last executing test programs: 2.503604323s ago: executing program 0 (id=240): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c}}]}}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getgroups(0x2, &(0x7f0000000400)=[0xee01, 0x0]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)}, {&(0x7f0000000440)="435ed8a9d3c3dbc41894c6f9ee7664cd1e8f6c0a4d1d63ce350bccde05bf76b8b32961440f89ffd8082de6280aea3475dc436b8930f9ef97fed14c9d11364cca9ade7de37163033676ca3c49bff5c500c9", 0x51}, {&(0x7f0000000500)}, {&(0x7f00000005c0)}], 0x5}}], 0x1, 0x8010) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2.407791904s ago: executing program 3 (id=244): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.361028314s ago: executing program 1 (id=247): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) unshare(0x2020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.263789486s ago: executing program 1 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x101}]}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d0) 2.263655926s ago: executing program 3 (id=250): socket$igmp(0x2, 0x3, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4012831, 0xffffffffffffffff, 0x81362000) madvise(&(0x7f0000d3f000/0x3000)=nil, 0x3000, 0x12) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 2.252784486s ago: executing program 1 (id=251): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbd4, &(0x7f0000001000)="$eJzs3M1rXNcVAPDznkZjyVY7ciml7qYqpdhQOpZcZGpTqF1cuumi0G4DFvLICI0/kBQcyVqMkn8gJFkHsgkkMQlZxGtvEpJtNom9TcgiYIJiJRCCo/DmQ5IljSTHM3qK/PvB1dz77hvOOfPQvHthZgJ4ag1lf9KIYxFxMYkoNY+nEVGs9/oiao3zlpcWxr9dWhhPYmXlf18lkUTEg6WF8fo5EfVx5khzkB39+J9J/OqFzXFn5uanxqrVynRzfHL2yvWTM3Pzf5m8Mna5crlydeT030ZPjZ4ePjPasVq/++zc7W/+8O8vat+/+fDW1y+/nsS5GGjONerorKEYWn1N1itExFing+Wkp1nP+jqTwg5PSrucFAAAbaXr1nC/iVL0xNrirRTvf5JrcgAAAEBHrPRErAAAAAAHXGL/DwAAAAdc63MAD5YWxlst308k7K375yNisFH/crM1ZgpRqz/2RW9EHH6QxPqvtSaNpz2xoYj4/N6Zd7IWXfoe8nZqixHx262uf1Kvf7D53e6N9acRMdyB+EMbxj+n+s91IH7e9QPwdLpzvnEj23z/S1fXP7HF/a+wxb3rp9jp/tfTgRjbaa3/ljet/9bq72mz/vvvLmPcfOPVG+3msvr/fvtfb7daFj97fKKiHsP9xYjfFbaqP1mtP2lT/8Vdxij9cKPSbi7v+ldeizgeW9ffkmz/+0QnJyarleHG3y1jLH40+la7+HnXn13/w23qb/3+U7vrf32XMZ65cOHdTQfvrXW3rz/9spj8v94rNo88NzY7Oz0SUUz+s/n4qe1zqZ/zsDkYadR/4o/b//9vVX/2nlBrvg7ZXmCx+ZiNn98Q8x+3br7XLp/W/i/P63+pzfVfX/+Hhc3X/8VdxvjTBy+daDe3fv+btSx+ay8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC1pRAxEkpZX+2laLkcciYhfx+G0em1m9s8T1569eimbixiM3nRisloZjohSY5xk45F6f218asP4rxFxNCJeKfXXx+Xxa9VLeRcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqiMRMRBJWo6INCKWS2laLuedFQAAANBxg48Oi3nlAQAAAHTPYPTnnQIAAADQZYN5JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBd/T3d+4mEVE7219vmWJzrjfXzIBuS/NOAMhNT94JALkp5J0AkJvH3ONbLsABlOww39d25lDHcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/zp+7M7dJCJqZ/vrLVNszvXmmhnQbWneCQC56dlusrB3eQB7b+1fvC/XPIC9Z48PJDvM962dU3t05lDXcgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/xmotyQtR0SxeaxcjvhFRAxGbzIxWa0MR8QvI+LTUu+hbDyy+uy+3PIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgs2bm5qfGqtXKdNZJo9lZPaKz1kkar1htv+Sj84SdYuyLNPZpJ+93JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jAzNz81Vq1WpmfyzgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI28zc/NRYtVqZ7mIn7xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPjwEAAP//OwEJNg==") 2.003211378s ago: executing program 3 (id=253): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp', 0x1d) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x11}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f2dbd70000300000007000000", @ANYRES32=r3, @ANYBLOB="808b"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.89951191s ago: executing program 1 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 1.804268751s ago: executing program 1 (id=259): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0x800fff, 0xc, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe75}], 0x1, 0x5405, 0x0, 0x0) 1.644092313s ago: executing program 1 (id=264): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x1, 0x3, 0x1c, 0x4, 0x0, 0x3, 0x22, 0x8, 0x1, 0x6, 0xc, 0x2}, {0xfffffffb, 0x6, 0xa, 0xc5, 0x5, 0x1, 0x7, 0xf3, 0x27, 0xe6, 0xf, 0x3, 0x3fffffffffe}, {0x7fffffff, 0x4, 0x3, 0x2, 0x4a, 0x12, 0x8, 0x0, 0x7d, 0x2, 0x3, 0x5, 0x4000000000ff}], 0x800013}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.431610085s ago: executing program 4 (id=267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000001880)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "8d10a40481194769"}}}}, 0x0) 1.431051145s ago: executing program 4 (id=268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x1, 0x100000000000000, &(0x7f0000000240)="bf"}) 1.410144215s ago: executing program 4 (id=270): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7ffffff7ffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7fff, 0x9b}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.307586596s ago: executing program 4 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='reno', 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x25, 0x7, 0x205}]}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x0, 0x40}]}, 0x10) socket$inet(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c) sendto$inet6(r6, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) 1.251621627s ago: executing program 2 (id=280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 659.612764ms ago: executing program 0 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000010, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0x8, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x4, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0xe34d, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x6, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xfffc, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x3, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 431.049556ms ago: executing program 0 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 406.221316ms ago: executing program 2 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f000df06712", 