last executing test programs: 12.262981214s ago: executing program 3 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x83dd, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x5, 0x3, 0x48, @remote, @mcast2, 0x7800, 0x7800, 0x3, 0xfffffff9}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r3, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)='}$!!&,$\x00', 0x4000, &(0x7f0000000500)={@align=0xd5, {0x14, 0x4, 0x8}}, 0x4, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000b00)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r10, &(0x7f0000000f40)={0x1f, 0x4, 0x4}, 0x6) r11 = syz_open_dev$vcsa(&(0x7f0000000680), 0x4, 0x2200) r12 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0) read(r12, &(0x7f0000000700)=""/256, 0x100) accept4(r12, 0x0, &(0x7f0000000ac0), 0x1800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x6, 0xc, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r15, 0x2000300, 0xe, 0x0, &(0x7f0000001040)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r16, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="fc010000190001002bbd700001000000fe880000000000000000000000000101ac1414aa00000000000000000000000000000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000a00002000000000000000001000000000044010500fc01000000000000000000000000000000000000330000000000000064010100000000000000000000000000ff34000000000000000000000000000040200000ffffffff000000000000000000000000000020002b00"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x6, &(0x7f0000000080)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0xd8, &(0x7f0000000100)=""/216, 0x41000, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r4, r5, r6, r7, 0xffffffffffffffff, r8, r9, r11, r12, r13], &(0x7f0000000900)=[{0x3, 0x4, 0x1, 0x5}, {0x3, 0x1, 0xd, 0x1}, {0x3, 0x4, 0xd, 0x2}, {0x0, 0x5, 0x3, 0x5}, {0x1, 0x1, 0x9, 0x3}], 0x10, 0x5362}, 0x94) bind$inet6(r0, &(0x7f0000000b40)={0xa, 0x4e20, 0x400000, @mcast2, 0x4}, 0x1c) 12.197387671s ago: executing program 3 (id=114): r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8912, &(0x7f0000000080)={'veth0_to_batadv\x00', @random="bc1a09012845"}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRESDEC=r2], 0x48}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @loopback}, &(0x7f0000000340)=0xc) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@RTM_DELMDB={0x78, 0x55, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x0, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@local}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4840}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.126399688s ago: executing program 3 (id=115): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$tun(r3, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xc000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffd}]}}]}, 0x38}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b00)={0x8, 0x0, [{0xdddd0000, 0xa9, &(0x7f0000000080)=""/169}, {0x2000, 0x3c, &(0x7f0000000440)=""/60}, {0xeeee0000, 0x11, &(0x7f0000000180)=""/17}, {0x7000, 0xfc, &(0x7f00000001c0)=""/252}, {0xeeef0000, 0xfc, &(0x7f00000002c0)=""/252}, {0xdddd0000, 0xffc, &(0x7f0000000940)=""/4092}, {0x1000, 0xa3, &(0x7f0000001940)=""/163}, {0x26000, 0x1d, &(0x7f0000000480)=""/29}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) 11.436072159s ago: executing program 3 (id=121): syz_mount_image$exfat(&(0x7f0000000780), &(0x7f00000007c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000800)={[{@utf8}, {@errors_continue}, {}, {@dmask={'dmask', 0x3d, 0x4}}, {@discard}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@errors_remount}]}, 0x1, 0x1534, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001e40)='./sys\x00', &(0x7f0000001e80)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x2, 0x3f, &(0x7f0000001ec0)=ANY=[@ANYBLOB="12010102c2448b088405080002010102030109022d00010802000309042b110339eea0040905e516400002041009050f10100009040409050400"], &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000002a80)='./trace\x00', &(0x7f0000002ac0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002b00)='./trace/set_event\x00', 0x202, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x2, &(0x7f0000000740)="9039") vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f0000000540)="70db", 0x2}, {&(0x7f0000000580)="3edb82", 0x3}, {&(0x7f00000005c0)="62b08e", 0x3}, {&(0x7f0000000600)="ba81", 0x2}, {&(0x7f0000000640)='p', 0x1}, {&(0x7f0000000680)="ccaa", 0x2}, {&(0x7f00000006c0)="7251a9b7cb", 0x5}], 0x7, 0xc) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000700)) write(r0, &(0x7f0000002b40)="212a6838fa5de65531da837d823a", 0xe) 9.896655527s ago: executing program 3 (id=134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_mount_image$erofs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2800080, &(0x7f0000000680)=ANY=[], 0x3, 0x209, &(0x7f00000006c0)="$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") 9.724544644s ago: executing program 3 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1484a8, &(0x7f0000000140)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000640)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f00000006c0)={{}, 0x1, 0x65, 0x1}, 0x6a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='-&my', 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000001b) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000440)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000580)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000340)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file7/file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019200)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000019240)=""/102351, 0x18fcf, 0x6) ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f0000000700)={0xeb, 0x0, 0x8}) 9.683218888s ago: executing program 32 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1484a8, &(0x7f0000000140)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000640)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f00000006c0)={{}, 0x1, 0x65, 0x1}, 0x6a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='-&my', 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000000001b) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000440)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000580)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000340)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file7/file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019200)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000019240)=""/102351, 0x18fcf, 0x6) ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f0000000700)={0xeb, 0x0, 0x8}) 5.488262218s ago: executing program 5 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001cc0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd06, &(0x7f0000001d00)="04000000000000000000000038010000000000000000000000000000020000000000000000000000000000000000000074") r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000001b00)='GPL\x00', 0x5, 0xbf, &(0x7f0000001b40)=""/191, 0x40f00, 0x0, '\x00', r3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c40)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000001c80)=ANY=[@ANYRES32, @ANYBLOB="92f6621f68db"], 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)={[{@dmask={'dmask', 0x3d, 0xfe}}, {@umask={'umask', 0x3d, 0x4}}, {}, {@utf8}, {@namecase}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@keep_last_dots}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@errors_remount}]}, 0xff, 0x1537, &(0x7f0000000380)="$eJzs3AucjdUaMPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZMcSUgMuSUNSUguQ3IZQnKZmDTu9/slIUmaJAnJLVnfb2I+dep859I5Od/x/H+//Zv1zNrPep93ntl7r/3O5pvOQ2o0qlm1ARHBH4IXviQCQCwADACAawAgAICycWXjMuezS0z8Ywdh/14PpVzuCtjlxP2/snH/r2zc/ysb9//Kxv2/snH/r2zc/ysb95+xK9mmafmv5duVe+Pr/1cyfv3/H5JRcswXa0pe3wUg5h9N4f7//w//QC73/39W8I/cifv/P+Jf3Fdx/69UsZe7APZfgB//V4Jsf3OG+39l4/4zdiX75bXgWLj816P/7BtE/pN/A/E9L/yUL/95/s3zZ4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/gSn/SUKALLGl7suxhhjjDHGGGOM/fv4bJe7AsYYY4wxxhhjjP3nIQiQoCCAGMgGsZAdcoAAiMmavxbi4DrIDddDHsgL+SA/xEMBKAgaDFggCKEQFIYo3ABF4EYoCsWgOJQAByWhFNwEpeFmKAO3QFm4FcrBbVAeKkBFqAS3Q2W4A6rAnVAV7oJqUB1qQE24G2rBPVAb7oU6cB/UhfuhHjwA9eFBaAAPQUN4GBrBI9AYHoUm0BSaQXNo8S/lvwDd4UXoAT0hEXpBb3gJ+kBf6Af9YQC8DAPhFRgEr0ISDIYh8BoMhddhGLwBw2EEjIQ3YRS8BaNhDIyFcZAM42ECvA0T4R2YBJNhCkyFFJgG0+FdmAEzYRa8B7PhfZgDc2EezIdU+AAWwEJIgw9hEXwE6bAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB3wMO+ET2AW7YQ98Cnvhs38y/9Rf5XdBQECBAhUqjMEYjMVYzIE5MCfmxFyYCyMYwTiMw9yYG/NgHsyH+TAe47EgFkSDBgkJC2EhjGIUi2ARLIpFsTgWR4cOS2EpLI03Yxksg2WxLJbDclgeK2AFrISVsDJWxipYBatiVayG1bAG1sC78W7shbWxNtbBOlgX62ZdnsIG2AAbYkNshI2wMTbGJtgEm2EzbIEtsCW2xFbYCttgG2yLbbEdtsMETMD22B47YAfsiB2xE3bCztgZu2BX7JrxQjbAF/FF7InVRC/sjb2xDyZl64f9sT++jAPxFXwFX8UkHIxD8DV8DV/HYXgSh58fgSNxJFYWb+FoHIMkxmEyJuMEnIATcSJOwsk4GadiCk7D6TgdZ+BMnInv4Wx8H9/HuTgX52MqpuICXIhpmIaL8BSm42JcgktxGS7HZbgSV+FKXINrcQ2ux/W4ETfiZtyMW3Erbsft+DEqAPwEd+NuTMK9uBf34T7cj/vxAB7ADMzAg3gQD+EhPIyH8QgewaN4DI/jMTyBJ/AknsLTeBrP4lk8h8/Ff9Xw42Krk0BkUkKJGBEjYkWsyCFyiJwip8glcomIiIg4ESdyi9wij8gj8ol8Il7Ei4KioDDCCBJh5jOFiIqoKCKKiKKiqCguigsnnCglSonSorQoI8qIsuJWUU7cJsqLCqK1qyQqicqijasi7hRVRVVRTVQXNURNUVPUErVEbVFb1BF1RF1RV9QTD4j6ohf2w4dEZmcaicHYWAzBJqKpkBefoVqKYdhKtBZtxBNiBA7HdqKlSxBPi/ZiNHYQfxFj8FnRSYzDzuJ50UV0Fd3EC6K7aOV6iJ5iEvYSvcVU7CP6in6iv5iB1cV7ODt7DfGqSBKDxRDxmpiPr4th4g0xXIwQI8WbYpR4S4wWY8RYMU4ki/FignhbTBTviElispgipooUMU1MF++KGWKmmCXeE7PF+2KOmCsUAKSKD8QCsVCkiQ/FIvGRSBeLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vFDvGx2Ck+EbvEbrFHfCr2is/EPvG52C++EAfElyJDfCUOiq/FIfGNOCy+FUfEd+KoOCaOi+/FCfGDOClOidPijDgrfhTnxE/ivPACJEohpVQykDEym4yV2WUOeZXMKYOs538ZJ6+TueX1Mo/MK/PJ/DJeFpAFpZZGWkkylIVkYRmVN8gi8kZZVBaTxWUJ6WRJWUreJEvLm2UZeYssK2+V5eRtsrysICvKSvJ2WVneISFy4RjVZHVZQ9aUd8tEuEfWlvfKOvI+WVfeL+vJB2R9+aBsIB+SDeXDspF8RDaWj8omsqlsJpvLFvIx2VI+LlvJ1rKNfEK2lU/KdvIpmSCflu2lv/gr8qzsJJ+TneXzsovsKrvJn+R56WUP2VNCL5C95Uuyj+wr+8n+coB8WQ6Ur8hB8lWZJAfLIfI1OVS+LofJN+RwOUKOlG/KUfItOVqOkWPlOJksx8sJ8m05Ub4jJ8nJcoqcKlPkNNnv4kqzpPy7+W//Tv6gn4++UW6Sm+UWuVVuk9vlDvmx3Cl3yl1yl9wj98i9cq/cJ/fJ/XK/PCAPyAyZIQ/Kg/KQPCQPy8PyiDwij8pj8oz8Xp6QP8iT8pQ8Jc/Is/KsPHfxZwAKlVBSKRWoGJVNxarsKoe6SuVUV6tc6hoVUdeqOHWdyq2uV3lUXpVP5VfxqoAqqLQyyipSoSqkCquougEv/sKo4qqEcqqkKqVu+mfyVRF1oyqqiv0qP6u+xL9RXwvVQrVULVUr1Uq1UW1UW9VWtVPtVIJKUO1Ve9VBdVAdVUfVSXVSnVVn1UV1Ud1UN9VddVc9VA+VqBJVb/WS6qP6qn6qvxqgXhaZ5zBIDVJJKkkNUUPUUDVUDVPD1HA1XI1UI9UoNUqNVqPVWDVWJatkNUFNUBPVRDVJTVJT1BSVolLUdDVdzVAz1Cw1S81Ws9UcNUfNU/NUqkpVC9QClabS1CK1SKWrxWqxWqqWquVquVqpVqrVarVaq9aq9Wq9Sleb1Ca1RW1R29Q2tUPtUDvVTrVL7VJ71B61V+1V+9Q+tV/tVwfUAZWhMtRBdVAdUofUYXVYHVFH1FF1VB1Xx9UJdUKdVCfVaXVanVVn1Tl1Tp1X5zO3fYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6JBsaB4UCJwQcmgVHBTUDq4OSgT3BKUDW4NygW3BeWDCkHFoFJwe1A5uCOoEtwZVA3uCqoF1YMaQc3g7qBWcE9QO7g3qBPcF9QN7g/qBQ8E9YMHgwbBQ0HD4OGgUfBI0Dh4NGgSNA2aBc2DFv/W9b0/mfdx10P31Im6l+6tX9J9dF/dT/fXA/TLeqB+RQ/Sr+okPVgP0a/pofp1PUy/oYfrEXqkflOP0m/p0XqMHqvH6WQ9Xk/Qb+uJ+h09SU/WU/RUnaKn6en6XT1Dz9Sz9Ht6tn5fz9Fz9Tw9X6fqD/QCvVCn6Q/1Iv2RTteL9RK9VC/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqbL6O/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZm/vMl3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQ2uU0ek8fkM/lMvIk3BU1Bk4kMmUKmkImaqCliipiipqgpboobZ5wpZUqZ0qa0KWPKmLKmrClnypnyprypaCqa283t5g5zh7nT3GnuMneZ6qa6qWlqmlqmlqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWaamRamhWlpWppWppVpY9qYtqataWfamQSTYNqb9qaD6WA6mo6mk+lkOpvOpovpYrqZbqa76W56mB4m0SSa3qa36WP6mH6mnxlgBpiBZqAZZAaZJJNkhpghZqgZaoaZYWa4GWFGZm5UzVtmtBljxppxJtkkmwlmgploJppJZpKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPX7DP7zH6z3xwwB0yGyTAHzUFzyBwyh81hc8QcMUfNUXPcHDcnzAlz0pw0p81pc9bkvfh66U2szW5z2KtsTnu1zWWvsX8d57P5bbwtYAtabfPYvL+KjbW2qC1mi9sS1tmStpS96TdxeVvBVrSV7O22sr3DVvlNXMveY2vbe20de5+tae/+VVzX3m/r2UdsfUQA29Q2tM1tI/uIbWwftU1sU9vMNrdt7ZO2nX3KJtinbXv7zG/iBXahXWVX2zV2rd1ld9vT9ow9ZL+xZ+2PtoftaQfYl+1A+4odZF+1SXbwb+KR9k07yr5lR9sxdqwd95t4ip1qU+w0O92+a2fYmb+JU+0HdrZNs3PsXDvPzv85zqwpzX5oF9mPbLoNYIldapfZ5XaFXfl/a11q19sNdqPdaT+xW+xWu81utzuyNsJ2t91jP7V77Wf2oP3a7rdf2AP2sM2wX/0cZ57fYfutPWK/s0ftMXvcfm9P2B9UVnbmuX9vf7LnrbdASECSFAUUQ9kolrJTDrqKctLVlIuuoQhdS3F0HeWm6ykP5aV8lJ/iqQAVJE2GLBGFVIgKU5RuoKzyilMJclSSStFNVJpupjJ0C5WlW6kc3UblqQJVpEp0O1WmO6gK3UlV6S6qRtWpBtWku6kW3UO16V6qQ/dRXbqf6tEDVJ8epAb0EDWkh6kRPUKN6VFqQk2pGTWnFvQYtaTHqRW1pjb0BLWlJ6kdPUUJ9DS1p2eoA/2FOtKz1Imeo870PHWhrtSNXqDu9CL1oJ6USL2oN71Efagv9aP+NIBepoH0Cg2iVymJBtMQeo2G0us0jN6g4TSCRtKbNIreotE0hsbSOEqm8TSB3qaJ9A5Nosk0haZSCk2j6fQuzaCZNIveo9n0Ps2huTSP5lMqfUALaCGl0Ye0iD6idFpMS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20gz6mnfQJ7aLdtIc+pb30Ge2jz2k/fUEH6EvKoK/oIH1Nh+gbOkzf+p70HR2lY3ScvqcT9AOdpFN0ms7QWfqRztFPdJ48QYihCGWowiCMCbOFsWH2MEd4VZgzvDrMFV4TRsJrw7jwujB3eH2YJ8wb5gvzh/FhgbBgrA5NaEMKw7BQWDiMhjeERcIbw6JhsbB4WCJ0YcmwVHhTWDq8OSwT3hKWDW8Ny4W3heXDCuEj91UKbw8rh3eEVcI7w6rhXWG1sHpYI6wZ3h3WCu8Ja4f3hnXC+8Iy4f1hvfCBsH74YNggfChsGD4cNgofCRuHj4ZNwqZhs7B52CJ8LGwZPh62CluHbcKrwrbhk2G78KkwIXw6bB8+8/P8/Quz5p/4zXxi2CvsHb4UvhR6f6+cF50fTY1+EF0QXRhNi34YXRT9KJoeXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y9b5mNnDohJNOucDFuGwu1mV3OdxVLqe72uVy17iIu9bFuetcbne9y+Pyunwuv4t3BVxBp51x1pELXSFX2EXdDa6Iu9EVdcVccVfCOVfSlXLNXQvXwrV0j7tWrrVr455wT7gn3ZPuKfeUe9q1d8+4Du4vrqN71nVyz7nn3POui+vqurkXXHc3PteFx2Si6+16uz6uj+vn+rkBboAb6Aa6QW6QS3JJbogb4oa6oW6YG+aGu+FupBvpRrlRbrQb7ca6sS7ZJbsJboKb6Ca6SW6Sm+KmuBSX4qa76W6Gm+Eqz7xwlDlujpvn5rlUl+oWuMw9Y5pb5Ba5dJfulrglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+Z2uB1up9vpdvlrLizq9rp9bp/b7/a7A+5Ll+G+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZccGR+ZEHk7MjHyTmRSZHJkSmRqJCUyLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZHUyAeRBZGFkbTIh5FFkY8i6ZHFkSWRpZFlkeUR7wtsCX0hX9hH/Q2+iL/RF/XFfHFfwjtf0pfyN/nSF+pO9/5WX87f5sv7Cr6if9Q38U19M9/ct/CP+Zb+cY+A0MY/4dv6J307/5RP8E/79v4Z38H/xXf0z/pO/jnf2T/vu/iuvpt/wXf3L/oevqdP9L18b/+S7+P7+n6+vx/gX/YD/St+kH/VJ/nBfoh/zQ/1r/th/g0/3I/wI2Pe9KOy3iLDOJ/sx/sJ/m0/0b/jJ/nJfoqf6lP8ND/dv+tn+Jl+ln/Pz/bv+zl+rp/n5/tU/4Ff4Bf6NP+hX+Q/8ul+cdZFY7/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Ha/w3/sd/pP/C6/2+/xn/q9/jO/z3/u9/sv/AH/pc/wX/mD/mt/yH/jD/tv/RH/nT/qj/nj/nt/wv/gT/pT/rQ/48/6H/05/5M/z/9mjTHGGGPsHzL+0lD8eubC5fxev5MjfnHn3gBw9db8Gb+cz9xRrstzYdxXxMdmfn26Z+eHsm7VqiUmJl68b7qEoPBcgKy/BGX6+aMHF+PF0AaehARoDaV/t/6+outZ+jvrR28FyPGLnMyCsuJL638OgIm/s/5jT4xcUC48Hff/WH8uQNHCl3Kyw6V4MbT5+fpKayjzN+rP2/Lv1J/9i2SAVr/IyQmX4kv1l4LH4RlI+NU9GWOMMcYYY4yxC/qKih2z3n9mfeLz996fx6tLOdngUvz33p8zxhhjjDHGGGPs8nu2a7enHktIaN3xnx9U+Zey/uFBY/hPrcyD3x14D5D1HQUAf3BBgMyB/DPPYvOfcqykiw+dv55adsYH8N/RygsD8Uce3QmX+YmJMcYYY4wx9m93adP/6++ry1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2Bfoz/jeyy32OjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2OX2fwIAAP//aNX2aA==") mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pivot_root(&(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x20000000079, 0x100) ioctl$BLKREPORTZONE(r6, 0xc0101282, 0x0) ioctl$BLKGETDISKSEQ(r6, 0x80081280, &(0x7f0000000140)) 5.381686169s ago: executing program 5 (id=163): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$tun(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xc000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffd}]}}]}, 0x38}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b00)={0x8, 0x0, [{0xdddd0000, 0xa9, &(0x7f0000000080)=""/169}, {0x2000, 0x3c, &(0x7f0000000440)=""/60}, {0xeeee0000, 0x11, &(0x7f0000000180)=""/17}, {0x7000, 0xfc, &(0x7f00000001c0)=""/252}, {0xeeef0000, 0xfc, &(0x7f00000002c0)=""/252}, {0xdddd0000, 0xffc, &(0x7f0000000940)=""/4092}, {0x1000, 0xa3, &(0x7f0000001940)=""/163}, {0x26000, 0x1d, &(0x7f0000000480)=""/29}]}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) 4.839416414s ago: executing program 4 (id=168): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x80800) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x6, 0xfffffffffffffffd, 0x2, 0x6, 0x4}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0xfffffff8, 0x8ff, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x20201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x8a) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000c80)={0x0, {}, 0x0, {}, 0x9, 0x2, 0x12, 0x11, "2d44493afc2a04cb54ac509cd54729a8fffa9cc61ba825615f3f4d6681db4417ad72a0776e333392b52ac2e5a564c09cfe84bab45c10092bb73dc0b89c9031e6", "fab639fc59ec6731716a2e287ebf27a7adc0301f766d8a0085bbbd0fdf8ac2a4", [0x2, 0x1]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x40000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev}, &(0x7f0000000040)=0x8) write$binfmt_script(r2, &(0x7f0000000f00), 0x208e24b) 4.523099247s ago: executing program 4 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.236852936s ago: executing program 0 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000000)='27', 0x2) write$cgroup_subtree(r0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000100)=ANY=[]) 4.107136359s ago: executing program 2 (id=178): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1279, 0x0) 3.985464552s ago: executing program 2 (id=179): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000dc0)=""/4091, 0xffb) 3.985228422s ago: executing program 2 (id=180): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x168000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdir(0x0, 0x80) mount(0x0, &(0x7f0000000380)='dir0\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000440)=""/9, 0xffffff7a) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0x7, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x86, '\x00', 0x8}, {0x9, 0xc, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0x0, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xe, '\x00', 0xfb}, {0x0, 0x2, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x8, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x8, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x6, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x42, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1d, 0x7}, {0x0, 0x80, 0xf, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) clock_getres(0xe2249e36e7addc67, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)={0x2, 'ipvlan1\x00', {0x5}, 0xc45}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.795191871s ago: executing program 0 (id=181): memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)='2', 0x1}, {&(0x7f0000000200)='-6', 0x3f}], 0x2) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}], 0x1, 0x40014) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FIBMAP(r2, 0x5393, 0x0) 3.588398973s ago: executing program 0 (id=182): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0xa8341) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}], 0x78}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.51097365s ago: executing program 5 (id=183): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$DM_TABLE_DEPS(r0, 0xc138fd0b, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80001, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}}) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a29605e556230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f7906b9c1bdab7792758b5b922106ac372d3ce2b35f8f4be09093c7e96e0ebe3c6"], 0x1, 0x1059a, &(0x7f0000020c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000880)='2', 0xfdef, 0xc00) 3.296778473s ago: executing program 1 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x3, 0x1, 0x0, 0x0, 0x0, 0xf000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4090000000000006910ac0000000000c40900000000aa009500740000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000400), 0x10}, 0x49) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x366, 0x10, &(0x7f0000000840), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x5, 0x5, 0x12, 0x4, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)={@map=r3, r2, 0x26}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2c, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x18, 0x0, 0x0) unshare(0x22020600) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.296074953s ago: executing program 4 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000006c0), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000700)=0x2) recvmmsg(r4, &(0x7f0000000740), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x2010000, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r2, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0xfffffffe, {{0xa, 0x4e24, 0x5, @mcast2}}, 0x0, 0x3, [{{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}}, {{0xa, 0x4e22, 0x2, @local, 0x20079}}, {{0xa, 0x4e24, 0x2, @private2, 0x40}}]}, 0x90) creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000009c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@numtail}, {@rodir}, {@shortname_mixed}, {@utf8}, {@fat=@nfs_stale_rw}, {@fat=@sys_immutable}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x3, 0x297, &(0x7f0000000ac0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0x0, 0x80) getdents64(r6, &(0x7f0000000dc0)=""/4091, 0xffb) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 3.168410705s ago: executing program 2 (id=185): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x80800) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x6, 0xfffffffffffffffd, 0x2, 0x6, 0x4}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0xfffffff8, 0x8ff, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x20201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x8a) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000c80)={0x0, {}, 0x0, {}, 0x9, 0x2, 0x12, 0x11, "2d44493afc2a04cb54ac509cd54729a8fffa9cc61ba825615f3f4d6681db4417ad72a0776e333392b52ac2e5a564c09cfe84bab45c10092bb73dc0b89c9031e6", "fab639fc59ec6731716a2e287ebf27a7adc0301f766d8a0085bbbd0fdf8ac2a4", [0x2, 0x1]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x40000, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev}, &(0x7f0000000040)=0x8) write$binfmt_script(r2, &(0x7f0000000f00), 0x208e24b) 2.739768449s ago: executing program 2 (id=186): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="027c00001b0000000000000400b8af682ecf4f03239bec67f32fd25cd1a33dfa0fc25a5efcee03d2add9290177ef35f460e64aeb16c784a3c2a7633431f2958117ea987f85b70500000000000000b0c5ffeb18a8e10ed31829d91fd7e31ca99d45ca903b3f90e3a3046fa9585a2810682be0d393f7abc3735c628fab537307f3fc9d41f359988ce4d26466f36bc648a121e58e731d74a50254f0a7fd4e16726d1b8beaf6970d6204237c2f061baeea345148fad3f8faa011f43c2b0bd22d5c9f0800"/209], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') write$fault_inject(r1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000940)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a00)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$usbfs(&(0x7f0000000400), 0x76, 0x101301) r3 = syz_ublk_setup_io_uring(0x11, &(0x7f0000000500)={0x0, 0x30b2, 0x0, 0x2, 0x10377}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0x845, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000008000025d283b3d77e0000000000000000000071123b00000000009500783a58746e47df9ff507f014a76305dab86271e770e5b5f56e8b5ad26b6a5301f542fe32adbbacf957128f2980b5db450b721cb7c2d2860b18e870911950ea591e9013db300445f0862d1768bcb75f97eb5f21"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000021404c052f040000000000010902240001000000010904000c020300030009210000000122180009058103"], 0x0) socket$igmp6(0xa, 0x3, 0x2) r9 = open(&(0x7f0000000c00)='./file0\x00', 0x801c0, 0x189) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x7, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r10, r11, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f80)={r10, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="000100f6038756e1c97bce0000020000000000000000000000000040000000000000000000000000000000000000000000000a00000029020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff070000000000000000000000000000004c001400736861332d3232342d67656e6572696300"/188], 0x100}}, 0x10) syz_usb_control_io$hid(r8, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200010, &(0x7f0000001300)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d332c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742d73da291b4b8038faa4d63d0b9c4de0686f72746e616d653d6d697865642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c696f636861727365743d6d616363656c7469632c636f6465706167653d3737352c646f733178666c6f7070792c757466383d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c696f636861727365743d63703836302c757466383d302c00"], 0x3, 0x288, &(0x7f0000001040)="$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") syz_usb_control_io$hid(r8, &(0x7f0000000040)={0xffffffffffffff13, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 2.73856716s ago: executing program 1 (id=197): geteuid() r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="020000000000000002000002e0000002"], 0x90) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800009cc6a51c5fe6bed9f82c406400000000000c00000400000000000000004600000020000007"], 0x0, 0x2c}, 0x28) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000240)=0x3, 0x4) bind$can_raw(r4, &(0x7f0000000280)={0x1d, r5}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000002c0)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x24880}, 0xd209f6d81482fb16) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10123, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 2.503667984s ago: executing program 0 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.321324892s ago: executing program 4 (id=188): r0 = syz_clone3(&(0x7f0000000e80)={0x240080, &(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40), {0xf}, &(0x7f0000000d80)=""/73, 0x49, &(0x7f0000000e00)=""/37, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f0000000f00)='oom_score\x00') read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{}]}, 0x82, 0x499, &(0x7f0000000100)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x101042, 0x15) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000f40)='.\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000001000)={[0x2]}, 0x8, 0x80000) read$FUSE(r7, &(0x7f0000001040)={0x2020}, 0x2020) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x88a8, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r10 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000640)=r10) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000680)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000700)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f00000007c0)=""/87, &(0x7f0000000840)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000900)={0x1, r10}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000940)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 2.220504383s ago: executing program 5 (id=189): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x152d, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000002600)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002640)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002680)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000026c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002740)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000027c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002800), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004ac0)='memory.events\x00', 0x275a, 0x0) (fail_nth: 2) 1.596414927s ago: executing program 1 (id=190): syz_read_part_table(0x104a, &(0x7f0000000180)="$eJzsz7ERgkAUBNAFQdRajK3BBqiHsR2LMzXzOyBGxo4G7yU3e7sXXPipY7bJkP07T8mhy2VN96qqtu0/nu3W89wlqUU280WfeTy82nYub6cxzbpK0qQqj5qWwXj9/g8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P89AwAA///MvBig") syz_emit_ethernet(0xb6, &(0x7f0000003480)={@remote, @multicast, @void, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x0, 0xa8, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x83, 0x0, 0x0, [0x5a530791, 0x8000, 0x3, 0x7b66, 0x2, 0x7f9, 0x9, 0x0, 0x1, 0xf]}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0xdadf, {[@sack={0x5, 0x6, [0x4]}, @eol, @sack={0x5, 0x1a, [0x10000, 0x91, 0x9, 0x1ff, 0xfd, 0x8]}, @timestamp={0x8, 0xa, 0x0, 0x3}, @eol, @sack={0x5, 0x16, [0x800, 0x80000000, 0xfffffff8, 0x6, 0x1009]}, @timestamp={0x8, 0xa, 0x400, 0xc000000}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2000084c, &(0x7f0000001200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001300)="$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") r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000002a40)={0x5, 0xfff7}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x30012, &(0x7f0000002800)={[], [{@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'exfat\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, 'exfat\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(0x3) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002b80)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c00)={{r6}, &(0x7f0000002c40), &(0x7f0000002c80)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003080)={0x1, &(0x7f0000003140)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, r8, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003180)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000031c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000003280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000032c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000003300)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000003380)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003400)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x1, 0xc, &(0x7f0000002e00)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x11, 0x14, &(0x7f0000002f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0x11, 0x14, &(0x7f0000003080)=ANY=[], &(0x7f00000030c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003100)={r11}, 0xc) 908.627237ms ago: executing program 2 (id=191): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$tun(r3, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xc000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffd}]}}]}, 0x38}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b00)={0x8, 0x0, [{0xdddd0000, 0xa9, &(0x7f0000000080)=""/169}, {0x2000, 0x3c, &(0x7f0000000440)=""/60}, {0xeeee0000, 0x11, &(0x7f0000000180)=""/17}, {0x7000, 0xfc, &(0x7f00000001c0)=""/252}, {0xeeef0000, 0xfc, &(0x7f00000002c0)=""/252}, {0xdddd0000, 0xffc, &(0x7f0000000940)=""/4092}, {0x1000, 0xa3, &(0x7f0000001940)=""/163}, {0x26000, 0x1d, &(0x7f0000000480)=""/29}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) 588.61771ms ago: executing program 1 (id=192): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000dc0)=""/4091, 0xffb) 588.37218ms ago: executing program 5 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ac030000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000840308802800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2c0000800400098024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c03008006000500feff0000080003000200000014000400"], 0x3ac}, 0x1, 0x0, 0x0, 0x404c844}, 0x0) 568.347742ms ago: executing program 1 (id=195): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001680)={r0}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000640)={0x7, {"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", 0x10af}}, 0x1006) 480.260731ms ago: executing program 5 (id=196): r0 = syz_clone3(&(0x7f0000000e80)={0x240080, &(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40), {0xf}, &(0x7f0000000d80)=""/73, 0x49, &(0x7f0000000e00)=""/37, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) getpgrp(r0) r2 = syz_open_procfs(r1, &(0x7f0000000f00)='oom_score\x00') read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{}]}, 0x82, 0x499, &(0x7f0000000100)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x101042, 0x15) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000f40)='.