last executing test programs: 1m13.821235116s ago: executing program 3 (id=58): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x20000) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000036c000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000480)="0f789b0a65d9fbf3a6baf80c66b878b7d48a66efbafc0c66ed440f20c0663506000000440f22c036660f388244020f20e06635800000000f22e0640f01c40f01cf440f20c0663502000000440f22c0"}], 0x1, 0x50, 0x0, 0x61) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a0c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000240)=0xdb, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r7, &(0x7f0000000380)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, 0x0) r8 = socket(0x28, 0x1, 0x2) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x24000801) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x2) 1m12.942397227s ago: executing program 3 (id=62): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000001280)=ANY=[@ANYBLOB='shortname=lower,uni_xlate=0,nonumtail=0,shortname=lower,shortname=lower,uni_xlate=0,iocharset=cp866,utf8=0,shortname=mixed,codepage=865,check=strict,shortname=winnt,shortname=win95,shortname=win95,shortname=lower,nonumtail=0,uni_xlate=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nnonumtail=1,iocharset=cp860,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2e646f6e745f61707072616973652c254ced0b328f7a20ccf1230d93bfc1ab1859c1694d21bceb81b693cbf834366a042984c97e741ab68c7255a5b953a9c74c124d678ad72d0b611932dcc918290adf6384633385240e3cc9ae"], 0x83, 0x27b, &(0x7f0000000640)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b61}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001f00)='net/ptype\x00') preadv(r4, &(0x7f0000001f40)=[{&(0x7f0000001f80)=""/112, 0x70}, {&(0x7f0000002000)=""/142, 0x8e}], 0x2, 0x17, 0xffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002140)={0x4}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002200)=@generic={&(0x7f0000002180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x10}, 0x18) syz_open_dev$vcsn(&(0x7f0000002240), 0x1, 0x20001) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={&(0x7f0000002280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x4, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@bloom_filter={0x1e, 0x8, 0x5dee, 0x7, 0x21090, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000023c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000002440)='./file1\x00', 0x143142, 0x40) 1m12.003647594s ago: executing program 3 (id=67): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) 1m11.725452483s ago: executing program 3 (id=68): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xfe, 0x259, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5d, 0x10800) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000600)={r1, 0x2, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x9, 0x7, 0x0, "e68a8d80464bfcde96f78824877618d50cd2faa9e76a6e61c5e93286e0c856cdcd3c382779fa093134280c4ab14385c4926742c612609dc8d5bf9e649421cc2d", "8ff2accef337cbb23ef50fa23bc19dcbad4694851a3d68ba8cb2ae245cb4ca30559d65bac0b4da9ab9ab6e8dd682efa0ff3e45f32e2a4901e0cdca0aed2aca7a", "d6a1c9862cdaeda5b965e491fcf5bac5cd87b1fe23129980feb648dc52cfd700", [0x3a8f, 0x8]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5e) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x20) write(r2, &(0x7f0000000580)="686973743a6b6579733d5b756e97d3b09d5d551c77fbc039bdbd691257616c30a1089074d6bec4221a917e880240954dc9b6c3ce51937c29de6374c6c1ad49b4c2a5cb5243b8207e2fa10c2d", 0x4c) inotify_add_watch(r0, 0x0, 0x1000401) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x101e42, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000003a00)='ext4\x00', &(0x7f0000003a40)='./file1\x00', 0x8012, &(0x7f0000004040)={[{@noinit_itable}, {@nobh}, {@barrier}, {@sb={'sb', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45e, &(0x7f00000040c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 1m11.508970296s ago: executing program 3 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f0000000880)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYBLOB="bc9feba3bea109c4c98d5032974644ecb74c9307a5ea3bb515e7cd7b80c7f90fd112da6be59beaf566446b35b0922fd4f565a800e7e0b86a1a8f1a1a06f6d98f6b367b609c9c926900be08cdd8335bd5b8db845fed416ee5e46881e44e0b4ff8e665b2a78d143ca074dc4b205418354d6bfda334d1cd3bf214b6381c8e", @ANYRES32=0x0, @ANYBLOB="597ca20f60faff365d95a8e516440ad61962dad43e1c81c4852393c69bc50fc35530a4dc90c0a07e9587d5346d4762565653fbcc6b09c043609c775a4f6e17bd60", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000790af8ff000000009500000000000000727b36a7ab94c4980bbe8d0f72f57a2b10c10841dc4e1f4ed26a8181a3ba47ca7bf7a52514682497190ea0a851984d0f57f702741690f0779992b3dcd7b1eb73eb1e0ad73d00d3c8c0bad3fdd4832d17737827f34a5f06a7eeda0451ecca523f6b0d62d08c23b3e4b44308f00e09259ad364e0b3e6078bf0f7585b71051503b43b77cfe79566c4dd4e02440185c179cd7b0fcc739f489bd1e5bae51a3eb4bced"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000f00)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xf5af99b}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x6000000, r0, 'id0\x00'}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/11) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000008c0)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) unshare(0x4020400) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000b00)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000b40)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000c00), 0x1}, 0x6d) pselect6(0x40, &(0x7f0000000e80)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) 1m11.011948408s ago: executing program 3 (id=74): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x9, 0x79, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0xffffffff, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="a146998aded9"}]}}}]}, 0x54}}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0ec31284e671fdf2a34c49aa967c4d53d135956329ae77f61848d79bbe5159d3d12d91bd0d72353f1ce16ce160599e46c2d3961dc055d6c6912f0ed4b4cc9ade", 0x33}, 0x48, 0xfffffffffffffff9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014810}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000210425b97000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000030001002800128008000100677265001c000280060011004e200000060010"], 0x48}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='logon\x00', &(0x7f0000000240)=@secondary) 1m11.011631528s ago: executing program 32 (id=74): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x9, 0x79, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0xffffffff, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="a146998aded9"}]}}}]}, 0x54}}, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0ec31284e671fdf2a34c49aa967c4d53d135956329ae77f61848d79bbe5159d3d12d91bd0d72353f1ce16ce160599e46c2d3961dc055d6c6912f0ed4b4cc9ade", 0x33}, 0x48, 0xfffffffffffffff9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014810}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000210425b97000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000030001002800128008000100677265001c000280060011004e200000060010"], 0x48}}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='logon\x00', &(0x7f0000000240)=@secondary) 1m2.051789141s ago: executing program 4 (id=112): r0 = socket(0x8, 0x6, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x24000094) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='dots,allow_utime=00000000000000000000007,nodots,flush,dots,dots,codepage=861oppy,\x00'/97], 0x0, 0x237, &(0x7f00000002c0)="$eJzs3E1rK1UYB/CTNrfpzaUlK0E3HupGN0G7dlGRCmJAsUZ8AWFKUw2JSclkkYhg1q78DC5FdONOKH6BfgrdFaF0Y1eO5KW26ZtVmwZ6f79Nnsl/zuQ5zGEgJ5DDV7/5vLGblneTblgo5MLCRhj8kWVZKSyEU4Pw0o8fHH+9tRSmxBhXn9//+Mvv137pPnn/p9WfC+Gg9Mnh0fpvB88cPHv453uf1dNYT2Or3Y1J3G63u8l2sxZ36mmjHOM7zVqS1mK9ldY6U/lus723149Ja2eluNeppWlMWv3YqPVjtx27nX5MPk3qrVgul+NKMfB/VL87yXKDbKgwCFmWhXDuvvPwnWRZOJq6/zxNtj786K3XKpXNd2NcDuH3Qa/aq45fR3H+jTcrmy/HkdLZqONer7o4qob5K+M8nrtsr1d9FIqTfP1SPhy/FF58YZwPs9ffrlzIH4ed2U8fAAAAAAAepHL82+X9/dzkcDr/tTja3x8fnPt9YLx//+3+ZHw+PJe/58kAAAAAV0r7XzSSZrPWuaFYDCH80zl3XuTD9ecMG89d1/yjyczur9Xri9yk0bN3lkMIU+csT9q97ZWzQgjzm9fSafOP/8X6mU2RfXV3F3xytrRKtxu1+N8/dOPK6Icw57V6sbjhobE222cSAAAwG9NfqgEAAAAAAAAAAAAAAAAAAIB5uI+/E5v3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbvJXAAAA//8bq1aL") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000007c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x80002c1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000880)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000008c0)=""/222, &(0x7f00000009c0)=0xde) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c0000001200070928bd7000fedbdf2521090b090000000000000600000001040000070000000300000002000000000000", @ANYRES32=0x0, @ANYBLOB="00000100052000003100000009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(r4, 0x289e0cb5, 0x1) 1m1.083584042s ago: executing program 4 (id=115): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000001280)=ANY=[@ANYBLOB='shortname=lower,uni_xlate=0,nonumtail=0,shortname=lower,shortname=lower,uni_xlate=0,iocharset=cp866,utf8=0,shortname=mixed,codepage=865,check=strict,shortname=winnt,shortname=win95,shortname=win95,shortname=lower,nonumtail=0,uni_xlate=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nnonumtail=1,iocharset=cp860,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2e646f6e745f61707072616973652c254ced0b328f7a20ccf1230d93bfc1ab1859c1694d21bceb81b693cbf834366a042984c97e741ab68c7255a5b953a9c74c124d678ad72d0b611932dcc918290adf6384633385240e3cc9ae"], 0x83, 0x27b, &(0x7f0000000640)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b61}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001f00)='net/ptype\x00') preadv(r4, &(0x7f0000001f40)=[{&(0x7f0000001f80)=""/112, 0x70}, {&(0x7f0000002000)=""/142, 0x8e}], 0x2, 0x17, 0xffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002140)={0x4, 0x0}, 0x8) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002200)=@generic={&(0x7f0000002180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x10}, 0x18) r7 = syz_open_dev$vcsn(&(0x7f0000002240), 0x1, 0x20001) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={&(0x7f0000002280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x4, r1}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@bloom_filter={0x1e, 0x8, 0x5dee, 0x7, 0x21090, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x1}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000023c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000002440)='./file1\x00', 0x143142, 0x40) write$cgroup_subtree(r11, &(0x7f0000002480)=ANY=[@ANYBLOB="00ff000000"], 0x5) r12 = syz_open_procfs(r0, &(0x7f0000001080)='oom_adj\x00') read$msr(r12, &(0x7f000001b640)=""/102395, 0x18ffb) bpf$PROG_LOAD(0x5, &(0x7f000001b580)={0x7, 0x2a, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_val={0x18, 0xc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff0000}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @generic={0x2, 0x5, 0xc, 0xca9, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c40)='syzkaller\x00', 0x6, 0x8a, &(0x7f0000001c80)=""/138, 0x41000, 0x45, '\x00', r3, @fallback=0x31, r4, 0x8, &(0x7f00000020c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x1, 0x9, 0x10, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f000001b500)=[r6, r7, r8, r9, r10, r11, r12], &(0x7f000001b540)=[{0x3, 0x3, 0x7}], 0x10, 0x800}, 0x94) 1m0.823660418s ago: executing program 4 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="24000000680a090300000000fbdbdf250a7700000000000004000400060007000400c91e88"], 0x24}, 0x1, 0x0, 0x0, 0x2404e404}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4040881) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x3, 0x3, &(0x7f0000000880)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5a}}, &(0x7f00000008c0)='GPL\x00'}, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x111400, 0x0) write$P9_RGETLOCK(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x22) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ramfs\x00', 0x2200000, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x3, 0x300) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000700)='posixacl\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000007911b8000000000085000000600000009500740000000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000180)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000220001062abd7000fcff7fff00000040"], 0x1c}], 0x1, 0x0, 0x0, 0x340088c0}, 0x1000) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000040)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xa, 0x10, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x81, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x36}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x450, 0x68, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x7f, 0xc2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x2, 0x2}}}}}}}]}}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000940)) 58.351364266s ago: executing program 4 (id=126): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xfe, 0x259, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5d, 0x10800) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000600)={r0, 0x2, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x9, 0x7, 0x0, "e68a8d80464bfcde96f78824877618d50cd2faa9e76a6e61c5e93286e0c856cdcd3c382779fa093134280c4ab14385c4926742c612609dc8d5bf9e649421cc2d", "8ff2accef337cbb23ef50fa23bc19dcbad4694851a3d68ba8cb2ae245cb4ca30559d65bac0b4da9ab9ab6e8dd682efa0ff3e45f32e2a4901e0cdca0aed2aca7a", "d6a1c9862cdaeda5b965e491fcf5bac5cd87b1fe23129980feb648dc52cfd700", [0x3a8f, 0x8]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5e) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x20) write(r1, &(0x7f0000000580)="686973743a6b6579733d5b756e97d3b09d5d551c77fbc039bdbd691257616c30a1089074d6bec4221a917e880240954dc9b6c3ce51937c29de6374c6c1ad49b4c2a5cb5243b8207e2fa10c2d", 0x4c) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000401) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x101e42, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000003a00)='ext4\x00', &(0x7f0000003a40)='./file1\x00', 0x8012, &(0x7f0000004040)={[{@noinit_itable}, {@nobh}, {@barrier}, {@sb={'sb', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45e, &(0x7f00000040c0)="$eJzs20tvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AAIpF6QkOBQjiFNq9K0QU2QaFXRgFA5on4C4IjEJ+AEFwScqLjCHSFVqBcKB7Ro7d3UdexgO0md1r+ftMmMd+yZ/86OPbtjB9C3RvI/ScT2iPg1IoZq2ZsLjNT+Xb92Yfrvaxemk8iyN/9MquX+unZhuixaPm9bkRlNI9JPktjbpN75c+dPTc3Ozpwt8uMLp98bnz93/tmTp6dOzJyYOTN5+PChgxMvPD/53JrEuSNv654P5/btPvL25denj15+58ev8/ZuL/bXx1EzvOo6R2Lk5mNZ54lVv/rGsqMunQz0sCF0pBIReXcNVsf/UFTiRucNxWsf97RxwLrKsizbvOzRSplYzIA7WBK9bgHQG+UHfX79W263cPrRc1dfrl0A5XFfL7banoFIizKDDde3a2kkIo4u/vN5vsXSfYhN61QbAEDEt/n855lm87807q8rd3exNjQcEfdExM6IuDcidkXEfRHVsg9ExIMd1j/SkF8+/7yypavA2pTP/14s1rZunv+Vs78YrhS5HdX4B5PjJ2dnDhTHZDQGN+f5iRXq+O7VXz5rta9+/pdvef3lXLBoxx8DDTfojk0tTK0m5npXP4rYM9As/mRp7Sr/vzsi9nTx+vkxO/nUV/ta7f//+FewButM2ZcRT9b6fzEa4i8lK69Pjt8VszMHxsuzYrmffr70Rqv6u4j/pVWEu0ze/1ubnv9L8Q8n9eu1853Xcem3T1teU3Z7/m9K3qqmyyulD6YWFs5ORGxKFpc/PnnjuWW+LJ/HP7q/+fjfGfHvF8Xz9kZEfhI/FBEPR8QjRdsfjYjHImL/CvH/8Mrj73Yf//rK4z/W2P9XYoX+7zxROfX9N93Hn/f/oWpqtHiknfe/dhu4uqMHAAAAt4e0+h34JB1bSqfp2FjtO/y7Yms6Oze/8PTxuffPHKt9V344BtPyTtdQ3f3QieLecJmfbMgfrN43zrIs21LNj03Pza7XmjrQnm0txn/u90qvWwesu47W0Vr9og24Lfm9JvQv4x/6l/EP/cv4h/7VbPxfjLjeg6YAt5jPf+hfxj/0L+Mf+pfxD31p/txAB7+Wbz+x88gav+Adm6hsjGZ0nIh0QzSju0S6MZpRS2yOiHYLX4xb1bBevzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsjf8CAAD//4Ym6EQ=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 56.811291916s ago: executing program 4 (id=129): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000001280)=ANY=[@ANYBLOB='shortname=lower,uni_xlate=0,nonumtail=0,shortname=lower,shortname=lower,uni_xlate=0,iocharset=cp866,utf8=0,shortname=mixed,codepage=865,check=strict,shortname=winnt,shortname=win95,shortname=win95,shortname=lower,nonumtail=0,uni_xlate=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nnonumtail=1,iocharset=cp860,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2e646f6e745f61707072616973652c254ced0b328f7a20ccf1230d93bfc1ab1859c1694d21bceb81b693cbf834366a042984c97e741ab68c7255a5b953a9c74c124d678ad72d0b611932dcc918290adf6384633385240e3cc9ae"], 0x83, 0x27b, &(0x7f0000000640)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b61}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001f00)='net/ptype\x00') preadv(r4, &(0x7f0000001f40)=[{&(0x7f0000001f80)=""/112, 0x70}, {&(0x7f0000002000)=""/142, 0x8e}], 0x2, 0x17, 0xffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002140)={0x4, 0x0}, 0x8) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002200)=@generic={&(0x7f0000002180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x10}, 0x18) r7 = syz_open_dev$vcsn(&(0x7f0000002240), 0x1, 0x20001) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={&(0x7f0000002280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x4, r1}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@bloom_filter={0x1e, 0x8, 0x5dee, 0x7, 0x21090, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x1}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000023c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000002440)='./file1\x00', 0x143142, 0x40) write$cgroup_subtree(r11, &(0x7f0000002480)=ANY=[@ANYBLOB="00ff000000"], 0x5) r12 = syz_open_procfs(r0, &(0x7f0000001080)='oom_adj\x00') read$msr(r12, &(0x7f000001b640)=""/102395, 0x18ffb) bpf$PROG_LOAD(0x5, &(0x7f000001b580)={0x7, 0x2a, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_val={0x18, 0xc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff0000}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @generic={0x2, 0x5, 0xc, 0xca9, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c40)='syzkaller\x00', 0x6, 0x8a, &(0x7f0000001c80)=""/138, 0x41000, 0x45, '\x00', r3, @fallback=0x31, r4, 0x8, &(0x7f00000020c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x1, 0x9, 0x10, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f000001b500)=[r6, r7, r8, r9, r10, r11, r12], &(0x7f000001b540)=[{0x3, 0x3, 0x7}], 0x10, 0x800}, 0x94) 56.19945387s ago: executing program 4 (id=135): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000008, &(0x7f0000000100), 0x2, 0x541, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000002580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x2, 0xc, &(0x7f00000026c0)=ANY=[], &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f00000023c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002400)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002440)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000002480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000002580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000025c0), 