last executing test programs: 30.839399872s ago: executing program 2 (id=21): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000006040)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090243000101000000090400001202060000052406000005240014000d240f010000000000000000000424130904241306090582022000000000090503020002000000efae7db0871ef6be2d23c8c85dac978e806d9c33818b0ff2feba5e20334a608ccfa829e5c7d93bcf08"], 0x0) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = syz_pidfd_open(r0, 0x0) fstatfs(r6, &(0x7f00000000c0)=""/7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000f000f00"}}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049, 0xd009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 26.477379984s ago: executing program 2 (id=31): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@dax_inode}, {@lazytime}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x3, &(0x7f0000000080)={0x9, 0x200}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000240)=0x2, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101000, 0x8) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 24.922800315s ago: executing program 2 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) pause() socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) close(0xffffffffffffffff) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 24.135392595s ago: executing program 2 (id=38): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2800000, &(0x7f0000000180)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@dax_inode}, {@lazytime}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x3, &(0x7f0000000080)={0x9, 0x200}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000240)=0x2, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101000, 0x8) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 23.252357118s ago: executing program 2 (id=41): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x10e) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="4022dd000000dd215f4d667888287b22f45c2f1f52cf5d6acb14c74dee62e0da1bd7176300a6"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x200, 0x1) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x1) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x31) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x3, r2}) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x81) fsmount(0xffffffffffffffff, 0x0, 0x80) 21.156636752s ago: executing program 2 (id=49): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3f, 0x300, 0x70bd27, 0x25dfdbfc, {0x11}, [@nested={0xc, 0x4c, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x400000d) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='unlock '], 0xe) 9.379314307s ago: executing program 1 (id=92): openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0xa, 0x5, 0x400000) socket(0x10, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)={0x40, 0x30, 0x4, "2e161ddf"}, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) close(0x3) openat$kvm(0x0, &(0x7f0000000080), 0x48a082, 0x0) socket(0x1e, 0x4, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)) socket$netlink(0x10, 0x3, 0x0) exit(0xfffffffffffffff8) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb11001a000000000000000c0000000c00000002000000000000000000000a020000000000"], &(0x7f0000000000)=""/140, 0x26, 0x8c, 0x7}, 0x28) unshare(0x40600) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f00000000c0)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000080)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents64(r5, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 7.161682904s ago: executing program 3 (id=104): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000006040)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090243000101000000090400001202060000052406000005240014000d240f010000000000000000000424130904241306090582022000000000090503020002000000efae7db0871ef6be2d23c8c85dac978e806d9c33818b0ff2feba5e20334a608ccfa829e5c7d93bcf08"], 0x0) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x18}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = syz_pidfd_open(r0, 0x0) fstatfs(r6, &(0x7f00000000c0)=""/7) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000f000f00"}}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049, 0xd009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 6.347642015s ago: executing program 1 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c040000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x2}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0xf, &(0x7f0000000500)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000000c0)={0x40, 0x8}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x82, 0x1, "9e"}, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1800, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x18) 6.095405802s ago: executing program 32 (id=49): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3f, 0x300, 0x70bd27, 0x25dfdbfc, {0x11}, [@nested={0xc, 0x4c, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x400000d) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='unlock '], 0xe) 5.583273435s ago: executing program 0 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000380), &(0x7f00000001c0)=@tcp=r1}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x16, &(0x7f00000000c0)="f985b305f02fa7576cc7ff4777d45a44dfa90cba31af", 0xa8, 0x0, &(0x7f0000000100)="acd65e2d8d0e64bb894ca80ce1cfaf53bcf138b6a3d8d5841b0ba1237ae750b7d4168467f47d7c8d6b8ea8160a1f85479dd7038dfbad59dd3c7715dc943c3beb1bd71336bc69ef2b7f4f5275f885f09646632808b1db8ac73ca22c0a74c65bbb5044e4f328acf89293e2e4d3d67729cf8e8dd43f69679594d1a05e08f5c5c241eb7e67ae5c69e152f8a0a267370e1668cfda0143a8c22033e6cdaf23199c85dd6bc5eb69190f7df7"}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f0000000240)="d53bc730931fe32390f5030e44d32a844e70337b56260c56a93466e7ed30aeb94c40f3073d4ab8ab7adcbaa346660e231fce59cf8da87280cd7c4294bce5a581e36515fdafc037ff0f1bb6e6f2db5f88c9f3cdcaefa9cf2d403741e8be35911d9ee3210f4fe5c79f780b75521b174b04d3205e2e159970bd761f73ed2a389eacedf76e7543ba977f1dd0bbf7038df0859b3a4f5ecc52bcd7211cd509c8122423251d5fc5497af8772b80bae5349c8098518f4486533e5ede62f37a522a477aef6a67020e0f90092ad3", &(0x7f0000000340)=""/53, &(0x7f0000000380)="125de39fbd029a32a1b2651f4e431f7fe6b0a3c95f19351c91040bbc32a855ea6fd703a6be3186a40541014c57a138ef9882fba326966943c857b6d4e37b1e8e6367f03575fd8c800348e1f0010b1aa156f87ca6a9503c4f", &(0x7f0000000400)="195186334ce53b9fda71e43aaff184ed78cb112f3015a2ac7360c8ada9b2afc721806d6d8d82d59737e720d75be3c019f35241991b1f8cd833bba78dcd1839d97a877e22d307ae55743acd3f3da4a1a822eb697ddb2f3f87e68aac0bfd774a1482a64c4c67495d610e68faf6c087aec42727be03d56859f57f2f07d90dee8773ba7eb59e7052b033821b4e95220558fa300ea126d5363b2964c8a25fe081584944322740cbe2e4e8e38f799e382035f3ea09d2640ce60e0b", 0xffffffff, r0, 0x4}, 0x38) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.756056997s ago: executing program 4 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000900), 0x2, 0x497, &(0x7f0000001c00)="$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") 4.433203745s ago: executing program 4 (id=119): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001900010025bd7000fbcbdf250a801400ff0100040036000008001e0006000400080001"], 0x2c}, 0x1, 0x0, 0x0, 0x79f5e6f32cba3eaf}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000001480)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@fat=@check_normal}, {@fat=@umask={'umask', 0x3d, 0x3}}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f00000011c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001}) (async) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30000000180000072abd7000fbdbdf251d01070008000e00", @ANYRES32=r3, @ANYBLOB="05004300050000000c000b000100008003000080aea5b7a8079a63a5a577aff9c61e763776d3923085f6f3aedc46e30e4e63dc14f47acafdf320ea8ebf817ff1fbef8d0e3a84a3ac7b39903f6cfe9810b177c9b662e436cd3819de5b778bcd3c580d74f1c3587b65a0256ddd7c7107cb5f03035de708696ab001ff28b7f83531d6cff9c2c7e7ccdcdd4b05d1ecf2af6ce384f0b798acbb0c986a531c02354fc4c270f6afe12ba96ee2295f54cfde3baf9148111ba611b6d9c29eb9cb51e5e984f0fc"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40004) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe(0x0) (async) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x200000002, 0xfffffffffffffff8}) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') pread64(r9, &(0x7f0000000140)=""/26, 0x1a, 0x0) (async) fdatasync(r0) (async) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) 4.290893499s ago: executing program 4 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) process_vm_readv(r1, 0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000003b00)={0x0, 0xffff, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000092c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000003c0)="3fb9deda73f4965499efe177b20bde4e675e75aeb23a0fabe9cd9bddade3e9fdf209e890b60d0d5070b763905867e55b80badf3a9b17a6e32d41ffeb8976b24cccd001e3cbf565a20e0e91dfb40e73442cc4e83ed6e99643214404055f7ef33e7179c6842826307ac07b97a2e4d7048f572c47fa4c436ca061cd31f6d88fc62b49715c4f83d61fc84bb8e4b6a021c3125904d34438e481eb563aa0b4a66454750076579bf9fb42d4665d9288f569358b455a59f70e7f6c9d53493af0bb2e0fc5d1998fc88036ddf34477e6908472e15f38137607cd73357590deaf2dec42041dd778f633c3", 0xe5}, {&(0x7f0000002a00)="49c4bdf07585f088304d6b389b4c314b7b4b0477f956b4d7bfb84b2bbe666e2e6e85cea12be0525fbab309065572b0436fb138b3940ab6b93676073b19e7089b4b52779ccb86c73ee11772a13e3c7f43279693357501484f0e6f5b1c237b3fd2fec4fc985fb5761b1d26ecdb8ecf51c6d79124552665db50fb281481f3f3a8740da79b57fe8b0ddeff0ff0d7864830a51a7b54cd351727ff1d5eb0c8121460f44d96f8b42d44dbe82b30dcb843e56948e3dd0d5286607786cb6dbcaac81eff027ccee1e73400d213563d6c6de963147a412cc0f7f6605bb71363b6c869719c80f9f48dbb91d0ea2db8582ea32981fe198e7e09816096ee6f3d5bbe929bb88c2157d1c34e8c5ca0f550f31dcd78e82ecb22b62efda0a385e6757cb014dfb4a4eac04c23470bfbdee1758da0b863a1f30252d5f92473ee513a68f244a6b15221f21cf7fc7e287a31484cec46ecd9092413f1f6ec59768af557e5564985b3207d7936ca1160ee87f5a414b83ffbb1cca9c82ab64834de8d9bb6d5fb0160d02523eab6b809d66004b343af70d6c6bc039e9241a985483be789ffe8e8a0a6e59398a05c7d0bac351b72a7bafc984bdfb9f78d364d82812be090a7b92d13a8aea888775674bcc261faa5a34bb3ac92935e62214680d34165283f438c1cc2949419ddd4f6d8cfa5cffaf0b3e35b5e030cd611fe4d2bea664b58fc339e15a8b27a494949d17334a9a224a9477310a0f7761da4e35bf8856ab3e1d2a16ca78f16c8bbbd9429b43f2466d62eca41cf74be934b51f733fa3dde761bc1b07b055520ee4195377a39657e96544d8a4ddff9121ae6c7b2d0cc24e8c12c9708c042200993e6c36dd7aee661de671226a4508fe5d2e56bf8c43a420bb7a25fb45c60e4fd621ffb174ef958741531ec5669de0256d38168939cee6c9de117bde9b9b6acf0aec59eeae4b84550cf02266b165a89dee265d7bf37f0b380ae7d6a81171519bcc61e8bf65233e5e136a1fbaecea508a177ff6f60097bcae2273c4aa0cc5f359f863cd270c9e2d8d2cd72073f537df348dcc4bff74f4aa604bcf6fa0d11932370176cca5e9546e018aa264027647acdeb98e3912d27dfc6bb0a1aaa74b430ba6815761f20b23ddfba6b85f428dfd8157879dc35fec1eaac3584c28d422df797de2f30cb4becc1b6cfaf60487a09a9a97fa1ec5b23b583bac61484c48be50c7195cba6081f83941bb1446222e8fcde1098f2c1b2e52406ab8705634d88a354656e9977d02c45e8824e069684d442fc18489e55214ded471dcb62676b5448ad84b4a9f473858a996d9417125f0ad5ffa286f9d2d890e0d111bcdac5590bc260e03dff60de0d8a4851a108a3217f3a5611ca8870e6b6ad9b67c36ed158d0aacf06d9c69aea251812522ae7db7ff911a325f2a325ce14194e2b13b95671ef27f323d9dc74651b755bf7db202f9eb40aaadf02290ff901ab17c70bf83bcef95577227b94205be8a1e3a127b5afbef52860c34ec7789766a0857e45e2aac98144a26caa9257b12bd7918f7c307575719d8bfaa3b4412f1976d6270127ab94e690b15b23c9eb362d97ea2d5deabdcc389b8603e8b36f8a631809fecf9216048e8f8bf4d853af56db9a642a125d342e8f571713f9baea6f032683c7f869c846ffda971d0789338c9b8653c5b320b0f1b93342bf9e9b71a64451ae812fc1af1b204cf509366dbd40b03ec733f024edebfe5c5245b3226b59a348cc53084467587edf1e5473e9838835af050f7cf55b27c1afac26d95a2f2d871484af3341a4c539afbe93d4b74210b3cc5f9ffa16e0c2884ab0d2063eb3349c0c28dca5598bb0b5ca2466a621b4054c3491f8feadf4e99d9f5e199a7b038064646bc6c86300508a555e00498a99e9604878584bb7e9e91dfe38ea496e524f00767d964c732b838705c1fc12107fa0c46057efd12868d3f8615e9cf3065a185d0c5da637779532806856ef195ed28f3ca1f7c36954873fe466a5036eb589ae18c5469aafd4ea765c86eff6432a86365bc5dc527659b1434fa98317bef4e557421f4119da38e43bd7c5a5d78a45a3902ad96d60c692e39717fe5c8efbf71fa365b6ea4e385472758e52c1c0de2af2979e8bca1a5a9fc93c9a7bf866f3c90bd0757cccd172e360b0706f3460d0ceceb4b7208219c746a1af9b3852448da690d2f185de1b7ac06fec84e82bedd1661dc1bee55dcae4497b0aea0bdbeeee16086ab2e79c5567d005c5946da637e03466299976b696ada3e3f9622e7b50a46e59ad02af748c12a229d910112212c7bed46dc55b6e58b67c11df8d31e4c325210a814cdb2762e70df762287084da30146243ba41ad845ce7358b5be12ba4b692f53930c21f3ca5141e098486d34f96c666b585a955c2ca24495c14e88193ab8459a0ad32ecde7922ee98d30105a6e0a92b12ee2d4c9e0497041cd75dc98d8bf9cf07a833d83cf2dd967127a2f335e2ab4dfb3dc9e1fcab6c8201cda666bb7ac999f6bd2152c38323e5c817329800f02755a757c84280f223d519e4b22ed3fb4175130666a1b2da7661c2fb914288b14be74011b8b8cf3f67ac6e48d62dde103dbfc10a8b39650f4ca1f9ea09604fd8719f3d1ab8f6194ac3f8c77540937f920f62ed3e1e26ead852681da920c14f08e67e0c7a624e6ea2f264b124c0e428517bf3717aed3814b1412dc6aab1978be4da2656b5ddd42510dcf79402868a1e553495c6a7250876e85c38c0e0b9e2742f507b5682a81a6af48ffd3c07bc701cbee816672c023fa235f6a7d061d5e493a32a251d000421be06e2f5e7fa319ef8ad3bc2891e4cd3841699ca85842d4ce2ec5d890ca8a0f742917a1c7ad7cca662ea6b5966c1846390d096e3de88bc9da9e50100f5bb9a73c91d356635719a4957f4d57e98c799e21cb9d65eacde898ab9199fd2a0ec73c66744bd0e78c1581f3d80d1ee4cf7fb06f123b2dd3ac00a970c0902d45e4cd4a59404d8883b75e26f5318e34214bae68969fdaa736836a9a1634e60c31a0dc037ed307a010355fb644ff698b97092597ec82f12dfe99a4fadb58e6e3cb157d7b71c5d2c4c17d285a085a1ec45d93d52333cf616a28b01a8bd6a53bb5e2e3d5dbcb519cc569aee5b0a87e388fd7e05f6352c0d1d690d4d2acf37da9256dbc39a5bf51e46d53502469909b5adac71f9276708cbfd441d587e0bce0d0f7e7ccaccd12f6c4c242567afd10374e297b9cec7dd9d56af83a001aa1c3c285121df0f16462db51af2f7c60950482e3ea1ad27a778edeb0bce393776412a011fe86dc51338e6b4bdf33509a71715b3e9a67bd3c4b0b944db2e361bb48e01e8cecc2c15d8f7b25ea5b3aae126c512d6a2f992809f9829b7eaa09f6d0de2607a6e8b9addfc677b8cd2c3571b657c9da5c473ca80af721264923cfd949784169addd9ca284a28be2fdb8028c0c72ebef34e2f473c903dc668fe26362033d578f7402a5f91346b7dffeedd17cc9528507ab5a99c4c6348940882e9ffbab0ab126e619578e05365d71f71cf8dce315220b3ce03d0c8fbae0d374b0d7fe699d17ee3db03614fce4d77e5c29147a4e29d6003a2d626a2d342ba8ca40c04de4a240053f0381962e832d12c53ec8b5d71c7da253eb84de24eb97c235ceb53cdaa9df373535ca1b148667fd0e0f3c86ad56fef65c3a806ba98984e7f7e437763568a03733cf54e1bcb07423461550602c116796d42348db07869c84841843b677fd0aa13d697b42cf468b55e1e20123ab764d635f9065233bf182052eb7ea2e0a61e963c7764603e4717b7cf720bfd56b4d504e78929d0c52f3c4b700d16413257d437c0c7ad7c1ce225429ef13a9b189086ee5c3955e4451b9e6828725614c06df977b03ecfb75c8451780f0a863ffa1fffa1ab27d127d25e1c94eafe5b69dc7ce7e18fef7f5ba780180c3a8363e005871f736b28b541b4830a438e874e93ef624df01c61d013845e885c87e23ffb60e9d10789516e3e1097143fef966139b52ca9a26c7c1a7ce83d44d7c3f991ed9967b352a11fc555c91951317c15fe4b4775a47dfee43f73d38bc8049aa4a3aa27345affe60bf6c316f9685df1b70156b11ffe3fca8f2143a4f7a61ee23b394a45b7c8fee9b483bf5ca5e254c12d5757887ce265f61e66cc666ca6ccde4521884af8bcd17fe3f23825ee015c92fea926b2e4b6bed2b3b53ea9bde19af123b8f868f86aaad9ba592d1cb40bdc2c3f91a8a9fbf0005ce7d332e0ad972a3aecca72793d0b9e3b24085066cf96b50a4b071bd77f359a7e84f2fa72fa1c4c6f6b261b310a3ada30be37bcebe547800a61b98413dbff16b3958746751f010a316b9e1a2818b2c7a6c5fd1d77ccf391de70e1faac0bfb3f691ec94e92756f33b1be232f6b074d5c70704ce377974b7c23d17978866be5972ea5811524169036f40e5ca22de4d6a71fd40ae246154654a9a7a882f54b35adef1e2558ab49ca95b1de425fc878f9247e83dd04925d74ca7bce8f06f5e2ab3c5245563507c224b235b4f6c22cf86b48299e252065feba264b21bd84dfd5fb2f0e74310e032c3035bde804abe8c95d2400064166b713852adc755e1f7738a27d80716f8521856a6afa4d51cb5f0ed226fa633907f2f9cdea16b98fab1897d347159f8546987e86652816495dd0ad831c23a855b829ae468c5986ac58730542fba2dd3b539e1127e67244fdd21599c95b4f097acd621388297d88805f88228f6205757d5aa1c845029b65b0dc19abaca7673b469badae0a5a320c2700ac52e9dc4cf0cbf4638fa386ff87b17f00a5de51bfe3e635982e5a1fbe42a24c057ad5f309f0e88e41cf71cd37e8a2096bc653bffe5d5c35f0c088ba2b1217f88c721a66a098ffc541d63537c30dbb296ea9354c5b179b1f4e58f4a1c733003d38d075692d6812f8ac2d0355caefcce5b939d4e13b043848076b8a22ecbf3fb6cbe70928b3224ae55e5d31686515c0a3d73f378c320430cb2a03d92c9752a5da484274c844602fa07399c6ab2f3741d9a3d469532b08d7aa359ada1964d13cfc42866b55d0d9e7ff750b4937af117e1551ddb01cb5fb0a5707aaee542603eda6cd059a2643233c5a7af93ec21547fbf99c94c0ca870dc6e32a377e504ea381875b4f462b2c5a35b896c9fa7ac55827590be62d199b84acb7d9ab10aee7b90bc45affbb92e6472a5b5599388c8b5c5dcb64b7417bb8060e5f5b3460503d18e24e146706bcdec8aceeab5ff439784e428200d9cf8bd7ed7c765c8d5259083d864294534063f2dd2dbf35df8fe8af23d62d220e78953e374b580df382adfc7371c131efe7c300605de491d2013b002f1e082ec40b87ab9026dc43d227ac36f51cb586837b89d18839388e4fb50ee18d14d2d3b38a9d676a81959e2ebf11cdedbc21ae9f0478c85c16dad766cf9701697d24c69faa6c5c11409e12fb3525ac0e31f54df45b308d24812cdc7215e9a177cf4db4a02c948a7d2a2f5448e3547ca5f2139170dcd6690c545f62b19da76698015134de6c6ad381125e67dc56540071b19b5e4de2cff6d6d74bc9009182f3e48b215e245b0b9b60148d6fddc3b6150bbbe6edf41a47f13661af28a037fcb6eef5fcfac10f6ef72464599db5b92646a04fefd5e9b51c7ba2e1e006001452e0b9bc86e772a40047d813c5ee90fe4d2b5270dba8f702818526c68c277fc0b9959f7cdd8884aee6215d954da4198c2c4e1828aa7a492aab20aa5568b37809ebb9f11e8a5fbbd0d7a16da8879083f07d42e1cb4ca3481db70679622ec2", 