? __kmalloc_track_caller+0x13c/0x2c0 [ 1335.951916][T14440] ? netlink_sendmsg+0x879/0xb80 [ 1335.956871][T14440] ? ____sys_sendmsg+0x5be/0x8f0 [ 1335.961841][T14440] ? x64_sys_call+0x4b/0x9a0 [ 1335.966468][T14440] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1335.972552][T14440] ? esp4_err+0x460/0x460 [ 1335.976919][T14440] ? __xfrm_init_state+0x44a/0xbb0 [ 1335.982112][T14440] ? memcpy+0x56/0x70 [ 1335.986112][T14440] __xfrm_init_state+0x8da/0xbb0 [ 1335.991243][T14440] xfrm_add_sa+0x1ea1/0x2e70 [ 1335.995897][T14440] ? xfrm_user_rcv_msg+0x7f0/0x7f0 [ 1336.001029][T14440] xfrm_user_rcv_msg+0x559/0x7f0 [ 1336.005985][T14440] ? xfrm_netlink_rcv+0x90/0x90 [ 1336.010861][T14440] ? avc_has_perm_noaudit+0x490/0x490 [ 1336.016250][T14440] ? x64_sys_call+0x4b/0x9a0 [ 1336.020856][T14440] ? selinux_nlmsg_lookup+0x233/0x440 [ 1336.026246][T14440] netlink_rcv_skb+0x1e9/0x430 [ 1336.031036][T14440] ? xfrm_netlink_rcv+0x90/0x90 [ 1336.035901][T14440] ? netlink_ack+0xb10/0xb10 [ 1336.040518][T14440] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1336.047124][T14440] ? __netlink_lookup+0x387/0x3b0 [ 1336.052163][T14440] xfrm_netlink_rcv+0x72/0x90 [ 1336.056855][T14440] netlink_unicast+0x86c/0xa30 [ 1336.061635][T14440] netlink_sendmsg+0x879/0xb80 [ 1336.066417][T14440] ? netlink_getsockopt+0x530/0x530 [ 1336.071636][T14440] ? alloc_file+0x59/0x580 [ 1336.076075][T14440] ? security_socket_sendmsg+0x82/0xa0 [ 1336.081549][T14440] ? netlink_getsockopt+0x530/0x530 [ 1336.086761][T14440] ____sys_sendmsg+0x5be/0x8f0 [ 1336.091543][T14440] ? __sys_sendmsg_sock+0x40/0x40 [ 1336.096582][T14440] ? import_iovec+0x7c/0xb0 [ 1336.101100][T14440] ___sys_sendmsg+0x236/0x2e0 [ 1336.105810][T14440] ? __sys_sendmsg+0x280/0x280 [ 1336.110589][T14440] ? percpu_counter_add_batch+0x13c/0x160 [ 1336.116326][T14440] ? __fdget+0x1a1/0x230 [ 1336.120579][T14440] __x64_sys_sendmsg+0x201/0x2d0 [ 1336.125528][T14440] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1336.130390][T14440] ? __kasan_check_write+0x14/0x20 [ 1336.135518][T14440] ? switch_fpu_return+0x15d/0x2c0 [ 1336.140667][T14440] x64_sys_call+0x4b/0x9a0 [ 1336.145094][T14440] do_syscall_64+0x4c/0xa0 [ 1336.149522][T14440] ? clear_bhb_loop+0x50/0xa0 [ 1336.154216][T14440] ? clear_bhb_loop+0x50/0xa0 [ 1336.158930][T14440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1336.164838][T14440] RIP: 0033:0x7f485421e559 [ 1336.169264][T14440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.188885][T14440] RSP: 002b:00007f4852c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.197400][T14440] RAX: ffffffffffffffda RBX: 00007f48544a4fa0 RCX: 00007f485421e559 [ 1336.205384][T14440] RDX: 0000000020000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1336.213363][T14440] RBP: 00007f48542b5b20 R08: 0000000000000000 R09: 0000000000000000 [ 1336.221343][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.229329][T14440] R13: 00007f48544a5038 R14: 00007f48544a4fa0 R15: 00007ffdf1ddd668 [ 1336.237336][T14440] [ 1336.375994][T14455] loop7: detected capacity change from 0 to 512 [ 1336.442267][T14455] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1336.492499][T14455] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #15: comm syz.7.4192: iget: bad extra_isize 10 (inode size 256) [ 1336.536308][T14455] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.4192: couldn't read orphan inode 15 (err -117) [ 1336.588854][T14455] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1336.862824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1336.881597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1336.903033][T14477] af_packet: packet size is too long (33022 > 2016) [ 1336.912930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1336.954843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1336.975065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1336.993920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1337.011921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1337.029159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1337.505061][T14503] loop0: detected capacity change from 0 to 512 [ 1337.545683][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4212'. [ 1337.608785][T14503] EXT4-fs error (device loop0): ext4_fill_super:4863: inode #2: comm syz.0.4211: iget: checksum invalid [ 1337.620376][T14503] EXT4-fs (loop0): get root inode failed [ 1337.626757][T14503] EXT4-fs (loop0): mount failed [ 1338.481258][T14521] FAULT_INJECTION: forcing a failure. [ 1338.481258][T14521] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1338.536006][T14526] loop0: detected capacity change from 0 to 1024 [ 1338.542886][T14521] CPU: 1 PID: 14521 Comm: syz.1.4219 Not tainted syzkaller #0 [ 1338.550391][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1338.560475][T14521] Call Trace: [ 1338.563783][T14521] [ 1338.566744][T14521] __dump_stack+0x21/0x30 [ 1338.571108][T14521] dump_stack_lvl+0x110/0x170 [ 1338.575819][T14521] ? show_regs_print_info+0x20/0x20 [ 1338.581058][T14521] dump_stack+0x15/0x20 [ 1338.585245][T14521] should_fail+0x3ab/0x500 [ 1338.589697][T14521] get_futex_key+0x143/0xb60 [ 1338.594315][T14521] ? futex_wait_restart+0x250/0x250 [ 1338.599544][T14521] ? __this_cpu_preempt_check+0x13/0x20 [ 1338.605138][T14521] ? tracing_record_taskinfo+0x7c/0x220 [ 1338.610745][T14521] futex_wait_setup+0x52/0x510 [ 1338.615541][T14521] ? ttwu_do_wakeup+0x447/0x470 [ 1338.620419][T14521] futex_wait+0x235/0x8f0 [ 1338.624781][T14521] ? do_futex+0x2800/0x2800 [ 1338.629346][T14521] ? stack_trace_save+0xa6/0xf0 [ 1338.634233][T14521] do_futex+0xdb1/0x2800 [ 1338.638509][T14521] ? __stack_depot_save+0x34/0x480 [ 1338.643650][T14521] ? __kasan_slab_alloc+0xc9/0xe0 [ 1338.648706][T14521] ? __kasan_slab_alloc+0xb7/0xe0 [ 1338.653760][T14521] ? slab_post_alloc_hook+0x4f/0x2b0 [ 1338.659076][T14521] ? kmem_cache_alloc+0xf7/0x260 [ 1338.664041][T14521] ? security_file_alloc+0x33/0x120 [ 1338.669282][T14521] ? __alloc_file+0xb5/0x2a0 [ 1338.673927][T14521] ? alloc_empty_file+0x97/0x180 [ 1338.678899][T14521] ? dentry_open+0x4e/0x100 [ 1338.683428][T14521] ? __se_sys_open_tree+0x6ad/0x810 [ 1338.688653][T14521] ? __x64_sys_open_tree+0x7b/0x90 [ 1338.693789][T14521] ? x64_sys_call+0x529/0x9a0 [ 1338.698500][T14521] ? do_syscall_64+0x4c/0xa0 [ 1338.703256][T14521] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1338.709374][T14521] ? futex_exit_release+0x1e0/0x1e0 [ 1338.714621][T14521] ? slab_post_alloc_hook+0x6d/0x2b0 [ 1338.719944][T14521] ? mntput_no_expire+0x100/0x6b0 [ 1338.725004][T14521] ? vfs_submount+0xb0/0xb0 [ 1338.729531][T14521] ? __kasan_check_write+0x14/0x20 [ 1338.734682][T14521] ? lockref_put_or_lock+0x114/0x180 [ 1338.740012][T14521] __se_sys_futex+0x135/0x330 [ 1338.744720][T14521] ? __se_sys_open_tree+0x715/0x810 [ 1338.749948][T14521] ? __x64_sys_futex+0x100/0x100 [ 1338.754930][T14521] ? __x64_sys_open_tree+0x90/0x90 [ 1338.760074][T14521] __x64_sys_futex+0xe5/0x100 [ 1338.764892][T14521] x64_sys_call+0x251/0x9a0 [ 1338.769429][T14521] do_syscall_64+0x4c/0xa0 [ 1338.773874][T14521] ? clear_bhb_loop+0x50/0xa0 [ 1338.778582][T14521] ? clear_bhb_loop+0x50/0xa0 [ 1338.783287][T14521] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1338.789222][T14521] RIP: 0033:0x7f128b15a559 [ 1338.793672][T14521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.813328][T14521] RSP: 002b:00007f1289bb20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1338.821776][T14521] RAX: ffffffffffffffda RBX: 00007f128b3e0fa8 RCX: 00007f128b15a559 [ 1338.829786][T14521] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f128b3e0fa8 [ 1338.837813][T14521] RBP: 00007f128b3e0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1338.845824][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.853824][T14521] R13: 00007f128b3e1038 R14: 00007ffc65b5d710 R15: 00007ffc65b5d7f8 [ 1338.861844][T14521] [ 1338.871442][T14525] loop5: detected capacity change from 0 to 512 [ 1338.916067][T14526] EXT4-fs (loop0): Ignoring removed bh option [ 1338.948810][T14532] FAULT_INJECTION: forcing a failure. [ 1338.948810][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.964103][T14525] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1338.984550][T14526] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 1339.008892][T14525] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1339.018315][T14532] CPU: 1 PID: 14532 Comm: syz.7.4223 Not tainted syzkaller #0 [ 1339.025825][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1339.035910][T14532] Call Trace: [ 1339.039218][T14532] [ 1339.042177][T14532] __dump_stack+0x21/0x30 [ 1339.046545][T14532] dump_stack_lvl+0x110/0x170 [ 1339.051260][T14532] ? show_regs_print_info+0x20/0x20 [ 1339.056492][T14532] dump_stack+0x15/0x20 [ 1339.060894][T14532] should_fail+0x3ab/0x500 [ 1339.065347][T14532] __should_failslab+0xa4/0xe0 [ 1339.070149][T14532] should_failslab+0x9/0x20 [ 1339.074678][T14532] slab_pre_alloc_hook+0x39/0xd0 [ 1339.079678][T14532] __kmalloc+0x6d/0x2c0 [ 1339.079808][T14525] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1339.083863][T14532] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 1339.083891][T14532] ? sock_kmalloc+0x99/0xf0 [ 1339.083916][T14532] sock_kmalloc+0x99/0xf0 [ 1339.104753][T14532] __ipv6_sock_mc_join+0x2fe/0x600 [ 1339.110018][T14532] ipv6_sock_mc_join+0x27/0x30 [ 1339.114823][T14532] ipv6_mcast_join_leave+0x19f/0x230 [ 1339.120223][T14532] ? compat_ipv6_mcast_join_leave+0x230/0x230 [ 1339.123953][T14525] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.4222: bad orphan inode 15 [ 1339.126330][T14532] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1339.142918][T14532] ? __schedule+0xbd7/0x14a0 [ 1339.147550][T14532] ? __kasan_check_write+0x14/0x20 [ 1339.152700][T14532] ipv6_setsockopt+0x8a8/0x3750 [ 1339.157603][T14532] ? ipv6_update_options+0x410/0x410 [ 1339.162151][T14525] ext4_test_bit(bit=14, block=18) = 1 [ 1339.163182][T14532] ? __kasan_check_read+0x11/0x20 [ 1339.173619][T14532] ? futex_wait_queue_me+0x2ff/0x660 [ 1339.178949][T14532] ? futex_wait_setup+0x510/0x510 [ 1339.184032][T14532] ? futex_wait+0x5b1/0x8f0 [ 1339.188579][T14532] ? do_futex+0x2800/0x2800 [ 1339.189758][T14525] is_bad_inode(inode)=0 [ 1339.193113][T14532] ? __stack_depot_save+0x34/0x480 [ 1339.193138][T14532] ? path_openat+0x284f/0x2f80 [ 1339.199924][T14525] NEXT_ORPHAN(inode)=1023 [ 1339.202732][T14532] ? __asan_set_shadow_00+0xe/0x10 [ 1339.217199][T14532] ? avc_has_perm_noaudit+0x390/0x490 [ 1339.219479][T14525] max_ino=32 [ 1339.222613][T14532] ? memcpy+0x56/0x70 [ 1339.222641][T14532] ? avc_has_perm_noaudit+0x30a/0x490 [ 1339.222665][T14532] ? avc_denied+0x1b0/0x1b0 [ 1339.222686][T14532] ? kstrtouint_from_user+0x1c4/0x220 [ 1339.228814][T14525] i_nlink=0 [ 1339.229968][T14532] ? avc_has_perm+0x163/0x250 [ 1339.252578][T14525] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4222: bg 0: block 440: padding at end of block bitmap is not set [ 1339.253306][T14532] ? avc_has_perm_noaudit+0x490/0x490 [ 1339.273113][T14532] ? proc_fail_nth_write+0x180/0x200 [ 1339.278443][T14532] tcp_setsockopt+0x22b/0x1e90 [ 1339.283284][T14532] ? selinux_socket_setsockopt+0x282/0x360 [ 1339.289123][T14532] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 1339.294536][T14532] ? vfs_write+0xc72/0xfd0 [ 1339.298984][T14532] ? __fget_files+0x2e1/0x340 [ 1339.299615][T14525] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1339.304212][T14532] sock_common_setsockopt+0xa0/0xb0 [ 1339.304238][T14532] ? sock_common_recvmsg+0x1c0/0x1c0 [ 1339.323429][T14532] __sys_setsockopt+0x2e9/0x470 [ 1339.328313][T14532] ? __ia32_sys_recv+0xb0/0xb0 [ 1339.333112][T14532] ? __kasan_check_write+0x14/0x20 [ 1339.335343][T14525] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1339.338257][T14532] __x64_sys_setsockopt+0xbf/0xd0 [ 1339.353925][T14532] x64_sys_call+0x982/0x9a0 [ 1339.358475][T14532] do_syscall_64+0x4c/0xa0 [ 1339.362924][T14532] ? clear_bhb_loop+0x50/0xa0 [ 1339.367639][T14532] ? clear_bhb_loop+0x50/0xa0 [ 1339.372350][T14532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1339.378277][T14532] RIP: 0033:0x7f485421e559 [ 