0x4000087, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x214441, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000008c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000026c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002780)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r6, &(0x7f00000029c0)={0x0, 0x14, &(0x7f0000002a00)=[{&(0x7f0000002a40)=' ', 0xffffff1f}], 0x1}, 0x0) 56.182625872s ago: executing program 33 (id=135): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000008, &(0x7f0000000100), 0x2, 0x541, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000002580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x2, 0xc, &(0x7f00000026c0)=ANY=[], &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000000e80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") prlimit64(0x0, 0xe, &(0x7f00000023c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002400)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002440)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000002480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000002580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000025c0), 0x4000087, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x214441, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000008c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f00000026c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002780)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r6, &(0x7f00000029c0)={0x0, 0x14, &(0x7f0000002a00)=[{&(0x7f0000002a40)=' ', 0xffffff1f}], 0x1}, 0x0) 51.308116389s ago: executing program 5 (id=154): eventfd2(0x7, 0x0) setpriority(0x0, 0x0, 0x3a14b58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000290000b7f0b1003e000000ff000000000000000104000000"], 0x20}, 0x400c8c0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000002080)='./file0\x00', 0x2808080, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c646d61736b3d30303030303030303030303030303030a9f8e7d73030342c756e695f786c6174653d302c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f636861727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00762466dfef460ac9a714774126024de2dbfca6"], 0x81, 0x2ae, &(0x7f0000001980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1fe) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000380)="040000000000000000000000380100000000000000000000000000000f00"/43) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x20440a, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x1, 0x152c, &(0x7f00000020c0)="$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") syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000004080108000000000000000005000007050003002f001e00340004800000000608000140000000000800014000000006080001400000003f080001400000ffff080001400001000100000000", @ANYBLOB="f83d690f0007bb9b70dab517c6c96e99d4e53459f3a9c1226486ce088716acb4b6a47788e570b209eb59b1212409f84a8ef6eaf85f2fd69f92aa18d08c1ebd8f77c09a69294a53dedc406528a41684993660352056a218ee24466bed9ee3e39b4c097dd19dbb7e14694f525520"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 49.099205579s ago: executing program 5 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="24000000680a090300000000fbdbdf250a7700000000000004000400060007000400c91e88"], 0x24}, 0x1, 0x0, 0x0, 0x2404e404}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4040881) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x22) faccessat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x3, 0x300) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000700)='posixacl\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000007911b8000000000085000000600000009500740000000000"], &(0x7f0000000480)='GPL\x00', 0x2, 0xfd90, &(0x7f00000004c0)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000180)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000220001062abd7000fcff7fff00000040"], 0x1c}], 0x1, 0x0, 0x0, 0x340088c0}, 0x1000) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000040)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xa, 0x10, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x81, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x36}, [@mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x450, 0x68, 0x2, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x7f, 0xc2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x2, 0x2}}}}}}}]}}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000940)) 46.78143916s ago: executing program 5 (id=164): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000009c0)='j\x95\'\x8aC\x16\xca\\\xca\xc0O5\x9cz\xf6!\xc7f,\xfa\xac\x17\xa7U\xed\x19\xabr\x1f\xac\x1a\x17\x03j\xe2\xb2|\xd4\xf5_\xad\xad\xf4$\xbc\xbdX\xb6G\x82\x7f\xcc\xe4\x98\xed\x92\x7fi\x12\xa3\xd3!\xc1\\(\xf9\xc6\xe3\x02<\xff\xeb\xe4\xaaat-\xe6s^f%\xc5(\x8fF^\x97<\xdaQ\xb1\xffgqkE7\n\xfd\xea\xff\xf6\x8d\\\xd8\x84\xe0\x1f\xffO\xe4\xe9\xdd\xb9\xcb\xeb\xd8\xc9^tR5sh\x9f\x8e6\xe3\x11\xbez\xb1\xcc\x80\xf3\xe5\xaaE\x96\xc2\x16wXY\x87\xd2\x00\x03\xb6:M\xb5\xec\xbb\x16\xb0\x84\x9c\xca\x9c\xccq~\xeb2\xc9\xf8\x0e\xed\f\x80\xc7,\xe7H\x7f\xe7\t\xcfV\xb7\x8f4%w6F-\x11\xbd%e/\xd9g!\x84hP\xae^AP\xc3\x83\xef\xa4\xdb\x17M\xd0\xf3\x84\x10\x1d\xecT\xa7@g_/^\xe2R', &(0x7f00000000c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\t[\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3((pf\xe9c\xa9\x17\xb7\xd4gt\xc2\x98\xda\xa3\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) recvfrom$inet6(r0, &(0x7f00000008c0)=""/30, 0x1e, 0x10000, &(0x7f0000000900)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='{:\'@-\x00', &(0x7f0000000200)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) unshare(0x2040400) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x80000000000033, 0xc1b2, r0}) 44.676037599s ago: executing program 5 (id=174): syz_emit_ethernet(0x4a, &(0x7f0000002900)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "9e868843e0d38c36fe39cadc1bbbdb73"}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000007ec0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000007f00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000007f40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000007f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007fc0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xa, &(0x7f0000000440)=0x0) syz_clone3(&(0x7f0000000480)={0x23800000, &(0x7f0000000500)=0xffffffffffffffff, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x800, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x80, 0x0, 0x7, 0xf7effffe}, {0x16, 0x0, 0x0, 0x1000}]}, 0x10) connect$unix(r1, &(0x7f0000008000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000008080), 0x651, 0x0) recvmmsg(r1, &(0x7f00000080c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000003c0)={0x20000014}) epoll_wait(r6, &(0x7f0000000400)=[{}], 0x1, 0x400) syz_mount_image$fuse(0x0, &(0x7f0000008140)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) rename(&(0x7f0000008180)='./bus\x00', &(0x7f00000081c0)='./file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) rename(&(0x7f0000008200)='./file0\x00', &(0x7f0000008240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 44.409237447s ago: executing program 34 (id=174): syz_emit_ethernet(0x4a, &(0x7f0000002900)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "9e868843e0d38c36fe39cadc1bbbdb73"}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000007ec0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000007f00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000007f40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000007f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007fc0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xa, &(0x7f0000000440)=0x0) syz_clone3(&(0x7f0000000480)={0x23800000, &(0x7f0000000500)=0xffffffffffffffff, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x800, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0x80, 0x0, 0x7, 0xf7effffe}, {0x16, 0x0, 0x0, 0x1000}]}, 0x10) connect$unix(r1, &(0x7f0000008000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000008080), 0x651, 0x0) recvmmsg(r1, &(0x7f00000080c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000003c0)={0x20000014}) epoll_wait(r6, &(0x7f0000000400)=[{}], 0x1, 0x400) syz_mount_image$fuse(0x0, &(0x7f0000008140)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) rename(&(0x7f0000008180)='./bus\x00', &(0x7f00000081c0)='./file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) rename(&(0x7f0000008200)='./file0\x00', &(0x7f0000008240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.848193071s ago: executing program 7 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\x00', 0x1) write(r0, &(0x7f0000000140)='1', 0x1) 5.76092653s ago: executing program 7 (id=387): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001680)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000016c0)=0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.639458403s ago: executing program 7 (id=389): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f0000005d40)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0) symlinkat(&(0x7f0000006280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000007280)='./file0\x00') 5.508215307s ago: executing program 7 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='numa_maps\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) 5.220113767s ago: executing program 1 (id=393): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b020101032008090400000001012000092401008009"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.796782841s ago: executing program 0 (id=400): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x17f877eb92310393, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/tcp\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) 4.478432394s ago: executing program 7 (id=407): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000440)={{}, "ea2a5d7ec5e2804589a295f5487341927477f505af552c638dc86d15513208401c004f1040886cb8727c4de5e28766021735d08b9b1ecc4064b4836f3c17a99075ca637095f77cbff19dccbbc57a3b7f9e15febb6ce5afcd2d60934e5be2bd0c51007aa1ac17147047f482f3350ca1fdc0a9ef38a7d5000f6f847e1bac67589d5ab85f63d4a6a22b0fc611c5575ac10f30b73fa5fbaf62e225a89cc5951a98760a10461c7efe244ab0ee7e6b0000ca4d86af48d058c15c75ac759604096523df6d1ad657c17171a548726e94e9e28f89f50583c5cb2b7507706e4374acb329298b05da0f8eb124abc421d93353fd429f23a7797d18a8726164b6a60d806006f89476f6104b2fbff96fb169271661294c7cf5904dc71726de787b187142114c8f4b2fff820291e550fdd6e7daa3a800ae5f58d96b8ed691cd28085f77e82f7c0ba21023363ca1b48e87377a4e1eef12ae53f17ecd1b770a440afe3bad229934bc15670ac8d442cf8b40d71a249d7c5d92f11f659709936ece504194d6c9ea9f7fc487b537be54a974a4ce81dc1f25488b670c411f09769256ee392b742fb6d693a828aba7c9a1466c77f5732e1af631f4319060095d317131863a7fd421f05ce6d580d061058e9181b1477ede05c1c9b9b3f06c82ba484ad36ad3f103b01f034a84ed389b733637fdef3663a2fbd15fda8cf4638f45135a5261f967f2559d6e996aa1d41aa1fea23daec6c4160ae2d1adfd483694ecceefd0db4905cd3b1d1064f9e8afd641d1383aee7a29b7df9002cc7cf1330725937c52c91012057ae74f3806d2ac55e2d2e9e2f66dbadb2e4c01d7618b43c8b1a707857b98979da2edeefcd8b17043af9cbd93e79ff38321632ba8330a6cb91e00a65c54aeed6b56a6bd79934030a61f764ce04b9d27775d30edb6b4951250568a950e29283dbdf4c8b5be55ca7cd717863584f4bbf4f0ee6a3675a8a7e4188c786e73cc0b44ce10d70282f4ab310c2072a1b925092db5e1c2ed1c90c5b97736059e00052f632a465d5f2471135441285c7359997b98495e722f3301c493344bd5195da58bfbf9bc94486aebd311e18d6a5d0a41df6568f21febf448b3712cdcfd744eb244cbcd7b2ec13fc8d3a0f7055e7337434adeefb0caa6066a7cad7b01b7d9a8a931efd66b09b98dd25700c2b84a3e4173a2436602bc8773e07f50c5fe55334d999d7a3b3b3545954e579c8ef770a17736e4bfadffcb3a6af268fe375ad67a360fff1136956ef377d8338c6f4a0451a3333b88901357541cd26cacbe7cb04374e9aa1510a6da3c8fc6d7cb4ef10a181c46a3765bad067609afd498984e22ca3f823068178a22274bddb270b85a5c03af4be62fe14a6d6af3a25a423b9f8f40f1fbbadff7a08042b2a345fd77cce07a42cf860c824f8ee9c631b3335db7bbb36292c4f0c7003405d75bad6b5cd69141915318b915f0ee8879fa4bdd6e13ff9be445c1b486584e06c075181477bb6d7e26963022d08f45e7752f35565a404f32de0b354d8f0fb3142bf4a31820b239b4c8de0dd4eba7cae4468235e646d5129ca03bda9498047156f114b49af2c4a092e2145db3851d0ce242de84eb885de6417cc13cb2facb0f303352a13e4009921069b039b7f0c7973b6f690c3bb202c7561ab34641027862905bef7fc28f9166923ae1a486445da7b29d1a09a07df6f99094b4dd4018499c034fba1f1748340bb5b1df76b38a7bb6ca5b564a6c8eb900b9575e3851868708e7fd34d20061b1eb708b8f22323d288d37f647b695530261eea36b0c44004a054c3f90ae8a4be4ed3fa81d87b5de3236aaae7e3fc5f8d545050e9c97e7caedf2707d242c57fee0b4b8c1ee73769649466b96862e904b7c596e8456f95a682eee6a588984767fb7b4a8cb5aa47eab013ee716f087d764f6cb975a54da07917ff035cf1a931774b0331dde7fa04287b8ef669fa486e176ef39ef4426df2b2fb4de4baa167e7cf1e7d01e84c79f2b63c472169ab0ff1d40f8e33bb99ba00f22fa81250dc769cef3fc4108cabdf6ad44bfffd571db3f44c0e4c5b42bd75cdfc17aa33d00f5b69898ee9771c779738b3fe48306f5b7b957721eaf41c4b1f0ad48f86e2ea38ee3b9b6930aa3ec93e7c864dedc25ba6ae1917d12f4605a36a533d918641dfecd1304875d1b7d3547e168f207c10ffb132946d86dae2dc2d8869e40015a828761eef82054d8f550f5cb79313758e613d76667f78d21a6b37ccd6a16178bf80edb83a65d2bf79c3d0b627caaf717b49b0bbce12e3a6a163b904a6b7fe0071542c35be4aef6385cea730ef0f77f08692f1af7012a744b18629f34279bd5beb0dbb7b9fd9ce46e5f857449b0ba759b547bdf6dd8bd4019af2ab9142e3b17d99d0a3dc920cf7aadab1ac76f8bb7eddec7a743aeafa40699e144a4528fb1b516f1ea257531096076a7c9898be2fdce5ce61b85e03ff57f2f1432032c6d564f15b65997f6fa60052e19f2fe69e174e034dd97afc995bc7de9255733d5ea41c76e3814392c7022e4a42e41ffbcea9081ca0138086d90fb81eeaf311288fab18e0a10c91b2a717be422600c398b1019f6ccb5d8d1cd7db1200e3053894652013a1f561be6d7c818e3fead35d6ae0b93a44e8240c471d6a8be1a9b07494f63c7af4356454a9507c51c791234c246299eb68ab594828954b9f3fb47f9825ad8ddeaf0858d5c72f5e2df2d0d06d516ca71e14055360948047af652f3b57fcfb2dea9e0f4ddff56ec8f71e9e509ce37c03079feef8e91152d179b110700f4ce010ba722ade23a5b235fd7237761e4e7d947a11cb5967107ec214250bbcea9b4bb96db1a07fc9a01d127c69eb3dbd22f8f32c965af6759b437f24340e8b4920d8bdbf60542a4017dbd92fd86b3e34ee019a9419ddf13547eed55e898d0069edf7e6434becaf6efa0067e93f2b529a59dc7df349500c883729c8f2b26e712fce6d40987256f44bb8b8310bcc4fac33a52ab30de5fd9c0fc7755da0d4458e4da0a8723f7c14d5054c9f834c33c4fe2e9b1426a88be3f696e906e7574493beabb61862af9381216827aa9a991e84c3cc5fb8c1035d0035cf4c36a830485e189d3402de2fdda4f31bab0a52f719290fe18fb7aa9f65d7bff9ae18526fa882475543ab7a0378f41b3e975c32350f8fb7a0ee5c580141052c8da3c8697abf08617950c82af0652f76c4f6ea3d190a2d53017596f30313096e66a73be124175c86cf0016aa70b676fed307983b19fef5baf241ec479b9bead8553b122c42bdeca5835dd91cfbf3288058986874dcc8f61599180dc4dc01ada4fd72f9685aea725b95513f417f4ebee97bf7dd3a2be4419e57bde5bb53e65bc1e0e514701f9e21c2d982593739f167313ed6c9a397f3c8657a1c49a08eef9f955bee5c47a22736e626ae463d17599885b94e00c5397d5567576cb7a7df6ae10e3e4ff2ccab7c23cd58217fdc6308cebe934bddb4e81b1bab738dfd3d1317f1b14a29058644a0c9ada4e7bc329ed4da3c595a2a7a1a00cbde7bb7dd96d2bec23c33c3e2fb71f97f17ed4e6c2af70999eaf3ad01f65c4b8f65b2e607e64ef5c8901b553e9992483585500ca381810250e963d560230fc267f97a4b031e4a5fbf501035d911fc3a7ef507d25296b9c67a0e7e17611fae8a340af400e2533eb74c8f90c76a8ca9e875d0a0e4d16b768c7177551a9565c236183f8e9e545bd7da452474cf67017e2a6f8abf306b951bb800abd9ccce34488adc56a0eb2ced4107f29c891dac282d1504224362028cec7b8f0e8f5c463586dd89c130032c3976675620bce316f37797fe7535b4bd502a265f3cc6f6710e98eb28577272e48db25094ce7618998e992da9695c1bf03ca927ed06fdd9bc41ca099ef838c90e54be82db6125604171cebdcf7784842a7d2a53d03a63ee6e7c1a06bd3b67960f7f88074f69372a45323eaa542ca9c5b427c3e3f8d43b15a835b2cb48170517a732e768c25a877c27cfdb9209cd3d15b516873e6afde77c781e117be21fe3543a53d7cef307a24670dbcea6ebbd5bcc2be2c85e2e11768b047386d73b875647e7d48e8feae81e810bc97d2ebce73f9548c5124ed9282c1d0a810073e551dcab780730f68065d6ebe900e235206fa479f818e079885b34e19288e1133a9d4a5126de9e9a208c7178c4911ff9292f227f449b882550d2189a1d32d7c92656231b70014675e84011db66909cbaae01e9cbba1e8f1991c3a54fbc317251831375a5cc8f1c48cd38e55a215e7900ffc5967ef615be570884bf26357aff141516e44c2bf9e81b621e7a66bb09f83dc4156ce772627846b5e2b504ef2d5d5a55d7aa96f2c73fb5a532fd30abfcd68c68ed0eb14a3617b1952bb4b1f631d0a76075851aac97d5597aaec1da67ea178083df5e5f7f216d71b9e6a4a43ccd275e0cae9363a26ae880fe4966b514a6bbcc5c9b8409c978e6ef694ecd7eb41b8be518273242a38324d19ee95e053ef6bb7f78ed342f3231cdbb050e8d37fb978b1630246096dd36d03cf929229f6e4c6156f3eb821bccad6b1001759716ee86c73838a7bd86cb2c75cd59c5917f9b9b6d4753e5868ea09bb95721c20cd00fbf1b79115eed16b8fb2681b61ae14177d9467683d6857832b90aab474c952b8fa82bf2d23fc8b2b86c8d1477c567d629bd12fd894adb91ac561037483914fb6543e510953698417524c31d153bfb4e93785af6b3b1f3aac3abff1ccca31ca9826606757491b60d1608c8f322ca9bf623b4ef901ee4f9af87d6ebb593ee8d204671e0d4bbfb756dcf0738bcdae100f9d67b778b7aa664478b665ed155295f1eead76203e351a32b4cb0d1b949e0cae54e8fad85b2554cf7693ac18fcf8665c6234062ad8f5c316e831a00b0b2a744fe13ca3e76d39bf09c7995950e5e7fa42702f513acde5a2379f05b2d46081ff6a2d06ba5841f784cf65bdd7b4ee575e29bf09c0f429920810e85e19249bd08adf5e0f1f44be8b5c8e53f9964bedcfb0c73ca58fc7113ce27bc56c1533b27c8c559bcafa15511f4af1d5e3091dde6806f850901764943ac664ba2e2cc08775a047b8c020e93127f02426ff44e54e0ba8bb77015c9de0a3957c029efe4bc55a1fd3df7fb66f63b1b10ac22c45fd177e1e0c17122c904a7033125a96fe25dc41e55482a3ebfb4ea28d2e7d0475dee9f9ff5f02733c5dd53154d671ecb2c0404525a0b1bb153daf0e212fd61546276d4fea2c1271f271e0b376ff98f3e944c2e8150ddb03ad0f67cedbbb09fe09bba97574b81cb4b183b1566ffa30752268347c534c8ddceb160386253fce2e73a9694c59eaabe5c40cdbb41baf08970af0a38338b1182ac0b783fdd4fc340539c97483a30a98d6c183460595ca61c0fd66dd7ff8a6ab03bbff06ca5e9f459b1e154a0cedfa3d083e7d9fcdf8b6a39c3fdeba3780ffb107648ca2eda3b06e75c39fdca843a143aa78b1fe20f95bb4d9675f46fc1fbf380c68c5db49fb19a79348b2bf8eacd8ce623ee3925f3ddc918bfe8d7a6efb80a7e8410425f7294dd7bc9a72a86d909ba8c1f5f44fb726a480c9354632a9ade8968722a898f56b001030de7e8a720fbdc711236d87ca6ef28f62a47953160f4d67616af35f304e6f7c07ae4382abba1a75fa10f9ce1e25b7ab7c89d669ba85121fd42c682e189be8b1966337baca6e41f903fc2a4c1eb8d90adc49074876fbaed2a5be1f312f839242b5af07e909e09ae51f5599ad4613bc2ed41044f3e9d385463bbd2ebc060e"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.929687651s ago: executing program 0 (id=409): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25df9bfc, {0x0, 0x0, 0x0, 0x0, 0x622, 0x611c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x24000840) 3.831815991s ago: executing program 0 (id=413): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) 3.797894525s ago: executing program 0 (id=415): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2208810, &(0x7f0000000100), 0xfe, 0x572, &(0x7f0000000780)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000d40)='./file0/file0\x00', 