last executing test programs: 14.099192573s ago: executing program 4 (id=260): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x80, 0xffffffff) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x39, 0x1e, 0xc, 0xc, 0x8, 0x4, 0x6, 0x1d, 0x1}) 14.071724036s ago: executing program 4 (id=262): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0xffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 11.0431338s ago: executing program 2 (id=269): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 10.706801007s ago: executing program 0 (id=271): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) eventfd2(0x0, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB="d500"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ppoll(&(0x7f0000000040)=[{r5, 0x6790}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000071114100000000008510000002000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r6}, 0x38) 10.585091277s ago: executing program 4 (id=272): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x131000, 0x8) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @private1}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xbc2b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 9.963788807s ago: executing program 2 (id=273): openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x8, 0x8e}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000d5962de1660a3fd4974e243900"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) 9.792507861s ago: executing program 0 (id=274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000fc0)={{0x12, 0x1, 0x288, 0xfa, 0x41, 0xb7, 0x20, 0x421, 0x4c9, 0x3cd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0xf8, 0x0, 0x1, 0x2, 0x2, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x219e, 0x1}}], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x8, 0x39, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x90}]}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x7da5, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2], 0x1) dup2(r1, r2) recvmsg(r2, &(0x7f0000000380)={&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f00000002c0)=""/110, 0x6e}], 0x2}, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.729870276s ago: executing program 2 (id=275): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @private1}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xbc2b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 8.488445185s ago: executing program 4 (id=276): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) mlockall(0x7) munlockall() mkdirat(0xffffffffffffffff, 0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/igmp\x00') sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x18e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') 7.735744376s ago: executing program 2 (id=278): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0xffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 7.481611107s ago: executing program 1 (id=280): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='limits\x00') read$FUSE(r9, &(0x7f0000002200)={0x2020}, 0x2060) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0xffffffffffffffb8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x14, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x930244bfcef6de7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r10}}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) 6.627463506s ago: executing program 0 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) unshare(0x62040200) 5.717841909s ago: executing program 0 (id=282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setregid(0x0, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = inotify_init1(0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = fsopen(0x0, 0x0) fsmount(r7, 0x0, 0x6) (async) fsmount(r7, 0x0, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2000775) (async) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2000775) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 5.717328099s ago: executing program 1 (id=283): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x8481) ioctl$LOOP_CONFIGURE(r0, 0x1277, 0x0) 5.585152309s ago: executing program 1 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe01}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x705, 0x5ae5}, @window={0x3, 0x2de, 0x7}], 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e34}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5, 0x0, 0x3}, 0xfee5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) sendto(r9, &(0x7f0000000040)="5afa3fd29bffffffe50000000000", 0xe, 0x4000846, &(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000000202010f0000000000000000020000092c000280060003400004000014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x40000) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 5.028902404s ago: executing program 4 (id=287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup2(r1, r1) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x1a7, &(0x7f0000000600)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x16d, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "00000000000000000800ee00"}, {0x4, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x2, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x8001, 0x81, 0x2123, 0x8001, 0x6]}, &(0x7f0000000000)=0x54) 4.692183781s ago: executing program 1 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f00000002c0)=[{0x0}], 0x1, 0x80, 0xffffffff) ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f0000000180)={0x39, 0x1e, 0xc, 0xc, 0x8, 0x4, 0x6, 0x1d, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 4.639834326s ago: executing program 0 (id=289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x11, 0x4, [{}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x30}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) syz_usb_connect(0x0, 0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000365b58e20ac0501854285010203010902350001020160fa0904dd11000e01000d08240201090205880824020103040040"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x9}) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)="b5305b0d35012ac607cbb78be80c0bcde57637c878c990faac801ab653d18bea2c17694a73287e50d00edcc78b70b56f5d779e7708cdd72c08f31545de17eefc457e6799f172f17921d1bdb1afaf0ecd0a4aa29f9d0de146a00194e8cf846be55fe57972cb", 0x65}, {&(0x7f0000000740)="aaac9df69aed14df009a2a718719bede70da8707a618a06c542baedb2ac63a2784dd178ec15bfcfd4b84e288ef46ff4cf2c530967a39d7be40d7d76201ffc368653cfd7e6e3717efb5458a3437203bdc7ae2d98db0e7b77ea9107ad0e6764bf44e0d3e432232141a396512f700001f000000", 0x72}, {&(0x7f0000000400)="69f0ffc43a2e0a859eac4e3609dd31d394a0cabb37df7245d62ace82018000a1f12729b20b272ac72ad60564feb63aac59b64cbefc540d57f3416a75bc1a88ab0979d9c7c0cbc17ca4a912ab646c71b30cc944da20b8ca57aec9407e5a16795ed480c38a03dac41b1d", 0x69}, {&(0x7f0000000500)="ff722dd355f5c085c9d63d628002561be4547c9a9cf7a30f5efb2a6d7b8c1ebe8e18f77d65ce0103323bb398601f0fdc704835bdd915da8812884b252d524ca2dfa2629b5c92d3d36250ea5f53c9c363fd86b3e29c373f", 0x57}, {&(0x7f0000000000)="7e8dd077e6f1b8cac9188be5e862e4d8", 0x10}, {&(0x7f0000000580)="91054adef342ec6c6d5754dd4a858261c921d9020b0325280b0c8cba15eb8e53867c8b716d6aace6b7c2b41e7a6eda376f3a7d3b837602750b76b7d325c61121509bf26049e05045458ad391e1ac53253cba12e7c46203d05f7e9401e3a94461fff144131eaa3a6695c45425362a7f1c4591d19ac9201716c20f434a87147a74299eae71cadda23ad4286e746d9cd9e65e32785f267da948e33542109ca2ce13b75a5dbfca", 0xa5}, {&(0x7f0000000640)="6928164896ed12e68071799c4a0aadf6aa2da5392403f62507742aca5bfd6eb52d46ca942de734b21773e0675b744d272489030763585902f5ddbd574e00da3a", 0x40}], 0x7, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) tee(r6, r6, 0xff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.612506888s ago: executing program 4 (id=290): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x131000, 0x8) symlinkat(&(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @private1}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xbc2b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 4.58731701s ago: executing program 3 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x12800, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0x1534, &(0x7f0000001780)="$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") mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x4, 0xff, 0x6, 0x42}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) 3.770015696s ago: executing program 1 (id=292): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0xffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r7}, 0x38) 2.667983955s ago: executing program 3 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200002, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r6, 0x2}, 0x14) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x20280, 0x170) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r8, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.649169616s ago: executing program 2 (id=294): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0xffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r8}, 0x38) 1.590077552s ago: executing program 3 (id=295): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.292100856s ago: executing program 3 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) sync_file_range(r3, 0x3, 0x9, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300008008001b0000000000ae9f20025208000d0003000000e6130c6bc84f6a9f2e220602b86de3803955c1c3dcdda6139c64ba78b0b8ad5787f2be3df2bb431bffff1baafa6b4768bf72e7cea88c1b0662ee1157a4d35c3dac0a7e1f1a087e870f0c7426c026da72b77c06901038742c18f285ff1670cd7cd157e6fe1ed0e16f62a0419fd3134b30b431d37642f1922ac80e7c62d671b10471f2c944f9a6d01bda6370727a3752"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r6 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f00000079c0)="$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") dup2(r6, r6) socket(0x2b, 0xa, 0x7f) 762.170108ms ago: executing program 1 (id=297): clock_adjtime(0x0, &(0x7f0000000040)={0x37d8, 0x40000000, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffc99a3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5}) r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000180)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 468.526832ms ago: executing program 2 (id=298): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @private1}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xbc2b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 269.826068ms ago: executing program 3 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000000)=0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) r3 = inotify_init() sendmsg$netlink(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000940)={0x28c, 0x14, 0x300, 0x70bd28, 0x25dfdbfd, "", [@generic="9870a09c64d90697ac145be2b7010b651f515a5fd9430cc69fb18bf18568e070d3cb9bc5450104e97c663973db5d1e9cf40b99b16328acb3ea1af9719a12fa8489d491ccec07152c2aca168726403a600cea427e6879b56ed4a96dc06f30eeddc613b3b35455395514404bdf4c551012e773a65bd91829e184e5f63435e89ea1a484c829d697977730b837262e25c47907baaf88447501a737ddc7881c12a22def967b9d4ab8e631c84477037d6c23e5123ddc014c1cce468a8c0dfed6a35f7aee08c61d34da291a36e5e9d5248826dc2962b2e52041", @nested={0x4, 0x83}, @nested={0x1a0, 0x61, 0x0, 0x1, [@generic="1b0fb093f49cca218a8c9bfcfc859155e290491dfa4ad0759f2a29af110e75faa46af0455ab7a0046849573334bc811e79149bb14660579ce9a12c91a4eca0afc08f45dc3b0b06c65f27b1cc0afdd6d67747ba19dda22c28e29485ed5d632b1f9123d5e53140febfc703759c4a5840e95fd8d344bad424da35aef7d3f90a3d8a4fb1f11c58271eab40a006634c4a7bb9584faa7cfdae81c3454ff8076c08453f010c509b4bf286ad0de62e4a681c659a8dd735ae428ee60b4985c81f", @typed={0xd7, 0x141, 0x0, 0x0, @str='\x00\xa8\xd5\xd3\xef\xd1R\x8f\bZA{E5\xda,\xaa\xecg\x1frde\xa7rI\xdc\x85\xd9)\xc4\x1ao\x1f&]\x9a\xb6\xbb@\x88\x89v\a\x88\x9d\xef\xf8\xe8\x12\\U~o->\x88\xe2\x1b\xf1\x1a@\xa7tiH\xc62\xbf\xa8\xafS}MG!\xb3\xf6\xa780y\x97\x1d\xa1\x82:Q\x8a\xac\x06IsC\xe7\x92\xc4l\xa9:\xa3\xf7\xec\xe4Ws\xf8\x06\x91x\a\xe6p\xbf\x1c\xa8J]\x11\x86,\xf3-B\xc0\x13X\"\xbd\x8c\xab5\xff\xeem\xa4\x8bt\xc8\xc4\x96?^`^\x8a=\xde\xed\xb9\xb6[\x94\xbdf\xdbS\xce\x96\x9f\x1d\x8b\x9e\x18\x01X\x86S%\xf6\xd6E\xab\xf0\x00\xcf\xde3\xc4\xb4\v\x85\x1c\x85T\xed\xb1\x1d\x9fJ\xd3\x19\x84%4\xbcR\x00'/211}, @typed={0x8, 0xc6, 0x0, 0x0, @pid=r2}]}]}, 0x28c}, {&(0x7f00000003c0)={0x84, 0x2f, 0xa00, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x115, 0x0, 0x0, @fd=r3}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x100}, @nested={0x1d, 0x147, 0x0, 0x1, [@generic="7b722bc14fa0535596fe7e557de6bacf9992a16ea95430fbd9"]}, @generic="cda351e8fc5c70986149ecf13b28a5e68e0f16a373966840f96d55d1dc6299cd9a22b1a53af7ea6b3ef3951434fd1d4175978484fbc3f33022c5e7f4ec64ac44"]}, 0x84}], 0x2, 0x0, 0x0, 0x845}, 0x40004) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) inotify_add_watch(r3, &(0x7f0000000600)='./bus\x00', 0x10000004) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 269.610278ms ago: executing program 3 (id=300): clock_adjtime(0x0, &(0x7f0000000040)={0x37d8, 0x40000000, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffc99a3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5}) r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000180)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) (fail_nth: 2) 0s ago: executing program 0 (id=301): mkdir(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): _slave_1) entered disabled state [ 20.544885][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.552303][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.559417][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.586698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.594886][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.602008][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.609340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.617651][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.624699][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.632283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.639715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.647148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.655111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.669795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.692859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.701411][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.708454][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.716234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.724593][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.731596][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.738933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.748833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.757079][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.764114][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.779294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.787381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.795611][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.802795][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.829029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.837504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.846429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.854841][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.862044][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.869582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.877965][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.885090][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.893114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.925166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.933040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.940416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.948851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.957742][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.964789][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.972627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.980877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.989185][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.996233][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.003706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.012430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.021272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.029543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.037582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.046242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.054423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.062650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.070585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.078989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.087014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.095355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.103873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.112153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.123372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.130897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.138429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.146534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.154697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.162922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.176584][ T285] device veth0_vlan entered promiscuous mode [ 21.183989][ T287] device veth0_vlan entered promiscuous mode [ 21.198086][ T284] device veth0_vlan entered promiscuous mode [ 21.204884][ T286] device veth0_vlan entered promiscuous mode [ 21.213358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.221205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.229312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.238116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.246840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.255221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.263427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.271664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.280068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.288074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.296287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.304132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.312280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.319632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.337862][ T287] device veth1_macvtap entered promiscuous mode [ 21.345833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.354085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.362427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.378392][ T283] device veth0_vlan entered promiscuous mode [ 21.386363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.394819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.403344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.411566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.419763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.427904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.435833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.444936][ T285] device veth1_macvtap entered promiscuous mode [ 21.456194][ T286] device veth1_macvtap entered promiscuous mode [ 21.464890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.473652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.482357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.490766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.499422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.507873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.516118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.530121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.538518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.550686][ T284] device veth1_macvtap entered promiscuous mode [ 21.562563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.570941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.579781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.588369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.596691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.610299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.618873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.627771][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 21.627782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.628046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.658646][ T283] device veth1_macvtap entered promiscuous mode [ 21.678796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.687137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.695618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.704007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.712798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.721061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.759436][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.786029][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.794796][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.803395][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.930500][ T349] loop2: detected capacity change from 0 to 2048 [ 21.989362][ T352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.017301][ T349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 22.985933][ T361] device bridge0 entered promiscuous mode [ 22.995149][ T361] bridge0: port 3(macsec1) entered blocking state [ 23.002986][ T361] bridge0: port 3(macsec1) entered disabled state [ 23.014143][ T361] device bridge0 left promiscuous mode [ 23.518837][ T284] EXT4-fs (loop2): unmounting filesystem. [ 23.668715][ T371] loop2: detected capacity change from 0 to 1024 [ 23.681853][ T363] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.701578][ T371] EXT4-fs: Ignoring removed i_version option [ 23.731540][ T371] EXT4-fs (loop2): Test dummy encryption mode enabled [ 23.775122][ T375] loop1: detected capacity change from 0 to 256 [ 23.783928][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 23.783977][ T28] audit: type=1400 audit(1756440729.787:115): avc: denied { mounton } for pid=368 comm="syz.1.7" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 23.861848][ T363] usb 1-1: Using ep0 maxpacket: 32 [ 23.869259][ T363] usb 1-1: unable to get BOS descriptor or descriptor too short [ 23.895307][ T371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 23.953519][ T363] usb 1-1: config index 0 descriptor too short (expected 53, got 34) [ 24.079339][ T363] usb 1-1: config 2 has an invalid interface number: 221 but max is 0 [ 24.175712][ T28] audit: type=1400 audit(1756440730.177:116): avc: denied { create } for pid=370 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.204512][ T363] usb 1-1: config 2 has no interface number 0 [ 24.239451][ T371] fscrypt: AES-256-XTS using blk-crypto-fallback [ 24.265561][ T363] usb 1-1: config 2 interface 221 has no altsetting 0 [ 24.341397][ T363] usb 1-1: string descriptor 0 read error: -22 [ 24.382985][ T28] audit: type=1400 audit(1756440730.227:117): avc: denied { write } for pid=370 comm="syz.2.8" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.437933][ T363] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 24.538773][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.644536][ T28] audit: type=1400 audit(1756440730.227:118): avc: denied { add_name } for pid=370 comm="syz.2.8" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.698183][ T363] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 24.779081][ T363] usb 1-1: No valid video chain found. [ 24.811775][ C0] sched: RT throttling activated [ 24.812766][ T348] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.818671][ T28] audit: type=1400 audit(1756440730.227:119): avc: denied { create } for pid=370 comm="syz.2.8" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.848904][ T28] audit: type=1400 audit(1756440730.367:120): avc: denied { read append open } for pid=370 comm="syz.2.8" path="/1/file0/memory.events.local" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.851412][ T352] loop0: detected capacity change from 0 to 1024 [ 24.973595][ T352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 24.991812][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.993780][ T352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.019207][ T375] loop1: detected capacity change from 0 to 512 [ 25.055666][ T375] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.7: inode #1: comm syz.1.7: iget: illegal inode # [ 25.056797][ T284] EXT4-fs (loop2): unmounting filesystem. [ 25.074642][ T375] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7: error while reading EA inode 1 err=-117 [ 25.087220][ T375] EXT4-fs (loop1): 1 orphan inode deleted [ 25.093294][ T375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.147345][ T372] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 25.156884][ T28] audit: type=1400 audit(1756440731.167:121): avc: denied { relabelto } for pid=368 comm="syz.1.7" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 25.182837][ T28] audit: type=1400 audit(1756440731.167:122): avc: denied { create } for pid=386 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 25.477581][ T285] EXT4-fs (loop1): unmounting filesystem. [ 25.564391][ T393] loop1: detected capacity change from 0 to 1024 [ 25.683710][ T393] EXT4-fs: Ignoring removed i_version option [ 25.835340][ T393] EXT4-fs (loop1): Test dummy encryption mode enabled [ 25.870890][ T393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 25.883239][ T396] loop3: detected capacity change from 0 to 2048 [ 25.926777][ T396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.046802][ T28] audit: type=1400 audit(1756440732.047:123): avc: denied { map } for pid=392 comm="syz.1.11" path="/2/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.107250][ T28] audit: type=1400 audit(1756440732.047:124): avc: denied { write } for pid=392 comm="syz.1.11" path="/2/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.109055][ T393] bridge0: port 3(vlan2) entered blocking state [ 26.138485][ T393] bridge0: port 3(vlan2) entered disabled state [ 26.845663][ T285] EXT4-fs (loop1): unmounting filesystem. [ 26.878585][ T6] usb 1-1: USB disconnect, device number 2 [ 26.993544][ T401] syz.4.12 (401) used greatest stack depth: 21952 bytes left [ 27.028716][ T413] loop2: detected capacity change from 0 to 2048 [ 27.084999][ T283] EXT4-fs (loop0): unmounting filesystem. [ 27.093316][ T413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.450671][ T427] loop4: detected capacity change from 0 to 256 [ 27.552558][ T427] loop4: detected capacity change from 0 to 512 [ 27.615524][ T427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.17: inode #1: comm syz.4.17: iget: illegal inode # [ 27.629590][ T427] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.17: error while reading EA inode 1 err=-117 [ 27.644043][ T427] EXT4-fs (loop4): 1 orphan inode deleted [ 27.650000][ T427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 28.489366][ T358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 28.599975][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.601685][ T286] EXT4-fs (loop4): unmounting filesystem. [ 28.791828][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 28.798578][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.841961][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.871849][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.902891][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.912267][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.931792][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.939827][ T6] usb 1-1: Product: syz [ 28.951896][ T6] usb 1-1: Manufacturer: syz [ 28.956519][ T6] usb 1-1: SerialNumber: syz [ 29.101863][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 29.108158][ T19] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 29.131802][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.151980][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.171046][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.181009][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.189809][ T287] EXT4-fs (loop3): unmounting filesystem. [ 29.196137][ T19] usb 5-1: Product: syz [ 29.200528][ T19] usb 5-1: Manufacturer: syz [ 29.205217][ T19] usb 5-1: SerialNumber: syz [ 29.419458][ T334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.427300][ T6] usb 1-1: 0:2 : does not exist [ 29.466079][ T284] EXT4-fs (loop2): unmounting filesystem. [ 29.529808][ T441] loop3: detected capacity change from 0 to 256 [ 29.625627][ T441] loop3: detected capacity change from 0 to 512 [ 29.721019][ T441] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.21: inode #1: comm syz.3.21: iget: illegal inode # [ 29.734784][ T441] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.21: error while reading EA inode 1 err=-117 [ 29.748575][ T441] EXT4-fs (loop3): 1 orphan inode deleted [ 29.755743][ T441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.511590][ T448] loop2: detected capacity change from 0 to 256 [ 30.606213][ T448] loop2: detected capacity change from 0 to 512 [ 30.627473][ T287] EXT4-fs (loop3): unmounting filesystem. [ 30.651413][ T448] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.22: inode #1: comm syz.2.22: iget: illegal inode # [ 30.664463][ T448] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.22: error while reading EA inode 1 err=-117 [ 30.677170][ T448] EXT4-fs (loop2): 1 orphan inode deleted [ 30.683180][ T448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.711906][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 30.718849][ T334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.742972][ T334] usb 2-1: config index 0 descriptor too short (expected 53, got 34) [ 30.761492][ T334] usb 2-1: config 2 has an invalid interface number: 221 but max is 0 [ 30.779219][ T334] usb 2-1: config 2 has no interface number 0 [ 30.793865][ T334] usb 2-1: config 2 interface 221 has no altsetting 0 [ 30.808345][ T6] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 30.829720][ T19] usb 5-1: 0:2 : does not exist [ 30.835249][ T6] usb 1-1: USB disconnect, device number 3 [ 31.222909][ T19] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 31.253859][ T334] usb 2-1: string descriptor 0 read error: -22 [ 31.260067][ T334] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 31.269603][ T19] usb 5-1: USB disconnect, device number 2 [ 31.276361][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.304456][ T334] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 31.311540][ T334] usb 2-1: No valid video chain found. [ 31.517233][ T432] loop1: detected capacity change from 0 to 1024 [ 31.524163][ T432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.602555][ T432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.678660][ T284] EXT4-fs (loop2): unmounting filesystem. [ 33.076300][ T475] loop4: detected capacity change from 0 to 1024 [ 33.083170][ T475] EXT4-fs: Ignoring removed i_version option [ 33.090089][ T475] EXT4-fs (loop4): Test dummy encryption mode enabled [ 33.099235][ T475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.474876][ T334] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.606708][ T286] EXT4-fs (loop4): unmounting filesystem. [ 34.829761][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 