last executing test programs: 26m30.439230872s ago: executing program 32 (id=26): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$can_raw(0x1d, 0x3, 0x1) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1) 26m19.924269845s ago: executing program 33 (id=114): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket$nl_audit(0x10, 0x3, 0x9) 16m29.804287389s ago: executing program 34 (id=2998): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x48) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004814) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r6, 0x4068aea3, &(0x7f0000000600)) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x8}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}, 0x11}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x1e14}, 0x1c, 0x0}}], 0x2, 0x4001c00) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x707a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16m29.469717439s ago: executing program 35 (id=3003): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 16m24.100061401s ago: executing program 36 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000800), 0x8, 0x1c, 0x8, 0x0, 0x0}}, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 16m18.320432306s ago: executing program 37 (id=3057): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/473, @ANYRES32=0x0], 0xfd, 0x551f, &(0x7f0000005a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) gettid() getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001040)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@nobarrier}, {@nodiscard}, {@nodiscard}, {@data_err_abort}], [{@fowner_eq}, {@fowner_gt}, {@flag='silent'}, {@euid_lt}, {@flag='mand'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}, 0x81, 0xbe0, &(0x7f0000000440)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x2000000000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 15m26.142905525s ago: executing program 38 (id=3265): pipe(&(0x7f0000000000)) close(0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x181441, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) poll(&(0x7f00000000c0)=[{r0, 0x4000}], 0x1, 0x1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x40, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x5, 0x4, 0x42, 0xb, 0xff, 0x81, 0x7, 0xe}, {0xdddd1000, 0xdddd1000, 0x8, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x56}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x2e}, {0x8000000, 0x7}, 0x80000028, 0x0, 0xc000, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0xffffffff, 0x12}, 0x48) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15m24.345150652s ago: executing program 39 (id=3276): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00030600000006"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 15m20.642621551s ago: executing program 40 (id=3289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000058000/0x4000)=nil) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00008e8000/0x400000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 12m44.317431061s ago: executing program 6 (id=3866): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0x118) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 12m41.015699146s ago: executing program 6 (id=3874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000700)="$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") lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xd9417000) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x5, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 12m36.19528473s ago: executing program 6 (id=3888): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0x3b, &(0x7f0000000180)={0x2b, 0x21f, 0x200000}) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000080fbdbdf250a8080000000000000e3b66bee6526e150000000"], 0x1c}}, 0x20000050) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 12m33.362553721s ago: executing program 6 (id=3893): capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000500)={0x5, 0x3ff, 0x0, 0x9, 0x7, 0x3ff}) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e]}}, 0x0, 0x46}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x900) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x1, 0x4, 0x7, 0x31f, 0x8000, r1}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 12m33.341633532s ago: executing program 6 (id=3894): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x8) 12m32.854851788s ago: executing program 6 (id=3899): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="1121ae60", 0x4}, 0x1, 0x0, 0x0, 0x24008011}, 0x24004000) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x250, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_vlan\x00', {0xb, 0x2, 0x2f, 0xb2, 0x6, 0x8, 0x8, 0x18}, {0xf2}}}, @common=@unspec=@state={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x6, 0xf93b, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r2, 0x16, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=[0x5, 0x8, 0x400, 0x5], &(0x7f0000000380)=[0x3, 0x3, 0x4, 0x5, 0x4, 0x0, 0x5], 0x8001, 0x4, 0x0, r6}}, 0x40) socket(0x80000000000000a, 0x2, 0x0) close_range(r1, r0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x2, 0x22) 12m31.985754515s ago: executing program 41 (id=3899): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="1121ae60", 0x4}, 0x1, 0x0, 0x0, 0x24008011}, 0x24004000) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x250, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_vlan\x00', {0xb, 0x2, 0x2f, 0xb2, 0x6, 0x8, 0x8, 0x18}, {0xf2}}}, @common=@unspec=@state={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x6, 0xf93b, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r2, 0x16, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=[0x5, 0x8, 0x400, 0x5], &(0x7f0000000380)=[0x3, 0x3, 0x4, 0x5, 0x4, 0x0, 0x5], 0x8001, 0x4, 0x0, r6}}, 0x40) socket(0x80000000000000a, 0x2, 0x0) close_range(r1, r0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x2, 0x22) 6m56.013910081s ago: executing program 1 (id=5168): llistxattr(0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@test_dummy_encryption}, {@quota}, {@delalloc}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, ']%&:)/}&\xc3:\xdf*!'}}, {@obj_user={'obj_user', 0x3d, '{'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x9) r3 = openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r8, 0x7, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @empty, @empty}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb}, {0x1, 0x8}, {0xb, 0x4}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x4684}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44080, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m54.374820594s ago: executing program 3 (id=5178): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f0000000240)=ANY=[@ANYBLOB="636f6465706167653d3933362c73686f72746e616d653d6d697865642c696f636861727365743d6d6163726f6d616e69616e2c666c7573682c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c756e695f786c6174653d312c636865636b3d7374726963742c756e695f786c6174653d312c757466383d312c696f636861727365743d63703935302c6e6f636173652c73686f72746e616d653d6c6f7765722c726f6469722c000eae2fcfb532cd8300d2099b8201d18e84bc54352bda1424fac818e670e26e7d8b41a1ddfea8a1040452995e"], 0xfb, 0x36b, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) prlimit64(0x0, 0x9, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 6m54.348135935s ago: executing program 3 (id=5179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x2, 0x3, 0x2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 6m52.585250651s ago: executing program 3 (id=5182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m52.571012071s ago: executing program 3 (id=5183): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2046470, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00011002100020027bd7000fbdbdf250a1420049a000004130001001400020000000000000000000000ffffe000000209000100fc000000000000000000000000000001080004000100000008000e00df0800000800060005000000c9140001002001000000000000000000000000000108000a000100000014000100fe80000000000000000000000000002414001100776c616e3000"/160], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4) setpriority(0x0, 0x0, 0x2a14b58) openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x48}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) readlinkat(r0, 0x0, &(0x7f00000003c0)=""/103, 0x67) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) io_pgetevents(r3, 0xcea, 0x7, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={[0xe6]}, 0x8}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6m52.341911049s ago: executing program 3 (id=5184): unshare(0x6020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="5df2", 0x2}], 0x1}}], 0x1, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000000067ea7d1e08004501002800000000e9049078ac1e0001ffffffff052a549248fe8514fe58b3a300b7b0b708f0ffc9"], 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x20d) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x15, 0xa, 0x100) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) connect$netlink(r2, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000001400)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 6m51.812021436s ago: executing program 1 (id=5187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m51.786552836s ago: executing program 1 (id=5189): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22c00007, &(0x7f0000000300)={[{@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xd}}, {@resuid}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@delalloc}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x6, 0x10100001ffffff, 0x5, 0x9, 0x300}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3fa328737cfc77e0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_newneigh={0x5c, 0x1c, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, r3, 0x20, 0x0, 0x4}, [@NDA_NH_ID={0x8}, @NDA_PROBES={0x8, 0x4, 0x1}, @NDA_CACHEINFO={0x14, 0x3, {0xffff, 0xc, 0x2, 0x6}}, @NDA_VNI={0x8, 0x7, 0xa}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_MASTER={0x8, 0x9, 0x30000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000240)) 6m51.662961741s ago: executing program 1 (id=5190): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x5) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0]) shutdown(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x25]}, &(0x7f00000000c0), 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 6m51.024700741s ago: executing program 1 (id=5191): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) r1 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r1, 0x0, 0x63db, 0x7000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) 6m50.132842289s ago: executing program 1 (id=5193): r0 = getpid() capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000500)={0x5, 0x3ff, 0x0, 0x9, 0x7, 0x3ff}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e]}}, 0x0, 0x46}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x900) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=globa']) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) close(r2) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x1, 0x4, 0x7, 0x31f, 0x8000}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m48.150741073s ago: executing program 3 (id=5202): r0 = getpid() capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000500)={0x5, 0x3ff, 0x0, 0x9, 0x7, 0x3ff}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e]}}, 0x0, 0x46}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x900) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x1, 0x4, 0x7, 0x31f, 0x8000, r2}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m33.556205129s ago: executing program 42 (id=5193): r0 = getpid() capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000500)={0x5, 0x3ff, 0x0, 0x9, 0x7, 0x3ff}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e]}}, 0x0, 0x46}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x900) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=globa']) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) close(r2) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x1, 0x4, 0x7, 0x31f, 0x8000}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m31.97978123s ago: executing program 43 (id=5202): r0 = getpid() capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000500)={0x5, 0x3ff, 0x0, 0x9, 0x7, 0x3ff}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e]}}, 0x0, 0x46}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x900) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x1, 0x4, 0x7, 0x31f, 0x8000, r2}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m3.709935984s ago: executing program 9 (id=5373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newchain={0x54, 0x64, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3, 0xfff0}, {0xd, 0xfff3}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x2}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x6, 0xc}}, @TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_RATE={0x6, 0x5, {0xb, 0x1}}]}, 0x54}}, 0x4048040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xfe, 0x7, 0x7fffffff}]}) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x3c}}, 0x8000) 6m2.26533286s ago: executing program 9 (id=5380): accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xfffffffc, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380), 0x10000, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@nfs_export_off}], [{@pcr={'pcr', 0x3d, 0x4}}], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x2) rename(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') listen(r1, 0x80000003) syz_emit_ethernet(0x15d, &(0x7f0000001400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "650400", 0x127, 0x6, 0x1, @local, @local, {[], {{0x40, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}, {"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"}}}}}}}, 0x0) 6m2.245193481s ago: executing program 9 (id=5381): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x0, 0x86, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m1.469614586s ago: executing program 9 (id=5385): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000fa04e28e000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1f9ffff06010000f8ffffffb7020000089fddcb0c03000000000000850000000600000095a56170c6ca374fe359ba9c1a15f61731794b923e56f2a60a665b335b86e5b7e5cecb76000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xa, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfff}, 0x4e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) capset(&(0x7f0000000500)={0x19980330}, &(0x7f0000001280)={0x200002, 0x200003, 0xa, 0x46, 0x7}) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1700"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000700), &(0x7f0000000840)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x823bf72337965f06, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000480), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x800) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x46400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 6m0.827930896s ago: executing program 9 (id=5387): bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x3, 0x1, 0x0, 0x0, 0x0, 0x5000001) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") (rerun: 32) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m58.856246959s ago: executing program 9 (id=5391): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x60, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 5m58.856007459s ago: executing program 44 (id=5391): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x60, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 4m14.826839745s ago: executing program 8 (id=5918): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in6=@remote}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) socket(0x10, 0x3, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a80001280110001006272696467655f736c6176650000000068000580050019000300000005000900010000000500050000000000080025000000000006001f00d5000000050007000200000005000a000000000005000800000000000400180005000600010000000500090001000000050005000100000006001f8e06000000140003006272696467655f736c6176655f30"], 0xb4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$can_bcm(0x1d, 0x2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setrlimit(0xc, &(0x7f0000000080)={0x800, 0x2}) r9 = fcntl$dupfd(r8, 0x0, r7) connect$unix(r9, &(0x7f0000000540)=@abs={0x27, 0x0, 0x8}, 0x6e) connect$can_bcm(r6, &(0x7f0000000040), 0x10) sendto$inet6(r6, 0x0, 0x0, 0x80, 0x0, 0x0) mmap(&(0x7f0000333000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x110, 0xffffffffffffffff, 0x0) 4m12.17840531s ago: executing program 8 (id=5930): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket(0x2b, 0x1, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) 4m8.904733254s ago: executing program 8 (id=5948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x80c2, &(0x7f00000015c0)=ANY=[@ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000", @ANYRES64=r0], 0xf, 0x2c4, &(0x7f00000012c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048050) syz_read_part_table(0x5da, &(0x7f0000000000)="$eJzs1E9LY1cUAPCTzGTeTJshUga6aHcjAwXbaTuLDtRAhyEEN1rsH/wEgoV2IbhwIQbN2tovULEqiBu/gNCNqCAKuhKX4qZLpVBCK6+85ClSXLWhVfr7Qd798+4954Z7eMGdVoxKudNLk4jGxaMb1vRE4dro5zeTdtuIiK/Was0k4tXwl1dL3i3ncbOQnajZq6QzlSalzrKBR3GwuPv6fK1n7+nhdu9SMd++UYzIInx7shzF64doHyzL/ODBVXz+9x5WtyqzzfH63GQ1ifrU6YvRJOK39qv+QkRjJC+UrK7iYWdLN/OvV7OabOcfO6pPnfYevFzZT4fOfnz8QWn7oPXxTtzrZjpumc+y683q74/O/S88mTmeaQ0+W5143nc/Nqfn8+/ir3n7afb4phGpsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpsvbrViuZ4fW6yOnZUnzp9Mfp+7Z3va9/98MlP/dNfv90/UsxWFSL9/cbtpS7kr8w28zD3ssfLlf106Cwej2eDNy7X9RXyTru9/0/Tcku8V4qYvVZ/C08+/GimNfhsdeJ531vHm9Pz+b2nf934y85/cFoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C6oRSNNXw0XIwqRXM1eRJoPCvnv0lA+P5B8UVjcfX2+1rP39HC7d+nzfH6jHOV252S58u/9C/6uPwMAAP//HC50pQ==") r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000001a00)={0x15, 0x148, 0xfffffffffffffff8, 0x3, 0x657e59bb}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000016c0)=@newlink={0x88, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_VFINFO_LIST={0x60, 0x16, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2, 0xffffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @multicast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8000, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x8, 0xdd}}]}]}]}, 0x88}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4}) fcntl$lock(r5, 0x25, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r3, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x280, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x38}}, 0x20040000) 4m7.579006427s ago: executing program 8 (id=5953): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2008004500005c0000000000329000480180ffffffff0301000051d4214d291b43ac85d38aa499532c609f27e9c601424459eb616aa3b09da740c50a901892df3224952697dc5bb3c50d9d1ebf850e64cecc"], 0x0) r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00032e0000002e039f4a7e47"]}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[], 0x3, 0x246, &(0x7f0000000440)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='\x00') 4m5.129000475s ago: executing program 8 (id=5962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002000)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="650f08f26e2e0fc75c000f2202ba4300b8ca00ef67a7360f72e6d43e0f54eb3e360f20160f65260100", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4m5.080588856s ago: executing program 8 (id=5963): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061120000000000009500000000000000cf80f8131bb315a6f8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x205) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xd4aa, &(0x7f00000000c0)=0x0) r4 = eventfd2(0xe95, 0x801) r5 = accept4$inet6(r0, &(0x7f0000001fc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002000)=0x1c, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) io_submit(r3, 0x4, &(0x7f0000002280)=[&(0x7f0000001f80)={0x0, 0x0, 0x0, 0x5, 0x32, r1, &(0x7f0000000f80)="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", 0x1000, 0x8, 0x0, 0x0, r4}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x8, 0x9103, r5, &(0x7f0000002040)="f474cd27a67c0577412ca2b11c941f42e9598009066b019b6bb2dc379bd2dc83f1f4c943e4214a1410d4af8fecdc56de3e8e2a1d972ac8fab8bb3b1a9870c3851b2cf74ffa09b37f91d7424e0669fa445a8f48593e06c1f59f353033ef610d2ec949f8cddfa4b3e21c30c52a2997ef27645e9654486cc1", 0x77, 0x7, 0x0, 0x3, r6}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000002100)="11596458c9069c47f4495b20fdc8f6290c3a17be1234a33b87fe062ba27c684d84444b0f214180cc1517e9b148054eeeb21d9d8a9e7830bbe2efc256b7c62d59f5546654b5d3653e9e24f7698f2bb165408171fe1d0aa3b90c2c1a905a4dc49a9a0491191eae5389a8a3b4cd455099b2b469e22a8c579822895ac8f968501ffe9581f6fc3ce21a9190fd529f4af509f6c05df1407c7096334e6003b331a4a1", 0x9f, 0x101, 0x0, 0x2}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3, 0x530e, r1, &(0x7f0000002200), 0x0, 0x9, 0x0, 0x7}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r8, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0a188e9928e301df42ef860188a8", 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x22, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000f40)={[{@sb={'sb', 0x3d, 0x800}}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, 0x15, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0xe9}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, '\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m5.047019328s ago: executing program 45 (id=5963): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061120000000000009500000000000000cf80f8131bb315a6f8"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x205) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xd4aa, &(0x7f00000000c0)=0x0) r4 = eventfd2(0xe95, 0x801) r5 = accept4$inet6(r0, &(0x7f0000001fc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000002000)=0x1c, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) io_submit(r3, 0x4, &(0x7f0000002280)=[&(0x7f0000001f80)={0x0, 0x0, 0x0, 0x5, 0x32, r1, &(0x7f0000000f80)="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", 0x1000, 0x8, 0x0, 0x0, r4}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x8, 0x9103, r5, &(0x7f0000002040)="f474cd27a67c0577412ca2b11c941f42e9598009066b019b6bb2dc379bd2dc83f1f4c943e4214a1410d4af8fecdc56de3e8e2a1d972ac8fab8bb3b1a9870c3851b2cf74ffa09b37f91d7424e0669fa445a8f48593e06c1f59f353033ef610d2ec949f8cddfa4b3e21c30c52a2997ef27645e9654486cc1", 0x77, 0x7, 0x0, 0x3, r6}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000002100)="11596458c9069c47f4495b20fdc8f6290c3a17be1234a33b87fe062ba27c684d84444b0f214180cc1517e9b148054eeeb21d9d8a9e7830bbe2efc256b7c62d59f5546654b5d3653e9e24f7698f2bb165408171fe1d0aa3b90c2c1a905a4dc49a9a0491191eae5389a8a3b4cd455099b2b469e22a8c579822895ac8f968501ffe9581f6fc3ce21a9190fd529f4af509f6c05df1407c7096334e6003b331a4a1", 0x9f, 0x101, 0x0, 0x2}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3, 0x530e, r1, &(0x7f0000002200), 0x0, 0x9, 0x0, 0x7}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r8, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0a188e9928e301df42ef860188a8", 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x22, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000f40)={[{@sb={'sb', 0x3d, 0x800}}]}, 0x82, 0x499, &(0x7f0000000840)="$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") sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, 0x15, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0xe9}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, '\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 11.558832234s ago: executing program 7 (id=7274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000d82f000000000000000080000000000000d0407e1c0809c350142907481bd4a071145a006b74ad3ce5b1a13ba04a1a1c47ba88c234ccf70dde01a6c8e0e6f02f57b74a4147df66670aeb49de28dc501d24b07ee007436c2ab4ebb7d2283fbabe5b71f3afe6a2c1bb8b9951ee2690868f9a4f08b3d690dfc0699213f063ed9b3c2322535a9b96af633367a62980c500dc4aaf8f4fe6a7632e9fcc801dbc38184d655e5501193cb50370a250047532ccb8928375a921e2402dfc3034eb5b1383ef095cb835d56a715e23f2d6ba1713ca049c0b38", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000020002000400000001000000", @ANYRES32=0x1, @ANYBLOB="03d5f897", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000540)=ANY=[@ANYBLOB='rodir,nonumtail=0,iocharset=cp936,utf8=1,nonumtail=0,utf8=1,nonumtail=0,shortname=win95,shortname=lower,shortname=mixed,uni_xlate=0,umask=00000000000017777777777,utf8=0,utf8=1,shortname=mixed,shortname=mixed,shortname=win95,iocharset=cp874,euid<', @ANYRESDEC=0x0, @ANYBLOB='_user=,\x00'], 0x1, 0x381, &(0x7f0000000c00)="$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") setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82d00af00416375f3", 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {}]}) 10.467395699s ago: executing program 7 (id=7277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsopen(0x0, 0x1) prlimit64(0x0, 0x2, &(0x7f0000001e40)={0x0, 0x400}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) clock_gettime(0x0, &(0x7f0000000340)) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000006c0)=@ethtool_rxfh={0x46, 0x29, 0xc8, 0xffffffff, 0x6, "77a6f0", 0x2, [0x1]}}) 9.411135431s ago: executing program 4 (id=7280): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0x3b, 0x0) fsopen(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000080fbdbdf250a80"], 0x1c}}, 0x20000050) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000880)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@utf8no}, {@rodir}, {@utf8}, {@fat=@debug}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x370, &(0x7f0000000400)="$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") getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/4089, 0xff9) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 9.352030793s ago: executing program 7 (id=7281): mlockall(0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"8dc76aef6e926defe16d4b937027495fedb681d4d8f2457f517fe1e43fd5179e3db990969ebbfcdacabf27d2b64357e0e72a70d617d67de47564bf3d7540d356155facf8decf34d42af0267d3de22cc26f25276a83a040121b13d0402c855882d9acecee9c2eaac1dde3608b79372a45ecc63966395d8a8be386c60d0c7e6fc3b13768ba0c31ac4f2e3bfac1dae741d40513d85680d8ca15336d3c7edfb5a9272c15a3e9f48a2ab4acd139eb724f2b8dab05251e72294c1ab1ffbea9b6639dc6e661d4ddfa90ad544e1c75a05c119beb523e70f8468f3f2bddea0e380167259bd5177d52079e202328a57fb4a0190c6b176c362feda1fc6a9aa161bec587044b53465c7a631681c8d07745d731aebd512c1ae9750b65ecce7e921cdd681b9ecabd8e88e8ee0c80c1c2a0c0e37b4ea52ebaa825d1bae0e787dfe94c97670dd0b8e865aa5a550ed4e3b222340dc17c5fca5326ed3c005d15555aa254ae8f3872d0255a7b2fd65b6b961180748a968af52f163443c7901042c1a1ba01471032eb17f640fdbbbb2cd34615d37f4d9474726cf8dfffe8980c7c417cf56f70bef609fbc47ec1b2068ee85ec778118779e2682de3d72b23cff3b74032286b87e125287eec9d8f8a70eadbec0e44cf61239ae7c710399df009dc9bdf190c982133840b87fe95abc53a04ffbe0ddba2a4a08e9c8435ea7a766d7af9cfeb047a36d6bc9cf8741929ca5e24233c885904719663b5a105178624e6c0bc6a1be48df711ff3595b0a49c98141eecbe2e98f42b7248f0141fc3f3dc741bfff362e04b658618a01deba2c68af3c922db619c880046f416da40c837fd53a6016b75fac69536b418ed91be165bcf6e4cf7c3a636c5d5d9985f86a62e53221cdabd16f365b35fad2932e8a6cae2828cea0c81c88cb78b6813d34167161591391048aad410f58e68cb88cca5d8deb8cce1a632a373ac53ebb87820ece9455346a0047298b93e0dd16541dacfc6c85179b5952393b3e5be0b6a14452603c9e8fa75bf73d452dbe0925d99fe79f3aa22b52cca1a14cd72097558109ad7eb2c9e051a322b4a59815a4ab6c89ad8d46e00972fa6a124f0ec86024a48fe9a379bf3ab3ed53c4602bbd5332a9c02daf481b493150b869185e908aceb87d3209de3275449caa83cd0f59397e3c52c9d15fb7a943e2898e295eb7e9283b78922d2b42bf033bc7cc25b4d884a4069209d439b13d56fd1e3bad2f844f40545077a3422c1bb3ccb8ae0849ee074a356ee0f8e1d5fa2de9c5dd7d7e00105dce3da0e7885c26a13caf5ce60f3c55c20fc38ebc16b23661cc36bdfe2d171ed321fafb9e2d83ccd223c49875103e5c5bcded29c1cbfa1bfddb284e62250c802007b761d9656d9933b564f24dbc417aa23605442e1bff5bc418b92f322e75053fe5678fe618bb79ef7a9c089858c6812711d"}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xc, 0x93, 0x18, 0x8, 0x3f0, 0x4439, 0x3cff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xac, 0x5, 0x10, 0x9, "", [{{0x9, 0x4, 0x19, 0x3, 0x0, 0x92, 0xf4, 0x7, 0x3}}]}}]}}, 0x0) symlink(0x0, 0x0) open(0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = inotify_init() r2 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000100)="64be365de974de72b149b9476e9000", 0x0, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5519, &(0x7f0000000740)="$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") write$tun(0xffffffffffffffff, 0x0, 0x1ba) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010732b0a0040004102030109026e0003011a4002080b0002012230050904000000010130000a2401020a000800000009040100edff023000"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 8.532561377s ago: executing program 7 (id=7282): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5a0}], 0x1, 0x0, 0x0, 0x2c}, 0x4) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003360000003603"]}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r1, 0xffffffffffffffff, 0x2, 0x4) 8.466483979s ago: executing program 4 (id=7283): syz_emit_ethernet(0x3b6, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904000001e7ff010009050102"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050000080000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7040000080000008500000095000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003020200000203"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="00ca", 0x2) 5.130629416s ago: executing program 7 (id=7290): r0 = open(&(0x7f0000000080)='./file0\x00', 0x60000, 0x196) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000980)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000009c0)='net/snmp6\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8913, &(0x7f0000000000)={'vlan0\x00'}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x1, 0x4ec, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x9e, 0x8d, 0x9a, 0x20, 0xccd, 0x5e, 0x1826, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4da, 0x2, 0x52, 0x96, 0x80, 0xf9, "", [{{0x9, 0x4, 0x92, 0x2, 0x2, 0x14, 0xff, 0xb3, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5cd}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff9, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xd6, 0x6, 0x1000}, @country_functional={0xa, 0x24, 0x7, 0x42, 0x1, [0x8, 0xffff]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x7, 0x9}, @mdlm={0x15, 0x24, 0x12, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x5, 0x7, 0x3}]}, @generic={0xf, 0x21, "f87ba444a09880b87b6a0ff597"}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x3, 0xaf, [@generic={0x12, 0xf, "e621b2010611585b5a052b9ffa79afd3"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x4e, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe3, 0x2}]}}]}}, {{0x9, 0x4, 0xb5, 0x2, 0xc, 0xb6, 0x7c, 0xa4, 0x40, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x81, 0x6, 0x37}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x3d, 0x40, 0x2a}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x4, 0x8, [@generic={0x4c, 0x0, "476c93292948cf310b272bccf17ca53954bf4d4cec78cd81c433a16d635fe23377f707022e0a5fdb2b7a05b2a5f71d444f85696a0d6945305c4fc85b79b78ffa6783117a54c880d7d8b1"}, @generic={0x43, 