0x2) chdir(&(0x7f0000000d80)='./file0\x00') listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/157, 0x9d) capset(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000000e80)) rmdir(&(0x7f0000000ec0)='./file0\x00') sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40044}}], 0x1, 0x4) 3.112149646s ago: executing program 1 (id=426): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x3ff, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000580)={0x0, 0x0, 0x8, 0x0, 0x1, r0, 0x0}]) 3.041290713s ago: executing program 1 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'vcan0\x00'}) 2.933940065s ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sec\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="8e", 0x1}], 0x1) 2.872129261s ago: executing program 1 (id=429): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000140)={[{@utf8}, {@utf8}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x4}}]}, 0x1, 0x153c, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4) statfs(&(0x7f0000010bc0)='./file1\x00', &(0x7f0000010c00)=""/4096) 2.616024838s ago: executing program 1 (id=431): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000001500)='dev\x00', &(0x7f0000001540)='devtmpfs\x00', 0x208008, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000001580)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000015c0)='dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1.713524412s ago: executing program 0 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @NL80211_ATTR_SSID={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.507475013s ago: executing program 2 (id=448): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x6}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x4595, 0x0, 0x1, 0x9, 0x2000010000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.423242432s ago: executing program 2 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x1010001, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000017c0)='./bus\x00', &(0x7f0000001800), 0x8, &(0x7f0000001840)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x81c0, 0x8103) chdir(&(0x7f00000018c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', 0x101000, 0x2) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1.368088898s ago: executing program 2 (id=450): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./mnt\x00', 0x844, &(0x7f00000003c0)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x24a, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f00000007c0)) mknod$loop(0x0, 0x200, 0x0) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x4b46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001480)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001500)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000001540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000015c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001680), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x10, 0x300000f, 0x401d032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)) clock_settime(0x0, &(0x7f0000001700)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001180)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240)=r4, 0x4) symlinkat(&(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) mount$bind(0x0, &(0x7f0000000b40)='.\x00', 0x0, 0x21, 0x0) 1.106194465s ago: executing program 6 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000780)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.105971975s ago: executing program 6 (id=452): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) 638.617454ms ago: executing program 6 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xf4}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./debug\x00', 0xf2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) 584.380049ms ago: executing program 6 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x25, 0x800, 0x1, 0x2, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 584.171279ms ago: executing program 6 (id=455): write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001e80)={0x43, 0x9, 0x2, {0x6, 0x5, 0x4, 0x3, 0x1, 0x4dc, 0xff, 0x0, 0x9}}, 0x43) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000dc0), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000e00)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000e40)={0x0, 0x3, 0x400003, 0x693, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x1a9100) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e80)=""/4095, 0xfff) 579.11117ms ago: executing program 6 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e00)=""/4113, 0x1011}, {&(0x7f0000001e40)=""/99, 0x63}, {&(0x7f0000001ec0)=""/4094, 0xffe}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/36, 0x24}], 0x5}, 0x40000180) 486.772539ms ago: executing program 2 (id=457): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x2}) 391.822049ms ago: executing program 7 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r3, 0x0, 0x0) 14.143119ms ago: executing program 0 (id=459): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 13.937949ms ago: executing program 2 (id=460): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) bind$inet6(r0, &(0x7f0000000740)={0xa, 0xe22, 0x0, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60015a00000c1100fc010000000000000000000000000000ff02000000000000001000000000000109000e22000c9078010000000690b86ce5609fc075d830c9b2c9b17f1380b9f9b97877dc8606ff885a3c54a7d73e433f8e8bec607027c8bfb99b4e9e62d3e6aeabbd72ac94404f04b684ade2bc167c90c670f86bb8ba340e36fe2a9431817dd7a456689746f580079c0130092254da4b1d6be8330a5051bfb16f0c2df9bd2a9aa69f9f7f52f3afc9e69eb1b8585b7eae47fedfdeeb43a7f961cee0aa1e335d662f3bfe23a3f0f53cb10c0000"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='A\x00', 0x1ff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) ftruncate(r1, 0x2007ffc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000006c0)={0x2, 0x1, 0x18000000, 0x5ed8a3dded2b62f3, 0xff}) sendfile(r1, r1, 0x0, 0x80000001) 0s ago: executing program 2 (id=461): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b40)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x9, 0x1a, 0x0, 0x1, [@generic="f8cee0be3a"]}, @nested={0x4, 0x37}]}, 0x30}], 0x1}, 0x4040010) kernel console output (not intermixed with test programs): ): avc: denied { setopt } for pid=746 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.297569][ T744] ext4_test_bit(bit=14, block=4) = 1 [ 46.313132][ T738] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.104: Failed to acquire dquot type 0 [ 46.324387][ T744] is_bad_inode(inode)=0 [ 46.324737][ T738] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.104: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.346932][ T738] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.104: Invalid inode bitmap blk 0 in block_group 0 [ 46.353148][ T744] NEXT_ORPHAN(inode)=961216512 [ 46.370087][ T301] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.384746][ T738] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 46.387057][ T301] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 46.402557][ T301] EXT4-fs error (device loop1): ext4_release_dquot:6266: comm kworker/u4:3: Failed to release dquot type 0 [ 46.418600][ T744] max_ino=32 [ 46.422483][ T738] EXT4-fs (loop1): 1 orphan inode deleted [ 46.433729][ T744] i_nlink=0 [ 46.437680][ T744] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 46.447195][ T738] EXT4-fs (loop1): mounted filesystem without journal. Opts: €�; oldalloc,,errors=continue [ 46.504527][ T753] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 46.522247][ T753] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.596313][ T738] FAULT_INJECTION: forcing a failure. [ 46.596313][ T738] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.670592][ T738] CPU: 0 PID: 738 Comm: syz.1.104 Tainted: G W syzkaller #0 [ 46.679190][ T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.689230][ T738] Call Trace: [ 46.692519][ T738] __dump_stack+0x21/0x24 [ 46.696841][ T738] dump_stack_lvl+0x1a7/0x208 [ 46.701510][ T738] ? show_regs_print_info+0x18/0x18 [ 46.706701][ T738] dump_stack+0x15/0x1c [ 46.710846][ T738] should_fail+0x3ab/0x500 [ 46.715253][ T738] should_fail_usercopy+0x1a/0x20 [ 46.720271][ T738] strncpy_from_user+0x24/0x2d0 [ 46.725113][ T738] ? kmem_cache_alloc+0x15a/0x2d0 [ 46.730128][ T738] ? getname_flags+0xba/0x510 [ 46.734829][ T738] getname_flags+0xf5/0x510 [ 46.739337][ T738] do_symlinkat+0x48/0x3d0 [ 46.743751][ T738] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 46.749295][ T738] __x64_sys_symlinkat+0x7b/0x90 [ 46.754224][ T738] do_syscall_64+0x31/0x40 [ 46.758633][ T738] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.764515][ T738] RIP: 0033:0x7f7ac26da559 [ 46.768922][ T738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.788519][ T738] RSP: 002b:00007f7ac1132028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 46.796934][ T738] RAX: ffffffffffffffda RBX: 00007f7ac2960fa0 RCX: 00007f7ac26da559 [ 46.804907][ T738] RDX: 0000200000000240 RSI: ffffffffffffff9c RDI: 0000200000000080 [ 46.812877][ T738] RBP: 00007f7ac1132090 R08: 0000000000000000 R09: 0000000000000000 [ 46.820847][ T738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.828810][ T738] R13: 00007f7ac2961038 R14: 00007f7ac2960fa0 R15: 00007ffd52894e08 [ 47.406924][ T762] FAT-fs (loop4): Unrecognized mount option "codepage=861oppy" or missing value [ 47.851208][ T767] EXT4-fs (loop5): Ignoring removed orlov option [ 47.896616][ T767] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 48.873019][ T785] ====================================================== [ 48.873019][ T785] WARNING: the mand mount option is being deprecated and [ 48.873019][ T785] will be removed in v5.15! [ 48.873019][ T785] ====================================================== [ 48.936471][ T790] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 48.946820][ T790] exFAT-fs (loop0): invalid boot region [ 48.952412][ T790] exFAT-fs (loop0): failed to recognize exfat type [ 49.006746][ T794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=794 comm=syz.4.118 [ 49.043172][ T785] EXT4-fs (loop2): Ignoring removed bh option [ 49.056686][ T783] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 49.236822][ T783] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 49.251353][ T785] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,errors=remount-ro,bh, [ 49.276904][ T24] audit: type=1326 audit(1793306122.420:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.4.118" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464631f559 code=0x7ffc0000 [ 49.390067][ T783] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.117: Failed to acquire dquot type 1 [ 49.401374][ T785] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.432311][ T783] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 49.442477][ T783] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 49.454334][ T24] audit: type=1326 audit(1793306122.540:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.4.118" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464631f559 code=0x7ffc0000 [ 49.481729][ T783] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.117: Failed to acquire dquot type 1 [ 49.493365][ T783] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.117: bg 0: block 248: padding at end of block bitmap is not set [ 49.508227][ T783] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 49.862243][ T785] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 3) [ 49.890811][ T783] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.117: Failed to acquire dquot type 1 [ 49.933163][ T785] EXT4-fs (loop2): Remounting filesystem read-only [ 49.946484][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.947083][ T783] EXT4-fs (loop5): 1 orphan inode deleted [ 49.986514][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.990517][ T783] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 50.000669][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.010061][ T783] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.023630][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.048642][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.062959][ T784] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.077297][ T809] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.091680][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.110604][ T808] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 3: comm syz.2.116: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.571582][ T813] FAT-fs (loop1): Unrecognized mount option "codepage=861oppy" or missing value [ 51.175663][ T824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=824 comm=syz.5.124 [ 51.208386][ T821] FAT-fs (loop0): Unrecognized mount option "codepage=861oppy" or missing value [ 51.333903][ T24] kauditd_printk_skb: 75 callbacks suppressed [ 51.333913][ T24] audit: type=1326 audit(1793306124.470:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 51.338116][ T827] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 51.340293][ T24] audit: type=1326 audit(1793306124.480:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 51.365039][ T827] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.374028][ T24] audit: type=1326 audit(1793306124.480:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 51.758420][ T24] audit: type=1326 audit(1793306124.480:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.205231][ T24] audit: type=1326 audit(1793306124.480:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.232313][ T24] audit: type=1326 audit(1793306124.480:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.431260][ T24] audit: type=1326 audit(1793306124.480:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.539148][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 1024 [ 52.560131][ T841] EXT4-fs (loop1): Ignoring removed orlov option [ 52.567009][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 8192 [ 52.582339][ T24] audit: type=1326 audit(1793306124.480:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.609100][ T841] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 52.620409][ T24] audit: type=1326 audit(1793306124.480:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.691154][ T283] EXT4-fs error (device loop4): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 52.707875][ T24] audit: type=1326 audit(1793306124.480:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.5.124" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 52.734262][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 1024 [ 52.750202][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 8192 [ 52.765433][ T283] EXT4-fs error (device loop4): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 52.778560][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 1024 [ 52.814697][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 8192 [ 52.830162][ T283] EXT4-fs error (device loop4): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 52.843341][ T283] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /17/file1/lost+found: directory fails checksum at offset 1024 [ 53.496965][ T863] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.504245][ T863] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.514399][ T863] device bridge_slave_0 entered promiscuous mode [ 53.524446][ T863] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.532478][ T863] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.542038][ T863] device bridge_slave_1 entered promiscuous mode [ 53.905460][ T863] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.912545][ T863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.919817][ T863] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.926828][ T863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.936155][ T301] device bridge_slave_1 left promiscuous mode [ 53.942494][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.958610][ T301] device bridge_slave_0 left promiscuous mode [ 53.965914][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.974240][ T301] device veth1_macvtap left promiscuous mode [ 53.980344][ T301] device veth0_vlan left promiscuous mode [ 53.985187][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 54.020937][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.028644][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.044797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.052362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.056254][ T868] FAT-fs (loop0): Unrecognized mount option "codepage=861oppy" or missing value [ 54.063254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.077897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.078032][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.078039][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.084787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.113625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.121772][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.128770][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.136211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.144524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.152614][ T874] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.155940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.166427][ T874] EXT4-fs (loop5): 1 truncate cleaned up [ 54.172924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.178413][ T874] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue [ 54.206850][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.215158][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.232454][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.240402][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.248383][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.256090][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.264750][ T863] device veth0_vlan entered promiscuous mode [ 54.275607][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.290825][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.300068][ T863] device veth1_macvtap entered promiscuous mode [ 54.313371][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.321145][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.329308][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.338777][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.348055][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.602194][ T894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=894 comm=syz.0.142 [ 55.619982][ T5] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.889928][ T299] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.388278][ T24] kauditd_printk_skb: 