34.847817][ T6] usb 2-1: USB disconnect, device number 2 [ 34.855147][ T334] usb 4-1: device descriptor read/all, error -71 [ 35.018022][ T491] loop4: detected capacity change from 0 to 2048 [ 35.431140][ T285] EXT4-fs (loop1): unmounting filesystem. [ 35.482945][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.614420][ T491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.819403][ T286] EXT4-fs (loop4): unmounting filesystem. [ 36.899986][ T509] loop1: detected capacity change from 0 to 2048 [ 37.049828][ T509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.576861][ T517] loop0: detected capacity change from 0 to 256 [ 37.616176][ T285] EXT4-fs (loop1): unmounting filesystem. [ 37.622504][ T455] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.637995][ T515] loop0: detected capacity change from 0 to 512 [ 37.669760][ T515] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.38: inode #1: comm syz.0.38: iget: illegal inode # [ 37.717984][ T515] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.38: error while reading EA inode 1 err=-117 [ 37.772584][ T515] EXT4-fs (loop0): 1 orphan inode deleted [ 37.778378][ T515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.831052][ T503] device bridge0 entered promiscuous mode [ 37.846082][ T503] bridge0: port 3(macsec1) entered blocking state [ 37.906254][ T503] bridge0: port 3(macsec1) entered disabled state [ 37.928966][ T503] device bridge0 left promiscuous mode [ 38.009807][ T539] loop4: detected capacity change from 0 to 256 [ 38.100127][ T539] loop4: detected capacity change from 0 to 512 [ 38.236404][ T539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.42: inode #1: comm syz.4.42: iget: illegal inode # [ 38.250314][ T539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.42: error while reading EA inode 1 err=-117 [ 38.264244][ T539] EXT4-fs (loop4): 1 orphan inode deleted [ 38.270021][ T539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.304793][ T286] EXT4-fs (loop4): unmounting filesystem. [ 39.355685][ T538] device bridge0 entered promiscuous mode [ 39.371270][ T538] bridge0: port 3(macsec1) entered blocking state [ 39.438388][ T283] EXT4-fs (loop0): unmounting filesystem. [ 39.515894][ T538] bridge0: port 3(macsec1) entered disabled state [ 39.803764][ T554] loop0: detected capacity change from 0 to 256 [ 42.154029][ T538] device bridge0 left promiscuous mode [ 42.193881][ T554] loop0: detected capacity change from 0 to 512 [ 42.610948][ T557] loop3: detected capacity change from 0 to 256 [ 42.784853][ T557] loop3: detected capacity change from 0 to 512 [ 42.870027][ T557] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.45: inode #1: comm syz.3.45: iget: illegal inode # [ 42.885520][ T554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.44: inode #1: comm syz.0.44: iget: illegal inode # [ 42.899464][ T557] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.45: error while reading EA inode 1 err=-117 [ 42.913129][ T557] EXT4-fs (loop3): 1 orphan inode deleted [ 42.918917][ T557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.929669][ T554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.44: error while reading EA inode 1 err=-117 [ 43.309733][ T554] EXT4-fs (loop0): 1 orphan inode deleted [ 43.315634][ T554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.176477][ T287] EXT4-fs (loop3): unmounting filesystem. [ 44.256851][ T283] EXT4-fs (loop0): unmounting filesystem. [ 46.067446][ T334] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.115163][ T584] loop1: detected capacity change from 0 to 1024 [ 46.122751][ T584] EXT4-fs: Ignoring removed i_version option [ 46.141904][ T584] EXT4-fs (loop1): Test dummy encryption mode enabled [ 46.163614][ T584] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.292157][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 46.298719][ T334] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.561842][ T555] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.661837][ T334] usb 4-1: config index 0 descriptor too short (expected 53, got 34) [ 46.669961][ T334] usb 4-1: config 2 has an invalid interface number: 221 but max is 0 [ 46.679552][ T334] usb 4-1: config 2 has no interface number 0 [ 46.685723][ T334] usb 4-1: config 2 interface 221 has no altsetting 0 [ 46.698743][ T334] usb 4-1: string descriptor 0 read error: -22 [ 46.700474][ T285] EXT4-fs (loop1): unmounting filesystem. [ 46.708780][ T334] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 46.722060][ T597] overlayfs: failed to resolve './file1': -2 [ 46.724122][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.747014][ T334] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 46.759292][ T334] usb 4-1: No valid video chain found. [ 46.801817][ T555] usb 1-1: Using ep0 maxpacket: 16 [ 46.808473][ T555] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 46.817773][ T555] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.828372][ T555] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.839423][ T555] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.848823][ T555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.857020][ T555] usb 1-1: Product: syz [ 46.868750][ T555] usb 1-1: Manufacturer: syz [ 46.873675][ T555] usb 1-1: SerialNumber: syz [ 46.983865][ T563] loop3: detected capacity change from 0 to 1024 [ 47.000944][ T563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.162409][ T563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.819631][ T555] usb 1-1: 0:2 : does not exist [ 47.871995][ T334] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 48.414297][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 48.414332][ T28] audit: type=1400 audit(1756440754.417:132): avc: denied { connect } for pid=612 comm="syz.4.59" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.481896][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 48.482784][ T616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.59'. [ 48.488412][ T28] audit: type=1400 audit(1756440754.487:133): avc: denied { nlmsg_write } for pid=612 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.526386][ T334] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.531273][ T618] loop2: detected capacity change from 0 to 1024 [ 48.546670][ T334] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 48.576654][ T334] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.580012][ T618] EXT4-fs: Ignoring removed i_version option [ 48.600472][ T618] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.619678][ T555] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 48.626750][ T334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 48.644324][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.652833][ T334] usb 2-1: Product: syz [ 48.655868][ T555] usb 1-1: USB disconnect, device number 5 [ 48.657180][ T334] usb 2-1: Manufacturer: syz [ 48.665659][ T618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.668226][ T334] usb 2-1: SerialNumber: syz [ 48.934095][ T284] EXT4-fs (loop2): unmounting filesystem. [ 48.977537][ T624] loop2: detected capacity change from 0 to 1024 [ 49.004680][ T624] EXT4-fs: Ignoring removed i_version option [ 49.410649][ T6] usb 4-1: USB disconnect, device number 4 [ 49.441868][ T624] EXT4-fs (loop2): Test dummy encryption mode enabled [ 49.472182][ T624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.509994][ T287] EXT4-fs (loop3): unmounting filesystem. [ 49.585816][ T284] EXT4-fs (loop2): unmounting filesystem. [ 50.411828][ T641] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.555434][ T334] usb 2-1: USB disconnect, device number 3 [ 50.587157][ T656] device bridge0 entered promiscuous mode [ 50.601897][ T641] usb 5-1: Using ep0 maxpacket: 32 [ 50.613694][ T641] usb 5-1: unable to get BOS descriptor or descriptor too short [ 50.628511][ T656] bridge0: port 3(macsec1) entered blocking state [ 50.639361][ T641] usb 5-1: config index 0 descriptor too short (expected 53, got 34) [ 50.658009][ T641] usb 5-1: config 2 has an invalid interface number: 221 but max is 0 [ 50.665272][ T656] bridge0: port 3(macsec1) entered disabled state [ 50.671825][ T641] usb 5-1: config 2 has no interface number 0 [ 50.735071][ T641] usb 5-1: config 2 interface 221 has no altsetting 0 [ 50.742170][ T656] device bridge0 left promiscuous mode [ 50.744374][ T641] usb 5-1: string descriptor 0 read error: -22 [ 50.753929][ T641] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 50.764799][ T641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.779083][ T641] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 50.793067][ T641] usb 5-1: No valid video chain found. [ 50.886064][ T666] loop1: detected capacity change from 0 to 256 [ 51.422456][ T644] loop4: detected capacity change from 0 to 1024 [ 51.527719][ T644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.729234][ T644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.813259][ T455] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.828017][ T666] loop1: detected capacity change from 0 to 512 [ 51.833642][ T663] device bridge0 entered promiscuous mode [ 51.932342][ T666] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.70: inode #1: comm syz.1.70: iget: illegal inode # [ 51.946056][ T666] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.70: error while reading EA inode 1 err=-117 [ 51.960016][ T666] EXT4-fs (loop1): 1 orphan inode deleted [ 51.966011][ T666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.060228][ T663] bridge0: port 3(macsec1) entered blocking state [ 52.252636][ T6] usb 5-1: USB disconnect, device number 3 [ 52.332365][ T663] bridge0: port 3(macsec1) entered disabled state [ 52.434920][ T285] EXT4-fs (loop1): unmounting filesystem. [ 52.443633][ T663] device bridge0 left promiscuous mode [ 52.472973][ T673] loop1: detected capacity change from 0 to 1024 [ 52.489920][ T673] EXT4-fs: Ignoring removed i_version option [ 52.500731][ T673] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.523347][ T673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.606840][ T285] EXT4-fs (loop1): unmounting filesystem. [ 52.686092][ T363] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 52.836143][ T680] loop1: detected capacity change from 0 to 256 [ 52.872211][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 52.898982][ T363] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 52.970436][ T363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.045663][ T363] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.120250][ T363] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.187170][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.246503][ T363] usb 4-1: Product: syz [ 53.278232][ T363] usb 4-1: Manufacturer: syz [ 53.312865][ T363] usb 4-1: SerialNumber: syz [ 53.437813][ T286] EXT4-fs (loop4): unmounting filesystem. [ 53.819351][ T680] loop1: detected capacity change from 0 to 512 [ 53.826799][ T363] usb 4-1: 0:2 : does not exist [ 53.846207][ T680] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.74: inode #1: comm syz.1.74: iget: illegal inode # [ 53.962600][ T680] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.74: error while reading EA inode 1 err=-117 [ 53.975923][ T680] EXT4-fs (loop1): 1 orphan inode deleted [ 53.981785][ T680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.039947][ T334] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 54.255392][ T334] usb 1-1: Using ep0 maxpacket: 32 [ 54.263789][ T285] EXT4-fs (loop1): unmounting filesystem. [ 54.271568][ T334] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.290530][ T334] usb 1-1: config index 0 descriptor too short (expected 53, got 34) [ 54.300259][ T334] usb 1-1: config 2 has an invalid interface number: 221 but max is 0 [ 54.312778][ T334] usb 1-1: config 2 has no interface number 0 [ 54.318890][ T334] usb 1-1: config 2 interface 221 has no altsetting 0 [ 54.361215][ T334] usb 1-1: string descriptor 0 read error: -22 [ 54.371839][ T334] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 54.444781][ T695] loop2: detected capacity change from 0 to 256 [ 54.507045][ T695] loop2: detected capacity change from 0 to 512 [ 54.563675][ T363] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 54.653960][ T695] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.77: inode #1: comm syz.2.77: iget: illegal inode # [ 54.667522][ T695] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.77: error while reading EA inode 1 err=-117 [ 54.681542][ T695] EXT4-fs (loop2): 1 orphan inode deleted [ 54.687438][ T695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.848900][ T363] usb 4-1: USB disconnect, device number 5 [ 54.975457][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.480498][ T704] loop3: detected capacity change from 0 to 256 [ 55.659266][ T334] usb 1-1: can't set config #2, error -71 [ 55.666027][ T334] usb 1-1: USB disconnect, device number 6 [ 55.682631][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.732662][ T28] audit: type=1400 audit(1756440761.697:134): avc: denied { associate } for pid=700 comm="syz.3.79" name="11" dev="tmpfs" ino=72 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 55.764174][ T284] EXT4-fs (loop2): unmounting filesystem. [ 56.722877][ T712] loop0: detected capacity change from 0 to 2048 [ 59.439799][ T713] loop1: detected capacity change from 0 to 2048 [ 59.696705][ T712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.707682][ T713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.821940][ T719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 60.355849][ T28] audit: type=1400 audit(1756440766.357:135): avc: denied { write } for pid=720 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.376413][ T719] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 60.377216][ T283] EXT4-fs (loop0): unmounting filesystem. [ 60.391699][ T28] audit: type=1400 audit(1756440766.357:136): avc: denied { read } for pid=720 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.419318][ T285] EXT4-fs (loop1): unmounting filesystem. [ 60.991961][ T734] loop1: detected capacity change from 0 to 2048 [ 61.531921][ T737] loop4: detected capacity change from 0 to 256 [ 61.800071][ T734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.940422][ T346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.504388][ T285] EXT4-fs (loop1): unmounting filesystem. [ 62.681713][ T742] device bridge0 entered promiscuous mode [ 62.853208][ T742] bridge0: port 3(macsec1) entered blocking state [ 62.866332][ T731] loop4: detected capacity change from 0 to 512 [ 62.910573][ T742] bridge0: port 3(macsec1) entered disabled state [ 62.918568][ T731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.86: inode #1: comm syz.4.86: iget: illegal inode # [ 63.022321][ T731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.86: error while reading EA inode 1 err=-117 [ 63.036181][ T742] device bridge0 left promiscuous mode [ 63.054281][ T731] EXT4-fs (loop4): 1 orphan inode deleted [ 63.060070][ T731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.247788][ T754] loop1: detected capacity change from 0 to 2048 [ 63.357115][ T286] EXT4-fs (loop4): unmounting filesystem. [ 63.436592][ T754] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.613834][ T28] audit: type=1400 audit(1756440769.617:137): avc: denied { read write } for pid=755 comm="syz.0.90" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.670734][ T28] audit: type=1400 audit(1756440769.617:138): avc: denied { open } for pid=755 comm="syz.0.90" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.891878][ T28] audit: type=1400 audit(1756440769.647:139): avc: denied { ioctl } for pid=755 comm="syz.0.90" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.956555][ T769] device bridge0 entered