\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000001000)={[0x2]}, 0x8, 0x80000) read$FUSE(r7, &(0x7f0000001040)={0x2020}, 0x2020) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x88a8, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r10 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000640)=r10) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000680)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000700)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f00000007c0)=""/87, &(0x7f0000000840)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000900)={0x1, r10}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000940)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 460.999203ms ago: executing program 0 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x48) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x40, 0xa0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYBLOB="070c49446a79758d8cd3a213d216bba35267b7d31789172970734830b7ae090a6be7299a2996634a8f6dc572e420b6fb1989a960e47e4108898ad64d9b934093738719335636cbaeab47d3f5027cab1f661e31bdcc79a4771250327177e6a2c67fbc45bd9ded5f220c7570824daeab36cd9eb2a4cee1b3c6e83fe5661939dee584acfdbded5eb242161ea0b354e778748dca", @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 361.773983ms ago: executing program 1 (id=199): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x80800) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x6, 0xfffffffffffffffd, 0x2, 0x6, 0x4}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0xfffffff8, 0x8ff, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x20201) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x8a) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000c80)={0x0, {}, 0x0, {}, 0x9, 0x2, 0x12, 0x11, "2d44493afc2a04cb54ac509cd54729a8fffa9cc61ba825615f3f4d6681db4417ad72a0776e333392b52ac2e5a564c09cfe84bab45c10092bb73dc0b89c9031e6", "fab639fc59ec6731716a2e287ebf27a7adc0301f766d8a0085bbbd0fdf8ac2a4", [0x2, 0x1]}) 295.1579ms ago: executing program 0 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000006c0), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000700)=0x2) recvmmsg(r4, &(0x7f0000000740), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x2010000, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r2, 0x16, 0x0, @void}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0xfffffffe, {{0xa, 0x4e24, 0x5, @mcast2}}, 0x0, 0x3, [{{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}}, {{0xa, 0x4e22, 0x2, @local, 0x20079}}, {{0xa, 0x4e24, 0x2, @private2, 0x40}}]}, 0x90) creat(&(0x7f0000000000)='./file0\x00', 0x11) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000009c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@numtail}, {@rodir}, {@shortname_mixed}, {@utf8}, {@fat=@nfs_stale_rw}, {@fat=@sys_immutable}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x3, 0x297, &(0x7f0000000ac0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', 0x0, 0x80) getdents64(r6, &(0x7f0000000dc0)=""/4091, 0xffb) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 278.646552ms ago: executing program 4 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x3, 0x1, 0x0, 0x0, 0x0, 0xf000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=202): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0xa8341) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}], 0x78}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 22.797202][ T28] audit: type=1400 audit(1793495954.520:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.800668][ T279] cgroup: Unknown subsys name 'net' [ 22.825172][ T28] audit: type=1400 audit(1793495954.520:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.847435][ T279] cgroup: Unknown subsys name 'devices' [ 22.847978][ T28] audit: type=1400 audit(1793495954.560:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.994183][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.999814][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.105947][ T28] audit: type=1400 audit(1793495954.830:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.129168][ T28] audit: type=1400 audit(1793495954.830:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.153914][ T28] audit: type=1400 audit(1793495954.830:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.185051][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.194043][ T28] audit: type=1400 audit(1793495954.920:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.219492][ T28] audit: type=1400 audit(1793495954.920:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.254219][ T28] audit: type=1400 audit(1793495954.980:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.255491][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.280540][ T28] audit: type=1400 audit(1793495954.980:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.057744][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.064875][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.072438][ T288] device bridge_slave_0 entered promiscuous mode [ 24.092326][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.099397][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.107137][ T288] device bridge_slave_1 entered promiscuous mode [ 24.190824][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.197999][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.205749][ T287] device bridge_slave_0 entered promiscuous mode [ 24.222874][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229957][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.237679][ T289] device bridge_slave_0 entered promiscuous mode [ 24.246600][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.253759][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.261214][ T289] device bridge_slave_1 entered promiscuous mode [ 24.282112][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.289230][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.296824][ T287] device bridge_slave_1 entered promiscuous mode [ 24.364515][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.371612][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.379238][ T291] device bridge_slave_0 entered promiscuous mode [ 24.413563][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.420656][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.428281][ T291] device bridge_slave_1 entered promiscuous mode [ 24.452436][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.459525][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.467119][ T290] device bridge_slave_0 entered promiscuous mode [ 24.478611][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.485779][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.493258][ T290] device bridge_slave_1 entered promiscuous mode [ 24.603494][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.610595][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.617993][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.625108][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.692053][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.699150][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.706482][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.713554][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.732548][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.739637][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.746978][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.754053][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.777738][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.784849][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.792169][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.799218][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.811100][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.818209][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.825536][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.832614][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.848261][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.855741][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.863523][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.870757][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.878160][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.885387][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.893049][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.900211][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.907568][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.914867][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.922856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.930290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.957413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.965821][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.972886][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.986831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.994306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.002683][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.009739][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.028786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.037322][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.044405][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.064488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.072541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.080708][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.087805][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.095650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.113933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.121485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.129024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.136742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.144403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.151843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.159839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.168416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.176756][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.183834][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.197217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.205728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.214179][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.221217][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.228855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.237435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.245788][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.252872][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.273929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.282426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.290600][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.297716][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.306371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.314568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.322610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.330649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.338873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.347182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.356099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.364277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.384157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.392705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.400955][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.408056][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.415566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.424198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.432592][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.439646][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.447272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.455443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.470570][ T288] device veth0_vlan entered promiscuous mode [ 25.482917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.491401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.499978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.507997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.516538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.524830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.532918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.540957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.549130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.556695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.566879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.575448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.595224][ T288] device veth1_macvtap entered promiscuous mode [ 25.604156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.613912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.622398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.629842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.637522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.645789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.654107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.666278][ T289] device veth0_vlan entered promiscuous mode [ 25.673065][ T290] device veth0_vlan entered promiscuous mode [ 25.689088][ T291] device veth0_vlan entered promiscuous mode [ 25.695969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.704182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.711775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.719777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.727905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.736140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.744609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.753022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.761252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.769878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.778299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.786894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.794555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.812452][ T287] device veth0_vlan entered promiscuous mode [ 25.822719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.831116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.839699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.847895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.856246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.863822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.874017][ T289] device veth1_macvtap entered promiscuous mode [ 25.883676][ T290] device veth1_macvtap entered promiscuous mode [ 25.893001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.901286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.922431][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.936230][ T291] device veth1_macvtap entered promiscuous mode [ 25.945985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.955393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.964052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.975592][ T287] device veth1_macvtap entered promiscuous mode [ 25.997928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.008906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.018015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.026848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.035400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.058770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.067322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.076135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.084841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.093452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.101661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.110286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.118787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.168138][ T318] usb usb7: usbfs: process 318 (syz.2.3) did not claim interface 0 before use [ 26.178381][ T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.200283][ T323] usb usb7: usbfs: process 323 (syz.0.1) did not claim interface 0 before use [ 26.272014][ T19] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.472249][ T19] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 26.491829][ T19] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.502094][ T58] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.512071][ T19] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 26.532005][ T19] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 26.551991][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.558667][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 26.577946][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.597135][ T19] usb 4-1: config 0 descriptor?? [ 26.605207][ T309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.682264][ T337] syz.0.6 (337) used greatest stack depth: 22080 bytes left [ 26.703103][ T58] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 26.719386][ T58] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.742497][ T58] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 26.762010][ T58] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 26.782005][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.788790][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 26.804046][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.825551][ T58] usb 2-1: config 0 descriptor?? [ 26.833919][ T325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 26.855769][ T343] usb usb7: usbfs: process 343 (syz.2.9) did not claim interface 0 before use [ 27.330946][ T350] loop0: detected capacity change from 0 to 2048 [ 27.347514][ T351] loop4: detected capacity change from 0 to 256 [ 27.464478][ T350] loop0: p1 < > p4 [ 27.474338][ T350] loop0: p4 size 722688 extends beyond EOD, truncated [ 27.586316][ T350] overlayfs: unrecognized mount option "verity=off" or missing value [ 27.630474][ T58] logitech 0003:046D:CA04.0001: unknown main item tag 0x2 [ 27.695315][ T58] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.089075][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 28.089091][ T28] audit: type=1400 audit(1793495959.810:139): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.155992][ T358] loop4: detected capacity change from 0 to 512 [ 28.173321][ T19] logitech 0003:046D:CA04.0002: unknown main item tag 0x2 [ 28.173938][ T58] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.180520][ T19] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.180544][ T19] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.202043][ T28] audit: type=1400 audit(1793495959.850:140): avc: granted { setsecparam } for pid=324 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 28.209993][ T358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.223847][ T19] input: HID 046d:ca04 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:CA04.0002/input/input4 [ 28.243569][ T28] audit: type=1400 audit(1793495959.850:141): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.272966][ T58] input: HID 046d:ca04 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:CA04.0001/input/input5 [ 28.314328][ T358] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 28.338984][ T28] audit: type=1400 audit(1793495960.060:142): avc: denied { create } for pid=348 comm="syz.2.11" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.380358][ T28] audit: type=1400 audit(1793495960.100:143): avc: denied { create } for pid=357 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.403700][ T28] audit: type=1400 audit(1793495960.110:144): avc: denied { bind } for pid=357 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.491940][ C1] sched: RT throttling activated [ 29.509944][ T19] logitech 0003:046D:CA04.