0x1, "13d68b8af5f31ff5fc45653fae7019ef40e26225b14ed119b332fca4ed2965462aae45dc44c4ead101a70fe0627b409ba891cbea6e90a654b5459bdcf668bcf009"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0xb8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0x83, 0x8, 0x400, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0x3, 0x4, 0x1bf, 0xf, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x200}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x5, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1d, 0x8093}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0x4, 0x4a, [@generic={0xee, 0x3, "cc4f2c8ff43a3c9ceb8b70db0089ff170fc44a7c309de8e9366c6bd27ea59077e5fd318bb1cf955bcd946b980840065daf620a7dcf79f1d808c860943f2e0eccab410043c4fccf432515af54a3257ea71679678c4ff57e4a5e084fa8cfb7070053ad3af2ad08db8c034a827fc9af56ca2489ef7ddeb6e649c349039b7bdebcc638d00fadc862067d122ff7dfb2f06edb6a0d4401f171d393100560583e809006e774380cc5904bab0f5f48a539d0faf3a85131108611b65facb09e11ed30e91412684a2289106050cdc2ac2e0c85aab122145e3a457ffd093f16a40368b78031caa743fed6ed82bff8637c39"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x6, 0x2, 0x0, [@generic={0xdb, 0x3, "31c4914624db0e78813b859412cc7d724a0fd11ee2a108b282ecf634ee10aa9b537f391ed70565a67bb3168777930f9281322729848d50af5b1042391b83d41cf3a886292b4d545f48be9b9e9c8f1e17619be7c38f1f70192f400e8bbca3786ac89e70e15f4fd61e97ad22e3ffb19a679e5a308058e8e866b1624939292bb35cb663853f785cac8aed8d5f263b769924c009cb14b98ecb397d2ec9c3fa784956ab5d9c63daab1e5d23b4af32a79394c261ae618c144a318bf3acde72a0691dc66209b9757be1aeb772a7e490c1d15e702957a1f2f9bb14171f"}, @generic={0xf6, 0x23, "dfd0a058b24fba575b1bbb84aba1ba4f26425a4c22e859885839c1ed5dddeeb93b69e5e96224077b9670784445f35c7abe3bf98cc6c95d3b9832b997822ac281963e26114ad4add9d66000a607e79025788281ed165205563138c75228b9767d2f6c741651dd7c3f4f4b7fd6060f44f8f43185413b129fdb795c8487d3fc8aeae041783b741ca1a4e010a3e78a37e303d0df773f0eb2e19c672714bb0779fafbde883e4d032ae9a9755f187c4f4063b05a8803e78fd514163d83de70997fe9cd8fc1d3150d3c062c2b36a54ffec2cbd6750cf32dff350eda026b967c6bdd975edc8d1d534d1a4039bc0ee5efb29815a615f92850"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x40, 0x3, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0xe3, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x28}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x7, 0x8, 0xc6, [@generic={0x25, 0xa, "6eaa7f05ec31960355639ecbaf6885b5a1679a6e4576d551a6e1824009893a566150b3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x1}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x4, 0xff}, 0x10, &(0x7f0000000680)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x0, 0x3, 0x7f, 0x6c}]}, 0x6, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x445}}, {0xeb, &(0x7f0000000700)=@string={0xeb, 0x3, "8e5de5063bb3cba382f63710a30e4f792c557284fc70dc7f178a542fbef696c9947c91c1c419ad7beda71120fe946be8ab978b75b35e27357a111464aff3bded2cca6b76a0eb7fdf5a84090330818293d63b3cf545c3e92a2751d73ee1f485ee01d46f773e6e8d94b81cb414bbf9e087cc2d80850a6e7a7c5cfb91e2d084beb8d2bd1ca45604075e25f3836033525706184d6f18c66e1504b5ef1997993dfcff4482c71c2aadef2c0d19a5f17cc7c7dcd8e1116deef10174ee9abb069b224b04e5bedccdcfaa0c5fcd7a41c76141172a99971e5faa1af2d6456c8581ab9563283dbbc6f063dbca962f"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff12"], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) r9 = fsmount(r3, 0x1, 0x4) r10 = signalfd(r0, &(0x7f0000000a80)={[0x5]}, 0x8) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x94, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xe6f82fa0525a5979}, 0x40) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b26e53f07010017002a9006837400820200000036592b00040000938590"], 0x0}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002100)=@newsa={0x180, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0x2, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x3ff, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha224-ni\x00'}}}]}, 0x180}}, 0x844) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = getpid() r16 = syz_pidfd_open(r15, 0x0) setns(r16, 0x24020000) fcntl$dupfd(r16, 0x406, r14) 4.828841276s ago: executing program 4 (id=7291): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.897782345s ago: executing program 4 (id=7292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.842902317s ago: executing program 4 (id=7293): chdir(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1de, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b87af) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) pipe(&(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 2.796512561s ago: executing program 7 (id=7295): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0/../file0\x00', 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x200800, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16, @ANYBLOB="7fd68658aba4af5776b3dcbbac34f79a9e532238cebb1dea7d0f1636a3455210d761df4e94c1caabf992b5af835eb348fe379b70b9980195946b4c3243509495d2b091c23fa6b7d7f74774607453a5576dd75bb34773621c3c1fe2052e500eefc082c238d072", @ANYBLOB="60922bc1a8adcedc63c05e1b66d41d1dda57e35ab2e08ae134ebe65543c47195528f4f279d2c6333072609b4025d353c002ec67f1c11fb1835e16287a45596bc0a2ace6fc744b0df32794d5522c93a9c185f845eaabd4a4920d53ce9412faedfb3de25adba7c2de7523f2421150f5dd50506562f646b9a2d406102afe9e900"/151, @ANYRES8, @ANYRES64=0x0, @ANYRESDEC], 0x9, 0x155d, &(0x7f0000002640)="$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") syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181840, 0x57) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) lseek(r0, 0x0, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) unshare(0x62020600) socket(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 2.796206601s ago: executing program 4 (id=7296): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 950.52018ms ago: executing program 0 (id=7305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x3, 0x700, 0x0, {0x8, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000090}, 0x4048800) 944.50483ms ago: executing program 0 (id=7306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 934.09569ms ago: executing program 0 (id=7307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) 883.042682ms ago: executing program 0 (id=7308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "0cbeb67c876b6de6", "dec5441e1fbf4ca771bbdfa10bf4708a", "2ce23716", "afe9312ecf5bb974"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) shutdown(r0, 0x0) 882.753431ms ago: executing program 0 (id=7309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x44089}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4094, 0xffe}, {&(0x7f00000056c0)=""/4088, 0xff8}, {&(0x7f0000001400)=""/4071, 0xfe7}, {&(0x7f0000000280)=""/184, 0xb8}, {&(0x7f0000002400)=""/4103, 0x1007}], 0x5}, 0x0) 882.633702ms ago: executing program 0 (id=7310): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10100) 758.193236ms ago: executing program 2 (id=7311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 747.296536ms ago: executing program 2 (id=7312): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 706.297677ms ago: executing program 2 (id=7313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) 706.151707ms ago: executing program 2 (id=7314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x24008004) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000000000c98e00000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x40) 706.063217ms ago: executing program 2 (id=7315): setsockopt(0xffffffffffffffff, 0x1e93, 0x1, &(0x7f0000000000)="20880616a487cca68441982405d6f17a6b7067af8462d32cf56d88ad7a7f", 0x1e) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 647.10849ms ago: executing program 2 (id=7316): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x400000000000071, 0x0, 0x0) 226.765113ms ago: executing program 5 (id=7326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2517000000400006803c0004"], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 226.655773ms ago: executing program 5 (id=7327): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x42800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x80, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000a3902014fe930400000000000000007107000000000000950800002000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 200.480233ms ago: executing program 5 (id=7328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x830, 0x5, 0xffffffff}}}}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 106.812646ms ago: executing program 5 (id=7329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x5, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xfffffff2, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0x2, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x0, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff29, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 237.84µs ago: executing program 5 (id=7330): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000010b04000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030001ac0f00"], 0x44}}, 0x0) 0s ago: executing program 5 (id=7331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x7, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): dit: type=1326 audit(1781142237.644:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22178 comm="syz.2.6838" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1518.150137][T17349] usb 6-1: config 0 descriptor?? [ 1518.155194][ T24] audit: type=1326 audit(1781142237.644:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22178 comm="syz.2.6838" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1791aa68e code=0x7ffc0000 [ 1518.181907][ T24] audit: type=1326 audit(1781142237.644:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22178 comm="syz.2.6838" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1518.507663][ T9680] usb 1-1: USB disconnect, device number 39 [ 1518.575834][ T9682] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1518.832234][ T9682] usb 8-1: Using ep0 maxpacket: 16 [ 1518.960530][ T9682] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1518.968690][ T9682] usb 8-1: config 0 has no interface number 0 [ 1518.974967][ T9682] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1518.985067][ T9682] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1519.163603][ T9682] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1519.211357][ T9682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.219618][ T9682] usb 8-1: Product: syz [ 1519.223776][ T9682] usb 8-1: Manufacturer: syz [ 1519.228550][ T9682] usb 8-1: SerialNumber: syz [ 1519.233932][ T9682] usb 8-1: config 0 descriptor?? [ 1519.260061][T22185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1519.261281][T17349] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1519.267200][T22185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1519.283324][T17349] uvcvideo: No valid video chain found. [ 1519.295049][T17349] usb 6-1: USB disconnect, device number 21 [ 1519.304082][T17351] usb 5-1: USB disconnect, device number 18 [ 1519.383059][T22198] F2FS-fs (loop4): invalid crc value [ 1519.411746][T22198] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1519.440777][T22198] F2FS-fs (loop4): Start checkpoint disabled! [ 1519.447524][T22198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1519.575485][T22185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1519.585510][T22185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1519.711636][T22213] cgroup: subsys name conflicts with all [ 1519.836803][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1520.061171][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1520.078173][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1521.087608][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1521.171382][ T9682] asix: probe of 8-1:0.34 failed with error -71 [ 1521.183226][ T9682] usb 8-1: USB disconnect, device number 10 [ 1522.687998][ T9680] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1523.187061][T17350] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1523.865433][T17350] usb 1-1: Using ep0 maxpacket: 32 [ 1523.907083][ T7913] attempt to access beyond end of device [ 1523.907083][ T7913] loop4: rw=2049, want=45104, limit=40427 [ 1524.056093][T22228] udc-core: couldn't find an available UDC or it's busy [ 1524.063620][T22228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1524.272553][T17350] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1524.321769][ T24] kauditd_printk_skb: 126 callbacks suppressed [ 1524.321779][ T24] audit: type=1326 audit(1781142243.661:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22257 comm="syz.4.6861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1524.353026][ T24] audit: type=1326 audit(1781142243.661:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22257 comm="syz.4.6861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1524.379039][ T24] audit: type=1326 audit(1781142243.661:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22257 comm="syz.4.6861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1524.404471][T17350] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1524.413223][ T24] audit: type=1326 audit(1781142243.661:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22257 comm="syz.4.6861" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1524.438367][T17350] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.448656][T17350] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1524.457896][T17350] usb 1-1: config 128 has no interface number 0 [ 1524.464407][T17350] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1524.475842][T17350] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1524.486249][T17350] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1524.784291][T17350] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1524.794468][T17350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.861699][T17350] usb 1-1: Product: syz [ 1524.865842][T17350] usb 1-1: Manufacturer: syz [ 1524.870440][T17350] usb 1-1: SerialNumber: syz [ 1525.017264][T22271] : renamed from bond_slave_0 [ 1525.472845][T17350] usb 1-1: USB disconnect, device number 40 [ 1527.129993][T22295] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 1527.856388][T17349] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1527.857476][T12822] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1527.901604][ T24] audit: type=1326 audit(1781142247.011:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.4.6879" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1527.983629][ T24] audit: type=1326 audit(1781142247.039:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.4.6879" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1528.019908][ T24] audit: type=1326 audit(1781142247.114:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.4.6879" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1528.135567][ T24] audit: type=1326 audit(1781142247.114:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.4.6879" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1528.162248][ T24] audit: type=1326 audit(1781142247.161:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.4.6879" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd78f987aeb code=0x7ffc0000 [ 1528.224928][ T24] audit: type=1326 audit(1781142247.161:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.4.6879" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78f94868e code=0x7ffc0000 [ 1528.225279][T12822] usb 6-1: Using ep0 maxpacket: 32 [ 1528.417633][T17351] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1528.428373][T12822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1528.465298][T22307] udc-core: couldn't find an available UDC or it's busy [ 1528.472635][T22307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1528.513862][T12822] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1528.522441][T12822] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.533179][T12822] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1528.542263][T12822] usb 6-1: config 128 has no interface number 0 [ 1528.548567][T12822] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1528.559935][T12822] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.577917][T12822] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1528.748994][T12822] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1528.758098][T12822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.766158][T12822] usb 6-1: Product: syz [ 1528.770498][T12822] usb 6-1: Manufacturer: syz [ 1528.775120][T12822] usb 6-1: SerialNumber: syz [ 1528.813040][T17351] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1528.821216][T17351] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1528.832234][T17351] usb 8-1: config 0 has no interface number 0 [ 1528.844735][T22346] device veth0_vlan left promiscuous mode [ 1528.851070][T22346] device veth0_vlan entered promiscuous mode [ 1528.857859][T22346] device veth1_macvtap left promiscuous mode [ 1528.864279][T22346] device veth1_macvtap entered promiscuous mode [ 1528.871986][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1528.879602][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1528.887104][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1528.895389][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.902417][ T7913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.910358][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1528.918657][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.926949][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.933985][ T7913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.941501][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.949825][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 1528.957475][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.965628][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1528.973764][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.981853][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.990464][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.998783][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1529.005467][T17351] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1529.006895][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1529.015775][T17351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.023849][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1529.032035][T17351] usb 8-1: Product: syz [ 1529.040217][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1529.052183][T17351] usb 8-1: Manufacturer: syz [ 1529.056876][T17351] usb 8-1: SerialNumber: syz [ 1529.059051][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.062449][T17351] usb 8-1: config 0 descriptor?? [ 1529.075946][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1529.084630][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1529.092958][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1529.101134][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1529.110033][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1529.124969][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1529.138620][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1529.148331][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1529.157463][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1529.165423][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1529.173353][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1529.181244][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1529.189846][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1529.198279][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1529.206024][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1529.213801][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1529.240446][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1529.693321][T22352] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(512) [ 1529.705957][T22352] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1529.730546][T22352] F2FS-fs (loop4): Unrecognized mount option "inline_xattr_size=0x000000000000003" or missing value [ 1529.939930][T12822] usb 6-1: USB disconnect, device number 23 [ 1529.946098][T17351] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1529.953245][T17351] uvcvideo: No valid video chain found. [ 1529.971675][T17351] usb 8-1: USB disconnect, device number 11 [ 1529.988472][T17349] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1530.464273][T22382] 9pnet: Insufficient options for proto=fd [ 1530.473444][T22380] netlink: 'syz.0.6897': attribute type 11 has an invalid length. [ 1530.507296][T22385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1530.517487][T22361] udc-core: couldn't find an available UDC or it's busy [ 1530.526319][T22361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1530.768551][ T9681] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1530.960989][T17352] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1530.994686][T22397] udc-core: couldn't find an available UDC or it's busy [ 1531.001911][T22397] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1531.089151][T17349] usb 3-1: device descriptor read/64, error -71 [ 1531.107814][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 1531.107827][ T24] audit: type=1326 audit(1781142250.006:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.159559][ T24] audit: type=1326 audit(1781142250.043:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.185293][ T24] audit: type=1326 audit(1781142250.043:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.217382][T17352] usb 5-1: Using ep0 maxpacket: 32 [ 1531.219066][ T9681] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1531.286016][ T9681] usb 8-1: config 0 has no interface number 0 [ 1531.292454][ T9681] usb 8-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1531.302306][ T24] audit: type=1326 audit(1781142250.043:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.310143][ T9681] usb 8-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.338151][ T9681] usb 8-1: config 0 interface 1 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1531.350948][ T9681] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1531.355776][ T24] audit: type=1326 audit(1781142250.043:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.357575][ T9681] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1531.391536][ T9681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.405598][ T9681] usb 8-1: config 0 descriptor?? [ 1531.410700][ T24] audit: type=1326 audit(1781142250.043:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.420496][T17352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1531.435882][ T24] audit: type=1326 audit(1781142250.053:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.484375][ T24] audit: type=1326 audit(1781142250.053:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6ca4aaeb code=0x7ffc0000 [ 1531.509831][ T24] audit: type=1326 audit(1781142250.053:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b6ca0b68e code=0x7ffc0000 [ 1531.517336][ T9681] usbhid 8-1:0.1: fixing wrong optional hid class descriptors count [ 1531.536167][ T24] audit: type=1326 audit(1781142250.053:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.5.6907" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1531.580739][T17352] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1531.589170][T17352] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.599734][T17352] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1531.613056][T17352] usb 5-1: config 128 has no interface number 0 [ 1531.619381][T17352] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1531.630628][T17352] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1531.640982][T17352] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1531.719811][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1532.025434][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1532.033906][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1532.040245][T17352] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1532.316255][T17352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.324944][T17352] usb 5-1: Product: syz [ 1532.329376][T17352] usb 5-1: Manufacturer: syz [ 1532.334232][T17352] usb 5-1: SerialNumber: syz [ 1532.471288][T22440] FAULT_INJECTION: forcing a failure. [ 1532.471288][T22440] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1532.489272][ T9681] usbhid 8-1:0.1: can't add hid device: -71 [ 1532.495269][ T9681] usbhid: probe of 8-1:0.1 failed with error -71 [ 1532.503208][T22440] CPU: 1 PID: 22440 Comm: syz.5.6917 Not tainted syzkaller #0 [ 1532.510670][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1532.520714][T22440] Call Trace: [ 1532.524006][T22440] __dump_stack+0x21/0x24 [ 1532.528323][T22440] dump_stack_lvl+0x1a7/0x208 [ 1532.533038][T22440] ? show_regs_print_info+0x18/0x18 [ 1532.538224][T22440] dump_stack+0x15/0x1c [ 1532.542361][T22440] should_fail+0x3c1/0x510 [ 1532.546766][T22440] should_fail_alloc_page+0x4f/0x60 [ 1532.552050][T22440] __alloc_pages_nodemask+0x119/0x620 [ 1532.557489][T22440] ? __kernel_text_address+0xa0/0x100 [ 1532.562856][T22440] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1532.568398][T22440] ? arch_stack_walk+0xee/0x140 [ 1532.573319][T22440] ? stack_trace_save+0xa6/0xf0 [ 1532.578238][T22440] skb_page_frag_refill+0x1fe/0x3c0 [ 1532.583497][T22440] tun_get_user+0x726/0x3270 [ 1532.588146][T22440] ? putname+0xfe/0x150 [ 1532.592309][T22440] ? tun_do_read+0x1c70/0x1c70 [ 1532.597064][T22440] ? kstrtouint_from_user+0x1c4/0x220 [ 1532.602487][T22440] ? __fsnotify_parent+0x6d2/0x7c0 [ 1532.607637][T22440] ? avc_policy_seqno+0x1b/0x70 [ 1532.612527][T22440] ? selinux_file_permission+0x2a5/0x510 [ 1532.618166][T22440] ? fsnotify_perm+0x66/0x4b0 [ 1532.622835][T22440] tun_chr_write_iter+0x1bf/0x270 [ 1532.627840][T22440] vfs_write+0x758/0xdc0 [ 1532.632069][T22440] ? kernel_write+0x3c0/0x3c0 [ 1532.636731][T22440] ? __fget_files+0x2c4/0x320 [ 1532.641396][T22440] ? __fdget_pos+0x1f7/0x380 [ 1532.645966][T22440] ? ksys_write+0x71/0x250 [ 1532.650370][T22440] ksys_write+0x149/0x250 [ 1532.654681][T22440] ? __ia32_sys_read+0x90/0x90 [ 1532.659421][T22440] ? debug_smp_processor_id+0x17/0x20 [ 1532.664771][T22440] __x64_sys_write+0x7b/0x90 [ 1532.669353][T22440] do_syscall_64+0x31/0x40 [ 1532.673768][T22440] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1532.679657][T22440] RIP: 0033:0x7f2b6ca0b68e [ 1532.684074][T22440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1532.703677][T22440] RSP: 002b:00007f2b6b4a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1532.712088][T22440] RAX: ffffffffffffffda RBX: 00007f2b6b4a56c0 RCX: 00007f2b6ca0b68e [ 1532.720055][T22440] RDX: 000000000000006e RSI: 00002000000001c0 RDI: 00000000000000c8 [ 1532.728141][T22440] RBP: 00007f2b6b4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.736114][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.744094][T22440] R13: 00007f2b6ccc4038 R14: 00007f2b6ccc3fa0 R15: 00007ffdc0fc8e58 [ 1532.770154][ T9681] usb 8-1: USB disconnect, device number 12 [ 1532.844799][T22451] netlink: 'syz.2.6921': attribute type 1 has an invalid length. [ 1533.087456][T17349] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1533.145933][T22460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1533.229216][T22468] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1533.358014][T17349] usb 6-1: Using ep0 maxpacket: 16 [ 1533.988364][T17349] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1533.996703][T17349] usb 6-1: config 0 has no interface number 0 [ 1534.002965][T17349] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1534.013523][T17349] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1534.414495][T22489] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6935'. [ 1534.442631][T22493] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1534.443912][T22487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1534.459644][T22487] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.482278][T17352] usb 5-1: USB disconnect, device number 19 [ 1534.519833][T17349] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1534.532409][T17349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.540505][T17349] usb 6-1: Product: syz [ 1534.552447][T17349] usb 6-1: Manufacturer: syz [ 1534.562029][T17349] usb 6-1: SerialNumber: syz [ 1534.579586][T17349] usb 6-1: config 0 descriptor?? [ 1534.605488][T22447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1534.612606][T22447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1534.862448][T22447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1534.890808][T22447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1535.108418][T17352] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1535.244108][T17349] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1535.674160][T17349] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1535.690125][T17349] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1535.780394][T17352] usb 5-1: Using ep0 maxpacket: 16 [ 1535.918270][T17352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.083334][T17351] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1536.097560][T17352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.110725][T17352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1536.124673][T17352] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1536.134834][T17352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.162897][T17352] usb 5-1: config 0 descriptor?? [ 1536.271989][T17349] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1536.282222][T17349] asix: probe of 6-1:0.34 failed with error -71 [ 1536.291855][T17349] usb 6-1: USB disconnect, device number 24 [ 1536.378726][T17351] usb 1-1: Using ep0 maxpacket: 32 [ 1536.549776][T17351] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1536.635278][T17351] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1536.643708][T17351] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.654231][T22505] udc-core: couldn't find an available UDC or it's busy [ 1536.661231][T17351] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1536.661238][T22505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1536.662213][T22505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6939'. [ 1536.670336][T17351] usb 1-1: config 128 has no interface number 0 [ 1536.694742][T17352] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1536.702292][T17351] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1536.713599][T17352] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1536.720882][T17352] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1536.735170][T17351] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1536.745393][T17352] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1536.752614][T17351] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1536.759717][T17352] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1536.767057][T17352] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 1536.776884][T17352] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0012/input/input15 [ 1536.861389][T17352] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1536.921070][T14753] usb 5-1: USB disconnect, device number 20 [ 