0x15}, {&(0x7f0000000200)='$', 0x1}], 0x2) 175.838399ms ago: executing program 3 (id=284): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x5204, 0x0) 175.728679ms ago: executing program 3 (id=285): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000000001000000000000"], 0x40}, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x0, 0x0) 175.629009ms ago: executing program 3 (id=286): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@inlinecrypt}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@noload}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") 136.784819ms ago: executing program 4 (id=287): socketpair(0x1, 0x4, 0x0, &(0x7f0000000200)) 130.94131ms ago: executing program 0 (id=288): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 82.25031ms ago: executing program 2 (id=289): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 81.89261ms ago: executing program 2 (id=290): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2, 0xb, 0x8, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x4008080) 51.17797ms ago: executing program 4 (id=291): syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 37.80494ms ago: executing program 0 (id=292): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x30}}], 0x1, 0x40000000) 37.64526ms ago: executing program 2 (id=293): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r1, 0x0, 0xf0) 33.302551ms ago: executing program 0 (id=294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200f05000000018d06853dc94810a99107c0ab6c10f12f60"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000640)=ANY=[], 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 0s ago: executing program 2 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x60, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 19.568856][ T24] audit: type=1400 audit(1777900386.569:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.569850][ T271] cgroup: Unknown subsys name 'net' [ 19.591605][ T24] audit: type=1400 audit(1777900386.569:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.618813][ T24] audit: type=1400 audit(1777900386.599:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.618969][ T271] cgroup: Unknown subsys name 'devices' [ 19.852211][ T271] cgroup: Unknown subsys name 'hugetlb' [ 19.857795][ T271] cgroup: Unknown subsys name 'rlimit' [ 19.995501][ T24] audit: type=1400 audit(1777900386.999:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.018718][ T24] audit: type=1400 audit(1777900386.999:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.023933][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.043440][ T24] audit: type=1400 audit(1777900386.999:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.075142][ T24] audit: type=1400 audit(1777900387.059:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.100630][ T24] audit: type=1400 audit(1777900387.059:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.136516][ T24] audit: type=1400 audit(1777900387.139:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.162046][ T24] audit: type=1400 audit(1777900387.139:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.188193][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.647295][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.654358][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.661832][ T279] device bridge_slave_0 entered promiscuous mode [ 20.669602][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.676700][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.683979][ T279] device bridge_slave_1 entered promiscuous mode [ 20.724136][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.731260][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.738712][ T280] device bridge_slave_0 entered promiscuous mode [ 20.755161][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.762354][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.769718][ T280] device bridge_slave_1 entered promiscuous mode [ 20.836075][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.843219][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.850416][ T281] device bridge_slave_0 entered promiscuous mode [ 20.857232][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.864356][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.871715][ T281] device bridge_slave_1 entered promiscuous mode [ 20.899310][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.906383][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.913765][ T283] device bridge_slave_0 entered promiscuous mode [ 20.931651][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.938682][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.946015][ T284] device bridge_slave_0 entered promiscuous mode [ 20.953073][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.960100][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.967462][ T284] device bridge_slave_1 entered promiscuous mode [ 20.974112][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.981235][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.988452][ T283] device bridge_slave_1 entered promiscuous mode [ 