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 29.525936][ T19] logitech 0003:046D:CA04.0002: implement() called with too large value 243 (n: 0)! (kworker/0:1) [ 30.504594][ T58] logitech 0003:046D:CA04.0001: input,hidraw1: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 30.512224][ T19] logitech 0003:046D:CA04.0002: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 30.525046][ T28] audit: type=1400 audit(1793495960.110:145): avc: denied { listen } for pid=357 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.525570][ T58] logitech 0003:046D:CA04.0001: implement() called with too large value 243 (n: 0)! (kworker/1:2) [ 32.512169][ T19] usb 4-1: USB disconnect, device number 2 [ 32.524354][ T58] logitech 0003:046D:CA04.0001: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 32.544322][ T370] tipc: Failed to remove unknown binding: 66,1,1/0:2923781897/2923781899 [ 32.572181][ T28] audit: type=1400 audit(1793495960.110:146): avc: denied { connect } for pid=357 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.572211][ T28] audit: type=1400 audit(1793495960.110:147): avc: denied { accept } for pid=357 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.572278][ T28] audit: type=1400 audit(1793495960.150:148): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=583 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.575090][ T58] usb 2-1: USB disconnect, device number 2 [ 32.670902][ T372] fido_id[372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 32.972081][ T393] loop0: detected capacity change from 0 to 256 [ 33.287542][ T392] loop4: detected capacity change from 0 to 512 [ 33.392100][ T392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.819650][ T316] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 33.843452][ T392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.852548][ T392] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.932951][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 33.932967][ T28] audit: type=1400 audit(1793495965.660:161): avc: denied { create } for pid=400 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.016288][ T58] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.023954][ T28] audit: type=1400 audit(1793495965.730:162): avc: denied { create } for pid=391 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 34.075457][ T28] audit: type=1400 audit(1793495965.740:163): avc: denied { write } for pid=391 comm="syz.4.19" name="route" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.098101][ T28] audit: type=1400 audit(1793495965.790:164): avc: denied { write } for pid=391 comm="syz.4.19" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.143336][ T392] EXT4-fs (loop4): unmounting filesystem. [ 34.175835][ T404] overlayfs: overlapping lowerdir path [ 34.196207][ T404] loop1: detected capacity change from 0 to 256 [ 34.253937][ T58] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 34.304702][ T28] audit: type=1400 audit(1793495965.790:165): avc: denied { add_name } for pid=391 comm="syz.4.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.404350][ T58] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.419882][ T407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 34.449679][ T28] audit: type=1400 audit(1793495965.790:166): avc: denied { create } for pid=391 comm="syz.4.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.471849][ T316] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 34.483365][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.491540][ T316] usb 3-1: Product: syz [ 34.500881][ T28] audit: type=1400 audit(1793495966.220:167): avc: denied { unlink } for pid=406 comm="syz.0.22" name="#3" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.517524][ T58] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 34.529181][ T316] usb 3-1: Manufacturer: syz [ 34.533991][ T58] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 34.539962][ T316] usb 3-1: SerialNumber: syz [ 34.551519][ T58] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.562573][ T58] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 34.572068][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.572250][ T28] audit: type=1400 audit(1793495966.260:168): avc: denied { mount } for pid=406 comm="syz.0.22" name="/" dev="overlay" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.593263][ T58] usb 4-1: config 0 descriptor?? [ 34.607212][ T28] audit: type=1400 audit(1793495966.290:169): avc: denied { write } for pid=406 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.613948][ T395] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.631448][ T28] audit: type=1400 audit(1793495966.340:170): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.663416][ T409] netlink: 'syz.4.24': attribute type 4 has an invalid length. [ 34.681597][ T409] netlink: 'syz.4.24': attribute type 4 has an invalid length. [ 34.752711][ T409] syz.4.24 (409) used greatest stack depth: 21440 bytes left [ 34.889196][ T422] loop1: detected capacity change from 0 to 512 [ 34.905204][ T425] FAULT_INJECTION: forcing a failure. [ 34.905204][ T425] name failslab, interval 1, probability 0, space 0, times 1 [ 34.926847][ T425] CPU: 0 PID: 425 Comm: syz.4.26 Not tainted syzkaller #0 [ 34.934029][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.944114][ T425] Call Trace: [ 34.947414][ T425] [ 34.950354][ T425] __dump_stack+0x21/0x24 [ 34.954718][ T425] dump_stack_lvl+0x110/0x170 [ 34.959409][ T425] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.964450][ T425] ? avc_has_perm_noaudit+0x30a/0x490 [ 34.969840][ T425] dump_stack+0x15/0x24 [ 34.974010][ T425] should_fail_ex+0x3bf/0x510 [ 34.978702][ T425] __should_failslab+0xac/0xf0 [ 34.983487][ T425] should_failslab+0x9/0x20 [ 34.988003][ T425] __kmem_cache_alloc_node+0x3d/0x2d0 [ 34.993395][ T425] ? v9fs_mount+0xb6/0xa90 [ 34.997836][ T425] ? v9fs_mount+0xb6/0xa90 [ 35.002268][ T425] kmalloc_trace+0x29/0xb0 [ 35.006711][ T425] v9fs_mount+0xb6/0xa90 [ 35.010978][ T425] ? __cfi_v9fs_mount+0x10/0x10 [ 35.015866][ T425] ? vfs_parse_fs_string+0x10b/0x170 [ 35.021198][ T425] ? cap_capable+0x1a6/0x230 [ 35.025897][ T425] legacy_get_tree+0xfe/0x1a0 [ 35.030599][ T425] ? __cfi_v9fs_mount+0x10/0x10 [ 35.035478][ T425] vfs_get_tree+0x9a/0x270 [ 35.040000][ T425] do_new_mount+0x251/0xb40 [ 35.044519][ T425] ? security_capable+0x99/0xc0 [ 35.049391][ T425] path_mount+0x640/0xfd0 [ 35.053750][ T425] __se_sys_mount+0x320/0x390 [ 35.058533][ T425] ? __this_cpu_preempt_check+0x13/0x20 [ 35.064108][ T425] ? __x64_sys_mount+0xd0/0xd0 [ 35.068898][ T425] ? __kasan_check_write+0x14/0x20 [ 35.074020][ T425] ? fpregs_restore_userregs+0x128/0x260 [ 35.079669][ T425] __x64_sys_mount+0xbf/0xd0 [ 35.084272][ T425] x64_sys_call+0x65d/0x9a0 [ 35.088822][ T425] do_syscall_64+0x4c/0xa0 [ 35.093253][ T425] ? clear_bhb_loop+0x30/0x80 [ 35.097954][ T425] ? clear_bhb_loop+0x30/0x80 [ 35.102653][ T425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.108566][ T425] RIP: 0033:0x7fda9ed9f559 [ 35.113018][ T425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.135992][ T425] RSP: 002b:00007fda9fc2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.145742][ T425] RAX: ffffffffffffffda RBX: 00007fda9f025fa0 RCX: 00007fda9ed9f559 [ 35.153744][ T425] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 00002000000000c0 [ 35.161743][ T425] RBP: 00007fda9ee36b50 R08: 0000200000000100 R09: 0000000000000000 [ 35.169730][ T425] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 35.177722][ T425] R13: 00007fda9f026038 R14: 00007fda9f025fa0 R15: 00007ffec7c60ac8 [ 35.185754][ T425] [ 35.193265][ T58] logitech 0003:046D:CA04.0003: unknown main item tag 0x2 [ 35.197347][ T422] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.210777][ T58] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 35.228922][ T58] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 35.245051][ T58] input: HID 046d:ca04 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:CA04.0003/input/input6 [ 35.266795][ T422] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.25: inode has both inline data and extents flags [ 35.282054][ T316] usb 3-1: Can't get UAC3 power state for id 10 [ 35.285056][ T428] loop4: detected capacity change from 0 to 512 [ 35.294681][ T316] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 35.298685][ T316] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 35.306670][ T422] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.25: couldn't read orphan inode 15 (err -117) [ 35.321905][ T422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.335773][ T58] logitech 0003:046D:CA04.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 35.348814][ T58] logitech 0003:046D:CA04.0003: implement() called with too large value 243 (n: 0)! (kworker/1:2) [ 35.359964][ T58] logitech 0003:046D:CA04.0003: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 35.376479][ T428] EXT4-fs (loop4): 1 truncate cleaned up [ 35.382433][ T428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.392063][ T316] usb 3-1: USB disconnect, device number 2 [ 35.454586][ T422] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 35.493230][ T295] usb 4-1: USB disconnect, device number 3 [ 35.514203][ T434] fido_id[434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 35.550772][ T291] EXT4-fs (loop4): unmounting filesystem. [ 35.607672][ T436] loop4: detected capacity change from 0 to 512 [ 35.615563][ T287] EXT4-fs (loop1): unmounting filesystem. [ 35.642827][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.702086][ T411] syz.0.23 (411) used greatest stack depth: 21000 bytes left [ 35.764842][ T443] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 35.775191][ T443] FAT-fs (loop4): Filesystem has been set read-only [ 35.836687][ T445] usb usb7: usbfs: process 445 (syz.2.31) did not claim interface 0 before use [ 35.886355][ T445] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.248793][ T458] overlayfs: overlapping lowerdir path [ 36.261498][ T458] overlayfs: overlapping lowerdir path [ 36.282083][ T458] loop3: detected capacity change from 0 to 256 [ 36.291910][ T58] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 36.538758][ T58] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 36.558207][ T58] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.577026][ T58] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 36.594259][ T58] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 36.615693][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.627579][ T58] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 36.644049][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.657471][ T58] usb 2-1: config 0 descriptor?? [ 36.663278][ T451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.743172][ T441] syz.0.30 (441) used greatest stack depth: 19176 bytes left [ 36.864107][ T460] loop4: detected capacity change from 0 to 40427 [ 36.879384][ T460] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 36.894661][ T460] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.908954][ T460] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.950354][ T460] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.957574][ T460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.020302][ T460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 37.109432][ T58] logitech 0003:046D:CA04.0004: unknown main item tag 0x2 [ 37.116792][ T39] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 37.124496][ T58] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 37.131761][ T58] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 37.140336][ T58] input: HID 046d:ca04 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:CA04.0004/input/input7 [ 37.154343][ T471] loop3: detected capacity change from 0 to 40427 [ 37.167812][ T471] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 37.174597][ T471] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.211539][ T471] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.227264][ T58] logitech 0003:046D:CA04.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 37.252048][ T58] logitech 0003:046D:CA04.0004: implement() called with too large value 243 (n: 0)! (kworker/1:2) [ 37.265587][ T58] logitech 0003:046D:CA04.0004: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 37.282764][ T316] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 37.313088][ T39] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 37.329931][ T471] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.337688][ T471] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.345940][ T39] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.357662][ T295] usb 2-1: USB disconnect, device number 3 [ 37.369866][ T482] fido_id[482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 37.392001][ T39] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 37.412049][ T39] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 37.441997][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.451762][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 37.460913][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.470737][ T39] usb 1-1: config 0 descriptor?? [ 37.478257][ T464] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 37.503168][ T316] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 37.514152][ T316] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.525480][ T316] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 37.536684][ T316] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 37.549933][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.556714][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 37.566023][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.586884][ T316] usb 3-1: config 0 descriptor?? [ 37.593265][ T473] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 37.611687][ T480] loop4: detected capacity change from 0 to 40427 [ 37.622092][ T480] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 37.628958][ T480] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.629268][ T471] syz.3.37: attempt to access beyond end of device [ 37.629268][ T471] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.662374][ T480] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.724676][ T480] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.731827][ T480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.774460][ T480] UDC core: g1: couldn't find an available UDC or it's busy [ 37.869704][ T490] EXT4-fs: Ignoring removed bh option [ 37.876270][ T490] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.894588][ T39] logitech 0003:046D:CA04.0005: unknown main item tag 0x2 [ 37.901810][ T39] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 37.908463][ T490] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.41: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 37.909597][ T39] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 37.928018][ T490] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.41: Bad quota inode: 4, type: 1 [ 37.944955][ T490] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.959778][ T39] input: HID 046d:ca04 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:CA04.0005/input/input8 [ 37.961794][ T490] EXT4-fs (loop3): mount failed [ 37.974003][ T480] syz.4.39: attempt to access beyond end of device [ 37.974003][ T480] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.005392][ T316] logitech 0003:046D:CA04.0006: unknown main item tag 0x2 [ 38.019084][ T316] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 38.027695][ T316] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 38.035832][ T316] input: HID 046d:ca04 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:CA04.0006/input/input9 [ 38.139750][ T498] set_capacity_and_notify: 1 callbacks suppressed [ 38.139768][ T498] loop4: detected capacity change from 0 to 512 [ 38.146301][ T500] loop3: detected capacity change from 0 to 512 [ 38.163083][ T39] logitech 0003:046D:CA04.