1339.382727][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.402460][T14532] RSP: 002b:00007f4852c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1339.410912][T14532] RAX: ffffffffffffffda RBX: 00007f48544a4fa0 RCX: 00007f485421e559 [ 1339.418921][T14532] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 1339.426952][T14532] RBP: 00007f48542b5b20 R08: 0000000000000088 R09: 0000000000000000 [ 1339.434963][T14532] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 1339.442974][T14532] R13: 00007f48544a5038 R14: 00007f48544a4fa0 R15: 00007ffdf1ddd668 [ 1339.451023][T14532] [ 1339.569393][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1339.569411][ T30] audit: type=1400 audit(1792948027.844:449): avc: denied { ioctl } for pid=14547 comm="syz.6.4230" path="socket:[83980]" dev="sockfs" ino=83980 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1340.327119][T14558] FAULT_INJECTION: forcing a failure. [ 1340.327119][T14558] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.339940][T14558] CPU: 1 PID: 14558 Comm: syz.1.4232 Not tainted syzkaller #0 [ 1340.347425][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1340.357499][T14558] Call Trace: [ 1340.360820][T14558] [ 1340.363773][T14558] __dump_stack+0x21/0x30 [ 1340.368241][T14558] dump_stack_lvl+0x110/0x170 [ 1340.372956][T14558] ? show_regs_print_info+0x20/0x20 [ 1340.378277][T14558] dump_stack+0x15/0x20 [ 1340.382464][T14558] should_fail+0x3ab/0x500 [ 1340.386918][T14558] __should_failslab+0xa4/0xe0 [ 1340.391718][T14558] should_failslab+0x9/0x20 [ 1340.396258][T14558] slab_pre_alloc_hook+0x39/0xd0 [ 1340.401385][T14558] __kmalloc+0x6d/0x2c0 [ 1340.405583][T14558] ? __vmalloc_node_range+0x384/0xad0 [ 1340.411019][T14558] __vmalloc_node_range+0x384/0xad0 [ 1340.416264][T14558] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1340.421853][T14558] __vmalloc+0x79/0x90 [ 1340.425958][T14558] ? bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1340.431535][T14558] bpf_prog_alloc_no_stats+0x3b/0x2c0 [ 1340.436941][T14558] ? bpf_prog_alloc+0x15/0x1e0 [ 1340.441737][T14558] bpf_prog_alloc+0x1f/0x1e0 [ 1340.446363][T14558] bpf_prog_create_from_user+0xa7/0x420 [ 1340.451945][T14558] ? seccomp_attach_filter+0xb50/0xb50 [ 1340.457473][T14558] do_seccomp+0x803/0x1480 [ 1340.461941][T14558] ? prctl_set_seccomp+0x60/0x60 [ 1340.466917][T14558] ? __x64_sys_futex+0x100/0x100 [ 1340.471886][T14558] ? ksys_write+0x1fa/0x260 [ 1340.476449][T14558] ? __kasan_check_write+0x14/0x20 [ 1340.481595][T14558] ? switch_fpu_return+0x15d/0x2c0 [ 1340.486742][T14558] __x64_sys_seccomp+0x7b/0x90 [ 1340.491560][T14558] x64_sys_call+0x22e/0x9a0 [ 1340.496115][T14558] do_syscall_64+0x4c/0xa0 [ 1340.500570][T14558] ? clear_bhb_loop+0x50/0xa0 [ 1340.505315][T14558] ? clear_bhb_loop+0x50/0xa0 [ 1340.510025][T14558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1340.515952][T14558] RIP: 0033:0x7f128b15a559 [ 1340.520403][T14558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.540073][T14558] RSP: 002b:00007f1289bb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1340.540108][T14558] RAX: ffffffffffffffda RBX: 00007f128b3e0fa0 RCX: 00007f128b15a559 [ 1340.540126][T14558] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 1340.540141][T14558] RBP: 00007f128b1f1b20 R08: 0000000000000000 R09: 0000000000000000 [ 1340.540156][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.540170][T14558] R13: 00007f128b3e1038 R14: 00007f128b3e0fa0 R15: 00007ffc65b5d7f8 [ 1340.540191][T14558] [ 1340.559615][ T30] audit: type=1400 audit(1792948028.814:450): avc: denied { write } for pid=14559 comm="syz.7.4233" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1340.747535][T14578] loop1: detected capacity change from 0 to 128 [ 1340.856283][T14578] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 1340.863637][ T30] audit: type=1400 audit(1792948029.134:451): avc: denied { connect } for pid=14583 comm="syz.5.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1340.876595][T14578] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.920684][T14586] loop5: detected capacity change from 0 to 512 [ 1340.935568][T14578] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1341.034515][T14594] loop5: detected capacity change from 0 to 1024 [ 1341.046240][T14594] EXT4-fs (loop5): Ignoring removed bh option [ 1341.139687][T14594] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,errors=remount-ro,bh,. Quota mode: none. [ 1341.157452][T14594] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.242154][T14594] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 3) [ 1341.265174][T14594] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.302490][ T30] audit: type=1400 audit(1792948029.584:452): avc: denied { map } for pid=14593 comm="syz.5.4245" path="/453/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1341.327350][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.363265][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.457579][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.481412][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.492426][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.531751][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.539642][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.564528][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.571326][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.586060][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.601088][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.616059][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.622978][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.637545][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.644401][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.782490][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1341.789586][T14599] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 3: comm syz.5.4245: lblock 3 mapped to illegal pblock 3 (length 1) [ 1341.806770][T14599] EXT4-fs (loop5): Remounting filesystem read-only [ 1342.091483][ T30] audit: type=1400 audit(1792948030.334:453): avc: denied { create } for pid=14608 comm="syz.0.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1342.448855][T14618] loop6: detected capacity change from 0 to 512 [ 1342.566965][T14618] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 1342.598150][T14618] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1342.626637][T14618] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1342.641790][T14618] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1342.654277][T14618] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1342.654277][T14618] [ 1342.664305][T14618] EXT4-fs (loop6): Total free blocks count 0 [ 1342.670412][T14618] EXT4-fs (loop6): Free/Dirty block details [ 1342.879622][T14618] EXT4-fs (loop6): free_blocks=65280 [ 1342.885210][T14618] EXT4-fs (loop6): dirty_blocks=1 [ 1342.890415][T14618] EXT4-fs (loop6): Block reservation details [ 1342.997411][T14618] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 1343.227324][T14656] loop6: detected capacity change from 0 to 512 [ 1343.409051][T14656] EXT4-fs (loop6): Ignoring removed nobh option [ 1343.682972][T14656] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #3: comm syz.6.4269: corrupted inode contents [ 1343.695092][T14656] EXT4-fs error (device loop6): ext4_dirty_inode:6118: inode #3: comm syz.6.4269: mark_inode_dirty error [ 1343.775767][T14656] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #3: comm syz.6.4269: corrupted inode contents [ 1343.788209][T14656] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.4269: mark_inode_dirty error [ 1343.800025][T14656] Quota error (device loop6): write_blk: dquota write failed [ 1343.807589][T14656] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1343.817866][T14656] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.4269: Failed to acquire dquot type 0 [ 1343.829942][T14656] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #16: comm syz.6.4269: corrupted inode contents [ 1343.843839][T14656] EXT4-fs error (device loop6): ext4_dirty_inode:6118: inode #16: comm syz.6.4269: mark_inode_dirty error [ 1343.857238][T14656] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #16: comm syz.6.4269: corrupted inode contents [ 1343.901125][T14656] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.4269: mark_inode_dirty error [ 1344.396083][T14656] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #16: comm syz.6.4269: corrupted inode contents [ 1344.523046][ T30] audit: type=1400 audit(1792948032.804:454): avc: denied { read append } for pid=14671 comm="syz.1.4274" name="file0" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1344.661661][T14656] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1344.698925][T14656] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #16: comm syz.6.4269: corrupted inode contents [ 1344.816151][T14656] EXT4-fs error (device loop6): ext4_truncate:4317: inode #16: comm syz.6.4269: mark_inode_dirty error [ 1344.851635][T14656] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1345.050070][T14656] EXT4-fs (loop6): 1 truncate cleaned up [ 1345.123602][T14656] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000004000,nobh,usrjquota=,init_itable,,errors=continue. Quota mode: writeback. [ 1345.343996][T14656] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.453799][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1345.480329][T14702] FAULT_INJECTION: forcing a failure. [ 1345.480329][T14702] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.494167][T14702] CPU: 0 PID: 14702 Comm: syz.0.4286 Not tainted syzkaller #0 [ 1345.502042][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1345.512140][T14702] Call Trace: [ 1345.515453][T14702] [ 1345.518532][T14702] __dump_stack+0x21/0x30 [ 1345.522910][T14702] dump_stack_lvl+0x110/0x170 [ 1345.527637][T14702] ? show_regs_print_info+0x20/0x20 [ 1345.532882][T14702] dump_stack+0x15/0x20 [ 1345.537078][T14702] should_fail+0x3ab/0x500 [ 1345.541574][T14702] __should_failslab+0xa4/0xe0 [ 1345.546384][T14702] should_failslab+0x9/0x20 [ 1345.550920][T14702] slab_pre_alloc_hook+0x39/0xd0 [ 1345.555900][T14702] __kmalloc+0x6d/0x2c0 [ 1345.560095][T14702] ? mpi_alloc_limb_space+0x2e/0x40 [ 1345.565409][T14702] mpi_alloc_limb_space+0x2e/0x40 [ 1345.570473][T14702] mpi_powm+0xf28/0x23a0 [ 1345.574772][T14702] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 1345.580973][T14702] ? mpihelp_cmp+0xc0/0xe0 [ 1345.585537][T14702] rsa_enc+0x28f/0x3c0 [ 1345.589642][T14702] ? rsa_exit+0x30/0x30 [ 1345.593853][T14702] ? memset+0x35/0x40 [ 1345.597870][T14702] pkcs1pad_verify+0x4b2/0x680 [ 1345.602673][T14702] public_key_verify_signature+0x992/0xec0 [ 1345.608518][T14702] ? key_create_or_update+0x430/0x9c0 [ 1345.613928][T14702] ? __se_sys_add_key+0x34b/0x410 [ 1345.618987][T14702] ? public_key_free+0x80/0x80 [ 1345.623797][T14702] x509_check_for_self_signed+0x35e/0x460 [ 1345.629558][T14702] x509_cert_parse+0x684/0x8b0 [ 1345.634359][T14702] x509_key_preparse+0x63/0x650 [ 1345.639343][T14702] asymmetric_key_preparse+0x9e/0xe0 [ 1345.644670][T14702] key_create_or_update+0x430/0x9c0 [ 1345.649924][T14702] ? key_type_put+0x20/0x20 [ 1345.654552][T14702] ? lookup_user_key_possessed+0x40/0x40 [ 1345.660239][T14702] ? __kasan_check_write+0x14/0x20 [ 1345.665389][T14702] __se_sys_add_key+0x34b/0x410 [ 1345.670285][T14702] ? __x64_sys_add_key+0xd0/0xd0 [ 1345.675348][T14702] ? ksys_write+0x1fa/0x260 [ 1345.679887][T14702] ? __kasan_check_write+0x14/0x20 [ 1345.685127][T14702] __x64_sys_add_key+0xbf/0xd0 [ 1345.689930][T14702] x64_sys_call+0x713/0x9a0 [ 1345.694461][T14702] do_syscall_64+0x4c/0xa0 [ 1345.698913][T14702] ? clear_bhb_loop+0x50/0xa0 [ 1345.703642][T14702] ? clear_bhb_loop+0x50/0xa0 [ 1345.708354][T14702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1345.714281][T14702] RIP: 0033:0x7fb3b81f1559 [ 1345.718721][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.738379][T14702] RSP: 002b:00007fb3b6c49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1345.746829][T14702] RAX: ffffffffffffffda RBX: 00007fb3b8477fa0 RCX: 00007fb3b81f1559 [ 1345.754837][T14702] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1345.762837][T14702] RBP: 00007fb3b8288b20 R08: 0000000019407df9 R09: 0000000000000000 [ 1345.770825][T14702] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1345.778814][T14702] R13: 00007fb3b8478038 R14: 00007fb3b8477fa0 R15: 00007ffcb1efe9b8 [ 1345.786812][T14702] [ 1345.863311][ T30] audit: type=1400 audit(1792948034.144:455): avc: denied { append } for pid=14706 comm="syz.7.4289" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1345.898521][T14705] loop5: detected capacity change from 0 to 8192 [ 1345.989640][T14718] 9pnet: Insufficient options for proto=fd [ 1346.128309][ T30] audit: type=1400 audit(1792948034.404:456): avc: denied { create } for pid=14719 comm="syz.5.