21.044985][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.052031][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.059269][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.066286][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.086382][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.093448][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.100727][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.107741][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.174600][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.181656][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.188886][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.195916][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.208121][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.215262][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.222525][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.229538][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.254109][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.262446][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.271072][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.278187][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.286073][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.293277][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.300509][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.307898][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.315279][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.322731][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.345165][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.352810][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.360641][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.368646][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.383879][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.392234][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.400270][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.407285][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.415863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.424268][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.431281][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.447066][ T279] device veth0_vlan entered promiscuous mode [ 21.462116][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.470100][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.477687][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.485258][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.492957][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.500645][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.508854][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.515881][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.523524][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.531700][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.538873][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.546352][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.554521][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.561549][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.568935][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.577141][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.584179][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.591490][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.599360][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.616916][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.625247][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.632290][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.639825][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.648332][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.655366][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.662977][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.670910][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.678824][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.690719][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.699019][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.722890][ T283] device veth0_vlan entered promiscuous mode [ 21.729904][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.738058][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.745991][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.754679][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.762675][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.770585][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.778506][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.786833][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.795147][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.803470][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.811888][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.819696][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.827782][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.835198][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.845270][ T279] device veth1_macvtap entered promiscuous mode [ 21.854059][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.862295][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.870292][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.878933][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.887009][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.899251][ T284] device veth0_vlan entered promiscuous mode [ 21.909457][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.917511][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.926069][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.934425][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.942542][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.949914][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.959811][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.967738][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.978358][ T283] device veth1_macvtap entered promiscuous mode [ 21.987105][ T280] device veth0_vlan entered promiscuous mode [ 21.993502][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.001029][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.008661][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.016954][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.025157][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.033690][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.041912][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.050047][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.059144][ T284] device veth1_macvtap entered promiscuous mode [ 