0x1000}, {&(0x7f0000003a00)="0099d3755b83803f7d00a51d466289bc56401f480bcfc85e8ea6f79ffc44649b3a6db2083585808e34bef0ac2fb69eac3b4752178f286871f5ba1d9ec81bf4138cbe7e95e8fbc407de41b789f93cca0279a29443d8a0343c44ba81886ab11306657f8602780e6997cb012edef6b754b786e08b5926f94b9e2fd7bb8f86ada0d9fd1004587aaebfa154b8", 0x8a}], 0x3, &(0x7f0000003d00)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0xa0, 0x4000}}, {{&(0x7f0000004200)=@abs={0x1, 0x0, 0x84e24}, 0x6e, &(0x7f0000008540)=[{&(0x7f00000083c0)="9b8213c6bcd54ce2f3b112575ff3933af50b545e660c048fe8a1b065d5e99425abc8118eb5e9fe49eeab4a9178e9b09bd3723c085c4c3cc3fdee3004e30cfc20e9857e43c9e688c2977e6dd7441af7a50c533bc4df06807cd395f8bfe883c722ee", 0x61}, {&(0x7f0000008440)="a28e13d3d85820c7a7833b835e836363fb9cabd0d56697a1b7c09ce301e90193afcabb3fa9e4bc53615d8f422da21731831150a052eaf2cff8f46f4dde39c86212aeff286bd6721f6b2a755ab0c050e41299217087cae9b990c2e635d980e21d5e406d565bb41daab0885c99fda301542615b8ecdef61026d7c90e110f95f9306d7caedacebd2ed16f6b64abb9d8fa2cd1bbed400af5c72aeeaee90186a00ecee0a54b0e52e7807b8558572cef001a23bbd2224a", 0xb4}, {&(0x7f0000008500)}], 0x3, &(0x7f0000008980)=[@rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r0, r5]}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5]}}], 0x150, 0x8805}}, {{&(0x7f0000008b00)=@file={0xa1484e6067dc9f0e, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000008dc0)=[{&(0x7f0000008b80)="eb71a7a1f3fe86813eeaef6ef9cd8103077cb78316545f775e130e36861bb29375a2e6750a3c316841a3d61e2e21ce73ac1353436a5743b1b399ce5341254032d47ba313e793afee2e483bd3f6627e45f227b320d137fd7aa43cba967be609153745d984022fc261b0d6285968518f4ffa29b6270ca8919d9cc331bebf202b98dac174f8d58d47a65e75af0fae0df4102a7529a7f88096e6fc95203bd32856a13011a49159aad03e07b408af605865ef8438df6ee08f645293320b1a446d5144c2eee534221b223449f22b5642726a9165ad94dace8421f0c3e9e5f1b687ca098a8d46b0511606320dbdda74c82f6ff25ceeec", 0xf3}, {&(0x7f0000008c80)="62bc21a46b43ad6475c87d2a24450a736f27164b0f92905aa1a137f1768b0baedc4dd3e47b57418a213312bd45cd1a04056dc830d0fabf9c03159a2fb7702990b403033d2c6012dd424f02941d6866393c0d08f240c828ee65e2f8adc4d48d328b11ebcb0956e281eb6a97bb053a4a211492a8b1d6e1ebcab242ebaffc41efadab91", 0x82}, {&(0x7f0000008d40)="6ca8f86c2f25d87c70bc9b0112d75902caaebfdc9d28e1153d5174b2c0eabec592ee2efaba9f5b3d30625ec6ab056eea9587e7a9319034142bb55f1636c252c42f5d5d76d6401f942485c003", 0x4c}], 0x3, &(0x7f0000008e00), 0x0, 0x4000004}}, {{&(0x7f0000008e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009200)=[{&(0x7f0000008ec0)="85d92d2a46a1cda5fb8d2d327bc900664054a0d3b42dfa327caffedb8cc8044f4d7c968da9237c1e83fe4c2d6c5907d920a067f7f8fde251f4813099062ad2d01427db3a936fbb05ac2f2765b466bc799c50781c4cdf578120e87506851f268dda084f56e7fce3b12155bfc39fdc7ff776c250c702a111ccab15b260e250539f4eb7d313b3cafbda3a02", 0x8a}, {&(0x7f0000008f80)="f3e74f3f1c8eaa9972a6b6e75dfd9e5d27e4d224067e2015ed3559287b8e766b1842781ce7c7004cb4aca6ad43f0eff1b019ccf4fcd00162e1092591bbf56d74ece2527b0f6760d96be8c005667c90fde07769b8175b77c1c70deaab2d81ecac71fff746a1cd175ea0f0da9d04e813ec53843ae1fabf3e8edc8c038a8023c45f006ea632", 0x84}, {&(0x7f0000009040)="114336ede1ceb684d3acdaa5f89afe7011bbe202e2dd0863cb1000e3be2d0bfbe03c568838c76b9e722e47ec0d43bc8a2b41f00da836f39b2b6cd766abe3acfc2b5759a0f663b6f16f3ef4032aed677f4e5a9d31f5e818e5f8e20d127a448ab11208a04ef4ceb9358b1d06a33c8135c0ee18ec205f3b7054011a41ca2b5a66af6087af76317c8c459796b02c1c5a21941762a276b1a7f901b3f8579b434d973224192a61ba3a58d0c66eac60e18221030e55a7ec6ed53255d1e95edea0822e5c124dad", 0xc3}, {&(0x7f0000009140)="3de0d70ba8e88dc6307bf3811cbea1f1302ed2e88f73aba7c4070944d159575426ed1cd24a7c67033cce2a36f9f2a44cc3c5b114349977336e72fe799a519679af1d7ffe5bacd695dc206f17b2208368b65fb564e0efd0adfa15a7d30ea732403a7f390c30950844ee0f28881c9b51201be46137", 0x74}, {&(0x7f00000091c0)="042b3aa17fbcc2247885c994a8f65d40d80ef29df8fc552e249632ba6fa5", 0x1e}], 0x5, &(0x7f0000009280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x40, 0x20040014}}], 0x4, 0x8044080) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x24000080) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = accept$unix(r3, 0x0, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x804, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x22, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) renameat2(r9, 0x0, r9, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b00)='./file0\x00') 4.181817952s ago: executing program 3 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x4fe, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x96}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4.119125673s ago: executing program 3 (id=122): r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 4.101163194s ago: executing program 3 (id=123): sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f', 0x1, 0x800, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) 4.017455676s ago: executing program 0 (id=125): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x31, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4.017308796s ago: executing program 3 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xa}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000200090585da20"], 0x0) 3.977328677s ago: executing program 5 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="37e84d7de114491fb4d43926000000180007800c00f305ad00000c000d0d0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x40, 0x37, 0xfd, 0x8002}, {0x0, 0x1, 0xf7, 0x80000001}, {0x6, 0x8, 0x0, 0x1057c}]}, 0x10) close_range(r3, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0xf) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x37fe0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r9 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)={0x44115988d8b16eb1, 0x0, @c}, 0x29, 0xfffffffffffffffa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc4}, 0x40, r9, '\x00', @a}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e00cbf9"], 0x1c}, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000080)={0x1, 0x0, 0x3ff}) 3.974033247s ago: executing program 1 (id=128): r0 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/35, 0x23}], 0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000100)={0x2, 0x3, 0x100, 0x0, 0x4000, 0x1, 0x0}) 3.8627244s ago: executing program 1 (id=129): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x3, &(0x7f0000000080)={0x9, 0x200}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 3.833791661s ago: executing program 5 (id=130): socket$inet(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) socket(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0xff0f000000000000) 3.821891661s ago: executing program 5 (id=131): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5538, &(0x7f0000005dc0)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0x32, 0x7f, 0x7}, {0x7, 0x9, 0x9, 0x6}, {0xfff, 0x7, 0xff, 0x9b}, {0x6788, 0x9, 0xd, 0x3}, {0xf000, 0x53, 0x9, 0x4}]}, 0x10) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x6000) userfaultfd(0x80001) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x6) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000040)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xfb) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x2000000d8, 0x2000400) 3.257306335s ago: executing program 4 (id=132): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049, 0xd009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 3.256700335s ago: executing program 4 (id=133): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5538, &(0x7f0000005dc0)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0x32, 0x7f, 0x7}, {0x7, 0x9, 0x9, 0x6}, {0xfff, 0x7, 0xff, 0x9b}, {0x6788, 0x9, 0xd, 0x3}, {0xf000, 0x53, 0x9, 0x4}]}, 0x10) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x6000) userfaultfd(0x80001) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x6) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000000040)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xfb) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 3.187685267s ago: executing program 0 (id=134): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0xee00, 0xee00, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.kill\x00', 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r2 = eventfd2(0x3ff, 0x80000) read$eventfd(r2, &(0x7f0000000040), 0x8) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000240)="626758773352ba60d6b20daa82e44ce8375c55c56549df188a533b4803409972058d37048119cff95adae3c3ba672e229c8b97ef127a2d745bad3865b2297b20d829ca7bf01da2023086b3921c81", &(0x7f0000000000)="241c1f4d99e6f2d4daae609d711a918b1b0532035d5f7c2bab2f0ffb90923fc4c4f8e6bebe60e3de0050d3c2248534f99723187628d354f40df1163d7b8776ec10866fbde74e1f84065bf5b8def1eba7b83e00000000000000d311e8b7daf9cb360b"}}, &(0x7f0000000100)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2420c}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_getevents(r10, 0xf8cc, 0x0, &(0x7f0000000080), 0x0) timer_settime(r3, 0x1, &(0x7f00000001c0)={{r5, r6+60000000}, {r7, r8+60000000}}, &(0x7f0000000200)) 2.427940327s ago: executing program 1 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) process_vm_readv(r1, 0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}, 0x1, 0x1f}, 0x800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x24000080) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = accept$unix(r3, 0x0, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x804, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x22, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) renameat2(r7, 0x0, r7, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b00)='./file0\x00') 1.866389812s ago: executing program 5 (id=136): pipe(0x0) unshare(0x400) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xf) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0xf18, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff2}, {0x5, 0xa}, {0x6, 0xfff2}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.863332191s ago: executing program 0 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.852291872s ago: executing program 3 (id=138): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000104c05d5030000000000010902240001000000000904000002030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000001140)={0x8, 0x3, @broadcast}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)="08003bdb77000000", 0x8}], 0x2}, 0x20000080) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) fadvise64(r4, 0x9, 0xfffffffffffffffe, 0x3) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a6ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x24044090) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="61109b0000000000f5c7cf2d6cc78f0a1c14d91dc991e5775476e24557fe5acbdf16d58a6d8451e3e3167eb702e98dbcc8a345dddc20b27fdc269c798e04164afa05cc74477f4c7b48ae35ed178f5300cd254c675f56036db55492966d9af4"], &(0x7f0000000200)='GPL\x00'}, 0x90) 1.247986068s ago: executing program 0 (id=139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @remote, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="280000000000000029000000b9a95fb70beee4f68078775f7c000000000000000000000000ff0200000000000000000000000000010f0b16a6a4cc1a0fed9cbb8786c38d870922541e53ee89e6b237af7be52e8bc196a88611fd07af77c7ff952a2538a2567772d3f545a35ad90246d9ee274f99dcc1dfebed9edb6b"], 0x28}, 0x40440c0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x400000000003ff, 0x7}) 1.247560368s ago: executing program 0 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x3, 0xb26, &(0x7f0000001000)={{0x12, 0x1, 0x201, 0xa9, 0x75, 0xc3, 0x40, 0x41e, 0x403c, 0x1bdf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb14, 0x3, 0x4, 0x77, 0x0, 0x4, "", [{{0x9, 0x4, 0x6d, 0x3, 0xf, 0x95, 0x19, 0x34, 0xe4, [], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0xfa, 0x45, 0x0, [@generic={0x21, 0x11, "d2743f5945fd8717dd2da1d198a6950de7a2b699454a61682f9727449260ce"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x5e7, 0x2, 0x7, 0x2}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x92, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x40}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xfc, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xfa, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x8, 0xd, 0xb, [@generic={0x21, 0x5, "f96cff11c87c7ad23f5abe44fab9de3c1fb24ecda4a44fecc6ab33bb950cab"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6e}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xff, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x20, 0x10, 0x1, 0xa0, 0x9, [@generic={0x8f, 0x21, "54358d7fa9f478922488fc28e52b6b742cc9943b88ace55d068066f23376799279b8135d55a771e191512f89b7b652d9d9ed01f2d778f6c4ed172e370a79fcc8f9374800f339e860e359b5e356ee2458803829a9de7d35fe3134c5c9834e1672028c552df2bd4bbe559e7d03a59a8fb9b65e19aea6dfc4005f6b2520cd71c9392f85582d764114149a07d706bc"}, @generic={0x7c, 0x2c, "18e560d862f606483a0d29b68762b9d41bde1a743703e2fcae5786b4eb84c0193852851b4ceb128008d9aba32ffb6b51cb1d74379dc6d0b8675a83301bc9f91ac1594a9cd347512a155daced6647650ba65625fc98d51a29d9b3662e4626f26be5c9944786d592060a311a6e94986a66164e378f4aab48de1c33"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x9, 0x2, 0x9, [@generic={0x26, 0xe, "e00db792621ca7d39f7afc202fd34d5c4afb44944c1893de59fc655ff2d179547b46c49a"}, @generic={0xce, 0x22, "c832480a2bbb7c8833921e9aa1dd747da77ec51d7f0754c45d709ac78dd98b4c442866570d72a675dbab20e01ac6afccb929067372a22e01e9dc28974c4cfdfbb53a50d3c600cd29b282c32543d9fe65eb8a6e1461fd53826c656276cf72aa2dbe36d8b0001a2061c00f7bca2beffdd3075bfa546da5b1dd9c407205f23f3b519d780ce681de33859f801629dd7c550db7744849a68bae065869ede5eac8a71e67fbbb2aab951961bdd923e9dd886e37d6a4c6bf5f40a01827721e54d71a71b2d4518c12ccb8af3ddcb915ad"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x2, 0x6, 0x4, [@generic={0x2b, 0x10, "8e44b8cf76417567b8c115adcf6605e1c36673386b88f2bf5714995c0bef94cccd6d1a61d2c1e10e56"}]}}, {{0x9, 0x5, 0x8a, 0x3, 0x200, 0x4, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xff, 0x2, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x41, 0xd, 0x47, [@generic={0xd9, 0x5, "1745f7ce9d84e0ee8cd4829d48c59dffd0094583213683621deeaaa3ccbe817016305533990f5e3f36c99bee40b04f69ef5aabf1e344e755f19deb2a1a2fd5bd2e95b2caff3503b2809c3c8e03f6189c318eef63eb73825e6fbb2238aafbf9e3e0724ba1b2b02cf1ad5326f99976d23d0ad9e0cdcf0f4d3c19124dc0df9a51ac5f7e66f20f1490d9a2493bdbf74bf25bde81841eab1b4ddc98f7f1cec3ca378c0adf8a663a65685814b7e6f1bf7dfa2845f290e3188af22dc524f7ef7f76426916ba5c99e9b1101eb175e660ed995de30ff5e9c219feab"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ef, 0xc0, 0x94, 0x8, [@generic={0x12, 0x2, "1f6823318cbcb0082cf8b9e0262d39db"}, @generic={0x7b, 0x6, "b1e884ac53d4c71c68daa56f818a3791154215da892e339ca2493a04bd0ea0384831554ad9952cef88a22716569b611a514a155fe12ed6aaf3024b3fbe27df9448cdd9596c2617da89336526a579fad3087ad5990a7a1b8bfc9d5f36327eaaf10740ed6324578ac522126cac1d650fbc42ac25c1e4c40536d4"}]}}]}}, {{0x9, 0x4, 0x87, 0x6, 0xe, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x82, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb3, 0xe}]}}, {{0x9, 0x5, 0xe, 0x14, 0x20, 0x9, 0x31, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x20, 0x7}, @generic={0xff, 0x7, "6d7f731b25f5db6826f937d97d107b39cc9f921b0735677f2d9c9230b8d62a04ecb6b173f2b8a04b0fc86d63b67e513c765bd1bba648b4d53cd5ce2d6d18d814cfd31509cbacedc9258d2a9bd54b274355c142b5df52e729dab317dabb78b0d7428100943acb5f4248c7d59bb315fd6c61ee06df72365b5c45f431e15e212ad53a391200dea27cccfe157d7a7a614602726b8167c7f8b4634149c2c82184c31f5e49ee593a9f6caa4aa1493cf7663189a81449f13dd63ab6917cb0ff8fba210ffa2bf81e230b63eebebea7cd2b4992f6d35f2b716e352e6875762222d9f49965755f872729aa64c4cceed4a9844d662921b6e7aa07883a05dcf46ae7af"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0xff, 0xe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xe, 0x6, 0x20, 0x5, 0x19, 0xf2}}, {{0x9, 0x5, 