57 callbacks suppressed [ 56.388289][ T24] audit: type=1326 audit(1793306129.530:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.6.136" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba0fb559 code=0x7fc00000 [ 56.589824][ T5] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.597126][ T24] audit: type=1400 audit(1793306129.730:490): avc: denied { write } for pid=900 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.599555][ T5] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.599565][ T5] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.599585][ T5] usb 3-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 56.704188][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.761029][ T5] usb 3-1: config 0 descriptor?? [ 56.779927][ T5] usb 3-1: can't set config #0, error -71 [ 56.789974][ T5] usb 3-1: USB disconnect, device number 2 [ 58.116067][ T926] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.020556][ T926] EXT4-fs (loop6): 1 truncate cleaned up [ 59.026353][ T926] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue [ 59.100724][ T935] FAT-fs (loop2): Unrecognized mount option "codepage=861oppy" or missing value [ 59.269862][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 60.334751][ T949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=949 comm=syz.5.158 [ 60.389667][ T24] audit: type=1326 audit(1793306133.530:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.434978][ T24] audit: type=1326 audit(1793306133.570:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.461850][ T24] audit: type=1326 audit(1793306133.570:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.487099][ T24] audit: type=1326 audit(1793306133.570:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.511847][ T24] audit: type=1326 audit(1793306133.570:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.536549][ T24] audit: type=1326 audit(1793306133.570:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.569947][ T24] audit: type=1326 audit(1793306133.570:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.602822][ T956] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 60.619888][ T24] audit: type=1326 audit(1793306133.570:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 60.671038][ T954] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 60.679001][ T954] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 60.687296][ T954] System zones: 0-1, 15-15, 18-18, 34-34 [ 60.694484][ T954] EXT4-fs (loop6): orphan cleanup on readonly fs [ 60.700958][ T954] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.715492][ T299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.723514][ T954] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 60.730367][ T954] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.157: bad orphan inode 16 [ 60.740604][ T954] ext4_test_bit(bit=15, block=18) = 1 [ 60.745969][ T954] is_bad_inode(inode)=0 [ 60.750249][ T954] NEXT_ORPHAN(inode)=0 [ 60.754349][ T954] max_ino=32 [ 60.757532][ T954] i_nlink=2 [ 60.760870][ T15] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.774188][ T955] F2FS-fs (loop2): invalid crc value [ 60.780039][ T954] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,,errors=continue [ 60.791096][ T15] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.802353][ T955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.820164][ T15] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.849327][ T15] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.851979][ T955] F2FS-fs (loop2): Start checkpoint disabled! [ 60.856249][ T15] usb 2-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 60.871136][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.880130][ T15] usb 2-1: config 0 descriptor?? [ 60.886836][ T955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 61.099972][ T299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 61.120004][ T299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 61.144542][ T299] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 61.198176][ T299] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 61.389937][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 61.389950][ T24] audit: type=1326 audit(1793306134.540:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.460017][ T299] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.469190][ T24] audit: type=1326 audit(1793306134.570:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.495969][ T299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.622847][ T24] audit: type=1326 audit(1793306134.590:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.629293][ T299] usb 6-1: Product: syz [ 61.656881][ T299] usb 6-1: Manufacturer: syz [ 61.662141][ T299] usb 6-1: SerialNumber: syz [ 61.683384][ T24] audit: type=1326 audit(1793306134.610:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.700060][ T949] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.762515][ T24] audit: type=1326 audit(1793306134.850:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.773087][ T641] attempt to access beyond end of device [ 61.773087][ T641] loop2: rw=2049, want=40992, limit=40427 [ 61.809930][ T15] usbhid 2-1:0.0: can't add hid device: -71 [ 61.816219][ T15] usbhid: probe of 2-1:0.0 failed with error -71 [ 61.828420][ T24] audit: type=1326 audit(1793306134.850:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.835331][ T15] usb 2-1: USB disconnect, device number 4 [ 61.868048][ T24] audit: type=1326 audit(1793306134.850:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.921194][ T24] audit: type=1326 audit(1793306134.900:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1d11d81eb code=0x7ffc0000 [ 61.946255][ T24] audit: type=1326 audit(1793306134.920:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1d1198d8e code=0x7ffc0000 [ 61.984616][ T24] audit: type=1326 audit(1793306135.120:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=948 comm="syz.5.158" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d11d8559 code=0x7ffc0000 [ 62.080036][ T299] cdc_ncm 6-1:1.0: bind() failure [ 62.096243][ T299] cdc_ncm 6-1:1.1: bind() failure [ 62.129000][ T299] usb 6-1: USB disconnect, device number 2 [ 62.413374][ T974] F2FS-fs (loop2): invalid crc value [ 62.482742][ T974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.544335][ T974] F2FS-fs (loop2): Start checkpoint disabled! [ 62.560625][ T974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 62.798658][ T987] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.892025][ T987] EXT4-fs (loop0): 1 truncate cleaned up [ 62.897745][ T987] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue [ 63.749849][ T996] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 63.759114][ T996] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.869977][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 1024 [ 63.932425][ T301] attempt to access beyond end of device [ 63.932425][ T301] loop2: rw=2049, want=40992, limit=40427 [ 63.956580][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 8192 [ 63.990075][ T606] EXT4-fs error (device loop5): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 64.004409][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 1024 [ 64.019728][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 8192 [ 64.035386][ T606] EXT4-fs error (device loop5): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 64.048691][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 1024 [ 64.063951][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 8192 [ 64.079255][ T606] EXT4-fs error (device loop5): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 64.093873][ T606] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /21/file1/lost+found: directory fails checksum at offset 1024 [ 64.140539][ T1006] EXT4-fs (loop6): test_dummy_encryption requires encrypt feature [ 64.920241][ T1019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=1019 comm=syz.6.175 [ 65.009034][ T1024] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.036740][ T1024] EXT4-fs (loop0): 1 truncate cleaned up [ 65.045730][ T1024] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue [ 65.082979][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.090155][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.098548][ T1027] device bridge_slave_0 entered promiscuous mode [ 65.107312][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.114403][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.121892][ T1027] device bridge_slave_1 entered promiscuous mode [ 65.173811][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.180869][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.188165][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.195197][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.204841][ T301] device bridge_slave_1 left promiscuous mode [ 65.211086][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.218469][ T301] device bridge_slave_0 left promiscuous mode [ 65.224622][ T299] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.224789][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.242303][ T301] device veth1_macvtap left promiscuous mode [ 65.248416][ T301] device veth0_vlan left promiscuous mode [ 65.360200][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.367758][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.380071][ T972] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 65.403613][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.412207][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.431458][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.440536][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.448975][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.456016][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.464055][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.473339][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.482079][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.489115][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.497450][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.506284][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.526517][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.535419][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.551798][ T1027] device veth0_vlan entered promiscuous mode [ 65.558335][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.568216][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.577599][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.586250][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.594238][ T299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 65.606118][ T299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 65.626635][ T1027] device veth1_macvtap entered promiscuous mode [ 65.633972][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.642622][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.650783][ T299] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 65.661631][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.669607][ T299] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 65.680757][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.690100][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.711243][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.720525][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.728826][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.737089][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.879907][ T972] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.890942][ T299] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.905391][ T299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.919024][ T972] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.948947][ T1041] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 65.956935][ T1041] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 65.964941][ T1041] System zones: 0-1, 15-15, 18-18, 34-34 [ 65.971131][ T1041] EXT4-fs (loop7): orphan cleanup on readonly fs [ 65.977520][ T1041] EXT4-fs warning (device loop7): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 65.992045][ T1041] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 65.999126][ T1041] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.176: bad orphan inode 16 [ 66.009274][ T1041] ext4_test_bit(bit=15, block=18) = 1 [ 66.014784][ T1041] is_bad_inode(inode)=0 [ 66.018929][ T1041] NEXT_ORPHAN(inode)=0 [ 66.023116][ T1041] max_ino=32 [ 66.026301][ T1041] i_nlink=2 [ 66.029425][ T1041] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,,errors=continue [ 66.056752][ T299] usb 7-1: Product: syz [ 66.068356][ T972] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.082890][ T299] usb 7-1: Manufacturer: syz [ 66.097716][ T299] usb 7-1: SerialNumber: syz [ 66.119347][ T972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.126308][ T972] usb 2-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 66.135709][ T1019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.143071][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.155855][ T972] usb 2-1: config 0 descriptor?? [ 66.429860][ T299] cdc_ncm 7-1:1.0: bind() failure [ 66.438099][ T299] cdc_ncm 7-1:1.1: bind() failure [ 66.447902][ T299] usb 7-1: USB disconnect, device number 2 [ 66.729981][ T972] usbhid 2-1:0.0: can't add hid device: -71 [ 66.736353][ T972] usbhid: probe of 2-1:0.0 failed with error -71 [ 66.750741][ T972] usb 2-1: USB disconnect, device number 5 [ 66.867128][ T1052] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.923919][ T1052] EXT4-fs (loop2): 1 truncate cleaned up [ 66.929589][ T1052] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue [ 67.313667][ T1058] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x111902d0, checksum : 0x1119abd0) [ 67.342980][ T1064] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 67.351006][ T1058] exFAT-fs (loop6): invalid boot region [ 67.356757][ T1058] exFAT-fs (loop6): failed to recognize exfat type [ 67.937510][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 67.937527][ T24] audit: type=1400 audit(1793306141.080:539): avc: denied { create } for pid=1082 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 68.153399][ T24] audit: type=1400 audit(1793306141.170:540): avc: denied { write } for pid=1082 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.805711][ T1099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=1099 comm=syz.2.195 [ 69.417693][ T1105] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 69.425653][ T1105] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 69.433729][ T1105] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.439804][ T1105] EXT4-fs (loop6): orphan cleanup on readonly fs [ 69.446160][ T1105] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 69.455492][ T1105] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.469992][ T1105] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 69.479138][ T1105] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.193: bad orphan inode 16 [ 69.489688][ T1105] ext4_test_bit(bit=15, block=18) = 1 [ 69.495080][ T1105] is_bad_inode(inode)=0 [ 69.499216][ T1105] NEXT_ORPHAN(inode)=0 [ 69.503291][ T1105] max_ino=32 [ 69.506472][ T1105] i_nlink=2 [ 69.509602][ T1105] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,,errors=continue [ 69.669841][ T54] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.051736][ T1118] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 70.239913][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 70.251140][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 70.262662][ T54] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 70.272900][ T54] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 70.343320][ T1125] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.356114][ T1128] EXT4-fs (loop0): Ignoring removed orlov option [ 70.363677][ T1125] EXT4-fs (loop1): 1 truncate cleaned up [ 70.369336][ T1125] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue [ 70.400702][ T1128] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 70.469925][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.479005][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.487172][ T54] usb 3-1: Product: syz [ 70.491490][ T54] usb 3-1: Manufacturer: syz [ 70.496176][ T54] usb 3-1: SerialNumber: syz [ 70.603394][ T1099] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.460031][ T54] cdc_ncm 3-1:1.0: bind() failure [ 71.466620][ T54] cdc_ncm 3-1:1.1: bind() failure [ 71.472568][ T54] usb 3-1: USB disconnect, device number 3 [ 71.481528][ T1141] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 71.491947][ T1141] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 71.508692][ T1141] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.204: Failed to acquire dquot type 1 [ 71.530341][ T1141] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 71.542685][ T1141] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 71.552653][ T1141] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.204: Failed to acquire dquot type 1 [ 71.564349][ T1141] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.204: bg 0: block 248: padding at end of block bitmap is not set [ 71.578881][ T1141] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 71.587793][ T1141] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 71.597928][ T1141] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 71.611167][ T1141] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.204: Failed to acquire dquot type 1 [ 71.651568][ T1141] EXT4-fs (loop7): 1 orphan inode deleted [ 71.657310][ T1141] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 71.666512][ T1141] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.680563][ T371] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 74.013335][ T1180] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.021310][ T1180] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 74.029486][ T1180] System zones: 0-1, 15-15, 18-18, 34-34 [ 74.037554][ T1180] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.044148][ T1180] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 74.053588][ T1180] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.068130][ T1180] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 74.385998][ T1180] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.207: bad orphan inode 16 [ 74.396239][ T1180] ext4_test_bit(bit=15, block=18) = 1 [ 74.401626][ T1180] is_bad_inode(inode)=0 [ 74.405763][ T1180] NEXT_ORPHAN(inode)=0 [ 74.409837][ T1180] max_ino=32 [ 74.413021][ T1180] i_nlink=2 [ 74.416147][ T1180] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,,errors=continue [ 74.485146][ T24] audit: type=1400 audit(1793306147.630:541): avc: denied { append } for pid=1191 comm="syz.7.216" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.513350][ T24] audit: type=1400 audit(1793306147.660:542): avc: denied { mmap_zero } for pid=1194 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 75.459871][ T371] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 75.599837][ T371] usb 2-1: can't read configurations, error -71 [ 75.893918][ T1208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=1208 comm=syz.7.221 [ 76.036833][ T1212] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 76.055286][ T1212] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.066351][ T1212] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.222: Failed to acquire dquot type 1 [ 76.080552][ T1212] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 76.091010][ T1212] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.101177][ T1212] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.222: Failed to acquire dquot type 1 [ 76.112895][ T1212] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.222: bg 0: block 248: padding at end of block bitmap is not set [ 76.127412][ T1212] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 76.136502][ T1212] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 76.146760][ T1212] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.156889][ T1212] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.222: Failed to acquire dquot type 1 [ 76.168579][ T1212] EXT4-fs (loop2): 1 orphan inode deleted [ 76.174458][ T1212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 76.183619][ T1212] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.339971][ T299] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 76.513824][ T24] audit: type=1400 audit(1793306149.660:543): avc: denied { validate_trans } for pid=1224 comm="syz.6.