22.070356][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.077985][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.086321][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.094828][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.103099][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.122452][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.131083][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.139370][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.148528][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.156907][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.165003][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.173208][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.181509][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.193711][ T280] device veth1_macvtap entered promiscuous mode [ 22.200435][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 22.215222][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.223013][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.231489][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.242066][ T284] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.257923][ T281] device veth0_vlan entered promiscuous mode [ 22.267320][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.275634][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.283945][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.292430][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.300608][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.308565][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.318449][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.325900][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.348093][ T281] device veth1_macvtap entered promiscuous mode [ 22.374333][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.391709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.399895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.408209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.417077][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.425712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.634638][ T341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15'. [ 22.643623][ T341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 22.652515][ T341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 22.807944][ T353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.809773][ T357] EXT4-fs (loop3): Ignoring removed orlov option [ 22.817587][ T353] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.830582][ T357] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 22.846081][ T357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 22.855248][ T357] EXT4-fs error (device loop3): ext4_iget_extra_inode:4685: inode #15: comm syz.3.22: corrupted in-inode xattr [ 22.871519][ T357] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.22: couldn't read orphan inode 15 (err -117) [ 22.883515][ T357] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue [ 23.012480][ T368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 23.022599][ T368] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.199615][ T380] xt_CT: No such helper "pptp" [ 23.393858][ T384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 23.430256][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 23.469005][ T393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.479175][ T393] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.504883][ T393] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x0c) [ 23.580215][ T414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 24.013060][ T446] erofs: (device loop1): mounted with root inode @ nid 36. [ 24.050757][ T446] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD2 format 3 for nid 83, please upgrade kernel [ 24.119111][ T446] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 24.674419][ T468] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro, [ 24.694628][ T468] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.720954][ T472] ====================================================== [ 24.720954][ T472] WARNING: the mand mount option is being deprecated and [ 24.720954][ T472] will be removed in v5.15! [ 24.720954][ T472] ====================================================== [ 24.792321][ T472] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 24.810992][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 24.811003][ T24] audit: type=1400 audit(1777900391.819:153): avc: denied { read write } for pid=467 comm="syz.1.64" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.869448][ T472] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814, [ 24.906606][ T24] audit: type=1400 audit(1777900391.849:154): avc: denied { open } for pid=467 comm="syz.1.64" path="/18/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.954404][ T479] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.65: inode has both inline data and extents flags [ 24.979395][ T479] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.65: couldn't read orphan inode 15 (err -117) [ 24.997968][ T479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 25.030064][ T24] audit: type=1400 audit(1777900392.029:155): avc: denied { append } for pid=478 comm="syz.0.65" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.062173][ T24] audit: type=1400 audit(1777900392.029:156): avc: denied { map } for pid=478 comm="syz.0.65" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.062682][ T479] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:404: inode #2: comm syz.0.65: No space for directory leaf checksum. Please run e2fsck -D. [ 25.085803][ T24] audit: type=1400 audit(1777900392.059:157): avc: denied { read } for pid=488 comm="syz.1.68" name="usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 25.125618][ T490] EXT4-fs error (device loop3): empty_inline_dir:1868: inode #12: block 5: comm syz.3.52: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 25.139242][ T479] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #2: comm syz.0.65: Directory block failed checksum [ 25.144991][ T490] EXT4-fs (loop3): Remounting filesystem read-only [ 25.157814][ T24] audit: type=1400 audit(1777900392.059:158): avc: denied { open } for pid=488 comm="syz.1.68" path="/dev/usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 25.164042][ T490] EXT4-fs warning (device loop3): empty_inline_dir:1875: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 25.186786][ T24] audit: type=1400 audit(1777900392.059:159): avc: denied { ioctl } for pid=488 comm="syz.1.68" path="/dev/usbmon9" dev="devtmpfs" ino=181 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 25.227447][ T24] audit: type=1400 audit(1777900392.069:160): avc: denied { setattr } for pid=478 comm="syz.0.65" path="/7/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.261109][ T24] audit: type=1400 audit(1777900392.129:161): avc: denied { remove_name } for pid=471 comm="syz.3.52" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.283891][ T24] audit: type=1400 audit(1777900392.129:162): avc: denied { rmdir } for pid=471 comm="syz.3.52" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.782767][ T523] FAT-fs (loop2): Directory bread(block 64) failed [ 25.803143][ T523] FAT-fs (loop2): Directory bread(block 65) failed [ 25.832996][ T528] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.854755][ T523] FAT-fs (loop2): Directory bread(block 66) failed [ 25.888518][ T523] FAT-fs (loop2): Directory bread(block 67) failed [ 25.908831][ T523] FAT-fs (loop2): Directory bread(block 68) failed [ 25.917799][ T528] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,nouid32,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro, [ 25.943960][ T523] FAT-fs (loop2): Directory bread(block 69) failed [ 25.976358][ T523] FAT-fs (loop2): Directory bread(block 70) failed [ 25.983138][ T523] FAT-fs (loop2): Directory bread(block 71) failed [ 25.989671][ T523] FAT-fs (loop2): Directory bread(block 72) failed [ 25.996704][ T523] FAT-fs (loop2): Directory bread(block 73) failed [ 26.136435][ T546] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 26.143927][ T546] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.156641][ T546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 26.159292][ T548] EXT4-fs (loop2): Ignoring removed bh option [ 26.165441][ T546] System zones: 0-1, 3-36 [ 26.176178][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 26.202148][ T548] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 26.213076][ T548] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 26.227806][ T552] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 26.248682][ T552] FAT-fs (loop3): Filesystem has been set read-only [ 26.488232][ T568] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue [ 26.502145][ T568] EXT4-fs warning (device loop3): dx_probe:836: inode #2: comm syz.3.98: Unimplemented hash flags: 0x0001 [ 26.513714][ T568] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.98: Corrupt directory, running e2fsck is recommended [ 26.589587][ T585] cgroup: syz.0.107 (585) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 26.606095][ T585] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 26.875790][ T617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=617 comm=syz.4.120 [ 26.892968][ T302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.140748][ T302] usb 1-1: Using ep0 maxpacket: 32 [ 27.261267][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.272249][ T302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.281996][ T302] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 27.291022][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.299772][ T302] usb 1-1: config 0 descriptor?? [ 27.341019][ T15] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.580949][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 27.750945][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.752299][ T639] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,errors=continue,,errors=continue [ 27.769695][ T639] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.782989][ T302] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 27.830765][ T15] usb 3-1: config 7 has an invalid interface number: 165 but max is 0 [ 27.839009][ T15] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 27.850282][ T15] usb 3-1: config 7 has no interface number 0 [ 27.858264][ T15] usb 3-1: config 7 interface 165 altsetting 16 bulk endpoint 0xD has invalid maxpacket 265 [ 27.868415][ T15] usb 3-1: config 7 interface 165 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.881461][ T15] usb 3-1: config 7 interface 165 has no altsetting 0 [ 28.040799][ T15] usb 3-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=1f.39 [ 28.049922][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.058013][ T15] usb 3-1: Product: syz [ 28.062231][ T15] usb 3-1: Manufacturer: syz [ 28.063816][ T25] usb 1-1: USB disconnect, device number 2 [ 28.066870][ T15] usb 3-1: SerialNumber: syz [ 28.090800][ T633] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 28.441002][ T15] rtl8150 3-1:7.165: couldn't find required endpoints [ 28.450070][ T15] rtl8150: probe of 3-1:7.165 failed with error -5 [ 28.465531][ T15] usb 3-1: USB disconnect, device number 2 [ 28.492974][ T668] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.950003][ T684] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.145'. [ 29.189700][ T700] netlink: 'syz.3.154': attribute type 12 has an invalid length. [ 29.354448][ T698] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.361908][ T698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.375024][ T698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.385851][ T698] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.152: bad orphan inode 131083 [ 29.397770][ T698] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue [ 29.415158][ T725] Zero length message leads to an empty skb [ 29.447465][ T698] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 