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 38.172302][ T498] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 38.175620][ T39] logitech 0003:046D:CA04.0005: implement() called with too large value 243 (n: 0)! (kworker/1:1) [ 38.193969][ T498] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 38.205950][ T39] logitech 0003:046D:CA04.0005: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 38.224323][ T498] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.43: iget: bad i_size value: 12154757448730 [ 38.241755][ T505] overlayfs: overlapping lowerdir path [ 38.262824][ T505] loop1: detected capacity change from 0 to 256 [ 38.271688][ T500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.324644][ T39] usb 1-1: USB disconnect, device number 2 [ 38.331035][ T500] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.346134][ T498] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.43: couldn't read orphan inode 13 (err -117) [ 38.360610][ T498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.552864][ T316] logitech 0003:046D:CA04.0006: input,hidraw1: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 38.558792][ T507] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.44: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 38.572558][ T316] logitech 0003:046D:CA04.0006: implement() called with too large value 243 (n: 0)! (kworker/0:4) [ 38.627019][ T316] logitech 0003:046D:CA04.0006: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 38.679838][ T316] usb 3-1: USB disconnect, device number 3 [ 38.784249][ T511] fido_id[511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 38.789571][ T513] loop0: detected capacity change from 0 to 512 [ 38.824329][ T514] fido_id[514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 38.912314][ T513] ======================================================= [ 38.912314][ T513] WARNING: The mand mount option has been deprecated and [ 38.912314][ T513] and is ignored by this kernel. Remove the mand [ 38.912314][ T513] option from the mount to silence this warning. [ 38.912314][ T513] ======================================================= [ 39.032158][ T509] syz.4.43 (509): drop_caches: 2 [ 39.227188][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 39.227208][ T28] audit: type=1400 audit(1793495970.780:213): avc: denied { write } for pid=512 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.272640][ T513] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 39.282002][ T513] FAT-fs (loop0): Filesystem has been set read-only [ 39.305105][ T513] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 39.398035][ T28] audit: type=1400 audit(1793495971.080:214): avc: denied { create } for pid=517 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 39.433202][ T28] audit: type=1400 audit(1793495971.080:215): avc: denied { sys_admin } for pid=517 comm="syz.1.46" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 39.455638][ T528] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 39.518156][ T288] EXT4-fs (loop3): unmounting filesystem. [ 39.557798][ T535] loop3: detected capacity change from 0 to 512 [ 39.614375][ T516] loop2: detected capacity change from 0 to 40427 [ 39.622809][ T291] EXT4-fs (loop4): unmounting filesystem. [ 39.630665][ T516] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 39.637598][ T535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.642384][ T516] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.647095][ T535] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.702178][ T535] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.48: corrupted xattr block 33 [ 39.747293][ T516] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.782555][ T535] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 39.810150][ T535] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.48: corrupted xattr block 33 [ 39.811133][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.48: corrupted xattr block 33 [ 39.836186][ T535] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 39.849569][ T516] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.858212][ T28] audit: type=1400 audit(1793495971.580:216): avc: denied { read write } for pid=532 comm="syz.3.48" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.858225][ T535] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.48: corrupted xattr block 33 [ 39.892409][ T516] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.957912][ T541] loop4: detected capacity change from 0 to 128 [ 39.972046][ T316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.981314][ T544] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 40.000292][ T541] process 'syz.4.50' launched './file0' with NULL argv: empty string added [ 40.003812][ T535] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 40.019376][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.48: corrupted xattr block 33 [ 40.032595][ T28] audit: type=1400 audit(1793495971.760:217): avc: denied { open } for pid=532 comm="syz.3.48" path="/8/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.034862][ T544] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 40.069987][ T549] loop1: detected capacity change from 0 to 512 [ 40.098868][ T549] EXT4-fs (loop1): 1 truncate cleaned up [ 40.102266][ T28] audit: type=1400 audit(1793495971.800:218): avc: denied { mounton } for pid=539 comm="syz.4.50" path="/13/file0/proc" dev="loop4" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 40.117768][ T549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.146601][ T28] audit: type=1400 audit(1793495971.860:219): avc: denied { mounton } for pid=547 comm="syz.1.51" path="/8/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.150365][ T516] UDC core: g1: couldn't find an available UDC or it's busy [ 40.183087][ T316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.193707][ T316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.202755][ T316] usb 1-1: config 1 has no interface number 0 [ 40.208864][ T316] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.221830][ T535] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.48: corrupted xattr block 33 [ 40.233893][ T535] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 40.243048][ T28] audit: type=1400 audit(1793495971.970:220): avc: denied { ioctl } for pid=532 comm="syz.3.48" path="/8/file0/file1" dev="loop3" ino=15 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.250682][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 40.296282][ T316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.308473][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.319016][ T316] usb 1-1: Product: syz [ 40.325948][ T316] usb 1-1: Manufacturer: syz [ 40.332082][ T316] usb 1-1: SerialNumber: syz [ 40.341730][ T28] audit: type=1400 audit(1793495972.060:221): avc: denied { create } for pid=532 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.373703][ T316] usb 1-1: selecting invalid altsetting 1 [ 40.402945][ T556] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.410214][ T556] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.493664][ T28] audit: type=1400 audit(1793495974.220:222): avc: denied { create } for pid=533 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.522070][ T557] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm vhost-553: bg 0: block 465: padding at end of block bitmap is not set [ 43.613126][ T288] EXT4-fs (loop3): unmounting filesystem. [ 43.714433][ T516] syz.2.47: attempt to access beyond end of device [ 43.714433][ T516] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.932000][ T506] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 43.950779][ T561] loop4: detected capacity change from 0 to 40427 [ 43.969114][ T561] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 43.992572][ T561] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.005318][ T316] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 44.011458][ T316] cdc_ncm 1-1:1.1: bind() failure [ 44.018222][ T316] usb 1-1: USB disconnect, device number 3 [ 44.027956][ T287] EXT4-fs (loop1): unmounting filesystem. [ 44.034764][ T561] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.088160][ T561] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.095401][ T561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.123046][ T506] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 44.141903][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 44.144276][ T506] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.161073][ T506] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 44.172343][ T506] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 44.186713][ T506] usb 4-1: config 0 interface 0 has no altsetting 0 [ 44.193527][ T506] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 44.202814][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.214596][ T506] usb 4-1: config 0 descriptor?? [ 44.219895][ T559] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.241791][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 44.241804][ T28] audit: type=1400 audit(1793495975.960:225): avc: denied { ioctl } for pid=569 comm="syz.1.56" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17389 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.273594][ T295] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 44.296468][ T572] Zero length message leads to an empty skb [ 44.332617][ T561] syz.4.54: attempt to access beyond end of device [ 44.332617][ T561] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.440690][ T28] audit: type=1400 audit(1793495976.160:226): avc: granted { setsecparam } for pid=573 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 44.463626][ T295] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 44.474595][ T295] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.485905][ T295] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 44.497080][ T295] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 44.510372][ T295] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.517224][ T295] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 44.527890][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.537285][ T295] usb 3-1: config 0 descriptor?? [ 44.542989][ T564] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.634561][ T506] logitech 0003:046D:CA04.0007: unknown main item tag 0x2 [ 44.642444][ T506] logitech 0003:046D:CA04.0007: unknown main item tag 0x0 [ 44.649661][ T506] logitech 0003:046D:CA04.0007: unknown main item tag 0x0 [ 44.657855][ T506] input: HID 046d:ca04 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:CA04.0007/input/input10 [ 44.736667][ T506] logitech 0003:046D:CA04.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 44.749037][ T506] logitech 0003:046D:CA04.0007: implement() called with too large value 243 (n: 0)! (kworker/1:4) [ 44.759904][ T506] logitech 0003:046D:CA04.0007: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 44.803881][ T579] xt_hashlimit: overflow, try lower: 3/0 [ 44.813183][ T579] loop0: detected capacity change from 0 to 512 [ 44.831828][ T579] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.858616][ T579] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.860965][ T28] audit: type=1400 audit(1793495976.580:227): avc: granted { setsecparam } for pid=558 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 44.866288][ T579] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 44.892510][ T579] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.58: attempt to clear invalid blocks 2 len 1 [ 44.895049][ T506] usb 4-1: USB disconnect, device number 4 [ 44.906298][ T579] EXT4-fs (loop0): Remounting filesystem read-only [ 44.917833][ T579] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 44.942007][ T579] EXT4-fs (loop0): Remounting filesystem read-only [ 44.948748][ T579] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.58: invalid indirect mapped block 1819239214 (level 0) [ 44.963225][ T579] EXT4-fs (loop0): Remounting filesystem read-only [ 44.970014][ T579] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.58: invalid indirect mapped block 1819239214 (level 1) [ 44.984400][ T295] logitech 0003:046D:CA04.0008: unknown main item tag 0x2 [ 44.991564][ T295] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 44.998821][ T295] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 45.006187][ T579] EXT4-fs (loop0): Remounting filesystem read-only [ 45.013668][ T295] input: HID 046d:ca04 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:CA04.0008/input/input11 [ 45.025352][ T579] EXT4-fs (loop0): 1 truncate cleaned up [ 45.031054][ T579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.050226][ T582] usb usb7: usbfs: process 582 (syz.1.59) did not claim interface 0 before use [ 45.067009][ T289] EXT4-fs (loop0): unmounting filesystem. [ 45.106215][ T295] logitech 0003:046D:CA04.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 45.118752][ T295] logitech 0003:046D:CA04.0008: implement() called with too large value 243 (n: 0)! (kworker/0:2) [ 45.129620][ T295] logitech 0003:046D:CA04.0008: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 45.163850][ T28] audit: type=1400 audit(1793495976.890:228): avc: granted { setsecparam } for pid=563 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 45.217726][ T295] usb 3-1: USB disconnect, device number 4 [ 45.236048][ T586] fido_id[586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 45.328455][ T28] audit: type=1400 audit(1793495977.050:229): avc: denied { read write } for pid=587 comm="syz.0.61" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.353811][ T28] audit: type=1400 audit(1793495977.080:230): avc: denied { open } for pid=587 comm="syz.0.61" path="/12/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.377923][ T28] audit: type=1400 audit(1793495977.080:231): avc: denied { ioctl } for pid=587 comm="syz.0.61" path="/12/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 45.400134][ T590] loop4: detected capacity change from 0 to 512 [ 45.443099][ T590] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 45.451861][ T590] FAT-fs (loop4): Filesystem has been set read-only [ 45.459685][ T590] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 45.471486][ T590] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 45.662045][ T353] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.730675][ T28] audit: type=1400 audit(1793495977.440:232): avc: denied { write } for pid=591 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.806667][ T28] audit: type=1400 audit(1793495977.450:233): avc: denied { name_bind } for pid=591 comm="syz.3.62" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.853959][ T353] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 45.881057][ T353] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 46.068520][ T353] usb 1-1: config 1 interface 0 has no altsetting 0 [ 46.079478][ T599] loop2: detected capacity change from 0 to 128 [ 46.090735][ T353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.109051][ T28] audit: type=1400 audit(1793495977.830:234): avc: denied { mount } for pid=598 comm="syz.2.64" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.133985][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.152492][ T353] usb 1-1: SerialNumber: syz [ 46.163783][ T588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.284891][ T603] loop1: detected capacity change from 0 to 2048 [ 46.314213][ T603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.328161][ T603] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.66: bad inode number: 12 [ 46.339119][ T603] EXT4-fs (loop1): Remounting filesystem read-only [ 46.361683][ T287] EXT4-fs (loop1): unmounting filesystem.                                                                                                                                                                                                                                     [ 47.563216][ T316] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 47.573235][ T316] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 47.587082][ T316] usb 4-1: config 1 interface 0 has no altsetting 0 [ 47.594529][ T316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.603740][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 47.611747][ T316] usb 4-1: SerialNumber: syz [ 47.617658][ T631] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 syzkaller syzkaller login: [ 47.810403][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 47.817604][ T506] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 47.827626][ T506] usb 3-1: USB disconnect, device number 5 [ 47.837696][ T631] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 47.881683][ T646] FAULT_INJECTION: forcing a failure. [ 47.881683][ T646] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.895348][ T646] CPU: 1 PID: 646 Comm: syz.0.76 Not tainted syzkaller #0 [ 47.902502][ T646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.912572][ T646] Call Trace: [ 47.915864][ T646] [ 47.918803][ T646] __dump_stack+0x21/0x24 [ 47.923171][ T646] dump_stack_lvl+0x110/0x170 [ 47.927882][ T646] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.932922][ T646] ? page_add_file_rmap+0x49f/0x650 [ 47.938166][ T646] ? next_uptodate_page+0x89e/0x8d0 [ 47.943389][ T646] dump_stack+0x15/0x24 [ 47.947550][ T646] should_fail_ex+0x3bf/0x510 [ 47.952258][ T646] should_fail_alloc_page+0x61/0x90 [ 47.957486][ T646] prepare_alloc_pages+0x131/0x570 [ 47.962624][ T646] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 47.967851][ T646] ? __cfi_filemap_map_pages+0x10/0x10 [ 47.973327][ T646] __alloc_pages+0x15b/0x610 [ 47.977958][ T646] ? __cfi___alloc_pages+0x10/0x10 [ 47.983099][ T646] ? do_fault+0x1b23/0x1e30 [ 47.987631][ T646] ? memcg_rstat_updated+0x56/0x110 [ 47.992846][ T646] __folio_alloc+0x12/0x40 [ 47.997284][ T646] handle_mm_fault+0x1989/0x26b0 [ 48.002256][ T646] ? __cfi_handle_mm_fault+0x10/0x10 [ 48.007571][ T646] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 48.012819][ T646] ? fput+0x154/0x1a0 [ 48.016833][ T646] do_user_addr_fault+0x900/0x1030 [ 48.022062][ T646] ? debug_smp_processor_id+0x17/0x20 [ 48.027466][ T646] exc_page_fault+0x51/0xb0 [ 48.032014][ T646] asm_exc_page_fault+0x27/0x30 [ 48.036892][ T646] RIP: 0033:0x7f2572a5d61a [ 48.041340][ T646] Code: 48 83 c4 08 5b 5d e9 c5 fa ff ff 0f 1f 44 00 00 41 57 45 31 ff 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 38 1b 00 00 <48> 89 bc 24 a8 00 00 00 4c 8d ac 24 20 07 00 00 48 89 b4 24 a0 00 [ 48.055653][ T316] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 48.060961][ T646] RSP: 002b:00007f2573ac54b0 EFLAGS: 00010202 [ 48.073683][ T646] RAX: 00007f2572a5d600 RBX: 00007f2572e25fa0 RCX: 0000200000000100 [ 48.081683][ T646] RDX: 0000200000fe8000 RSI: 0000000000000006 RDI: ffffffffffffffff [ 48.089684][ T646] RBP: 00007f2573ac7090 R08: 0000000000000001 R09: 000000000000004b [ 48.091721][ T316] usb 4-1: USB disconnect, device number 5 [ 48.097706][ T646] R10: ffffffffffffffff R11: 0000200000fe8000 R12: 00000000fec00000 [ 48.097724][ T646] R13: 00007f2572e26038 R14: 00007f2572e25fa0 R15: 0000000000000000 [ 48.097744][ T646] [ 48.119138][ T646] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 48.354379][ T658] FAULT_INJECTION: forcing a failure. [ 48.354379][ T658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.437172][ T658] CPU: 1 PID: 658 Comm: syz.2.80 Not tainted syzkaller #0 [ 48.444358][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.454454][ T658] Call Trace: [ 48.457844][ T658] [ 48.460808][ T658] __dump_stack+0x21/0x24 [ 48.465183][ T658] dump_stack_lvl+0x110/0x170 [ 48.469887][ T658] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.474939][ T658] dump_stack+0x15/0x24 [ 48.479140][ T658] should_fail_ex+0x3bf/0x510 [ 48.483858][ T658] should_fail+0xb/0x10 [ 48.488050][ T658] should_fail_usercopy+0x1a/0x20 [ 48.493108][ T658] strncpy_from_user+0x24/0x2c0 [ 48.498013][ T658] ? kmem_cache_alloc+0x166/0x320 [ 48.503076][ T658] ? getname_flags+0xba/0x510 [ 48.507791][ T658] getname_flags+0xf5/0x510 [ 48.512343][ T658] getname+0x19/0x20 [ 48.516298][ T658] do_sys_openat2+0xeb/0x820 [ 48.521019][ T658] ? __kasan_check_write+0x14/0x20 [ 48.526168][ T658] ? do_sys_open+0xe0/0xe0 [ 48.530642][ T658] ? ksys_write+0x1fa/0x260 [ 48.535192][ T658] ? __cfi_ksys_write+0x10/0x10 [ 48.540075][ T658] __x64_sys_openat+0x136/0x160 [ 48.544973][ T658] x64_sys_call+0x783/0x9a0 [ 48.549528][ T658] do_syscall_64+0x4c/0xa0 [ 48.553971][ T658] ? clear_bhb_loop+0x30/0x80 [ 48.558689][ T658] ? clear_bhb_loop+0x30/0x80 [ 48.563415][ T658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.569366][ T658] RIP: 0033:0x7f2a4619f559 [ 48.573824][ T658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.593462][ T658] RSP: 002b:00007f2a47046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.601912][ T658] RAX: ffffffffffffffda RBX: 00007f2a46425fa0 RCX: 00007f2a4619f559 [ 48.609916][ T658] RDX: 0000000000000000 RSI: 0000200000000940 RDI: ffffffffffffff9c [ 48.617914][ T658] RBP: 00007f2a47046090 R08: 0000000000000000 R09: 0000000000000000 [ 48.625944][ T658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.633945][ T658] R13: 00007f2a46426038 R14: 00007f2a46425fa0 R15: 00007ffcfaea7478 [ 48.641957][ T658] [ 48.881521][ T664] loop2: detected capacity change from 0 to 256 [ 48.896332][ T664] exfat: Bad value for 'uid' [ 49.013333][ T669] xt_hashlimit: size too large, truncated to 1048576 [ 49.034311][ T664] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 49.247828][ T653] set_capacity_and_notify: 1 callbacks suppressed [ 49.247848][ T653] loop1: detected capacity change from 0 to 131072 [ 49.264140][ T680] loop0: detected capacity change from 0 to 256 [ 49.284572][ T680] incfs: Can't find or create .incomplete dir in ./file0 [ 49.303835][ T653] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 49.314983][ T680] incfs: mount failed -28 [ 49.377312][ T686] overlayfs: overlapping lowerdir path [ 49.386762][ T686] overlayfs: overlapping lowerdir path [ 49.403409][ T686] loop2: detected capacity change from 0 to 256 [ 49.472106][ T653] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.621601][ T653] F2FS-fs (loop1): invalid crc value [ 49.700972][ T653] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.758601][ T653] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.770988][ T653] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 49.811616][ T653] ip_tables: iptables: counters copy to user failed while replacing table [ 49.821594][ T653] ip_tables: iptables: counters copy to user failed while replacing table [ 49.831226][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 49.831239][ T28] audit: type=1400 audit(1793495981.550:246): avc: granted { setsecparam } for pid=691 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 49.859871][ T653] netlink: 104 bytes leftover after parsing attributes in process `syz.1.78'. [ 50.680783][ T715] loop3: detected capacity change from 0 to 512 [ 50.697960][ T715] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.711119][ T715] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.723482][ T715] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.94: invalid indirect mapped block 9 (level 0) [ 50.736816][ T715] EXT4-fs (loop3): 1 truncate cleaned up [ 50.742516][ T715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.755343][ T28] audit: type=1400 audit(1793495982.480:247): avc: denied { write } for pid=714 comm="syz.3.94" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.820765][ T28] audit: type=1400 audit(1793495982.480:248): avc: denied { bind } for pid=714 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.841518][ T288] EXT4-fs (loop3): unmounting filesystem. [ 51.000145][ T734] loop1: detected capacity change from 0 to 1024 [ 51.007710][ T732] loop2: detected capacity change from 0 to 2048 [ 51.017597][ T734] EXT4-fs: Ignoring removed bh option [ 51.039976][ T732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.044514][ T734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.147462][ T287] EXT4-fs (loop1): unmounting filesystem. [ 52.155613][ T754] overlayfs: overlapping lowerdir path [ 52.164825][ T754] overlayfs: overlapping lowerdir path [ 52.181376][ T754] loop4: detected capacity change from 0 to 256 [ 52.220811][ T290] EXT4-fs (loop2): unmounting filesystem. [ 52.452369][ T28] audit: type=1400 audit(1793495984.170:249): avc: granted { setsecparam } for pid=755 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.512319][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.979130][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.001268][ T6] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.012456][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.023813][ T6] usb 4-1: config 0 descriptor?? [ 53.072508][ T766] loop4: detected capacity change from 0 to 1024 [ 53.093369][ T766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.101965][ T766] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.120470][ T28] audit: type=1400 audit(1793495984.840:250): avc: denied { execute } for pid=762 comm="syz.4.104" path="/23/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.145009][ T763] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.104: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.159398][ T763] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.171728][ T763] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.171728][ T763] [ 53.183037][ T763] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.104: lblock 3 mapped to illegal pblock 3 (length 1) [ 53.198696][ T28] audit: type=1400 audit(1793495984.920:251): avc: denied { ioctl } for pid=762 comm="syz.4.104" path="socket:[18296]" dev="sockfs" ino=18296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.243160][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 53.250546][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 53.264333][ T6] usb 4-1: USB disconnect, device number 6 [ 53.271055][ T770] loop2: detected capacity change from 0 to 2048 [ 53.278173][ T423] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 53.292339][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 53.303976][ T28] audit: type=1400 audit(1793495984.950:252): avc: denied { setopt } for pid=769 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.324713][ T423] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 53.347369][ T423] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.347369][ T423] [ 53.367184][ T291] EXT4-fs (loop4): unmounting filesystem. [ 53.368422][ T28] audit: type=1400 audit(1793495984.950:253): avc: denied { execute } for pid=769 comm="syz.2.105" path="/19/file1" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.473067][ T19] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.494388][ T19] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.514840][ T19] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.543302][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 53.556541][ T19] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 53.575562][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.595816][ T19] usb 2-1: config 0 descriptor?? [ 53.624246][ T779] loop4: detected capacity change from 0 to 40427 [ 53.641356][ T779] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 53.649311][ T779] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 53.661019][ T779] F2FS-fs (loop4): invalid crc value [ 53.670454][ T779] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.715954][ T779] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 53.723162][ T779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.740053][ T779] syz.4.106: attempt to access beyond end of device [ 53.740053][ T779] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.768648][ T779] syz.4.106: attempt to access beyond end of device [ 53.768648][ T779] loop4: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 53.789215][ T779] device batadv_slave_1 entered promiscuous mode [ 53.804711][ T779] device batadv_slave_1 left promiscuous mode [ 53.813297][ T291] syz-executor: attempt to access beyond end of device [ 53.813297][ T291] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 53.862001][ T6] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 54.009037][ T765] FAT-fs (loop1): Unrecognized mount option "shortname=winnt-sÚ)K€8ú¤Ö= œMàhortname=mixed" or missing value [ 54.054366][ T28] audit: type=1400 audit(1793495985.790:254): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.092754][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.106020][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 54.131629][ T6] usb 1-1: language id specifier not provided by device, defaulting to English [ 54.566530][ T793] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 54.631855][ T19] sony 0003:054C:042F.000A: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 54.700153][ T6] usb 1-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 54.924416][ T19] sony 0003:054C:042F.000A: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 54.935991][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.944085][ T19] sony 0003:054C:042F.000A: failed to claim input [ 54.950768][ T6] usb 1-1: Product: syz [ 54.954987][ T6] usb 1-1: Manufacturer: syz [ 54.974093][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.003073][ T6] usb 1-1: SerialNumber: syz [ 55.009210][ T19] usb 2-1: USB disconnect, device number 4 [ 55.013620][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.039763][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.053701][ T802] fido_id[802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 55.068689][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.092658][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.104685][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.113402][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.121766][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.131395][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.161083][ T28] audit: type=1400 audit(1793495986.880:255): avc: granted { setsecparam } for pid=806 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 55.200105][ T810] set_capacity_and_notify: 1 callbacks suppressed [ 55.200123][ T810] loop4: detected capacity change from 0 to 256 [ 55.213595][ T810] exfat: Deprecated parameter 'utf8' [ 55.218930][ T810] exfat: Deprecated parameter 'namecase' [ 55.236606][ T781] binder: 780:781 ioctl c00c620f 200000000540 returned -22 [ 55.244056][ T28] audit: type=1400 audit(1793495986.960:256): avc: denied { read write } for pid=780 comm="syz.0.108" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.267669][ T810] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 55.269664][ T28] audit: type=1400 audit(1793495986.960:257): avc: denied { open } for pid=780 comm="syz.0.108" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.293574][ T6] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.304341][ T28] audit: type=1400 audit(1793495986.960:258): avc: denied { ioctl } for pid=780 comm="syz.0.108" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.333680][ T6] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.346629][ T28] audit: type=1400 audit(1793495987.070:259): avc: denied { write } for pid=809 comm="syz.4.116" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.372986][ T6] usb 1-1: USB disconnect, device number 5 [ 55.382033][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 55.386795][ T28] audit: type=1400 audit(1793495987.070:260): avc: denied { add_name } for pid=809 comm="syz.4.116" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.436164][ T28] audit: type=1400 audit(1793495987.070:261): avc: denied { associate } for pid=809 comm="syz.4.116" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.504730][ T28] audit: type=1400 audit(1793495987.230:262): avc: denied { append } for pid=811 comm="syz.4.117" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 55.587015][ T811] mmap: syz.4.117 (811): VmData 29204480 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 55.623187][ T19] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 55.635707][ T19] usb 2-1: config 0 has no interface number 0 [ 55.642741][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.658556][ T19] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.670158][ T19] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.681101][ T819] FAULT_INJECTION: forcing a failure. [ 55.681101][ T819] name failslab, interval 1, probability 0, space 0, times 0 [ 55.686165][ T19] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.697844][ T819] CPU: 1 PID: 819 Comm: syz.2.120 Not tainted syzkaller #0 [ 55.707376][ T19] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 55.713763][ T819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.713778][ T819] Call Trace: [ 55.713784][ T819] [ 55.713792][ T819] __dump_stack+0x21/0x24 [ 55.713815][ T819] dump_stack_lvl+0x110/0x170 [ 55.713834][ T819] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.723399][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.732926][ T819] ? release_sock+0x169/0x1c0 [ 55.756734][ T19] usb 2-1: config 0 descriptor?? [ 55.761233][ T819] dump_stack+0x15/0x24 [ 55.761259][ T819] should_fail_ex+0x3bf/0x510 [ 55.779734][ T819] __should_failslab+0xac/0xf0 [ 55.784538][ T819] should_failslab+0x9/0x20 [ 55.789068][ T819] kmem_cache_alloc_node+0x42/0x330 [ 55.794313][ T819] ? __alloc_skb+0xe8/0x4a0 [ 55.798853][ T819] __alloc_skb+0xe8/0x4a0 [ 55.803221][ T819] netlink_sendmsg+0x635/0xbd0 [ 55.808024][ T819] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.813348][ T819] ? security_socket_sendmsg+0x93/0xb0 [ 55.818876][ T819] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.819232][ T821] loop3: detected capacity change from 0 to 256 [ 55.824192][ T819] ____sys_sendmsg+0x5fb/0x9c0 [ 55.824218][ T819] ? __sys_sendmsg_sock+0x40/0x40 [ 55.840274][ T819] ? import_iovec+0x7c/0xb0 [ 55.844095][ T821] exfat: Deprecated parameter 'utf8' [ 55.844812][ T819] ___sys_sendmsg+0x2a2/0x360 [ 55.850341][ T821] exfat: Deprecated parameter 'namecase' [ 55.854814][ T819] ? __sys_sendmsg+0x290/0x290 [ 55.854837][ T819] ? __kasan_check_write+0x14/0x20 [ 55.854861][ T819] ? proc_fail_nth_write+0x180/0x200 [ 55.875707][ T819] ? vfs_write+0xa51/0xd00 [ 55.880159][ T819] ? __fdget+0x19c/0x220 [ 55.884442][ T819] __x64_sys_sendmsg+0x20d/0x2e0 [ 55.889404][ T819] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.894875][ T819] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 55.900969][ T819] x64_sys_call+0x171/0x9a0 [ 55.905489][ T819] do_syscall_64+0x4c/0xa0 [ 55.909921][ T819] ? clear_bhb_loop+0x30/0x80 [ 55.914616][ T819] ? clear_bhb_loop+0x30/0x80 [ 55.919315][ T819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.925224][ T819] RIP: 0033:0x7f2a4619f559 [ 55.929667][ T819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.949307][ T819] RSP: 002b:00007f2a47046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.957738][ T819] RAX: ffffffffffffffda RBX: 00007f2a46425fa0 RCX: 00007f2a4619f559 [ 55.965726][ T819] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 55.973714][ T819] RBP: 00007f2a47046090 R08: 0000000000000000 R09: 0000000000000000 [ 55.981716][ T819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.989717][ T819] R13: 00007f2a46426038 R14: 00007f2a46425fa0 R15: 00007ffcfaea7478 [ 55.997713][ T819] [ 56.020864][ T821] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 56.025311][ T28] audit: type=1400 audit(1793495987.750:263): avc: denied { read write } for pid=822 comm="syz.2.122" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.025480][ T28] audit: type=1400 audit(1793495987.750:264): avc: denied { open } for pid=822 comm="syz.2.122" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.040078][ T353] wacom 0003:056A:003F.000B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 56.177763][ T837] loop4: detected capacity change from 0 to 128 [ 56.196283][ T827] loop0: detected capacity change from 0 to 2048 [ 56.213936][ T827] EXT4-fs: Ignoring removed oldalloc option [ 56.233755][ T827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.241519][ T845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.252533][ T845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 56.262373][ T845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=845 comm=syz.4.126 [ 56.274905][ T845] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.281994][ T845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.311986][ T6] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 56.513612][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.522240][ T6] usb 4-1: not running at top speed; connect to a high speed hub [ 56.530918][ T6] usb 4-1: config 8 has an invalid interface number: 43 but max is 0 [ 56.539483][ T6] usb 4-1: config 8 has no interface number 0 [ 56.545851][ T6] usb 4-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 56.556929][ T6] usb 4-1: config 8 interface 43 altsetting 17 endpoint 0x4 has invalid wMaxPacketSize 0 [ 56.567139][ T6] usb 4-1: config 8 interface 43 has no altsetting 0 [ 56.574075][ T316] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 56.584724][ T6] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 56.594031][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.602379][ T6] usb 4-1: Product: syz [ 56.606724][ T6] usb 4-1: Manufacturer: syz [ 56.611407][ T6] usb 4-1: SerialNumber: syz [ 56.763253][ T316] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 56.774158][ T316] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.785492][ T316] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 56.796619][ T316] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 56.809838][ T316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.837417][ T6] ums-alauda 4-1:8.43: USB Mass Storage device detected [ 56.848984][ T316] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 56.860377][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.885846][ T316] usb 5-1: config 0 descriptor?? [ 56.892484][ T847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 56.904705][ T6] usb 4-1: USB disconnect, device number 7 [ 56.949428][ T289] EXT4-fs (loop0): unmounting filesystem. [ 57.314412][ T316] logitech 0003:046D:CA04.000D: unknown main item tag 0x2 [ 57.321585][ T316] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 57.329401][ T316] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 57.337388][ T316] input: HID 046d:ca04 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:CA04.000D/input/input16 [ 57.365707][ T869] loop2: detected capacity change from 0 to 128 [ 57.415765][ T316] logitech 0003:046D:CA04.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 57.428755][ T316] logitech 0003:046D:CA04.000D: implement() called with too large value 243 (n: 0)! (kworker/0:4) [ 57.432793][ T869] capability: warning: `syz.2.133' uses deprecated v2 capabilities in a way that may be insecure [ 57.440060][ T316] logitech 0003:046D:CA04.000D: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 57.466861][ T869] loop2: detected capacity change from 0 to 2048 [ 57.483359][ T869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 57.491910][ T869] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.538783][ T353] usb 5-1: USB disconnect, device number 2 [ 57.563827][ T290] EXT4-fs (loop2): unmounting filesystem. [ 57.607924][ T875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.683376][ T884] xt_ecn: cannot match TCP bits for non-tcp packets [ 57.698680][ T884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=884 comm=syz.2.141 [ 57.737443][ T19] uclogic 0003:28BD:0042.000C: failed retrieving string descriptor #100: -71 [ 57.752419][ T19] uclogic 0003:28BD:0042.000C: failed retrieving pen parameters: -71 [ 57.761996][ T19] uclogic 0003:28BD:0042.000C: pen probing failed: -71 [ 57.768899][ T19] uclogic 0003:28BD:0042.000C: failed probing parameters: -71 [ 57.788414][ T19] uclogic: probe of 0003:28BD:0042.000C failed with error -71 [ 57.843421][ T19] usb 2-1: USB disconnect, device number 5 [ 57.929429][ T904] fido_id[904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 58.012570][ T906] overlayfs: overlapping lowerdir path [ 58.021831][ T906] overlayfs: overlapping lowerdir path [ 58.043441][ T906] loop1: detected capacity change from 0 to 256 [ 58.381748][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.395243][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.410198][ T895] device bridge_slave_0 entered promiscuous mode [ 58.422041][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.439251][ T895] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.446895][ T895] device bridge_slave_1 entered promiscuous mode [ 58.512750][ T423] device bridge_slave_1 left promiscuous mode [ 58.519175][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.527052][ T423] device bridge_slave_0 left promiscuous mode [ 58.542124][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.550473][ T423] device veth1_macvtap left promiscuous mode [ 58.559506][ T423] device veth0_vlan left promiscuous mode [ 58.570289][ T896] fuse: Unknown parameter 'group_idÃ00000000000000000000' [ 58.661990][ T316] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 58.684191][ T58] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 58.730682][ T886] cgroup: fork rejected by pids controller in /syz0 [ 58.834406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.853938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.862220][ T316] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 58.882948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.883254][ T58] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 58.891757][ T316] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.922273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.930578][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.932412][ T58] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.937711][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.956788][ T316] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 58.968977][ T316] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 58.972725][ T58] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 58.982980][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.001073][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 59.008222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.020132][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 59.029642][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.032031][ T58] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 59.036864][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.061963][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.074882][ T316] usb 3-1: config 0 descriptor?? [ 59.080218][ T918] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.080673][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.090725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.121988][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 59.131582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.142319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.151731][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.166681][ T895] device veth0_vlan entered promiscuous mode [ 59.172276][ T58] usb 5-1: config 0 descriptor?? [ 59.182938][ T912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.186904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.211518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.219890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.227534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.248851][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.264402][ T895] device veth1_macvtap entered promiscuous mode [ 59.278117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.293417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.401101][ T943] raw_sendmsg: syz.5.136 forgot to set AF_INET. Fix it! [ 59.506123][ T316] logitech 0003:046D:CA04.000E: unknown main item tag 0x2 [ 59.515642][ T316] logitech 0003:046D:CA04.000E: unknown main item tag 0x0 [ 59.526159][ T316] logitech 0003:046D:CA04.000E: unknown main item tag 0x0 [ 59.540145][ T316] input: HID 046d:ca04 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:CA04.000E/input/input17 [ 59.558224][ T938] loop1: detected capacity change from 0 to 1024 [ 59.572422][ T938] EXT4-fs: Ignoring removed bh option [ 59.601710][ T58] logitech 0003:046D:CA04.000F: unknown main item tag 0x2 [ 59.609235][ T58] logitech 0003:046D:CA04.000F: unknown main item tag 0x0 [ 59.617827][ T938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.626346][ T58] logitech 0003:046D:CA04.000F: unknown main item tag 0x0 [ 59.637360][ T316] logitech 0003:046D:CA04.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 59.645257][ T58] input: HID 046d:ca04 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:CA04.000F/input/input18 [ 59.656149][ T316] logitech 0003:046D:CA04.000E: implement() called with too large value 243 (n: 0)! (kworker/0:4) [ 59.672050][ T316] logitech 0003:046D:CA04.000E: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 59.726584][ T316] usb 3-1: USB disconnect, device number 6 [ 59.753393][ T58] logitech 0003:046D:CA04.000F: input,hidraw1: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 59.778029][ T948] fido_id[948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 59.819049][ T58] logitech 0003:046D:CA04.000F: implement() called with too large value 243 (n: 0)! (kworker/1:2) [ 59.833682][ T287] EXT4-fs (loop1): unmounting filesystem. [ 59.842106][ T58] logitech 0003:046D:CA04.000F: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 59.963956][ T58] usb 5-1: USB disconnect, device number 3 [ 60.001565][ T953] fido_id[953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 60.512536][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 60.512552][ T28] audit: type=1400 audit(1793495992.240:287): avc: denied { read write } for pid=959 comm="syz.2.150" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.547552][ T28] audit: type=1400 audit(1793495992.270:288): avc: denied { open } for pid=959 comm="syz.2.150" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.612444][ T28] audit: type=1400 audit(1793495992.270:289): avc: denied { ioctl } for pid=959 comm="syz.2.150" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.640915][ T969] loop2: detected capacity change from 0 to 2048 [ 60.658380][ T969] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4605: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 60.672768][ T360] udevd[360]: incorrect ext4 checksum on /dev/loop2 [ 60.679668][ T28] audit: type=1400 audit(1793495992.310:290): avc: denied { set_context_mgr } for pid=968 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 60.703635][ T969] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 60.709721][ T971] loop4: detected capacity change from 0 to 1024 [ 60.721834][ T360] udevd[360]: incorrect ext4 checksum on /dev/loop2 [ 60.798013][ T971] journal_path: not usable as path [ 60.807125][ T28] audit: type=1400 audit(1793495992.530:291): avc: denied { getopt } for pid=973 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.822045][ T971] EXT4-fs: error: could not find journal device path [ 60.877338][ T969] binder: BINDER_SET_CONTEXT_MGR already set [ 60.899242][ T969] binder: 968:969 ioctl 4018620d 200000000480 returned -16 [ 61.136856][ T988] loop1: detected capacity change from 0 to 512 [ 61.284611][ T989] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 61.332061][ T989] FAT-fs (loop1): Filesystem has been set read-only [ 61.630588][ T970] loop0: detected capacity change from 0 to 128 [ 61.807344][ T1001] loop5: detected capacity change from 0 to 256 [ 61.835566][ T1001] exfat: Deprecated parameter 'utf8' [ 61.841316][ T970] syz.0.160 (970) used greatest stack depth: 18600 bytes left [ 61.850258][ T1001] exfat: Deprecated parameter 'namecase' [ 61.858744][ T1001] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 62.126350][ T1011] netlink: 'syz.2.176': attribute type 4 has an invalid length. [ 62.141387][ T1013] usb usb7: usbfs: process 1013 (syz.4.165) did not claim interface 0 before use [ 62.157595][ T1011] netlink: 'syz.2.176': attribute type 4 has an invalid length. [ 62.212010][ T58] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 62.403431][ T58] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 62.424770][ T58] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.438921][ T58] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 62.450411][ T58] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 62.469342][ T1023] loop4: detected capacity change from 0 to 512 [ 62.475910][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.501539][ T1023] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.522000][ T58] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 62.531111][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.545466][ T1023] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.168: inode has both inline data and extents flags [ 62.562164][ T1023] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.168: couldn't read orphan inode 15 (err -117) [ 62.574932][ T58] usb 6-1: config 0 descriptor?? [ 62.580538][ T1004] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 62.612011][ T1023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.696910][ T295] wacom 0003:056A:003F.0010: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 62.756547][ T291] EXT4-fs (loop4): unmounting filesystem. [ 62.841814][ T1036] loop2: detected capacity change from 0 to 8192 [ 62.876104][ T1036] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.907943][ T28] audit: type=1400 audit(1793495994.630:292): avc: denied { remount } for pid=1035 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.993133][ T58] logitech 0003:046D:CA04.0011: unknown main item tag 0x2 [ 63.000355][ T58] logitech 0003:046D:CA04.0011: unknown main item tag 0x0 [ 63.011069][ T1043] loop2: detected capacity change from 0 to 256 [ 63.033221][ T58] logitech 0003:046D:CA04.0011: unknown main item tag 0x0 [ 63.038939][ T1043] exfat: Deprecated parameter 'utf8' [ 63.051816][ T58] input: HID 046d:ca04 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:CA04.0011/input/input22 [ 63.062185][ T1043] exfat: Deprecated parameter 'namecase' [ 63.100012][ T1043] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 63.134826][ T1045] 9pnet_virtio: no channels available for device ./proc [ 63.156751][ T58] logitech 0003:046D:CA04.