last executing test programs: 55.223437853s ago: executing program 4 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7, 0x8000, 0x4, 0x6, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x65, 0x0, 0x6, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x8, [{@remote, 0x80000001}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x3, [0x1]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5d5d, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x5, 0xffffffffffffffff, 0x2000000000000000, 0xb7, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup2(r3, r0) r6 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000009, 0x13, r6, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 55.217941754s ago: executing program 4 (id=580): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r4, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) fcntl$setsig(r0, 0xa, 0x32) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r6, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 54.343755858s ago: executing program 4 (id=586): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, 0x0, 0x15) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r7, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) r8 = dup(r6) fcntl$setsig(r0, 0xa, 0x32) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c2dc261700500"]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 53.185945999s ago: executing program 4 (id=592): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x2832449, 0x0, 0xfd, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000180)={[0xac2]}, 0x0, 0x0, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) setpgid(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000340)={r3, r4+10000000}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x3, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x21f, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r7, &(0x7f00000000c0)='hist:keys=common_timestamp.usecs', 0x20) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2000040, &(0x7f0000000400)=ANY=[@ANYBLOB="72090069722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d6174653d312c73686f72746e616d653d6d697865642c757466383d312c636f6465706167653d3737352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c7574573f3d312c757466383d312c696f636861567365743d69736f383835392d332c7574663843302c0000000000000040004c220a84560972345288f957d37af0bd"], 0x1, 0x36a, &(0x7f0000001200)="$eJzs3T9oXHUcAPDv/cndpVCTQSg6nW6ClFZx0MUEqVDMoJXDf4sHTa3enUIODy5Dr1kUR8VF0Mmtg46dxUHErYOrFaQqLmay0OKTu/fu/6VJwcSqnw+0/O775/1+7+WRSx7JL6+vReP8UlzY3b0RlUouimvPrMXNXKxGPgqRuhwAwH/JzSSJ35PUIPD0nao/OhZL6ah0JKsDAA7D4P3/jePpi3L27yAOWgcA3HPmvv9f7PmF0XcObVkAwCGaeP/PDQIPT6VnHvMXRz8TAAD8e734yqvPrW9EnKtWKxGt9zu1Ti2eGufXL8Sb0YzNOBUrcTsifVCQPi3o///s2Y0zp6p9P69Grd/RqUW0ep1a+pXCemHQX47TsRKrWX8y6i/0+08P+qsRcbk3mD9auU5tKY5l8/9wLDbj+MWVuH+uP+Lsxpk/kiQZHKDWGvb3InaiMjyJ/vpPxkpcyw9enI9+b3qsfCxnRRtT/Z0r5UEdAAAAAAAAAAAAAAAAAAAAAAAchpPLpWpmdbT/TdLqdd47lxVU5/OD/X3SdLY/0E66P1BSHu7O80Fhdn+g6f15OrVi5P/RMwcAAAAAAAAAAAAAAAAAAIB7R7tbinqzubnV7m43xoNSs5cO8v3I299+8fVyzNa8VRhHopgebqomi0V3u1GIiH6qEKP2ZNSeFAY1M8vot6SRXNSvXB2teLKmPDqL7UZ991r6Ynyc8jA1iuSKo5rjD/306dyk3e3Gn+NIIUapSnt+hd3tXDb/RKp1XxrqR3pbC7v2GOTa3cf2qbmeJMle7Zc+me+KSkRx7gP3dwy+uXHxgcfbJ55o54qN+lfZpg+PPLry0vWPP/+1UW9GdmmazdJW+3Zy91PkxvfoMJWL6dT+x9kZR3a22t164fvfXn7ww+/SSH54bxSinV/QnkxG3t17ri9nI6V00F9m6QBnurTg5l88eO3W1B2+NHN97tx+4rO1+tVLP/4yvJj7dU18krBRBwAAAAAAAAAAAAAAAAAAHImJ3xW/C0++cHgrAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjN/77/xODnbnIQQa3ejGfKm9utfecfPlITxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+xvwIAAP//7vhoSw==") socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) 52.147351212s ago: executing program 4 (id=598): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000002380), 0x0, 0x30161, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ffffff00"/34], 0xb8}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) shutdown(r5, 0x0) 52.119104419s ago: executing program 4 (id=599): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000300)={0x1, 0x1}) 52.068742301s ago: executing program 32 (id=599): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000300)={0x1, 0x1}) 20.018232769s ago: executing program 5 (id=766): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0004}]}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 19.513384152s ago: executing program 5 (id=772): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0004}]}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x65, 0x38, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 18.772663522s ago: executing program 5 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 17.945921743s ago: executing program 5 (id=787): syz_emit_ethernet(0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000002fb602bfc452f292890e4eca49a3c1ce8bd89dc6eec14a10df1031531effffac1e0001e0000001a001880b00089078"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1572c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0xfd, 0x4, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000600)={[], [{@appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, '!^\xe0'}}, {@obj_role={'obj_role', 0x3d, '\\\xbf!'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x4, 0x4d3, &(0x7f0000001b40)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000002c0)={[{@grpid}, {@jqfmt_vfsv0}, {@abort}, {@resuid}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$eJzs3MtvG8UfAPDvruv03ab9PaAPIFAQEY+kSQv0wAUEUi9ISIBUjiFNq9K0QU2QaFXRFKFyRP0LgCMSfwEnuCDgBOIKEhckhFShXiicFq29mzgPp7ZjJ4R8PpLbmd0Zz3x3d+zxjp0ANq2B/J8kYldE/NgXsbeeXVhgoP7fndtXx/+8fXU8iSx75fekVu6P21fHy6JlvZ1FZjCNSN9P4tAy7U5fvnJ+bHJy4lKRH5658Nbw9OUrT567MHZ24uzExdETJ44fG3nm6dGnuhLn7ryvB9+dOnzg5Os3Xxo/dfONbz7Lt+8q9jfGUdff8nNvb7J9IAYWHssGj0T8kmVZy2380+1uSCdbWqiwp4edoWWViMhPVzUf/7E3KjF/8vbGi++ta+eAnsqyLNu6ZGulTMxmwL9YEk13pWvaEWCNlW/0+eff8rGG0491d+u5+gegPO47xaO+Z0ukRZnqos+33TQQEadm//oof8Sy9yEAALrri3z+88Ry8780/t9Qbk/U14b6I2JfROyPiP9ExH8j4n8RtbL3RMS9bbafz3/27ZrPL53/fN9seaUr8vnfs8Xa1vz8r68Wf6G/UuR21+KvJmfOTU4cLY7JYFS35vmRFdr48oUfPpzLbFu4r3H+lz/y9su5YF3625ZFN+hOj82MdSH0mlvX5wJdNP9N5lYCkog4EBEHO3j+/Jide+zTw8323z3+FbSyznQX2ScRj9bP/2wsir+UrLw+ObwtJieODpdXxVLffnfj5Wbtryr+Lrh1PWLHkus/GuPvTxrXa6fbb+PGTx80/UzT6fXfl7xaS/cV294Zm5m5NBLRl8wu3T46X7fMl+Xz+AePLBd/WnuOj4t6hyIiv4jvi4j7I+KBou8PRsRDEXFkhfi/fv7hNzuPv7fy+E+3df7bT1TOf/V5s/ZbO//Ha6nBYksrr3+tdnA1xw4AAAA2irT2HfgkHZpLp+nQUMRrtXu7O9LJqemZx89MvX3xdP278v1RTcs7XWnD/dCR4t5wmR9dlD9Wu2+cZVm2vZYfGp+a7NWaOtCanU3Gf+7Xynr3Dui5ttbRmv2iDdiQ2hr/S38tBGxgXfgeDbBBtTr+qz3uB7D2vP/D5rXc+L8WcWcdugKsMe//sHkZ/7B5Gf+weRn/sCmt5nf9KyX2n+y4eraq1su/r9Jh9Z97cjRWSlQ6rb61jT9z0INEpMvuqkbEuvSnrUTauybyi6+9WvmJbLXwtU4v7LYTC14m+tbjtQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAb/g4AAP//rxHhTg==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000007, 0x110, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6e, 0x0, &(0x7f0000000480)="aa32a4009ea301f8c4cd000000d1c0a869f3bdeeb396d800918677e11bc1c256c563704085a55b7aef9fb28c0af533dc20fd035d03f9ac54f9eabcd8969fa9eb2953e7bb02f0ab17b8cce4194efa2396086ad0b6a10e6d596bb82ba29adb065c2be113126cdb5e136caae8ee9e70"}) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d44945fb6b6c455085647c013600", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x408, 0x103) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0)={0x1d, r4}, 0x10) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x8, 0x3000000000002, 0x0, 0x4000000}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 16.547385573s ago: executing program 5 (id=793): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000680)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r2, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESOCT=r1], 0x1, 0x14f3, &(0x7f0000005940)="$eJzs3Au0jtX2MPA511qPW9Kb5JY113x408YiSXJJyCVJkiTJLSFJkiQkNrklIQm5J7mH5BY7ud9vuSfJkSRJSEiyvqFzzl/ndL7R9x+n/+d/xp6/MdbYa+5nz/XO9c53vO/zPHvs/W3HwVXrV6tUl5nh34J//ZIKAJkAoB8AXAMAEQCUzF4y+6XjmTWm/nsPIv5cD0270hWIK0n6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rOt0/NcKyP9Drn/n57J53/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2ZW+//yfMzL+7Rm70nX8ueMKv/yEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQT58JlBgD+Pr/SdQkhhBBCCCGEEOLPEzJe6QqEEEIIIYQQQgjxPw9BgQYDEWSAjJAJMkMWuAqywtWQDa6BBFwL2eE6yAHXQ07IBbkhD+SFGyAfWCBwwBBDfigASbgRCsJNkAKFoDAUAQ9FoRjcDMXhFigBt0JJuA1Kwe1QGspAWSgHd0B5uBMqQEWoBHdBZagCVaEa3A3V4R6oAfdCTbgPasH9cK70X6usCw9BPXgY6sMj0AAehYbQCBpDE2j6z/mIAL/Jrw0PQB148J/yX4Su8BJ0g+6QCj2gJ7wMvaA39IG+0A9egf7wKgyA12AgDILB8DoMgTdgKLwJw2A4jIC3YCSMgtEwBsbCOBgPb8MEeAcmwrswCSbDFJgK02A6zID3YCbMgtnwPsyBD2AuzIP5sAAWwoewCBZDGnwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPHfzD/7T/mdEBBQoUKDBjNgBsyEmTALZsGsmBWzYTZMYAKzY/b/erHkxtyYF/NiPsyHhISMjPkxPyYxiQWxIKZgChbGwujRYzEshsXxFiyBJbAklsRSWApLYxksg+WwHJbH8lgBK2AlrISVsTJWxap4N96N92ANrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rYwNsgA2xITbGxtgUm2IzbIbNsTm2xJbYCltha2yNbbANtsW22A7bYXtsjx2wA3bEjtgJO2NnfBFfxJfwJeyOlVUP7Ik9sRf2wj7YF/viK9gfX8VX8TUciINwML6Or+MbOBTP4DAcjiNwBJZXo3A0jkFW43A8jscJOAEn4kSchJNxMk7FaTgdZ+AMnImzcBa+j3PwA/wA5+E8XIALcSEuwsWYhmm4BM/iUlyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW/AQ/we24HXfiTtyNu/FT/BQ/w89wIO7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+F5PI8X8Pm8X9fbXWjdQFCXGGVUBpVBZVKZVBaVRWVVWVU2lU0lVEJlV9lVDpVD5VQ5VW6VW+VVeVU+lU+RIsUqVvlVfpVUSVVQFVQpKkUVVoWVV14VU8VUcVVclVAlVEl1myqlblelVRnVwpdT5VR51dJXUBVVJVVJVVZVVFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq576a6q0nYQ/VUU7GX6q36qL5qJlZRlzpWVb2mBqpBarB6XS3AN9RQ9aYapoarEeotNVKNUqPVGDVWjVPj1dtqgnpHTVTvqklqspqipqpparqaod5TM9UsNVu9r+aoD9RcNU/NVwvUQvWhWqQWqzT1kVqiPlZL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9UnapvarnaonWqX2q32qE/VXvWZ2qc+V/vVF+qAwlSAL9Uh9ZU6rL5WR9Q36qj6Vh1T36nj6nt1Qp1Up9QP6rT6UZ359b0RANTP6oL6RV1UQYFGrbTWRkc6g86oM+nMOou+SmfVV+ts+hqd0Nfq7Po6nUNfr3PqXDq3zqPz6ht0Pm01aadZxzq/LqCT+kZdUN+kU3QhXVgX0V4X1cX0zbq4vkWX0Lfqkvo2XUrfrkvrMrqsLqfv0OX1nbqCrqgr6bt0ZV1FV9XV9N26ur5H19D36pr6Pl1L369r6wd0Hf2grqsf0vX0w7q+fkQ30I/qhrqRbqyb6Kb6Md1MP66b6xa6pX5Ct9JP6tb6Kd1GP63b6md0O/2sbq+f0x3087qjfkF30p11F/2LvqiD7qa761TdQ/fUL+teurfuo/vqfvoV3V+/qgfo1/RAPUgP1q/rIfoNPVS/qYfp4XqEfkuP1KP0aD1Gj9Xj9Hj9tp6g39ET9bt6kp6sp+ipepqervv8baXZ/w/57/yL/AG/PvoWvVV/orfp7XqH3ql36d16j96j9+q9ep/ep/fr/fqAPqAP6oP6kD6kD+vD+og+oo/qo/qYPqaP6+P6hD6pf9I/6NP6R31Gn9Vn9U/6vD6vL/ztOQCDRhltjIlMBpPRZDKZTRZzlclqrjbZzDUmYa412c11Joe53uQ0uUxuk8fkNTeYfMYaMs6wiU1+U8AkzY2moLnJpJhCprApYrwpaoqZm//t/D+qr6lpapqZZqa5aW5ampamlWllWpvWpo1pY9qatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4m1aSanuZl08v0Nn1MX9PPvGL6m/5mgBlgBpqBZrAZbIaYIWaoGWqGmWFmhBlhRpqRZrQZbcaasWa8GW8mmAlmoploJplJZoqZYqaZaWaGmWFmmplmtplt5pg5Zq6Za+ab+WahWWgWmUUmzaSZJWaJWWqWmWVmhVlhVplVZo1ZY9aZdWaD2WA2mU1mqdlqtpptZpvZYXaYXWaX2WP2mL1mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvm4qXTvkhFKjKRiTJEGaJMUaYoS5QlyhpljbJF2aJElIiyR9mjHNH1Uc4oV5Q7yhPljW6I8kU2oshFHMVR/qhAlIxujApGN0UpUaGocFQk8lHRqFh0c1Q8uiUqEd0alYxui0pFt0elozJR2ahcdEdUProzqhBVjCpFd0WVoypR1ahadHdUPbonqhHdG9WM7otqRfdHtaMHojrRg1Hd6KGoXvRwVD96JGoQPRo1jBpFjaMmUdM/df0QzuR63Hez3W2q7WF72pdtL9vb9rF9bT/7iu1vX7UD7Gt2oB1kB9vX7RD7hh1q37TD7HA7wr5lR9pRdrQdY8facXa8fdtOsO/YifZdO8lOtlPsVDvNTrcz7Ht2pp1lZ9v37Rz7gZ1r59n5doFdaD+0i+xim2Y/skvsx3apXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y12q/3EbrPb7Q670+6yu+0e+6ndaz+z++zndr/9wh6wf7EKvrSH7Ff2sP3aHrHf2KP2W3vMfmeP2+/tCXvSnrI/2NP2R3vGnrXn7E/2vP3ZXrC/2Is2XDq5v/TxToYMZaAMlIkyURbKQlkpK2WjbJSgBGWn7JSDclBOykm5KTflpbyUj/LRJUxM+Sk/JSlJBakgpVAKFabC5MlTMSpGxak4laASVJJKUikqRaWpNJWlsnQH3UF30p1UkSrSXXQXVaEqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDagBNaSG1JgaU1NqSs2oGTWn5tSSWlIrakWtqTW1oTbUltpSO2pH7ak9daAO1JE6UifqRF2oC3WlrtSNulEqpVJP6km9qBf1oT7Uj/pRf+pPA2gADaSBNJgG0xAaQkNpKA2j4TSC3qKRNIpG0xgaS+NoPI2nCTSBJtJEmkSTaApNoWk0jWbQDJpJM2k2zaY5NIfm0lyaT/NpIS2kRbSI0iiNltASWkpLaTktp5W0klbTalpLa2k9raeNtJE202baSltpG22jHbSDdtEu2kN7aC/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6BSdotN0ms7QGTpH5+g8/UwX6Be6SIEyucwui7vKZXVXu2zuGvfPcW6Xx+V1N7h8zrqcLtc/xOScS3GFXGFXxHlX1BVzN/8uLu3KuLKunLvDlXd3ugq/i6u7e1wNd6+r6e5z1dzd/xDXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vlRTmvvILXEfu6VumVvuVriVbpVb7db8V60r3Ca32W1xe9ynbpvb7na4nW6X2/1rfGkf+9znbr/7wh1x37iD7kt3yB1zh93Xv8aX9nfMfeeOu+/dCXfSnXI/uNPuR3fGnf11/5f2/oP7xV10wQEjK9ZsOOIMnJEzcWbOwldxVr6as/E1nOBrOTtfxzn4es7JuTg35+G8fAPnY8vEjpljzs8FOMk3ckG+iVO4EBfmIuy5KBfjm7k438Il+FYuybdxKb6dS3MZLsvl+A4uz3dyBa7IlfgursxVuCpX47u5Ot/DNfhersn3cS2+n2vzA1yHH+S6/BDX44e5Pj/CDfhRbsiNuDE34ab8GDfjx7k5t+CW/AS34ie5NT/FbfhpbsvPcDt+ltvzc9yBn+eO/AJ34s7chV/krvwSd+PunMo9uCe/zL24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgXcxp/xEv4Y17Ky3g5r+CVvIpX8xpey+t4PW/gjbyJN/MW3sqf8Dbezjt4J+/i3byHP+W9/Bnv4895P3/BB/gvfJC/5EP8FR/mr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4QZ4wzxZnjLPFVcdb46jhbfE2ciK+Ns8fXxTni6+Occa44d5wnzhvfEOeLbUyxizmO4/xxgTgZ3xgXjG+KU+JCceG4SOzjonGx+Oa4eHxLXCK+NS4Z3xaXim+PS8dl4kfuKxffEZeP74wrxBXjSvFdceW4Slw1rhbfHVeP74lrxPfGNeP74hLx/XHt+IG4TvxgXDd+KK4XPxzXjx+JG8SPxg3jRnHjuEncNH4sbhY/HjePW8Qt4yfiVvGTcev4qbhN/HTcNn7mD4+nxj3invHL8ctxCPfq+ckFyYXJD5OLkouTacmPkkuSHyeXJpcllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JEOolhE8euW1Nz7yGXxGn8ln9ln8VT6rv9pn89f4hL/WZ/fX+Rz+ep/T5/K5fR6f19/g83nryTvPPvb5fQGf9Df6gv4mn+IL+cK+iPe+qC/mm/imvqlv5h/3zX0L39I/4Z/wT/on/VP+Kf+0b+uf8e38s769f8538M/75/0LvpPv7Lv4F31X/5Lv5rv7VJ/qe/qevpfv5ftE4Pv5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/vRfqwf68f78X6Cn+An+ol+kp/kp/gpfpqf5mf4GX6mn+ln+9l+TsocP9fP9fP9fL/QL/SL/CKf5tP8Er/EL/VL/XK/3K/0K/1qv9qv9Wv9er/eb/Qb/Wa/2W/1W/02v83v8Dv8Lr/L7/F7/F6/1+/z+/x+v98f8Af8QX/QH/Jf+cP+a3/Ef+OP+m/9Mf+dP+6/9yf8SX/K/+BP+x/9GX/Wn/M/+fP+Z3/B/+Iv+uDHJ95OTEi8k5iYeDcxKfPkxJTE1MS0xPTEjMR7iZmJWYnZifcTcxIfJOYm5iXmJxYkFiY+TCxKLE6kJT5KLEl8nFiaWJZYnliRWJlYlQjhhm1xyB8KhGS4MRQMN4WUUCgUDkWCD0VDsXBzKB5uCSXCraFkuC2UCreH0qFMKBseDQ1Do9A4NAlNw2OhWXg8NA8tQsvwRGgVngytw1OhTXg6tA3PhHbh2dA+PBc6hOdDx/BC6BQ6hy7hxdA1vBS6he4hNfQIPcPLoVfoHfqEvqFfeCX0D6+GAeG1MDAMCoPD62FIeCMMDW+GYWF4GBHeCiPDqDA6jAljw7gwPrwdJoR3wsTwbpgUJocpYWqYFqaHGeG9MDPMCrPD+2FO+CDMDfPC/LAgLAwfhkVhcUgLH4Ul4eOwNCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDV8EraF7WFH2Bl2hd1hT/g07A2fhX3h87A/fBEOhL+Eg+HLcCh8FQ6Hr8OR8E04Gr4Nx8J34Xj4PpwIJ8Op8EM4HX4MZ8LZcC78FM6Hn8OF8Eu4+OvfrHW/UjfRhRBCCCH+Y6T+wfEe/+J76m/jkp4AcPX2PId/e1wDwMacf533VnlbJQDg6e4dH/r7qFw5NfXvj7tUQ1RgHgAkLudngMvxMmgJT0IbaAHF4e+/vvqt3qrzef6D9ZO3AWT5TU4muBxfXv+Wf7n/3mrUnD9cfx5ASoHLOZnhcnx5/RL/l/VzNfuD9TN/OR6g+W9yssLl+PL6xeBxeAba/MNPCiGEEEIIIYQQf9VblW3/R9e3l67P85rLORnhcvzb63MhhBBCCCGEEEL87/Rc5y5PPdamTYv2Mvmfn1T8b2ftljbJ5MpMrvAbkxBCCCGEEOJPd/mk/0pXIoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF//P/6d2JXeoxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCHGl/Z8AAAD//5fNKfo=") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20942, 0x154) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 16.424514703s ago: executing program 5 (id=795): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r7 = dup(r5) fcntl$setsig(r0, 0xa, 0x32) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r9, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r10, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 16.338856104s ago: executing program 33 (id=795): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r7 = dup(r5) fcntl$setsig(r0, 0xa, 0x32) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r9, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r10, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 7.275777039s ago: executing program 6 (id=857): add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x65, 0x38, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6.803465984s ago: executing program 6 (id=863): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) tgkill(0xffffffffffffffff, 0x0, 0x12) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f0000001480)=""/74, 0x4a}, {&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f00000015c0)=""/113, 0x71}, {&(0x7f0000001640)=""/144, 0x90}, {&(0x7f0000001700)=""/42, 0x2a}, {&(0x7f0000001740)=""/225, 0xe1}, {&(0x7f0000001840)=""/42, 0x2a}], 0xa, 0xf, 0x2) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2636fdacf55d61c2, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 4.997237024s ago: executing program 6 (id=876): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000140021010000", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001080)={'ip6_vti0\x00', &(0x7f0000001000)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x9, 