29.463042][ T698] EXT4-fs error (device loop4): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.4.152: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 29.483388][ T698] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem [ 29.492341][ T698] EXT4-fs warning (device loop4): ext4_rename_delete:3901: inode #2: comm syz.4.152: Deleting old file: nlink 5, error=-117 [ 29.531033][ T728] exfat: Bad value for 'uid' [ 29.554063][ T734] erofs: (device loop3): mounted with root inode @ nid 36. [ 29.662961][ T743] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nogrpid,quota,,errors=continue [ 29.676304][ T743] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.190816][ T678] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.290728][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.508850][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 30.508859][ T24] audit: type=1400 audit(1777900397.509:244): avc: denied { write } for pid=785 comm="syz.0.183" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.590806][ T678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.601751][ T783] EXT4-fs (loop4): 1 truncate cleaned up [ 30.611741][ T783] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 30.621821][ T678] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 30.631115][ T678] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 30.647287][ T783] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.179: bg 0: block 465: padding at end of block bitmap is not set [ 30.648172][ T24] audit: type=1400 audit(1777900397.649:245): avc: denied { setattr } for pid=782 comm="syz.4.179" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.661919][ T783] EXT4-fs (loop4): Remounting filesystem read-only [ 30.690208][ T783] EXT4-fs error (device loop4) in ext4_evict_inode:258: Readonly filesystem [ 30.700759][ T15] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.710855][ T15] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 30.717342][ T803] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 30.723623][ T15] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 30.740782][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.749170][ T15] usb 4-1: config 0 descriptor?? [ 30.771498][ T807] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 30.779532][ T807] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 30.787532][ T807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0002] [ 30.795963][ T807] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 30.805540][ T807] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 30.814337][ T807] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue [ 30.835405][ T678] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 30.847651][ T807] EXT4-fs error (device loop2): ext4_remount:5877: Abort forced by user [ 30.852363][ T24] audit: type=1400 audit(1777900397.859:246): avc: denied { remount } for pid=806 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.881334][ T803] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 30.892204][ T803] exFAT-fs (loop0): error, failed to bmap (inode : ffff888130f29150 iblock : 8, err : -5) [ 30.895356][ T678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.904256][ T24] audit: type=1400 audit(1777900397.889:247): avc: denied { write } for pid=800 comm="syz.0.189" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.910631][ T803] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 30.931995][ T24] audit: type=1400 audit(1777900397.889:248): avc: denied { add_name } for pid=800 comm="syz.0.189" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.961202][ T678] usb 2-1: Product: syz [ 30.961216][ T678] usb 2-1: Manufacturer: syz [ 30.966384][ T803] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 30.970098][ T678] usb 2-1: SerialNumber: syz [ 30.979485][ T24] audit: type=1400 audit(1777900397.889:249): avc: denied { associate } for pid=800 comm="syz.0.189" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.008854][ T678] usb 2-1: config 0 descriptor?? [ 31.014420][ T24] audit: type=1400 audit(1777900397.889:250): avc: denied { read write } for pid=800 comm="syz.0.189" name="file1" dev="loop0" ino=1048599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.038578][ T24] audit: type=1400 audit(1777900397.889:251): avc: denied { open } for pid=800 comm="syz.0.189" path="/38/file1/file1" dev="loop0" ino=1048599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.061844][ T24] audit: type=1400 audit(1777900397.909:252): avc: denied { read write } for pid=814 comm="syz.4.194" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.085831][ T24] audit: type=1400 audit(1777900397.909:253): avc: denied { open } for pid=814 comm="syz.4.194" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.115364][ T819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 31.300772][ T678] uvcvideo: Found UVC 34.00 device syz (8086:0b5b) [ 31.308399][ T836] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.320832][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 18: -71 (exp. 1). [ 31.332777][ T836] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue [ 31.431158][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 18: -71 (exp. 1). [ 31.515403][ T836] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.523241][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 7 on unit 18: -71 (exp. 1). [ 31.570730][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 8 on unit 18: -71 (exp. 1). [ 31.590771][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 18: -71 (exp. 1). [ 31.610752][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 10 on unit 18: -71 (exp. 1). [ 31.630749][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 1 on unit 18: -71 (exp. 1). [ 31.650838][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 4 on unit 18: -71 (exp. 1). [ 31.670758][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 18: -71 (exp. 1). [ 31.690743][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 