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1346.359416][T14729] loop7: detected capacity change from 0 to 512 [ 1346.412654][T14729] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1346.426531][T14729] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1346.433321][T14729] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.4298: bad orphan inode 15 [ 1346.444095][T14729] ext4_test_bit(bit=14, block=18) = 1 [ 1346.449600][T14729] is_bad_inode(inode)=0 [ 1346.454670][T14729] NEXT_ORPHAN(inode)=1023 [ 1346.459122][T14729] max_ino=32 [ 1346.462651][T14729] i_nlink=0 [ 1346.466150][T14729] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2928: inode #15: comm syz.7.4298: corrupted xattr block 19 [ 1346.478960][T14729] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117) [ 1346.488360][T14729] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1346.570809][T14737] loop7: detected capacity change from 0 to 512 [ 1346.941461][T14737] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1346.953960][T14737] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.979247][T14741] FAULT_INJECTION: forcing a failure. [ 1346.979247][T14741] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.995643][T14743] device syzkaller0 entered promiscuous mode [ 1347.001855][T14741] CPU: 1 PID: 14741 Comm: syz.6.4302 Not tainted syzkaller #0 [ 1347.009388][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1347.019512][T14741] Call Trace: [ 1347.022831][T14741] [ 1347.025813][T14741] __dump_stack+0x21/0x30 [ 1347.030246][T14741] dump_stack_lvl+0x110/0x170 [ 1347.034938][T14741] ? show_regs_print_info+0x20/0x20 [ 1347.040161][T14741] dump_stack+0x15/0x20 [ 1347.044336][T14741] should_fail+0x3ab/0x500 [ 1347.048804][T14741] __should_failslab+0xa4/0xe0 [ 1347.053582][T14741] should_failslab+0x9/0x20 [ 1347.058103][T14741] slab_pre_alloc_hook+0x39/0xd0 [ 1347.063069][T14741] __kmalloc+0x6d/0x2c0 [ 1347.067243][T14741] ? mpi_alloc_limb_space+0x2e/0x40 [ 1347.072468][T14741] mpi_alloc_limb_space+0x2e/0x40 [ 1347.077528][T14741] mpi_powm+0xf28/0x23a0 [ 1347.081787][T14741] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 1347.087952][T14741] ? mpihelp_cmp+0xc0/0xe0 [ 1347.092407][T14741] rsa_enc+0x28f/0x3c0 [ 1347.096482][T14741] ? rsa_exit+0x30/0x30 [ 1347.100647][T14741] ? memset+0x35/0x40 [ 1347.104726][T14741] pkcs1pad_verify+0x4b2/0x680 [ 1347.109582][T14741] public_key_verify_signature+0x992/0xec0 [ 1347.115425][T14741] ? key_create_or_update+0x430/0x9c0 [ 1347.120806][T14741] ? __se_sys_add_key+0x34b/0x410 [ 1347.125963][T14741] ? public_key_free+0x80/0x80 [ 1347.130743][T14741] x509_check_for_self_signed+0x35e/0x460 [ 1347.136498][T14741] x509_cert_parse+0x684/0x8b0 [ 1347.141289][T14741] x509_key_preparse+0x63/0x650 [ 1347.146270][T14741] asymmetric_key_preparse+0x9e/0xe0 [ 1347.151654][T14741] key_create_or_update+0x430/0x9c0 [ 1347.156899][T14741] ? key_type_put+0x20/0x20 [ 1347.161417][T14741] ? lookup_user_key_possessed+0x40/0x40 [ 1347.167103][T14741] ? __kasan_check_write+0x14/0x20 [ 1347.172255][T14741] __se_sys_add_key+0x34b/0x410 [ 1347.177111][T14741] ? __x64_sys_add_key+0xd0/0xd0 [ 1347.182162][T14741] ? ksys_write+0x1fa/0x260 [ 1347.186687][T14741] ? __kasan_check_write+0x14/0x20 [ 1347.191910][T14741] __x64_sys_add_key+0xbf/0xd0 [ 1347.196690][T14741] x64_sys_call+0x713/0x9a0 [ 1347.201221][T14741] do_syscall_64+0x4c/0xa0 [ 1347.205644][T14741] ? clear_bhb_loop+0x50/0xa0 [ 1347.210441][T14741] ? clear_bhb_loop+0x50/0xa0 [ 1347.215143][T14741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1347.221154][T14741] RIP: 0033:0x7f6a49657559 [ 1347.225584][T14741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.245291][T14741] RSP: 002b:00007f6a480af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1347.253745][T14741] RAX: ffffffffffffffda RBX: 00007f6a498ddfa0 RCX: 00007f6a49657559 [ 1347.261746][T14741] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1347.269735][T14741] RBP: 00007f6a496eeb20 R08: 00000000075ec7db R09: 0000000000000000 [ 1347.277734][T14741] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1347.285716][T14741] R13: 00007f6a498de038 R14: 00007f6a498ddfa0 R15: 00007ffecec005d8 [ 1347.293803][T14741] [ 1347.310441][T14744] tipc: Enabled bearer , priority 0 [ 1347.325678][T14742] tipc: Resetting bearer [ 1347.346248][T14742] tipc: Disabling bearer [ 1347.371668][ T30] audit: type=1400 audit(1792948035.654:457): avc: denied { create } for pid=14747 comm="syz.6.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1347.496310][ T30] audit: type=1400 audit(1792948035.774:458): avc: denied { write } for pid=14767 comm="syz.0.4315" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1347.520682][ T1419] Bluetooth: hci0: command 0x1003 tx timeout [ 1347.528098][T13712] Bluetooth: hci0: sending frame failed (-49) [ 1347.915211][T14778] loop6: detected capacity change from 0 to 512 [ 1348.017420][T14778] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1348.206742][T14778] EXT4-fs (loop6): 1 truncate cleaned up [ 1348.223444][T14778] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nogrpid,grpjquota=,dioread_nolock,,errors=continue. Quota mode: none. [ 1348.401053][T14778] EXT4-fs (sda1): re-mounted. Opts: . Quota mode: none. [ 1348.434956][T14788] device syzkaller0 entered promiscuous mode [ 1348.445000][T13762] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1348.466405][T13762] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1348.466969][T14788] tipc: Enabled bearer , priority 0 [ 1348.487596][T13762] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1348.513891][T13762] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1348.534340][T14787] tipc: Resetting bearer [ 1348.540666][T13762] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1348.561657][T13762] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1348.581722][T13762] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1348.583211][T14787] tipc: Disabling bearer [ 1348.603278][T13762] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1348.636411][T13762] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1348.657726][T13762] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1348.737216][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4326'. [ 1348.773326][T14804] loop7: detected capacity change from 0 to 256 [ 1348.844815][T14112] tipc: Left network mode [ 1348.935107][ T30] audit: type=1400 audit(1792948037.194:459): avc: denied { read } for pid=14809 comm="syz.0.4331" name="usbmon5" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1348.959813][ T30] audit: type=1400 audit(1792948037.194:460): avc: denied { open } for pid=14809 comm="syz.0.4331" path="/dev/usbmon5" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1348.986587][ T30] audit: type=1400 audit(1792948037.194:461): avc: denied { ioctl } for pid=14809 comm="syz.0.4331" path="/dev/usbmon5" dev="devtmpfs" ino=170 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1349.466549][T14817] netlink: 'syz.0.4334': attribute type 16 has an invalid length. [ 1349.474493][T14817] netlink: 'syz.0.4334': attribute type 17 has an invalid length. [ 1349.538118][T14815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.545506][T14815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.565751][T14815] device bridge_slave_0 entered promiscuous mode [ 1349.576277][T14815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.583508][T14815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.591128][T14815] device bridge_slave_1 entered promiscuous mode [ 1349.598486][ T1419] Bluetooth: hci0: command 0x1001 tx timeout [ 1349.604674][T13712] Bluetooth: hci0: sending frame failed (-49) [ 1349.611709][T14112] device bridge_slave_1 left promiscuous mode [ 1349.617959][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.626005][T14112] device bridge_slave_0 left promiscuous mode [ 1349.632468][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.640866][T14112] device veth1_macvtap left promiscuous mode [ 1349.647182][T14112] device veth0_vlan left promiscuous mode [ 1349.666735][T14830] netlink: 'syz.5.4339': attribute type 3 has an invalid length. [ 1349.701207][T14834] loop5: detected capacity change from 0 to 128 [ 1349.762344][T14834] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1349.774366][T14834] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.817500][T14828] device ip6gre1 entered promiscuous mode [ 1349.826654][T14837] device syzkaller0 entered promiscuous mode [ 1349.864237][T14837] tipc: Started in network mode [ 1349.869218][T14837] tipc: Node identity 2e52ab925d61, cluster identity 4711 [ 1349.877072][T14837] tipc: Enabled bearer , priority 0 [ 1349.911212][T14836] tipc: Resetting bearer [ 1349.925003][T14836] tipc: Disabling bearer [ 1349.928324][T14849] loop0: detected capacity change from 0 to 512 [ 1349.938611][T14849] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1349.953040][T14849] EXT4-fs (loop0): 1 truncate cleaned up [ 1349.958757][T14849] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpid,debug_want_extra_isize=0x0000000000000068,lazytime,nodioread_nolock,minixdf,,errors=continue. Quota mode: none. [ 1350.166245][T14854] loop7: detected capacity change from 0 to 128 [ 1350.278684][T14854] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 1350.337225][T14854] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.355802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1350.363971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1350.375429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1350.391851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1350.400377][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.407489][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.415835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1350.424370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1350.432794][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.441135][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.449513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1350.529170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1350.543650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1350.561020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1350.579796][T14815] device veth0_vlan entered promiscuous mode [ 1350.586857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1350.595811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1350.604353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1350.620660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1350.630123][T14815] device veth1_macvtap entered promiscuous mode [ 1350.640351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1350.651091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1351.067936][T14880] device syzkaller0 entered promiscuous mode [ 1351.081892][T14880] tipc: Enabled bearer , priority 0 [ 1351.089364][T14879] tipc: Resetting bearer [ 1351.096677][T14879] tipc: Disabling bearer [ 1351.156188][T14886] ip_tables: iptables: counters copy to user failed while replacing table [ 1351.671670][T13112] Bluetooth: hci0: command 0x1009 tx timeout [ 1351.681001][T14910] device syzkaller0 entered promiscuous mode [ 1351.690565][T14910] tipc: Enabled bearer , priority 0 [ 1351.693485][ T30] audit: type=1400 audit(1792948039.974:462): avc: denied { append } for pid=14911 