0x4, @remote, @private2, 0x20, 0x8, 0x5, 0x1c9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf25050000000800040003000000080004002010000048000680060001000200000005000200fc00000008000300e000000214000400ff02000000000000100000000000000108000700", @ANYRES32=0x0, @ANYBLOB="08000300ac14142e08000600080000002c00068008000300ac1e010108000300ffffffff0600010002000000080006000900000006000100020000003c0006800500020000000000080006000000000008000700", @ANYRES32=r2, @ANYBLOB="0500020008000000080003000a0101010800030000000000060005004e24000008000300020000000500050005000000050005000a0000003c000680050002000200000008000700", @ANYRES32=r2, @ANYBLOB="0500020040000000080006001200000005000200040000000600010002000000060005004e210000"], 0x128}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="00020c0000000c0084c01d38e1dfd00ca4a116ec58bd4d6f95a933fcf511f376a84afd0719ffee5acc48f735e8bb75cdafb0b3c67ca5b530af8d5cc6e04d9aa90b90afc4ab11510f051579936e97a102f57da195471f97f9ac5a4ce4c7a046157ebf1ff558eac8d0ad329f9b7037cfa87adb450000000000"], 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7fff) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="4001b900"], 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="998003000c200000300012800500ecff68703665727370616e0000001c00028014000700ff02000000000000000000000000000104001200140003006e696376663000"/76], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$sock(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x71a48493}}], 0x30}}], 0x1, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) 4.653175428s ago: executing program 1 (id=878): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000016c0)={[{@rodir}, {@fat=@nocase}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@numtail}, {@shortname_winnt}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@sys_immutable}, {@utf8no}, {@utf8}, {@fat=@gid}, {@uni_xlate}], [{@audit}]}, 0x3, 0x279, &(0x7f0000001080)="$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") pipe2$9p(0x0, 0x4800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001bc0)=ANY=[@ANYBLOB], 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.608957828s ago: executing program 0 (id=879): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4.59989196s ago: executing program 1 (id=880): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r7, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) r8 = dup(r6) fcntl$setsig(r0, 0xa, 0x32) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c2dc261700500"]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 4.573196507s ago: executing program 3 (id=881): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r7, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) r8 = dup(r6) fcntl$setsig(r0, 0xa, 0x32) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x52f, r9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c2dc261700500"]) r11 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r11, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3.887260364s ago: executing program 2 (id=882): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r7, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) r8 = dup(r6) fcntl$setsig(r0, 0xa, 0x32) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c2dc261700500"]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 3.706745608s ago: executing program 3 (id=883): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r4, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) fcntl$setsig(r0, 0xa, 0x32) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r6, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 3.195050012s ago: executing program 1 (id=884): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000008c0)=ANY=[], 0x0) fcntl$setsig(r0, 0xa, 0x13) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x3, 0xff) write$binfmt_misc(r1, &(0x7f0000000380)="e7b6d8ba336c7bc36384284d1931456414ad6c1864ffef6abab9b2399d", 0x1d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8a00bfa10000000000", @ANYRES16=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x54, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf25020000000800040000100000050005008000000008000300000000001c000680050002723700000008000700", @ANYRES32=r4, @ANYBLOB="060005004e22000008000200010000001400018008000300ac1414240600010002000000080004000800000008000400c0ffffff"], 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x24000054) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf250600000005000500810000000800030003000000080002000100000040000680060001000a00000008000700", @ANYRES32=r3, @ANYBLOB="08000600000000000800030000000000050002008100000014000400fe8800000000000400000000000000010500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x8010) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) fcntl$setlease(r0, 0x400, 0x2) 3.160623331s ago: executing program 3 (id=885): io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='9', 0x20000108}]) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000300)='./mysys\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.171092032s ago: executing program 2 (id=886): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) tgkill(0xffffffffffffffff, 0x0, 0x12) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f0000001480)=""/74, 0x4a}, {&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f00000015c0)=""/113, 0x71}, {&(0x7f0000001640)=""/144, 0x90}, {&(0x7f0000001700)=""/42, 0x2a}, {&(0x7f0000001740)=""/225, 0xe1}, {&(0x7f0000001840)=""/42, 0x2a}], 0xa, 0xf, 0x2) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2636fdacf55d61c2, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 2.015860849s ago: executing program 3 (id=887): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nogrpid}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nolazytime}, {@grpid}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffdf8, 0x3c, 0x2, [@struct={0x0, 0x155557db, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 2.007840321s ago: executing program 1 (id=888): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, 0x0, 0x15) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r6, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) r7 = dup(r5) fcntl$setsig(r0, 0xa, 0x32) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r9, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c2dc261700500"]) r10 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r10, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.625396234s ago: executing program 0 (id=889): ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f00000102c0), 0x2, 0x0) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) signalfd(r4, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) 1.23107971s ago: executing program 2 (id=890): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000016c0)={[{@rodir}, {@fat=@nocase}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@numtail}, {@shortname_winnt}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@sys_immutable}, {@utf8no}, {@utf8}, {@fat=@gid}, {@uni_xlate}], [{@audit}]}, 0x3, 0x279, &(0x7f0000001080)="$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") pipe2$9p(0x0, 0x4800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001bc0)=ANY=[@ANYBLOB], 0x15) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.225331432s ago: executing program 2 (id=891): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.131648674s ago: executing program 3 (id=892): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6) readlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000d80)=""/181, 0xb5) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x0) mknodat(r1, &(0x7f0000000080)='./bus\x00', 0x8000, 0x5) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = eventfd(0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)='\x00\x00\x00a\x00\x00\x00\x00', 0x8, 0x34}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffff, r2, 0x0, 0x300, 0x0, 0x0, 0x1, r2}]) syz_clone(0x2000400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) r6 = memfd_create(&(0x7f0000000300)='\x92n\xff\xb5\xe1\x1f/\xbc\x04\x00\x00\x00\x00', 0x3) fallocate(r6, 0x0, 0x3, 0xffff) copy_file_range(r6, &(0x7f0000000040)=0x369, r6, 0x0, 0x80, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) getdents(r5, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000e40)={{0xcc4, 0x7}, 0x100, './file1\x00'}) 1.130702145s ago: executing program 1 (id=893): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r7, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) r8 = dup(r6) fcntl$setsig(r0, 0xa, 0x32) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e", 0x52f, r9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c2dc261700500"]) r11 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r11, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 774.682961ms ago: executing program 2 (id=894): inotify_init() r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x700, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) 633.790045ms ago: executing program 6 (id=895): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x44) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r4, &(0x7f0000001fc0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1, 0x6, 0xb732) fcntl$setsig(r0, 0xa, 0x32) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r5) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r6, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 577.01424ms ago: executing program 6 (id=896): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async, rerun: 32) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x230b5, 0x40, 0xffffffff, 0x8f}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) (rerun: 32) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x80, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 320.774991ms ago: executing program 2 (id=897): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000400), 0x1000000}, 0x20) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x50203, 0x0) socket$nl_route(0x10, 0x3, 0x0) 320.416311ms ago: executing program 6 (id=898): exit(0x100000000000035) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x6, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @loopback}}}}}, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x227}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="5bac01342c38bbe5d5a9d67289ab", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x1201, 0x3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000340)={0xd5, 0x0, 0x222}) (async, rerun: 64) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xa0}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 269.153344ms ago: executing program 1 (id=899): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd01, 0x0, 0x0, 0x0}, 0xfec0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x5) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f00000002c0)=0xfffffeff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000008d88c748d2855065febc3106f2fc6fc01dbf25458a79d6f88a23f5ddbc7fe5a45fc5e9af672b846287d934b9176e3dd43a6504cd38962053"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x63, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 136.820896ms ago: executing program 0 (id=900): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 124.771669ms ago: executing program 0 (id=901): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000016c0)={[{@rodir}, {@fat=@nocase}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@numtail}, {@shortname_winnt}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@sys_immutable}, {@utf8no}, {@utf8}, {@fat=@gid}, {@uni_xlate}], [{@audit}]}, 0x3, 0x279, &(0x7f0000001080)="$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") pipe2$9p(0x0, 0x4800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 89.777747ms ago: executing program 0 (id=902): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 62.703064ms ago: executing program 0 (id=903): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) mount(0x0, &(0x7f0000000100)='./mysys\x00', 0x0, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) 62.567724ms ago: executing program 3 (id=904): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 0s ago: executing program 34 (id=904): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) kernel console output (not intermixed with test programs): :220): avc: denied { append } for pid=1482 comm="syz.2.284" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.060179][ T1483] ======================================================= [ 112.060179][ T1483] WARNING: The mand mount option has been deprecated and [ 112.060179][ T1483] and is ignored by this kernel. Remove the mand [ 112.060179][ T1483] option from the mount to silence this warning. [ 112.060179][ T1483] ======================================================= [ 112.098764][ T1483] overlayfs: upper fs is r/o, try multi-lower layers mount [ 112.106914][ T1483] EXT4-fs error (device loop2): ext4_lookup:1862: inode #12: comm syz.2.284: deleted inode referenced: 14 [ 112.116077][ T1495] loop1: detected capacity change from 0 to 16 [ 112.125313][ T1495] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.308890][ T1500] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 112.318166][ T1500] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 112.327215][ T1500] overlayfs: failed to get metacopy (-117) [ 112.542696][ T290] EXT4-fs (loop2): unmounting filesystem. [ 112.578003][ T1504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 112.619544][ T1502] loop3: detected capacity change from 0 to 4096 [ 112.636426][ T1502] EXT4-fs: Ignoring removed nobh option [ 112.646348][ T1502] EXT4-fs: Ignoring removed bh option [ 112.653125][ T1502] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.661958][ T1502] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.734574][ T1511] process 'syz.2.291' launched './file0' with NULL argv: empty string added [ 112.743810][ T28] audit: type=1400 audit(1790985706.925:221): avc: denied { execute } for pid=1510 comm="syz.2.291" name="file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.766137][ T28] audit: type=1400 audit(1790985706.925:222): avc: denied { execute_no_trans } for pid=1510 comm="syz.2.291" path="/67/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.834027][ T287] EXT4-fs (loop3): unmounting filesystem. [ 113.290639][ T28] audit: type=1400 audit(1790985707.465:223): avc: denied { bind } for pid=1529 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.528170][ T58] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 113.789647][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.799801][ T58] usb 4-1: not running at top speed; connect to a high speed hub [ 113.814724][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.825458][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 113.843111][ T1550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 113.856466][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 113.885282][ T58] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.934864][ T58] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 113.952773][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.977986][ T58] usb 4-1: Product: syz [ 113.982214][ T58] usb 4-1: Manufacturer: syz [ 113.986823][ T58] usb 4-1: SerialNumber: syz [ 114.016864][ T1530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.231308][ T1565] loop0: detected capacity change from 0 to 16 [ 114.239128][ T1565] erofs: (device loop0): mounted with root inode @ nid 36. [ 114.266180][ T58] usb 4-1: MIDIStreaming interface descriptor not found [ 114.505415][ T1569] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=86 [ 114.514729][ T1569] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=86 [ 114.523863][ T1569] overlayfs: failed to get metacopy (-117) [ 114.719316][ T58] usb 4-1: USB disconnect, device number 6 [ 114.891450][ T1552] loop1: detected capacity change from 0 to 131072 [ 114.908209][ T1552] F2FS-fs (loop1): invalid crc value [ 114.931991][ T1552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.939421][ T1381] udevd[1381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.996708][ T1552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.026153][ T28] audit: type=1400 audit(1790985709.195:224): avc: denied { create } for pid=1551 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 115.133723][ T1583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.311'. [ 117.039488][ T28] audit: type=1400 audit(1790985711.215:225): avc: denied { name_bind } for pid=1603 comm="syz.0.315" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 117.067559][ T1593] loop1: detected capacity change from 0 to 40427 [ 117.081334][ T1609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 117.103058][ T1593] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.118098][ T1593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.134823][ T1593] F2FS-fs (loop1): invalid crc value [ 117.151316][ T28] audit: type=1400 audit(1790985711.325:226): avc: denied { create } for pid=1613 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.179854][ T28] audit: type=1400 audit(1790985711.325:227): avc: denied { ioctl } for pid=1613 comm="syz.3.319" path="socket:[20909]" dev="sockfs" ino=20909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.221570][ T1593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.318233][ T1593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.325538][ T1593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.529284][ T1625] loop0: detected capacity change from 0 to 16 [ 117.540370][ T1625] erofs: (device loop0): mounted with root inode @ nid 36. [ 117.645868][ T1628] loop3: detected capacity change from 0 to 256 [ 117.652812][ T1628] FAT-fs (loop3): Unrecognized mount option "nfs=stule_rw" or missing value [ 117.868201][ T1629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=86 [ 117.877256][ T1629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=86 [ 117.886314][ T1629] overlayfs: failed to get metacopy (-117) [ 117.889545][ T1628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 117.911267][ T309] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.994301][ T28] audit: type=1400 audit(1790985712.145:228): avc: denied { connect } for pid=1627 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.030286][ T1632] FAULT_INJECTION: forcing a failure. [ 118.030286][ T1632] name failslab, interval 1, probability 0, space 0, times 1 [ 118.043023][ T1632] CPU: 0 PID: 1632 Comm: syz.2.323 Not tainted syzkaller #0 [ 118.050345][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.060421][ T1632] Call Trace: [ 118.063724][ T1632] [ 118.066683][ T1632] __dump_stack+0x21/0x24 [ 118.071053][ T1632] dump_stack_lvl+0x110/0x170 [ 118.075777][ T1632] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.080838][ T1632] ? 0xffffffffa00040c0 [ 118.085012][ T1632] ? is_bpf_text_address+0x177/0x190 [ 118.090344][ T1632] dump_stack+0x15/0x24 [ 118.094563][ T1632] should_fail_ex+0x3bf/0x510 [ 118.099273][ T1632] __should_failslab+0xac/0xf0 [ 118.104082][ T1632] should_failslab+0x9/0x20 [ 118.108624][ T1632] __kmem_cache_alloc_node+0x3d/0x2d0 [ 118.114035][ T1632] ? tcp_sendmsg_fastopen+0x1d3/0x600 [ 118.119448][ T1632] ? tcp_sendmsg_fastopen+0x1d3/0x600 [ 118.124857][ T1632] kmalloc_trace+0x29/0xb0 [ 118.129302][ T1632] tcp_sendmsg_fastopen+0x1d3/0x600 [ 118.134545][ T1632] ? __stack_depot_save+0x36/0x490 [ 118.139707][ T1632] tcp_sendmsg_locked+0x356d/0x39f0 [ 118.144946][ T1632] ? avc_has_perm+0x163/0x250 [ 118.149652][ T1632] ? _parse_integer+0x2a/0x40 [ 118.154373][ T1632] ? __kasan_check_write+0x14/0x20 [ 118.159514][ T1632] ? _raw_spin_lock_bh+0x94/0xf0 [ 118.164491][ T1632] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 118.169990][ T1632] ? __local_bh_enable_ip+0x58/0x80 [ 118.175229][ T1632] ? _raw_spin_unlock_bh+0x50/0x60 [ 118.180380][ T1632] ? lock_sock_nested+0x212/0x290 [ 118.185440][ T1632] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 118.191366][ T1632] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 118.196953][ T1632] tcp_sendmsg+0x2f/0x50 [ 118.201227][ T1632] inet6_sendmsg+0xb6/0xd0 [ 118.205695][ T1632] __sys_sendto+0x4ac/0x660 [ 118.210234][ T1632] ? __cfi___sys_sendto+0x10/0x10 [ 118.215299][ T1632] ? ksys_write+0x1fa/0x260 [ 118.219827][ T1632] ? __cfi_ksys_write+0x10/0x10 [ 118.224711][ T1632] __x64_sys_sendto+0xe5/0x100 [ 118.229510][ T1632] x64_sys_call+0x83/0x9a0 [ 118.233959][ T1632] do_syscall_64+0x4c/0xa0 [ 118.238415][ T1632] ? clear_bhb_loop+0x30/0x80 [ 118.243120][ T1632] ? clear_bhb_loop+0x30/0x80 [ 118.247823][ T1632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.249804][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.253744][ T1632] RIP: 0033:0x7f62a1f9e159 [ 118.269027][ T1632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.275290][ T309] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.288664][ T1632] RSP: 002b:00007f62a2e82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.288690][ T1632] RAX: ffffffffffffffda RBX: 00007f62a2225fa0 RCX: 00007f62a1f9e159 [ 118.288705][ T1632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 118.288717][ T1632] RBP: 00007f62a2e82090 R08: 0000200000b63fe4 R09: 000000000000001c [ 118.326627][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.330200][ T1632] R10: 000000002200c851 R11: 0000000000000246 R12: 0000000000000001 [ 118.330217][ T1632] R13: 00007f62a2226038 R14: 00007f62a2225fa0 R15: 00007fff5dfe6998 [ 118.330237][ T1632] [ 118.358998][ T309] usb 2-1: config 0 descriptor?? [ 118.787390][ T309] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 118.796181][ T28] audit: type=1400 audit(1790985712.865:229): avc: denied { bind } for pid=1641 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.823236][ T28] audit: type=1400 audit(1790985712.875:230): avc: denied { write } for pid=1641 comm="syz.3.326" path="socket:[22102]" dev="sockfs" ino=22102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.849571][ T309] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input4 [ 118.899060][ T28] audit: type=1400 audit(1790985713.075:231): avc: denied { mount } for pid=1641 comm="syz.3.326" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.930391][ T1621] loop4: detected capacity change from 0 to 131072 [ 118.945459][ T1621] F2FS-fs (loop4): invalid crc value [ 118.961693][ T28] audit: type=1400 audit(1790985713.135:232): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=670 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.962867][ T309] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 118.999563][ T28] audit: type=1400 audit(1790985713.135:233): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=670 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.023680][ T1621] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.059391][ T28] audit: type=1400 audit(1790985713.135:234): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=670 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.135069][ T1621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.325457][ T6] usb 2-1: USB disconnect, device number 5 [ 119.722722][ T1662] FAULT_INJECTION: forcing a failure. [ 119.722722][ T1662] name fail_futex, interval 1, probability 0, space 0, times 1 [ 119.735915][ T1662] CPU: 1 PID: 1662 Comm: syz.2.330 Not tainted syzkaller #0 [ 119.743247][ T1662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.753350][ T1662] Call Trace: [ 119.756672][ T1662] [ 119.759629][ T1662] __dump_stack+0x21/0x24 [ 119.764001][ T1662] dump_stack_lvl+0x110/0x170 [ 119.768709][ T1662] ? __cfi_dump_stack_lvl+0x8/0x8 [ 119.773753][ T1662] ? stack_trace_save+0xa6/0xf0 [ 119.778812][ T1662] dump_stack+0x15/0x24 [ 119.783004][ T1662] should_fail_ex+0x3bf/0x510 [ 119.787721][ T1662] should_fail+0xb/0x10 [ 119.791908][ T1662] get_futex_key+0x6a4/0xb10 [ 119.796539][ T1662] ? __kasan_slab_alloc+0x72/0x80 [ 119.801585][ T1662] ? slab_post_alloc_hook+0x4f/0x2d0 [ 119.806907][ T1662] ? __cfi_get_futex_key+0x10/0x10 [ 119.812048][ T1662] futex_wake+0x150/0x8e0 [ 119.816394][ T1662] ? __cfi_futex_wake+0x10/0x10 [ 119.821264][ T1662] ? perf_lock_task_context+0x3fd/0x4c0 [ 119.826846][ T1662] ? perf_event_exit_event+0x530/0x530 [ 119.832414][ T1662] ? mutex_unlock+0x8f/0x230 [ 119.837026][ T1662] do_futex+0x2bf/0x430 [ 119.841214][ T1662] ? __cfi_do_futex+0x10/0x10 [ 119.845907][ T1662] ? __kasan_check_write+0x14/0x20 [ 119.851031][ T1662] mm_release+0x195/0x2d0 [ 119.855389][ T1662] ? exit_mm_release+0x30/0x30 [ 119.860179][ T1662] ? futex_exit_release+0x119/0x1e0 [ 119.865403][ T1662] exit_mm_release+0x25/0x30 [ 119.870015][ T1662] do_exit+0x8de/0x29f0 [ 119.874194][ T1662] ? __schedule+0xcbb/0x1700 [ 119.878822][ T1662] ? __cfi_do_exit+0x10/0x10 [ 119.883437][ T1662] ? plist_check_list+0x255/0x270 [ 119.888502][ T1662] ? _raw_spin_lock+0x94/0xf0 [ 119.893217][ T1662] ? __kasan_check_write+0x14/0x20 [ 119.898340][ T1662] ? _raw_spin_lock_irq+0x95/0xf0 [ 119.903385][ T1662] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 119.908965][ T1662] do_group_exit+0x21b/0x2e0 [ 119.914034][ T1662] ? __kasan_check_write+0x14/0x20 [ 119.919172][ T1662] ? recalc_sigpending+0x168/0x1c0 [ 119.924318][ T1662] get_signal+0x167c/0x1700 [ 119.928850][ T1662] ? __cfi_get_signal+0x10/0x10 [ 119.933748][ T1662] arch_do_signal_or_restart+0xd1/0x11c0 [ 119.939422][ T1662] ? do_futex+0x2e2/0x430 [ 119.943784][ T1662] ? __cfi_do_futex+0x10/0x10 [ 119.948487][ T1662] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 119.954687][ T1662] ? __se_sys_futex+0x136/0x310 [ 119.959564][ T1662] ? __kasan_check_write+0x14/0x20 [ 119.964694][ T1662] exit_to_user_mode_loop+0x7a/0xb0 [ 119.969914][ T1662] exit_to_user_mode_prepare+0x87/0xd0 [ 119.975400][ T1662] syscall_exit_to_user_mode+0x1a/0x30 [ 119.980879][ T1662] do_syscall_64+0x58/0xa0 [ 119.985409][ T1662] ? clear_bhb_loop+0x30/0x80 [ 119.990097][ T1662] ? clear_bhb_loop+0x30/0x80 [ 119.994789][ T1662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.000695][ T1662] RIP: 0033:0x7f62a1f9e159 [ 120.005220][ T1662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.024921][ T1662] RSP: 002b:00007f62a2e820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.033360][ T1662] RAX: fffffffffffffe00 RBX: 00007f62a2225fa8 RCX: 00007f62a1f9e159 [ 120.041345][ T1662] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f62a2225fa8 [ 120.049334][ T1662] RBP: 00007f62a2225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 120.057375][ T1662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.067716][ T1662] R13: 00007f62a2226038 R14: 00007fff5dfe68b0 R15: 00007fff5dfe6998 [ 120.075713][ T1662] [ 120.117711][ T1672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 120.137827][ T1670] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 120.179732][ T1677] tipc: Invalid UDP bearer configuration [ 120.179900][ T1677] tipc: Enabling of bearer rejected, failed to enable media [ 121.033575][ T1685] loop0: detected capacity change from 0 to 131072 [ 121.043444][ T1685] F2FS-fs (loop0): invalid crc value [ 121.051528][ T1685] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.518017][ T1685] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.522347][ T1721] loop3: detected capacity change from 0 to 512 [ 121.560583][ T1721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.346: inode #1: comm syz.3.346: iget: illegal inode # [ 121.574076][ T1721] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.346: error while reading EA inode 1 err=-117 [ 121.591896][ T1721] EXT4-fs (loop3): 1 orphan inode deleted [ 121.602854][ T1721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.663967][ T1751] loop1: detected capacity change from 0 to 16 [ 121.673135][ T1751] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.717315][ T287] EXT4-fs (loop3): unmounting filesystem. [ 121.786812][ T1755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 121.869568][ T1757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 121.878891][ T1757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=86 [ 121.888025][ T1757] overlayfs: failed to get metacopy (-117) [ 122.323131][ T1764] loop0: detected capacity change from 0 to 40427 [ 122.348945][ T1764] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 122.355869][ T1764] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.385200][ T1764] F2FS-fs (loop0): invalid crc value [ 122.455461][ T1764] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.473204][ T362] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 122.750771][ T1764] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.757902][ T1764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.770587][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 122.770603][ T28] audit: type=1400 audit(1790985716.945:240): avc: denied { read } for pid=1763 comm="syz.0.355" path="/66/bus/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.817538][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 122.909343][ T362] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.917770][ T362] usb 3-1: not running at top speed; connect to a high speed hub [ 122.928099][ T1764] syz.0.355: attempt to access beyond end of device [ 122.928099][ T1764] loop0: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 122.943930][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.963389][ T362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 122.974730][ T362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 122.984571][ T362] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.007150][ T362] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 123.020901][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.030157][ T362] usb 3-1: Product: syz [ 123.034420][ T362] usb 3-1: Manufacturer: syz [ 123.039110][ T362] usb 3-1: SerialNumber: syz [ 123.059959][ T1759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.154987][ T28] audit: type=1326 audit(1790985717.325:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.198102][ T28] audit: type=1326 audit(1790985717.355:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.272305][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.284388][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.292592][ T28] audit: type=1326 audit(1790985717.355:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.321604][ T28] audit: type=1326 audit(1790985717.355:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.349402][ T28] audit: type=1326 audit(1790985717.355:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.349547][ T362] usb 3-1: MIDIStreaming interface descriptor not found [ 123.401103][ T28] audit: type=1326 audit(1790985717.355:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.415834][ T362] usb 3-1: USB disconnect, device number 4 [ 123.468191][ T28] audit: type=1326 audit(1790985717.355:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.568557][ T28] audit: type=1326 audit(1790985717.355:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.594553][ T28] audit: type=1326 audit(1790985717.355:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1787 comm="syz.0.362" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90359e159 code=0x7ffc0000 [ 123.870354][ T1782] loop4: detected capacity change from 0 to 131072 [ 123.882093][ T1782] F2FS-fs (loop4): invalid crc value [ 124.009690][ T1782] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.178193][ T1782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.216584][ T1817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 124.403144][ T1822] loop0: detected capacity change from 0 to 16 [ 124.412777][ T1822] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.611888][ T1826] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=86 [ 124.621282][ T1826] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=86 [ 124.630364][ T1826] overlayfs: failed to get metacopy (-117) [ 124.773894][ T1825] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.927140][ T1831] tipc: Enabling of bearer rejected, failed to enable media [ 124.976127][ T1834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.367'. [ 124.985457][ T1834] netlink: 4960 bytes leftover after parsing attributes in process `syz.4.367'. [ 124.995939][ T1834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 125.037991][ T362] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 125.272738][ T362] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.286640][ T362] usb 3-1: not running at top speed; connect to a high speed hub [ 125.302778][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.321835][ T362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 125.687401][ T362] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 125.697304][ T362] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.719257][ T362] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 125.737991][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.746084][ T362] usb 3-1: Product: syz [ 125.757986][ T362] usb 3-1: Manufacturer: syz [ 125.762707][ T362] usb 3-1: SerialNumber: syz [ 125.778661][ T1813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.903578][ T1850] xt_hashlimit: size too large, truncated to 1048576 [ 125.991774][ T362] usb 3-1: MIDIStreaming interface descriptor not found [ 126.010863][ T362] usb 3-1: USB disconnect, device number 5 [ 126.320622][ T1863] loop0: detected capacity change from 0 to 1024 [ 126.327455][ T1863] EXT4-fs: Ignoring removed oldalloc option [ 126.333435][ T1863] EXT4-fs: Ignoring removed oldalloc option [ 126.339780][ T1863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.394656][ T1863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.013500][ T289] EXT4-fs (loop0): unmounting filesystem. [ 127.015272][ T1858] loop3: detected capacity change from 0 to 131072 [ 127.037262][ T1858] F2FS-fs (loop3): invalid crc value [ 127.047924][ T1881] loop0: detected capacity change from 0 to 2048 [ 127.056841][ T1858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.078703][ T1881] loop0: p1 < > p3 [ 127.088602][ T1881] loop0: p3 size 134217728 extends beyond EOD, truncated [ 127.127191][ T1858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.637984][ T496] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.849094][ T496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.868016][ T496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.948986][ T496] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 127.962392][ T496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.986425][ T496] usb 5-1: config 0 descriptor?? [ 128.409233][ T496] hid-led 0003:1D34:000A.0006: item fetching failed at offset 2/3 [ 128.418070][ T496] hid-led: probe of 0003:1D34:000A.0006 failed with error -22 [ 128.616579][ T496] usb 5-1: USB disconnect, device number 5 [ 128.674179][ T1918] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 128.733469][ T1922] netlink: 528 bytes leftover after parsing attributes in process `syz.2.394'. [ 128.745205][ T1922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1922 comm=syz.2.394 [ 128.758695][ T1922] netlink: 'syz.2.394': attribute type 4 has an invalid length. [ 129.687251][ T1927] loop0: detected capacity change from 0 to 131072 [ 129.703563][ T1927] F2FS-fs (loop0): invalid crc value [ 129.740706][ T1927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.785687][ T1927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.959286][ T1971] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 132.208066][ T309] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.387728][ T2005] loop4: detected capacity change from 0 to 8192 [ 132.404197][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 132.404214][ T28] audit: type=1400 audit(1790985726.575:272): avc: denied { mount } for pid=2004 comm="syz.4.416" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 132.421983][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.451846][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.461866][ T309] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 132.505883][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.521233][ T309] usb 1-1: config 0 descriptor?? [ 132.834525][ T28] audit: type=1400 audit(1790985726.995:273): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 133.592746][ T309] hid-led 0003:1D34:000A.0007: unknown main item tag 0x3 [ 133.613500][ T309] hid-led: probe of 0003:1D34:000A.0007 failed with error -71 [ 133.625826][ T309] usb 1-1: USB disconnect, device number 8 [ 134.375305][ T2051] 9pnet_fd: Insufficient options for proto=fd [ 135.518028][ T382] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 135.709356][ T382] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.720577][ T382] usb 2-1: not running at top speed; connect to a high speed hub [ 135.743775][ T382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.773095][ T382] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 135.804568][ T382] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 135.832895][ T382] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.873768][ T382] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 135.885254][ T382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.894446][ T382] usb 2-1: Product: syz [ 135.899199][ T382] usb 2-1: Manufacturer: syz [ 135.903917][ T382] usb 2-1: SerialNumber: syz [ 135.913381][ T2083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.040187][ T2099] 9pnet_fd: Insufficient options for proto=fd [ 136.132958][ T2083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.173852][ T2083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.257242][ T382] usb 2-1: MIDIStreaming interface descriptor not found [ 136.334535][ T382] usb 2-1: USB disconnect, device number 6 [ 136.648058][ T361] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.889084][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.907998][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.917827][ T361] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 136.938065][ T361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.962859][ T361] usb 5-1: config 0 descriptor?? [ 137.034217][ T2115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 137.372984][ T361] hid-led 0003:1D34:000A.0008: unknown main item tag 0x3 [ 137.624804][ T361] hid-led: probe of 0003:1D34:000A.0008 failed with error -71 [ 137.771974][ T361] usb 5-1: USB disconnect, device number 6 [ 138.592962][ T2150] 9pnet_fd: Insufficient options for proto=fd [ 138.690843][ T28] audit: type=1400 audit(1790985732.865:274): avc: denied { read } for pid=2152 comm="syz.3.452" name="usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.718023][ T28] audit: type=1400 audit(1790985732.895:275): avc: denied { open } for pid=2152 comm="syz.3.452" path="/dev/usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.744762][ T2154] loop3: detected capacity change from 0 to 1024 [ 138.774372][ T2154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.785979][ T28] audit: type=1400 audit(1790985732.955:276): avc: denied { setattr } for pid=2152 comm="syz.3.452" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.808347][ T28] audit: type=1400 audit(1790985732.975:277): avc: denied { rename } for pid=2152 comm="syz.3.452" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.830617][ T28] audit: type=1400 audit(1790985732.975:278): avc: denied { unlink } for pid=2152 comm="syz.3.452" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.993800][ T2164] overlayfs: './file0' not a directory [ 139.354161][ T2172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 139.525376][ T287] EXT4-fs (loop3): unmounting filesystem. [ 139.638525][ T2185] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.561504][ T2204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.467'. [ 140.807313][ T2218] 9pnet_fd: Insufficient options for proto=fd [ 141.678664][ T2182] loop2: detected capacity change from 0 to 131072 [ 141.693834][ T2182] F2FS-fs (loop2): invalid crc value [ 141.732336][ T2182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.798027][ T2182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.831637][ T2229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.839245][ T2229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.865209][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 141.875682][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.887274][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 141.915047][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.966067][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.984448][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.003325][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.018381][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.200604][ T2266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 144.600812][ T2276] 9pnet_fd: Insufficient options for proto=fd [ 144.753702][ T2285] 8021q: VLANs not supported on ip_vti0 [ 144.909989][ T670] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.918418][ T670] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.370335][ T2278] loop3: detected capacity change from 0 to 131072 [ 145.378052][ T2199] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.386774][ T2278] F2FS-fs (loop3): invalid crc value [ 145.393897][ T2278] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.433857][ T2278] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.561058][ T2199] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.572257][ T2199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 145.583645][ T2199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.596999][ T2199] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 145.606338][ T2199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.670814][ T2199] usb 3-1: config 0 descriptor?? [ 146.291278][ T2199] usbhid 3-1:0.0: can't add hid device: -71 [ 146.299729][ T2199] usbhid: probe of 3-1:0.0 failed with error -71 [ 146.310075][ T2199] usb 3-1: USB disconnect, device number 6 [ 146.798002][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.048737][ T2333] 9pnet_fd: Insufficient options for proto=fd [ 148.560196][ T2349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 149.218457][ T28] audit: type=1400 audit(1790985743.395:279): avc: denied { setopt } for pid=2354 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.287165][ T28] audit: type=1400 audit(1790985743.455:280): avc: denied { ioctl } for pid=2357 comm="syz.0.507" path="socket:[24832]" dev="sockfs" ino=24832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.332485][ T28] audit: type=1400 audit(1790985743.495:281): avc: denied { create } for pid=2359 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.352261][ T28] audit: type=1400 audit(1790985743.495:282): avc: denied { bind } for pid=2359 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.391136][ T28] audit: type=1400 audit(1790985743.495:283): avc: denied { listen } for pid=2359 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.399893][ T2363] incfs: Options parsing error. -22 [ 149.416213][ T28] audit: type=1400 audit(1790985743.495:284): avc: denied { accept } for pid=2359 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.436133][ T28] audit: type=1400 audit(1790985743.565:285): avc: denied { connect } for pid=2359 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.446440][ T2363] incfs: mount failed -22 [ 149.465591][ T2365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.510'. [ 149.480410][ T2343] loop1: detected capacity change from 0 to 131072 [ 149.592686][ T2343] F2FS-fs (loop1): invalid crc value [ 149.698265][ T28] audit: type=1400 audit(1790985743.855:286): avc: denied { mounton } for pid=2369 comm="syz.4.511" path="/100/file0" dev="tmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 149.738827][ T2343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.849608][ T28] audit: type=1400 audit(1790985744.025:287): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 149.878369][ T2343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.378098][ T58] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 151.643592][ T2412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.655754][ T2412] loop2: detected capacity change from 0 to 512 [ 151.665907][ T2412] EXT4-fs: dax option not supported [ 151.680087][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.711997][ T58] usb 5-1: not running at top speed; connect to a high speed hub [ 151.796084][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.936837][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 152.013438][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 152.058084][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.094731][ T58] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 152.112144][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.132662][ T58] usb 5-1: Product: syz [ 152.136967][ T58] usb 5-1: Manufacturer: syz [ 152.144625][ T58] usb 5-1: SerialNumber: syz [ 152.154056][ T2398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.431197][ T2398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.442516][ T2430] 9pnet_fd: Insufficient options for proto=fd [ 152.602550][ T1073] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.612091][ T2398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.626504][ T58] usb 5-1: MIDIStreaming interface descriptor not found [ 152.627726][ T2432] usb usb8: usbfs: process 2432 (syz.1.526) did not claim interface 0 before use [ 152.649205][ T58] usb 5-1: USB disconnect, device number 7 [ 153.019222][ T1073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.030386][ T1073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.040874][ T1073] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 153.050224][ T1073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.062734][ T1073] usb 1-1: config 0 descriptor?? [ 153.639919][ T2451] overlayfs: failed to resolve './file1': -2 [ 153.752804][ T1073] hid-led 0003:1D34:000A.0009: item fetching failed at offset 0/3 [ 153.760968][ T1073] hid-led: probe of 0003:1D34:000A.0009 failed with error -22 [ 153.794011][ T1073] usb 1-1: USB disconnect, device number 9 [ 154.583526][ T2472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.600407][ T2472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.848029][ T40] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 155.039185][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.050405][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.060569][ T40] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 155.069825][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.088647][ T40] usb 5-1: config 0 descriptor?? [ 155.390615][ T2482] 9pnet_fd: Insufficient options for proto=fd [ 155.569342][ T28] audit: type=1400 audit(1790985749.745:288): avc: denied { create } for pid=2471 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.588755][ T28] audit: type=1400 audit(1790985749.745:289): avc: denied { create } for pid=2471 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.589548][ T2472] loop4: detected capacity change from 0 to 256 [ 155.615294][ T2472] exfat: Deprecated parameter 'namecase' [ 155.624384][ T2472] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 155.640944][ T40] hid-generic 0003:0C70:F0B6.000A: unknown main item tag 0x0 [ 155.648594][ T40] hid-generic 0003:0C70:F0B6.000A: item fetching failed at offset 4/7 [ 155.657052][ T40] hid-generic: probe of 0003:0C70:F0B6.000A failed with error -22 [ 155.658254][ T307] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 155.838666][ T2489] 9pnet_fd: Insufficient options for proto=fd [ 155.882561][ T40] usb 5-1: USB disconnect, device number 8 [ 156.119604][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.127780][ T307] usb 1-1: not running at top speed; connect to a high speed hub [ 156.136670][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.147047][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 156.158170][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 156.167875][ T307] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.182678][ T307] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 156.192028][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.200268][ T307] usb 1-1: Product: syz [ 156.204521][ T307] usb 1-1: Manufacturer: syz [ 156.209338][ T307] usb 1-1: SerialNumber: syz [ 156.220702][ T2480] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 156.429745][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.438807][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.453410][ T307] usb 1-1: MIDIStreaming interface descriptor not found [ 156.830147][ T307] usb 1-1: USB disconnect, device number 10 [ 157.049001][ T1418] udevd[1418]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.147975][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.199168][ T2513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 157.339785][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.356238][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.376288][ T24] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 157.427989][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.443476][ T24] usb 2-1: config 0 descriptor?? [ 157.856926][ T24] hid-led 0003:1D34:000A.000B: item fetching failed at offset 0/3 [ 157.870449][ T24] hid-led: probe of 0003:1D34:000A.000B failed with error -22 [ 158.057743][ T40] usb 2-1: USB disconnect, device number 7 [ 158.313958][ T2538] 9pnet_fd: Insufficient options for proto=fd [ 158.577064][ T28] audit: type=1326 audit(1790985752.745:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 158.602137][ T28] audit: type=1326 audit(1790985752.745:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 158.726067][ T2548] 9pnet_fd: Insufficient options for proto=fd [ 158.912920][ T28] audit: type=1326 audit(1790985752.755:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 158.973282][ T28] audit: type=1326 audit(1790985752.755:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 159.026642][ T2556] loop3: detected capacity change from 0 to 256 [ 159.035052][ T28] audit: type=1326 audit(1790985752.775:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 159.068901][ T2556] exfat: Deprecated parameter 'utf8' [ 159.088990][ T28] audit: type=1326 audit(1790985752.775:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 159.117293][ T2556] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 159.144733][ T28] audit: type=1326 audit(1790985752.775:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 159.169845][ T2556] FAULT_INJECTION: forcing a failure. [ 159.169845][ T2556] name failslab, interval 1, probability 0, space 0, times 0 [ 159.192923][ T2556] CPU: 1 PID: 2556 Comm: syz.3.560 Not tainted syzkaller #0 [ 159.200277][ T2556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.200612][ T28] audit: type=1326 audit(1790985752.775:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.556" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f56f2f9e159 code=0x7ffc0000 [ 159.210361][ T2556] Call Trace: [ 159.210368][ T2556] [ 159.210376][ T2556] __dump_stack+0x21/0x24 [ 159.245984][ T2556] dump_stack_lvl+0x110/0x170 [ 159.250704][ T2556] ? __cfi_dump_stack_lvl+0x8/0x8 [ 159.255766][ T2556] ? __kasan_check_write+0x14/0x20 [ 159.260919][ T2556] dump_stack+0x15/0x24 [ 159.265110][ T2556] should_fail_ex+0x3bf/0x510 [ 159.269822][ T2556] ? getname_flags+0xba/0x510 [ 159.274531][ T2556] __should_failslab+0xac/0xf0 [ 159.279333][ T2556] should_failslab+0x9/0x20 [ 159.283874][ T2556] kmem_cache_alloc+0x3b/0x320 [ 159.288712][ T2556] getname_flags+0xba/0x510 [ 159.293294][ T2556] __x64_sys_mkdirat+0x7c/0xa0 [ 159.298103][ T2556] x64_sys_call+0x73d/0x9a0 [ 159.302644][ T2556] do_syscall_64+0x4c/0xa0 [ 159.307109][ T2556] ? clear_bhb_loop+0x30/0x80 [ 159.311826][ T2556] ? clear_bhb_loop+0x30/0x80 [ 159.316570][ T2556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.322501][ T2556] RIP: 0033:0x7f098159cfc7 [ 159.326949][ T2556] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.346587][ T2556] RSP: 002b:00007f09823e0e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 159.355051][ T2556] RAX: ffffffffffffffda RBX: 00007f09823e0ee0 RCX: 00007f098159cfc7 [ 159.363075][ T2556] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: 00000000ffffff9c [ 159.371104][ T2556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.379107][ T2556] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000002c0 [ 159.387142][ T2556] R13: 00007f09823e0ea0 R14: 0000000000000000 R15: 0000000000000000 [ 159.395275][ T2556] [ 159.401864][ T382] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 159.432797][ T2561] loop0: detected capacity change from 0 to 256 [ 159.452968][ T2561] exfat: Bad value for 'uid' [ 159.589341][ T382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.598690][ T382] usb 5-1: not running at top speed; connect to a high speed hub [ 159.628748][ T382] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.647977][ T382] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 159.678156][ T382] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 159.697980][ T382] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.719465][ T382] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 159.736433][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.748003][ T382] usb 5-1: Product: syz [ 159.752233][ T382] usb 5-1: Manufacturer: syz [ 159.767054][ T382] usb 5-1: SerialNumber: syz [ 159.781963][ T2551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.999431][ T2551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.010651][ T2551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.023945][ T382] usb 5-1: MIDIStreaming interface descriptor not found [ 160.042406][ T382] usb 5-1: USB disconnect, device number 9 [ 160.060356][ T1418] udevd[1418]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.109541][ T2574] overlayfs: failed to resolve './file0': -2 [ 160.377977][ T40] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.569907][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.581553][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.621848][ T40] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 160.672567][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.777103][ T40] usb 1-1: config 0 descriptor?? [ 160.855774][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 160.855792][ T28] audit: type=1400 audit(1790985755.025:299): avc: denied { name_bind } for pid=2601 comm="syz.2.573" src=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 160.859222][ T2602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18669 sclass=netlink_route_socket pid=2602 comm=syz.2.573 [ 160.929607][ T2602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.941912][ T2602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.964292][ T2605] 9pnet_fd: Insufficient options for proto=fd [ 161.167983][ T382] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.302747][ T40] hid-led 0003:1D34:000A.000C: item fetching failed at offset 2/3 [ 161.311263][ T40] hid-led: probe of 0003:1D34:000A.000C failed with error -22 [ 161.337985][ T382] usb 3-1: device descriptor read/64, error -71 [ 161.507315][ T40] usb 1-1: USB disconnect, device number 11 [ 161.608007][ T382] usb 3-1: device descriptor read/64, error -71 [ 161.660003][ T28] audit: type=1400 audit(1790985755.835:300): avc: denied { read } for pid=2616 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.686236][ T2619] overlayfs: failed to resolve './file0': -2 [ 161.705469][ T2621] FAULT_INJECTION: forcing a failure. [ 161.705469][ T2621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.718708][ T2621] CPU: 1 PID: 2621 Comm: syz.4.578 Not tainted syzkaller #0 [ 161.726031][ T2621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.736111][ T2621] Call Trace: [ 161.739395][ T2621] [ 161.742336][ T2621] __dump_stack+0x21/0x24 [ 161.746682][ T2621] dump_stack_lvl+0x110/0x170 [ 161.751368][ T2621] ? __cfi_dump_stack_lvl+0x8/0x8 [ 161.756404][ T2621] dump_stack+0x15/0x24 [ 161.760568][ T2621] should_fail_ex+0x3bf/0x510 [ 161.765247][ T2621] should_fail+0xb/0x10 [ 161.769424][ T2621] should_fail_usercopy+0x1a/0x20 [ 161.774474][ T2621] _copy_from_user+0x1e/0xc0 [ 161.779079][ T2621] iovec_from_user+0x1aa/0x2e0 [ 161.783843][ T2621] __import_iovec+0x6d/0x460 [ 161.788433][ T2621] ? kstrtoull+0x137/0x1d0 [ 161.792855][ T2621] import_iovec+0x7c/0xb0 [ 161.797184][ T2621] ___sys_sendmsg+0x252/0x360 [ 161.801869][ T2621] ? __sys_sendmsg+0x290/0x290 [ 161.806658][ T2621] ? __kasan_check_write+0x14/0x20 [ 161.811768][ T2621] ? proc_fail_nth_write+0x180/0x200 [ 161.817085][ T2621] ? vfs_write+0xa51/0xd00 [ 161.821518][ T2621] ? __fdget+0x19c/0x220 [ 161.825783][ T2621] __x64_sys_sendmsg+0x20d/0x2e0 [ 161.830725][ T2621] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 161.836213][ T2621] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 161.842290][ T2621] x64_sys_call+0x171/0x9a0 [ 161.846795][ T2621] do_syscall_64+0x4c/0xa0 [ 161.851218][ T2621] ? clear_bhb_loop+0x30/0x80 [ 161.855926][ T2621] ? clear_bhb_loop+0x30/0x80 [ 161.860604][ T2621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.866513][ T2621] RIP: 0033:0x7f17bc19e159 [ 161.870946][ T2621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.890555][ T2621] RSP: 002b:00007f17bcf8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.898968][ T2621] RAX: ffffffffffffffda RBX: 00007f17bc425fa0 RCX: 00007f17bc19e159 [ 161.906958][ T2621] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000005 [ 161.914928][ T2621] RBP: 00007f17bcf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.922900][ T2621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.930873][ T2621] R13: 00007f17bc426038 R14: 00007f17bc425fa0 R15: 00007fff0a1113d8 [ 161.938849][ T2621] [ 162.098071][ T382] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.186696][ T2635] loop3: detected capacity change from 0 to 512 [ 162.204354][ T2635] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 162.218187][ T2635] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.248066][ T382] usb 3-1: device descriptor read/64, error -71 [ 162.297362][ T2635] EXT4-fs (loop3): 1 truncate cleaned up [ 162.303425][ T2635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.518030][ T382] usb 3-1: device descriptor read/64, error -71 [ 162.636450][ T287] EXT4-fs (loop3): unmounting filesystem. [ 162.646066][ T382] usb usb3-port1: attempt power cycle [ 163.848260][ T382] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.971090][ T382] usb 3-1: device descriptor read/8, error -71 [ 164.073754][ T2670] loop4: detected capacity change from 0 to 128 [ 164.198656][ T382] usb 3-1: device descriptor read/8, error -71 [ 164.208229][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.368648][ T28] audit: type=1400 audit(1790985758.545:301): avc: denied { mounton } for pid=2666 comm="syz.4.592" path="/118/file0/trace" dev="loop4" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 164.407999][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 164.414445][ T24] usb 4-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 164.425788][ T28] audit: type=1400 audit(1790985758.575:302): avc: denied { search } for pid=2666 comm="syz.4.592" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 164.453761][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.467421][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 164.477999][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.486256][ T24] usb 4-1: Product: syz [ 164.490855][ T24] usb 4-1: Manufacturer: syz [ 164.495528][ T24] usb 4-1: SerialNumber: syz [ 164.698019][ T382] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.781842][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.802848][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.813557][ T382] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 164.822861][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.890957][ T382] usb 3-1: config 0 descriptor?? [ 164.923667][ T24] usb 4-1: 0:1 : does not exist [ 164.961137][ T24] usb 4-1: unit 47 not found! [ 165.032257][ T24] usb 4-1: USB disconnect, device number 7 [ 165.053809][ T291] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 165.061711][ T291] FAT-fs (loop4): Filesystem has been set read-only [ 165.068788][ T291] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 165.259958][ T28] audit: type=1400 audit(1790985759.435:303): avc: denied { mounton } for pid=2695 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 165.327724][ T2695] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.334947][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.342742][ T2695] device bridge_slave_0 entered promiscuous mode [ 165.350235][ T2695] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.357424][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.365401][ T2695] device bridge_slave_1 entered promiscuous mode [ 165.397379][ T382] hid-led 0003:1D34:000A.000D: item fetching failed at offset 2/3 [ 165.418651][ T382] hid-led: probe of 0003:1D34:000A.000D failed with error -22 [ 165.444115][ T2695] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.451230][ T2695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.458546][ T2695] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.465605][ T2695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.539117][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.557480][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.566012][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.600954][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.613341][ T382] usb 3-1: USB disconnect, device number 10 [ 165.626172][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.633298][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.781278][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.807618][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.814864][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.931801][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.004658][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.026447][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.038591][ T724] device bridge_slave_1 left promiscuous mode [ 166.044833][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.053518][ T724] device bridge_slave_0 left promiscuous mode [ 166.060037][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.068376][ T724] device veth1_macvtap left promiscuous mode [ 166.074595][ T724] device veth0_vlan left promiscuous mode [ 166.192581][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.202670][ T2717] loop2: detected capacity change from 0 to 2048 [ 166.206135][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.221666][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.230705][ T2695] device veth0_vlan entered promiscuous mode [ 166.244390][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.252991][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.262334][ T2717] loop2: p1 < > [ 166.268880][ T2695] device veth1_macvtap entered promiscuous mode [ 166.277089][ T103] loop2: p1 < > [ 166.317454][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.327739][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.339248][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.356096][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.364681][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.385320][ T28] audit: type=1400 audit(1790985760.555:304): avc: denied { mounton } for pid=2695 comm="syz-executor" path="/root/syzkaller.BWDQMw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 166.409083][ T2724] capability: warning: `syz.3.608' uses deprecated v2 capabilities in a way that may be insecure [ 166.437705][ T2726] loop5: detected capacity change from 0 to 256 [ 166.456522][ T2726] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc0abf927, utbl_chksum : 0xe619d30d) [ 166.535166][ T2733] overlayfs: filesystem on './file0' not supported [ 166.560419][ T28] audit: type=1400 audit(1790985760.705:305): avc: denied { mounton } for pid=2725 comm="syz.5.600" path="/0/bus/file0" dev="loop5" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.461802][ T2754] xt_CT: No such helper "pptp" [ 167.748199][ T382] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.958012][ T382] usb 1-1: Using ep0 maxpacket: 32 [ 167.966831][ T382] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.008113][ T382] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.175754][ T382] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 168.324810][ T382] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 168.339673][ T2773] loop5: detected capacity change from 0 to 256 [ 168.356423][ T382] usb 1-1: Product: syz [ 168.360849][ T382] usb 1-1: Manufacturer: syz [ 168.367676][ T382] hub 1-1:4.0: USB hub found [ 168.698536][ T382] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 168.835412][ T2783] netlink: 104 bytes leftover after parsing attributes in process `syz.3.624'. [ 168.868309][ T2785] loop3: detected capacity change from 0 to 2048 [ 168.908362][ T1390] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.100030][ T2787] loop3: detected capacity change from 0 to 128 [ 169.429377][ T28] audit: type=1400 audit(1790985763.605:306): avc: denied { bind } for pid=2791 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.458298][ T2792] sch_tbf: burst 1103 is lower than device lo mtu (65550) ! [ 169.674931][ T2806] usb usb8: usbfs: process 2806 (syz.1.631) did not claim interface 0 before use [ 170.105234][ T307] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.499142][ T307] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.517072][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 170.538634][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.567288][ T307] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 170.585827][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.598108][ T24] usb 1-1: USB disconnect, device number 12 [ 170.606475][ T307] usb 2-1: config 0 descriptor?? [ 171.450058][ T307] usbhid 2-1:0.0: can't add hid device: -71 [ 171.762663][ T2832] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 171.829295][ T307] usbhid: probe of 2-1:0.0 failed with error -71 [ 171.836941][ T307] usb 2-1: USB disconnect, device number 8 [ 172.025605][ T2844] usb usb8: usbfs: process 2844 (syz.5.643) did not claim interface 0 before use [ 172.137989][ T382] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.186891][ T2851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'. [ 172.277849][ T2856] overlayfs: failed to resolve './file0': -2 [ 172.328062][ T382] usb 4-1: Using ep0 maxpacket: 16 [ 172.336777][ T382] usb 4-1: too many configurations: 55, using maximum allowed: 8 [ 172.426582][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.437341][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.467829][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.483377][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.514014][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.553286][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.601920][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.645919][ T382] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 172.769618][ T382] usb 4-1: string descriptor 0 read error: -71 [ 172.784347][ T382] usb 4-1: New USB device found, idVendor=2304, idProduct=a1a0, bcdDevice=7f.58 [ 172.852780][ T382] usb 4-1: New USB device strings: Mfr=220, Product=245, SerialNumber=158 [ 172.864720][ T382] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 172.879502][ T382] usb 4-1: no configuration chosen from 8 choices [ 172.889124][ T382] usb 4-1: USB disconnect, device number 8 [ 175.718063][ T2199] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 175.725841][ T40] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 175.911534][ T2199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.926254][ T2199] usb 2-1: not running at top speed; connect to a high speed hub [ 175.937419][ T2199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.952444][ T40] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.963958][ T2199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 175.976309][ T2199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 175.976433][ T40] usb 3-1: not running at top speed; connect to a high speed hub [ 175.997644][ T2199] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.015211][ T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.028601][ T40] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 176.047028][ T2199] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 176.060217][ T2199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.069120][ T361] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 176.077155][ T40] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 176.091930][ T2199] usb 2-1: Product: syz [ 176.096712][ T2199] usb 2-1: Manufacturer: syz [ 176.104655][ T40] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.119774][ T2199] usb 2-1: SerialNumber: syz [ 176.142306][ T2875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.144769][ T40] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 176.158962][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.167058][ T40] usb 3-1: Product: syz [ 176.171505][ T40] usb 3-1: Manufacturer: syz [ 176.176178][ T40] usb 3-1: SerialNumber: syz [ 176.181943][ T2877] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.279508][ T361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.287741][ T361] usb 1-1: not running at top speed; connect to a high speed hub [ 176.296384][ T361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.306616][ T361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 176.317493][ T361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 176.327214][ T361] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.341661][ T361] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 176.350835][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.358899][ T361] usb 1-1: Product: syz [ 176.363277][ T361] usb 1-1: Manufacturer: syz [ 176.367827][ T2875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.369915][ T361] usb 1-1: SerialNumber: syz [ 176.380026][ T2875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.387236][ T2893] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 176.396448][ T2877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.408255][ T2877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.410864][ T2199] usb 2-1: MIDIStreaming interface descriptor not found [ 176.429404][ T40] usb 3-1: MIDIStreaming interface descriptor not found [ 176.437608][ T2199] usb 2-1: USB disconnect, device number 9 [ 176.455646][ T40] usb 3-1: USB disconnect, device number 11 [ 176.478616][ T1381] udevd[1381]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.501584][ T1418] udevd[1418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 176.600558][ T2893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.618161][ T2893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.633066][ T361] usb 1-1: MIDIStreaming interface descriptor not found [ 176.651876][ T361] usb 1-1: USB disconnect, device number 13 [ 176.703104][ T2902] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 178.756612][ T2920] loop1: detected capacity change from 0 to 512 [ 178.791924][ T2920] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.387571][ T2926] 9pnet_fd: Insufficient options for proto=fd [ 180.430388][ T2920] EXT4-fs (loop1): 1 truncate cleaned up [ 180.439841][ T2920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.980605][ T2946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'. [ 180.989716][ T2946] netlink: 4960 bytes leftover after parsing attributes in process `syz.2.674'. [ 181.001031][ T2946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 181.080621][ T288] EXT4-fs (loop1): unmounting filesystem. [ 184.567177][ T361] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.588440][ T2981] 9pnet_fd: Insufficient options for proto=fd [ 184.838944][ T361] usb 4-1: Using ep0 maxpacket: 16 [ 184.850169][ T361] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 184.921813][ T361] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.984675][ T2986] mmap: syz.5.685 (2986) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.007996][ T361] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.020912][ T361] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 185.038241][ T361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.042647][ T2986] FAULT_INJECTION: forcing a failure. [ 185.042647][ T2986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.061947][ T361] usb 4-1: config 0 descriptor?? [ 185.113379][ T2986] CPU: 0 PID: 2986 Comm: syz.5.685 Not tainted syzkaller #0 [ 185.120747][ T2986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.130838][ T2986] Call Trace: [ 185.134139][ T2986] [ 185.137093][ T2986] __dump_stack+0x21/0x24 [ 185.141469][ T2986] dump_stack_lvl+0x110/0x170 [ 185.146217][ T2986] ? __cfi_dump_stack_lvl+0x8/0x8 [ 185.151305][ T2986] dump_stack+0x15/0x24 [ 185.155494][ T2986] should_fail_ex+0x3bf/0x510 [ 185.160233][ T2986] should_fail+0xb/0x10 [ 185.164419][ T2986] should_fail_usercopy+0x1a/0x20 [ 185.169465][ T2986] _copy_to_user+0x1e/0x90 [ 185.173921][ T2986] simple_read_from_buffer+0xe9/0x160 [ 185.179325][ T2986] proc_fail_nth_read+0x1a6/0x220 [ 185.184388][ T2986] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 185.189963][ T2986] ? security_file_permission+0x94/0xb0 [ 185.195550][ T2986] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 185.201127][ T2986] vfs_read+0x286/0x930 [ 185.205317][ T2986] ? __cfi_vfs_read+0x10/0x10 [ 185.210021][ T2986] ? __kasan_check_write+0x14/0x20 [ 185.215166][ T2986] ? mutex_lock+0x93/0x1b0 [ 185.219617][ T2986] ? __cfi_mutex_lock+0x10/0x10 [ 185.224498][ T2986] ? __fdget_pos+0x2cd/0x380 [ 185.229128][ T2986] ? ksys_read+0x70/0x260 [ 185.233489][ T2986] ksys_read+0x14a/0x260 [ 185.237770][ T2986] ? __cfi_ksys_read+0x10/0x10 [ 185.242566][ T2986] ? fpregs_restore_userregs+0x128/0x260 [ 185.248264][ T2986] __x64_sys_read+0x7b/0x90 [ 185.252807][ T2986] x64_sys_call+0x2f/0x9a0 [ 185.257251][ T2986] do_syscall_64+0x4c/0xa0 [ 185.261707][ T2986] ? clear_bhb_loop+0x30/0x80 [ 185.266411][ T2986] ? clear_bhb_loop+0x30/0x80 [ 185.271123][ T2986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.277054][ T2986] RIP: 0033:0x7f285775e98e [ 185.281499][ T2986] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.301132][ T2986] RSP: 002b:00007f28585aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.309578][ T2986] RAX: ffffffffffffffda RBX: 00007f28585af6c0 RCX: 00007f285775e98e [ 185.317578][ T2986] RDX: 000000000000000f RSI: 00007f28585af0a0 RDI: 0000000000000003 [ 185.325586][ T2986] RBP: 00007f28585af090 R08: 0000000000000000 R09: 0000000000000000 [ 185.333618][ T2986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.341619][ T2986] R13: 00007f2857a26038 R14: 00007f2857a25fa0 R15: 00007ffe6f569628 [ 185.349631][ T2986] [ 185.809254][ T2994] loop1: detected capacity change from 0 to 512 [ 185.832821][ T2994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.846303][ T2996] loop5: detected capacity change from 0 to 512 [ 185.863755][ T2994] EXT4-fs (loop1): 1 truncate cleaned up [ 185.872638][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 185.887840][ T2994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 185.898259][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 185.904900][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 185.917763][ T2996] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 185.926249][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 185.948969][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 185.979358][ T361] zeroplus 0003:0C12:0030.000E: item fetching failed at offset 22/24 [ 185.985669][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 185.999058][ T361] zeroplus 0003:0C12:0030.000E: parse failed [ 186.006004][ T361] zeroplus: probe of 0003:0C12:0030.000E failed with error -22 [ 186.014947][ T2996] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 186.023380][ T2996] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.037758][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.053858][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.060463][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.074462][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.114639][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.142142][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.158680][ T3006] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.175135][ T3006] EXT4-fs (loop5): Remounting filesystem read-only [ 186.181901][ T3006] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.195530][ T2199] usb 4-1: USB disconnect, device number 9 [ 186.208718][ T288] EXT4-fs (loop1): unmounting filesystem. [ 186.210145][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.235747][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.243638][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.299004][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.326574][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.335642][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.366234][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.382107][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.390183][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.422490][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.438887][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.445633][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.478044][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.493611][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.501956][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.532080][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.547736][ T2996] EXT4-fs (loop5): Remounting filesystem read-only [ 186.556184][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.577656][ T2996] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 8: comm syz.5.688: lblock 0 mapped to illegal pblock 8 (length 1) [ 186.596965][ T2996] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.688: error -117 reading directory block [ 186.623290][ T28] audit: type=1400 audit(1790985780.795:307): avc: denied { setopt } for pid=2995 comm="syz.5.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.643560][ T28] audit: type=1400 audit(1790985780.815:308): avc: denied { write } for pid=2995 comm="syz.5.