0x0, 0x10, 0x8ac191db44692f, 0xfe, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x1, 0x8, 0xaf}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xff, 0x5, 0x7f}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x10, 0x5, 0x6, [@generic={0x32, 0x10, "f1a2ec297a4689d42517f8c44b8892551fb09917f4a2dba178168489e9391f8d325c8381442ff4ad3110d72b7549bfa0"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xbf}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2d, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x8, 0x1, 0xee, [@generic={0x54, 0x31, "486462a06a9db800be8795db576c86404fd6c548b68c1dad36d11ae6d78b129cb9c9e5c564346fd8c7ad99d6a56e355234498a07655f90bc8b08fe3c7445dcd0e2aa1a2b9cb210f6615c7e85e02ac17e241d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xc}]}}, {{0x9, 0x5, 0xa, 0x2, 0x7ef, 0x81, 0xad, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3ff}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0xa, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xfffc}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1, 0x6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa}]}}]}}, {{0x9, 0x4, 0x21, 0x2, 0xd, 0xff, 0x5d, 0x81, 0x9, [], [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x8, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x3, 0x8, 0xd5}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0xa4, 0x7, 0x7, [@generic={0xb7, 0x23, "17b1e9c27a070fbbfd5c98d7051ea08e9ff4c8a8bb8ea14a20764d13874f5c40265a52a9478c88f05ec1237464c8eebd32b3b1e18fbedd36df232854744e892306a683737cfe734cc1c8706c6c1e934c5991adb53fba55214ae75b560e4b24324d8357d4765d39612004b11a5918fa29323575e2d5d2f63304e01751dc71893b87f7a3408c9c93fa89eee37a4c162266fdce976b8906caa31f2e2f91ac2383745edfb868b6572ac2de4a10003771fc0a54648f1d25"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xcd, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x19, 0x40, 0x2}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x2, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x6, 0x70, 0x46, [@generic={0xda, 0x6, "502703419b9543097f6fbbe5d8ca5846b79b23166115603e06381cccadbba5c5dfe81f7552a02fe7b7683694084b935b48080659b4ef0a78e2874a3c7222294b80b66616546ff3e9de44e670158848a458f9b9aec5d5fbf6f0e0b8590e08e8cc834bf8c6955c03014d58e88eadf54d00428627e9e9f09a64b1af4a9edb1380d22618c8e3d5a96a622dd91b0bbec438a9b20c6871e5aec3b39c6bf65833f1ac94b849f1725cb73a78839c1ebf1f79fe9c620d147a4a3d0b5a36b15738c69b2b023d598b26e59b4d7a220a32466d05e2bec41810689eda9116"}, @generic={0xd, 0x7, "3223009ec66777d87f52d0"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x408, 0x8a, 0x4, 0xa}}, {{0x9, 0x5, 0xa, 0xd, 0x0, 0x4, 0x99, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x10a, 0x10, 0x40, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0xd, 0x2, [@generic={0x78, 0x8, "a333b8d70b9113dd5460bfef6bb712aa144b1073b350a6c83aaff598281483081cc1a4996e070271df9a5d6cf2ee55e45036071153c372009462bc1278d5920e8cbf1e3825794353d5c2eae6cb328d3e68c5768d5c0a8feb641316bc985097da38880d05c3047e630cb7b269c171a40fd20ec1b6c0c7"}, @generic={0x2c, 0x30, "d071af7b83b07bc3c75b2c52a4773ce021fdcfee98a5c163727a4e3a5e9b52fa98e7402315761e1dba00"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x3, 0x6, [@generic={0x70, 0x9944b01c846f5990, "e2b0fc22edec9a0729b0f059eb37892108b2a64c583fa56255d8f91681c68692fa5b5d543db237dc6e314af842ea748b5faba84f1d3777c5d9003260ac6c2995b510095230b49dec679de08d0ace351919fd739fdf2d6044d7081054a815939883461d61834aa2e88d825ea26722"}, @generic={0xda, 0x3, "69ffebe6fd2dd42d6d7ec8d03c0d3cc099278f1dd43df6ef41b94219bddf22f7b2b6e9e91345086f0132d5db124e333c469c8750010fd899be0eeb2f5d9ca64d2c99e89c5b1500b8236861ebd1a08f36c78ceb4f5655dd37483cd1bfa0598330f2ef376b29db4bfaa10a0e3fb1b9f81abc48b1d7834f4340af0ec9c8504352c2abf5eaf62b95a0dd55a69b5935c517434efc8affbc763735fcde5b677d8f23ee32d775608854cdb28d1e7dfbbab49c65aa177228ecbdbbcd47dc86c0175ac928b91e1aa6096256301b85f9a3c34eede5b6a077b21e12c002"}]}}, {{0x9, 0x5, 0xc, 0x13, 0x400, 0xfb, 0x8, 0x9}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x1, 0xc9, 0x5, 0x10, 0x9}, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2038}}, {0x2, &(0x7f0000000e00)=@string={0x2}}, {0x92, &(0x7f0000000e40)=@string={0x92, 0x3, "e65cfaf218cf3b6c6015608462b5b27cc1aed6f8d372592aa77493c6ff774ec617a38ad9731b3c897b5e1287d798d9d303a2071029717894a1f4c07a203690e3ed8acd371f215cb8f26d3cbe7f970079561739e155d19e703344b2b07665c0ce45718e134cb2c5a2a42cea1df19cb9b93648683013edaa0de812028463be97d523e5f89675430699663bc836ce4f8d73"}}, {0x68, &(0x7f0000000f00)=@string={0x68, 0x3, "73137137f5a64ba615f5b857f73c1a277909248e4d4e5ce00f12ae3b80c770c92e98990a9454b2de2e7a8e39f11450e9e0784be2650edd6e626831ba947d57f3720747ac4d56dc4024ead9e38917e13d071e44b9a0c676e41e86a289996d596448c4e36fd674"}}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@dioread_lock}, {@nouid32}, {@dioread_lock}]}, 0x3, 0x468, &(0x7f00000002c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.247348337s ago: executing program 5 (id=141): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x200800c, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$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") (async) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x200800c, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) memfd_create(&(0x7f0000000080)='^&\\\x00', 0x2) chdir(&(0x7f0000000980)='./cgroup\x00') unshare(0x2060400) 1.163025479s ago: executing program 1 (id=142): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1/file0\x00', 0x8, &(0x7f0000005880)=ANY=[], 0x1, 0x551d, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x146) fallocate(r0, 0x0, 0x9, 0x41001f3) fallocate(r0, 0x8, 0x0, 0x10000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x1100, 0x2, 0x100feff, 0x10000}) 1.16041668s ago: executing program 5 (id=143): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8081, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x9}}, {@orlov}, {@sysvgroups}, {@abort}]}, 0xee, 0x495, &(0x7f0000000a40)="$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") (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r2 = eventfd(0xfffffff9) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000200)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@lazytime}, {@nodiscard}, {@nobarrier}]}, 0x5, 0x46f, &(0x7f0000001200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000c000080080000000a"], 0x1c}], 0x1}, 0x44046) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000002c0)=r1) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x228045c, &(0x7f0000000340)={[{@nodelalloc}], [{@flag='posixacl'}]}, 0x1, 0x23b, &(0x7f0000000800)="$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") (async) r4 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r4, 0x2008001) (async) sendfile(r4, r4, 0x0, 0x7ffff000) (async) ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x3, 0x2, 0x171}) (async) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=144): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049, 0xd009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 16.607055][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 16.607071][ T28] audit: type=1400 audit(1777735186.574:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.611544][ T28] audit: type=1400 audit(1777735186.574:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.615027][ T28] audit: type=1400 audit(1777735186.574:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14475]" dev="pipefs" ino=14475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 16.618290][ T28] audit: type=1400 audit(1777735186.574:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.621001][ T28] audit: type=1400 audit(1777735186.574:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 23.910820][ T28] audit: type=1400 audit(1777735193.884:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.911873][ T279] cgroup: Unknown subsys name 'net' [ 23.934328][ T28] audit: type=1400 audit(1777735193.884:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.961654][ T28] audit: type=1400 audit(1777735193.914:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.961822][ T279] cgroup: Unknown subsys name 'devices' [ 24.101550][ T279] cgroup: Unknown subsys name 'hugetlb' [ 24.107175][ T279] cgroup: Unknown subsys name 'rlimit' [ 24.209465][ T28] audit: type=1400 audit(1777735194.174:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.232783][ T28] audit: type=1400 audit(1777735194.184:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.257710][ T28] audit: type=1400 audit(1777735194.184:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.267460][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.290277][ T28] audit: type=1400 audit(1777735194.264:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.305161][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.316152][ T28] audit: type=1400 audit(1777735194.264:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.350891][ T28] audit: type=1400 audit(1777735194.274:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.376452][ T28] audit: type=1400 audit(1777735194.274:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.183054][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.190259][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.197611][ T288] device bridge_slave_0 entered promiscuous mode [ 25.204703][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.211826][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.219347][ T288] device bridge_slave_1 entered promiscuous mode [ 25.254731][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.261865][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.269172][ T287] device bridge_slave_0 entered promiscuous mode [ 25.297906][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.305240][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.312763][ T289] device bridge_slave_0 entered promiscuous mode [ 25.319619][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.326687][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.334182][ T287] device bridge_slave_1 entered promiscuous mode [ 25.343827][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.350938][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.358301][ T289] device bridge_slave_1 entered promiscuous mode [ 25.394293][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.401627][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.409165][ T291] device bridge_slave_0 entered promiscuous mode [ 25.419466][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.426584][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.434275][ T291] device bridge_slave_1 entered promiscuous mode [ 25.480513][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.487705][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.495227][ T290] device bridge_slave_0 entered promiscuous mode [ 25.505242][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.512442][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.519894][ T290] device bridge_slave_1 entered promiscuous mode [ 25.635479][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.642580][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.697706][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.704803][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.712115][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.719139][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.738182][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.745361][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.752748][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.759800][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.773751][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.780932][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.788199][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.795465][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.807071][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.814247][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.821560][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.828590][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.850856][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.858209][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.865551][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.872916][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.880412][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.887680][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.895058][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.902655][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.910038][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.917752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.925399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.938584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.960663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.969012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.977515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.986005][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.993116][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.001498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.010166][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.017218][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.036697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.045474][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.052653][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.060289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.068652][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.075725][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.083992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.092028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.111088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.119321][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.126474][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.153899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.162543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.170589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.178715][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.185779][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.193502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.201809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.209857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.222764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.230317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.253204][ T288] device veth0_vlan entered promiscuous mode [ 26.270679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.279821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.288106][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.295594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.303043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.311891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.320419][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.327467][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.334940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.343009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.351103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.359451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.367712][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.374750][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.382312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.390936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.399066][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.406115][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.413536][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.421903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.430141][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.437157][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.444551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.452659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.460801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.468777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.476834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.485228][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.493731][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.501191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.511821][ T287] device veth0_vlan entered promiscuous mode [ 26.531375][ T289] device veth0_vlan entered promiscuous mode [ 