promiscuous mode [ 63.962396][ T28] audit: type=1400 audit(1756440769.857:140): avc: denied { setopt } for pid=773 comm="syz.3.94" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.980608][ T769] bridge0: port 3(macsec1) entered blocking state [ 65.229157][ T777] loop4: detected capacity change from 0 to 2048 [ 65.484985][ T777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.152048][ T769] bridge0: port 3(macsec1) entered disabled state [ 66.217513][ T782] FAULT_INJECTION: forcing a failure. [ 66.217513][ T782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.230669][ T782] CPU: 1 PID: 782 Comm: syz.3.95 Not tainted syzkaller #0 [ 66.237960][ T782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.248101][ T782] Call Trace: [ 66.251460][ T782] [ 66.254369][ T782] __dump_stack+0x21/0x24 [ 66.258678][ T782] dump_stack_lvl+0xee/0x150 [ 66.263254][ T782] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.268254][ T782] dump_stack+0x15/0x24 [ 66.272472][ T782] should_fail_ex+0x3d4/0x520 [ 66.277208][ T782] should_fail+0xb/0x10 [ 66.281435][ T782] should_fail_usercopy+0x1a/0x20 [ 66.286523][ T782] strncpy_from_user+0x24/0x2d0 [ 66.291365][ T782] strncpy_from_user_nofault+0x73/0x150 [ 66.296888][ T782] bpf_probe_read_compat_str+0xe6/0x180 [ 66.302404][ T782] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 66.307839][ T782] bpf_trace_run4+0x11b/0x270 [ 66.312490][ T782] ? __cfi_bpf_trace_run4+0x10/0x10 [ 66.317663][ T782] ? __this_cpu_preempt_check+0x13/0x20 [ 66.323275][ T782] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 66.329931][ T782] ? probe_sched_switch+0x63/0x90 [ 66.334930][ T782] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 66.341062][ T782] __bpf_trace_sched_switch+0xe/0x10 [ 66.346339][ T782] __traceiter_sched_switch+0xa0/0xd0 [ 66.351751][ T782] __schedule+0x1263/0x14e0 [ 66.356230][ T782] ? release_firmware_map_entry+0x194/0x194 [ 66.362113][ T782] ? __this_cpu_preempt_check+0x13/0x20 [ 66.367740][ T782] ? probe_sched_wakeup+0x5e/0x90 [ 66.372744][ T782] ? preempt_schedule+0xa7/0xb0 [ 66.377570][ T782] preempt_schedule_common+0x9b/0xf0 [ 66.382918][ T782] preempt_schedule+0xa7/0xb0 [ 66.387577][ T782] ? __cfi_preempt_schedule+0x10/0x10 [ 66.393019][ T782] ? ttwu_do_activate+0x174/0x280 [ 66.398116][ T782] preempt_schedule_thunk+0x16/0x18 [ 66.403291][ T782] _raw_spin_unlock_irqrestore+0x6f/0x80 [ 66.408898][ T782] ldsem_up_read+0x107/0x120 [ 66.413463][ T782] ? __cfi_n_tty_poll+0x10/0x10 [ 66.418284][ T782] tty_ldisc_deref+0x3c/0x40 [ 66.422936][ T782] tty_poll+0xf1/0x180 [ 66.426977][ T782] ? __cfi_tty_poll+0x10/0x10 [ 66.431630][ T782] do_sys_poll+0x824/0x1100 [ 66.436112][ T782] ? 0xffffffffa0000654 [ 66.440242][ T782] ? is_bpf_text_address+0x177/0x190 [ 66.445504][ T782] ? poll_select_finish+0x5e0/0x5e0 [ 66.450673][ T782] ? __cfi___pollwait+0x10/0x10 [ 66.455504][ T782] ? __cfi_pollwake+0x10/0x10 [ 66.460156][ T782] ? __cfi_pollwake+0x10/0x10 [ 66.464824][ T782] ? __kasan_check_write+0x14/0x20 [ 66.470091][ T782] ? proc_fail_nth_write+0x17a/0x1f0 [ 66.475353][ T782] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.480970][ T782] ? security_file_permission+0x8a/0xb0 [ 66.486501][ T782] ? set_user_sigmask+0xc4/0x1b0 [ 66.491421][ T782] ? __cfi_set_user_sigmask+0x10/0x10 [ 66.496835][ T782] ? mutex_unlock+0x89/0x220 [ 66.501413][ T782] ? __cfi_mutex_unlock+0x10/0x10 [ 66.506414][ T782] __se_sys_ppoll+0x1fc/0x260 [ 66.511097][ T782] ? __x64_sys_ppoll+0xd0/0xd0 [ 66.515832][ T782] ? ksys_write+0x1eb/0x240 [ 66.520325][ T782] ? __cfi_ksys_write+0x10/0x10 [ 66.525182][ T782] __x64_sys_ppoll+0xbf/0xd0 [ 66.529797][ T782] x64_sys_call+0x29e/0x9a0 [ 66.534292][ T782] do_syscall_64+0x4c/0xa0 [ 66.538682][ T782] ? clear_bhb_loop+0x30/0x80 [ 66.543345][ T782] ? clear_bhb_loop+0x30/0x80 [ 66.547996][ T782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.553955][ T782] RIP: 0033:0x7f159f78ebe9 [ 66.558364][ T782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.577963][ T782] RSP: 002b:00007f15a0609038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 66.586352][ T782] RAX: ffffffffffffffda RBX: 00007f159f9b6090 RCX: 00007f159f78ebe9 [ 66.594322][ T782] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 66.602292][ T782] RBP: 00007f15a0609090 R08: 0000000000000000 R09: 0000000000000000 [ 66.610438][ T782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.618479][ T782] R13: 00007f159f9b6128 R14: 00007f159f9b6090 R15: 00007ffff2092a18 [ 66.626431][ T782] [ 66.706747][ T769] device bridge0 left promiscuous mode [ 66.769328][ T286] EXT4-fs (loop4): unmounting filesystem. [ 66.802421][ T784] loop3: detected capacity change from 0 to 512 [ 66.809036][ T784] ======================================================= [ 66.809036][ T784] WARNING: The mand mount option has been deprecated and [ 66.809036][ T784] and is ignored by this kernel. Remove the mand [ 66.809036][ T784] option from the mount to silence this warning. [ 66.809036][ T784] ======================================================= [ 66.845174][ T784] EXT4-fs: Ignoring removed oldalloc option [ 66.851203][ T784] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.859026][ T784] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.897908][ T784] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.97: bg 0: block 64: padding at end of block bitmap is not set [ 66.912219][ T743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 66.927545][ T784] Quota error (device loop3): write_blk: dquota write failed [ 66.936037][ T784] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 66.947090][ T784] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.97: Failed to acquire dquot type 0 [ 66.959010][ T784] EXT4-fs (loop3): 1 truncate cleaned up [ 66.964737][ T784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.247139][ T796] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5 [ 67.474681][ T797] loop4: detected capacity change from 0 to 2048 [ 67.607833][ T797] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.666465][ T784] syz.3.97 (784) used greatest stack depth: 21472 bytes left [ 68.476768][ T28] audit: type=1400 audit(1756440774.477:141): avc: denied { create } for pid=800 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.538303][ T286] EXT4-fs (loop4): unmounting filesystem. [ 68.540635][ T28] audit: type=1400 audit(1756440774.497:142): avc: denied { mounton } for pid=800 comm="syz.0.99" path="/18/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.717750][ T287] EXT4-fs (loop3): unmounting filesystem. [ 68.827726][ T815] loop4: detected capacity change from 0 to 256 [ 69.819415][ T821] device bridge0 entered promiscuous mode [ 69.840567][ T821] bridge0: port 3(macsec1) entered blocking state [ 69.944414][ T626] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.992730][ T821] bridge0: port 3(macsec1) entered disabled state [ 70.031458][ T811] loop4: detected capacity change from 0 to 512 [ 70.038462][ T821] device bridge0 left promiscuous mode [ 70.073605][ T811] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.101: inode #1: comm syz.4.101: iget: illegal inode # [ 70.086921][ T811] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.101: error while reading EA inode 1 err=-117 [ 70.099869][ T811] EXT4-fs (loop4): 1 orphan inode deleted [ 70.105644][ T811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.241838][ T716] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 70.312871][ T829] syz.3.102 (829) used greatest stack depth: 19360 bytes left [ 70.364962][ T286] EXT4-fs (loop4): unmounting filesystem. [ 70.469951][ T285] EXT4-fs (loop1): unmounting filesystem. [ 70.492943][ T716] usb 1-1: Using ep0 maxpacket: 16 [ 70.512576][ T716] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.996891][ T716] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.008256][ T716] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.032726][ T28] audit: type=1400 audit(1756440776.997:143): avc: denied { create } for pid=830 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.138254][ T716] usb 1-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 71.204937][ T28] audit: type=1400 audit(1756440776.997:144): avc: denied { ioctl } for pid=830 comm="syz.4.105" path="socket:[18687]" dev="sockfs" ino=18687 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.231920][ T716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.250480][ T716] usb 1-1: Product: syz [ 71.258933][ T716] usb 1-1: Manufacturer: syz [ 71.264430][ T716] usb 1-1: SerialNumber: syz [ 71.433419][ T852] device bridge0 entered promiscuous mode [ 71.441551][ T852] bridge0: port 3(macsec1) entered blocking state [ 71.448100][ T852] bridge0: port 3(macsec1) entered disabled state [ 71.459076][ T852] device bridge0 left promiscuous mode [ 71.667980][ T28] audit: type=1400 audit(1756440777.627:145): avc: denied { read } for pid=849 comm="syz.1.109" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.743280][ T28] audit: type=1400 audit(1756440777.627:146): avc: denied { open } for pid=849 comm="syz.1.109" path="net:[4026532385]" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.791629][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 72.398672][ T28] audit: type=1400 audit(1756440778.397:147): avc: denied { create } for pid=862 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.424548][ T28] audit: type=1400 audit(1756440778.427:148): avc: denied { connect } for pid=862 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.458207][ T28] audit: type=1400 audit(1756440778.457:149): avc: denied { read } for pid=867 comm="syz.3.112" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.491142][ T28] audit: type=1400 audit(1756440778.457:150): avc: denied { open } for pid=867 comm="syz.3.112" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.597005][ T28] audit: type=1400 audit(1756440778.597:151): avc: denied { name_bind } for pid=870 comm="syz.2.113" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.618914][ T28] audit: type=1400 audit(1756440778.597:152): avc: denied { node_bind } for pid=870 comm="syz.2.113" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.790559][ T873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.113'. [ 73.231900][ T858] Bluetooth: hci0: command 0x1003 tx timeout [ 73.238337][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.620795][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 74.628701][ T847] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 74.654508][ T716] usb 1-1: USB disconnect, device number 7 [ 74.852835][ T894] loop4: detected capacity change from 0 to 256 [ 74.912799][ T348] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.918726][ T901] loop2: detected capacity change from 0 to 256 [ 74.963275][ T346] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.026602][ T901] loop2: detected capacity change from 0 to 512 [ 75.181947][ T363] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 75.314705][ T901] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.117: inode #1: comm syz.2.117: iget: illegal inode # [ 75.328824][ T901] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.117: error while reading EA inode 1 err=-117 [ 75.343447][ T901] EXT4-fs (loop2): 1 orphan inode deleted [ 75.349351][ T901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.501820][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 75.512251][ T363] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.533231][ T363] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.574453][ T363] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.617503][ T363] usb 4-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 75.636304][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.659200][ T363] usb 4-1: Product: syz [ 75.671801][ T363] usb 4-1: Manufacturer: syz [ 75.681933][ T363] usb 4-1: SerialNumber: syz [ 75.787631][ T913] device bridge0 entered promiscuous mode [ 75.857784][ T913] bridge0: port 3(macsec1) entered blocking state [ 75.911810][ T913] bridge0: port 3(macsec1) entered disabled state [ 75.941866][ T913] device bridge0 left promiscuous mode [ 76.111931][ T519] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 76.301775][ T519] usb 1-1: Using ep0 maxpacket: 16 [ 76.308123][ T519] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.332053][ T519] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.362863][ T519] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.389625][ T519] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.413896][ T519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.435062][ T519] usb 1-1: Product: syz [ 76.446893][ T519] usb 1-1: Manufacturer: syz [ 76.459250][ T519] usb 1-1: SerialNumber: syz [ 77.340940][ T284] EXT4-fs (loop2): unmounting filesystem. [ 77.573055][ T925] loop4: detected capacity change from 0 to 2048 [ 78.090055][ T925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.848378][ T931] loop1: detected capacity change from 0 to 1024 [ 78.851376][ T363] usb 4-1: USB disconnect, device number 6 [ 78.862535][ T931] EXT4-fs: Ignoring removed i_version option [ 78.975982][ T931] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.004765][ T286] EXT4-fs (loop4): unmounting filesystem. [ 79.011120][ T931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.109715][ T942] loop2: detected capacity change from 0 to 2048 [ 79.152951][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 79.155136][ T944] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.171297][ T944] FAT-fs (loop9): unable to read boot sector [ 79.177727][ T28] audit: type=1400 audit(1756440785.147:154): avc: denied { create } for pid=943 comm="syz.4.128" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.223598][ T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.268619][ T28] audit: type=1400 audit(1756440785.157:155): avc: denied { mounton } for pid=943 comm="syz.4.128" path="/27/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.309601][ T942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.378194][ T28] audit: type=1400 audit(1756440785.267:156): avc: denied { connect } for pid=943 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.402797][ T28] audit: type=1400 audit(1756440785.267:157): avc: denied { read } for pid=943 comm="syz.4.128" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.434168][ T28] audit: type=1400 audit(1756440785.267:158): avc: denied { open } for pid=943 comm="syz.4.128" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.470280][ T28] audit: type=1400 audit(1756440785.297:159): avc: denied { bind } for pid=943 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.069111][ T28] audit: type=1400 audit(1756440785.307:160): avc: denied { create } for pid=943 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.088637][ T28] audit: type=1400 audit(1756440785.307:161): avc: denied { connect } for pid=943 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.125620][ T28] audit: type=1400 audit(1756440785.307:162): avc: denied { setopt } for pid=943 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.148957][ T519] usb 1-1: 0:2 : does not exist [ 80.158898][ T519] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 80.186101][ T28] audit: type=1400 audit(1756440785.437:163): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.416548][ T957] loop3: detected capacity change from 0 to 256 [ 80.424149][ T519] usb 1-1: USB disconnect, device number 8 [ 80.433564][ T284] EXT4-fs (loop2): unmounting filesystem. [ 80.486920][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.546194][ T938] loop3: detected capacity change from 0 to 512 [ 80.550825][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.559550][ T962] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.564908][ T285] EXT4-fs (loop1): unmounting