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.439119][ T3033] 9pnet_fd: Insufficient options for proto=fd [ 190.403381][ T3049] loop2: detected capacity change from 0 to 512 [ 190.416435][ T3049] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.432123][ T3047] loop3: detected capacity change from 0 to 4096 [ 190.465642][ T3049] EXT4-fs (loop2): 1 truncate cleaned up [ 190.471665][ T3049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.492920][ T3047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.532046][ T3047] EXT4-fs (loop3): Test dummy encryption mode enabled [ 190.550201][ T3062] usb usb8: usbfs: process 3062 (syz.5.704) did not claim interface 0 before use [ 190.560606][ T3047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.606016][ T290] EXT4-fs (loop2): unmounting filesystem. [ 190.765222][ T3047] EXT4-fs (loop3): unmounting filesystem. [ 191.120292][ T3076] loop3: detected capacity change from 0 to 256 [ 191.147609][ T28] audit: type=1400 audit(1790985785.315:309): avc: denied { write } for pid=3075 comm="syz.3.708" name="packet" dev="proc" ino=4026532439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 191.430424][ T3085] loop0: detected capacity change from 0 to 512 [ 191.439158][ T3085] EXT4-fs: Ignoring removed nobh option [ 191.580946][ T3085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.619040][ T3085] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.653152][ T3085] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.712: corrupted inode contents [ 191.685367][ T3085] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz.0.712: mark_inode_dirty error [ 191.717063][ T3085] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.712: corrupted inode contents [ 191.965361][ T3085] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.712: corrupted inode contents [ 192.187742][ T3099] loop2: detected capacity change from 0 to 1024 [ 192.194264][ T3085] EXT4-fs error (device loop0): ext4_setattr:5540: inode #2: comm syz.0.712: mark_inode_dirty error [ 192.214492][ T3099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.219343][ T3097] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.712: corrupted inode contents [ 192.246784][ T3097] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz.0.712: mark_inode_dirty error [ 192.258618][ T3097] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.712: corrupted inode contents [ 192.281094][ T3112] loop3: detected capacity change from 0 to 256 [ 192.304742][ T3099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.318520][ T3097] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.712: mark_inode_dirty error [ 192.339345][ T3097] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.712: corrupted inode contents [ 192.353977][ T28] audit: type=1400 audit(1790985786.525:310): avc: denied { map } for pid=3098 comm="syz.2.714" path="/153/file1/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.404583][ T290] EXT4-fs (loop2): unmounting filesystem. [ 192.569210][ T289] EXT4-fs (loop0): unmounting filesystem. [ 192.576501][ T3127] loop2: detected capacity change from 0 to 512 [ 192.610382][ T3127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 192.618548][ T3127] System zones: 1-12 [ 192.623246][ T3127] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.720: missing EA_INODE flag [ 192.644358][ T3131] loop5: detected capacity change from 0 to 512 [ 192.661266][ T3127] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.720: error while reading EA inode 12 err=-117 [ 192.693118][ T3127] EXT4-fs (loop2): 1 orphan inode deleted [ 192.704767][ T3127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.726657][ T3127] Driver unsupported XDP return value 0 on prog (id 166) dev N/A, expect packet loss! [ 192.881696][ T3145] : renamed from bond_slave_0 [ 193.217987][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.407979][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 193.425343][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.435921][ T24] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.448902][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 193.464483][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.473655][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.474198][ T3151] loop3: detected capacity change from 0 to 256 [ 193.482882][ T24] usb 3-1: Product: syz [ 193.492487][ T24] usb 3-1: Manufacturer: syz [ 193.504085][ T24] usb 3-1: SerialNumber: syz [ 193.506835][ T28] audit: type=1400 audit(1790985788.678:311): avc: denied { write } for pid=3150 comm="syz.3.729" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.521685][ T3151] random: crng reseeded on system resumption [ 193.553099][ T28] audit: type=1400 audit(1790985788.688:312): avc: denied { open } for pid=3150 comm="syz.3.729" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.578031][ T3153] loop0: detected capacity change from 0 to 256 [ 193.584758][ T3153] exfat: Deprecated parameter 'utf8' [ 193.593408][ T3153] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 193.608633][ T3153] FAULT_INJECTION: forcing a failure. [ 193.608633][ T3153] name failslab, interval 1, probability 0, space 0, times 0 [ 193.620238][ T28] audit: type=1400 audit(1790985788.778:313): avc: denied { write } for pid=3152 comm="syz.0.730" name="file0" dev="loop0" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.628320][ T3153] CPU: 0 PID: 3153 Comm: syz.0.730 Not tainted syzkaller #0 [ 193.645205][ T28] audit: type=1400 audit(1790985788.778:314): avc: denied { add_name } for pid=3152 comm="syz.0.730" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.650936][ T3153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.650950][ T3153] Call Trace: [ 193.650955][ T3153] [ 193.650963][ T3153] __dump_stack+0x21/0x24 [ 193.672098][ T28] audit: type=1400 audit(1790985788.778:315): avc: denied { associate } for pid=3152 comm="syz.0.730" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 193.681542][ T3153] dump_stack_lvl+0x110/0x170 [ 193.718294][ T3153] ? __cfi_dump_stack_lvl+0x8/0x8 [ 193.723373][ T3153] ? __kasan_check_write+0x14/0x20 [ 193.728526][ T3153] dump_stack+0x15/0x24 [ 193.732742][ T3153] should_fail_ex+0x3bf/0x510 [ 193.737453][ T3153] ? getname_flags+0xba/0x510 [ 193.742178][ T3153] __should_failslab+0xac/0xf0 [ 193.746993][ T3153] should_failslab+0x9/0x20 [ 193.751543][ T3153] kmem_cache_alloc+0x3b/0x320 [ 193.756353][ T3153] getname_flags+0xba/0x510 [ 193.760936][ T3153] __x64_sys_unlinkat+0xb0/0xf0 [ 193.765832][ T3153] x64_sys_call+0x79f/0x9a0 [ 193.770374][ T3153] do_syscall_64+0x4c/0xa0 [ 193.774834][ T3153] ? clear_bhb_loop+0x30/0x80 [ 193.779632][ T3153] ? clear_bhb_loop+0x30/0x80 [ 193.784348][ T3153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.790271][ T3153] RIP: 0033:0x7fd90359e159 [ 193.794745][ T3153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.814382][ T3153] RSP: 002b:00007fd90453d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 193.822835][ T3153] RAX: ffffffffffffffda RBX: 00007fd903825fa0 RCX: 00007fd90359e159 [ 193.830877][ T3153] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 193.838887][ T3153] RBP: 00007fd90453d090 R08: 0000000000000000 R09: 0000000000000000 [ 193.846896][ T3153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.854909][ T3153] R13: 00007fd903826038 R14: 00007fd903825fa0 R15: 00007ffeb775e4d8 [ 193.862976][ T3153] [ 193.888638][ T24] usb 3-1: bad CDC descriptors [ 193.894623][ T3159] loop1: detected capacity change from 0 to 256 [ 193.908975][ T24] usb 3-1: USB disconnect, device number 12 [ 193.912007][ T3159] exfat: Deprecated parameter 'utf8' [ 193.955079][ T3159] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 194.251702][ T28] audit: type=1400 audit(1790985789.428:316): avc: denied { remove_name } for pid=3158 comm="syz.1.733" name="file1" dev="loop1" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.285456][ T28] audit: type=1400 audit(1790985789.448:317): avc: denied { rmdir } for pid=3158 comm="syz.1.733" name="file1" dev="loop1" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.310689][ T361] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 194.499391][ T361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.517623][ T361] usb 4-1: not running at top speed; connect to a high speed hub [ 194.528064][ T361] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.547967][ T361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 194.569032][ T361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 194.587951][ T361] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.619424][ T361] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 194.638164][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.648140][ T361] usb 4-1: Product: syz [ 194.652333][ T361] usb 4-1: Manufacturer: syz [ 194.657076][ T361] usb 4-1: SerialNumber: syz [ 194.667228][ T3163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.758924][ T290] EXT4-fs (loop2): unmounting filesystem. [ 194.796606][ T3178] loop2: detected capacity change from 0 to 256 [ 194.880542][ T3161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.894532][ T3161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.926545][ T361] usb 4-1: MIDIStreaming interface descriptor not found [ 194.943352][ T28] audit: type=1400 audit(1790985790.118:318): avc: denied { mounton } for pid=3177 comm="syz.2.738" path="/156/file1/file1" dev="loop2" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 194.978707][ T361] usb 4-1: USB disconnect, device number 10 [ 195.113667][ T3192] EXT4-fs: Ignoring removed orlov option [ 195.178432][ T3192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.202273][ T28] audit: type=1400 audit(1790985790.378:319): avc: denied { sys_module } for pid=3191 comm="syz.2.741" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 195.310147][ T3170] F2FS-fs (loop1): Unrecognized mount option "0000000000000000000000000000000000000000000003" or missing value [ 195.349770][ T290] EXT4-fs (loop2): unmounting filesystem. [ 196.018281][ T448] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 196.150780][ T3233] set_capacity_and_notify: 3 callbacks suppressed [ 196.150798][ T3233] loop2: detected capacity change from 0 to 512 [ 196.164032][ T3233] EXT4-fs: dax option not supported [ 196.198637][ T3141] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.245912][ T3239] loop1: detected capacity change from 0 to 1024 [ 196.252755][ T3239] EXT4-fs: Ignoring removed oldalloc option [ 196.258742][ T3239] EXT4-fs: Ignoring removed oldalloc option [ 196.275573][ T3239] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.322652][ T3239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.339183][ T448] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 196.347458][ T448] usb 4-1: config 0 has no interface number 0 [ 196.353754][ T448] usb 4-1: config 0 interface 41 has no altsetting 0 [ 196.362090][ T448] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 196.372160][ T448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.380274][ T448] usb 4-1: Product: syz [ 196.384553][ T448] usb 4-1: Manufacturer: syz [ 196.389263][ T448] usb 4-1: SerialNumber: syz [ 196.394968][ T448] usb 4-1: config 0 descriptor?? [ 196.406993][ T3248] loop2: detected capacity change from 0 to 512 [ 196.418922][ T3248] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.758: iget: bad i_size value: 38620345925642 [ 196.432008][ T3248] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.758: couldn't read orphan inode 15 (err -117) [ 196.444507][ T3248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.464386][ T290] EXT4-fs (loop2): unmounting filesystem. [ 196.915740][ T288] EXT4-fs (loop1): unmounting filesystem. [ 197.224040][ T3269] loop1: detected capacity change from 0 to 256 [ 197.329708][ T3278] FAULT_INJECTION: forcing a failure. [ 197.329708][ T3278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.343194][ T3278] CPU: 0 PID: 3278 Comm: syz.2.769 Not tainted syzkaller #0 [ 197.350555][ T3278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.360644][ T3278] Call Trace: [ 197.363956][ T3278] [ 197.366905][ T3278] __dump_stack+0x21/0x24 [ 197.371267][ T3278] dump_stack_lvl+0x110/0x170 [ 197.376060][ T3278] ? __cfi_dump_stack_lvl+0x8/0x8 [ 197.381109][ T3278] ? __kasan_check_write+0x14/0x20 [ 197.386243][ T3278] ? proc_fail_nth_write+0x180/0x200 [ 197.391548][ T3278] dump_stack+0x15/0x24 [ 197.395736][ T3278] should_fail_ex+0x3bf/0x510 [ 197.400427][ T3278] should_fail+0xb/0x10 [ 197.404710][ T3278] should_fail_usercopy+0x1a/0x20 [ 197.409800][ T3278] _copy_from_user+0x1e/0xc0 [ 197.414422][ T3278] get_itimerspec64+0xa7/0x310 [ 197.419208][ T3278] ? __cfi_get_itimerspec64+0x10/0x10 [ 197.424620][ T3278] ? __kasan_check_write+0x14/0x20 [ 197.429754][ T3278] ? mutex_unlock+0x8f/0x230 [ 197.434375][ T3278] ? __cfi_mutex_unlock+0x10/0x10 [ 197.439416][ T3278] __x64_sys_timer_settime+0x168/0x260 [ 197.444894][ T3278] ? fput+0x154/0x1a0 [ 197.448895][ T3278] ? __cfi___x64_sys_timer_settime+0x10/0x10 [ 197.454893][ T3278] ? ksys_write+0x1fa/0x260 [ 197.459413][ T3278] ? __cfi_ksys_write+0x10/0x10 [ 197.464282][ T3278] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 197.470369][ T3278] x64_sys_call+0x3c4/0x9a0 [ 197.474912][ T3278] do_syscall_64+0x4c/0xa0 [ 197.479352][ T3278] ? clear_bhb_loop+0x30/0x80 [ 197.484045][ T3278] ? clear_bhb_loop+0x30/0x80 [ 197.488751][ T3278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.494674][ T3278] RIP: 0033:0x7f62a1f9e159 [ 197.499108][ T3278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.518730][ T3278] RSP: 002b:00007f62a2e82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 197.527165][ T3278] RAX: ffffffffffffffda RBX: 00007f62a2225fa0 RCX: 00007f62a1f9e159 [ 197.535181][ T3278] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 197.543179][ T3278] RBP: 00007f62a2e82090 R08: 0000000000000000 R09: 0000000000000000 [ 197.551174][ T3278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.559160][ T3278] R13: 00007f62a2226038 R14: 00007f62a2225fa0 R15: 00007fff5dfe6998 [ 197.567183][ T3278] [ 197.603235][ T3284] loop2: detected capacity change from 0 to 512 [ 197.651068][ T3284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.660406][ T3284] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.677191][ T3284] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 197.700720][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 197.700738][ T28] audit: type=1400 audit(1790985792.848:326): avc: denied { create } for pid=3282 comm="syz.2.771" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 197.701598][ T3284] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 197.746116][ T3284] EXT4-fs (loop2): This should not happen!! Data will be lost [ 197.746116][ T3284] [ 197.751465][ T3292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3292 comm=syz.3.747 [ 197.757315][ T3284] EXT4-fs (loop2): Total free blocks count 0 [ 197.777015][ T3284] EXT4-fs (loop2): Free/Dirty block details [ 197.783260][ T3284] EXT4-fs (loop2): free_blocks=65280 [ 197.788903][ T3284] EXT4-fs (loop2): dirty_blocks=33 [ 197.794159][ T3284] EXT4-fs (loop2): Block reservation details [ 197.899004][ T3284] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 197.931422][ T28] audit: type=1400 audit(1790985793.108:327): avc: denied { read } for pid=3212 comm="syz.3.747" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.045996][ T3213] binder: 3212:3213 ioctl c0306201 200000000080 returned -14 [ 198.070194][ T28] audit: type=1400 audit(1790985793.128:328): avc: denied { open } for pid=3212 comm="syz.3.747" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.094100][ T28] audit: type=1400 audit(1790985793.218:329): avc: denied { ioctl } for pid=3212 comm="syz.3.747" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.146794][ T290] EXT4-fs (loop2): unmounting filesystem. [ 198.500041][ T3321] loop0: detected capacity change from 0 to 512 [ 198.509240][ T3321] EXT4-fs: Ignoring removed oldalloc option [ 198.515853][ T3321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 198.542450][ T3321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 198.552154][ T3321] System zones: 1-12 [ 198.564643][ T3321] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.782: bad orphan inode 131072 [ 198.681165][ T3321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.814167][ T28] audit: type=1400 audit(1790985793.988:330): avc: denied { read write open } for pid=3320 comm="syz.0.782" path="/144/bus/file0/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.838569][ T28] audit: type=1400 audit(1790985794.008:331): avc: denied { rename } for pid=3320 comm="syz.0.782" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 198.862744][ T28] audit: type=1400 audit(1790985794.018:332): avc: denied { unlink } for pid=3320 comm="syz.0.782" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.885972][ T289] EXT4-fs (loop0): unmounting filesystem. [ 198.903864][ T3327] loop0: detected capacity change from 0 to 256 [ 198.917050][ T3327] random: crng reseeded on system resumption [ 199.146299][ T448] CoreChips: probe of 4-1:0.41 failed with error -71 [ 199.159057][ T448] usb 4-1: USB disconnect, device number 11 [ 199.306083][ T3338] loop5: detected capacity change from 0 to 1024 [ 199.337309][ T3338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 199.361162][ T3344] xt_CT: No such helper "pptp" [ 199.647987][ T448] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 200.625635][ T3352] synth uevent: /bus/acpi: unknown uevent action string [ 200.635079][ T448] usb 3-1: Using ep0 maxpacket: 32 [ 200.642364][ T3353] xt_CT: No such helper "pptp" [ 200.649691][ T28] audit: type=1400 audit(1790985795.828:333): avc: denied { rmdir } for pid=2695 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.679127][ T448] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.698291][ T448] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.708572][ T28] audit: type=1400 audit(1790985795.848:334): avc: denied { unlink } for pid=2695 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 200.726662][ T448] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.742016][ T448] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 200.751278][ T448] usb 3-1: Product: syz [ 200.755481][ T448] usb 3-1: Manufacturer: syz [ 200.760479][ T3354] loop1: detected capacity change from 0 to 256 [ 200.773429][ T3354] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x0719ac00, checksum : 0x1119ac00) [ 200.780207][ T448] hub 3-1:4.0: USB hub found [ 200.784358][ T3354] exFAT-fs (loop1): invalid