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.710130][ T299] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 76.744375][ T299] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 76.776828][ T299] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.788381][ T299] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 76.989927][ T1237] Zero length message leads to an empty skb [ 77.014918][ T371] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 77.030041][ T299] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.039123][ T299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.047160][ T299] usb 8-1: Product: syz [ 77.051417][ T299] usb 8-1: Manufacturer: syz [ 77.056012][ T299] usb 8-1: SerialNumber: syz [ 77.089882][ T1208] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.390224][ T299] cdc_ncm 8-1:1.0: bind() failure [ 77.429547][ T299] cdc_ncm 8-1:1.1: bind() failure [ 77.445972][ T1248] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.453933][ T1248] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 77.462044][ T1248] System zones: 0-1, 15-15, 18-18, 34-34 [ 77.469306][ T1248] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.475857][ T1248] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.490368][ T1248] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 77.499506][ T1248] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.231: bad orphan inode 16 [ 77.510735][ T1248] ext4_test_bit(bit=15, block=18) = 1 [ 77.516138][ T1248] is_bad_inode(inode)=0 [ 77.520352][ T1248] NEXT_ORPHAN(inode)=0 [ 77.524436][ T1248] max_ino=32 [ 77.527636][ T1248] i_nlink=2 [ 77.530879][ T1248] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue [ 77.656539][ T299] usb 8-1: USB disconnect, device number 2 [ 79.109916][ T371] usb 2-1: device descriptor read/all, error -71 [ 79.116643][ T371] usb usb2-port1: attempt power cycle [ 79.119662][ T1266] futex_wake_op: syz.2.237 tries to shift op by 144; fix this program [ 79.140022][ T1266] futex_wake_op: syz.2.237 tries to shift op by 144; fix this program [ 79.236747][ T1255] F2FS-fs (loop6): invalid crc value [ 79.241324][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 79.241336][ T24] audit: type=1400 audit(1793306152.390:547): avc: denied { mount } for pid=1277 comm="syz.0.236" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.247789][ T1255] F2FS-fs (loop6): Found nat_bits in checkpoint [ 79.253710][ T24] audit: type=1400 audit(1793306152.400:548): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.295881][ T1255] F2FS-fs (loop6): Start checkpoint disabled! [ 79.300808][ T1255] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 80.399606][ T1288] netlink: 112 bytes leftover after parsing attributes in process `syz.0.242'. [ 81.610412][ T1291] EXT4-fs (loop7): Ignoring removed bh option [ 81.619904][ T1291] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 81.619904][ T1291] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 81.619904][ T1291] [ 82.430717][ T1291] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,auto_da_alloc=0xffffffffffffffff,auto_da_alloc,errors=remount-ro,bh,nouser_xattr, [ 82.448605][ T1300] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 82.464474][ T1300] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.247: corrupted in-inode xattr [ 82.484061][ T1291] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.499983][ T1300] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.247: couldn't read orphan inode 15 (err -117) [ 82.520230][ T24] audit: type=1400 audit(1793306155.670:549): avc: denied { load_policy } for pid=1285 comm="syz.7.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 82.550097][ T1291] SELinux: failed to load policy [ 82.555189][ T1300] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 82.580491][ T1306] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: block 3: comm syz.7.244: lblock 3 mapped to illegal pblock 3 (length 3) [ 82.594690][ T1306] EXT4-fs (loop7): Remounting filesystem read-only [ 82.701309][ T1311] capability: warning: `syz.1.245' uses deprecated v2 capabilities in a way that may be insecure [ 82.990847][ T59] attempt to access beyond end of device [ 82.990847][ T59] loop6: rw=2049, want=40992, limit=40427 [ 83.364897][ T1319] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.372933][ T1319] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 83.381076][ T1319] System zones: 0-1, 15-15, 18-18, 34-34 [ 83.388133][ T1319] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.394654][ T1319] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 83.404005][ T1319] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.418545][ T1319] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 83.427658][ T1319] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.250: bad orphan inode 16 [ 83.438127][ T1319] ext4_test_bit(bit=15, block=18) = 1 [ 83.443542][ T1319] is_bad_inode(inode)=0 [ 83.447702][ T1319] NEXT_ORPHAN(inode)=0 [ 83.451789][ T1319] max_ino=32 [ 83.454980][ T1319] i_nlink=2 [ 83.458178][ T1319] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue [ 83.569887][ T972] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.801253][ T1326] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 83.811500][ T1326] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 83.821687][ T1326] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.252: Failed to acquire dquot type 1 [ 84.180220][ T1326] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 84.199938][ T1326] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 84.219864][ T1326] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.252: Failed to acquire dquot type 1 [ 84.240143][ T1326] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.252: bg 0: block 248: padding at end of block bitmap is not set [ 84.264769][ T1326] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 84.274055][ T1326] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 84.295551][ T1326] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 84.309107][ T1326] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.252: Failed to acquire dquot type 1 [ 84.321072][ T1326] EXT4-fs (loop2): 1 orphan inode deleted [ 84.326793][ T1326] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 84.336027][ T1326] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.346576][ T972] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.405147][ T24] audit: type=1400 audit(1793306157.430:550): avc: denied { accept } for pid=1336 comm="syz.6.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 84.485371][ T972] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.530180][ T972] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.547271][ T972] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.581751][ T972] usb 1-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 84.590999][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.599591][ T972] usb 1-1: config 0 descriptor?? [ 85.610965][ T24] audit: type=1400 audit(1793306158.540:551): avc: denied { mount } for pid=1342 comm="syz.1.254" name="/" dev="ramfs" ino=19704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 85.703489][ T1349] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 85.712563][ T1349] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.949989][ T24] audit: type=1400 audit(1793306159.410:552): avc: denied { map } for pid=1348 comm="syz.6.258" path="/26/bus/blkio.throttle.io_service_bytes" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.230076][ T972] usbhid 1-1:0.0: can't add hid device: -71 [ 87.294960][ T972] usbhid: probe of 1-1:0.0 failed with error -71 [ 87.401720][ T972] usb 1-1: USB disconnect, device number 6 [ 87.617884][ T1367] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 87.633339][ T1362] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 87.654275][ T1367] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.261: corrupted in-inode xattr [ 87.683762][ T1362] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.818870][ T1367] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.261: couldn't read orphan inode 15 (err -117) [ 87.857645][ T1367] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 87.934869][ T24] audit: type=1400 audit(1793306160.980:553): avc: denied { append } for pid=1361 comm="syz.6.260" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.977725][ T1367] EXT4-fs (loop2): shut down requested (0) [ 87.990878][ T24] audit: type=1400 audit(1793306161.140:554): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.013284][ T1367] FAULT_INJECTION: forcing a failure. [ 88.013284][ T1367] name failslab, interval 1, probability 0, space 0, times 1 [ 88.020181][ T24] audit: type=1400 audit(1793306161.140:555): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.040966][ T1367] CPU: 1 PID: 1367 Comm: syz.2.261 Tainted: G W syzkaller #0 [ 88.047748][ T24] audit: type=1400 audit(1793306161.140:556): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.055758][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.055772][ T1367] Call Trace: [ 88.055787][ T1367] __dump_stack+0x21/0x24 [ 88.055796][ T1367] dump_stack_lvl+0x1a7/0x208 [ 88.055808][ T1367] ? thaw_kernel_threads+0x220/0x220 [ 88.055816][ T1367] ? show_regs_print_info+0x18/0x18 [ 88.055825][ T1367] ? memcpy+0x56/0x70 [ 88.055839][ T1367] dump_stack+0x15/0x1c [ 88.077441][ T24] audit: type=1400 audit(1793306161.140:557): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.087016][ T1367] should_fail+0x3ab/0x500 [ 88.087027][ T1367] ? ext4_alloc_inode+0x21/0x640 [ 88.087044][ T1367] __should_failslab+0xa4/0xe0 [ 88.152247][ T1367] should_failslab+0x9/0x20 [ 88.156727][ T1367] kmem_cache_alloc+0x3d/0x2d0 [ 88.161468][ T1367] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 88.167678][ T1367] ext4_alloc_inode+0x21/0x640 [ 88.172414][ T1367] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 88.178626][ T1367] iget_locked+0x146/0x7d0 [ 88.183020][ T1367] __ext4_iget+0x2dd/0x44e0 [ 88.187497][ T1367] ? ext4_ci_compare+0x3f0/0x3f0 [ 88.192408][ T1367] ? ext4_get_projid+0x140/0x140 [ 88.197322][ T1367] ? ext4_fname_setup_ci_filename+0x69/0x480 [ 88.203272][ T1367] ext4_lookup+0x43c/0x8c0 [ 88.207663][ T1367] ? ext4_add_entry+0xf90/0xf90 [ 88.212488][ T1367] ? d_alloc+0x1f4/0x260 [ 88.216705][ T1367] __lookup_hash+0x114/0x250 [ 88.221268][ T1367] filename_create+0x1d7/0x680 [ 88.226015][ T1367] ? __check_object_size+0x2dd/0x3b0 [ 88.231272][ T1367] ? kern_path_create+0x40/0x40 [ 88.236101][ T1367] ? getname_flags+0x205/0x510 [ 88.240839][ T1367] do_mkdirat+0x5e/0x340 [ 88.245054][ T1367] __x64_sys_mkdirat+0x7b/0x90 [ 88.249794][ T1367] do_syscall_64+0x31/0x40 [ 88.254196][ T1367] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.260073][ T1367] RIP: 0033:0x7fb32a3ef559 [ 88.264465][ T1367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.284045][ T1367] RSP: 002b:00007fb328e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 88.292431][ T1367] RAX: ffffffffffffffda RBX: 00007fb32a675fa0 RCX: 00007fb32a3ef559 [ 88.300375][ T1367] RDX: 0000000000000000 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 88.308325][ T1367] RBP: 00007fb328e47090 R08: 0000000000000000 R09: 0000000000000000 [ 88.316269][ T1367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.324217][ T1367] R13: 00007fb32a676038 R14: 00007fb32a675fa0 R15: 00007ffe28f5f748 [ 88.368382][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.375601][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.776665][ T1393] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.784640][ T1393] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 88.792775][ T1393] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.799973][ T1393] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.806534][ T1393] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.821088][ T1393] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 88.833098][ T1393] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.265: bad orphan inode 16 [ 88.843549][ T1393] ext4_test_bit(bit=15, block=18) = 1 [ 88.848927][ T1393] is_bad_inode(inode)=0 [ 88.853101][ T1393] NEXT_ORPHAN(inode)=0 [ 88.857168][ T1393] max_ino=32 [ 88.860391][ T1393] i_nlink=2 [ 88.863639][ T1393] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue [ 89.040715][ T1392] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.268: Failed to acquire dquot type 1 [ 89.141135][ T1392] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.268: Failed to acquire dquot type 1 [ 89.314444][ T1392] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.268: bg 0: block 248: padding at end of block bitmap is not set [ 89.373435][ T1392] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 89.402718][ T1392] __quota_error: 12 callbacks suppressed [ 89.402731][ T1392] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 89.429710][ T1392] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 89.439712][ T1392] EXT4-fs error (device loop7): ext4_acquire_dquot:6230: comm syz.7.268: Failed to acquire dquot type 1 [ 89.451055][ T1392] EXT4-fs (loop7): 1 orphan inode deleted [ 89.456779][ T1392] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 89.470170][ T1392] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.470617][ T24] audit: type=1400 audit(1793306162.620:565): avc: denied { accept } for pid=1406 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.512395][ T24] audit: type=1400 audit(1793306162.660:566): avc: denied { write } for pid=1406 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.576166][ T1416] F2FS-fs (loop0): invalid crc value [ 90.592679][ T1416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.901366][ T1416] F2FS-fs (loop0): Start checkpoint disabled! [ 90.912640][ T1416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 91.260704][ T1431] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,errors=remount-ro, [ 91.415467][ T1443] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.277: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.447853][ T1443] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 91.489300][ T1443] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 48: comm syz.2.277: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.529180][ T1443] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 91.578478][ T1443] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.277: Failed to acquire dquot type 0 [ 91.640433][ T1443] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 91.669852][ T1443] EXT4-fs error (device loop2): ext4_evict_inode:285: inode #11: comm syz.2.277: mark_inode_dirty error [ 91.725883][ T1443] EXT4-fs warning (device loop2): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 91.739978][ T1443] EXT4-fs (loop2): 1 orphan inode deleted [ 91.745855][ T1443] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue [ 91.766497][ T59] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.790194][ T59] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 91.808767][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6266: comm kworker/u4:2: Failed to release dquot type 0 [ 91.823481][ T1443] EXT4-fs (loop2): Unrecognized mount option "L" or missing value [ 91.833492][ T24] audit: type=1400 audit(1793306164.970:567): avc: denied { remount } for pid=1442 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.834057][ T1450] netlink: 'syz.7.279': attribute type 1 has an invalid length. [ 91.894008][ T9] attempt to access beyond end of device [ 91.894008][ T9] loop0: rw=2049, want=40992, limit=40427 [ 91.911184][ T641] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.934743][ T641] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 91.959663][ T641] EXT4-fs error (device loop2): ext4_release_dquot:6266: comm kworker/u4:4: Failed to release dquot type 0 [ 91.977735][ T282] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 91.993077][ T282] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 92.002802][ T282] EXT4-fs error (device loop2): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 92.786955][ T1460] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.187608][ T24] audit: type=1400 audit(1793306166.270:568): avc: denied { ioctl } for pid=1459 comm="syz.1.283" path="/52/bus/file0/file0" dev="overlay" ino=49 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.233159][ T1473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.262527][ T1473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.277276][ T1473] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.281: invalid indirect mapped block 32768 (level 2) [ 93.293709][ T1473] EXT4-fs (loop2): 1 orphan inode deleted [ 93.299494][ T1473] EXT4-fs (loop2): 1 truncate cleaned up [ 93.306110][ T1473] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 93.572253][ T1479] FAT-fs (loop1): Unrecognized mount option "codepage=861oppy" or missing value [ 94.707057][ T1484] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 94.725188][ T1484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 94.745417][ T1484] System zones: 0-1, 15-15, 18-18, 34-34 [ 94.754161][ T1492] FAT-fs (loop7): Unrecognized mount option "codepage=861oppy" or missing value [ 94.764810][ T1490] EXT4-fs (loop2): Ignoring removed orlov option [ 94.790274][ T1484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.797753][ T1490] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 94.838150][ T1484] __quota_error: 1 callbacks suppressed [ 94.838162][ T1484] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 94.858276][ T1484] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 94.872906][ T1484] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 94.880259][ T1484] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.285: bad orphan inode 16 [ 94.890434][ T1484] ext4_test_bit(bit=15, block=18) = 1 [ 94.895843][ T1484] is_bad_inode(inode)=0 [ 94.900747][ T1484] NEXT_ORPHAN(inode)=0 [ 94.904834][ T1484] max_ino=32 [ 94.908016][ T1484] i_nlink=2 [ 94.911234][ T1484] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,,errors=continue [ 96.290295][ T1520] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 96.344485][ T1507] F2FS-fs (loop2): invalid crc value [ 96.368941][ T1507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.424618][ T1507] F2FS-fs (loop2): Start checkpoint disabled! [ 96.431334][ T1507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 96.982691][ T1537] device syzkaller0 entered promiscuous mode [ 96.990155][ T1537] tipc: Started in network mode [ 96.995078][ T1537] tipc: Own node identity 4eb7a1e61459, cluster identity 4711 [ 97.003081][ T1537] tipc: Enabled bearer , priority 0 [ 97.011463][ T1537] tipc: Resetting bearer [ 97.017780][ T1536] tipc: Resetting bearer [ 97.024811][ T1536] tipc: Disabling bearer [ 97.090014][ T1546] netem: change failed [ 97.092640][ T9] attempt to access beyond end of device [ 97.092640][ T9] loop2: rw=2049, want=40992, limit=40427 [ 97.120138][ T1541] exfat: Deprecated parameter 'utf8' [ 97.125443][ T1541] exfat: Deprecated parameter 'utf8' [ 97.130796][ T1541] exfat: Deprecated parameter 'namecase' [ 97.136448][ T1541] exfat: Deprecated parameter 'namecase' [ 97.142550][ T1541] exfat: Deprecated parameter 'namecase' [ 97.163197][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.305'. [ 97.272450][ T1541] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 97.287032][ T24] audit: type=1400 audit(1793306170.430:570): avc: denied { write } for pid=1540 comm="syz.7.303" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.313039][ T24] audit: type=1400 audit(1793306170.430:571): avc: denied { add_name } for pid=1540 comm="syz.7.303" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.334061][ T24] audit: type=1400 audit(1793306170.430:572): avc: denied { associate } for pid=1540 comm="syz.7.303" name="proc" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.355849][ T24] audit: type=1326 audit(1793306170.480:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1551 comm="syz.2.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32a3ef559 code=0x7ffc0000 [ 97.380724][ T703] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.380853][ T24] audit: type=1326 audit(1793306170.490:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1551 comm="syz.2.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32a3ef559 code=0x7ffc0000 [ 97.413121][ T24] audit: type=1326 audit(1793306170.490:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1551 comm="syz.2.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32a3ef559 code=0x7ffc0000 [ 97.438794][ T24] audit: type=1326 audit(1793306170.490:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1551 comm="syz.2.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb32a3ef559 code=0x7ffc0000 [ 97.463428][ T24] audit: type=1326 audit(1793306170.490:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1551 comm="syz.2.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32a3ef559 code=0x7ffc0000 [ 97.498422][ T24] audit: type=1326 audit(1793306170.490:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1551 comm="syz.2.302" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32a3ef559 code=0x7ffc0000 [ 97.563171][ T1556] EXT4-fs (loop7): error: journal path ./file0 is not a block device [ 97.749927][ T703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.776399][ T703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.806551][ T703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.874643][ T703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.923180][ T703] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.967701][ T703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.019910][ T703] usb 2-1: config 0 descriptor?? [ 98.173346][ T1581] tipc: Failed to remove local publication {66,0,2}/1860144956 [ 98.181401][ T1581] tipc: Failed to remove local publication {66,0,2}/1860144956 [ 98.329053][ T1594] cgroup: syz.2.322 (1594) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 98.346416][ T1594] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 98.372770][ T1579] loop6: p1 p3 < > [ 98.532650][ T703] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 98.540248][ T703] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 98.547770][ T703] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 98.555458][ T703] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 98.563826][ T703] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 98.578885][ T703] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 98.597104][ T1605] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 98.729010][ T1611] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue [ 98.740569][ T1611] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.412978][ T15] usb 2-1: USB disconnect, device number 9 [ 99.436102][ T1622] fido_id[1622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 99.883814][ T971] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.974003][ T1642] FAULT_INJECTION: forcing a failure. [ 99.974003][ T1642] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.987267][ T1642] CPU: 1 PID: 1642 Comm: syz.6.333 Tainted: G W syzkaller #0 [ 99.995929][ T1642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.005961][ T1642] Call Trace: [ 100.009227][ T1642] __dump_stack+0x21/0x24 [ 100.013530][ T1642] dump_stack_lvl+0x1a7/0x208 [ 100.018177][ T1642] ? show_regs_print_info+0x18/0x18 [ 100.023347][ T1642] dump_stack+0x15/0x1c [ 100.027473][ T1642] should_fail+0x3ab/0x500 [ 100.031862][ T1642] should_fail_alloc_page+0x4f/0x60 [ 100.037032][ T1642] __alloc_pages_nodemask+0x11a/0x640 [ 100.042391][ T1642] ? __kasan_check_read+0x11/0x20 [ 100.047396][ T1642] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 100.052915][ T1642] ? __mod_memcg_lruvec_state+0x90/0x2c0 [ 100.058522][ T1642] ? __this_cpu_preempt_check+0x13/0x20 [ 100.064037][ T1642] ? lru_cache_add+0x15f/0x380 [ 100.068773][ T1642] handle_pte_fault+0x153b/0x3910 [ 100.073769][ T1642] handle_mm_fault+0xf86/0x1720 [ 100.078590][ T1642] ? can_reuse_spf_vma+0xe0/0xe0 [ 100.083498][ T1642] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 100.088942][ T1642] ? __kasan_check_write+0x14/0x20 [ 100.094037][ T1642] ? down_read_trylock+0x106/0x160 [ 100.099141][ T1642] ? __init_rwsem+0x1c0/0x1c0 [ 100.103791][ T1642] ? find_vma+0x30/0x150 [ 100.108006][ T1642] do_user_addr_fault+0x576/0xe20 [ 100.113005][ T1642] ? do_kern_addr_fault+0x80/0x80 [ 100.118000][ T1642] ? pagemap_pte_hole+0x3ba/0x3f0 [ 100.122995][ T1642] ? pagemap_pmd_range+0x1000/0x1000 [ 100.128254][ T1642] exc_page_fault+0x5a/0xc0 [ 100.132734][ T1642] asm_exc_page_fault+0x1e/0x30 [ 100.137584][ T1642] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 100.144145][ T1642] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 100.163725][ T1642] RSP: 0018:ffffc90000ec7ba0 EFLAGS: 00050206 [ 100.169766][ T1642] RAX: ffffffff823e3c01 RBX: 0000000000001000 RCX: 0000000000000378 [ 100.177713][ T1642] RDX: 0000000000001000 RSI: ffff88812735ec88 RDI: 0000200000007000 [ 100.185658][ T1642] RBP: ffffc90000ec7bd0 R08: ffff88812735efff R09: 1ffff11024e6bdff [ 100.193602][ T1642] R10: dffffc0000000000 R11: ffffed1024e6be00 R12: 00007ffffffff000 [ 100.201564][ T1642] R13: 0000200000007378 R14: ffff88812735e000 R15: 0000200000006378 [ 100.209517][ T1642] ? _copy_from_user+0xa1/0xd0 [ 100.214254][ T1642] ? _copy_to_user+0x78/0x90 [ 100.218812][ T1642] pagemap_read+0x409/0x590 [ 100.223286][ T1642] ? avc_policy_seqno+0x1b/0x70 [ 100.228110][ T1642] ? clear_refs_write+0x5d0/0x5d0 [ 100.233107][ T1642] ? security_file_permission+0x83/0xa0 [ 100.238632][ T1642] ? rw_verify_area+0x1c0/0x360 [ 100.243456][ T1642] ? clear_refs_write+0x5d0/0x5d0 [ 100.248451][ T1642] vfs_read+0x209/0xa50 [ 100.252578][ T1642] ? kernel_read+0x70/0x70 [ 100.256963][ T1642] ? putname+0xfe/0x150 [ 100.261092][ T1642] ? __fget_files+0x2e1/0x340 [ 100.265746][ T1642] ? __fdget+0x1a1/0x230 [ 100.269961][ T1642] ? __x64_sys_pread64+0xf3/0x220 [ 100.274958][ T1642] __x64_sys_pread64+0x194/0x220 [ 100.279870][ T1642] ? ksys_pread64+0x1b0/0x1b0 [ 100.279905][ T971] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.284534][ T1642] ? __kasan_check_read+0x11/0x20 [ 100.284546][ T1642] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 100.284564][ T1642] do_syscall_64+0x31/0x40 [ 100.312439][ T1642] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.318306][ T1642] RIP: 0033:0x7f61ba0fb559 [ 100.322696][ T1642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.342280][ T1642] RSP: 002b:00007f61b8b53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 100.350668][ T1642] RAX: ffffffffffffffda RBX: 00007f61ba381fa0 RCX: 00007f61ba0fb559 [ 100.358611][ T1642] RDX: 0000000000019000 RSI: 0000200000000380 RDI: 0000000000000004 [ 100.366576][ T1642] RBP: 00007f61ba192b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.369912][ T971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.374533][ T1642] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000000 [ 100.383618][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.391470][ T1642] R13: 00007f61ba382038 R14: 00007f61ba381fa0 R15: 00007ffcf2186738 [ 100.407770][ T971] usb 3-1: SerialNumber: syz [ 100.597865][ T1648] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue [ 100.609085][ T1648] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.649893][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 100.649904][ T24] audit: type=1400 audit(1793306173.790:588): avc: denied { unmount } for pid=1647 comm="syz.6.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.698101][ T1662] kvm: emulating exchange as write [ 101.027399][ T1667] FAT-fs (loop0): codepage cp77 not found [ 101.205473][ T1680] netlink: 'syz.0.347': attribute type 7 has an invalid length. [ 101.213286][ T1680] netlink: 'syz.0.347': attribute type 5 has an invalid length. [ 101.222689][ T1680] netlink: 17 bytes leftover after parsing attributes in process `syz.0.347'. [ 101.261457][ T971] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 101.296146][ T24] audit: type=1400 audit(1793306174.440:589): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 101.342792][ T24] audit: type=1400 audit(1793306174.460:590): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.395724][ T24] audit: type=1400 audit(1793306174.460:591): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=2304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.428845][ T24] audit: type=1400 audit(1793306174.460:592): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.453345][ T24] audit: type=1400 audit(1793306174.460:593): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.489894][ T703] usb 3-1: USB disconnect, device number 4 [ 101.505327][ T703] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 101.526946][ T24] audit: type=1400 audit(1793306174.500:594): avc: denied { read } for pid=1693 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.590973][ T24] audit: type=1400 audit(1793306174.500:595): avc: denied { open } for pid=1693 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.674726][ T24] audit: type=1400 audit(1793306174.500:596): avc: denied { getattr } for pid=1693 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.701050][ T24] audit: type=1400 audit(1793306174.630:597): avc: denied { write } for pid=1692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.990519][ T1728] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.358' sets config #0 [ 102.139995][ T972] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.554243][ T972] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.562987][ T972] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.573522][ T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.582615][ T972] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 102.593676][ T972] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 102.839979][ T972] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.849252][ T972] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.857294][ T972] usb 2-1: Product: syz [ 102.861662][ T972] usb 2-1: Manufacturer: syz [ 102.911999][ T972] cdc_wdm 2-1:1.0: skipping garbage [ 102.917465][ T972] cdc_wdm 2-1:1.0: skipping garbage [ 102.927550][ T972] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 103.034919][ T1780] overlayfs: failed to clone upperpath [ 103.370112][ T971] usb 2-1: USB disconnect, device number 10 [ 103.479724][ T1798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 103.487938][ T1798] System zones: 1-12 [ 103.492433][ T1798] EXT4-fs error (device loop0): ext4_quota_enable:6451: comm syz.0.383: inode #100663296: comm syz.0.383: iget: illegal inode # [ 103.507487][ T1798] EXT4-fs error (device loop0): ext4_quota_enable:6454: comm syz.0.383: Bad quota inode: 100663296, type: 2 [ 103.519758][ T1798] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 103.541109][ T1806] smpboot: CPU 1 is now offline [ 103.546567][ T1798] EXT4-fs (loop0): mount failed [ 103.555348][ T1806] x86: Booting SMP configuration: [ 103.560672][ T1806] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 103.567373][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 103.568338][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 103.580996][ T972] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.661295][ T1809] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 103.775895][ T1814] EXT4-fs (loop7): Test dummy encryption mode enabled [ 103.802746][ T1814] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.389: inode has both inline data and extents flags [ 103.816435][ T1814] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.389: couldn't read orphan inode 15 (err -117) [ 103.828450][ T1814] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 103.950006][ T972] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 103.959063][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.369847][ T972] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 104.431509][ T634] usb 3-1: USB disconnect, device number 5 [ 104.532935][ T1839] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'. [ 104.542898][ T1839] device ip6gre1 entered promiscuous mode [ 104.548993][ T1841] netlink: 24 bytes leftover after parsing attributes in process `syz.6.399'. [ 104.930064][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.941512][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.952280][ T972] usb 2-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 104.962116][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.002638][ T972] usb 2-1: config 0 descriptor?? [ 105.179886][ T634] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 105.470127][ T1829] udc-core: couldn't find an available UDC or it's busy [ 105.477276][ T1829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.496042][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.503603][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.511385][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.519392][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.527016][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.534586][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.541619][ T634] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.552881][ T634] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.562282][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.570523][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.577408][ T634] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.585521][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.592825][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.599918][ T634] usb 8-1: config 0 descriptor?? [ 105.605225][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.612330][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.619209][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.626472][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.631225][ T1882] overlayfs: failed to clone upperpath [ 105.633646][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.646493][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.653416][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.660326][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.667195][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.674101][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.681005][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.687867][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.694750][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.702327][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.709213][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.716102][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.723003][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.729893][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.736760][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.743655][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.750577][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.757424][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.764311][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.771192][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.778046][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.784927][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.791820][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.798699][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.805591][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.812476][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.819332][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.826334][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.833219][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.840118][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.846987][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.853888][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.859840][ T971] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.860852][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.875050][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.881990][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.888841][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.895749][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.902674][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.909521][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.916397][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.926578][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.950804][ T634] usbhid 8-1:0.0: can't add hid device: -71 [ 105.956757][ T634] usbhid: probe of 8-1:0.0 failed with error -71 [ 105.963143][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.971235][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x2 [ 105.978109][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.985255][ T634] usb 8-1: USB disconnect, device number 3 [ 105.991730][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 105.999003][ T972] wacom 0003:056A:5012.0005: ignoring exceeding usage max [ 106.007973][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.014854][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.021728][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.028576][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.035446][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.042314][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.049154][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.056367][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.063239][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.070138][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.076982][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.083845][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.090709][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.097535][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.104455][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.111317][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.118150][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.125001][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.131849][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.138675][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.145533][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.152437][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.159271][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.166142][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.173018][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.179645][ T1899] fuse: Bad value for 'fd' [ 106.179993][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.191259][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.198116][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.205093][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.211994][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.218837][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.225723][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.232605][ T971] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.232611][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.232624][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.250408][ T971] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.257306][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.269990][ T971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.283537][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.283835][ T971] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 106.299474][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.299533][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.306569][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.321407][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.325293][ T971] usb 1-1: config 0 descriptor?? [ 106.329310][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.335761][ T1905] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 106.340207][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.347839][ T1905] pim6reg0: tun_chr_ioctl cmd 35111 [ 106.352583][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.364637][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.371557][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.378424][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.385307][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.392200][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.399042][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.406022][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.412916][ T634] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 106.420405][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.427246][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.431489][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 106.431499][ T24] audit: type=1400 audit(1793306179.570:616): avc: denied { mount } for pid=1906 comm="syz.1.428" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 106.434162][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.445499][ T24] audit: type=1400 audit(1793306179.590:617): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 106.462623][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.496367][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.503246][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.510134][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.510633][ T1909] exfat: Deprecated parameter 'utf8' [ 106.516977][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.516991][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.522664][ T1909] exfat: Deprecated parameter 'utf8' [ 106.529120][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.536179][ T1909] exfat: Deprecated parameter 'namecase' [ 106.541355][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.548206][ T1909] exfat: Deprecated parameter 'namecase' [ 106.553799][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.560694][ T1909] exfat: Deprecated parameter 'namecase' [ 106.566264][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.586370][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.593279][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.600147][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.606980][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.612147][ T1909] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 106.613834][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.632620][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.639446][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.646359][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.653268][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.660217][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.667067][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.674076][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.681037][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.687885][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.691925][ T24] audit: type=1400 audit(1793306179.830:618): avc: denied { read open } for pid=1908 comm="syz.1.429" path=2F36382FE91F7189591E9233614B2F66696C6531 dev="loop1" ino=1048702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.720424][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.727392][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.727950][ T1880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 106.734940][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.750159][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.756310][ T24] audit: type=1400 audit(1793306179.840:619): avc: denied { getattr } for pid=1908 comm="syz.1.429" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.758068][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.786460][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.793398][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.800350][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.807230][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.814150][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.821115][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.828996][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.835918][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.842837][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.843420][ T24] audit: type=1400 audit(1793306179.990:620): avc: denied { rename } for pid=1879 comm="syz.0.415" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.849709][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.878631][ T634] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.889688][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.896610][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.897577][ T1880] EXT4-fs warning (device loop0): ext4_rmdir:3355: inode #11: comm syz.0.415: empty directory 'file0' has too many links (111) [ 106.903545][ T634] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 106.927086][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.934024][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.941490][ T24] audit: type=1400 audit(1793306180.020:621): avc: denied { rename } for pid=1879 comm="syz.0.415" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.963664][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.970548][ T634] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.978869][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 106.985750][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.000089][ T634] usb 8-1: config 0 descriptor?? [ 107.005385][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.012270][ T24] audit: type=1400 audit(1793306180.020:622): avc: denied { reparent } for pid=1879 comm="syz.0.415" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.036523][ T24] audit: type=1400 audit(1793306180.020:623): avc: denied { unlink } for pid=1879 comm="syz.0.415" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.048096][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.059227][ T24] audit: type=1400 audit(1793306180.040:624): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.066394][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.092248][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.099108][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.106018][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.112967][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.119904][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.126756][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.133659][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.140546][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.147557][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.159872][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.169824][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.176674][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.193754][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.203829][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.216651][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.223664][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.230664][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.237572][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.244590][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.249494][ T971] usbhid 1-1:0.0: can't add hid device: -71 [ 107.257303][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.257317][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.269945][ T971] usbhid: probe of 1-1:0.0 failed with error -71 [ 107.282242][ T971] usb 1-1: USB disconnect, device number 7 [ 107.285430][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.297270][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.304392][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.311435][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.318444][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.325581][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.332756][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.339699][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.346700][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.353736][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.360711][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.367658][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.374630][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.381661][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.388547][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.395608][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.402568][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.409505][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.416481][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.423523][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.430554][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.437523][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.449538][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.459515][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.470504][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.481484][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.491453][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.501405][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.510349][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.520305][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.529228][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.538882][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.546842][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.553830][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.560745][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.568076][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.575004][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.581984][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.588868][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.593142][ T24] audit: type=1400 audit(1793306180.730:625): avc: denied { mount } for pid=1947 comm="syz.6.443" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 107.595834][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.624770][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.631721][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.638641][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.645569][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.652505][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.659379][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.666255][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.673147][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.680043][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.686902][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.693886][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.700785][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.707652][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.714528][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.721422][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.728293][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.735173][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.742058][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.748914][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.755803][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.763086][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.769973][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.776821][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.783707][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.790587][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.797442][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.804328][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.811812][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.818685][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.825710][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.832642][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.839539][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.846461][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x2 [ 107.853346][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.860238][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.867263][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.874150][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.881044][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.887897][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.896342][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.903260][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.911260][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.918123][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.925075][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.932091][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.938945][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.945988][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.952877][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.959885][ T634] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 107.966822][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.974148][ T634] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input6 [ 107.983132][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 107.998259][ T1961] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue [ 108.006668][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.011418][ T1961] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.018260][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.035429][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.042590][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.049504][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.084889][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.091841][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.098704][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.105600][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.112857][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.119870][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.126913][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.133846][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.140776][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.142402][ T1965] tipc: Enabling of bearer rejected, failed to enable media [ 108.147636][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.163340][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.170390][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.177273][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.184365][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.191374][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.198308][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.206603][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.213950][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.221601][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.228683][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.251678][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.258679][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.265838][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.272846][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.280039][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.286996][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.297798][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.305582][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.313078][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.320804][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.327786][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.335725][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.343178][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.352721][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.359675][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.367537][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.374879][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.382540][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.389532][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.397449][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.404836][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.412468][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.419449][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.427256][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.434652][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.442192][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.449167][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.456989][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.464324][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.472514][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.479523][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.487552][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.494987][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.502731][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.509716][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.517578][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.525037][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.532716][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.539713][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.547575][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.554913][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.562566][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.569598][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.577522][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.584849][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.592533][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.599507][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.607473][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.614903][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.622646][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.629650][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.636692][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.643610][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.650644][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.657559][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.664556][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.671468][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.678378][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.685241][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.692158][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.698988][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x1 [ 108.705839][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.712739][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.719868][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x4 [ 108.729870][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x5 [ 108.736722][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.743758][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.750704][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.757727][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.765493][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.772674][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x2 [ 108.779527][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.787225][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.794673][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.801562][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.808415][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x2 [ 108.815325][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.822192][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.829224][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.836133][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.842991][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.850298][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.857159][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.864317][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.871345][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.878260][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.885206][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.892128][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.898960][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.905985][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.912899][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.919752][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.926636][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.933538][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.940397][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.947237][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.954131][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.961029][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.968681][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.975701][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.982601][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.989467][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 108.996395][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.003277][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.010808][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.017725][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.024873][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.031967][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.039046][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.050862][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.057767][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.064648][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.071564][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.078425][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.085316][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.092247][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.099093][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.105972][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.112948][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.119942][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.126941][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.133937][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.140947][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.147865][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.154877][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.161818][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.169746][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.176955][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.183885][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.192966][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.199842][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.206697][ T972] wacom 0003:056A:5012.0005: unknown main item tag 0x0 [ 109.213985][ T972] wacom: probe of 0003:056A:5012.0005 failed with error -22 [ 109.225017][ T972] usb 2-1: USB disconnect, device number 11 [ 109.239875][ T634] usb 8-1: USB disconnect, device number 4 [ 109.337300][ T1987] ================================================================== [ 109.345392][ T1987] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x85/0xa0 [ 109.353009][ T1987] Write of size 8 at addr ffff88811dc04d90 by task syz.0.459/1987 [ 109.360786][ T1987] [ 109.363091][ T1987] CPU: 0 PID: 1987 Comm: syz.0.459 Tainted: G W syzkaller #0 [ 109.371727][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.381752][ T1987] Call Trace: [ 109.385015][ T1987] __dump_stack+0x21/0x24 [ 109.389315][ T1987] dump_stack_lvl+0x1a7/0x208 [ 109.393966][ T1987] ? show_regs_print_info+0x18/0x18 [ 109.399140][ T1987] ? thaw_kernel_threads+0x220/0x220 [ 109.404401][ T1987] print_address_description+0x7f/0x2c0 [ 109.409921][ T1987] ? rcu_segcblist_enqueue+0x85/0xa0 [ 109.415181][ T1987] kasan_report+0x100/0x140 [ 109.419676][ T1987] ? rcu_segcblist_enqueue+0x85/0xa0 [ 109.424942][ T1987] __asan_report_store8_noabort+0x17/0x20 [ 109.430651][ T1987] rcu_segcblist_enqueue+0x85/0xa0 [ 109.435733][ T1987] call_rcu+0x4df/0x1090 [ 109.439951][ T1987] ? rcu_gp_kthread_wake+0x90/0x90 [ 109.445035][ T1987] ? __kasan_check_write+0x14/0x20 [ 109.450118][ T1987] ? __wake_up_bit+0x120/0x120 [ 109.454853][ T1987] security_inode_free+0xb4/0xd0 [ 109.459768][ T1987] __destroy_inode+0x175/0x4f0 [ 109.464505][ T1987] evict+0x7e8/0x940 [ 109.468371][ T1987] ? mode_strip_sgid+0x150/0x150 [ 109.473278][ T1987] ? _raw_spin_lock+0x94/0xf0 [ 109.477925][ T1987] ? _raw_spin_trylock_bh+0x150/0x150 [ 109.483269][ T1987] ? __kasan_check_read+0x11/0x20 [ 109.488265][ T1987] ? __kasan_check_write+0x14/0x20 [ 109.493350][ T1987] iput+0x654/0x7e0 [ 109.497134][ T1987] dentry_unlink_inode+0x2d5/0x390 [ 109.502221][ T1987] __dentry_kill+0x45b/0x660 [ 109.506780][ T1987] dentry_kill+0xc0/0x2a0 [ 109.511109][ T1987] dput+0x42/0x80 [ 109.514725][ T1987] __fput+0x4bd/0x730 [ 109.518678][ T1987] ____fput+0x15/0x20 [ 109.522633][ T1987] task_work_run+0x127/0x190 [ 109.527200][ T1987] exit_to_user_mode_loop+0xcb/0xe0 [ 109.532371][ T1987] exit_to_user_mode_prepare+0x76/0xa0 [ 109.537805][ T1987] syscall_exit_to_user_mode+0x1d/0x40 [ 109.543238][ T1987] do_syscall_64+0x3d/0x40 [ 109.547629][ T1987] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 109.553493][ T1987] RIP: 0033:0x7fec329e4559 [ 109.557908][ T1987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.577500][ T1987] RSP: 002b:00007ffc5db247d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.585889][ T1987] RAX: 0000000000000000 RBX: 00007ffc5db248c0 RCX: 00007fec329e4559 [ 109.593836][ T1987] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 109.601800][ T1987] RBP: 000000000001ab04 R08: 0000000000000001 R09: 0000000000000000 [ 109.609748][ T1987] R10: 0000001b2d220000 R11: 0000000000000246 R12: 00007ffc5db24900 [ 109.617693][ T1987] R13: 00007fec32c6afac R14: 000000000001ab37 R15: 00007fec32c6afa0 [ 109.625638][ T1987] [ 109.627942][ T1987] Allocated by task 1988: [ 109.632249][ T1987] __kasan_kmalloc+0xd4/0x100 [ 109.636896][ T1987] __kmalloc+0x19f/0x330 [ 109.641111][ T1987] l2tp_session_create+0x39/0xb60 [ 109.646107][ T1987] pppol2tp_connect+0xbf5/0x1640 [ 109.651015][ T1987] __sys_connect+0x3ce/0x450 [ 109.655576][ T1987] __x64_sys_connect+0x7a/0x90 [ 109.660310][ T1987] do_syscall_64+0x31/0x40 [ 109.664697][ T1987] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 109.670554][ T1987] [ 109.672856][ T1987] Freed by task 9: [ 109.676548][ T1987] kasan_set_track+0x4a/0x70 [ 109.681108][ T1987] kasan_set_free_info+0x23/0x40 [ 109.686017][ T1987] ____kasan_slab_free+0x125/0x160 [ 109.691099][ T1987] __kasan_slab_free+0x11/0x20 [ 109.695834][ T1987] slab_free_freelist_hook+0xc5/0x190 [ 109.701176][ T1987] kfree+0xc0/0x270 [ 109.704963][ T1987] l2tp_session_put+0xb2/0x1a0 [ 109.709696][ T1987] l2tp_session_delete+0x3a9/0x4a0 [ 109.714776][ T1987] l2tp_tunnel_del_work+0x180/0x3d0 [ 109.719947][ T1987] process_one_work+0x6fd/0xbc0 [ 109.724769][ T1987] worker_thread+0xa8e/0x13c0 [ 109.729417][ T1987] kthread+0x324/0x3b0 [ 109.733464][ T1987] ret_from_fork+0x1f/0x30 [ 109.737847][ T1987] [ 109.740149][ T1987] Last potentially related work creation: [ 109.745840][ T1987] kasan_save_stack+0x3a/0x60 [ 109.750489][ T1987] __kasan_record_aux_stack+0xd2/0x100 [ 109.755922][ T1987] kasan_record_aux_stack_noalloc+0xb/0x10 [ 109.761701][ T1987] call_rcu+0x11a/0x1090 [ 109.765951][ T1987] pppol2tp_release+0x1e3/0x2b0 [ 109.770784][ T1987] sock_close+0xb8/0x200 [ 109.775003][ T1987] __fput+0x2dc/0x730 [ 109.778964][ T1987] ____fput+0x15/0x20 [ 109.782921][ T1987] task_work_run+0x127/0x190 [ 109.787485][ T1987] exit_to_user_mode_loop+0xcb/0xe0 [ 109.792658][ T1987] exit_to_user_mode_prepare+0x76/0xa0 [ 109.798093][ T1987] syscall_exit_to_user_mode+0x1d/0x40 [ 109.803523][ T1987] do_syscall_64+0x3d/0x40 [ 109.807910][ T1987] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 109.813771][ T1987] [ 109.816075][ T1987] The buggy address belongs to the object at ffff88811dc04c00 [ 109.816075][ T1987] which belongs to the cache kmalloc-512 of size 512 [ 109.830100][ T1987] The buggy address is located 400 bytes inside of [ 109.830100][ T1987] 512-byte region [ffff88811dc04c00, ffff88811dc04e00) [ 109.843341][ T1987] The buggy address belongs to the page: [ 109.848966][ T1987] page:ffffea0004770100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11dc04 [ 109.859172][ T1987] head:ffffea0004770100 order:2 compound_mapcount:0 compound_pincount:0 [ 109.867467][ T1987] flags: 0x4000000000010200(slab|head) [ 109.872902][ T1987] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 109.881459][ T1987] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 109.890010][ T1987] page dumped because: kasan: bad access detected [ 109.896395][ T1987] page_owner tracks the page as allocated [ 109.902098][ T1987] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 186, ts 15890916665, free_ts 15608350640 [ 109.921073][ T1987] prep_new_page+0x176/0x190 [ 109.925632][ T1987] get_page_from_freelist+0x225f/0x23f0 [ 109.931147][ T1987] __alloc_pages_nodemask+0x29a/0x640 [ 109.936487][ T1987] new_slab+0x84/0x3f0 [ 109.940529][ T1987] ___slab_alloc+0x2f8/0x4c0 [ 109.945088][ T1987] __slab_alloc+0x63/0xa0 [ 109.949387][ T1987] __kmalloc_track_caller+0x1e4/0x310 [ 109.954736][ T1987] __alloc_skb+0xdc/0x520 [ 109.959041][ T1987] alloc_skb_with_frags+0xa3/0x560 [ 109.964125][ T1987] sock_alloc_send_pskb+0x87f/0x9a0 [ 109.969296][ T1987] unix_stream_sendmsg+0x4c9/0xbe0 [ 109.974380][ T1987] sock_write_iter+0x2a6/0x3a0 [ 109.979115][ T1987] vfs_write+0x770/0xd70 [ 109.983328][ T1987] ksys_write+0x14a/0x260 [ 109.987630][ T1987] __x64_sys_write+0x7b/0x90 [ 109.992192][ T1987] do_syscall_64+0x31/0x40 [ 109.996580][ T1987] page last free stack trace: [ 110.001231][ T1987] free_unref_page_prepare+0x2b7/0x2d0 [ 110.006661][ T1987] free_unref_page_list+0x129/0x9c0 [ 110.011833][ T1987] release_pages+0xe41/0xe90 [ 110.016398][ T1987] free_pages_and_swap_cache+0x86/0xa0 [ 110.021831][ T1987] tlb_finish_mmu+0x17e/0x310 [ 110.026480][ T1987] exit_mmap+0x329/0x590 [ 110.030720][ T1987] __mmput+0x92/0x2d0 [ 110.034678][ T1987] mmput+0x4e/0x150 [ 110.038463][ T1987] do_exit+0x9d8/0x24e0 [ 110.042614][ T1987] do_group_exit+0x149/0x310 [ 110.047179][ T1987] __x64_sys_exit_group+0x3f/0x40 [ 110.052173][ T1987] do_syscall_64+0x31/0x40 [ 110.056566][ T1987] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.062428][ T1987] [ 110.064729][ T1987] Memory state around the buggy address: [ 110.070335][ T1987] ffff88811dc04c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.078368][ T1987] ffff88811dc04d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.086401][ T1987] >ffff88811dc04d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.094436][ T1987] ^ [ 110.099005][ T1987] ffff88811dc04e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.107037][ T1987] ffff88811dc04e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.115068][ T1987] ================================================================== [ 110.123099][ T1987] Disabling lock debugging due to kernel taint [ 110.129594][ T972] usb 2-1: new high-speed USB device number 12 using dummy_hcd SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 111.080398][ T9] device bridge_slave_1 left promiscuous mode [ 111.086506][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.093899][ T9] device bridge_slave_0 left promiscuous mode [ 111.099994][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.107513][ T9] device veth1_macvtap left promiscuous mode [ 111.113520][ T9] device veth0_vlan left promiscuous mode [ 111.600558][ T9] tipc: Left network mode [ 112.320826][ T9] device bridge_slave_1 left promiscuous mode [ 112.326967][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.334337][ T9] device bridge_slave_0 left promiscuous mode [ 112.340441][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.348037][ T9] device veth1_macvtap left promiscuous mode [ 112.354051][ T9] device veth0_vlan left promiscuous mode