filesystem. [ 80.572357][ T346] Buffer I/O error on dev loop3, logical block 0, async page read [ 80.577530][ T962] FAT-fs (loop5): unable to read boot sector [ 80.855961][ T938] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.127: inode #1: comm syz.3.127: iget: illegal inode # [ 80.895728][ T938] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.127: error while reading EA inode 1 err=-117 [ 80.910748][ T938] EXT4-fs (loop3): 1 orphan inode deleted [ 80.916732][ T938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.047468][ T971] loop4: detected capacity change from 0 to 256 [ 81.054711][ T519] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 81.118439][ T971] loop4: detected capacity change from 0 to 512 [ 81.150455][ T973] loop1: detected capacity change from 0 to 256 [ 81.184072][ T971] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.132: inode #1: comm syz.4.132: iget: illegal inode # [ 81.203307][ T973] loop1: detected capacity change from 0 to 512 [ 81.211002][ T971] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.132: error while reading EA inode 1 err=-117 [ 81.224527][ T971] EXT4-fs (loop4): 1 orphan inode deleted [ 81.230380][ T971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.411818][ T519] usb 1-1: Using ep0 maxpacket: 16 [ 81.420365][ T519] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 81.432775][ T973] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.133: inode #1: comm syz.1.133: iget: illegal inode # [ 81.447013][ T973] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.133: error while reading EA inode 1 err=-117 [ 81.459450][ T973] EXT4-fs (loop1): 1 orphan inode deleted [ 81.465242][ T973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.946280][ T519] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.947949][ T287] EXT4-fs (loop3): unmounting filesystem. [ 81.956623][ T519] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.982582][ T519] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.991663][ T519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.021791][ T519] usb 1-1: Product: syz [ 82.025999][ T519] usb 1-1: Manufacturer: syz [ 82.030612][ T519] usb 1-1: SerialNumber: syz [ 82.060156][ T980] loop3: detected capacity change from 0 to 1024 [ 82.105606][ T980] EXT4-fs: Ignoring removed i_version option [ 82.123654][ T980] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.151025][ T980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.277252][ T287] EXT4-fs (loop3): unmounting filesystem. [ 82.447009][ T519] usb 1-1: 0:2 : does not exist [ 82.465477][ T519] usb 1-1: USB disconnect, device number 9 [ 82.542161][ T990] loop3: detected capacity change from 0 to 128 [ 82.671834][ T434] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.682663][ T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.882338][ T434] usb 3-1: Using ep0 maxpacket: 16 [ 82.892784][ T434] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.901518][ T434] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.951801][ T434] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.963000][ T434] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.001844][ T434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.021810][ T434] usb 3-1: Product: syz [ 83.026031][ T434] usb 3-1: Manufacturer: syz [ 83.045769][ T434] usb 3-1: SerialNumber: syz [ 83.193463][ T338] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.303810][ T286] EXT4-fs (loop4): unmounting filesystem. [ 83.511938][ T434] usb 3-1: 0:2 : does not exist [ 83.610967][ T285] EXT4-fs (loop1): unmounting filesystem. [ 83.844619][ T1006] loop1: detected capacity change from 0 to 256 [ 84.254315][ T519] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.890038][ T434] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 84.907173][ T434] usb 3-1: USB disconnect, device number 2 [ 84.992371][ T1020] FAULT_INJECTION: forcing a failure. [ 84.992371][ T1020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.005505][ T1020] CPU: 1 PID: 1020 Comm: syz.3.146 Not tainted syzkaller #0 [ 85.012819][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.022931][ T1020] Call Trace: [ 85.026348][ T1020] [ 85.029300][ T1020] __dump_stack+0x21/0x24 [ 85.033702][ T1020] dump_stack_lvl+0xee/0x150 [ 85.038326][ T1020] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.043383][ T1020] dump_stack+0x15/0x24 [ 85.047579][ T1020] should_fail_ex+0x3d4/0x520 [ 85.052452][ T1020] should_fail+0xb/0x10 [ 85.056634][ T1020] should_fail_usercopy+0x1a/0x20 [ 85.061722][ T1020] _copy_from_user+0x1e/0xc0 [ 85.066600][ T1020] strndup_user+0xb6/0x150 [ 85.071048][ T1020] __se_sys_mount+0x9c/0x380 [ 85.072405][ T519] usb 5-1: Using ep0 maxpacket: 32 [ 85.075660][ T1020] ? fput+0x154/0x1a0 [ 85.084842][ T1020] ? __x64_sys_mount+0xd0/0xd0 [ 85.088045][ T1025] loop1: detected capacity change from 0 to 256 [ 85.089627][ T1020] ? __cfi_ksys_write+0x10/0x10 [ 85.097718][ T519] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.100794][ T1020] __x64_sys_mount+0xbf/0xd0 [ 85.113014][ T1020] x64_sys_call+0x65d/0x9a0 [ 85.115698][ T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.117723][ T1020] do_syscall_64+0x4c/0xa0 [ 85.138111][ T1020] ? clear_bhb_loop+0x30/0x80 [ 85.142494][ T519] usb 5-1: config index 0 descriptor too short (expected 53, got 34) [ 85.142818][ T1020] ? clear_bhb_loop+0x30/0x80 [ 85.155819][ T1020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.161732][ T1020] RIP: 0033:0x7f159f78ebe9 [ 85.166169][ T1020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.173713][ T519] usb 5-1: config 2 has an invalid interface number: 221 but max is 0 [ 85.186051][ T1020] RSP: 002b:00007f15a062a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.186080][ T1020] RAX: ffffffffffffffda RBX: 00007f159f9b5fa0 RCX: 00007f159f78ebe9 [ 85.186093][ T1020] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 85.186105][ T1020] RBP: 00007f15a062a090 R08: 0000200000000580 R09: 0000000000000000 [ 85.186116][ T1020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.186127][ T1020] R13: 00007f159f9b6038 R14: 00007f159f9b5fa0 R15: 00007ffff2092a18 [ 85.224224][ T519] usb 5-1: config 2 has no interface number 0 [ 85.226837][ T1020] [ 85.243227][ T847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.258777][ T858] Bluetooth: hci0: command 0x1003 tx timeout [ 85.277354][ T1023] loop1: detected capacity change from 0 to 512 [ 85.351434][ T519] usb 5-1: config 2 interface 221 has no altsetting 0 [ 85.358807][ T1023] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.145: inode #1: comm syz.1.145: iget: illegal inode # [ 85.372478][ T1023] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.145: error while reading EA inode 1 err=-117 [ 85.385310][ T1023] EXT4-fs (loop1): 1 orphan inode deleted [ 85.391094][ T1023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.416320][ T519] usb 5-1: string descriptor 0 read error: -22 [ 85.435137][ T519] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 85.456378][ T519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.537537][ T1036] loop3: detected capacity change from 0 to 256 [ 85.755857][ T997] loop4: detected capacity change from 0 to 1024 [ 85.877201][ T997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.117892][ T997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.703461][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.728374][ T1036] loop3: detected capacity change from 0 to 512 [ 86.821107][ T519] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 86.828144][ T519] usb 5-1: No valid video chain found. [ 86.904080][ T1036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.150: inode #1: comm syz.3.150: iget: illegal inode # [ 86.949126][ T1036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.150: error while reading EA inode 1 err=-117 [ 86.969902][ T1036] EXT4-fs (loop3): 1 orphan inode deleted [ 86.975841][ T1036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.132352][ T285] EXT4-fs (loop1): unmounting filesystem. [ 88.092117][ T287] EXT4-fs (loop3): unmounting filesystem. [ 88.100500][ T519] usb 5-1: USB disconnect, device number 4 [ 88.117002][ T1053] loop0: detected capacity change from 0 to 256 [ 88.183095][ T1053] loop0: detected capacity change from 0 to 512 [ 88.223712][ T286] EXT4-fs (loop4): unmounting filesystem. [ 88.230733][ T1053] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.152: inode #1: comm syz.0.152: iget: illegal inode # [ 88.300555][ T1053] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.152: error while reading EA inode 1 err=-117 [ 88.313169][ T1053] EXT4-fs (loop0): 1 orphan inode deleted [ 88.318963][ T1053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.350343][ T1062] loop2: detected capacity change from 0 to 2048 [ 89.780292][ T1062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.846504][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 89.846519][ T28] audit: type=1400 audit(1756440795.837:165): avc: denied { map } for pid=1075 comm="syz.4.158" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.978918][ T28] audit: type=1400 audit(1756440795.977:166): avc: denied { append } for pid=1075 comm="syz.4.158" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.039462][ T1079] loop3: detected capacity change from 0 to 1024 [ 90.063409][ T1079] EXT4-fs: Ignoring removed i_version option [ 90.067120][ T28] audit: type=1400 audit(1756440796.007:167): avc: denied { write } for pid=1075 comm="syz.4.158" path="socket:[19827]" dev="sockfs" ino=19827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.148510][ T1079] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.157465][ T1079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.166611][ T28] audit: type=1400 audit(1756440796.167:168): avc: denied { mount } for pid=1077 comm="syz.3.159" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.372802][ T338] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.514255][ T28] audit: type=1400 audit(1756440796.517:169): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.536200][ T287] EXT4-fs (loop3): unmounting filesystem. [ 90.981088][ T1095] device bridge0 entered promiscuous mode [ 90.997722][ T1095] bridge0: port 3(macsec1) entered blocking state [ 91.017376][ T1095] bridge0: port 3(macsec1) entered disabled state [ 91.045041][ T1095] device bridge0 left promiscuous mode [ 91.081868][ T1039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 91.300490][ T283] EXT4-fs (loop0): unmounting filesystem. [ 91.327272][ T284] EXT4-fs (loop2): unmounting filesystem. [ 92.041890][ T39] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 92.201775][ T39] usb 1-1: device descriptor read/64, error -71 [ 92.241812][ T519] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.351812][ T847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.701839][ T519] usb 3-1: Using ep0 maxpacket: 16 [ 93.721799][ T39] usb 1-1: device descriptor read/64, error -71 [ 93.767297][ T1120] loop4: detected capacity change from 0 to 256 [ 93.820114][ T1120] loop4: detected capacity change from 0 to 512 [ 93.944262][ T1120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.168: inode #1: comm syz.4.168: iget: illegal inode # [ 93.958284][ T1120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.168: error while reading EA inode 1 err=-117 [ 93.972144][ T1120] EXT4-fs (loop4): 1 orphan inode deleted [ 93.978008][ T1120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.118852][ T39] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 94.293600][ T39] usb 1-1: device descriptor read/64, error -71 [ 94.813199][ T519] usb 3-1: device descriptor read/all, error -71 [ 94.966634][ T1130] loop0: detected capacity change from 0 to 2048 [ 95.444801][ T286] EXT4-fs (loop4): unmounting filesystem. [ 95.539497][ T1130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.313852][ T1142] device bridge0 entered promiscuous mode [ 96.317721][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.328194][ T283] EXT4-fs (loop0): unmounting filesystem. [ 96.328937][ T1142] bridge0: port 3(macsec1) entered blocking state [ 96.340523][ T1142] bridge0: port 3(macsec1) entered disabled state [ 96.402930][ T1146] loop2: detected capacity change from 0 to 256 [ 96.428947][ T1142] device bridge0 left promiscuous mode [ 97.804343][ T455] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.854466][ T1146] loop2: detected capacity change from 0 to 512 [ 97.913653][ T1146] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.174: inode #1: comm syz.2.174: iget: illegal inode # [ 97.927159][ T1146] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.174: error while reading EA inode 1 err=-117 [ 97.981048][ T1146] EXT4-fs (loop2): 1 orphan inode deleted [ 97.987017][ T1146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.324317][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.333951][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.920721][ T1156] loop0: detected capacity change from 0 to 40427 [ 98.929848][ T1156] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable [ 99.043347][ T455] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.403123][ T284] EXT4-fs (loop2): unmounting filesystem. [ 99.518071][ T1156] loop0: detected capacity change from 0 to 40427 [ 99.525284][ T1156] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 99.533165][ T1156] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 99.552778][ T1156] F2FS-fs (loop0): invalid crc value [ 99.559572][ T1156] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.632327][ T1156] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.639477][ T1156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.796086][ T1176] device bridge0 entered promiscuous mode [ 99.829099][ T1176] bridge0: port 3(macsec1) entered blocking state [ 99.889544][ T1176] bridge0: port 3(macsec1) entered disabled state [ 101.398743][ T1188] loop4: detected capacity change from 0 to 2048 [ 101.422899][ T1176] device bridge0 left promiscuous mode [ 101.610011][ T1188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.483485][ T1193] loop1: detected capacity change from 0 to 2048 [ 102.497478][ T286] EXT4-fs (loop4): unmounting filesystem. [ 102.523032][ T1193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.868134][ T1211] device bridge0 entered promiscuous mode [ 102.884326][ T1211] bridge0: port 3(macsec1) entered blocking state [ 102.894705][ T1211] bridge0: port 3(macsec1) entered disabled state [ 102.902700][ T1211] device bridge0 left promiscuous mode [ 103.031792][ T334] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.141774][ T363] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.221769][ T334] usb 1-1: Using ep0 maxpacket: 16 [ 103.228060][ T334] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.255136][ T334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.285139][ T334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.303465][ T334] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.320480][ T334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.336002][ T334] usb 1-1: Product: syz [ 103.341779][ T363] usb 4-1: Using ep0 maxpacket: 32 [ 103.344583][ T334] usb 1-1: Manufacturer: syz [ 103.348530][ T363] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.358297][ T334] usb 1-1: SerialNumber: syz [ 103.374315][ T363] usb 4-1: config index 0 descriptor too short (expected 53, got 34) [ 103.404241][ T363] usb 4-1: config 2 has an invalid interface number: 221 but max is 0 [ 103.424537][ T363] usb 4-1: config 2 has no interface number 0 [ 103.433560][ T363] usb 4-1: config 2 interface 221 has no altsetting 0 [ 103.445317][ T363] usb 4-1: string descriptor 0 read error: -22 [ 103.452679][ T363] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 