26.542673][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.550848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.558978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.567399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.575690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.584111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.592189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.600487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.608531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.616468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.624525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.632146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.640230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.647586][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.657103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.665448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.675651][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.684112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.696795][ T288] device veth1_macvtap entered promiscuous mode [ 26.704692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.713207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.721669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.731330][ T287] device veth1_macvtap entered promiscuous mode [ 26.740496][ T289] device veth1_macvtap entered promiscuous mode [ 26.752287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.760464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.768115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.776506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.787363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.795095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.804261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.812933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.832141][ T291] device veth0_vlan entered promiscuous mode [ 26.842393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.850951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.859283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.868135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.877196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.885783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.894751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.903909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.912450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.920929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.930700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.939113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.956451][ T290] device veth0_vlan entered promiscuous mode [ 26.963439][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 26.973062][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.981722][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.990415][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.997866][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.027542][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.039314][ T313] loop4: detected capacity change from 0 to 512 [ 27.059816][ T290] device veth1_macvtap entered promiscuous mode [ 27.070295][ T291] device veth1_macvtap entered promiscuous mode [ 27.100563][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.126868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.150282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.161367][ T316] loop1: detected capacity change from 0 to 4096 [ 27.169481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.179285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.190585][ T316] EXT4-fs: dax option not supported [ 27.196614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.206302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.301524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.312265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.425353][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.822567][ T337] ======================================================= [ 27.822567][ T337] WARNING: The mand mount option has been deprecated and [ 27.822567][ T337] and is ignored by this kernel. Remove the mand [ 27.822567][ T337] option from the mount to silence this warning. [ 27.822567][ T337] ======================================================= [ 27.893270][ T337] loop3: detected capacity change from 0 to 256 [ 27.902183][ T337] FAT-fs (loop3): Unrecognized mount option "nonumtail=0" or missing value [ 27.954313][ T326] syz.1.2 (326) used greatest stack depth: 22824 bytes left [ 28.359547][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.468303][ T335] loop2: detected capacity change from 0 to 40427 [ 28.483499][ T335] F2FS-fs (loop2): invalid crc value [ 28.495890][ T335] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.514933][ T335] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 28.526560][ T335] F2FS-fs (loop2): Start checkpoint disabled! [ 28.560169][ T335] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 28.568568][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 28.584096][ T335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 28.587786][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.595623][ T349] loop3: detected capacity change from 0 to 1024 [ 28.619880][ T349] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.632298][ T6] usb 1-1: config 3 has an invalid interface number: 67 but max is 0 [ 28.649642][ T6] usb 1-1: config 3 has no interface number 0 [ 28.658499][ T6] usb 1-1: config 3 interface 67 has no altsetting 0 [ 28.677264][ T6] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=f4.60 [ 28.694630][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.705656][ T6] usb 1-1: Product: syz [ 28.709971][ T6] usb 1-1: Manufacturer: syz [ 28.714695][ T6] usb 1-1: SerialNumber: syz [ 28.727486][ T349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.811532][ T328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.847937][ T291] EXT4-fs (loop3): unmounting filesystem. [ 28.921419][ T358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 29.330986][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 29.331003][ T28] audit: type=1400 audit(1777735199.294:137): avc: denied { create } for pid=334 comm="syz.2.7" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.337077][ T6] usb 1-1: bad CDC descriptors [ 29.340458][ T28] audit: type=1400 audit(1777735199.294:138): avc: denied { read write } for pid=334 comm="syz.2.7" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.375060][ T6] usb 1-1: unsupported MDLM descriptors [ 29.400623][ T28] audit: type=1400 audit(1777735199.294:139): avc: denied { open } for pid=334 comm="syz.2.7" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.425120][ T28] audit: type=1400 audit(1777735199.294:140): avc: denied { write open } for pid=334 comm="syz.2.7" path="/1/file0/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.118507][ T328] usb 5-1: Using ep0 maxpacket: 8 [ 31.129743][ T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 31.142264][ T28] audit: type=1400 audit(1777735199.334:141): avc: denied { create } for pid=361 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.297633][ T328] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 31.698529][ T6] usb 1-1: USB disconnect, device number 2 [ 31.732522][ T328] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 31.743546][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.755978][ T328] usb 5-1: config 0 descriptor?? [ 31.761350][ T328] usb 5-1: can't set config #0, error -71 [ 31.767095][ T367] loop3: detected capacity change from 0 to 4096 [ 31.767531][ T367] ext4: Unknown parameter 'fsmagic' [ 31.785453][ T308] kworker/u4:3: attempt to access beyond end of device [ 31.785453][ T308] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 31.790408][ T371] loop0: detected capacity change from 0 to 4096 [ 31.806528][ T28] audit: type=1400 audit(1777735199.344:142): avc: denied { create } for pid=361 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.822367][ T328] usb 5-1: USB disconnect, device number 2 [ 31.825782][ T28] audit: type=1400 audit(1777735199.344:143): avc: denied { append } for pid=361 comm="syz.3.13" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.855125][ T315] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.870215][ T374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 31.879090][ T28] audit: type=1400 audit(1777735201.344:144): avc: denied { write } for pid=363 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.887467][ T371] EXT4-fs: dax option not supported [ 31.899584][ T28] audit: type=1400 audit(1777735201.344:145): avc: denied { nlmsg_read } for pid=363 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.007378][ T379] netlink: 'syz.2.17': attribute type 5 has an invalid length. [ 32.040244][ T28] audit: type=1400 audit(1777735201.734:146): avc: denied { read } for pid=372 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.309598][ T386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 33.363043][ T387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 33.473874][ T390] loop4: detected capacity change from 0 to 8192 [ 33.511391][ T383] loop1: detected capacity change from 0 to 40427 [ 33.567726][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.577222][ T383] F2FS-fs (loop1): invalid crc value [ 33.577768][ T390] loop4: p1 < > p3 p4 [ 33.588124][ T390] loop4: p3 start 201326592 is beyond EOD, truncated [ 33.611106][ T383] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.617575][ T390] loop4: p4 size 33554432 extends beyond EOD, truncated [ 33.652317][ T103] loop4: p1 < > p3 p4 [ 33.657052][ T103] loop4: p3 start 201326592 is beyond EOD, truncated [ 33.674340][ T103] loop4: p4 size 33554432 extends beyond EOD, truncated [ 33.695649][ T383] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 33.717015][ T392] loop3: detected capacity change from 0 to 32768 [ 33.727061][ T383] F2FS-fs (loop1): Start checkpoint disabled! [ 33.733735][ T383] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 33.740093][ T289] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 33.741132][ T345] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.748125][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.748209][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.748230][ T315] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 33.748401][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.748422][ T315] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 33.748512][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.748533][ T315] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 33.748621][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.748642][ T315] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 33.748741][ T315] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.759536][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 33.788895][ T345] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.807475][ T383] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 33.819938][ T315] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 33.897664][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 33.899549][ T345] Buffer I/O error on dev loop4p4, logical block 1008, async page read [ 33.920113][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.963713][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.983267][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.037426][ T345] udevd[345]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.038420][ T401] netlink: 'syz.3.25': attribute type 3 has an invalid length. [ 34.048527][ T315] udevd[315]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.055293][ T6] usb 3-1: SerialNumber: syz [ 34.073422][ T382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.081348][ T6] usb 3-1: bad CDC descriptors [ 34.893779][ T345] udevd[345]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.905844][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 34.905860][ T28] audit: type=1400 audit(1777735204.874:156): avc: denied { write } for pid=406 comm="syz.0.26" name="001" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.059509][ C0] sched: RT throttling activated [ 35.090766][ T315] udevd[315]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.406539][ T388] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.417390][ T410] bridge0: port 3(vlan2) entered blocking state [ 35.430253][ T28] audit: type=1400 audit(1777735205.374:157): avc: denied { connect } for pid=406 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.436476][ T410] bridge0: port 3(vlan2) entered disabled state [ 35.450360][ T308] kworker/u4:3: attempt to access beyond end of device [ 35.450360][ T308] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 35.456611][ T410] device vlan2 entered promiscuous mode [ 35.479769][ T410] device dummy0 entered promiscuous mode [ 35.485648][ T410] bridge0: port 3(vlan2) entered blocking state [ 35.491986][ T410] bridge0: port 3(vlan2) entered forwarding state [ 35.498629][ T28] audit: type=1400 audit(1777735205.384:158): avc: denied { execute } for pid=400 comm="syz.3.25" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.605757][ T414] loop1: detected capacity change from 0 to 4096 [ 35.612903][ T414] ext4: Unknown parameter 'fsmagic' [ 35.620708][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.632230][ T388] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.641370][ T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.656477][ T388] usb 5-1: config 0 descriptor?? [ 35.676211][ T416] loop1: detected capacity change from 0 to 512 [ 35.684296][ T416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.692863][ T416] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.700973][ T416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 35.710109][ T416] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 35.719738][ T416] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 35.728474][ T416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.928812][ T419] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.28: dx entry: limit 65535 != root limit 120 [ 35.940958][ T419] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.28: Corrupt directory, running e2fsck is recommended [ 36.107425][ T388] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 36.118491][ T388] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 36.150850][ T422] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 36.174410][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.186729][ T28] audit: type=1400 audit(1777735206.154:159): avc: denied { write } for pid=421 comm="syz.3.29" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 36.211653][ T388] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 36.211736][ T28] audit: type=1400 audit(1777735206.184:160): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=620 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.245973][ T28] audit: type=1400 audit(1777735206.184:161): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=620 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.269361][ T28] audit: type=1400 audit(1777735206.184:162): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=620 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.448734][ T408] syz.2.21 (408) used greatest stack depth: 21472 bytes left [ 36.456305][ T60] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 36.468179][ T24] usb 3-1: USB disconnect, device number 2 [ 36.496052][ T430] loop3: detected capacity change from 0 to 128 [ 36.534856][ T428] loop2: detected capacity change from 0 to 4096 [ 36.552510][ T428] EXT4-fs: dax option not supported [ 36.574368][ T28] audit: type=1400 audit(1777735206.544:163): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.588466][ T426] loop0: detected capacity change from 0 to 40427 [ 36.595654][ T287] EXT4-fs (loop1): unmounting filesystem. [ 36.615522][ T28] audit: type=1400 audit(1777735206.574:164): avc: denied { mount } for pid=429 comm="syz.3.32" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.709396][ T28] audit: type=1400 audit(1777735206.654:165): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.725781][ T433] loop1: detected capacity change from 0 to 512 [ 36.733975][ T388] usb 5-1: USB disconnect, device number 3 [ 36.741658][ T426] F2FS-fs (loop0): invalid crc value [ 36.749070][ T433] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.764254][ T426] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.770993][ T433] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 36.781447][ T433] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 36.835615][ T438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 36.863682][ T426] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 36.875752][ T433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 36.921261][ T433] System zones: 0-2, 18-18, 34-34 [ 36.948454][ T426] F2FS-fs (loop0): Start checkpoint disabled! [ 36.959226][ T433] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.33: bad orphan inode 15 [ 36.975190][ T433] ext4_test_bit(bit=14, block=18) = 1 [ 36.980786][ T433] is_bad_inode(inode)=0 [ 36.984972][ T433] NEXT_ORPHAN(inode)=2264924160 [ 36.990148][ T433] max_ino=32 [ 36.993451][ T433] i_nlink=0 [ 36.996801][ T433] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #15: comm syz.1.33: corrupted inode contents [ 37.007280][ T426] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 37.008764][ T433] EXT4-fs error (device loop1): ext4_dirty_inode:6135: inode #15: comm syz.1.33: mark_inode_dirty error [ 37.016165][ T328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.030057][ T433] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #15: comm syz.1.33: corrupted inode contents [ 37.047172][ T433] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2945: inode #15: comm syz.1.33: mark_inode_dirty error [ 37.047250][ T426] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 37.070278][ T433] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2948: inode #15: comm syz.1.33: mark inode dirty (error -117) [ 37.085254][ T433] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 37.104749][ T433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.385335][ T328] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 37.394204][ T328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.406661][ T328] usb 4-1: config 0 has no interface number 0 [ 37.416759][ T328] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 37.426679][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.821493][ T328] usb 4-1: Product: syz [ 37.825725][ T328] usb 4-1: Manufacturer: syz [ 37.830562][ T328] usb 4-1: SerialNumber: syz [ 37.836082][ T328] usb 4-1: config 0 descriptor?? [ 38.491507][ T328] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 38.512508][ T328] usb 4-1: No valid video chain found. [ 38.559849][ T8] kworker/u4:0: attempt to access beyond end of device [ 38.559849][ T8] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 38.688493][ T457] loop0: detected capacity change from 0 to 512 [ 38.717081][ T457] EXT4-fs: Ignoring removed i_version option [ 38.737682][ T457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.746523][ T457] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.837012][ T457] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.37: bad orphan inode 1 [ 38.857557][ T459] loop2: detected capacity change from 0 to 4096 [ 38.875586][ T459] EXT4-fs: dax option not supported [ 38.881159][ T457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.102913][ T468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 39.393223][ T288] EXT4-fs (loop0): unmounting filesystem. [ 39.420097][ T471] netlink: 'syz.0.40': attribute type 3 has an invalid length. [ 39.754565][ T292] usb 4-1: USB disconnect, device number 2 [ 39.869209][ T447] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 39.898102][ T478] loop4: detected capacity change from 0 to 8192 [ 39.942076][ T287] EXT4-fs (loop1): unmounting filesystem. [ 39.966331][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 39.966347][ T28] audit: type=1400 audit(1777735209.934:188): avc: denied { ioctl } for pid=479 comm="syz.1.44" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16446 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.998537][ T328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.119563][ T292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.132228][ T28] audit: type=1400 audit(1777735210.104:189): avc: denied { block_suspend } for pid=479 comm="syz.1.44" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.179532][ T328] usb 3-1: Using ep0 maxpacket: 16 [ 40.185910][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.197114][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.207103][ T328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.220267][ T328] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.229674][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.238886][ T328] usb 3-1: config 0 descriptor?? [ 40.299527][ T292] usb 4-1: Using ep0 maxpacket: 32 [ 40.307950][ T292] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 40.317862][ T292] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.319544][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.331751][ T292] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.347582][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.355641][ T292] usb 4-1: SerialNumber: syz [ 40.361461][ T475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 40.369335][ T292] usb 4-1: bad CDC descriptors [ 40.519576][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 40.526290][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 40.537483][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 40.550467][ T24] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 40.559598][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.568600][ T24] usb 1-1: config 0 descriptor?? [ 40.573926][ T482] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 40.674784][ T328] microsoft 0003:045E:07DA.0002: unknown main item tag 0x6 [ 40.682444][ T328] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 40.690700][ T328] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 40.699860][ T486] loop4: detected capacity change from 0 to 16 [ 40.702516][ T328] microsoft 0003:045E:07DA.0002: no inputs found [ 40.714897][ T328] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 40.766816][ T486] erofs: (device loop4): mounted with root inode @ nid 36. [ 41.006835][ T28] audit: type=1400 audit(1777735210.974:190): avc: denied { unlink } for pid=485 comm="syz.4.46" name="#5" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.035031][ T328] usb 3-1: USB disconnect, device number 3 [ 41.117456][ T24] hid (null): report_id 0 is invalid [ 41.123238][ T24] hid (null): invalid report_size 385875970 [ 41.130113][ T24] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.137522][ T24] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.145544][ T24] saitek 0003:06A3:0CCD.0003: collection stack underflow [ 41.153199][ T24] saitek 0003:06A3:0CCD.0003: item 0 0 0 12 parsing failed [ 41.160638][ T24] saitek 0003:06A3:0CCD.0003: parse failed [ 41.166711][ T24] saitek: probe of 0003:06A3:0CCD.0003 failed with error -22 [ 41.177669][ T28] audit: type=1400 audit(1777735211.144:191): avc: denied { connect } for pid=485 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.202281][ T28] audit: type=1400 audit(1777735211.164:192): avc: denied { read } for pid=485 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.224278][ T492] loop1: detected capacity change from 0 to 4096 [ 41.231215][ T492] EXT4-fs: dax option not supported [ 41.379168][ T292] usb 1-1: USB disconnect, device number 3 [ 41.459762][ T494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 41.676341][ T28] audit: type=1400 audit(1777735211.644:193): avc: denied { read write } for pid=495 comm="syz.4.48" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.700423][ T28] audit: type=1400 audit(1777735211.644:194): avc: denied { open } for pid=495 comm="syz.4.48" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.724532][ T28] audit: type=1400 audit(1777735211.644:195): avc: denied { ioctl } for pid=495 comm="syz.4.48" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.751329][ T28] audit: type=1400 audit(1777735211.644:196): avc: denied { set_context_mgr } for pid=495 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 41.771439][ T28] audit: type=1400 audit(1777735211.674:197): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.130054][ T499] loop0: detected capacity change from 0 to 40427 [ 42.143032][ T499] F2FS-fs (loop0): invalid crc value [ 42.149871][ T499] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.181644][ T499] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 42.203727][ T499] F2FS-fs (loop0): Start checkpoint disabled! [ 42.210738][ T499] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 42.223052][ T499] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 43.216508][ T60] usb 4-1: USB disconnect, device number 3 [ 43.335713][ T510] loop3: detected capacity change from 0 to 4096 [ 44.429421][ T327] kworker/u4:5: attempt to access beyond end of device [ 44.429421][ T327] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 44.444912][ T520] loop3: detected capacity change from 0 to 4096 [ 44.455005][ T520] EXT4-fs: dax option not supported [ 44.489628][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.613824][ T524] loop0: detected capacity change from 0 to 256 [ 44.624390][ T524] exfat: Unknown parameter '18446744073709551615' [ 44.679543][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 44.686095][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 44.706518][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.750477][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.777327][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.802490][ T24] usb 5-1: SerialNumber: syz [ 44.832806][ T512] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 44.854718][ T524] loop0: detected capacity change from 0 to 512 [ 44.863011][ T24] usb 5-1: bad CDC descriptors [ 44.877210][ T524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.899654][ T524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.925698][ T524] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.56: invalid indirect mapped block 9 (level 0) [ 44.949281][ T524] EXT4-fs (loop0): 1 truncate cleaned up [ 44.959140][ T524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.078008][ T288] EXT4-fs (loop0): unmounting filesystem. [ 45.101373][ T534] raw_sendmsg: syz.1.59 forgot to set AF_INET. Fix it! [ 45.154352][ T537] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.429674][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.615698][ T24] usb 1-1: device descriptor read/64, error -71 [ 45.794178][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 45.794194][ T28] audit: type=1400 audit(1777735215.764:203): avc: denied { setopt } for pid=539 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.841246][ T544] loop1: detected capacity change from 0 to 128 [ 45.855184][ T544] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.864360][ T544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.865053][ T28] audit: type=1400 audit(1777735215.764:204): avc: denied { connect } for pid=539 comm="syz.3.61" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.873095][ T544] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.903388][ T24] usb 1-1: device descriptor read/64, error -71 [ 45.944471][ T544] fscrypt: AES-256-XTS using blk-crypto-fallback [ 45.988754][ T28] audit: type=1400 audit(1777735215.954:205): avc: denied { setattr } for pid=543 comm="syz.1.63" name="file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.017988][ T287] EXT4-fs (loop1): unmounting filesystem. [ 46.071207][ T553] xt_hashlimit: size too large, truncated to 1048576 [ 46.146720][ T28] audit: type=1400 audit(1777735216.114:206): avc: denied { getopt } for pid=552 comm="syz.1.64" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.199596][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.216532][ T28] audit: type=1400 audit(1777735216.164:207): avc: denied { map } for pid=552 comm="syz.1.64" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.253738][ T558] netlink: 'syz.3.66': attribute type 16 has an invalid length. [ 46.262734][ T28] audit: type=1400 audit(1777735216.164:208): avc: denied { ioctl } for pid=552 comm="syz.1.64" path="socket:[17601]" dev="sockfs" ino=17601 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.273850][ T558] netlink: 'syz.3.66': attribute type 17 has an invalid length. [ 46.309911][ T28] audit: type=1400 audit(1777735216.164:209): avc: denied { read write } for pid=552 comm="syz.1.64" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.322217][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 46.349539][ T24] usb 1-1: device descriptor read/64, error -71 [ 46.360013][ T28] audit: type=1400 audit(1777735216.164:210): avc: denied { open } for pid=552 comm="syz.1.64" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.374496][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 46.415017][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 46.432323][ T558] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.585757][ T560] loop3: detected capacity change from 0 to 512 [ 46.619656][ T24] usb 1-1: device descriptor read/64, error -71 [ 46.663390][ T388] usb 5-1: USB disconnect, device number 4 [ 46.670615][ T564] xt_hashlimit: size too large, truncated to 1048576 [ 46.739741][ T24] usb usb1-port1: attempt power cycle [ 46.953310][ T562] loop1: detected capacity change from 0 to 40427 [ 46.985958][ T562] F2FS-fs (loop1): invalid crc value [ 47.000464][ T562] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.079529][ T562] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 47.103311][ T562] F2FS-fs (loop1): Start checkpoint disabled! [ 47.119999][ T562] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 47.139598][ T562] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 47.149560][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.200614][ T24] usb 1-1: device descriptor read/8, error -71 [ 47.238725][ T558] syz.3.66 (558) used greatest stack depth: 21088 bytes left [ 47.410950][ T24] usb 1-1: device descriptor read/8, error -71 [ 47.993098][ T518] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.149567][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 48.157259][ T518] usb 5-1: device descriptor read/64, error -71 [ 48.347945][ T8] kworker/u4:0: attempt to access beyond end of device [ 48.347945][ T8] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 48.490331][ T518] usb 5-1: device descriptor read/64, error -71 [ 48.629616][ T24] usb 1-1: device not accepting address 7, error -71 [ 48.651377][ T24] usb usb1-port1: unable to enumerate USB device [ 48.679462][ T572] loop3: detected capacity change from 0 to 40427 [ 48.719162][ T572] F2FS-fs (loop3): invalid crc value [ 48.754122][ T572] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.799660][ T518] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.821416][ T572] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 48.856805][ T572] F2FS-fs (loop3): Start checkpoint disabled! [ 48.863614][ T28] audit: type=1400 audit(1777735218.834:211): avc: denied { name_bind } for pid=580 comm="syz.1.72" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.885842][ T572] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 48.913574][ T572] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 48.959665][ T518] usb 5-1: device descriptor read/64, error -71 [ 48.994038][ T586] loop1: detected capacity change from 0 to 4096 [ 49.005807][ T586] EXT4-fs: dax option not supported [ 49.122557][ T28] audit: type=1400 audit(1777735219.094:212): avc: denied { read write } for pid=588 comm="syz.0.75" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.249572][ T518] usb 5-1: device descriptor read/64, error -71 [ 49.762917][ T518] usb usb5-port1: attempt power cycle [ 50.147927][ T589] loop0: detected capacity change from 0 to 2048 [ 50.153066][ T8] kworker/u4:0: attempt to access beyond end of device [ 50.153066][ T8] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.182694][ T589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.191397][ T518] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.220677][ T518] usb 5-1: device descriptor read/8, error -71 [ 50.230315][ T601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 50.321861][ T589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.337709][ T589] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.360216][ T589] EXT4-fs (loop0): unmounting filesystem. [ 50.393745][ T609] can0: slcan on ttyS3. [ 50.439761][ T610] can0 (unregistered): slcan off ttyS3. [ 50.445972][ T610] Falling back ldisc for ttyS3. [ 50.480380][ T518] usb 5-1: device descriptor read/8, error -71 [ 50.839531][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.022126][ T24] usb 4-1: config 4 has an invalid interface number: 109 but max is 2 [ 51.041514][ T24] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 51.155781][ T518] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.494268][ T24] usb 4-1: config 4 has an invalid interface number: 135 but max is 2 [ 51.502914][ T518] usb 5-1: Using ep0 maxpacket: 32 [ 51.508120][ T24] usb 4-1: config 4 has an invalid interface number: 33 but max is 2 [ 51.525626][ T24] usb 4-1: config 4 has no interface number 0 [ 51.534513][ T518] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 51.534632][ T619] loop1: detected capacity change from 0 to 256 [ 51.549561][ T518] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.564213][ T24] usb 4-1: config 4 has no interface number 1 [ 51.570741][ T24] usb 4-1: config 4 has no interface number 2 [ 51.577000][ T24] usb 4-1: config 4 interface 109 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 51.589445][ T24] usb 4-1: config 4 interface 109 altsetting 3 endpoint 0x3 has invalid maxpacket 1511, setting to 1024 [ 51.601886][ T518] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.611052][ T518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.619216][ T24] usb 4-1: config 4 interface 109 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 51.629563][ T518] usb 5-1: SerialNumber: syz [ 51.635147][ T613] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 51.635290][ T24] usb 4-1: config 4 interface 109 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 51.652733][ T518] usb 5-1: bad CDC descriptors [ 51.664478][ T24] usb 4-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0xF9, skipping [ 51.675368][ T24] usb 4-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 51.686346][ T24] usb 4-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 51.697218][ T24] usb 4-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 51.745126][ T24] usb 4-1: config 4 interface 109 altsetting 3 has a duplicate endpoint with address 0x8A, skipping [ 51.766570][ T24] usb 4-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 51.787551][ T24] usb 4-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x17, skipping [ 51.808560][ T24] usb 4-1: config 4 interface 109 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 51.819452][ T24] usb 4-1: config 4 interface 109 altsetting 3 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 51.842914][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 51.922970][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 51.934085][ T24] usb 4-1: config 4 interface 135 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 51.944907][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 51.955743][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 51.973902][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 51.995028][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 52.006006][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 52.024621][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 52.063581][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 52.127549][ T24] usb 4-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 52.230066][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 52.331911][ T621] loop0: detected capacity change from 0 to 40427 [ 52.346466][ T621] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 52.355546][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 52.360879][ T621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 52.374535][ T621] F2FS-fs (loop0): Image doesn't support compression [ 52.377854][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 52.390049][ T621] F2FS-fs (loop0): Image doesn't support compression [ 52.392108][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 52.409794][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 52.419834][ T621] F2FS-fs (loop0): invalid crc value [ 52.420511][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 52.426932][ T621] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.437229][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 52.458629][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 52.469446][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 52.480161][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 52.497032][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 52.512637][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 52.524671][ T24] usb 4-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 52.535564][ T621] F2FS-fs (loop0): Start checkpoint disabled! [ 52.541981][ T24] usb 4-1: config 4 interface 109 has no altsetting 0 [ 52.548931][ T24] usb 4-1: config 4 interface 135 has no altsetting 0 [ 52.555845][ T24] usb 4-1: config 4 interface 33 has no altsetting 0 [ 52.562658][ T621] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 52.571021][ T315] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.581109][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 52.581123][ T28] audit: type=1400 audit(1777735222.544:217): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.607658][ T621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 52.612450][ T626] 9pnet: Could not find request transport: f`}$no=0x0000000000000004 [ 52.616921][ T621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 52.631997][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=1b.df [ 52.641447][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.650023][ T24] usb 4-1: Product: ‸ [ 52.654260][ T24] usb 4-1: Manufacturer: ࠬ [ 52.660630][ T606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.660721][ T28] audit: type=1400 audit(1777735222.624:218): avc: denied { create } for pid=620 comm="syz.0.84" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 52.668141][ T606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.744441][ T28] audit: type=1400 audit(1777735222.714:219): avc: denied { remove_name } for pid=620 comm="syz.0.84" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.788561][ T28] audit: type=1400 audit(1777735222.714:220): avc: denied { rename } for pid=620 comm="syz.0.84" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.835010][ T8] kworker/u4:0: attempt to access beyond end of device [ 52.835010][ T8] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 52.836585][ T628] loop1: detected capacity change from 0 to 256 [ 52.859133][ T628] exfat: Unknown parameter '0x0000000000000000' [ 52.865737][ T28] audit: type=1400 audit(1777735222.714:221): avc: denied { unlink } for pid=620 comm="syz.0.84" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 52.909473][ T621] VFS:Filesystem freeze failed [ 52.933564][ T315] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.999220][ T630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 53.014285][ T630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'. [ 53.014376][ T606] loop3: detected capacity change from 0 to 512 [ 53.034504][ T630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'. [ 53.051097][ T606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.093016][ T606] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.110552][ T606] EXT4-fs (loop3): 1 truncate cleaned up [ 53.128293][ T606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.144198][ T28] audit: type=1400 audit(1777735223.114:222): avc: denied { setattr } for pid=605 comm="syz.3.79" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.182418][ T24] usb 4-1: USB disconnect, device number 4 [ 53.194774][ T28] audit: type=1400 audit(1777735223.164:223): avc: denied { ioctl } for pid=641 comm="syz.1.91" path="socket:[17799]" dev="sockfs" ino=17799 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.239719][ T28] audit: type=1400 audit(1777735223.164:224): avc: denied { read } for pid=641 comm="syz.1.91" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.273698][ T28] audit: type=1400 audit(1777735223.164:225): avc: denied { open } for pid=641 comm="syz.1.91" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.299352][ T28] audit: type=1400 audit(1777735223.234:226): avc: denied { write } for pid=641 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.389826][ T518] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 53.579568][ T518] usb 1-1: Using ep0 maxpacket: 16 [ 53.586478][ T518] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.595220][ T518] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 53.605668][ T518] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.616562][ T518] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 53.626004][ T518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.634342][ T518] usb 1-1: Product: ﳿ [ 53.638645][ T518] usb 1-1: Manufacturer: ᐇ [ 53.643633][ T518] usb 1-1: SerialNumber:   [ 53.769598][ T317] usb 5-1: USB disconnect, device number 8 [ 53.810287][ T647] input: syz0 as /devices/virtual/input/input6 [ 53.825069][ T647] loop4: detected capacity change from 0 to 512 [ 53.839643][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 53.850044][ T647] EXT4-fs: Ignoring removed i_version option [ 53.854254][ T518] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 53.866650][ T647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.866953][ T518] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 53.899581][ T647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.922533][ T647] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 53.943657][ T291] EXT4-fs (loop3): unmounting filesystem. [ 54.019572][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 54.026231][ T24] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 54.043301][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 54.044447][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 54.062900][ T636] loop0: detected capacity change from 0 to 128 [ 54.080589][ T636] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.092822][ T647] loop4: detected capacity change from 0 to 8192 [ 54.100011][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.103234][ T636] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.108360][ T24] usb 2-1: Product: syz [ 54.123533][ T24] usb 2-1: Manufacturer: syz [ 54.128249][ T24] usb 2-1: SerialNumber: syz [ 54.134334][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 54.196146][ T518] usb 1-1: unknown interface protocol 0x9, assuming v1 [ 54.205296][ T518] usb 1-1: cannot find UAC_HEADER [ 54.213550][ T518] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 54.222360][ T518] usb 1-1: USB disconnect, device number 8 [ 54.429966][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.598185][ T654] mmap: syz.1.92 (654) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.148180][ T656] loop4: detected capacity change from 0 to 40427 [ 55.167231][ T667] loop3: detected capacity change from 0 to 256 [ 55.175849][ T656] F2FS-fs (loop4): invalid crc value [ 55.207315][ T656] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.278523][ T656] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 55.293033][ T656] F2FS-fs (loop4): Start checkpoint disabled! [ 55.300384][ T656] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 55.324421][ T656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 55.371827][ T677] FAULT_INJECTION: forcing a failure. [ 55.371827][ T677] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.385119][ T677] CPU: 1 PID: 677 Comm: syz.3.103 Not tainted syzkaller #0 [ 55.392435][ T677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 55.402695][ T677] Call Trace: [ 55.406063][ T677] [ 55.409010][ T677] __dump_stack+0x21/0x24 [ 55.413371][ T677] dump_stack_lvl+0x110/0x170 [ 55.418082][ T677] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.423144][ T677] dump_stack+0x15/0x24 [ 55.427328][ T677] should_fail_ex+0x3d4/0x520 [ 55.432030][ T677] should_fail+0xb/0x10 [ 55.436247][ T677] should_fail_usercopy+0x1a/0x20 [ 55.441289][ T677] _copy_to_user+0x1e/0x90 [ 55.445733][ T677] bpf_prog_test_run_syscall+0x35c/0x4f0 [ 55.451405][ T677] ? __fget_files+0x2d5/0x330 [ 55.456127][ T677] ? __cfi_bpf_prog_test_run_syscall+0x10/0x10 [ 55.462311][ T677] ? __kasan_check_write+0x14/0x20 [ 55.467487][ T677] ? __cfi_bpf_prog_test_run_syscall+0x10/0x10 [ 55.473685][ T677] bpf_prog_test_run+0x3e3/0x640 [ 55.478670][ T677] ? bpf_prog_query+0x270/0x270 [ 55.483644][ T677] ? selinux_bpf+0xce/0xf0 [ 55.488091][ T677] ? security_bpf+0x93/0xb0 [ 55.492628][ T677] __sys_bpf+0x5ee/0x850 [ 55.496895][ T677] ? bpf_link_show_fdinfo+0x330/0x330 [ 55.502374][ T677] ? __cfi_ksys_write+0x10/0x10 [ 55.507272][ T677] ? debug_smp_processor_id+0x17/0x20 [ 55.512678][ T677] __x64_sys_bpf+0x7c/0x90 [ 55.517133][ T677] x64_sys_call+0x488/0x9a0 [ 55.521677][ T677] do_syscall_64+0x4c/0xa0 [ 55.526125][ T677] ? clear_bhb_loop+0x30/0x80 [ 55.530859][ T677] ? clear_bhb_loop+0x30/0x80 [ 55.535573][ T677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.541523][ T677] RIP: 0033:0x7f12c419cdd9 [ 55.545962][ T677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.565844][ T677] RSP: 002b:00007f12c5077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.574289][ T677] RAX: ffffffffffffffda RBX: 00007f12c4415fa0 RCX: 00007f12c419cdd9 [ 55.582306][ T677] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 55.590322][ T677] RBP: 00007f12c5077090 R08: 0000000000000000 R09: 0000000000000000 [ 55.598414][ T677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.606501][ T677] R13: 00007f12c4416038 R14: 00007f12c4415fa0 R15: 00007ffe9a963db8 [ 55.614512][ T677] [ 56.299115][ T665] loop0: detected capacity change from 0 to 131072 [ 56.321987][ T665] F2FS-fs (loop0): Test dummy encryption mode enabled [ 56.347426][ T665] F2FS-fs (loop0): invalid crc value [ 56.399305][ T665] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.475835][ T665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.549437][ T665] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 56.565096][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 56.571485][ T24] r8152-cfgselector 2-1: bad CDC descriptors [ 56.582889][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 56.594692][ T24] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 56.607786][ T327] kworker/u4:5: attempt to access beyond end of device [ 56.607786][ T327] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 56.699633][ T518] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.763944][ T692] loop4: detected capacity change from 0 to 128 [ 56.889713][ T518] usb 4-1: Using ep0 maxpacket: 32 [ 56.903727][ T518] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.924008][ T518] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.949545][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 56.960515][ T518] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.978370][ T518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.989543][ T518] usb 4-1: SerialNumber: syz [ 57.005651][ T681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 57.023669][ T518] usb 4-1: bad CDC descriptors [ 57.037844][ T697] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.045028][ T697] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.052773][ T697] device bridge_slave_0 entered promiscuous mode [ 57.062497][ T697] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.069678][ T697] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.077398][ T697] device bridge_slave_1 entered promiscuous mode [ 57.159660][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 57.166586][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.173817][ T697] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.184690][ T697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.192003][ T697] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.199061][ T697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.205602][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.237629][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.317984][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.334340][ T24] usb 2-1: config 0 descriptor?? [ 57.343111][ T24] hub 2-1:0.0: USB hub found [ 57.354020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.361840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.370812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.380011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.388071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.599599][ T60] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 57.662011][ T697] device veth0_vlan entered promiscuous mode [ 57.676005][ T697] device veth1_macvtap entered promiscuous mode [ 57.682371][ T24] hub 2-1:0.0: 1 port detected [ 