comm="syz.0.4373" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1351.722736][T14909] tipc: Resetting bearer [ 1351.730112][T14909] tipc: Disabling bearer [ 1351.783769][T14915] loop0: detected capacity change from 0 to 512 [ 1351.813217][T14915] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1351.824441][T14918] loop7: detected capacity change from 0 to 512 [ 1351.827630][T14915] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 1351.839287][T14915] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.4374: iget: bad i_size value: 12154757448730 [ 1351.853197][T14915] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.4374: couldn't read orphan inode 13 (err -117) [ 1351.865442][T14915] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 1351.878008][T14918] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1351.892748][T14915] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1351.896878][T14918] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.461946][T14930] device bridge1 entered promiscuous mode [ 1352.867432][T14946] device syzkaller0 entered promiscuous mode [ 1352.877614][T14946] tipc: Enabled bearer , priority 0 [ 1352.890779][T14945] tipc: Resetting bearer [ 1352.912714][T14945] tipc: Disabling bearer [ 1353.363653][T14967] loop8: detected capacity change from 0 to 512 [ 1353.636541][T14969] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1353.667130][T14967] EXT4-fs (loop8): 1 orphan inode deleted [ 1353.673133][T14967] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 1353.713253][T14967] EXT4-fs error (device loop8): ext4_add_entry:2488: inode #2: comm syz.8.4394: Directory hole found for htree leaf block 0 [ 1354.544428][T14969] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1354.581441][ T30] audit: type=1400 audit(1792948042.854:463): avc: denied { name_bind } for pid=14977 comm="syz.5.4397" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1354.930270][T14986] FAULT_INJECTION: forcing a failure. [ 1354.930270][T14986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1354.943887][T14986] CPU: 1 PID: 14986 Comm: syz.5.4401 Not tainted syzkaller #0 [ 1354.951394][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1354.961485][T14986] Call Trace: [ 1354.964795][T14986] [ 1354.967776][T14986] __dump_stack+0x21/0x30 [ 1354.972250][T14986] dump_stack_lvl+0x110/0x170 [ 1354.976972][T14986] ? show_regs_print_info+0x20/0x20 [ 1354.982221][T14986] dump_stack+0x15/0x20 [ 1354.986445][T14986] should_fail+0x3ab/0x500 [ 1354.990900][T14986] should_fail_alloc_page+0x55/0x80 [ 1354.996134][T14986] prepare_alloc_pages+0x13f/0x590 [ 1355.001293][T14986] ? __alloc_pages_bulk+0xab0/0xab0 [ 1355.006543][T14986] __alloc_pages+0x11d/0x460 [ 1355.011179][T14986] ? zone_watermark_fast+0x250/0x250 [ 1355.016500][T14986] ? rsa_enc+0x28f/0x3c0 [ 1355.020784][T14986] __stack_depot_save+0x37d/0x480 [ 1355.025860][T14986] stack_depot_save+0xe/0x10 [ 1355.030485][T14986] save_stack+0x12f/0x230 [ 1355.034845][T14986] ? __reset_page_owner+0x190/0x190 [ 1355.040103][T14986] ? post_alloc_hook+0x192/0x1b0 [ 1355.045105][T14986] ? prep_new_page+0x1c/0x110 [ 1355.049818][T14986] ? get_page_from_freelist+0x2d42/0x2dd0 [ 1355.055568][T14986] ? __alloc_pages+0x1a2/0x460 [ 1355.060364][T14986] ? __stack_depot_save+0x37d/0x480 [ 1355.065602][T14986] ? kasan_set_track+0x5b/0x70 [ 1355.070395][T14986] ? kasan_set_free_info+0x23/0x40 [ 1355.075542][T14986] ? ____kasan_slab_free+0x125/0x160 [ 1355.080860][T14986] ? __kasan_slab_free+0x11/0x20 [ 1355.085826][T14986] ? slab_free_freelist_hook+0xc2/0x190 [ 1355.091421][T14986] ? kfree+0xc4/0x270 [ 1355.095441][T14986] ? kfree_sensitive+0x6d/0x80 [ 1355.100236][T14986] ? mpi_free_limb_space+0x1f/0x30 [ 1355.105387][T14986] ? mpihelp_release_karatsuba_ctx+0x82/0x160 [ 1355.111500][T14986] ? mpi_powm+0x163e/0x23a0 [ 1355.116044][T14986] ? rsa_enc+0x28f/0x3c0 [ 1355.120337][T14986] __set_page_owner+0x2b/0x2e0 [ 1355.125136][T14986] ? kernel_init_free_pages+0xdc/0xf0 [ 1355.130543][T14986] post_alloc_hook+0x192/0x1b0 [ 1355.135340][T14986] prep_new_page+0x1c/0x110 [ 1355.139884][T14986] get_page_from_freelist+0x2d42/0x2dd0 [ 1355.145474][T14986] ? lruvec_init+0x150/0x150 [ 1355.150097][T14986] ? __alloc_pages+0x460/0x460 [ 1355.154894][T14986] ? prepare_alloc_pages+0x2e7/0x590 [ 1355.160313][T14986] ? __alloc_pages_bulk+0xab0/0xab0 [ 1355.165549][T14986] ? 0xffffffffa0032000 [ 1355.169731][T14986] ? is_bpf_text_address+0x177/0x190 [ 1355.175063][T14986] __alloc_pages+0x1a2/0x460 [ 1355.179706][T14986] ? stack_trace_save+0xf0/0xf0 [ 1355.184690][T14986] ? zone_watermark_fast+0x250/0x250 [ 1355.190043][T14986] ? stack_trace_save+0xa6/0xf0 [ 1355.194916][T14986] __stack_depot_save+0x37d/0x480 [ 1355.199962][T14986] kasan_set_track+0x5b/0x70 [ 1355.204590][T14986] ? kasan_set_track+0x4a/0x70 [ 1355.209378][T14986] ? kasan_set_free_info+0x23/0x40 [ 1355.214516][T14986] ? ____kasan_slab_free+0x125/0x160 [ 1355.219816][T14986] ? __kasan_slab_free+0x11/0x20 [ 1355.224771][T14986] ? slab_free_freelist_hook+0xc2/0x190 [ 1355.230334][T14986] ? kfree+0xc4/0x270 [ 1355.234331][T14986] ? kfree_sensitive+0x6d/0x80 [ 1355.239109][T14986] ? mpi_free_limb_space+0x1f/0x30 [ 1355.244238][T14986] ? mpihelp_release_karatsuba_ctx+0x82/0x160 [ 1355.250339][T14986] ? mpi_powm+0x163e/0x23a0 [ 1355.254861][T14986] ? rsa_enc+0x28f/0x3c0 [ 1355.259117][T14986] ? pkcs1pad_verify+0x4b2/0x680 [ 1355.264065][T14986] ? public_key_verify_signature+0x992/0xec0 [ 1355.270066][T14986] ? x509_check_for_self_signed+0x35e/0x460 [ 1355.275986][T14986] ? x509_cert_parse+0x684/0x8b0 [ 1355.280961][T14986] ? x509_key_preparse+0x63/0x650 [ 1355.286003][T14986] ? asymmetric_key_preparse+0x9e/0xe0 [ 1355.291479][T14986] ? key_create_or_update+0x430/0x9c0 [ 1355.296869][T14986] ? __se_sys_add_key+0x34b/0x410 [ 1355.301906][T14986] ? __x64_sys_add_key+0xbf/0xd0 [ 1355.306858][T14986] ? x64_sys_call+0x713/0x9a0 [ 1355.311552][T14986] ? do_syscall_64+0x4c/0xa0 [ 1355.316158][T14986] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1355.322245][T14986] ? kfree+0xc4/0x270 [ 1355.326245][T14986] kasan_set_free_info+0x23/0x40 [ 1355.331210][T14986] ____kasan_slab_free+0x125/0x160 [ 1355.336340][T14986] __kasan_slab_free+0x11/0x20 [ 1355.341131][T14986] slab_free_freelist_hook+0xc2/0x190 [ 1355.346517][T14986] ? kfree_sensitive+0x6d/0x80 [ 1355.351303][T14986] kfree+0xc4/0x270 [ 1355.355128][T14986] ? kfree_sensitive+0x6d/0x80 [ 1355.359913][T14986] kfree_sensitive+0x6d/0x80 [ 1355.364547][T14986] mpi_free_limb_space+0x1f/0x30 [ 1355.369515][T14986] mpihelp_release_karatsuba_ctx+0x82/0x160 [ 1355.375444][T14986] mpi_powm+0x163e/0x23a0 [ 1355.379818][T14986] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 1355.386016][T14986] ? mpihelp_cmp+0xc0/0xe0 [ 1355.390673][T14986] rsa_enc+0x28f/0x3c0 [ 1355.394774][T14986] ? rsa_exit+0x30/0x30 [ 1355.398951][T14986] ? memset+0x35/0x40 [ 1355.402968][T14986] pkcs1pad_verify+0x4b2/0x680 [ 1355.407760][T14986] public_key_verify_signature+0x992/0xec0 [ 1355.413585][T14986] ? key_create_or_update+0x430/0x9c0 [ 1355.418971][T14986] ? __se_sys_add_key+0x34b/0x410 [ 1355.424014][T14986] ? public_key_free+0x80/0x80 [ 1355.428805][T14986] x509_check_for_self_signed+0x35e/0x460 [ 1355.434542][T14986] x509_cert_parse+0x684/0x8b0 [ 1355.439324][T14986] x509_key_preparse+0x63/0x650 [ 1355.444189][T14986] asymmetric_key_preparse+0x9e/0xe0 [ 1355.449599][T14986] key_create_or_update+0x430/0x9c0 [ 1355.454819][T14986] ? key_type_put+0x20/0x20 [ 1355.459344][T14986] ? lookup_user_key_possessed+0x40/0x40 [ 1355.464992][T14986] ? __kasan_check_write+0x14/0x20 [ 1355.470207][T14986] __se_sys_add_key+0x34b/0x410 [ 1355.475069][T14986] ? __x64_sys_add_key+0xd0/0xd0 [ 1355.480032][T14986] ? ksys_write+0x1fa/0x260 [ 1355.484550][T14986] ? __kasan_check_write+0x14/0x20 [ 1355.489692][T14986] __x64_sys_add_key+0xbf/0xd0 [ 1355.494472][T14986] x64_sys_call+0x713/0x9a0 [ 1355.499007][T14986] do_syscall_64+0x4c/0xa0 [ 1355.503454][T14986] ? clear_bhb_loop+0x50/0xa0 [ 1355.508165][T14986] ? clear_bhb_loop+0x50/0xa0 [ 1355.512862][T14986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1355.518780][T14986] RIP: 0033:0x7ff6ba4c4559 [ 1355.523229][T14986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.542854][T14986] RSP: 002b:00007ff6b8f1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1355.551284][T14986] RAX: ffffffffffffffda RBX: 00007ff6ba74afa0 RCX: 00007ff6ba4c4559 [ 1355.559300][T14986] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1355.567288][T14986] RBP: 00007ff6ba55bb20 R08: 00000000145c983b R09: 0000000000000000 [ 1355.575272][T14986] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1355.583261][T14986] R13: 00007ff6ba74b038 R14: 00007ff6ba74afa0 R15: 00007ffc754ccd48 [ 1355.591259][T14986] [ 1355.737592][T14998] loop5: detected capacity change from 0 to 128 [ 1355.746017][T14999] loop8: detected capacity change from 0 to 512 [ 1355.904054][T14999] EXT4-fs (loop8): mounted filesystem without journal. Opts: resuid=0x0000000000000000,bsddf,,errors=continue. Quota mode: writeback. [ 1355.941558][T14999] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.977649][T14999] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.4406: corrupted xattr block 6 [ 1356.003978][T14999] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 1356.022354][T14999] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.4406: corrupted xattr block 6 [ 1356.042694][T14999] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 1356.051961][ T30] audit: type=1400 audit(1792948044.334:464): avc: denied { rmdir } for pid=14995 comm="syz.8.4406" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1356.157644][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4413'. [ 1356.192429][T15018] serial 00:03: in use; can't configure [ 1356.735495][ T8] tipc: Left network mode [ 1357.129542][T15047] loop1: detected capacity change from 0 to 1024 [ 1357.226208][T15047] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,dioread_lock,nodioread_nolock,noquota,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 1357.256636][T15050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.264277][T15050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.273407][T15050] device bridge_slave_0 entered promiscuous mode [ 1357.283119][T15050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.290263][T15050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.297933][T15050] device bridge_slave_1 entered promiscuous mode [ 1357.378629][T15050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.385766][T15050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.393152][T15050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.400221][T15050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.455691][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1357.470436][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.478477][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.490557][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1357.499029][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.506121][ T3946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.556998][ T3946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1357.573408][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.580522][ T3946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.584075][ T30] audit: type=1326 audit(1792948045.804:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.615998][T15065] loop5: detected capacity change from 0 to 512 [ 1357.624615][ T30] audit: type=1326 audit(1792948045.844:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.654259][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.662614][T15069] loop1: detected capacity change from 0 to 512 [ 1357.669119][ T30] audit: type=1326 audit(1792948045.844:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.694827][ T30] audit: type=1326 audit(1792948045.844:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.719852][ T30] audit: type=1326 audit(1792948045.844:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.745611][ T30] audit: type=1326 audit(1792948045.844:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.774355][ T30] audit: type=1326 audit(1792948045.844:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.8.4431" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9535836559 code=0x7ffc0000 [ 1357.801543][T15069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 1357.804512][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1357.809644][T15069] System zones: 0-2, 18-18, 34-34 [ 1357.820005][ T8] device bridge_slave_1 left promiscuous mode [ 1357.831456][T15069] [ 1357.834420][T15069] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1357.842370][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.849982][T15065] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1357.850341][ T8] device bridge_slave_0 left promiscuous mode [ 1357.869531][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.871860][T15065] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1357.881466][T15069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4433: bg 0: block 248: padding at end of block bitmap is not set [ 1357.903517][T15069] Quota error (device loop1): write_blk: dquota write failed [ 1357.911163][ T8] device veth1_macvtap left promiscuous mode [ 1357.911161][T15069] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1357.911192][T15069] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.4433: Failed to acquire dquot type 1 [ 1357.922279][ T8] device veth0_vlan left promiscuous mode [ 1357.951040][T15069] EXT4-fs (loop1): 1 truncate cleaned up [ 1357.958950][T15069] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000000000acd3,nodiscard,lazytime,grpjquota=,grpjquota=,acl,abort,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 1358.046303][T15076] loop7: detected capacity change from 0 to 512 [ 1358.125282][ T30] audit: type=1326 audit(1792948046.404:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.1.4437" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128b15a559 code=0x7ffc0000 [ 1358.125457][T15076] EXT4-fs warning (device loop7): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 1358.192562][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1358.209457][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1358.228559][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1358.243239][T15084] FAULT_INJECTION: forcing a failure. [ 1358.243239][T15084] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.256211][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1358.265674][T15050] device veth0_vlan entered promiscuous mode [ 1358.275081][T15086] device syzkaller0 entered promiscuous mode [ 1358.281721][T15084] CPU: 1 PID: 15084 Comm: syz.8.4440 Not tainted syzkaller #0 [ 1358.289232][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1358.298895][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1358.299327][T15084] Call Trace: [ 1358.299336][T15084] [ 1358.312779][T15084] __dump_stack+0x21/0x30 [ 1358.312820][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1358.317150][T15084] dump_stack_lvl+0x110/0x170 [ 1358.317183][T15084] ? show_regs_print_info+0x20/0x20 [ 1358.334318][T15084] dump_stack+0x15/0x20 [ 1358.338522][T15084] should_fail+0x3ab/0x500 [ 1358.342985][T15084] __should_failslab+0xa4/0xe0 [ 1358.347795][T15084] should_failslab+0x9/0x20 [ 1358.352351][T15084] slab_pre_alloc_hook+0x39/0xd0 [ 1358.353049][T15086] tipc: Enabled bearer , priority 0 [ 1358.357325][T15084] ? getname_flags+0xba/0x510 [ 1358.368609][T15084] kmem_cache_alloc+0x44/0x260 [ 1358.373588][T15084] getname_flags+0xba/0x510 [ 1358.378307][T15084] __x64_sys_renameat+0xa8/0xd0 [ 1358.383203][T15084] x64_sys_call+0x274/0x9a0 [ 1358.387439][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1358.387737][T15084] do_syscall_64+0x4c/0xa0 [ 1358.398136][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1358.400062][T15084] ? clear_bhb_loop+0x50/0xa0 [ 1358.412687][T15084] ? clear_bhb_loop+0x50/0xa0 [ 1358.414687][T15050] device veth1_macvtap entered promiscuous mode [ 1358.417400][T15084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1358.429639][T15084] RIP: 0033:0x7f9535836559 [ 1358.434087][T15084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.453835][T15084] RSP: 002b:00007f953428e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1358.462302][T15084] RAX: ffffffffffffffda RBX: 00007f9535abcfa0 RCX: 00007f9535836559 [ 1358.470331][T15084] RDX: ffffffffffffffff RSI: 0000200000001c00 RDI: ffffffffffffffff [ 1358.478454][T15084] RBP: 00007f95358cdb20 R08: 0000000000000000 R09: 0000000000000000 [ 1358.486478][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.486512][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1358.494668][T15084] R13: 00007f9535abd038 R14: 00007f9535abcfa0 R15: 00007ffd6be6ab98 [ 1358.494696][T15084] [ 1358.514647][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1358.523285][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1358.532288][T15085] tipc: Resetting bearer [ 1358.539570][T15085] tipc: Disabling bearer [ 1358.557092][T15090] loop5: detected capacity change from 0 to 128 [ 1358.577080][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1358.592343][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1358.744959][T15106] device syzkaller0 entered promiscuous mode [ 1359.916645][T15112] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1360.086815][T15122] device syzkaller0 entered promiscuous mode [ 1360.107906][T15120] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4456'. [ 1360.121537][T15120] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1360.145082][T15122] tipc: Started in network mode [ 1360.155668][T15122] tipc: Node identity e6e073e1fe58, cluster identity 4711 [ 1360.174605][T15122] tipc: Enabled bearer , priority 0 [ 1360.185485][T15128] loop8: detected capacity change from 0 to 512 [ 1360.193229][T15121] tipc: Resetting bearer [ 1360.208841][T15121] tipc: Disabling bearer [ 1360.307030][T15128] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1360.336366][T15138] loop9: detected capacity change from 0 to 512 [ 1360.474759][T15154] loop1: detected capacity change from 0 to 128 [ 1360.495307][T15156] device syzkaller0 entered promiscuous mode [ 1360.497579][T15156] tipc: Enabled bearer , priority 0 [ 1360.505062][T15155] tipc: Resetting bearer [ 1360.588977][T15155] tipc: Disabling bearer [ 1361.013002][T15183] device syzkaller0 entered promiscuous mode [ 1361.022397][T15183] tipc: Started in network mode [ 1361.027361][T15183] tipc: Node identity b6d7e0be2ba6, cluster identity 4711 [ 1361.035577][T15183] tipc: Enabled bearer , priority 0 [ 1361.047425][T15182] tipc: Resetting bearer [ 1361.054912][T15182] tipc: Disabling bearer [ 1361.087580][T15191] FAULT_INJECTION: forcing a failure. [ 1361.087580][T15191] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1361.101118][T15191] CPU: 0 PID: 15191 Comm: syz.9.4487 Not tainted syzkaller #0 [ 1361.108632][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1361.118720][T15191] Call Trace: [ 1361.122028][T15191] [ 1361.124984][T15191] __dump_stack+0x21/0x30 [ 1361.129330][T15191] dump_stack_lvl+0x110/0x170 [ 1361.134056][T15191] ? show_regs_print_info+0x20/0x20 [ 1361.139291][T15191] dump_stack+0x15/0x20 [ 1361.143596][T15191] should_fail+0x3ab/0x500 [ 1361.148053][T15191] get_futex_key+0x143/0xb60 [ 1361.152715][T15191] ? futex_wait_restart+0x250/0x250 [ 1361.157989][T15191] futex_wake+0x133/0x8f0 [ 1361.162353][T15191] ? __kernel_text_address+0xa0/0x100 [ 1361.167803][T15191] ? unwind_get_return_address+0x4d/0x90 [ 1361.173489][T15191] ? futex_wait+0x8f0/0x8f0 [ 1361.178029][T15191] ? stack_trace_save+0xa6/0xf0 [ 1361.182918][T15191] do_futex+0xd8d/0x2800 [ 1361.187209][T15191] ? __stack_depot_save+0x34/0x480 [ 1361.192351][T15191] ? __kasan_slab_alloc+0xc9/0xe0 [ 1361.197419][T15191] ? __kasan_slab_alloc+0xb7/0xe0 [ 1361.202474][T15191] ? slab_post_alloc_hook+0x4f/0x2b0 [ 1361.207799][T15191] ? kmem_cache_alloc+0xf7/0x260 [ 1361.212797][T15191] ? security_file_alloc+0x33/0x120 [ 1361.218034][T15191] ? __alloc_file+0xb5/0x2a0 [ 1361.222656][T15191] ? alloc_empty_file+0x97/0x180 [ 1361.227660][T15191] ? dentry_open+0x4e/0x100 [ 1361.232194][T15191] ? __se_sys_open_tree+0x6ad/0x810 [ 1361.237419][T15191] ? __x64_sys_open_tree+0x7b/0x90 [ 1361.242587][T15191] ? x64_sys_call+0x529/0x9a0 [ 1361.247293][T15191] ? do_syscall_64+0x4c/0xa0 [ 1361.251915][T15191] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1361.258050][T15191] ? futex_exit_release+0x1e0/0x1e0 [ 1361.263399][T15191] ? slab_post_alloc_hook+0x6d/0x2b0 [ 1361.268728][T15191] ? mntput_no_expire+0x100/0x6b0 [ 1361.273842][T15191] ? vfs_submount+0xb0/0xb0 [ 1361.278394][T15191] ? __kasan_check_write+0x14/0x20 [ 1361.283540][T15191] ? lockref_put_or_lock+0x114/0x180 [ 1361.288860][T15191] __se_sys_futex+0x135/0x330 [ 1361.293571][T15191] ? __se_sys_open_tree+0x715/0x810 [ 1361.298808][T15191] ? __x64_sys_futex+0x100/0x100 [ 1361.303775][T15191] ? __x64_sys_open_tree+0x90/0x90 [ 1361.308943][T15191] __x64_sys_futex+0xe5/0x100 [ 1361.313661][T15191] x64_sys_call+0x251/0x9a0 [ 1361.318290][T15191] do_syscall_64+0x4c/0xa0 [ 1361.322752][T15191] ? clear_bhb_loop+0x50/0xa0 [ 1361.327474][T15191] ? clear_bhb_loop+0x50/0xa0 [ 1361.332183][T15191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1361.338133][T15191] RIP: 0033:0x7f9c46a01559 [ 1361.342573][T15191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.362218][T15191] RSP: 002b:00007f9c454590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1361.370672][T15191] RAX: ffffffffffffffda RBX: 00007f9c46c87fa8 RCX: 00007f9c46a01559 [ 1361.378687][T15191] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c46c87fac [ 1361.386695][T15191] RBP: 00007f9c46c87fa0 R08: 0002812b0138c89e R09: 0000000000000000 [ 1361.394735][T15191] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1361.402763][T15191] R13: 00007f9c46c88038 R14: 00007ffcf52638d0 R15: 00007ffcf52639b8 [ 1361.410867][T15191] [ 1361.630414][T15223] tipc: Enabled bearer , priority 0 [ 1361.638595][T15217] tipc: Disabling bearer [ 1361.687846][T15208] FAULT_INJECTION: forcing a failure. [ 1361.687846][T15208] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.716101][T15208] CPU: 0 PID: 15208 Comm: syz.5.4494 Not tainted syzkaller #0 [ 1361.723631][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1361.733897][T15208] Call Trace: [ 1361.737200][T15208] [ 1361.740154][T15208] __dump_stack+0x21/0x30 [ 1361.744518][T15208] dump_stack_lvl+0x110/0x170 [ 1361.749220][T15208] ? show_regs_print_info+0x20/0x20 [ 1361.754452][T15208] dump_stack+0x15/0x20 [ 1361.758654][T15208] should_fail+0x3ab/0x500 [ 1361.763125][T15208] __should_failslab+0xa4/0xe0 [ 1361.767940][T15208] should_failslab+0x9/0x20 [ 1361.772491][T15208] slab_pre_alloc_hook+0x39/0xd0 [ 1361.777465][T15208] ? security_file_alloc+0x33/0x120 [ 1361.782700][T15208] kmem_cache_alloc+0x44/0x260 [ 1361.787509][T15208] security_file_alloc+0x33/0x120 [ 1361.792571][T15208] __alloc_file+0xb5/0x2a0 [ 1361.797020][T15208] alloc_empty_file+0x97/0x180 [ 1361.801822][T15208] alloc_file+0x59/0x580 [ 1361.806102][T15208] alloc_file_pseudo+0x180/0x200 [ 1361.811072][T15208] ? alloc_empty_file_noaccount+0x80/0x80 [ 1361.816825][T15208] __anon_inode_getfd+0x26b/0x3d0 [ 1361.821892][T15208] ? anon_inode_getfd+0x40/0x40 [ 1361.826783][T15208] ? __traceiter_x86_fpu_xstate_check_failed+0xb0/0xb0 [ 1361.833672][T15208] anon_inode_getfd+0x31/0x40 [ 1361.838396][T15208] pidfd_create+0xd9/0x230 [ 1361.842840][T15208] __se_sys_pidfd_open+0x7c/0x180 [ 1361.847889][T15208] __x64_sys_pidfd_open+0x5b/0x70 [ 1361.852941][T15208] x64_sys_call+0x42d/0x9a0 [ 1361.857508][T15208] do_syscall_64+0x4c/0xa0 [ 1361.861956][T15208] ? clear_bhb_loop+0x50/0xa0 [ 1361.866666][T15208] ? clear_bhb_loop+0x50/0xa0 [ 1361.871371][T15208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1361.877300][T15208] RIP: 0033:0x7ff6ba4c4559 [ 1361.881745][T15208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.892778][T15225] loop1: detected capacity change from 0 to 2048 [ 1361.901378][T15208] RSP: 002b:00007ff6b8f1c018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1361.901407][T15208] RAX: ffffffffffffffda