103.469386][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.489941][ T363] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 103.505410][ T363] usb 4-1: No valid video chain found. [ 103.700384][ T1209] loop3: detected capacity change from 0 to 1024 [ 103.732839][ T1209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.768788][ T1209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.780660][ T334] usb 1-1: 0:2 : does not exist [ 103.789655][ T334] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 103.803922][ T334] usb 1-1: USB disconnect, device number 12 [ 104.292359][ T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.904464][ T1226] loop0: detected capacity change from 0 to 256 [ 104.957453][ T1226] loop0: detected capacity change from 0 to 512 [ 105.026355][ T1228] loop2: detected capacity change from 0 to 2048 [ 105.036225][ T1226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.188: inode #1: comm syz.0.188: iget: illegal inode # [ 105.049820][ T1226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.188: error while reading EA inode 1 err=-117 [ 105.062510][ T1226] EXT4-fs (loop0): 1 orphan inode deleted [ 105.068469][ T1226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.093662][ T285] EXT4-fs (loop1): unmounting filesystem. [ 105.163006][ T1228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.259711][ T28] audit: type=1400 audit(1756440811.257:170): avc: denied { mounton } for pid=1227 comm="syz.2.190" path="/44/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.603850][ T1233] loop4: detected capacity change from 0 to 256 [ 106.627877][ T39] usb 4-1: USB disconnect, device number 8 [ 106.634014][ T455] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.674730][ T1230] loop4: detected capacity change from 0 to 512 [ 106.687862][ T1230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.189: inode #1: comm syz.4.189: iget: illegal inode # [ 106.701172][ T1230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.189: error while reading EA inode 1 err=-117 [ 106.714100][ T1230] EXT4-fs (loop4): 1 orphan inode deleted [ 106.848359][ T1230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.914946][ T287] EXT4-fs (loop3): unmounting filesystem. [ 106.921835][ T284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 106.936584][ T28] audit: type=1400 audit(1756440812.917:171): avc: denied { remove_name } for pid=284 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.084721][ T28] audit: type=1400 audit(1756440812.917:172): avc: denied { rmdir } for pid=284 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.109047][ T284] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 107.109449][ T283] EXT4-fs (loop0): unmounting filesystem. [ 107.135715][ T284] EXT4-fs (loop2): unmounting filesystem. [ 107.141199][ T28] audit: type=1400 audit(1756440813.127:173): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.164377][ T28] audit: type=1400 audit(1756440813.127:174): avc: denied { unlink } for pid=284 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 107.195634][ T28] audit: type=1400 audit(1756440813.137:175): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.240800][ T28] audit: type=1400 audit(1756440813.137:176): avc: denied { unlink } for pid=284 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.383990][ T286] EXT4-fs (loop4): unmounting filesystem. [ 107.392398][ T1257] device bridge0 entered promiscuous mode [ 107.398989][ T1257] bridge0: port 3(macsec1) entered blocking state [ 107.405850][ T1257] bridge0: port 3(macsec1) entered disabled state [ 107.417974][ T1259] loop4: detected capacity change from 0 to 1024 [ 107.425451][ T1259] EXT4-fs: Ignoring removed i_version option [ 108.125535][ T28] audit: type=1400 audit(1756440813.847:177): avc: denied { create } for pid=1253 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.147479][ T1259] EXT4-fs (loop4): Test dummy encryption mode enabled [ 108.155593][ T1257] device bridge0 left promiscuous mode [ 108.163638][ T1259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.272855][ T28] audit: type=1400 audit(1756440813.967:178): avc: denied { setopt } for pid=1253 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.292363][ T28] audit: type=1400 audit(1756440814.097:179): avc: denied { map } for pid=1253 comm="syz.2.193" path="socket:[20303]" dev="sockfs" ino=20303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.470857][ T1274] loop1: detected capacity change from 0 to 256 [ 108.535864][ T1274] loop1: detected capacity change from 0 to 512 [ 108.664941][ T1274] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.197: inode #1: comm syz.1.197: iget: illegal inode # [ 108.679575][ T1274] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.197: error while reading EA inode 1 err=-117 [ 108.693636][ T1274] EXT4-fs (loop1): 1 orphan inode deleted [ 108.699428][ T1274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.598387][ T285] EXT4-fs (loop1): unmounting filesystem. [ 109.618553][ T286] EXT4-fs (loop4): unmounting filesystem. [ 109.815000][ T1284] loop1: detected capacity change from 0 to 1024 [ 109.825583][ T1284] EXT4-fs: Ignoring removed i_version option [ 109.832821][ T1284] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.870213][ T1284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.891807][ T699] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.973324][ T285] EXT4-fs (loop1): unmounting filesystem. [ 110.055748][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.111783][ T6] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 110.161950][ T699] usb 4-1: Using ep0 maxpacket: 16 [ 110.168872][ T699] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.181094][ T699] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.192944][ T699] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.218110][ T1295] loop1: detected capacity change from 0 to 256 [ 110.251669][ T699] usb 4-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 110.261399][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 110.267363][ T699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.277815][ T39] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 110.287778][ T699] usb 4-1: Product: syz [ 110.302939][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.327908][ T699] usb 4-1: Manufacturer: syz [ 110.355586][ T699] usb 4-1: SerialNumber: syz [ 110.374017][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.448690][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.491259][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.515413][ T1298] device bridge0 entered promiscuous mode [ 110.521613][ T39] usb 5-1: Product: syz [ 110.536810][ T39] usb 5-1: Manufacturer: syz [ 110.557434][ T39] usb 5-1: SerialNumber: syz [ 110.818399][ T1298] bridge0: port 3(macsec1) entered blocking state [ 111.106879][ T699] usb 4-1: USB disconnect, device number 9 [ 111.112251][ T1298] bridge0: port 3(macsec1) entered disabled state [ 111.120343][ T1298] device bridge0 left promiscuous mode [ 111.126199][ T455] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.193678][ T1291] loop1: detected capacity change from 0 to 512 [ 111.202158][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 111.208597][ T1291] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.203: inode #1: comm syz.1.203: iget: illegal inode # [ 111.222228][ T1291] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.203: error while reading EA inode 1 err=-117 [ 111.234992][ T1291] EXT4-fs (loop1): 1 orphan inode deleted [ 111.240996][ T1291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.247760][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 111.258811][ T39] usb 5-1: 0:2 : does not exist [ 111.265263][ T379] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.275628][ T39] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 111.285010][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.295989][ T39] usb 5-1: USB disconnect, device number 5 [ 111.304104][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.324409][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 111.340400][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.351247][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.363617][ T6] usb 1-1: Product: syz [ 111.368114][ T6] usb 1-1: Manufacturer: syz [ 111.373973][ T6] usb 1-1: SerialNumber: syz [ 111.451484][ T285] EXT4-fs (loop1): unmounting filesystem. [ 111.471829][ T379] usb 3-1: Using ep0 maxpacket: 16 [ 111.482823][ T379] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.501842][ T379] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.512781][ T379] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.524506][ T379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 111.533650][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.542088][ T379] usb 3-1: Product: syz [ 111.546266][ T379] usb 3-1: Manufacturer: syz [ 111.550881][ T379] usb 3-1: SerialNumber: syz [ 111.722448][ T1312] device bridge0 entered promiscuous mode [ 111.729005][ T1312] bridge0: port 3(macsec1) entered blocking state [ 111.735701][ T1312] bridge0: port 3(macsec1) entered disabled state [ 111.742167][ T699] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 111.751370][ T1312] device bridge0 left promiscuous mode [ 111.785223][ T6] usb 1-1: 0:2 : does not exist [ 111.796544][ T6] usb 1-1: USB disconnect, device number 13 [ 111.971911][ T699] usb 4-1: Using ep0 maxpacket: 32 [ 112.178266][ T699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.193974][ T699] usb 4-1: config index 0 descriptor too short (expected 53, got 34) [ 112.207549][ T699] usb 4-1: config 2 has an invalid interface number: 221 but max is 0 [ 112.221808][ T699] usb 4-1: config 2 has no interface number 0 [ 112.228113][ T699] usb 4-1: config 2 interface 221 has no altsetting 0 [ 112.237285][ T699] usb 4-1: string descriptor 0 read error: -22 [ 112.243591][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.251106][ T699] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 112.260261][ T699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.270477][ T699] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 112.277555][ T699] usb 4-1: No valid video chain found. [ 112.441766][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 112.448129][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.458071][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.469192][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.477081][ T1303] loop3: detected capacity change from 0 to 1024 [ 112.480899][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 112.493117][ T1303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.509923][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.518374][ T39] usb 2-1: Product: syz [ 112.522799][ T39] usb 2-1: Manufacturer: syz [ 112.525059][ T1303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.604532][ T39] usb 2-1: SerialNumber: syz [ 112.775764][ T1328] loop0: detected capacity change from 0 to 256 [ 112.954692][ T1328] loop0: detected capacity change from 0 to 512 [ 113.033099][ T1328] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.208: inode #1: comm syz.0.208: iget: illegal inode # [ 113.047876][ T1328] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.208: error while reading EA inode 1 err=-117 [ 113.063890][ T1328] EXT4-fs (loop0): 1 orphan inode deleted [ 113.069726][ T1328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.151989][ T379] usb 3-1: USB disconnect, device number 5 [ 114.316093][ T283] EXT4-fs (loop0): unmounting filesystem. [ 114.574230][ T1342] loop0: detected capacity change from 0 to 128 [ 114.738027][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 114.738070][ T28] audit: type=1400 audit(1756440820.717:182): avc: denied { mount } for pid=1338 comm="syz.0.212" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 114.830270][ T1342] FAULT_INJECTION: forcing a failure. [ 114.830270][ T1342] name failslab, interval 1, probability 0, space 0, times 0 [ 114.843255][ T1342] CPU: 1 PID: 1342 Comm: syz.0.212 Not tainted syzkaller #0 [ 114.850559][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.860610][ T1342] Call Trace: [ 114.863963][ T1342] [ 114.866893][ T1342] __dump_stack+0x21/0x24 [ 114.871235][ T1342] dump_stack_lvl+0xee/0x150 [ 114.876013][ T1342] ? __cfi_dump_stack_lvl+0x8/0x8 [ 114.881144][ T1342] dump_stack+0x15/0x24 [ 114.885408][ T1342] should_fail_ex+0x3d4/0x520 [ 114.890198][ T1342] ? security_inode_alloc+0x33/0x120 [ 114.895590][ T1342] __should_failslab+0xac/0xf0 [ 114.900637][ T1342] should_failslab+0x9/0x20 [ 114.905160][ T1342] kmem_cache_alloc+0x3b/0x330 [ 114.909936][ T1342] ? slab_pre_alloc_hook+0x30/0x1e0 [ 114.915403][ T1342] security_inode_alloc+0x33/0x120 [ 114.920605][ T1342] inode_init_always+0x6fc/0x960 [ 114.925551][ T1342] new_inode_pseudo+0xa2/0x1f0 [ 114.930409][ T1342] __sock_create+0x12c/0x7c0 [ 114.935003][ T1342] ? irq_work_run+0xf0/0xf0 [ 114.939679][ T1342] __sys_socket+0xcd/0x1a0 [ 114.944096][ T1342] __x64_sys_socket+0x7a/0x90 [ 114.948787][ T1342] x64_sys_call+0x449/0x9a0 [ 114.953298][ T1342] do_syscall_64+0x4c/0xa0 [ 114.957722][ T1342] ? clear_bhb_loop+0x30/0x80 [ 114.962580][ T1342] ? clear_bhb_loop+0x30/0x80 [ 114.967278][ T1342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.973262][ T1342] RIP: 0033:0x7f743978ebe9 [ 114.977762][ T1342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.997469][ T1342] RSP: 002b:00007f743a5c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.006116][ T1342] RAX: ffffffffffffffda RBX: 00007f74399b6180 RCX: 00007f743978ebe9 [ 115.014181][ T1342] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 0000000000000002 [ 115.022206][ T1342] RBP: 00007f743a5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 115.030706][ T1342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.038671][ T1342] R13: 00007f74399b6218 R14: 00007f74399b6180 R15: 00007fff4d51e418 [ 115.046741][ T1342] [ 115.114083][ T1342] socket: no more sockets [ 115.129162][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.554053][ T1343] usb 4-1: USB disconnect, device number 10 [ 115.662755][ T287] EXT4-fs (loop3): unmounting filesystem. [ 115.972012][ T28] audit: type=1400 audit(1756440821.977:183): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 116.107900][ T28] audit: type=1400 audit(1756440822.097:184): avc: denied { read write } for pid=1346 comm="syz.0.213" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.155554][ T1355] device bridge0 entered promiscuous mode [ 116.162905][ T28] audit: type=1400 audit(1756440822.097:185): avc: denied { open } for pid=1346 comm="syz.0.213" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.508820][ T1355] bridge0: port 3(macsec1) entered blocking state [ 116.555789][ T39] usb 2-1: USB disconnect, device number 4 [ 116.576768][ T1355] bridge0: port 3(macsec1) entered disabled state [ 116.615298][ T1355] device bridge0 left promiscuous mode [ 117.024291][ T626] udevd[626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 117.157418][ T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.182466][ T1365] loop2: detected capacity change from 0 to 2048 [ 117.200270][ T28] audit: type=1400 audit(1756440823.197:186): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 117.307141][ T1365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.350687][ T284] EXT4-fs (loop2): unmounting filesystem. [ 117.866347][ T28] audit: type=1400 audit(1756440823.867:187): avc: denied { create } for pid=1377 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.889871][ T1378] loop2: detected capacity change from 0 to 128 [ 117.910048][ T1382] loop3: detected capacity change from 0 to 128 [ 117.914720][ T28] audit: type=1400 audit(1756440823.907:188): avc: denied { remount } for pid=1377 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.963446][ T455] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.971355][ T346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.209560][ T1393] loop1: detected capacity change from 0 to 256 [ 118.260137][ T1393] loop1: detected capacity change from 0 to 512 [ 118.416832][ T1393] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.222: inode #1: comm syz.1.222: iget: illegal inode # [ 118.431422][ T1393] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.222: error while reading EA inode 1 err=-117 [ 118.445299][ T1393] EXT4-fs (loop1): 1 orphan inode deleted [ 118.451257][ T1393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.615720][ T39] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.941856][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 118.949857][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.075248][ T39] usb 1-1: config index 0 descriptor too short (expected 53, got 34) [ 119.232880][ T39] usb 1-1: config 2 has an invalid interface number: 221 but max is 0 [ 119.405140][ T39] usb 1-1: config 2 has no interface number 0 [ 119.531368][ T39] usb 1-1: config 2 interface 221 has no altsetting 0 [ 119.598774][ T39] usb 1-1: string descriptor 0 read error: -22 [ 119.651443][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 119.726832][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.804042][ T39] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 119.813764][ T285] EXT4-fs (loop1): unmounting filesystem. [ 119.827641][ T39] usb 1-1: No valid video chain found. [ 120.315353][ T1389] loop0: detected capacity change from 0 to 1024 [ 120.329539][ T1389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.430021][ T1389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.293060][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.832055][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 122.146305][ T1429] loop2: detected capacity change from 0 to 2048 [ 122.267521][ T1429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.216314][ T284] EXT4-fs (loop2): unmounting filesystem. [ 123.225646][ T1343] usb 1-1: USB disconnect, device number 14 [ 123.311774][ T858] Bluetooth: hci0: command 0x1003 tx timeout [ 123.311804][ T847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.331551][ T283] EXT4-fs (loop0): unmounting filesystem. [ 123.412428][ T1443] loop2: detected capacity change from 0 to 256 [ 123.551575][ T1443] loop2: detected capacity change from 0 to 512 [ 123.689468][ T1443] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.235: inode #1: comm syz.2.235: iget: illegal inode # [ 123.703306][ T1443] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.235: error while reading EA inode 1 err=-117 [ 123.718299][ T1443] EXT4-fs (loop2): 1 orphan inode deleted [ 123.724154][ T1443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.882279][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 124.533419][ T847] Bluetooth: hci1: command 0x1003 tx timeout [ 124.697904][ T1453] loop0: detected capacity change from 0 to 256 [ 124.925750][ T284] EXT4-fs (loop2): unmounting filesystem. [ 124.973327][ T1453] loop0: detected capacity change from 0 to 512 [ 125.067076][ T1447] loop4: detected capacity change from 0 to 2048 [ 125.100288][ T1453] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.236: inode #1: comm syz.0.236: iget: illegal inode # [ 125.114032][ T1453] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.236: error while reading EA inode 1 err=-117 [ 125.128047][ T1453] EXT4-fs (loop0): 1 orphan inode deleted [ 125.133882][ T1453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.229546][ T1447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.359807][ T283] EXT4-fs (loop0): unmounting filesystem. [ 126.457377][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.727637][ T286] EXT4-fs (loop4): unmounting filesystem. [ 126.741676][ T1474] loop0: detected capacity change from 0 to 2048 [ 126.816714][ T1474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.119397][ T1481] FAULT_INJECTION: forcing a failure. [ 127.119397][ T1481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.132700][ T1481] CPU: 0 PID: 1481 Comm: syz.0.241 Not tainted syzkaller #0 [ 127.140014][ T1481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.150361][ T1481] Call Trace: [ 127.153638][ T1481] [ 127.156596][ T1481] __dump_stack+0x21/0x24 [ 127.161051][ T1481] dump_stack_lvl+0xee/0x150 [ 127.165687][ T1481] ? __cfi_dump_stack_lvl+0x8/0x8 [ 127.170752][ T1481] ? _parse_integer+0x2a/0x40 [ 127.175455][ T1481] dump_stack+0x15/0x24 [ 127.179641][ T1481] should_fail_ex+0x3d4/0x520 [ 127.184342][ T1481] should_fail+0xb/0x10 [ 127.188572][ T1481] should_fail_usercopy+0x1a/0x20 [ 127.193809][ T1481] _copy_from_user+0x1e/0xc0 [ 127.198427][ T1481] ___sys_sendmsg+0x155/0x290 [ 127.203124][ T1481] ? __sys_sendmsg+0x270/0x270 [ 127.207992][ T1481] ? __kasan_check_write+0x14/0x20 [ 127.213212][ T1481] ? proc_fail_nth_write+0x17a/0x1f0 [ 127.218524][ T1481] ? vfs_write+0x9d6/0xca0 [ 127.223141][ T1481] ? __fdget+0x19c/0x220 [ 127.227458][ T1481] __x64_sys_sendmsg+0x1f0/0x2c0 [ 127.232428][ T1481] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 127.237962][ T1481] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 127.244073][ T1481] x64_sys_call+0x171/0x9a0 [ 127.248604][ T1481] do_syscall_64+0x4c/0xa0 [ 127.253570][ T1481] ? clear_bhb_loop+0x30/0x80 [ 127.258291][ T1481] ? clear_bhb_loop+0x30/0x80 [ 127.263083][ T1481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.269094][ T1481] RIP: 0033:0x7f743978ebe9 [ 127.273532][ T1481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.293953][ T1481] RSP: 002b:00007f743a5e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.302492][ T1481] RAX: ffffffffffffffda RBX: 00007f74399b6090 RCX: 00007f743978ebe9 [ 127.310546][ T1481] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000b [ 127.318592][ T1481] RBP: 00007f743a5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.326748][ T1481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.334716][ T1481] R13: 00007f74399b6128 R14: 00007f74399b6090 R15: 00007fff4d51e418 [ 127.342208][ T379] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.342689][ T1481] [ 127.536791][ T1493] loop1: detected capacity change from 0 to 256 [ 127.637303][ T379] usb 3-1: Using ep0 maxpacket: 32 [ 127.678042][ T1493] loop1: detected capacity change from 0 to 512 [ 127.705260][ T283] EXT4-fs (loop0): unmounting filesystem. [ 127.766880][ T379] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.814560][ T1493] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.244: inode #1: comm syz.1.244: iget: illegal inode # [ 127.828729][ T1493] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.244: error while reading EA inode 1 err=-117 [ 127.842934][ T1493] EXT4-fs (loop1): 1 orphan inode deleted [ 127.848832][ T1493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.992317][ T379] usb 3-1: config index 0 descriptor too short (expected 53, got 34) [ 128.466945][ T379] usb 3-1: config 2 has an invalid interface number: 221 but max is 0 [ 128.493091][ T1498] device bridge0 entered promiscuous mode [ 128.509242][ T379] usb 3-1: config 2 has no interface number 0 [ 128.527979][ T285] EXT4-fs (loop1): unmounting filesystem. [ 128.538554][ T379] usb 3-1: config 2 interface 221 has no altsetting 0 [ 128.577382][ T379] usb 3-1: string descriptor 0 read error: -22 [ 128.602063][ T379] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 128.628672][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.635699][ T1498] bridge0: port 3(macsec1) entered blocking state [ 128.644794][ T1498] bridge0: port 3(macsec1) entered disabled state [ 128.657256][ T379] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 128.670826][ T379] usb 3-1: No valid video chain found. [ 128.681831][ T1498] device bridge0 left promiscuous mode [ 128.783442][ T1508] loop1: detected capacity change from 0 to 128 [ 128.841860][ T379] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.867713][ T1509] overlayfs: missing 'lowerdir' [ 128.882063][ T1484] loop2: detected capacity change from 0 to 1024 [ 128.892185][ T1484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.937919][ T1484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.061814][ T379] usb 1-1: Using ep0 maxpacket: 32 [ 129.079203][ T379] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.109404][ T379] usb 1-1: config index 0 descriptor too short (expected 53, got 34) [ 129.211830][ T379] usb 1-1: config 2 has an invalid interface number: 221 but max is 0 [ 129.300161][ T379] usb 1-1: config 2 has no interface number 0 [ 129.530889][ T379] usb 1-1: config 2 interface 221 has no altsetting 0 [ 129.553508][ T379] usb 1-1: string descriptor 0 read error: -22 [ 129.559763][ T379] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 129.633124][ T1519] loop3: detected capacity change from 0 to 256 [ 129.697057][ T1519] loop3: detected capacity change from 0 to 512 [ 129.731531][ T1519] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.250: inode #1: comm syz.3.250: iget: illegal inode # [ 129.745773][ T1519] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.250: error while reading EA inode 1 err=-117 [ 129.758667][ T1519] EXT4-fs (loop3): 1 orphan inode deleted [ 129.764467][ T1519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.278481][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.374112][ T379] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 130.381014][ T379] usb 1-1: No valid video chain found. [ 130.470694][ T1527] loop1: detected capacity change from 0 to 256 [ 130.530065][ T1527] loop1: detected capacity change from 0 to 512 [ 130.607718][ T1501] loop0: detected capacity change from 0 to 1024 [ 130.625030][ T287] EXT4-fs (loop3): unmounting filesystem. [ 130.637306][ T1501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.657409][ T1527] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.251: inode #1: comm syz.1.251: iget: illegal inode # [ 130.671457][ T1527] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.251: error while reading EA inode 1 err=-117 [ 130.686367][ T1527] EXT4-fs (loop1): 1 orphan inode deleted [ 130.692194][ T1527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.538588][ T1501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.759671][ T60] usb 1-1: USB disconnect, device number 15 [ 131.767489][ T303] usb 3-1: USB disconnect, device number 6 [ 131.824841][ T285] EXT4-fs (loop1): unmounting filesystem. [ 131.845283][ T284] EXT4-fs (loop2): unmounting filesystem. [ 131.855926][ T283] EXT4-fs (loop0): unmounting filesystem. [ 131.902532][ T334] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 133.098759][ T28] audit: type=1400 audit(1756440838.667:189): avc: denied { unlink } for pid=1536 comm="syz.2.255" name="#1" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.297261][ T1547] loop3: detected capacity change from 0 to 2048 [ 133.723475][ T1549] loop0: detected capacity change from 0 to 256 [ 134.530896][ T1553] loop1: detected capacity change from 0 to 1024 [ 134.561273][ T1547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.679161][ T1553] EXT4-fs: Ignoring removed i_version option [ 134.822474][ T1553] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.846769][ T1553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.009638][ T1565] loop2: detected capacity change from 0 to 256 [ 135.047515][ T287] EXT4-fs (loop3): unmounting filesystem. [ 135.127843][ T1565] loop2: detected capacity change from 0 to 512 [ 135.223447][ T1565] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.259: inode #1: comm syz.2.259: iget: illegal inode # [ 135.237134][ T1565] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.259: error while reading EA inode 1 err=-117 [ 135.251122][ T1565] EXT4-fs (loop2): 1 orphan inode deleted [ 135.257127][ T1565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.836148][ T1573] loop3: detected capacity change from 0 to 1024 [ 135.851568][ T1571] device bridge0 entered promiscuous mode [ 135.899097][ T1571] bridge0: port 3(macsec1) entered blocking state [ 135.923312][ T285] EXT4-fs (loop1): unmounting filesystem. [ 135.942846][ T1573] EXT4-fs: Ignoring removed i_version option [ 135.965366][ T1573] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.004242][ T1573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.019397][ T1571] bridge0: port 3(macsec1) entered disabled state [ 136.082445][ T1571] device bridge0 left promiscuous mode [ 136.089367][ T284] EXT4-fs (loop2): unmounting filesystem. [ 136.133352][ T287] EXT4-fs (loop3): unmounting filesystem. [ 136.491802][ T1128] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.501793][ T334] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.681818][ T1128] usb 4-1: Using ep0 maxpacket: 32 [ 136.691769][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 136.692028][ T1128] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.709288][ T334] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.719305][ T1128] usb 4-1: config index 0 descriptor too short (expected 53, got 34) [ 136.729197][ T334] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.736799][ T1128] usb 4-1: config 2 has an invalid interface number: 221 but max is 0 [ 136.767041][ T334] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.771644][ T1128] usb 4-1: config 2 has no interface number 0 [ 136.797607][ T334] usb 5-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 136.806527][ T1128] usb 4-1: config 2 interface 221 has no altsetting 0 [ 136.821786][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.826609][ T1128] usb 4-1: string descriptor 0 read error: -22 [ 136.847068][ T1128] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 136.862293][ T334] usb 5-1: Product: syz [ 136.866495][ T334] usb 5-1: Manufacturer: syz [ 136.869030][ T1128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.878997][ T334] usb 5-1: SerialNumber: syz [ 136.910584][ T1128] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 136.936855][ T1128] usb 4-1: No valid video chain found. [ 137.116046][ T1590] loop3: detected capacity change from 0 to 1024 [ 137.142298][ T1590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.184784][ T1590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.897271][ T1606] loop2: detected capacity change from 0 to 2048 [ 137.953065][ T1606] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.983127][ T1606] xt_bpf: check failed: parse error [ 138.310444][ T334] usb 5-1: USB disconnect, device number 7 [ 138.930414][ T19] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 138.947662][ T284] EXT4-fs (loop2): unmounting filesystem. [ 139.047326][ T1623] loop4: detected capacity change from 0 to 2048 [ 139.699948][ T1623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.720317][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.732169][ T363] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.766588][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.780122][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 140.012032][ T363] usb 1-1: Using ep0 maxpacket: 32 [ 140.018406][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.029704][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.192445][ T1633] loop2: detected capacity change from 0 to 2048 [ 140.217984][ T286] EXT4-fs (loop4): unmounting filesystem. [ 140.257826][ T363] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.293895][ T1633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.360783][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.392113][ T363] usb 1-1: config 0 descriptor?? [ 140.403215][ T363] hub 1-1:0.0: USB hub found [ 