18: -71 (exp. 1). [ 31.710800][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 18: -71 (exp. 1). [ 31.730749][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 18: -71 (exp. 1). [ 31.750838][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 18: -71 (exp. 1). [ 31.770959][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 18: -71 (exp. 1). [ 31.790759][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 18: -71 (exp. 1). [ 31.811693][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 7 on unit 18: -71 (exp. 1). [ 31.840772][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 8 on unit 18: -71 (exp. 1). [ 31.860816][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 10 on unit 18: -71 (exp. 1). [ 31.872216][ T865] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 31.880755][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 1 on unit 18: -71 (exp. 1). [ 31.910774][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 18: -71 (exp. 1). [ 31.932658][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 16 on unit 18: -71 (exp. 1). [ 31.960804][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 18: -71 (exp. 1). [ 31.990756][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 18: -71 (exp. 1). [ 32.000762][ T774] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.010771][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 18: -71 (exp. 1). [ 32.079577][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 18: -71 (exp. 1). [ 32.100765][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 18: -71 (exp. 1). [ 32.118957][ T890] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 32.120756][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 7 on unit 18: -71 (exp. 1). [ 32.160810][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 18: -71 (exp. 1). [ 32.250822][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 10 on unit 18: -71 (exp. 1). [ 32.300887][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 12 on unit 18: -71 (exp. 1). [ 32.385932][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 4 on unit 18: -71 (exp. 1). [ 32.461611][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 18: -71 (exp. 1). [ 32.501068][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 16 on unit 18: -71 (exp. 1). [ 32.530795][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 18: -71 (exp. 1). [ 32.580754][ T678] uvcvideo: Failed to query (GET_INFO) UVC control 15 on unit 18: -71 (exp. 1). [ 32.599436][ T678] uvcvideo: No valid video chain found. [ 32.645988][ T678] usb 2-1: USB disconnect, device number 2 [ 32.786342][ T914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.234'. [ 32.824168][ T914] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.831412][ T914] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.841403][ T916] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 32.845899][ T20] usb 4-1: USB disconnect, device number 2 [ 32.868732][ T918] device syzkaller0 entered promiscuous mode [ 32.997374][ T933] EXT4-fs (loop2): Ignoring removed nobh option [ 33.022192][ T933] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue [ 33.033745][ T933] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.088154][ T937] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 33.098211][ T937] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.120812][ T774] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 33.130001][ T774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.158269][ T948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.168786][ T774] usb 5-1: Product: syz [ 33.173887][ T774] usb 5-1: Manufacturer: syz [ 33.174515][ T948] EXT4-fs (loop2): 1 truncate cleaned up [ 33.178474][ T774] usb 5-1: SerialNumber: syz [ 33.193110][ T948] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.219154][ T948] EXT4-fs error (device loop2): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.2.248: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 33.239484][ T948] EXT4-fs error (device loop2) in ext4_delete_entry:2741: Corrupt filesystem [ 33.241191][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.261346][ T955] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.418737][ T955] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 33.428881][ T955] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue [ 33.567850][ T981] EXT4-fs (loop1): Ignoring removed nobh option [ 33.574326][ T981] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.591997][ T981] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,nolazytime,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue [ 33.625966][ T986] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.640409][ T986] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.646729][ T981] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3357: comm syz.1.259: Allocating blocks 497-513 which overlap fs metadata [ 33.668121][ T986] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 53 (only 1 groups) [ 33.700829][ T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.710967][ T15] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.718626][ T980] EXT4-fs (loop1): pa ffff888130dd7888: logic 272, phys. 465, len 3 [ 33.720822][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.727924][ T980] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4367: group 0, [ 33.740770][ T282] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.741730][ T990] capability: warning: `syz.2.262' uses deprecated v2 capabilities in a way that may be insecure [ 33.749266][ T980] free 0, pa_free 1 [ 33.901299][ T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.910548][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.918567][ T15] usb 1-1: Product: syz [ 33.922967][ T15] usb 1-1: Manufacturer: syz [ 33.927843][ T15] usb 1-1: SerialNumber: syz [ 33.936413][ T997] fuse: Bad value for 'fd' [ 33.971394][ T15] cdc_ncm 1-1:1.0: bind() failure [ 33.981085][ T282] usb 4-1: Using ep0 maxpacket: 16 [ 