57.701158][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.709924][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.714758][ T722] loop4: detected capacity change from 0 to 4096 [ 57.718204][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.732756][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.735250][ T722] EXT4-fs: dax option not supported [ 57.741149][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.761252][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.772170][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.800673][ T60] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 57.809268][ T60] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 57.818987][ T60] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 57.827021][ T725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.108'. [ 57.829790][ T60] usb 1-1: config 220 has no interface number 2 [ 57.838855][ T722] 9pnet_fd: Insufficient options for proto=fd [ 57.845199][ T60] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 57.852387][ T725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.108'. [ 57.864838][ T60] usb 1-1: config 220 interface 0 has no altsetting 0 [ 57.880625][ T60] usb 1-1: config 220 interface 76 has no altsetting 0 [ 57.887690][ T60] usb 1-1: config 220 interface 1 has no altsetting 0 [ 57.899729][ T725] input: syz1 as /devices/virtual/input/input8 [ 57.901723][ T60] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 57.918217][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.927341][ T60] usb 1-1: Product: syz [ 57.932498][ T60] usb 1-1: Manufacturer: syz [ 57.937410][ T60] usb 1-1: SerialNumber: syz [ 57.942746][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 57.942762][ T28] audit: type=1400 audit(1777735227.914:234): avc: denied { read write } for pid=729 comm="syz.5.117" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.952403][ T388] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 57.981002][ T10] device bridge_slave_1 left promiscuous mode [ 57.988946][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.997570][ T10] device bridge_slave_0 left promiscuous mode [ 58.000148][ T388] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.004064][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.021148][ T28] audit: type=1400 audit(1777735227.914:235): avc: denied { open } for pid=729 comm="syz.5.117" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.050104][ T10] device veth1_macvtap left promiscuous mode [ 58.064486][ T10] device veth0_vlan left promiscuous mode [ 58.095497][ T28] audit: type=1400 audit(1777735228.064:236): avc: denied { bind } for pid=688 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.116651][ T689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.125781][ T28] audit: type=1400 audit(1777735228.064:237): avc: denied { setopt } for pid=688 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.131519][ T689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.164469][ T730] xt_hashlimit: size too large, truncated to 1048576 [ 58.197067][ T730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 58.201504][ T60] usb 1-1: selecting invalid altsetting 0 [ 58.294901][ T736] loop4: detected capacity change from 0 to 512 [ 58.301473][ T60] usb 1-1: selecting invalid altsetting 0 [ 58.307276][ T60] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 58.311939][ T736] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 58.317870][ T60] usb 1-1: No valid video chain found. [ 58.332878][ T736] EXT4-fs (loop4): group descriptors corrupted! [ 58.377579][ T19] usb 2-1: USB disconnect, device number 3 [ 58.459651][ T28] audit: type=1400 audit(1777735228.404:238): avc: denied { write } for pid=729 comm="syz.5.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.496388][ T60] usb 1-1: USB disconnect, device number 9 [ 58.516020][ T740] loop4: detected capacity change from 0 to 512 [ 58.541928][ T740] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.119: iget: bad i_size value: 38620345925642 [ 58.555129][ T740] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.119: couldn't read orphan inode 15 (err -117) [ 58.567296][ T740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.608217][ T28] audit: type=1400 audit(1777735228.574:239): avc: denied { lock } for pid=739 comm="syz.4.119" path="/25/bus/cpuset.effective_cpus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.637321][ T327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:5: bg 0: block 5: invalid block bitmap [ 58.650204][ T327] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 58.663762][ T327] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.663762][ T327] [ 58.673523][ T327] EXT4-fs (loop4): Total free blocks count 0 [ 58.679576][ T327] EXT4-fs (loop4): Free/Dirty block details [ 58.685655][ T327] EXT4-fs (loop4): free_blocks=0 [ 58.690664][ T327] EXT4-fs (loop4): dirty_blocks=2992 [ 58.696001][ T327] EXT4-fs (loop4): Block reservation details [ 58.702513][ T327] EXT4-fs (loop4): i_reserved_data_blocks=2992 [ 58.720255][ T327] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 940 with error 28 [ 58.744615][ T518] usb 4-1: USB disconnect, device number 5 [ 58.851926][ T28] audit: type=1400 audit(1777735228.824:240): avc: denied { write } for pid=757 comm="syz.0.125" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.853868][ T758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.125'. [ 58.885299][ T28] audit: type=1400 audit(1777735228.824:241): avc: denied { open } for pid=757 comm="syz.0.125" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.913527][ T756] device bridge1 entered promiscuous mode [ 58.922298][ T28] audit: type=1400 audit(1777735228.854:242): avc: denied { read } for pid=757 comm="syz.0.125" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.964176][ T28] audit: type=1400 audit(1777735228.934:243): avc: denied { accept } for pid=748 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 58.994989][ T770] user requested TSC rate below hardware speed [ 59.329681][ T518] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 59.443724][ T790] loop5: detected capacity change from 0 to 40427 [ 59.454703][ T790] F2FS-fs (loop5): invalid crc value [ 59.463817][ T790] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.498454][ T790] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 59.511109][ T790] F2FS-fs (loop5): Start checkpoint disabled! [ 59.517682][ T790] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 59.519548][ T518] usb 4-1: Using ep0 maxpacket: 32 [ 59.525616][ T790] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 59.531259][ T518] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 59.553187][ T518] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 59.562450][ T518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.570684][ T518] usb 4-1: Product: syz [ 59.575005][ T518] usb 4-1: Manufacturer: syz [ 59.579770][ T518] usb 4-1: SerialNumber: syz [ 59.665489][ T518] usb 4-1: config 0 descriptor?? [ 59.671270][ T761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.402035][ T39] usb 4-1: USB disconnect, device number 6 [ 60.880693][ T8] kworker/u4:0: attempt to access beyond end of device [ 60.880693][ T8] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 61.488821][ T798] loop4: detected capacity change from 0 to 40427 [ 61.501015][ T828] loop5: detected capacity change from 0 to 512 [ 61.535221][ T798] F2FS-fs (loop4): invalid crc value [ 61.549687][ T828] Zero length message leads to an empty skb [ 61.570171][ T798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.613105][ T835] loop5: detected capacity change from 0 to 16 [ 61.647460][ T835] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 61.668553][ T798] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 61.679616][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 61.698629][ T834] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 61.710034][ T834] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 61.724240][ T834] incfs: Unexpected inode type [ 61.729164][ T798] F2FS-fs (loop4): Start checkpoint disabled! [ 61.740215][ T798] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 61.747765][ T798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 61.769876][ T697] ------------[ cut here ]------------ [ 61.775381][ T697] WARNING: CPU: 0 PID: 697 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 61.779598][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 61.783366][ T697] Modules linked in: [ 61.794805][ T697] CPU: 0 PID: 697 Comm: syz-executor Not tainted syzkaller #0 [ 61.802442][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 61.812686][ T697] RIP: 0010:drop_nlink+0xc5/0x110 [ 61.817745][ T697] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 61.837680][ T697] RSP: 0018:ffffc90000cd7ab8 EFLAGS: 00010293 [ 61.843917][ T697] RAX: ffffffff81c66755 RBX: ffff88811d435368 RCX: ffff88810fc5d100 [ 61.852018][ T697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.859538][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 61.860080][ T697] RBP: ffffc90000cd7ae0 R08: 0000000000000003 R09: 0000000000000004 [ 61.866348][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.873254][ T697] R10: dffffc0000000000 R11: fffff5200019af48 R12: dffffc0000000000 [ 61.873275][ T697] R13: 1ffff11023a86a76 R14: ffff88811d4353b0 R15: 0000000000000000 [ 61.900427][ T697] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.904996][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.909519][ T697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.909539][ T697] CR2: 00007f9e90818000 CR3: 0000000130156000 CR4: 00000000003526b0 [ 61.933889][ T697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.939670][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.941923][ T697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.963048][ T697] Call Trace: [ 61.965125][ T39] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 61.966358][ T697] [ 61.966368][ T697] shmem_rmdir+0x5b/0x90 [ 61.978933][ T837] loop1: detected capacity change from 0 to 40427 [ 61.982633][ T697] vfs_rmdir+0x393/0x500 [ 61.982664][ T697] incfs_kill_sb+0x105/0x220 [ 61.997939][ T697] deactivate_locked_super+0xb5/0x120 [ 62.003611][ T697] deactivate_super+0xaf/0xe0 [ 62.003666][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.008355][ T697] cleanup_mnt+0x474/0x500 [ 62.008379][ T697] ? __kasan_slab_free+0x11/0x20 [ 62.008403][ T697] __cleanup_mnt+0x19/0x20 [ 62.018417][ T24] usb 1-1: config 4 has an invalid interface number: 109 but max is 2 [ 62.021000][ T697] task_work_run+0x1e1/0x250 [ 62.027660][ T24] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 62.030701][ T697] ? __cfi_task_work_run+0x10/0x10 [ 62.057301][ T697] ? free_nsproxy+0x21f/0x270 [ 62.062056][ T697] do_exit+0xa35/0x2660 [ 62.066347][ T697] ? __cfi_do_exit+0x10/0x10 [ 62.071010][ T697] ? __kasan_check_write+0x14/0x20 [ 62.072286][ T39] usb 4-1: config 0 descriptor?? [ 62.076359][ T697] ? _raw_spin_lock_irq+0x95/0xf0 [ 62.081494][ T24] usb 1-1: config 4 has an invalid interface number: 135 but max is 2 [ 62.086499][ T697] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.100313][ T697] ? ksys_write+0x1e4/0x250 [ 62.104860][ T697] ? zap_other_threads+0x2c1/0x2f0 [ 62.110042][ T697] do_group_exit+0x210/0x2d0 [ 62.114684][ T697] __x64_sys_exit_group+0x3f/0x40 [ 62.119786][ T697] x64_sys_call+0x7b4/0x9a0 [ 62.120823][ T24] usb 1-1: config 4 has an invalid interface number: 33 but max is 2 [ 62.124316][ T697] do_syscall_64+0x4c/0xa0 [ 62.136948][ T697] ? clear_bhb_loop+0x30/0x80 [ 62.141690][ T697] ? clear_bhb_loop+0x30/0x80 [ 62.146393][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.149524][ T24] usb 1-1: config 4 has no interface number 0 [ 62.152359][ T697] RIP: 0033:0x7f0d3c99cdd9 [ 62.163082][ T697] Code: Unable to access opcode bytes at 0x7f0d3c99cdaf. [ 62.170167][ T697] RSP: 002b:00007ffea70afaa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 62.177401][ T24] usb 1-1: config 4 has no interface number 1 [ 62.178601][ T697] RAX: ffffffffffffffda RBX: 00007f0d3ca32180 RCX: 00007f0d3c99cdd9 [ 62.178618][ T697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 62.192572][ T24] usb 1-1: config 4 has no interface number 2 [ 62.192842][ T697] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f0d3ca32120 [ 62.209249][ T24] usb 1-1: config 4 interface 109 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 62.215051][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea70b0d60 [ 62.215071][ T697] R13: 00007f0d3ca32120 R14: 0000555555abd4e8 R15: 00007ffea70b1e30 [ 62.215089][ T697] [ 62.215094][ T697] ---[ end trace 0000000000000000 ]--- [ 62.217091][ T697] ------------[ cut here ]------------ [ 62.256113][ T697] WARNING: CPU: 0 PID: 697 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 62.264075][ T697] Modules linked in: [ 62.268017][ T697] CPU: 0 PID: 697 Comm: syz-executor Tainted: G W syzkaller #0 [ 62.277034][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.283122][ T24] usb 1-1: config 4 interface 109 altsetting 3 endpoint 0x3 has invalid maxpacket 1511, setting to 1024 [ 62.287157][ T697] RIP: 0010:drop_nlink+0xc5/0x110 [ 62.298341][ T24] usb 1-1: config 4 interface 109 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 62.303308][ T697] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 62.313935][ T24] usb 1-1: config 4 interface 109 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 62.333113][ T697] RSP: 0018:ffffc90000cd7ab8 EFLAGS: 00010293 [ 62.333139][ T697] RAX: ffffffff81c66755 RBX: ffff88811d437938 RCX: ffff88810fc5d100 [ 62.333153][ T697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.333165][ T697] RBP: ffffc90000cd7ae0 R08: 0000000000000003 R09: 0000000000000004 [ 62.333177][ T697] R10: dffffc0000000000 R11: fffff5200019af48 R12: dffffc0000000000 [ 62.333189][ T697] R13: 1ffff11023a86f30 R14: ffff88811d437980 R15: 0000000000000000 [ 62.333202][ T697] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 62.333219][ T697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.344336][ T24] usb 1-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0xF9, skipping [ 62.349167][ T697] CR2: 00007f9e9a581ff8 CR3: 0000000114e53000 CR4: 00000000003526b0 [ 62.349189][ T697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.357506][ T24] usb 1-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 62.365354][ T697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.365380][ T697] Call Trace: [ 62.365387][ T697] [ 62.365397][ T697] shmem_rmdir+0x5b/0x90 [ 62.374017][ T24] usb 1-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 62.381431][ T697] vfs_rmdir+0x393/0x500 [ 62.389938][ T24] usb 1-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 62.398619][ T697] incfs_kill_sb+0x198/0x220 [ 62.398648][ T697] deactivate_locked_super+0xb5/0x120 [ 62.405465][ T24] usb 1-1: config 4 interface 109 altsetting 3 has a duplicate endpoint with address 0x8A, skipping [ 62.415935][ T697] deactivate_super+0xaf/0xe0 [ 62.415963][ T697] cleanup_mnt+0x474/0x500 [ 62.424205][ T24] usb 1-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 62.432212][ T697] ? __kasan_slab_free+0x11/0x20 [ 62.443051][ T24] usb 1-1: config 4 interface 109 altsetting 3 has an invalid endpoint with address 0x17, skipping [ 62.450916][ T697] __cleanup_mnt+0x19/0x20 [ 62.450939][ T697] task_work_run+0x1e1/0x250 [ 62.454492][ T24] usb 1-1: config 4 interface 109 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 62.457167][ T697] ? __cfi_task_work_run+0x10/0x10 [ 62.457193][ T697] ? free_nsproxy+0x21f/0x270 [ 62.461638][ T24] usb 1-1: config 4 interface 109 altsetting 3 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 62.472127][ T697] do_exit+0xa35/0x2660 [ 62.472159][ T697] ? __cfi_do_exit+0x10/0x10 [ 62.476693][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 62.487160][ T697] ? __kasan_check_write+0x14/0x20 [ 62.487183][ T697] ? _raw_spin_lock_irq+0x95/0xf0 [ 62.487204][ T697] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 62.492078][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 62.497164][ T697] ? ksys_write+0x1e4/0x250 [ 62.497187][ T697] ? zap_other_threads+0x2c1/0x2f0 [ 62.508218][ T24] usb 1-1: config 4 interface 135 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 62.512642][ T697] do_group_exit+0x210/0x2d0 [ 62.512671][ T697] __x64_sys_exit_group+0x3f/0x40 [ 62.547933][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 62.552510][ T697] x64_sys_call+0x7b4/0x9a0 [ 62.583569][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 62.586388][ T697] do_syscall_64+0x4c/0xa0 [ 62.593664][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 62.595120][ T697] ? clear_bhb_loop+0x30/0x80 [ 62.610509][ T39] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0005/input/input10 [ 62.611159][ T697] ? clear_bhb_loop+0x30/0x80 [ 62.617462][ T39] sony 0003:054C:03D5.0005: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 62.621815][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.633144][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 62.637150][ T697] RIP: 0033:0x7f0d3c99cdd9 [ 62.652303][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 62.653006][ T697] Code: Unable to access opcode bytes at 0x7f0d3c99cdaf. [ 62.667820][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 62.673752][ T697] RSP: 002b:00007ffea70afaa8 EFLAGS: 00000246 [ 62.685225][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 62.688796][ T697] ORIG_RAX: 00000000000000e7 [ 62.688810][ T697] RAX: ffffffffffffffda RBX: 00007f0d3ca32180 RCX: 00007f0d3c99cdd9 [ 62.693332][ T24] usb 1-1: config 4 interface 135 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 62.703952][ T697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 62.703966][ T697] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f0d3ca32120 [ 62.703980][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea70b0d60 [ 62.708905][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 62.720115][ T697] R13: 00007f0d3ca32120 R14: 0000555555abd4e8 R15: 00007ffea70b1e30 [ 62.720136][ T697] [ 62.720143][ T697] ---[ end trace 0000000000000000 ]--- [ 62.878130][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 62.939907][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 62.940534][ T697] ================================================================== [ 62.955684][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 62.958712][ T697] BUG: KASAN: use-after-free in fast_dput+0x1e9/0x290 [ 62.969579][ T308] kworker/u4:3: attempt to access beyond end of device [ 62.969579][ T308] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 62.976046][ T697] Read of size 4 at addr ffff888115492cc0 by task syz-executor/697 [ 62.990153][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 62.997896][ T697] [ 62.997904][ T697] CPU: 0 PID: 697 Comm: syz-executor Tainted: G W syzkaller #0 [ 63.020338][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 63.026355][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 63.030439][ T697] Call Trace: [ 63.030455][ T697] [ 63.030463][ T697] __dump_stack+0x21/0x24 [ 63.030493][ T697] dump_stack_lvl+0x110/0x170 [ 63.056429][ T697] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.061557][ T697] ? fast_dput+0x1e9/0x290 [ 63.065981][ T697] print_address_description+0x71/0x200 [ 63.071530][ T697] print_report+0x4a/0x60 [ 63.075948][ T697] kasan_report+0x122/0x150 [ 63.080458][ T697] ? fast_dput+0x1e9/0x290 [ 63.084890][ T697] __asan_report_load4_noabort+0x14/0x20 [ 63.090644][ T697] fast_dput+0x1e9/0x290 [ 63.094998][ T697] dput+0x21/0x80 [ 63.098749][ T697] incfs_free_mount_info+0x60/0x200 [ 63.104081][ T697] incfs_kill_sb+0x1b8/0x220 [ 63.108731][ T697] deactivate_locked_super+0xb5/0x120 [ 63.114131][ T697] deactivate_super+0xaf/0xe0 [ 63.118843][ T697] cleanup_mnt+0x474/0x500 [ 63.123262][ T697] __cleanup_mnt+0x19/0x20 [ 63.127677][ T697] task_work_run+0x1e1/0x250 [ 63.132363][ T697] ? __cfi_task_work_run+0x10/0x10 [ 63.137481][ T697] ? free_nsproxy+0x21f/0x270 [ 63.142161][ T697] do_exit+0xa35/0x2660 [ 63.146325][ T697] ? __cfi_do_exit+0x10/0x10 [ 63.150939][ T697] ? __kasan_check_write+0x14/0x20 [ 63.156052][ T697] ? _raw_spin_lock_irq+0x95/0xf0 [ 63.161081][ T697] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 63.166718][ T697] ? ksys_write+0x1e4/0x250 [ 63.171223][ T697] ? zap_other_threads+0x2c1/0x2f0 [ 63.176344][ T697] do_group_exit+0x210/0x2d0 [ 63.180947][ T697] __x64_sys_exit_group+0x3f/0x40 [ 63.186155][ T697] x64_sys_call+0x7b4/0x9a0 [ 63.190660][ T697] do_syscall_64+0x4c/0xa0 [ 63.195075][ T697] ? clear_bhb_loop+0x30/0x80 [ 63.199760][ T697] ? clear_bhb_loop+0x30/0x80 [ 63.204441][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.210339][ T697] RIP: 0033:0x7f0d3c99cdd9 [ 63.214760][ T697] Code: Unable to access opcode bytes at 0x7f0d3c99cdaf. [ 63.221823][ T697] RSP: 002b:00007ffea70afaa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 63.230416][ T697] RAX: ffffffffffffffda RBX: 00007f0d3ca32180 RCX: 00007f0d3c99cdd9 [ 63.238390][ T697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 63.246364][ T697] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f0d3ca32120 [ 63.254337][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea70b0d60 [ 63.262315][ T697] R13: 00007f0d3ca32120 R14: 0000555555abd4e8 R15: 00007ffea70b1e30 [ 63.270396][ T697] [ 63.273434][ T697] [ 63.275756][ T697] Allocated by task 834: [ 63.280020][ T697] kasan_set_track+0x4b/0x70 [ 63.284789][ T697] kasan_save_alloc_info+0x25/0x30 [ 63.289991][ T697] __kasan_slab_alloc+0x72/0x80 [ 63.294842][ T697] slab_post_alloc_hook+0x4f/0x2d0 [ 63.299955][ T697] kmem_cache_alloc_lru+0x104/0x280 [ 63.305250][ T697] __d_alloc+0x34/0x6c0 [ 63.309524][ T697] d_alloc_parallel+0xe2/0x12e0 [ 63.314484][ T697] __lookup_slow+0x14f/0x410 [ 63.319094][ T697] lookup_one_len+0x19d/0x2e0 [ 63.323868][ T697] incfs_lookup_dentry+0x60/0xb0 [ 63.328832][ T697] open_or_create_special_dir+0x4f/0x1d0 [ 63.334901][ T697] incfs_mount_fs+0x42f/0x890 [ 63.339580][ T697] legacy_get_tree+0xfe/0x1a0 [ 63.344354][ T697] vfs_get_tree+0x9a/0x270 [ 63.348772][ T697] do_new_mount+0x251/0xb30 [ 63.353290][ T697] path_mount+0x659/0xfc0 [ 63.357814][ T697] __se_sys_mount+0x320/0x390 [ 63.362514][ T697] __x64_sys_mount+0xbf/0xd0 [ 63.367135][ T697] x64_sys_call+0x65d/0x9a0 [ 63.371755][ T697] do_syscall_64+0x4c/0xa0 [ 63.376283][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.382295][ T697] [ 63.384624][ T697] Freed by task 16: [ 63.388426][ T697] kasan_set_track+0x4b/0x70 [ 63.393021][ T697] kasan_save_free_info+0x31/0x50 [ 63.398056][ T697] ____kasan_slab_free+0x132/0x180 [ 63.403257][ T697] __kasan_slab_free+0x11/0x20 [ 63.408039][ T697] slab_free_freelist_hook+0xc2/0x190 [ 63.413407][ T697] kmem_cache_free+0x12d/0x300 [ 63.418366][ T697] __d_free+0x23/0x30 [ 63.422344][ T697] rcu_do_batch+0x52a/0xbc0 [ 63.426934][ T697] rcu_core+0x5c3/0xe80 [ 63.431086][ T697] rcu_core_si+0x9/0x10 [ 63.435276][ T697] handle_softirqs+0x1d7/0x600 [ 63.440069][ T697] __irq_exit_rcu+0x52/0xf0 [ 63.444621][ T697] irq_exit_rcu+0x9/0x10 [ 63.448896][ T697] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 63.454530][ T697] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 63.460609][ T697] [ 63.462933][ T697] Last potentially related work creation: [ 63.468642][ T697] kasan_save_stack+0x3a/0x60 [ 63.473323][ T697] __kasan_record_aux_stack+0xb6/0xc0 [ 63.478704][ T697] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.484528][ T697] call_rcu+0xcf/0xf90 [ 63.488601][ T697] dentry_free+0xbd/0x150 [ 63.492931][ T697] __dentry_kill+0x529/0x670 [ 63.497531][ T697] dentry_kill+0xc0/0x2a0 [ 63.502153][ T697] dput+0x42/0x80 [ 63.505806][ T697] incfs_free_mount_info+0x60/0x200 [ 63.511015][ T697] incfs_kill_sb+0x1b8/0x220 [ 63.515611][ T697] deactivate_locked_super+0xb5/0x120 [ 63.520989][ T697] deactivate_super+0xaf/0xe0 [ 63.525672][ T697] cleanup_mnt+0x474/0x500 [ 63.530086][ T697] __cleanup_mnt+0x19/0x20 [ 63.534606][ T697] task_work_run+0x1e1/0x250 [ 63.539197][ T697] do_exit+0xa35/0x2660 [ 63.543360][ T697] do_group_exit+0x210/0x2d0 [ 63.547969][ T697] __x64_sys_exit_group+0x3f/0x40 [ 63.553102][ T697] x64_sys_call+0x7b4/0x9a0 [ 63.557629][ T697] do_syscall_64+0x4c/0xa0 [ 63.562156][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.568061][ T697] [ 63.570388][ T697] Second to last potentially related work creation: [ 63.577064][ T697] kasan_save_stack+0x3a/0x60 [ 63.582111][ T697] __kasan_record_aux_stack+0xb6/0xc0 [ 63.587504][ T697] kasan_record_aux_stack_noalloc+0xb/0x10 [ 63.593311][ T697] call_rcu+0xcf/0xf90 [ 63.597417][ T697] dentry_free+0xbd/0x150 [ 63.601751][ T697] __dentry_kill+0x529/0x670 [ 63.606357][ T697] dentry_kill+0xc0/0x2a0 [ 63.610689][ T697] dput+0x42/0x80 [ 63.614328][ T697] dcache_dir_close+0x3b/0x40 [ 63.619008][ T697] __fput+0x1fc/0x8f0 [ 63.622997][ T697] ____fput+0x15/0x20 [ 63.626982][ T697] task_work_run+0x1e1/0x250 [ 63.631661][ T697] exit_to_user_mode_loop+0x9b/0xb0 [ 63.636862][ T697] exit_to_user_mode_prepare+0x87/0xd0 [ 63.642320][ T697] syscall_exit_to_user_mode+0x1a/0x30 [ 63.647878][ T697] do_syscall_64+0x58/0xa0 [ 63.652301][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.658199][ T697] [ 63.660542][ T697] The buggy address belongs to the object at ffff888115492cc0 [ 63.660542][ T697] which belongs to the cache dentry of size 208 [ 63.674281][ T697] The buggy address is located 0 bytes inside of [ 63.674281][ T697] 208-byte region [ffff888115492cc0, ffff888115492d90) [ 63.687386][ T697] [ 63.689743][ T697] The buggy address belongs to the physical page: [ 63.696166][ T697] page:ffffea0004552480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115492 [ 63.706522][ T697] flags: 0x4000000000000200(slab|zone=1) [ 63.712167][ T697] raw: 4000000000000200 ffffea0004559ac0 dead000000000002 ffff8881001ec480 [ 63.720757][ T697] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 63.729342][ T697] page dumped because: kasan: bad access detected [ 63.735751][ T697] page_owner tracks the page as allocated [ 63.741458][ T697] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 113, tgid 113 (udevd), ts 5945074111, free_ts 0 [ 63.759801][ T697] post_alloc_hook+0x1f5/0x210 [ 63.764573][ T697] prep_new_page+0x1c/0x110 [ 63.769078][ T697] get_page_from_freelist+0x2d12/0x2d80 [ 63.774626][ T697] __alloc_pages+0x1fa/0x610 [ 63.779220][ T697] alloc_slab_page+0x6e/0xf0 [ 63.783806][ T697] new_slab+0x98/0x3d0 [ 63.787875][ T697] ___slab_alloc+0x6bd/0xb20 [ 63.792567][ T697] __slab_alloc+0x5e/0xa0 [ 63.796902][ T697] kmem_cache_alloc_lru+0x144/0x280 [ 63.802280][ T697] __d_alloc+0x34/0x6c0 [ 63.806437][ T697] d_alloc+0x4b/0x260 [ 63.810508][ T697] lookup_one_qstr_excl+0xcb/0x270 [ 63.815621][ T697] do_unlinkat+0x194/0x6d0 [ 63.820042][ T697] __x64_sys_unlink+0x49/0x50 [ 63.824721][ T697] x64_sys_call+0x958/0x9a0 [ 63.829239][ T697] do_syscall_64+0x4c/0xa0 [ 63.833755][ T697] page_owner free stack trace missing [ 63.839291][ T697] [ 63.841623][ T697] Memory state around the buggy address: [ 63.847333][ T697] ffff888115492b80: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 63.855398][ T697] ffff888115492c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.863557][ T697] >ffff888115492c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 63.871696][ T697] ^ [ 63.877842][ T697] ffff888115492d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.886004][ T697] ffff888115492d80: fb fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 63.894076][ T697] ================================================================== [ 63.903109][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 63.914172][ T697] Disabling lock debugging due to kernel taint [ 63.920560][ T697] ------------[ cut here ]------------ [ 63.926032][ T697] WARNING: CPU: 1 PID: 697 at fs/dcache.c:794 fast_dput+0x210/0x290 [ 63.934049][ T697] Modules linked in: [ 63.938034][ T697] CPU: 1 PID: 697 Comm: syz-executor Tainted: G B W syzkaller #0 [ 63.946993][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 63.957162][ T697] RIP: 0010:fast_dput+0x210/0x290 [ 63.962240][ T697] Code: 9c f1 ff e9 46 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 99 fe ff ff 48 89 df e8 5a 9c f1 ff e9 8c fe ff ff e8 60 02 ac ff <0f> 0b e9 0b ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e4 fe ff [ 63.981958][ T697] RSP: 0000:ffffc90000cd7ad0 EFLAGS: 00010293 [ 63.988045][ T697] RAX: ffffffff81c573f0 RBX: ffff888115492cc0 RCX: ffff88810fc5d100 [ 63.996295][ T697] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 64.004316][ T697] RBP: ffffc90000cd7b00 R08: 0000000000000003 R09: 0000000000000004 [ 64.012318][ T697] R10: dffffc0000000000 R11: fffff5200019af4c R12: 00000000ffffff80 [ 64.020316][ T697] R13: dffffc0000000000 R14: ffff888115492d18 R15: 1ffff11022a925a3 [ 64.028304][ T697] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.037508][ T697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.044173][ T697] CR2: 00007f5d409fe000 CR3: 000000010ffaa000 CR4: 00000000003526a0 [ 64.052180][ T697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.060172][ T697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.068241][ T697] Call Trace: [ 64.071540][ T697] [ 64.074513][ T697] dput+0x21/0x80 [ 64.078160][ T697] incfs_free_mount_info+0x60/0x200 [ 64.083383][ T697] incfs_kill_sb+0x1b8/0x220 [ 64.087978][ T697] deactivate_locked_super+0xb5/0x120 [ 64.093373][ T697] deactivate_super+0xaf/0xe0 [ 64.098157][ T697] cleanup_mnt+0x474/0x500 [ 64.102636][ T697] __cleanup_mnt+0x19/0x20 [ 64.107058][ T697] task_work_run+0x1e1/0x250 [ 64.111667][ T697] ? __cfi_task_work_run+0x10/0x10 [ 64.116788][ T697] ? free_nsproxy+0x21f/0x270 [ 64.121670][ T697] do_exit+0xa35/0x2660 [ 64.125932][ T697] ? __cfi_do_exit+0x10/0x10 [ 64.130546][ T697] ? __kasan_check_write+0x14/0x20 [ 64.135662][ T697] ? _raw_spin_lock_irq+0x95/0xf0 [ 64.140704][ T697] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 64.146261][ T697] ? ksys_write+0x1e4/0x250 [ 64.150780][ T697] ? zap_other_threads+0x2c1/0x2f0 [ 64.155900][ T697] do_group_exit+0x210/0x2d0 [ 64.160525][ T697] __x64_sys_exit_group+0x3f/0x40 [ 64.165653][ T697] x64_sys_call+0x7b4/0x9a0 [ 64.170178][ T697] do_syscall_64+0x4c/0xa0 [ 64.174600][ T697] ? clear_bhb_loop+0x30/0x80 [ 64.179286][ T697] ? clear_bhb_loop+0x30/0x80 [ 64.183987][ T697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.189902][ T697] RIP: 0033:0x7f0d3c99cdd9 [ 64.194330][ T697] Code: Unable to access opcode bytes at 0x7f0d3c99cdaf. [ 64.201560][ T697] RSP: 002b:00007ffea70afaa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 64.210095][ T697] RAX: ffffffffffffffda RBX: 00007f0d3ca32180 RCX: 00007f0d3c99cdd9 [ 64.218074][ T697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 64.226074][ T697] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f0d3ca32120 [ 64.234069][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea70b0d60 [ 64.242059][ T697] R13: 00007f0d3ca32120 R14: 0000555555abd4e8 R15: 00007ffea70b1e30 [ 64.250055][ T697] [ 64.253097][ T697] ---[ end trace 0000000000000000 ]--- [ 64.267190][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 64.267206][ T28] audit: type=1400 audit(1777735234.234:254): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 64.269950][ T388] usb 4-1: USB disconnect, device number 7 [ 64.277516][ T28] audit: type=1400 audit(1777735234.244:255): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.331809][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 64.346780][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 64.359810][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 64.374400][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 64.386864][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 64.397781][ T24] usb 1-1: config 4 interface 33 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 64.410560][ T24] usb 1-1: config 4 interface 109 has no altsetting 0 [ 64.417374][ T24] usb 1-1: config 4 interface 135 has no altsetting 0 [ 64.424395][ T24] usb 1-1: config 4 interface 33 has no altsetting 0 [ 64.431177][ T28] audit: type=1400 audit(1777735234.244:256): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.433318][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=1b.df [ 64.479626][ T28] audit: type=1400 audit(1777735234.244:257): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.490404][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.519740][ T24] usb 1-1: Product: ‸ [ 64.529626][ T28] audit: type=1400 audit(1777735234.244:258): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.531510][ T24] usb 1-1: Manufacturer: ࠬ [ 64.561853][ T28] audit: type=1400 audit(1777735234.244:259): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.586929][ T24] usb 1-1: can't set config #4, error -71 [ 64.594899][ T24] usb 1-1: USB disconnect, device number 10 [ 64.601967][ T28] audit: type=1400 audit(1777735234.244:260): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.940416][ T8] device bridge_slave_1 left promiscuous mode [ 64.946595][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.954409][ T8] device bridge_slave_0 left promiscuous mode [ 64.960677][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.968973][ T8] device veth1_macvtap left promiscuous mode [ 64.975054][ T8] device veth0_vlan left promiscuous mode