boot region [ 200.794050][ T3354] exFAT-fs (loop1): failed to recognize exfat type [ 200.802556][ T2695] EXT4-fs (loop5): unmounting filesystem. [ 200.815390][ T2695] syz-executor (2695) used greatest stack depth: 21040 bytes left [ 200.841763][ T28] audit: type=1400 audit(1790985796.018:335): avc: denied { mount } for pid=3350 comm="syz.1.792" name="/" dev="ramfs" ino=29949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 200.958063][ T2199] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 200.974107][ T448] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 201.026475][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.033669][ T3361] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.040970][ T361] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 201.049501][ T3361] device bridge_slave_0 entered promiscuous mode [ 201.056475][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.063694][ T3361] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.071314][ T3361] device bridge_slave_1 entered promiscuous mode [ 201.121230][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.128346][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.135659][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.142733][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.150150][ T2199] usb 1-1: Using ep0 maxpacket: 32 [ 201.157070][ T2199] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.168284][ T2199] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.180084][ T2199] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.196167][ T2199] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 201.205140][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.212799][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.220932][ T2199] usb 1-1: Product: syz [ 201.225219][ T2199] usb 1-1: Manufacturer: syz [ 201.225326][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.239920][ T2199] hub 1-1:4.0: USB hub found [ 201.245152][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.253263][ T361] usb 4-1: Using ep0 maxpacket: 16 [ 201.254638][ T667] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.260443][ T361] usb 4-1: config 170 has an invalid interface number: 215 but max is 0 [ 201.265487][ T667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.281452][ T361] usb 4-1: config 170 has no interface number 0 [ 201.287896][ T361] usb 4-1: config 170 interface 215 has no altsetting 0 [ 201.295655][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.304746][ T361] usb 4-1: New USB device found, idVendor=238b, idProduct=383e, bcdDevice=e8.34 [ 201.308596][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.316021][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.329924][ T361] usb 4-1: Product: syz [ 201.334201][ T361] usb 4-1: Manufacturer: syz [ 201.339087][ T361] usb 4-1: SerialNumber: syz [ 201.347282][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.360501][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.369265][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.376925][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.385893][ T3361] device veth0_vlan entered promiscuous mode [ 201.398841][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.409229][ T3361] device veth1_macvtap entered promiscuous mode [ 201.420845][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.432383][ T667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.442633][ T2199] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 201.557739][ T361] rndis_host 4-1:170.215: More than one union descriptor, skipping ... [ 201.566172][ T361] usb 4-1: bad CDC descriptors [ 201.572554][ T361] usb 4-1: USB disconnect, device number 12 [ 202.523241][ T3386] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 202.534833][ T3386] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 202.648531][ T3392] loop1: detected capacity change from 0 to 256 [ 202.670448][ T3392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 202.718844][ T361] usb 3-1: USB disconnect, device number 13 [ 203.996528][ T3408] 9pnet_fd: Insufficient options for proto=fd [ 204.283312][ T3420] loop6: detected capacity change from 0 to 256 [ 204.348585][ T448] usb 1-1: USB disconnect, device number 14 [ 205.222756][ T3444] loop6: detected capacity change from 0 to 128 [ 205.241632][ T3444] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.261374][ T3444] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.380418][ T451] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 206.290869][ T3455] loop6: detected capacity change from 0 to 512 [ 206.325104][ T3457] loop1: detected capacity change from 0 to 256 [ 206.989116][ T451] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.000436][ T451] usb 1-1: not running at top speed; connect to a high speed hub [ 207.014816][ T451] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.025167][ T451] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 207.036260][ T451] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 207.046179][ T451] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.404824][ T451] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 207.418125][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.434507][ T451] usb 1-1: Product: syz [ 207.443180][ T451] usb 1-1: Manufacturer: syz [ 207.447999][ T451] usb 1-1: SerialNumber: syz [ 207.473979][ T3440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.483820][ T3480] loop2: detected capacity change from 0 to 512 [ 207.524954][ T3480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 207.558282][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.833: corrupted inode contents [ 207.578219][ T3480] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #16: comm syz.2.833: mark_inode_dirty error [ 207.608321][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.833: corrupted inode contents [ 207.628233][ T3480] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.833: mark_inode_dirty error [ 207.641601][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.833: corrupted inode contents [ 207.653943][ T3480] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.833: mark_inode_dirty error [ 207.665723][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.833: corrupted inode contents [ 207.678114][ T3480] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 207.686905][ T3480] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.833: corrupted inode contents [ 207.700873][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.718222][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.719036][ T3480] EXT4-fs error (device loop2): ext4_truncate:4327: inode #16: comm syz.2.833: mark_inode_dirty error [ 207.750553][ T451] usb 1-1: MIDIStreaming interface descriptor not found [ 207.764388][ T451] usb 1-1: USB disconnect, device number 15 [ 207.777313][ T3480] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 207.788275][ T3480] EXT4-fs (loop2): 1 truncate cleaned up [ 207.794331][ T3480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.804467][ T3480] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.816347][ T667] __quota_error: 5 callbacks suppressed [ 207.816362][ T667] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 207.832255][ T667] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:14: Failed to release dquot type 1 [ 207.844669][ T28] audit: type=1400 audit(1790985803.018:341): avc: denied { create } for pid=3490 comm="syz.6.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 207.895337][ T290] EXT4-fs (loop2): unmounting filesystem. [ 207.903290][ T3493] loop1: detected capacity change from 0 to 256 [ 207.973295][ T3504] loop6: detected capacity change from 0 to 1024 [ 207.980040][ T3504] EXT4-fs: Ignoring removed oldalloc option [ 207.985989][ T3504] EXT4-fs: Ignoring removed oldalloc option [ 207.991948][ T3504] EXT4-fs: Ignoring removed oldalloc option [ 207.997878][ T3504] ext4: Unknown parameter 'smackfstransmute' [ 208.058947][ T3157] udevd[3157]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.103298][ T3141] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.725572][ T3520] loop6: detected capacity change from 0 to 128 [ 209.693060][ T28] audit: type=1400 audit(1790985804.868:342): avc: denied { write } for pid=3532 comm="syz.3.848" path="socket:[30561]" dev="sockfs" ino=30561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.770473][ T3545] loop0: detected capacity change from 0 to 256 [ 209.847334][ T3550] loop0: detected capacity change from 0 to 512 [ 209.855939][ T3550] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 209.870545][ T3548] loop3: detected capacity change from 0 to 1024 [ 209.908371][ T3548] ext4: Unknown parameter 'dont_appraise' [ 209.969309][ T3548] loop3: detected capacity change from 0 to 2048 [ 210.029612][ T3561] device syzkaller0 entered promiscuous mode [ 210.038477][ T3548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 210.048592][ T3561] tipc: Started in network mode [ 210.053570][ T3561] tipc: Node identity 62c72aa72db, cluster identity 4711 [ 210.070047][ T3561] tipc: Enabled bearer , priority 0 [ 210.138166][ T3560] tipc: Resetting bearer [ 210.145632][ T28] audit: type=1400 audit(1790985805.318:343): avc: denied { create } for pid=3547 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.176773][ T3560] tipc: Disabling bearer [ 210.240159][ T287] EXT4-fs (loop3): unmounting filesystem. [ 210.258652][ T3565] loop1: detected capacity change from 0 to 128 [ 210.423794][ T3574] incfs: Error accessing: ./file1. [ 210.429568][ T3574] incfs: mount failed -20 [ 210.587893][ T28] audit: type=1400 audit(1790985805.758:344): avc: denied { append } for pid=3580 comm="syz.0.865" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.923697][ T3593] loop0: detected capacity change from 0 to 256 [ 212.076227][ T3608] loop1: detected capacity change from 0 to 128 [ 212.251902][ T3622] xt_CT: No such helper "pptp" [ 212.538067][ T40] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 213.334747][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 213.451075][ T40] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.469198][ T40] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.481654][ T40] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.491081][ T40] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 213.499843][ T40] usb 7-1: Product: syz [ 213.504118][ T40] usb 7-1: Manufacturer: syz [ 213.515543][ T40] hub 7-1:4.0: USB hub found [ 214.044733][ T40] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 215.245342][ T3663] set_capacity_and_notify: 2 callbacks suppressed [ 215.245359][ T3663] loop3: detected capacity change from 0 to 1024 [ 215.281084][ T3663] EXT4-fs: Ignoring removed bh option [ 215.319110][ T3663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.457859][ T28] audit: type=1400 audit(1790985810.628:345): avc: denied { write } for pid=3662 comm="syz.3.887" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 215.479837][ T28] audit: type=1400 audit(1790985810.628:346): avc: denied { add_name } for pid=3662 comm="syz.3.887" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 215.500689][ T28] audit: type=1400 audit(1790985810.628:347): avc: denied { setattr } for pid=3662 comm="syz.3.887" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 215.585266][ T28] audit: type=1400 audit(1790985810.628:348): avc: denied { remove_name } for pid=3662 comm="syz.3.887" name="#29" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 215.610722][ T28] audit: type=1400 audit(1790985810.628:349): avc: denied { rename } for pid=3662 comm="syz.3.887" name="#29" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.637203][ T28] audit: type=1400 audit(1790985810.628:350): avc: denied { unlink } for pid=3662 comm="syz.3.887" name="#29" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 215.659411][ T28] audit: type=1400 audit(1790985810.658:351): avc: denied { write } for pid=3662 comm="syz.3.887" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.996187][ T3678] loop2: detected capacity change from 0 to 256 [ 216.075242][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.111569][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.118949][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.142972][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.149834][ T287] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 216.170072][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.176640][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.191092][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.214434][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.223255][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.331336][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.374893][ T287] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 216.580057][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.586895][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.605507][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.631131][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.637741][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.666094][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.681171][ T287] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 216.701488][ T361] usb 7-1: USB disconnect, device number 2 [ 216.731788][ T287] EXT4-fs (loop3): Remounting filesystem read-only [ 216.741652][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.764760][ T287] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /165/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 216.797416][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.818832][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.844228][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.860223][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.883777][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.902928][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.918579][ T287] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 216.979963][ T3721] EXT4-fs (sda1): shut down requested (0) [ 216.989077][ T28] audit: type=1400 audit(1790985812.168:352): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 217.013207][ T28] audit: type=1400 audit(1790985812.168:353): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.035883][ T28] audit: type=1400 audit(1790985812.168:354): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.122406][ T3728] loop0: detected capacity change from 0 to 256 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 217.788578][ T667] device bridge_slave_1 left promiscuous mode [ 217.794780][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.802409][ T667] device bridge_slave_0 left promiscuous mode [ 217.808745][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.816640][ T667] device veth1_macvtap left promiscuous mode [ 217.822756][ T667] device veth0_vlan left promiscuous mode [ 218.139735][ T667] tipc: Disabling bearer [ 218.145104][ T667] tipc: Left network mode [ 218.149753][ T667] tipc: Left network mode [ 218.629194][ T667] device bridge_slave_1 left promiscuous mode [ 218.635358][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.642994][ T667] device bridge_slave_0 left promiscuous mode [ 218.649275][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.657183][ T667] device bridge_slave_1 left promiscuous mode [ 218.663447][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.670938][ T667] device bridge_slave_0 left promiscuous mode [ 218.677052][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.685048][ T667] device bridge_slave_1 left promiscuous mode [ 218.691284][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.698882][ T667] device bridge_slave_0 left promiscuous mode [ 218.704998][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.713691][ T667] device veth1_macvtap left promiscuous mode [ 218.719978][ T667] device veth0_vlan left promiscuous mode [ 218.726221][ T667] device veth1_macvtap left promiscuous mode [ 218.732353][ T667] device veth0_vlan left promiscuous mode [ 218.738689][ T667] device veth1_macvtap left promiscuous mode [ 218.744714][ T667] device veth0_vlan left promiscuous mode