33.995951][ T1003] binder: 1002:1003 ioctl c0306201 200000000280 returned -14 [ 34.038157][ T1005] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 34.052619][ T1005] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.100836][ T678] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.183058][ T15] usb 1-1: USB disconnect, device number 3 [ 34.247370][ T1032] 9pnet: Insufficient options for proto=fd [ 34.380822][ T282] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 34.389967][ T282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.397976][ T282] usb 4-1: Product: syz [ 34.402264][ T282] usb 4-1: Manufacturer: syz [ 34.406857][ T282] usb 4-1: SerialNumber: syz [ 34.414611][ T282] usb 4-1: config 0 descriptor?? [ 34.470811][ T678] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 34.479180][ T678] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 34.489839][ T678] usb 2-1: config 220 has no interface number 2 [ 34.496262][ T678] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 34.509785][ T678] usb 2-1: config 220 interface 0 has no altsetting 0 [ 34.516733][ T678] usb 2-1: config 220 interface 76 has no altsetting 0 [ 34.523988][ T678] usb 2-1: config 220 interface 1 has no altsetting 0 [ 34.653615][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.662175][ T15] usb 4-1: USB disconnect, device number 3 [ 34.690813][ T678] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 34.699965][ T678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.708152][ T678] usb 2-1: Product: syz [ 34.724699][ T678] usb 2-1: Manufacturer: syz [ 34.730160][ T678] usb 2-1: SerialNumber: syz [ 35.190939][ T678] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 35.208590][ T678] uvcvideo: No valid video chain found. [ 35.219619][ T678] usb 2-1: selecting invalid altsetting 0 [ 35.332973][ T678] usb 2-1: USB disconnect, device number 3 [ 35.361411][ T1048] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,data_err=abort,inlinecrypt,noauto_da_alloc,noload,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro, [ 35.407072][ T1060] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.421537][ T1060] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 35.429735][ T1060] BUG: scheduling while atomic: syz.4.291/1060/0x00000002 [ 35.436928][ T1060] Modules linked in: [ 35.440885][ T1060] Preemption disabled at: [ 35.440911][ T1060] [] z_erofs_reload_indexes+0x318/0x450 [ 35.452408][ T1060] CPU: 0 PID: 1060 Comm: syz.4.291 Not tainted syzkaller #0 [ 35.459676][ T1060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.469709][ T1060] Call Trace: [ 35.472981][ T1060] __dump_stack+0x21/0x24 [ 35.477352][ T1060] dump_stack_lvl+0x1a7/0x208 [ 35.482013][ T1060] ? z_erofs_reload_indexes+0x318/0x450 [ 35.487539][ T1060] ? show_regs_print_info+0x18/0x18 [ 35.492841][ T1060] ? kmem_cache_free+0x100/0x2d0 [ 35.497759][ T1060] ? z_erofs_reload_indexes+0x318/0x450 [ 35.503287][ T1060] dump_stack+0x15/0x1c [ 35.507425][ T1060] __schedule_bug+0x183/0x240 [ 35.512192][ T1060] ? __migrate_task+0x190/0x190 [ 35.517060][ T1060] __schedule+0xc45/0x1320 [ 35.521454][ T1060] ? kern_path_create+0x40/0x40 [ 35.526292][ T1060] ? __sched_text_start+0x8/0x8 [ 35.531121][ T1060] ? getname_flags+0x206/0x500 [ 35.535869][ T1060] schedule+0x13c/0x1d0 [ 35.540001][ T1060] exit_to_user_mode_loop+0x4b/0xe0 [ 35.545176][ T1060] exit_to_user_mode_prepare+0x76/0xa0 [ 35.550607][ T1060] syscall_exit_to_user_mode+0x1d/0x40 [ 35.556044][ T1060] do_syscall_64+0x3d/0x40 [ 35.560473][ T1060] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.566351][ T1060] RIP: 0033:0x7f556e376dd9 [ 35.571269][ T1060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.591118][ T1060] RSP: 002b:00007f556cdd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 35.599529][ T1060] RAX: ffffffffffffff8b RBX: 00007f556e5effa0 RCX: 00007f556e376dd9 [ 35.607480][ T1060] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 35.615432][ T1060] RBP: 00007f556e40cd69 R08: 0000000000000000 R09: 0000000000000000 [ 35.623383][ T1060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.631335][ T1060] R13: 00007f556e5f0038 R14: 00007f556e5effa0 R15: 00007ffeee89d3f8 [ 35.710741][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.789384][ T1072] EXT4-fs (loop2): Ignoring removed bh option [ 35.795777][ T1072] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.812270][ T1072] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,minixdf,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue [ 35.838803][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 35.838813][ T24] audit: type=1400 audit(1777900402.839:275): avc: denied { append } for pid=1071 comm="syz.2.297" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.845929][ T1072] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3357: comm syz.2.297: Allocating blocks 497-513 which overlap fs metadata [ 35.882025][ T1072] EXT4-fs (loop2): pa ffff888130f41930: logic 128, phys. 385, len 8 [ 35.890063][ T1072] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4367: group 0, free 0, pa_free 1 [ 35.980738][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 36.100801][ T25] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 36.109829][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.118295][ T25] usb 1-1: config 0 descriptor?? [ 36.161228][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 36.320763][ T774] rtl8150 5-1:1.0: couldn't reset the device [ 36.326816][ T774] rtl8150: probe of 5-1:1.0 failed with error -5 [ 36.335432][ T774] usb 5-1: USB disconnect, device number 2 [ 36.370777][ T25] usb 1-1: Detected FT232BM [ 36.590770][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -5 [ 36.810746][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 36.818143][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.827161][ T25] usb 1-1: USB disconnect, device number 4 [ 36.833727][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.843378][ T25] ftdi_sio 1-1:0.0: device disconnected