RBX: 00007ff6ba74afa0 RCX: 00007ff6ba4c4559 [ 1361.924192][T15208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000005a3 [ 1361.932197][T15208] RBP: 00007ff6ba55bb20 R08: 0000000000000000 R09: 0000000000000000 [ 1361.940196][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.948184][T15208] R13: 00007ff6ba74b038 R14: 00007ff6ba74afa0 R15: 00007ffc754ccd48 [ 1361.956179][T15208] [ 1362.116493][T15225] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,user_xattr,,errors=continue. Quota mode: none. [ 1362.129106][T15225] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.576069][T15248] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4508'. [ 1362.591227][T15248] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(3) [ 1362.602564][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1362.602579][ T30] audit: type=1400 audit(1792948050.884:500): avc: denied { setattr } for pid=15249 comm="syz.5.4509" name="XDP" dev="sockfs" ino=86376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1362.631491][T15248] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(6) [ 1362.645086][T15225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4500: bg 0: block 345: padding at end of block bitmap is not set [ 1362.660457][T15225] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 691 with error 28 [ 1362.674885][T15225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1362.674885][T15225] [ 1362.685138][T15225] EXT4-fs (loop1): Total free blocks count 0 [ 1362.691218][T15225] EXT4-fs (loop1): Free/Dirty block details [ 1362.697483][T15225] EXT4-fs (loop1): free_blocks=0 [ 1362.702983][T15225] EXT4-fs (loop1): dirty_blocks=704 [ 1362.708376][T15225] EXT4-fs (loop1): Block reservation details [ 1362.714673][T15225] EXT4-fs (loop1): i_reserved_data_blocks=44 [ 1362.730568][T15254] tipc: Enabled bearer , priority 0 [ 1362.740196][T15253] tipc: Disabling bearer [ 1362.747218][T14112] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 707 with max blocks 1 with error 28 [ 1362.760110][T14112] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1362.760110][T14112] [ 1362.986583][T15272] loop7: detected capacity change from 0 to 8192 [ 1362.996307][T15276] loop1: detected capacity change from 0 to 512 [ 1363.052242][T15276] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1363.108971][T15276] EXT4-fs (loop1): 1 truncate cleaned up [ 1363.118319][T15276] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nogrpid,grpjquota=,dioread_nolock,,errors=continue. Quota mode: none. [ 1363.179925][T15286] tipc: Enabled bearer , priority 0 [ 1363.188731][T15285] tipc: Disabling bearer [ 1363.200499][T15276] EXT4-fs (sda1): re-mounted. Opts: . Quota mode: none. [ 1363.281132][T13713] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1363.305832][T13713] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1363.314124][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4526'. [ 1363.327591][T13713] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1363.356007][T13713] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1363.377015][T13713] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1363.398356][T13713] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1363.419476][T13713] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1363.440742][T13713] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1363.460867][T13713] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1363.481837][T13713] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1363.539664][T15299] loop5: detected capacity change from 0 to 512 [ 1363.594239][T15299] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1363.616591][T15299] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4531: invalid indirect mapped block 4294967295 (level 1) [ 1363.726578][T15299] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4531: invalid indirect mapped block 4294967295 (level 1) [ 1363.857798][T15299] EXT4-fs (loop5): 2 truncates cleaned up [ 1363.916624][T15299] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,oldalloc,max_dir_size_kb=0x000000000000000d,i_version,,errors=continue. Quota mode: writeback. [ 1364.061912][T15304] FAULT_INJECTION: forcing a failure. [ 1364.061912][T15304] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.075070][T15304] CPU: 1 PID: 15304 Comm: syz.7.4533 Not tainted syzkaller #0 [ 1364.082580][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1364.092660][T15304] Call Trace: [ 1364.095959][T15304] [ 1364.098904][T15304] __dump_stack+0x21/0x30 [ 1364.103257][T15304] dump_stack_lvl+0x110/0x170 [ 1364.107949][T15304] ? show_regs_print_info+0x20/0x20 [ 1364.113169][T15304] dump_stack+0x15/0x20 [ 1364.117336][T15304] should_fail+0x3ab/0x500 [ 1364.121770][T15304] __should_failslab+0xa4/0xe0 [ 1364.126553][T15304] should_failslab+0x9/0x20 [ 1364.131069][T15304] slab_pre_alloc_hook+0x39/0xd0 [ 1364.136023][T15304] ? __alloc_file+0x28/0x2a0 [ 1364.140629][T15304] kmem_cache_alloc+0x44/0x260 [ 1364.145517][T15304] __alloc_file+0x28/0x2a0 [ 1364.149951][T15304] alloc_empty_file+0x97/0x180 [ 1364.154740][T15304] alloc_file+0x59/0x580 [ 1364.159026][T15304] alloc_file_pseudo+0x180/0x200 [ 1364.163984][T15304] ? alloc_empty_file_noaccount+0x80/0x80 [ 1364.169742][T15304] sock_alloc_file+0xba/0x260 [ 1364.174437][T15304] __sys_socket+0x12b/0x190 [ 1364.178960][T15304] __x64_sys_socket+0x7a/0x90 [ 1364.183741][T15304] x64_sys_call+0x8c5/0x9a0 [ 1364.188292][T15304] do_syscall_64+0x4c/0xa0 [ 1364.192744][T15304] ? clear_bhb_loop+0x50/0xa0 [ 1364.197438][T15304] ? clear_bhb_loop+0x50/0xa0 [ 1364.202132][T15304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1364.208048][T15304] RIP: 0033:0x7f485421e559 [ 1364.212478][T15304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.232101][T15304] RSP: 002b:00007f4852c75fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1364.240529][T15304] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f485421e559 [ 1364.248513][T15304] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001f [ 1364.256496][T15304] RBP: 00007f48542b5b20 R08: 0000000000000000 R09: 0000000000000000 [ 1364.264480][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1364.272470][T15304] R13: 00007f48544a5038 R14: 00007f48544a4fa0 R15: 00007ffdf1ddd668 [ 1364.280549][T15304] [ 1364.298859][ T7372] tipc: Left network mode [ 1364.390274][T15313] tipc: Enabled bearer , priority 0 [ 1364.433230][T15312] tipc: Disabling bearer [ 1364.661149][T15330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.669907][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.677839][T15330] device bridge_slave_0 entered promiscuous mode [ 1364.688206][T15330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.695869][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.767835][T15330] device bridge_slave_1 entered promiscuous mode [ 1365.340561][T15330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.347721][T15330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.355067][T15330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.362141][T15330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.394871][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.408445][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.448601][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1365.456301][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1365.468141][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1365.477006][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1365.493226][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.500329][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.571003][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1365.580777][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1365.590356][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.597557][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.607584][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1365.616367][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1365.624936][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1365.633456][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1365.643592][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1365.652598][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1365.661192][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1365.670205][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1365.679739][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1365.687816][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1365.699580][T15330] device veth0_vlan entered promiscuous mode [ 1365.724444][T15368] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1365.737877][T15362] tipc: Enabled bearer , priority 0 [ 1365.757106][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1365.771777][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1365.788541][T15360] tipc: Disabling bearer [ 1365.803214][ T7372] device bridge_slave_1 left promiscuous mode [ 1365.809679][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.817482][ T7372] device bridge_slave_0 left promiscuous mode [ 1365.824150][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.833218][ T7372] device veth1_macvtap left promiscuous mode [ 1365.839405][ T7372] device veth0_vlan left promiscuous mode [ 1365.945849][T15330] device veth1_macvtap entered promiscuous mode [ 1365.956873][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1365.965144][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1365.974194][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1365.991031][T15372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=15372 comm=syz.7.4558 [ 1366.008562][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1366.035749][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.490467][T15390] loop5: detected capacity change from 0 to 512 [ 1366.570995][ T7378] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1366.722444][ T7378] FAT-fs (loop5): Filesystem has been set read-only [ 1366.797986][ T7378] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1367.204889][T15398] loop7: detected capacity change from 0 to 512 [ 1367.339959][T15398] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.4567: invalid indirect mapped block 256 (level 2) [ 1367.359752][T15400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.373707][T15398] EXT4-fs (loop7): 2 truncates cleaned up [ 1367.401754][T15398] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,noinit_itable,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 1367.436348][T15400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.448344][T15400] device bridge_slave_0 entered promiscuous mode [ 1367.477034][T15400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.501391][T15400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.508997][T15400] device bridge_slave_1 entered promiscuous mode [ 1367.714632][ T30] audit: type=1400 audit(1792948055.994:501): avc: denied { bind } for pid=15396 comm="syz.7.