1536.934564][T17351] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1536.944473][T17351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.959974][T17351] usb 1-1: Product: syz [ 1536.964437][T17351] usb 1-1: Manufacturer: syz [ 1536.969384][T17351] usb 1-1: SerialNumber: syz [ 1537.126831][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1537.158925][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1537.450364][T22541] FAULT_INJECTION: forcing a failure. [ 1537.450364][T22541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1537.463491][T22541] CPU: 0 PID: 22541 Comm: syz.5.6951 Not tainted syzkaller #0 [ 1537.470931][T22541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1537.480977][T22541] Call Trace: [ 1537.484275][T22541] __dump_stack+0x21/0x24 [ 1537.488591][T22541] dump_stack_lvl+0x1a7/0x208 [ 1537.493256][T22541] ? show_regs_print_info+0x18/0x18 [ 1537.498442][T22541] dump_stack+0x15/0x1c [ 1537.502584][T22541] should_fail+0x3c1/0x510 [ 1537.506985][T22541] should_fail_usercopy+0x1a/0x20 [ 1537.511993][T22541] _copy_from_user+0x20/0xd0 [ 1537.516566][T22541] __copy_msghdr_from_user+0xc9/0x630 [ 1537.521923][T22541] ? stack_trace_snprint+0xf0/0xf0 [ 1537.527022][T22541] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 1537.532292][T22541] ? kasan_set_track+0x5b/0x70 [ 1537.537039][T22541] ? kasan_set_track+0x4a/0x70 [ 1537.541790][T22541] ? kasan_set_free_info+0x23/0x40 [ 1537.546889][T22541] ? ____kasan_slab_free+0x125/0x160 [ 1537.552157][T22541] ? __kasan_slab_free+0x11/0x20 [ 1537.557083][T22541] ___sys_sendmsg+0x19a/0x2e0 [ 1537.561744][T22541] ? __sys_sendmsg+0x280/0x280 [ 1537.566493][T22541] ? kstrtouint_from_user+0x1c4/0x220 [ 1537.571854][T22541] __sys_sendmmsg+0x2ab/0x4c0 [ 1537.576521][T22541] ? __ia32_sys_sendmsg+0x2c0/0x2c0 [ 1537.581708][T22541] ? __ia32_sys_read+0x90/0x90 [ 1537.586464][T22541] ? debug_smp_processor_id+0x17/0x20 [ 1537.591817][T22541] __x64_sys_sendmmsg+0xa0/0xb0 [ 1537.596653][T22541] do_syscall_64+0x31/0x40 [ 1537.601054][T22541] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1537.606930][T22541] RIP: 0033:0x7f2b6ca4ae59 [ 1537.611345][T22541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.630949][T22541] RSP: 002b:00007f2b6b463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1537.639366][T22541] RAX: ffffffffffffffda RBX: 00007f2b6ccc4180 RCX: 00007f2b6ca4ae59 [ 1537.647328][T22541] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000005 [ 1537.655288][T22541] RBP: 00007f2b6b463090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.663246][T22541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.671203][T22541] R13: 00007f2b6ccc4218 R14: 00007f2b6ccc4180 R15: 00007ffdc0fc8e58 [ 1537.850377][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 1537.850389][ T24] audit: type=1400 audit(1781142256.322:2087): avc: denied { read } for pid=22548 comm="syz.4.6954" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1537.881293][ T24] audit: type=1400 audit(1781142256.350:2088): avc: denied { open } for pid=22548 comm="syz.4.6954" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1537.906981][ T24] audit: type=1400 audit(1781142256.379:2089): avc: denied { ioctl } for pid=22548 comm="syz.4.6954" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1538.251979][T22549] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1538.258638][T22549] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1538.341446][T22549] F2FS-fs (loop4): invalid crc value [ 1538.355265][T22549] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1538.389025][T22549] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1538.396341][T22549] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1538.426277][ T24] audit: type=1400 audit(1781142256.856:2090): avc: denied { mounton } for pid=22548 comm="syz.4.6954" path="/180/bus" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1538.427456][T22549] incfs: Options parsing error. -22 [ 1538.454368][T22549] incfs: mount failed -22 [ 1538.460799][ T9379] device bridge_slave_0 left promiscuous mode [ 1538.470625][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.479866][ T9379] device veth0_vlan left promiscuous mode [ 1538.553332][T22567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1538.560777][T19413] attempt to access beyond end of device [ 1538.560777][T19413] loop4: rw=2049, want=45104, limit=40427 [ 1538.615619][T17351] usb 1-1: USB disconnect, device number 41 [ 1538.622893][ T9682] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1539.071222][ T9682] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1539.080632][ T9682] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1539.091154][ T9682] usb 3-1: config 0 has no interface number 0 [ 1539.125901][T22584] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1539.136683][T22584] EXT4-fs error (device loop4): __ext4_iget:5034: inode #8: block 1803188595: comm syz.4.6964: invalid block [ 1539.151642][T22584] EXT4-fs (loop4): no journal found [ 1539.157478][T22584] EXT4-fs (loop4): can't get journal size [ 1539.174449][T22584] EXT4-fs error (device loop4): __ext4_iget:5034: inode #8: block 1803188595: comm syz.4.6964: invalid block [ 1539.186431][T22584] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1539.193955][T22584] EXT4-fs (loop4): mount failed [ 1539.285610][ T9682] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1539.294845][ T9682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.304097][ T9682] usb 3-1: Product: syz [ 1539.309124][ T9682] usb 3-1: Manufacturer: syz [ 1539.313810][ T9682] usb 3-1: SerialNumber: syz [ 1539.318492][ T24] audit: type=1400 audit(1781142257.689:2091): avc: denied { shutdown } for pid=22592 comm="syz.5.6967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1539.342904][ T9682] usb 3-1: config 0 descriptor?? [ 1539.520968][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6971'. [ 1539.658059][ T24] audit: type=1400 audit(1781142258.007:2092): avc: denied { ioctl } for pid=22606 comm="syz.0.6973" path="socket:[88231]" dev="sockfs" ino=88231 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1539.691766][T17352] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1539.714728][ T24] audit: type=1400 audit(1781142258.072:2093): avc: denied { write } for pid=22606 comm="syz.0.6973" path="socket:[88230]" dev="sockfs" ino=88230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1539.947880][T17352] usb 6-1: Using ep0 maxpacket: 32 [ 1540.118903][T17352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1540.148087][T22613] xt_hashlimit: size too large, truncated to 1048576 [ 1540.204396][T17352] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1540.212737][T17352] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.236388][T17352] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1540.245424][T17352] usb 6-1: config 128 has no interface number 0 [ 1540.251734][T17352] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1540.262956][T17352] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1540.273143][T17352] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1540.396717][ T9682] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1540.407388][ T9682] uvcvideo: No valid video chain found. [ 1540.413991][ T9682] usb 3-1: USB disconnect, device number 34 [ 1540.450196][T17352] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1540.461303][T17352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.470140][T17352] usb 6-1: Product: syz [ 1540.475694][T17352] usb 6-1: Manufacturer: syz [ 1540.480995][T17352] usb 6-1: SerialNumber: syz [ 1540.717284][T17351] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1540.786439][T22624] F2FS-fs (loop4): invalid crc value [ 1540.822783][ T9682] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1540.849147][T22624] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1540.911840][T22624] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1541.273004][ T9682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1541.454697][ T9682] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1541.463866][ T9682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.471976][ T9682] usb 3-1: Product: syz [ 1541.476572][ T9682] usb 3-1: Manufacturer: syz [ 1541.481346][ T9682] usb 3-1: SerialNumber: syz [ 1541.606912][T17352] usb 6-1: USB disconnect, device number 25 [ 1541.646994][T17351] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1541.903425][T17351] usb 5-1: Using ep0 maxpacket: 16 [ 1541.909647][T22659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6990'. [ 1542.032298][ T9682] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1542.063868][T17351] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1542.072006][T17351] usb 5-1: config 0 has no interface number 0 [ 1542.078318][T17351] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1542.088404][T17351] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1542.282516][T17351] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1542.291941][T17351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.300375][T17351] usb 5-1: Product: syz [ 1542.304572][T17351] usb 5-1: Manufacturer: syz [ 1542.309164][T17351] usb 5-1: SerialNumber: syz [ 1542.314581][T17351] usb 5-1: config 0 descriptor?? [ 1542.331134][T22637] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1542.338328][T22637] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1542.352238][ T9682] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1542.377810][ T24] audit: type=1400 audit(1781142260.562:2094): avc: denied { read write } for pid=22621 comm="syz.2.6979" name="lp0" dev="devtmpfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1542.401776][ T24] audit: type=1400 audit(1781142260.562:2095): avc: denied { open } for pid=22621 comm="syz.2.6979" path="/dev/usb/lp0" dev="devtmpfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1542.567644][T22637] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1542.574699][T22637] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1542.707162][T22665] cgroup: subsys name conflicts with all [ 1542.737173][ T9682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.770409][ T9682] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1542.818146][ T9682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.833156][T17351] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1542.847255][ T9682] usb 6-1: config 0 descriptor?? [ 1543.057538][T17351] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1543.067585][T17351] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1543.217885][ T9686] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1543.361276][ T9682] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 1543.379790][ T9682] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0013/input/input16 [ 1543.466368][ T9682] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1543.570497][T17351] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1543.580901][T17351] asix: probe of 5-1:0.34 failed with error -71 [ 1543.588572][T17351] usb 5-1: USB disconnect, device number 22 [ 1543.606679][T17349] usb 3-1: USB disconnect, device number 35 [ 1543.616759][T17349] usblp0: removed [ 1543.627816][ T24] audit: type=1400 audit(1781142261.731:2096): avc: denied { setattr } for pid=22671 comm="syz.2.6994" path="socket:[88376]" dev="sockfs" ino=88376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1543.666848][ T9686] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1543.752360][ T9686] usb 1-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 1543.762655][ T9686] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1543.784221][ T9682] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1544.019363][ T9686] usb 1-1: string descriptor 0 read error: -22 [ 1544.025622][ T9686] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1544.035539][ T9686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.043580][ T9682] usb 8-1: Using ep0 maxpacket: 16 [ 1544.062042][T17349] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1544.233025][ T9682] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1544.241188][ T9682] usb 8-1: config 0 has no interface number 0 [ 1544.247700][ T9682] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1544.257748][ T9682] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1544.298030][T22667] netlink: 'syz.0.6992': attribute type 1 has an invalid length. [ 1544.306247][T22667] netlink: 'syz.0.6992': attribute type 27 has an invalid length. [ 1544.314244][T22667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1544.330247][T22667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.337387][T22667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.404064][ T9686] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1544.414980][ T9686] usb 1-1: USB disconnect, device number 42 [ 1544.436112][ T9682] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1544.445153][ T9682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.453384][ T9682] usb 8-1: Product: syz [ 1544.457585][ T9682] usb 8-1: Manufacturer: syz [ 1544.462177][ T9682] usb 8-1: SerialNumber: syz [ 1544.465105][T17351] usb 6-1: USB disconnect, device number 26 [ 1544.471017][ T9682] usb 8-1: config 0 descriptor?? [ 1544.489505][T22670] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1544.489560][T17349] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1544.496482][T22670] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1544.511551][T17349] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1544.521786][T17349] usb 3-1: config 0 has no interface number 0 [ 1544.629176][T19477] udevd[19477]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1544.703282][T17349] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1544.712337][T17349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.720549][T17349] usb 3-1: Product: syz [ 1544.724740][T17349] usb 3-1: Manufacturer: syz [ 1544.726167][T22670] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1544.729325][T17349] usb 3-1: SerialNumber: syz [ 1544.736631][T22670] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1544.741825][T17349] usb 3-1: config 0 descriptor?? [ 1544.991738][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1545.141384][ T9686] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1545.226851][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1545.236915][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1545.526080][ T9686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1545.537126][ T9686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1545.550618][ T9686] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1545.566444][T22695] binder: 22694:22695 ioctl f504 0 returned -22 [ 1545.574496][T22695] binder: 22694:22695 ioctl 40106e8c 200000005200 returned -22 [ 1545.611860][T17349] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1545.618438][T17349] uvcvideo: No valid video chain found. [ 1545.626469][T17349] usb 3-1: USB disconnect, device number 36 [ 1545.729111][ T9686] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.738240][ T9686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.746361][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1545.756487][ T9686] usb 5-1: Product: syz [ 1545.760624][ T9686] usb 5-1: Manufacturer: syz [ 1545.765314][ T9682] asix: probe of 8-1:0.34 failed with error -71 [ 1545.771750][ T9686] usb 5-1: SerialNumber: syz [ 1545.777662][ T9682] usb 8-1: USB disconnect, device number 13 [ 1545.803949][T22686] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1546.006870][T17349] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1546.040158][T22686] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1546.132187][T22699] udc-core: couldn't find an available UDC or it's busy [ 1546.139235][T22699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1546.156489][ T9681] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1546.306056][T17349] usb 3-1: Using ep0 maxpacket: 16 [ 1546.434399][T17349] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1546.442579][T17349] usb 3-1: config 0 has no interface number 0 [ 1546.449456][T17349] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1546.459837][T17349] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1546.648086][T17349] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1546.657288][T17349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.665351][T17349] usb 3-1: Product: syz [ 1546.669605][T17349] usb 3-1: Manufacturer: syz [ 1546.674197][T17349] usb 3-1: SerialNumber: syz [ 1546.682550][T17349] usb 3-1: config 0 descriptor?? [ 1546.701510][T22697] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1546.708576][T22697] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1546.968692][ T9686] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 1546.980609][T22697] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1546.987606][T22697] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1547.011414][ T9686] cdc_ncm 5-1:1.0: bind() failure [ 1547.017537][ T9686] cdc_ncm 5-1:1.1: bind() failure [ 1547.030060][ T9686] usb 5-1: USB disconnect, device number 23 [ 1547.472847][T17349] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1547.524336][T17349] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1547.539300][T17349] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1547.801382][ T24] audit: type=1326 audit(1781142265.634:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.050608][ T24] audit: type=1326 audit(1781142265.662:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.095023][ T24] audit: type=1326 audit(1781142265.671:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.120521][T17349] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1548.131898][T17349] asix: probe of 3-1:0.34 failed with error -71 [ 1548.139143][ T24] audit: type=1326 audit(1781142265.671:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd78f987aeb code=0x7ffc0000 [ 1548.172717][T17349] usb 3-1: USB disconnect, device number 37 [ 1548.209423][ T24] audit: type=1326 audit(1781142265.671:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78f94868e code=0x7ffc0000 [ 1548.243313][ T24] audit: type=1326 audit(1781142265.671:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.299940][ T24] audit: type=1326 audit(1781142265.671:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.366343][ T24] audit: type=1326 audit(1781142265.671:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.417501][ T24] audit: type=1326 audit(1781142265.671:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22728 comm="syz.4.7013" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1548.475338][ T9681] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1548.824974][T22749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1548.990202][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 1548.990214][ T24] audit: type=1326 audit(1781142266.747:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.098352][ T24] audit: type=1326 audit(1781142266.785:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.219947][ T24] audit: type=1326 audit(1781142266.785:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.411018][ T24] audit: type=1326 audit(1781142266.785:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.479636][T22769] binder: 22768:22769 ioctl c0306201 200000000640 returned -22 [ 1549.501941][ T24] audit: type=1326 audit(1781142266.785:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.534091][T22769] xt_hashlimit: size too large, truncated to 1048576 [ 1549.576023][ T24] audit: type=1326 audit(1781142266.785:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b6ca4aaeb code=0x7ffc0000 [ 1549.640189][ T24] audit: type=1326 audit(1781142266.785:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b6ca0b68e code=0x7ffc0000 [ 1549.714921][ T24] audit: type=1326 audit(1781142266.785:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.768347][ T24] audit: type=1326 audit(1781142266.785:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.781032][T22740] F2FS-fs (loop4): invalid crc value [ 1549.827294][ T24] audit: type=1326 audit(1781142266.785:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22757 comm="syz.5.7024" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1549.887127][T22740] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1550.012835][T22778] fuse: Unknown parameter '0x0000000000000003' [ 1550.085926][T22740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1550.173237][T22735] udc-core: couldn't find an available UDC or it's busy [ 1550.204608][T22735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1550.225952][T22783] fuse: Unknown parameter '0x0000000000000003' [ 1550.560230][T22792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7033'. [ 1550.937278][T17350] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1550.945386][T22796] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1550.963233][T22796] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1551.360616][T17350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.371697][T17350] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1551.380755][T17350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.390050][T17350] usb 8-1: config 0 descriptor?? [ 1551.553737][T22814] exfat: Deprecated parameter 'namecase' [ 1551.558730][T22817] fuse: Unknown parameter '0x0000000000000003' [ 1551.570337][T22814] exfat: Deprecated parameter 'namecase' [ 1551.576784][T22814] exfat: Bad value for 'umask' [ 1551.604169][T22819] xt_hashlimit: size too large, truncated to 1048576 [ 1551.770611][T22824] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7043'. [ 1551.781883][T22824] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7043'. [ 1551.831715][T22832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7046'. [ 1551.854043][T22834] device veth0 entered promiscuous mode [ 1551.859900][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7047'. [ 1551.913961][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7047'. [ 1551.938110][T17350] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1551.947493][T17350] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0014/input/input17 [ 1552.035597][T17350] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1552.700563][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1552.886166][T22857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7055'. [ 1553.038292][T17351] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1553.041629][ T9681] usb 8-1: USB disconnect, device number 14 [ 1553.294811][T17351] usb 3-1: Using ep0 maxpacket: 8 [ 1553.465830][T17351] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1553.497113][T22872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7060'. [ 1553.634153][ T9681] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1553.925292][ T9681] usb 5-1: Using ep0 maxpacket: 16 [ 1554.086002][ T9681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.139372][ T9681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.416575][T17351] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1554.425659][T17351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.433653][T17351] usb 3-1: Product: syz [ 1554.437801][T17351] usb 3-1: Manufacturer: syz [ 1554.442401][T17351] usb 3-1: SerialNumber: syz [ 1554.662366][ T9681] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1554.681581][ T9681] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1554.690696][ T9681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.700204][ T9681] usb 5-1: config 0 descriptor?? [ 1554.780690][T17351] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1554.791430][T17351] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1554.823480][T17351] usb 3-1: USB disconnect, device number 38 [ 1555.143437][ T9682] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1555.197125][T22869] udc-core: couldn't find an available UDC or it's busy [ 1555.204163][T22869] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1555.218349][T22869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1555.241153][ T9681] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1555.248408][ T9681] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1555.256790][ T9681] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1555.267571][ T9681] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1555.275975][ T9681] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1555.284203][ T9681] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1555.305288][ T9681] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input18 [ 1555.390764][ T9681] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1555.466432][T22888] udc-core: couldn't find an available UDC or it's busy [ 1555.478525][T22888] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1555.487548][T17350] usb 5-1: USB disconnect, device number 25 [ 1555.497060][T14753] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1556.009251][T14753] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1556.024616][T14753] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1556.106675][T14753] usb 8-1: config 0 has no interface number 0 [ 1556.308473][T14753] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1556.317625][T14753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.325982][T14753] usb 8-1: Product: syz [ 1556.330219][T14753] usb 8-1: Manufacturer: syz [ 1556.334849][T14753] usb 8-1: SerialNumber: syz [ 1556.340081][T14753] usb 8-1: config 0 descriptor?? [ 1556.345782][T22917] EXT4-fs (loop4): Ignoring removed orlov option [ 1556.362755][T22917] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 1556.917362][ T9682] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1557.304723][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7076'. [ 1557.323500][ T9682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 1557.334891][ T9682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24860, setting to 1024 [ 1557.419637][T14753] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1557.426094][T14753] uvcvideo: No valid video chain found. [ 1557.435105][T14753] usb 8-1: USB disconnect, device number 15 [ 1557.441123][ T9682] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1557.450128][ T9682] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1557.458656][ T9682] usb 1-1: Manufacturer: syz [ 1557.465217][ T9682] usb 1-1: config 0 descriptor?? [ 1557.526966][ T9682] uvcvideo: Found UVC 0.00 device (18ec:3288) [ 1557.533943][ T9682] uvcvideo: No valid video chain found. [ 1557.749336][T17350] usb 1-1: USB disconnect, device number 45 [ 1557.847022][T14753] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1558.114175][T14753] usb 8-1: Using ep0 maxpacket: 32 [ 1558.160307][T22931] fuse: Unknown parameter '0x0000000000000003' [ 1558.242440][T14753] usb 8-1: config 1 has an invalid interface number: 217 but max is 0 [ 1558.243011][T22931] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1558.253957][T14753] usb 8-1: config 1 has no interface number 0 [ 1558.263571][T14753] usb 8-1: config 1 interface 217 has no altsetting 0 [ 1558.264354][T22931] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1558.279460][T22931] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1558.286231][T22931] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1558.301237][T22931] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1558.315994][T22931] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #13: comm syz.4.7078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1558.333987][T22931] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.7078: couldn't read orphan inode 13 (err -117) [ 1558.346105][T22931] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,nobarrier,debug,oldalloc,journal_ioprio=0x0000000000000006,grpid,,errors=continue [ 1558.434831][T14753] usb 8-1: New USB device found, idVendor=056e, idProduct=400b, bcdDevice=fa.aa [ 1558.445168][T14753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.453610][T14753] usb 8-1: Product: syz [ 1558.460197][T14753] usb 8-1: Manufacturer: syz [ 1558.465186][T14753] usb 8-1: SerialNumber: syz [ 1558.659151][ T9686] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1558.694588][T22937] udc-core: couldn't find an available UDC or it's busy [ 1558.701608][T22937] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1558.809109][T14753] usb 8-1: bad CDC descriptors [ 1558.816987][T14753] usb 8-1: USB disconnect, device number 16 [ 1560.202979][T17351] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1561.001153][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 1561.001164][ T24] audit: type=1400 audit(1781142277.986:2123): avc: denied { view } for pid=22969 comm="syz.4.7091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1561.202546][T17351] usb 8-1: Using ep0 maxpacket: 16 [ 1561.341421][T17351] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1561.352089][ T9686] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1561.352097][T17351] usb 8-1: config 0 has no interface number 0 [ 1561.352122][T17351] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1561.607146][T17351] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1561.790239][T17351] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1561.799491][T17351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.808010][T17351] usb 8-1: Product: syz [ 1561.812875][T17351] usb 8-1: Manufacturer: syz [ 1561.817705][T17351] usb 8-1: SerialNumber: syz [ 1561.830978][T17351] usb 8-1: config 0 descriptor?? [ 1561.865078][T22949] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1561.872526][T22949] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1562.101812][T22949] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1562.116898][T22949] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1562.165974][T22968] udc-core: couldn't find an available UDC or it's busy [ 1562.181533][T22968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1562.377998][T17351] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1562.415119][T22995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1562.484753][T17349] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1562.602331][T17351] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1562.617850][T17351] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1562.869551][T17349] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1562.888315][T17349] usb 6-1: config 0 has no interface number 0 [ 1562.903541][T17349] usb 6-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1562.926584][T17349] usb 6-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1562.942497][T17349] usb 6-1: config 0 interface 1 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1562.955789][T17349] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1562.962456][T17349] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1562.971849][T17349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.983742][T17349] usb 6-1: config 0 descriptor?? [ 1563.030367][T17349] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 1563.147337][T17351] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1563.157529][T17351] asix: probe of 8-1:0.34 failed with error -71 [ 1563.165807][T17351] usb 8-1: USB disconnect, device number 17 [ 1563.606855][T17349] usbhid 6-1:0.1: can't add hid device: -71 [ 