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.5-1/input0 [ 63.178888][ T58] logitech 0003:046D:CA04.0011: implement() called with too large value 243 (n: 0)! (kworker/1:2) [ 63.193830][ T28] audit: type=1400 audit(1793495994.920:293): avc: granted { setsecparam } for pid=1003 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 63.221023][ T58] logitech 0003:046D:CA04.0011: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 63.251463][ T1049] overlayfs: overlapping lowerdir path [ 63.286187][ T58] usb 6-1: USB disconnect, device number 2 [ 63.326252][ T1055] overlayfs: overlapping lowerdir path [ 63.366908][ T1049] loop1: detected capacity change from 0 to 256 [ 63.771507][ T28] audit: type=1400 audit(1793495995.490:294): avc: denied { read } for pid=1062 comm="syz.5.183" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 63.841992][ T28] audit: type=1400 audit(1793495995.490:295): avc: denied { open } for pid=1062 comm="syz.5.183" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 63.906510][ T28] audit: type=1400 audit(1793495995.490:296): avc: denied { ioctl } for pid=1062 comm="syz.5.183" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 64.130521][ T1073] loop2: detected capacity change from 0 to 512 [ 64.146000][ T1073] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.182955][ T1073] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.185: inode has both inline data and extents flags [ 64.262161][ T1073] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.185: couldn't read orphan inode 15 (err -117) [ 64.324728][ T1073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.348966][ T890] syz.0.142 (890) used greatest stack depth: 14408 bytes left [ 64.371766][ T1078] overlayfs: overlapping lowerdir path [ 64.443531][ T1079] overlayfs: overlapping lowerdir path [ 64.544822][ T290] EXT4-fs (loop2): unmounting filesystem. [ 64.556433][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 64.609470][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 64.858830][ T1063] F2FS-fs (loop5): Test dummy encryption mode enabled [ 64.870365][ T1063] F2FS-fs (loop5): invalid crc value [ 64.881993][ T58] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 64.895468][ T1063] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.973488][ T1063] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 64.992348][ T1063] fscrypt: AES-256-XTS using blk-crypto-fallback [ 65.063069][ T58] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.076324][ T58] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.094970][ T58] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.108471][ T58] usb 3-1: config 0 interface 0 has no altsetting 0 [ 65.109200][ T1096] EXT4-fs (loop4): 1 truncate cleaned up [ 65.115196][ T58] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 65.129945][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.139411][ T58] usb 3-1: config 0 descriptor?? [ 65.142151][ T1096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.330762][ T1103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 65.410408][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.417698][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.465375][ T1105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm vhost-1104: bg 0: block 465: padding at end of block bitmap is not set [ 65.533076][ T1107] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 65.555723][ T1088] FAT-fs (loop2): Unrecognized mount option "shortname=winnt-sÚ)K€8ú¤Ö= œMàhortname=mixed" or missing value [ 65.653695][ T362] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.747143][ T1109] FAULT_INJECTION: forcing a failure. [ 65.747143][ T1109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.760340][ T1109] CPU: 1 PID: 1109 Comm: syz.5.189 Not tainted syzkaller #0 [ 65.767663][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.777848][ T1109] Call Trace: [ 65.781165][ T1109] [ 65.784118][ T1109] __dump_stack+0x21/0x24 [ 65.788486][ T1109] dump_stack_lvl+0x110/0x170 [ 65.793194][ T1109] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.798253][ T1109] ? __kasan_check_write+0x14/0x20 [ 65.803390][ T1109] dump_stack+0x15/0x24 [ 65.807571][ T1109] should_fail_ex+0x3bf/0x510 [ 65.812296][ T1109] should_fail+0xb/0x10 [ 65.816473][ T1109] should_fail_usercopy+0x1a/0x20 [ 65.821525][ T1109] strncpy_from_user+0x24/0x2c0 [ 65.826410][ T1109] ? kmem_cache_alloc+0x166/0x320 [ 65.831506][ T1109] ? getname_flags+0xba/0x510 [ 65.836220][ T1109] getname_flags+0xf5/0x510 [ 65.840750][ T1109] getname+0x19/0x20 [ 65.844673][ T1109] do_sys_openat2+0xeb/0x820 [ 65.849294][ T1109] ? kasan_check_range+0x1c4/0x2a0 [ 65.854443][ T1109] ? __kasan_check_write+0x14/0x20 [ 65.859586][ T1109] ? do_sys_open+0xe0/0xe0 [ 65.864038][ T1109] ? ksys_write+0x1fa/0x260 [ 65.868571][ T1109] __x64_sys_openat+0x136/0x160 [ 65.873453][ T1109] x64_sys_call+0x783/0x9a0 [ 65.877986][ T1109] do_syscall_64+0x4c/0xa0 [ 65.882421][ T1109] ? clear_bhb_loop+0x30/0x80 [ 65.887142][ T1109] ? clear_bhb_loop+0x30/0x80 [ 65.891846][ T1109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.897783][ T1109] RIP: 0033:0x7f2332f9f559 [ 65.902220][ T1109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.921855][ T1109] RSP: 002b:00007f2333dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.930306][ T1109] RAX: ffffffffffffffda RBX: 00007f2333226180 RCX: 00007f2332f9f559 [ 65.938300][ T1109] RDX: 000000000000275a RSI: 0000200000004ac0 RDI: ffffffffffffff9c [ 65.946327][ T1109] RBP: 00007f2333dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 65.954319][ T1109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.962308][ T1109] R13: 00007f2333226218 R14: 00007f2333226180 R15: 00007ffcafad1538 [ 65.970314][ T1109] [ 66.325038][ T58] sony 0003:054C:042F.0012: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 66.383890][ T58] sony 0003:054C:042F.0012: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 66.423069][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 66.423085][ T28] audit: type=1400 audit(1793495998.150:300): avc: denied { getopt } for pid=1111 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.470045][ T58] sony 0003:054C:042F.0012: failed to claim input [ 66.510714][ T58] usb 3-1: USB disconnect, device number 7 [ 66.588911][ T1118] fido_id[1118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 66.689168][ T1122] netlink: 772 bytes leftover after parsing attributes in process `syz.5.193'. [ 66.889534][ T1126] set_capacity_and_notify: 5 callbacks suppressed [ 66.889554][ T1126] loop5: detected capacity change from 0 to 512 [ 66.922987][ T1126] EXT4-fs (loop5): 1 truncate cleaned up [ 66.932025][ T58] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 66.947249][ T1126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 66.975574][ T1132] loop1: detected capacity change from 0 to 512 [ 66.998588][ T291] EXT4-fs (loop4): unmounting filesystem. [ 67.023927][ T1132] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.056988][ T1132] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.199: inode has both inline data and extents flags [ 67.082696][ T1132] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.199: couldn't read orphan inode 15 (err -117) [ 67.098782][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'. [ 67.132695][ T1132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.143335][ T58] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 67.155436][ T58] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.167504][ T58] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 67.179729][ T58] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 67.193203][ T58] usb 3-1: config 0 interface 0 has no altsetting 0 [ 67.199919][ T58] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 67.209240][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.218622][ T58] usb 3-1: config 0 descriptor?? [ 67.232247][ T1115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.267907][ T1132] loop5: detected capacity change from 512 to 511 [ 67.283797][ T1143] ================================================================== [ 67.291916][ T1143] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0xb02/0x2230 [ 67.299681][ T1143] Read of size 18446744073709551600 at addr ffff88814ec0d2b8 by task vhost-1141/1143 [ 67.309154][ T1143] [ 67.311494][ T1143] CPU: 0 PID: 1143 Comm: vhost-1141 Not tainted syzkaller #0 [ 67.318921][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.328994][ T1143] Call Trace: [ 67.332292][ T1143] [ 67.335236][ T1143] __dump_stack+0x21/0x24 [ 67.339595][ T1143] dump_stack_lvl+0x110/0x170 [ 67.344297][ T1143] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.349348][ T1143] ? ext4_xattr_set_entry+0xb02/0x2230 [ 67.354831][ T1143] print_address_description+0x71/0x200 [ 67.360442][ T1143] print_report+0x4a/0x60 [ 67.364798][ T1143] kasan_report+0x122/0x150 [ 67.369356][ T1143] ? ext4_xattr_set_entry+0xb02/0x2230 [ 67.374842][ T1143] ? ext4_xattr_set_entry+0xb02/0x2230 [ 67.380333][ T1143] kasan_check_range+0x249/0x2a0 [ 67.385296][ T1143] ? ext4_xattr_set_entry+0xb02/0x2230 [ 67.390787][ T1143] memmove+0x2d/0x70 [ 67.394696][ T1143] ext4_xattr_set_entry+0xb02/0x2230 [ 67.400013][ T1143] ext4_xattr_ibody_set+0x25b/0x720 [ 67.405256][ T1143] ext4_destroy_inline_data_nolock+0x234/0x5e0 [ 67.411440][ T1143] ? ext4_destroy_inline_data+0xe0/0xe0 [ 67.417012][ T1143] ? __kasan_kmalloc+0x95/0xb0 [ 67.421803][ T1143] ? memcpy+0x56/0x70 [ 67.425832][ T1143] ext4_convert_inline_data_nolock+0x3b0/0x9e0 [ 67.432238][ T1143] ? ext4_add_dirent_to_inline+0x440/0x440 [ 67.438068][ T1143] ? __kasan_check_read+0x11/0x20 [ 67.443116][ T1143] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 67.448792][ T1143] ext4_convert_inline_data+0x470/0x5b0 [ 67.454359][ T1143] ? __cfi_ext4_convert_inline_data+0x10/0x10 [ 67.460452][ T1143] ? down_read+0xa6/0xf0 [ 67.464722][ T1143] ext4_page_mkwrite+0x2ed/0x1340 [ 67.469777][ T1143] ? __cfi_filemap_fault+0x10/0x10 [ 67.474920][ T1143] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 67.480402][ T1143] ? __this_cpu_preempt_check+0x13/0x20 [ 67.485971][ T1143] ? __mod_node_page_state+0x9e/0xd0 [ 67.491282][ T1143] wp_page_shared+0x501/0x8d0 [ 67.495981][ T1143] do_wp_page+0xd96/0xf70 [ 67.500330][ T1143] handle_mm_fault+0x114f/0x26b0 [ 67.505282][ T1143] ? __count_memcg_events+0x8f/0xe0 [ 67.510500][ T1143] ? __cfi_handle_mm_fault+0x10/0x10 [ 67.515803][ T1143] ? down_read_trylock+0x27f/0x660 [ 67.520949][ T1143] ? lock_mm_and_find_vma+0x9e/0x320 [ 67.526248][ T1143] ? do_user_addr_fault+0x2eb/0x1030 [ 67.531563][ T1143] do_user_addr_fault+0x61e/0x1030 [ 67.536747][ T1143] exc_page_fault+0x51/0xb0 [ 67.541277][ T1143] asm_exc_page_fault+0x27/0x30 [ 67.546150][ T1143] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 67.551895][ T1143] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f [ 67.571550][ T1143] RSP: 0018:ffffc90010837c70 EFLAGS: 00050246 [ 67.577734][ T1143] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 00002000000007c0 [ 67.585877][ T1143] RDX: ffffc9000dc39000 RSI: 0000000000000005 RDI: ffff888129514bc6 [ 67.593875][ T1143] RBP: ffffc90010837c98 R08: ffffc90010837c67 R09: 1ffff92002106f8c [ 67.601874][ T1143] R10: dffffc0000000000 R11: fffff52002106f8d R12: dffffc0000000000 [ 67.609880][ T1143] R13: 0000000000000001 R14: ffff888129514a80 R15: ffff888129514ad0 [ 67.617889][ T1143] ? vhost_update_used_flags+0xee/0x200 [ 67.623490][ T1143] vhost_disable_notify+0xb2/0x160 [ 67.628633][ T1143] vhost_vsock_handle_tx_kick+0x14f/0xce0 [ 67.634374][ T1143] ? switch_mm_irqs_off+0x2fb/0x960 [ 67.639597][ T1143] ? __cfi_vhost_vsock_handle_tx_kick+0x10/0x10 [ 67.645887][ T1143] ? _raw_spin_lock+0x94/0xf0 [ 67.650631][ T1143] ? __cfi__raw_spin_lock+0x10/0x10 [ 67.655847][ T1143] ? debug_smp_processor_id+0x17/0x20 [ 67.661274][ T1143] ? kcov_remote_start+0x2c4/0x370 [ 67.666423][ T1143] vhost_worker+0x1ba/0x2e0 [ 67.670953][ T1143] kthread+0x281/0x320 [ 67.675052][ T1143] ? __cfi_vhost_worker+0x10/0x10 [ 67.680094][ T1143] ? __cfi_kthread+0x10/0x10 [ 67.684710][ T1143] ret_from_fork+0x1f/0x30 [ 67.689149][ T1143] [ 67.692180][ T1143] [ 67.694512][ T1143] The buggy address belongs to the physical page: [ 67.700928][ T1143] page:ffffea00053b0340 refcount:2 mapcount:0 mapping:ffff88810bae6ed0 index:0x2 pfn:0x14ec0d [ 67.711192][ T1143] memcg:ffff888100239380 [ 67.715452][ T1143] aops:def_blk_aops ino:700005 [ 67.720254][ T1143] flags: 0x660000000000205a(referenced|dirty|lru|workingset|private|zone=1) [ 67.728959][ T1143] raw: 660000000000205a ffffea0004fe6408 ffffea000474e9c8 ffff88810bae6ed0 [ 67.737574][ T1143] raw: 0000000000000002 ffff888138c7a498 00000002ffffffff ffff888100239380 [ 67.746167][ T1143] page dumped because: kasan: bad access detected [ 67.752620][ T1143] page_owner tracks the page as allocated [ 67.758344][ T1143] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 1141, tgid 1125 (syz.5.196), ts 67252238793, free_ts 67252143521 [ 67.778439][ T1143] post_alloc_hook+0x1f5/0x210 [ 67.783248][ T1143] prep_new_page+0x1c/0x110 [ 67.787772][ T1143] get_page_from_freelist+0x2ca9/0x2d20 [ 67.793362][ T1143] __alloc_pages+0x1fa/0x610 [ 67.797982][ T1143] __folio_alloc+0x12/0x40 [ 67.802420][ T1143] __filemap_get_folio+0x6fe/0xa70 [ 67.807554][ T1143] pagecache_get_page+0x2b/0x110 [ 67.812514][ T1143] __getblk_gfp+0x211/0x7c0 [ 67.817043][ T1143] __ext4_get_inode_loc+0x45f/0xd60 [ 67.822300][ T1143] ext4_get_inode_loc+0x81/0xf0 [ 67.827181][ T1143] ext4_read_inline_page+0x21b/0x890 [ 67.832479][ T1143] ext4_readpage_inline+0x1aa/0x210 [ 67.837692][ T1143] ext4_read_folio+0xe0/0x220 [ 67.842386][ T1143] filemap_read_folio+0xff/0x2c0 [ 67.847338][ T1143] filemap_fault+0xd0b/0x1370 [ 67.852064][ T1143] do_fault+0x19de/0x1e30 [ 67.856412][ T1143] page last free stack trace: [ 67.861096][ T1143] free_unref_page_prepare+0x81b/0x820 [ 67.866583][ T1143] free_unref_page_list+0x117/0x8d0 [ 67.871800][ T1143] release_pages+0xc7e/0xce0 [ 67.876413][ T1143] free_pages_and_swap_cache+0x86/0xa0 [ 67.881893][ T1143] tlb_finish_mmu+0x1b2/0x380 [ 67.886589][ T1143] unmap_region+0x2b7/0x320 [ 67.891104][ T1143] do_mas_align_munmap+0xbf3/0x1330 [ 67.896344][ T1143] do_mas_munmap+0x23d/0x2b0 [ 67.900967][ T1143] mmap_region+0x89e/0x2130 [ 67.905490][ T1143] do_mmap+0x858/0xdd0 [ 67.909583][ T1143] vm_mmap_pgoff+0x206/0x3f0 [ 67.914188][ T1143] ksys_mmap_pgoff+0x161/0x1d0 [ 67.918970][ T1143] __x64_sys_mmap+0xfa/0x110 [ 67.923578][ T1143] x64_sys_call+0x8fd/0x9a0 [ 67.928104][ T1143] do_syscall_64+0x4c/0xa0 [ 67.932540][ T1143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.938457][ T1143] [ 67.940810][ T1143] Memory state around the buggy address: [ 67.946448][ T1143] ffff88814ec0d180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.954523][ T1143] ffff88814ec0d200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.962596][ T1143] >ffff88814ec0d280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.970676][ T1143] ^ [ 67.976627][ T1143] ffff88814ec0d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.984720][ T1143] ffff88814ec0d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.992806][ T1143] ================================================================== [ 68.007690][ T28] audit: type=1400 audit(1793495999.730:301): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 68.052624][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.054798][ T287] EXT4-fs (loop1): unmounting filesystem. [ 68.060162][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.097263][ T28] audit: type=1400 audit(1793495999.730:302): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.146278][ T28] audit: type=1400 audit(1793495999.730:303): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.207274][ T1142] overlayfs: overlapping lowerdir path [ 68.212040][ T28] audit: type=1400 audit(1793495999.730:304): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.236984][ T1142] overlayfs: overlapping lowerdir path [ 68.260892][ T1143] Disabling lock debugging due to kernel taint [ 68.270563][ T1143] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm vhost-1141: bg 0: block 465: padding at end of block bitmap is not set [ 68.272374][ T28] audit: type=1400 audit(1793495999.730:305): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.330280][ T1149] loop0: detected capacity change from 0 to 256 [ 68.346080][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 68.352279][ T58] usbhid: probe of 3-1:0.0 failed with error -71 [ 68.358763][ T28] audit: type=1400 audit(1793495999.730:306): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.387475][ T58] usb 3-1: USB disconnect, device number 8 [ 68.436921][ T28] audit: type=1400 audit(1793495999.730:307): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.479985][ T28] audit: type=1400 audit(1793495999.930:308): avc: granted { setsecparam } for pid=1113 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 68.503160][ T895] EXT4-fs (loop5): unmounting filesystem. [ 68.869680][ T910] syz.0.142 (910) used greatest stack depth: 12896 bytes left