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1367.751322][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1367.760922][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1367.777837][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1367.788970][T12441] udevd[12441]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1367.805989][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1367.816689][T12441] udevd[12441]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1367.826097][T14112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.833199][T14112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.842226][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1367.850920][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1367.859819][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.866945][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.884198][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1367.892319][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1367.900553][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1367.918775][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1367.934911][T15400] device veth0_vlan entered promiscuous mode [ 1367.949806][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1367.958175][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1367.965772][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1367.973642][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1367.984584][T15400] device veth1_macvtap entered promiscuous mode [ 1367.997438][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1368.445237][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1368.925871][ T30] audit: type=1400 audit(1792948057.204:502): avc: denied { read } for pid=15439 comm="syz.7.4582" path="socket:[86923]" dev="sockfs" ino=86923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1369.211967][ T7372] device bridge_slave_1 left promiscuous mode [ 1369.220290][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.233801][ T7372] device bridge_slave_0 left promiscuous mode [ 1369.240206][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.248985][ T7372] device veth1_macvtap left promiscuous mode [ 1369.255288][ T7372] device veth0_vlan left promiscuous mode [ 1370.923628][T15487] xt_bpf: check failed: parse error [ 1371.025460][T15493] loop9: detected capacity change from 0 to 128 [ 1371.360265][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 1371.421728][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 1371.425537][T15493] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1371.455375][T15493] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.491502][ T30] audit: type=1400 audit(1792948059.774:503): avc: denied { mount } for pid=15508 comm="syz.8.4606" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1371.531955][ T30] audit: type=1400 audit(1792948059.804:504): avc: denied { unmount } for pid=14815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1371.574270][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 1371.584403][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 1372.222886][ T30] audit: type=1400 audit(1792948060.504:505): avc: denied { write } for pid=15525 comm="syz.7.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1372.255861][ T30] audit: type=1400 audit(1792948060.524:506): avc: denied { nlmsg_write } for pid=15525 comm="syz.7.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1372.390270][T15537] FAULT_INJECTION: forcing a failure. [ 1372.390270][T15537] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.404694][ T463] logitech-hidpp-device 0005:046D:B012.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1372.415474][T15537] CPU: 1 PID: 15537 Comm: syz.9.4617 Not tainted syzkaller #0 [ 1372.422974][T15537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1372.433062][T15537] Call Trace: [ 1372.436370][T15537] [ 1372.439326][T15537] __dump_stack+0x21/0x30 [ 1372.443698][T15537] dump_stack_lvl+0x110/0x170 [ 1372.448523][T15537] ? show_regs_print_info+0x20/0x20 [ 1372.453789][T15537] ? node_tag_clear+0x1ea/0x320 [ 1372.458700][T15537] dump_stack+0x15/0x20 [ 1372.462901][T15537] should_fail+0x3ab/0x500 [ 1372.467358][T15537] __should_failslab+0xa4/0xe0 [ 1372.472166][T15537] should_failslab+0x9/0x20 [ 1372.476709][T15537] slab_pre_alloc_hook+0x39/0xd0 [ 1372.481690][T15537] ? __kernfs_new_node+0xa6/0x670 [ 1372.486756][T15537] __kmalloc_track_caller+0x6c/0x2c0 [ 1372.492942][T15537] ? __kernfs_new_node+0xa6/0x670 [ 1372.498013][T15537] kstrdup_const+0x55/0x90 [ 1372.502469][T15537] __kernfs_new_node+0xa6/0x670 [ 1372.507365][T15537] ? clear_nonspinnable+0x60/0x60 [ 1372.512517][T15537] ? rwsem_write_trylock+0x136/0x300 [ 1372.517840][T15537] ? kernfs_new_node+0x260/0x260 [ 1372.522816][T15537] ? up_write+0x7b/0x290 [ 1372.527091][T15537] ? kernfs_activate+0x35e/0x370 [ 1372.532329][T15537] kernfs_new_node+0x150/0x260 [ 1372.537144][T15537] kernfs_create_link+0xa4/0x200 [ 1372.542208][T15537] sysfs_do_create_link_sd+0x8a/0x110 [ 1372.547623][T15537] sysfs_create_link+0x68/0x80 [ 1372.552417][T15537] device_add+0x734/0xe90 [ 1372.556789][T15537] wakeup_source_sysfs_add+0x1f7/0x2e0 [ 1372.562287][T15537] wakeup_source_register+0x1a5/0x3d0 [ 1372.567698][T15537] ep_insert+0xcd7/0x15e0 [ 1372.572079][T15537] ? ep_loop_check+0x80/0x80 [ 1372.576706][T15537] ? __kasan_check_write+0x14/0x20 [ 1372.581865][T15537] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1372.588495][T15537] ? ep_get_upwards_depth_proc+0x11b/0x1b0 [ 1372.594374][T15537] do_epoll_ctl+0x878/0xdc0 [ 1372.595751][T15538] udevd[15538]: open /dev/null failed: Not a directory [ 1372.598942][T15537] __x64_sys_epoll_ctl+0x162/0x1b0 [ 1372.598972][T15537] ? ep_modify+0x870/0x870 [ 1372.615384][T15537] ? switch_fpu_return+0x15d/0x2c0 [ 1372.620536][T15537] x64_sys_call+0x3af/0x9a0 [ 1372.625091][T15537] do_syscall_64+0x4c/0xa0 [ 1372.629549][T15537] ? clear_bhb_loop+0x50/0xa0 [ 1372.634352][T15537] ? clear_bhb_loop+0x50/0xa0 [ 1372.639109][T15537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1372.645047][T15537] RIP: 0033:0x7f9c46a01559 [ 1372.649507][T15537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.669156][T15537] RSP: 002b:00007f9c45459028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1372.677611][T15537] RAX: ffffffffffffffda RBX: 00007f9c46c87fa0 RCX: 00007f9c46a01559 [ 1372.685616][T15537] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1372.693633][T15537] RBP: 00007f9c46a98b20 R08: 0000000000000000 R09: 0000000000000000 [ 1372.701789][T15537] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1372.709772][T15537] R13: 00007f9c46c88038 R14: 00007f9c46c87fa0 R15: 00007ffcf52639b8 [ 1372.717780][T15537] [ 1373.302534][ T30] audit: type=1400 audit(1792948061.584:507): avc: denied { create } for pid=15542 comm="syz.9.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1373.326848][T15545] loop7: detected capacity change from 0 to 512 [ 1373.336253][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1373.349453][T15546] device wireguard0 entered promiscuous mode [ 1373.398668][T15545] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1373.442501][T15545] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.826512][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1373.849684][T15500] udevd[15500]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1374.689906][T15586] cgroup: Unknown subsys name 'nofavordynmods' [ 1374.697967][ T30] audit: type=1400 audit(1792948062.974:508): avc: denied { read write } for pid=15582 comm="syz.7.4634" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1374.722115][ T30] audit: type=1400 audit(1792948062.974:509): avc: denied { open } for pid=15582 comm="syz.7.4634" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1374.745752][ T30] audit: type=1400 audit(1792948062.974:510): avc: denied { ioctl } for pid=15582 comm="syz.7.4634" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1374.991444][ T5977] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1374.999024][ T308] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1375.241440][ T5977] usb 9-1: Using ep0 maxpacket: 8 [ 1375.246578][ T308] usb 8-1: Using ep0 maxpacket: 32 [ 1375.371680][ T308] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.382784][ T308] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1375.392797][ T308] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1375.402749][ T308] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1375.491582][ T308] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1375.500790][ T308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1375.508881][ T308] usb 8-1: SerialNumber: syz [ 1375.531539][T15584] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1375.538602][T15584] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1375.552041][ T308] hub 8-1:1.0: bad descriptor, ignoring hub [ 1375.558015][ T308] hub: probe of 8-1:1.0 failed with error -5 [ 1375.564271][ T308] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1375.731556][ T5977] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1375.740666][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.758310][T15591] loop2: detected capacity change from 0 to 512 [ 1375.769571][ T5977] usb 9-1: Manufacturer: ㎇袁힅潁熳훃थ헱⹽葺餂ㇷ䟶薗抸￵ᯉ嶡駔睊ɪ⊹ฦ勍寽훛괯龥뷐ᶢ맖耜铽빺厔З㕾庲䰲鼽硠惹寉㺂ヅ웩䊢纞旖ꭋ䉶ꥻ혰殽쟀埑ጮ䬋⿞᯵⚑粋롈ざꮁ躤媭툚掍㼄抷ř᪠㧷薥䰴쿁卄惧ū [ 1375.803041][ T5977] usb 9-1: SerialNumber: syz [ 1375.815290][T15594] udevd[15594]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1375.826230][T15594] udevd[15594]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1375.894872][T15591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c028, mo2=0002] [ 1375.911509][T15591] System zones: 1-12 [ 1375.935427][T15591] EXT4-fs (loop2): 1 orphan inode deleted [ 1375.942087][T15591] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,prjquota,. Quota mode: writeback. [ 1376.067363][T15600] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1376.165804][T15602] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.4637: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1377.010227][T15602] EXT4-fs (loop2): Remounting filesystem read-only [ 1377.137392][T15594] udevd[15594]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1377.158419][T15608] FAULT_INJECTION: forcing a failure. [ 1377.158419][T15608] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.176765][T15608] CPU: 1 PID: 15608 Comm: syz.2.4639 Not tainted syzkaller #0 [ 1377.184286][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1377.194381][T15608] Call Trace: [ 1377.197684][T15608] [ 1377.200642][T15608] __dump_stack+0x21/0x30 [ 1377.205006][T15608] dump_stack_lvl+0x110/0x170 [ 1377.209718][T15608] ? show_regs_print_info+0x20/0x20 [ 1377.214985][T15608] dump_stack+0x15/0x20 [ 1377.219218][T15608] should_fail+0x3ab/0x500 [ 1377.223677][T15608] __should_failslab+0xa4/0xe0 [ 1377.228480][T15608] should_failslab+0x9/0x20 [ 1377.233034][T15608] slab_pre_alloc_hook+0x39/0xd0 [ 1377.235594][T15594] udevd[15594]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1377.238010][T15608] __kmalloc+0x6d/0x2c0 [ 1377.250971][T15608] ? mpi_alloc_limb_space+0x2e/0x40 [ 1377.256215][T15608] mpi_alloc_limb_space+0x2e/0x40 [ 1377.261272][T15608] mpi_powm+0x111b/0x23a0 [ 1377.265652][T15608] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 1377.271843][T15608] ? mpihelp_cmp+0xc0/0xe0 [ 1377.276320][T15608] rsa_enc+0x28f/0x3c0 [ 1377.280443][T15608] ? rsa_exit+0x30/0x30 [ 1377.284627][T15608] ? memset+0x35/0x40 [ 1377.288654][T15608] pkcs1pad_verify+0x4b2/0x680 [ 1377.293458][T15608] public_key_verify_signature+0x992/0xec0 [ 1377.299333][T15608] ? key_create_or_update+0x430/0x9c0 [ 1377.304745][T15608] ? __se_sys_add_key+0x34b/0x410 [ 1377.309799][T15608] ? public_key_free+0x80/0x80 [ 1377.314614][T15608] x509_check_for_self_signed+0x35e/0x460 [ 1377.320373][T15608] x509_cert_parse+0x684/0x8b0 [ 1377.325317][T15608] x509_key_preparse+0x63/0x650 [ 1377.330209][T15608] asymmetric_key_preparse+0x9e/0xe0 [ 1377.335534][T15608] key_create_or_update+0x430/0x9c0 [ 1377.340779][T15608] ? key_type_put+0x20/0x20 [ 1377.345326][T15608] ? lookup_user_key_possessed+0x40/0x40 [ 1377.350996][T15608] ? __kasan_check_write+0x14/0x20 [ 1377.356147][T15608] __se_sys_add_key+0x34b/0x410 [ 1377.361027][T15608] ? __x64_sys_add_key+0xd0/0xd0 [ 1377.365991][T15608] ? ksys_write+0x1fa/0x260 [ 1377.370536][T15608] ? __kasan_check_write+0x14/0x20 [ 1377.375685][T15608] __x64_sys_add_key+0xbf/0xd0 [ 1377.380481][T15608] x64_sys_call+0x713/0x9a0 [ 1377.385133][T15608] do_syscall_64+0x4c/0xa0 [ 1377.389585][T15608] ? clear_bhb_loop+0x50/0xa0 [ 1377.394296][T15608] ? clear_bhb_loop+0x50/0xa0 [ 1377.399022][T15608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1377.404961][T15608] RIP: 0033:0x7f16a39c7559 [ 1377.409407][T15608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.429150][T15608] RSP: 002b:00007f16a241f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1377.437594][T15608] RAX: ffffffffffffffda RBX: 00007f16a3c4dfa0 RCX: 00007f16a39c7559 [ 1377.445759][T15608] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1377.453757][T15608] RBP: 00007f16a3a5eb20 R08: 0000000033efed59 R09: 0000000000000000 [ 1377.461742][T15608] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1377.469716][T15608] R13: 00007f16a3c4e038 R14: 00007f16a3c4dfa0 R15: 00007ffcb89d6228 [ 1377.477727][T15608] [ 1377.525042][ T30] audit: type=1400 audit(1792948065.804:511): avc: denied { bind } for pid=15613 comm="syz.8.