1563.612907][T17349] usbhid: probe of 6-1:0.1 failed with error -71 [ 1563.620868][T17349] usb 6-1: USB disconnect, device number 27 [ 1564.269370][T17351] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1564.493742][ T9686] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1564.782277][T17349] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1564.828280][T23025] udc-core: couldn't find an available UDC or it's busy [ 1564.846257][T23025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1564.921282][ T9686] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1564.963989][ T9686] usb 1-1: not running at top speed; connect to a high speed hub [ 1564.996035][ T9680] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1565.101778][ T9686] usb 1-1: config 2 has an invalid interface number: 212 but max is 1 [ 1565.117170][ T9686] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 1565.126448][ T9686] usb 1-1: config 2 has no interface number 0 [ 1565.165467][ T9686] usb 1-1: config 2 has no interface number 1 [ 1565.176214][ T9686] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1565.187741][ T9686] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1565.198885][ T9686] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1565.210850][ T9686] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1565.222285][ T9686] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1565.237617][ T9686] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1565.251519][ T9686] usb 1-1: config 2 interface 212 has no altsetting 0 [ 1565.445353][ T9680] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1565.462846][ T9680] usb 8-1: config 0 has no interface number 0 [ 1565.497954][ T9680] usb 8-1: too many endpoints for config 0 interface 1 altsetting 2: 32, using maximum allowed: 30 [ 1565.520066][ T9680] usb 8-1: config 0 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1565.533368][ T9686] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1565.542603][ T9686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.550875][ T9686] usb 1-1: Product: syz [ 1565.555462][ T9680] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1565.562533][ T9686] usb 1-1: Manufacturer: syz [ 1565.567334][ T9680] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1565.576474][ T9686] usb 1-1: SerialNumber: syz [ 1565.581435][ T9680] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.590420][ T9680] usb 8-1: config 0 descriptor?? [ 1565.610722][T23036] F2FS-fs (loop4): invalid crc value [ 1565.626093][T23036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1565.661667][T23036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1565.680023][ T5] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1565.703668][T23035] udc-core: couldn't find an available UDC or it's busy [ 1565.710734][T23035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1565.893948][T23040] udc-core: couldn't find an available UDC or it's busy [ 1565.901000][T23040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1566.000572][ T9680] usb 8-1: string descriptor 0 read error: -71 [ 1566.271255][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1566.282490][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1566.296080][ T5] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1566.310549][ T9680] usb 8-1: Cannot read MAC address [ 1566.316889][ T9680] MOSCHIP usb-ethernet driver: probe of 8-1:0.1 failed with error -71 [ 1566.326552][ T9680] usb 8-1: USB disconnect, device number 18 [ 1566.344065][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7120'. [ 1566.358014][T23063] IPv6: sit2: Disabled Multicast RS [ 1566.470899][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1566.480028][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.488067][ T5] usb 6-1: Product: syz [ 1566.492546][ T5] usb 6-1: Manufacturer: syz [ 1566.497393][ T5] usb 6-1: SerialNumber: syz [ 1566.524139][T23047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1566.771082][T23047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1567.389675][T17349] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1567.408339][T23079] fuse: Unknown parameter 'fd0x0000000000000003' [ 1567.421821][T17352] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1567.486435][T23047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1567.529793][T23074] udc-core: couldn't find an available UDC or it's busy [ 1567.537725][T23074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1567.615242][ T9686] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input19 [ 1567.635650][ T9686] usb 1-1: USB disconnect, device number 48 [ 1567.763322][T23088] overlayfs: failed to resolve './bus': -2 [ 1567.943559][ T5] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1567.950263][ T5] cdc_ncm 6-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 1567.957963][ T5] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1568.073664][T17349] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1568.084023][T17349] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1568.104175][T17349] usb 5-1: config 0 has no interface number 0 [ 1568.204684][ T5] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 1568.223685][ T24] audit: type=1400 audit(1781142284.752:2124): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1568.261423][ T24] audit: type=1400 audit(1781142284.752:2125): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.296857][ T24] audit: type=1400 audit(1781142284.752:2126): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=14294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1568.318977][T17349] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1568.329731][T17349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.338010][T17349] usb 5-1: Product: syz [ 1568.342698][T17349] usb 5-1: Manufacturer: syz [ 1568.347363][T17349] usb 5-1: SerialNumber: syz [ 1568.352258][ T24] audit: type=1400 audit(1781142284.752:2127): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=14294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1568.377398][ T24] audit: type=1400 audit(1781142284.752:2128): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=14294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1568.400957][T17349] usb 5-1: config 0 descriptor?? [ 1568.407098][ T24] audit: type=1400 audit(1781142284.808:2129): avc: denied { read } for pid=23098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.438834][ T24] audit: type=1400 audit(1781142284.808:2130): avc: denied { open } for pid=23098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.443659][ T9686] usb 6-1: USB disconnect, device number 28 [ 1568.469490][ T24] audit: type=1400 audit(1781142284.808:2131): avc: denied { getattr } for pid=23098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.493419][ T9686] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 1568.547608][ T24] audit: type=1400 audit(1781142284.977:2132): avc: denied { write } for pid=23097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.607934][ T24] audit: type=1400 audit(1781142284.977:2133): avc: denied { add_name } for pid=23097 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.382324][T23138] EXT4-fs (loop4): Ignoring removed bh option [ 1569.388628][T17349] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1569.396197][T17349] uvcvideo: No valid video chain found. [ 1569.414055][T17349] usb 5-1: USB disconnect, device number 27 [ 1569.424615][T23138] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 1569.443288][T23138] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1569.623097][T17352] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1569.712408][T23149] netlink: 'syz.7.7140': attribute type 6 has an invalid length. [ 1569.741088][T23142] cgroup: subsys name conflicts with all [ 1570.264191][T17352] usb 6-1: Using ep0 maxpacket: 16 [ 1570.392477][T17352] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1570.400595][T17352] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.410940][T17352] usb 6-1: config 0 has no interface number 0 [ 1570.417196][T17352] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1570.443045][T17352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.467402][T17352] usb 6-1: config 0 descriptor?? [ 1570.510673][T17352] uvcvideo: Found UVC 0.00 device (0bd3:0555) [ 1570.517645][T17352] uvcvideo: No valid video chain found. [ 1570.753295][ T5] usb 6-1: USB disconnect, device number 29 [ 1570.926784][T17352] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1570.967928][T23169] cgroup: subsys name conflicts with all [ 1571.076346][T17349] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1571.322192][T17352] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1571.331292][T17352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.340154][T17352] usb 5-1: config 0 descriptor?? [ 1571.525242][T17349] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1571.621528][T17349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.631634][T17349] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1571.813739][T17349] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1571.822814][T17349] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=0 [ 1571.831017][T17349] usb 1-1: Product: syz [ 1571.835297][T17349] usb 1-1: Manufacturer: syz [ 1572.145332][T17349] usb 1-1: selecting invalid altsetting 1 [ 1572.151455][T17349] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1572.167005][T17349] usb 1-1: USB disconnect, device number 49 [ 1572.782561][T15218] Bluetooth: hci0: Frame reassembly failed (-84) [ 1572.807583][T17352] usb 5-1: Cannot set autoneg [ 1572.812621][T17352] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1573.048734][T17352] usb 5-1: USB disconnect, device number 28 [ 1573.662411][T17352] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1573.726995][T23224] F2FS-fs (loop4): invalid crc value [ 1573.733810][T23224] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1573.835782][T23224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1573.854726][T14753] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1574.282873][T14753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.293926][T14753] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1574.302967][T14753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.315788][T14753] usb 3-1: config 0 descriptor?? [ 1574.881106][T14753] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 1574.891159][T14753] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0016/input/input20 [ 1574.975671][T23249] device erspan0 entered promiscuous mode [ 1574.981533][T23249] device macsec1 entered promiscuous mode [ 1574.990592][T23249] device erspan0 left promiscuous mode [ 1575.024773][T14753] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1575.086209][T12822] Bluetooth: hci0: command 0x1003 tx timeout [ 1575.092397][T23209] Bluetooth: hci0: sending frame failed (-49) [ 1575.117076][T14753] usb 3-1: USB disconnect, device number 40 [ 1575.213114][T23252] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1575.234961][T23252] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue [ 1575.249217][T23252] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.441654][T23257] F2FS-fs (loop4): invalid crc value [ 1575.448447][T23257] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1575.471678][T23257] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1575.901850][ T24] kauditd_printk_skb: 94 callbacks suppressed [ 1575.901863][ T24] audit: type=1326 audit(1781142291.930:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1575.933736][ T24] audit: type=1326 audit(1781142291.939:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1575.959004][ T24] audit: type=1326 audit(1781142291.958:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1575.989245][ T24] audit: type=1326 audit(1781142291.958:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1576.018172][ T24] audit: type=1326 audit(1781142291.958:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1576.045980][ T24] audit: type=1326 audit(1781142291.958:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1576.157068][ T24] audit: type=1326 audit(1781142291.958:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1791aa68e code=0x7ffc0000 [ 1576.182725][ T24] audit: type=1326 audit(1781142291.958:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23278 comm="syz.2.7179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1791e9e59 code=0x7ffc0000 [ 1576.367719][T19413] attempt to access beyond end of device [ 1576.367719][T19413] loop4: rw=2049, want=45104, limit=40427 [ 1576.697599][T23290] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1576.715545][T23290] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1577.000218][T23296] cgroup: subsys name conflicts with all [ 1577.284952][T14753] Bluetooth: hci0: command 0x1001 tx timeout [ 1577.291589][T23209] Bluetooth: hci0: sending frame failed (-49) [ 1578.240714][T23306] FAT-fs (loop4): Directory bread(block 64) failed [ 1578.247410][T23306] FAT-fs (loop4): Directory bread(block 65) failed [ 1578.254137][T23306] FAT-fs (loop4): Directory bread(block 66) failed [ 1578.261031][T23306] FAT-fs (loop4): Directory bread(block 67) failed [ 1578.267775][T23306] FAT-fs (loop4): Directory bread(block 68) failed [ 1578.274682][T23306] FAT-fs (loop4): Directory bread(block 69) failed [ 1578.281530][T23306] FAT-fs (loop4): Directory bread(block 70) failed [ 1578.288185][T23306] FAT-fs (loop4): Directory bread(block 71) failed [ 1578.295175][T23306] FAT-fs (loop4): Directory bread(block 72) failed [ 1578.302010][T23306] FAT-fs (loop4): Directory bread(block 73) failed [ 1578.338357][ T24] audit: type=1400 audit(1781142294.213:2236): avc: denied { mounton } for pid=23300 comm="syz.4.7185" path="/226/bus/file0" dev="loop4" ino=1049433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1578.338393][T23306] cgroup: subsys name conflicts with all [ 1578.775922][T23313] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7188'. [ 1578.849692][ T24] audit: type=1326 audit(1781142294.690:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23314 comm="syz.5.7190" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1579.069513][T17352] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1579.114787][T23316] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(512) [ 1579.123342][T23316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1579.131591][T23316] F2FS-fs (loop4): Unrecognized mount option "¯$Œ6.