140.620263][ T1627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.636409][ T1627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.658058][ T363] hub 1-1:0.0: 1 port detected [ 140.812251][ T19] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.851409][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.012413][ T379] usb 4-1: USB disconnect, device number 11 [ 141.121913][ T28] audit: type=1400 audit(1756440847.077:190): avc: denied { create } for pid=1625 comm="syz.0.274" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.167122][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.175594][ T19] usb 2-1: Product: syz [ 141.176193][ T284] EXT4-fs (loop2): unmounting filesystem. [ 141.180009][ T19] usb 2-1: Manufacturer: syz [ 141.190151][ T19] usb 2-1: SerialNumber: syz [ 141.195979][ T28] audit: type=1400 audit(1756440847.077:191): avc: denied { map } for pid=1625 comm="syz.0.274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.224466][ T19] usb 2-1: can't set config #1, error -71 [ 141.231218][ T19] usb 2-1: USB disconnect, device number 5 [ 141.261241][ T28] audit: type=1400 audit(1756440847.077:192): avc: denied { read write } for pid=1625 comm="syz.0.274" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.286802][ T287] EXT4-fs (loop3): unmounting filesystem. [ 141.310601][ T28] audit: type=1400 audit(1756440847.157:193): avc: denied { mount } for pid=1640 comm="syz.1.277" name="/" dev="ramfs" ino=22494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.341810][ T28] audit: type=1400 audit(1756440847.337:194): avc: denied { read write } for pid=1640 comm="syz.1.277" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.365323][ T28] audit: type=1400 audit(1756440847.337:195): avc: denied { open } for pid=1640 comm="syz.1.277" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.449524][ T1653] netlink: 8 bytes leftover after parsing attributes in process `’'. [ 141.465014][ T28] audit: type=1400 audit(1756440847.447:196): avc: denied { setopt } for pid=1652 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.486265][ T1653] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.493506][ T1653] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.505176][ T1654] device bridge0 entered promiscuous mode [ 141.506400][ T363] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 141.518070][ T1637] usb 1-1: USB disconnect, device number 16 [ 141.534391][ T1654] bridge0: port 3(macsec1) entered blocking state [ 141.601365][ T1658] loop3: detected capacity change from 0 to 256 [ 141.811598][ T1654] bridge0: port 3(macsec1) entered disabled state [ 142.039454][ T1654] device bridge0 left promiscuous mode [ 142.131806][ T1637] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.381808][ T1637] usb 3-1: Using ep0 maxpacket: 16 [ 142.390563][ T1637] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.774258][ T455] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.830116][ T1637] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.905988][ T1637] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.023287][ T1658] loop3: detected capacity change from 0 to 512 [ 143.059898][ T1637] usb 3-1: New USB device found, idVendor=1d6b, idProduct=00f8, bcdDevice= 0.40 [ 143.142696][ T1658] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.279: inode #1: comm syz.3.279: iget: illegal inode # [ 143.156803][ T1658] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.279: error while reading EA inode 1 err=-117 [ 143.169836][ T1658] EXT4-fs (loop3): 1 orphan inode deleted [ 143.173054][ T1670] loop0: detected capacity change from 0 to 512 [ 143.175691][ T1658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 143.235162][ T1637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.261199][ T1670] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 143.285921][ T1637] usb 3-1: Product: syz [ 143.298448][ T1637] usb 3-1: Manufacturer: syz [ 143.301865][ T1670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.306327][ T1637] usb 3-1: SerialNumber: syz [ 143.438493][ T287] EXT4-fs (loop3): unmounting filesystem. [ 143.444643][ T1670] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.282: invalid indirect mapped block 4294967295 (level 0) [ 143.462023][ T1670] EXT4-fs (loop0): Remounting filesystem read-only [ 143.468636][ T1670] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.282: invalid indirect mapped block 4294967295 (level 1) [ 143.492512][ T1670] EXT4-fs (loop0): Remounting filesystem read-only [ 143.500024][ T1670] EXT4-fs (loop0): 1 orphan inode deleted [ 143.506809][ T1670] EXT4-fs (loop0): 1 truncate cleaned up [ 143.513106][ T1670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.576384][ T1677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 143.585458][ T1677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 143.594397][ T1677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 143.619109][ T28] audit: type=1400 audit(1756440849.557:197): avc: denied { write } for pid=1673 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.741815][ T28] audit: type=1400 audit(1756440849.567:198): avc: denied { create } for pid=1673 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.801602][ T28] audit: type=1400 audit(1756440849.577:199): avc: denied { write } for pid=1673 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.257506][ T283] EXT4-fs (loop0): unmounting filesystem. [ 144.954429][ T519] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.968885][ T1705] loop3: detected capacity change from 0 to 256 [ 145.062503][ T1705] loop3: detected capacity change from 0 to 512 [ 145.265388][ T1705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.291: inode #1: comm syz.3.291: iget: illegal inode # [ 145.279326][ T1705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.291: error while reading EA inode 1 err=-117 [ 145.293332][ T1705] EXT4-fs (loop3): 1 orphan inode deleted [ 145.299141][ T1705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.781943][ T1706] loop4: detected capacity change from 0 to 2048 [ 146.173037][ T1706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.185606][ T1637] usb 3-1: USB disconnect, device number 7 [ 146.244341][ T287] EXT4-fs (loop3): unmounting filesystem. [ 146.291822][ T519] usb 1-1: Using ep0 maxpacket: 32 [ 146.306516][ T519] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.334300][ T519] usb 1-1: config index 0 descriptor too short (expected 53, got 34) [ 146.408196][ T519] usb 1-1: config 2 has an invalid interface number: 221 but max is 0 [ 146.422164][ T519] usb 1-1: config 2 has no interface number 0 [ 146.428594][ T519] usb 1-1: config 2 interface 221 has no altsetting 0 [ 146.743653][ T519] usb 1-1: string descriptor 0 read error: -22 [ 146.749922][ T519] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 146.761810][ T519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.778556][ T519] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 146.789877][ T519] usb 1-1: No valid video chain found. [ 146.985110][ T1697] loop0: detected capacity change from 0 to 1024 [ 147.011321][ T1697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.055330][ T1697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.694366][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 147.714076][ T1736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.752392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 147.772423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.798805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 147.817779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.836657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.862384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.880810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.902193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.074161][ T1736] loop3: detected capacity change from 0 to 40427 [ 148.099589][ T1736] F2FS-fs (loop3): fault_injection options not supported [ 148.120531][ T1736] F2FS-fs (loop3): invalid crc value [ 148.143310][ T1736] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.196223][ T1736] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 148.222389][ T1736] F2FS-fs (loop3): Failed to read root inode [ 148.418835][ T28] audit: type=1400 audit(1756440854.417:200): avc: denied { create } for pid=1734 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.566393][ T519] usb 1-1: USB disconnect, device number 17 [ 148.716678][ T1754] loop2: detected capacity change from 0 to 2048 [ 148.760506][ T283] EXT4-fs (loop0): unmounting filesystem. [ 148.863586][ T1753] FAULT_INJECTION: forcing a failure. [ 148.863586][ T1753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.882864][ T1727] ------------[ cut here ]------------ [ 148.888508][ T1727] kernel BUG at fs/buffer.c:2714! [ 148.939003][ T1754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.040797][ T1727] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 149.046931][ T1727] CPU: 1 PID: 1727 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 149.054838][ T1727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.064907][ T1727] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 149.070297][ T1727] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 88 36 e8 ff e9 b0 fe ff ff e8 4e db a3 ff 0f 0b e8 47 db a3 ff <0f> 0b e8 40 db a3 ff 0f 0b e8 39 db a3 ff 0f 0b e8 32 db a3 ff 0f [ 149.090019][ T1727] RSP: 0018:ffffc900108d7ca0 EFLAGS: 00010293 [ 149.096106][ T1727] RAX: ffffffff81cc2c19 RBX: 0000000000000000 RCX: ffff88813910a880 [ 149.104090][ T1727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.112072][ T1727] RBP: ffffc900108d7cf0 R08: dffffc0000000000 R09: ffffed1022fa7f90 [ 149.120146][ T1727] R10: ffffed1022fa7f90 R11: 1ffff11022fa7f8f R12: 0000000000000000 [ 149.128181][ T1727] R13: 1ffff11022fa7f8f R14: ffff888117d3fc78 R15: 0000000000003801 [ 149.136529][ T1727] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 149.145742][ T1727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.152346][ T1727] CR2: 00007f6e37d83ad8 CR3: 0000000138604000 CR4: 00000000003506a0 [ 149.160332][ T1727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.168325][ T1727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.176315][ T1727] Call Trace: [ 149.179602][ T1727] [ 149.182548][ T1727] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 149.188462][ T1727] submit_bh+0x1f/0x30 [ 149.192552][ T1727] write_mmp_block_thawed+0x34a/0x4c0 [ 149.198050][ T1727] ? read_mmp_block+0x6d0/0x6d0 [ 149.202955][ T1727] ? __cfi_process_timeout+0x10/0x10 [ 149.208265][ T1727] write_mmp_block+0x138/0x2b0 [ 149.213049][ T1727] kmmpd+0x215/0x950 [ 149.216961][ T1727] kthread+0x281/0x320 [ 149.221225][ T1727] ? __cfi_kmmpd+0x10/0x10 [ 149.225742][ T1727] ? __cfi_kthread+0x10/0x10 [ 149.230435][ T1727] ret_from_fork+0x1f/0x30 [ 149.234880][ T1727] [ 149.237917][ T1727] Modules linked in: [ 149.594976][ T1753] CPU: 0 PID: 1753 Comm: syz.3.300 Tainted: G D syzkaller #0 [ 149.604019][ T1753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.614097][ T1753] Call Trace: [ 149.617379][ T1753] [ 149.620300][ T1753] __dump_stack+0x21/0x24 [ 149.624636][ T1753] dump_stack_lvl+0xee/0x150 [ 149.629234][ T1753] ? __cfi_dump_stack_lvl+0x8/0x8 [ 149.634429][ T1753] ? finish_task_switch+0x16b/0x7b0 [ 149.639710][ T1753] ? __switch_to_asm+0x3a/0x60 [ 149.644471][ T1753] dump_stack+0x15/0x24 [ 149.648723][ T1753] should_fail_ex+0x3d4/0x520 [ 149.653402][ T1753] should_fail+0xb/0x10 [ 149.657644][ T1753] should_fail_usercopy+0x1a/0x20 [ 149.662669][ T1753] copyout+0x20/0xa0 [ 149.666562][ T1753] _copy_to_iter+0x3f0/0xe50 [ 149.671154][ T1753] ? __cfi__copy_to_iter+0x10/0x10 [ 149.676263][ T1753] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 149.682323][ T1753] ? irqentry_exit+0x37/0x40 [ 149.686910][ T1753] ? sysvec_reschedule_ipi+0x78/0x80 [ 149.692194][ T1753] copy_page_to_iter+0x216/0x320 [ 149.697132][ T1753] filemap_read+0x1a2e/0x22c0 [ 149.701805][ T1753] ? trie_delete_elem+0x40b/0x720 [ 149.706835][ T1753] ? __cfi_filemap_read+0x10/0x10 [ 149.711861][ T1753] ? _raw_spin_unlock+0x4c/0x70 [ 149.716715][ T1753] ? finish_task_switch+0x16b/0x7b0 [ 149.721936][ T1753] ? __switch_to_asm+0x3a/0x60 [ 149.726704][ T1753] ? __schedule+0xb8f/0x14e0 [ 149.731300][ T1753] ? release_firmware_map_entry+0x194/0x194 [ 149.737366][ T1753] generic_file_read_iter+0x115/0x630 [ 149.742731][ T1753] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 149.748459][ T1753] ? preempt_schedule_irq+0xbb/0x110 [ 149.753745][ T1753] ? __cfi_generic_file_read_iter+0x10/0x10 [ 149.759631][ T1753] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 149.765695][ T1753] ? irqentry_exit+0x37/0x40 [ 149.770282][ T1753] ? sysvec_reschedule_ipi+0x78/0x80 [ 149.775648][ T1753] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 149.781276][ T1753] do_iter_read+0x662/0xb30 [ 149.785889][ T1753] ? _copy_from_user+0x8f/0xc0 [ 149.790654][ T1753] ? iovec_from_user+0x2a2/0x2e0 [ 149.795590][ T1753] ? vfs_iter_read+0xa0/0xa0 [ 149.800179][ T1753] ? import_iovec+0x7c/0xb0 [ 149.804683][ T1753] do_preadv+0x1f6/0x330 [ 149.808987][ T1753] ? _raw_spin_unlock+0x4c/0x70 [ 149.813928][ T1753] ? vfs_writev+0x590/0x590 [ 149.818513][ T1753] ? __switch_to_asm+0x3a/0x60 [ 149.823363][ T1753] ? __kasan_check_write+0x14/0x20 [ 149.828482][ T1753] __x64_sys_preadv+0x9e/0xb0 [ 149.833253][ T1753] x64_sys_call+0x370/0x9a0 [ 149.837807][ T1753] do_syscall_64+0x4c/0xa0 [ 149.842252][ T1753] ? clear_bhb_loop+0x30/0x80 [ 149.847003][ T1753] ? clear_bhb_loop+0x30/0x80 [ 149.851764][ T1753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.857668][ T1753] RIP: 0033:0x7f159f78ebe9 [ 149.862275][ T1753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.881963][ T1753] RSP: 002b:00007f15a0609038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.890374][ T1753] RAX: ffffffffffffffda RBX: 00007f159f9b6090 RCX: 00007f159f78ebe9 [ 149.898375][ T1753] RDX: 0000000000000005 RSI: 00002000000015c0 RDI: 000000000000000a [ 149.906342][ T1753] RBP: 00007f15a0609090 R08: 000000000000003f R09: 0000000000000000 [ 149.914309][ T1753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.922451][ T1753] R13: 00007f159f9b6128 R14: 00007f159f9b6090 R15: 00007ffff2092a18 [ 149.930506][ T1753] [ 149.976945][ T284] EXT4-fs (loop2): unmounting filesystem. [ 149.982503][ T1727] ---[ end trace 0000000000000000 ]--- [ 149.989153][ T286] EXT4-fs (loop4): unmounting filesystem. [ 149.997396][ T1727] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 150.008353][ T1727] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 88 36 e8 ff e9 b0 fe ff ff e8 4e db a3 ff 0f 0b e8 47 db a3 ff <0f> 0b e8 40 db a3 ff 0f 0b e8 39 db a3 ff 0f 0b e8 32 db a3 ff 0f [ 150.042922][ T1727] RSP: 0018:ffffc900108d7ca0 EFLAGS: 00010293 [ 150.049089][ T1727] RAX: ffffffff81cc2c19 RBX: 0000000000000000 RCX: ffff88813910a880 [ 150.057153][ T1727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.065283][ T1727] RBP: ffffc900108d7cf0 R08: dffffc0000000000 R09: ffffed1022fa7f90 [ 150.073527][ T1727] R10: ffffed1022fa7f90 R11: 1ffff11022fa7f8f R12: 0000000000000000 [ 150.081604][ T1727] R13: 1ffff11022fa7f8f R14: ffff888117d3fc78 R15: 0000000000003801 [ 150.089635][ T1727] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 150.098851][ T1727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.105532][ T1727] CR2: 00007f8aee383ad8 CR3: 0000000130423000 CR4: 00000000003506b0 [ 150.113836][ T1727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.121884][ T1727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.129896][ T1727] Kernel panic - not syncing: Fatal exception [ 150.136207][ T1727] Kernel Offset: disabled [ 150.140508][ T1727] Rebooting in 86400 seconds..