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1377.525264][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4641'. [ 1377.760852][ T5977] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1377.790763][ T5977] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1378.006031][ T5977] usb 9-1: USB disconnect, device number 2 [ 1379.011714][ T308] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1379.041964][ T308] usb 8-1: USB disconnect, device number 2 [ 1382.611859][ T4995] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1383.933794][T15649] loop7: detected capacity change from 0 to 512 [ 1383.946061][T15652] cgroup: Unknown subsys name 'nofavordynmods' [ 1383.953856][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1383.969388][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4653'. [ 1384.024823][T15649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c028, mo2=0002] [ 1384.032966][T15649] System zones: 1-12 [ 1384.038098][T15649] EXT4-fs (loop7): 1 orphan inode deleted [ 1384.044374][T15649] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,prjquota,. Quota mode: writeback. [ 1384.251448][T15659] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.4652: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1384.272440][T15659] EXT4-fs (loop7): Remounting filesystem read-only [ 1384.283821][ T463] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1384.431461][ T4995] usb 3-1: device not accepting address 3, error -71 [ 1384.531712][ T463] usb 9-1: Using ep0 maxpacket: 8 [ 1385.043301][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1385.053525][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1385.131493][ T463] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1385.140557][ T463] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.148605][ T463] usb 9-1: Manufacturer: ㎇袁힅潁熳훃थ헱⹽葺餂ㇷ䟶薗抸￵ᯉ嶡駔睊ɪ⊹ฦ勍寽훛괯龥뷐ᶢ맖耜铽빺厔З㕾庲䰲鼽硠惹寉㺂ヅ웩䊢纞旖ꭋ䉶ꥻ혰殽쟀埑ጮ䬋⿞᯵⚑粋롈ざꮁ躤媭툚掍㼄抷ř᪠㧷薥䰴쿁卄惧ū [ 1385.176182][ T463] usb 9-1: SerialNumber: syz [ 1385.235997][T15664] loop2: detected capacity change from 0 to 128 [ 1385.248707][T15667] udevd[15667]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1385.283442][T15664] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 1385.298225][T15664] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.614202][T15667] udevd[15667]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1385.629254][T15667] udevd[15667]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1386.983144][T15684] loop7: detected capacity change from 0 to 128 [ 1386.990820][T15667] udevd[15667]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1387.107672][T15684] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 1387.120613][T15684] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.201588][ T463] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1387.209958][ T463] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1387.219181][ T463] usb 9-1: USB disconnect, device number 3 [ 1387.241467][ T293] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1387.573391][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1387.601461][ T293] usb 10-1: Using ep0 maxpacket: 32 [ 1387.616674][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1387.721644][ T293] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.734523][ T293] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1387.753992][ T293] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1387.766973][ T293] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1388.201921][ T293] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1388.211147][ T293] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1388.219639][ T293] usb 10-1: SerialNumber: syz [ 1388.241734][T15682] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1388.248764][T15682] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1388.261836][ T293] hub 10-1:1.0: bad descriptor, ignoring hub [ 1388.268648][ T293] hub: probe of 10-1:1.0 failed with error -5 [ 1388.275191][ T293] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 1389.486732][T15705] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1389.590999][T15712] loop7: detected capacity change from 0 to 512 [ 1389.617398][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1389.670208][T15712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c028, mo2=0002] [ 1389.678434][T15712] System zones: 1-12 [ 1389.683793][T15712] EXT4-fs (loop7): 1 orphan inode deleted [ 1389.689753][T15712] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,prjquota,. Quota mode: writeback. [ 1389.910678][T15719] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.4667: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1389.931927][T15719] EXT4-fs (loop7): Remounting filesystem read-only [ 1390.581745][ T293] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1390.962384][ T293] usb 10-1: USB disconnect, device number 2 [ 1391.119971][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1391.131163][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1391.142618][T15729] loop7: detected capacity change from 0 to 512 [ 1391.150283][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1391.198977][T15729] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 1391.214276][T15729] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.631366][ T308] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1391.991520][ T308] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 1391.999650][ T308] usb 8-1: config 1 has no interface number 0 [ 1392.005863][ T308] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1392.015619][ T308] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1392.181515][ T308] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1392.190875][ T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.198997][ T308] usb 8-1: Product: syz [ 1392.203257][ T308] usb 8-1: Manufacturer: syz [ 1392.207889][ T308] usb 8-1: SerialNumber: syz [ 1392.231624][T15734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1392.238702][T15734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1394.139599][ T293] usb 8-1: USB disconnect, device number 3 [ 1394.213440][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1394.223499][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 1394.325258][T15752] loop2: detected capacity change from 0 to 512 [ 1394.336425][T15694] udevd[15694]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1394.881973][T15752] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 1394.967173][T15752] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.641410][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1396.021492][ T39] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1396.029600][ T39] usb 3-1: config 1 has no interface number 0 [ 1396.035878][ T39] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1396.045567][ T39] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1396.211520][ T39] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1396.220609][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.228703][ T39] usb 3-1: Product: syz [ 1396.232924][ T39] usb 3-1: Manufacturer: syz [ 1396.237538][ T39] usb 3-1: SerialNumber: syz [ 1396.261502][T15768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1396.268670][T15768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1396.848803][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1396.861928][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1396.884442][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1396.901843][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1396.919556][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1396.944470][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1396.961220][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1396.973742][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1397.311416][ T308] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1397.551420][ T308] usb 8-1: Using ep0 maxpacket: 32 [ 1397.671708][ T308] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.682746][ T308] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1397.697492][ T308] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1397.707352][ T308] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1397.821534][ T308] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1397.830751][ T308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1397.838856][ T308] usb 8-1: SerialNumber: syz [ 1397.861509][T15781] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1397.868907][T15781] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1397.882081][ T308] hub 8-1:1.0: bad descriptor, ignoring hub [ 1397.888196][ T308] hub: probe of 8-1:1.0 failed with error -5 [ 1397.894754][ T308] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1397.916692][ T39] usb 3-1: USB disconnect, device number 5 [ 1397.933419][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1397.943992][T15645] udevd[15645]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 1398.248638][T15783] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1398.882393][T15792] cgroup: Unknown subsys name 'nofavordynmods' [ 1399.151411][T12268] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1399.391526][T12268] usb 3-1: Using ep0 maxpacket: 8 [ 1399.871500][T12268] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1399.880664][T12268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.888762][T12268] usb 3-1: Manufacturer: ㎇袁힅潁熳훃थ헱⹽葺餂ㇷ䟶薗抸￵ᯉ嶡駔睊ɪ⊹ฦ勍寽훛괯龥뷐ᶢ맖耜铽빺厔З㕾庲䰲鼽硠惹寉㺂ヅ웩䊢纞旖ꭋ䉶ꥻ혰殽쟀埑ጮ䬋⿞᯵⚑粋롈ざꮁ躤媭툚掍㼄抷ř᪠㧷薥䰴쿁卄惧ū [ 1399.916659][T12268] usb 3-1: SerialNumber: syz [ 1400.072019][ T308] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1400.101772][ T308] usb 8-1: USB disconnect, device number 4 [ 1402.371472][T12268] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1402.379975][T12268] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1402.394546][T12268] usb 3-1: USB disconnect, device number 6 SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=4569 state=3 status=67 (errno 9: Bad file descriptor) [ 1403.579936][ T30] audit: type=1400 audit(1792948091.854:512): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14087]" dev="pipefs" ino=14087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1404.073626][T14112] tipc: Left network mode [ 1404.078245][T14112] tipc: Left network mode [ 1404.752673][T14112] device bridge_slave_1 left promiscuous mode [ 1404.758971][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.766698][T14112] device bridge_slave_0 left promiscuous mode [ 1404.773286][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.781798][T14112] device bridge_slave_1 left promiscuous mode [ 1404.787933][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.795593][T14112] device bridge_slave_0 left promiscuous mode [ 1404.801866][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.809946][T14112] device bridge_slave_1 left promiscuous mode [ 1404.816180][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.823813][T14112] device bridge_slave_0 left promiscuous mode [ 1404.829931][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.838589][T14112] device veth1_macvtap left promiscuous mode [ 1404.844700][T14112] device veth0_vlan left promiscuous mode [ 1404.850779][T14112] device veth1_macvtap left promiscuous mode [ 1404.856943][T14112] device veth0_vlan left promiscuous mode [ 1404.863111][T14112] device veth1_macvtap left promiscuous mode [ 1404.869137][T14112] device veth0_vlan left promiscuous mode [ 1405.922956][T14112] tipc: Left network mode [ 1406.472132][T14112] device bridge_slave_1 left promiscuous mode [ 1406.478325][T14112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.486024][T14112] device bridge_slave_0 left promiscuous mode [ 1406.492293][T14112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.500341][T14112] device veth1_macvtap left promiscuous mode [ 1406.506513][T14112] device veth0_vlan left promiscuous mode