£z#compress_cache" or missing value [ 1579.176382][T12822] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1579.347347][T17352] usb 8-1: Using ep0 maxpacket: 32 [ 1579.507641][ T9686] Bluetooth: hci0: command 0x1009 tx timeout [ 1579.561161][T12822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1579.570151][T12822] usb 6-1: config 0 has no interface number 0 [ 1579.576454][T12822] usb 6-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1579.582432][T14753] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1579.587506][T12822] usb 6-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.604846][T12822] usb 6-1: config 0 interface 1 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1579.617618][T12822] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1579.624219][T12822] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1579.633372][T12822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.642166][T12822] usb 6-1: config 0 descriptor?? [ 1579.647198][T17352] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1579.656206][T17352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.664288][T17352] usb 8-1: Product: syz [ 1579.668460][T17352] usb 8-1: Manufacturer: syz [ 1579.673029][T17352] usb 8-1: SerialNumber: syz [ 1579.700483][T12822] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 1580.009968][T14753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.020941][T14753] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1580.029940][T14753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.038786][T14753] usb 5-1: config 0 descriptor?? [ 1580.095404][T17352] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1580.119361][T17352] usb 8-1: USB disconnect, device number 20 [ 1580.198559][T23322] fuse: Unknown parameter 'fd0x0000000000000003' [ 1580.277069][T12822] usbhid 6-1:0.1: can't add hid device: -71 [ 1580.283188][T12822] usbhid: probe of 6-1:0.1 failed with error -71 [ 1580.291678][T12822] usb 6-1: USB disconnect, device number 30 [ 1580.341938][T19483] udevd[19483]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1581.505952][ T9682] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1582.103944][T23353] cgroup: subsys name conflicts with all [ 1582.116526][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 1582.116536][ T24] audit: type=1326 audit(1781142297.750:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1582.148706][T14753] usbhid 5-1:0.0: can't add hid device: -71 [ 1582.161295][T14753] usbhid: probe of 5-1:0.0 failed with error -71 [ 1582.174228][ T24] audit: type=1326 audit(1781142297.750:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1582.215656][ T24] audit: type=1326 audit(1781142297.750:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1582.224450][T14753] usb 5-1: USB disconnect, device number 30 [ 1582.272908][ T24] audit: type=1326 audit(1781142297.750:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1582.298107][ T24] audit: type=1326 audit(1781142297.750:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1582.396283][ T24] audit: type=1326 audit(1781142297.750:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd78f94868e code=0x7ffc0000 [ 1582.515292][ T24] audit: type=1326 audit(1781142297.750:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23351 comm="syz.4.7201" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1583.301196][T17352] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1583.899674][T17352] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1583.916719][T17352] usb 6-1: config 0 has no interface number 0 [ 1583.927366][T17352] usb 6-1: too many endpoints for config 0 interface 1 altsetting 2: 32, using maximum allowed: 30 [ 1583.944719][T17352] usb 6-1: config 0 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1583.959412][T17352] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1583.967789][T17352] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1583.978025][T17352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.991093][T17352] usb 6-1: config 0 descriptor?? [ 1584.328127][T23373] udc-core: couldn't find an available UDC or it's busy [ 1584.335523][T23373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1584.455363][T17352] usb 6-1: string descriptor 0 read error: -71 [ 1584.572859][T17352] usb 6-1: Cannot read MAC address [ 1584.578325][T17352] MOSCHIP usb-ethernet driver: probe of 6-1:0.1 failed with error -71 [ 1584.589981][T17352] usb 6-1: USB disconnect, device number 31 [ 1585.456593][ T307] Bluetooth: hci0: Frame reassembly failed (-84) [ 1585.470452][T17352] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1585.545344][ T9681] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1585.812425][ T9681] usb 6-1: Using ep0 maxpacket: 16 [ 1585.876608][T17352] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1585.953553][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1585.962885][T23415] netlink: 15 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1585.972756][ T9681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.983669][ T9681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.993416][ T9681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1586.006460][ T9681] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1586.015822][ T9681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.040445][ T9681] usb 6-1: config 0 descriptor?? [ 1586.045476][T23416] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1586.047594][T17352] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1586.054508][T23416] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1586.074328][T17352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.093258][T17352] usb 5-1: Product: syz [ 1586.100916][T17352] usb 5-1: Manufacturer: syz [ 1586.111601][T17352] usb 5-1: SerialNumber: syz [ 1586.374106][T23420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7222'. [ 1586.539411][T23408] udc-core: couldn't find an available UDC or it's busy [ 1586.546382][T23408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1586.555658][T23408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7218'. [ 1586.582879][ T9681] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1586.590157][ T9681] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1586.597382][ T9681] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1586.604621][ T9681] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1586.611812][ T9681] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1586.619043][ T9681] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1586.628629][ T9681] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input21 [ 1586.657686][T17352] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1586.711115][ T9681] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1586.809456][ T9681] usb 6-1: USB disconnect, device number 32 [ 1587.637092][ T9682] Bluetooth: hci0: command 0x1003 tx timeout [ 1587.645635][T23209] Bluetooth: hci0: sending frame failed (-49) [ 1587.896209][T12822] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1587.917598][T17349] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1588.355736][T17349] usb 6-1: Using ep0 maxpacket: 16 [ 1588.390782][ T9682] usb 5-1: USB disconnect, device number 31 [ 1588.397650][ T9682] usblp0: removed [ 1588.484134][T12822] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1588.492148][T12822] usb 8-1: config 0 has no interface number 0 [ 1588.498338][T17349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.509248][T12822] usb 8-1: too many endpoints for config 0 interface 1 altsetting 2: 32, using maximum allowed: 30 [ 1588.519969][T17349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.529761][T12822] usb 8-1: config 0 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1588.542718][T17349] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1588.555513][T12822] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1588.562157][T17349] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1588.571226][T12822] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1588.580272][T17349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.588671][T12822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.596996][T17349] usb 6-1: config 0 descriptor?? [ 1588.602593][T12822] usb 8-1: config 0 descriptor?? [ 1588.804492][ T9682] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1588.890275][T23431] udc-core: couldn't find an available UDC or it's busy [ 1588.897305][T23431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1588.996921][T12822] usb 8-1: string descriptor 0 read error: -71 [ 1589.084001][T23433] udc-core: couldn't find an available UDC or it's busy [ 1589.091379][T23433] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1589.103783][T12822] usb 8-1: Cannot read MAC address [ 1589.104878][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7226'. [ 1589.109020][T12822] MOSCHIP usb-ethernet driver: probe of 8-1:0.1 failed with error -71 [ 1589.127300][T17349] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1589.134536][T17349] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1589.142041][T17349] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1589.151092][T17349] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1589.158596][T12822] usb 8-1: USB disconnect, device number 21 [ 1589.165715][T17349] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1589.175821][T17349] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1589.187713][T17349] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0018/input/input22 [ 1589.221332][ T9682] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1589.230592][ T9682] usb 5-1: config 0 has no interface number 0 [ 1589.238792][ T9682] usb 5-1: too many endpoints for config 0 interface 1 altsetting 2: 32, using maximum allowed: 30 [ 1589.250893][ T9682] usb 5-1: config 0 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1589.264195][ T9682] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1589.271527][ T9682] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1589.277301][T17349] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1589.285636][ T9682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.308803][ T9682] usb 5-1: config 0 descriptor?? [ 1589.344481][T17349] usb 6-1: USB disconnect, device number 33 [ 1589.616878][T23439] udc-core: couldn't find an available UDC or it's busy [ 1589.623945][T23439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1589.723528][ T9682] usb 5-1: string descriptor 0 read error: -71 [ 1589.830392][ T9682] usb 5-1: Cannot read MAC address [ 1589.835619][ T9682] MOSCHIP usb-ethernet driver: probe of 5-1:0.1 failed with error -71 [ 1589.864208][ T9682] usb 5-1: USB disconnect, device number 32 [ 1589.870975][ T9680] Bluetooth: hci0: command 0x1001 tx timeout [ 1589.877620][T23209] Bluetooth: hci0: sending frame failed (-49) [ 1589.925942][T14753] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1590.492922][T14753] usb 8-1: Using ep0 maxpacket: 16 [ 1590.621712][T14753] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.633050][T14753] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.643124][T14753] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1590.655942][T14753] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1590.664972][T14753] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.673493][T14753] usb 8-1: config 0 descriptor?? [ 1591.305039][ T9682] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1591.380240][T23452] udc-core: couldn't find an available UDC or it's busy [ 1591.387261][T23452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1591.395845][T23452] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7232'. [ 1591.413032][T14753] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1591.420337][T14753] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1591.427610][T14753] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1591.435093][T14753] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1591.442328][T14753] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1591.449588][T14753] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1591.459379][T14753] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0019/input/input23 [ 1591.541323][T14753] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1591.563293][ T9682] usb 1-1: Using ep0 maxpacket: 16 [ 1591.630376][T14753] usb 8-1: USB disconnect, device number 22 [ 1591.647356][T23478] udc-core: couldn't find an available UDC or it's busy [ 1591.654381][T23478] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1591.689840][ T9682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.700959][ T9682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.710670][ T9682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1591.723527][ T9682] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1591.732575][ T9682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.741138][ T9682] usb 1-1: config 0 descriptor?? [ 1591.808388][T23480] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1591.826271][T23480] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.074434][ T9681] Bluetooth: hci0: command 0x1009 tx timeout [ 1592.235250][T23473] udc-core: couldn't find an available UDC or it's busy [ 1592.244739][T23473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1592.268806][T23473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7238'. [ 1592.300571][ T9682] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1592.307803][ T9682] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1592.315500][ T9682] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1592.322824][ T9682] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1592.330514][ T9682] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1592.337828][ T9682] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1592.350704][ T9682] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input24 [ 1592.469326][ T9682] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1592.564347][ T9681] usb 1-1: USB disconnect, device number 50 [ 1592.843842][ T9682] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1592.982808][T14753] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1593.260647][T14753] usb 5-1: Using ep0 maxpacket: 16 [ 1593.350669][ T9682] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1593.369552][ T9682] usb 8-1: config 0 has no interface number 0 [ 1593.408462][ T9682] usb 8-1: too many endpoints for config 0 interface 1 altsetting 2: 32, using maximum allowed: 30 [ 1593.421155][T14753] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1593.471843][T14753] usb 5-1: config 0 has no interface number 0 [ 1593.478278][T14753] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1593.488542][ T9682] usb 8-1: config 0 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1593.501801][T14753] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1593.511897][ T9682] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1593.518869][ T9682] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1593.528098][ T9682] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.540844][ T9682] usb 8-1: config 0 descriptor?? [ 1593.688093][T14753] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1593.697232][T14753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.705665][T14753] usb 5-1: Product: syz [ 1593.710042][T14753] usb 5-1: Manufacturer: syz [ 1593.714704][T14753] usb 5-1: SerialNumber: syz [ 1593.724249][T14753] usb 5-1: config 0 descriptor?? [ 1593.741535][T23504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1593.748616][T23504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1593.837810][T23502] udc-core: couldn't find an available UDC or it's busy [ 1593.844867][T23502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1593.965893][ T9682] usb 8-1: string descriptor 0 read error: -71 [ 1593.987806][T23504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1593.994801][T23504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1594.095554][ T9682] usb 8-1: Cannot read MAC address [ 1594.101031][ T9682] MOSCHIP usb-ethernet driver: probe of 8-1:0.1 failed with error -71 [ 1594.110878][ T9682] usb 8-1: USB disconnect, device number 23 [ 1594.372135][T14753] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1594.607242][T14753] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1594.651599][T14753] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1595.397919][T14753] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1595.408262][T14753] asix: probe of 5-1:0.34 failed with error -71 [ 1595.415887][T14753] usb 5-1: USB disconnect, device number 33 [ 1595.440582][ T9686] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1595.472605][ T9682] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1595.707705][ T9686] usb 6-1: Using ep0 maxpacket: 16 [ 1595.739759][ T9682] usb 8-1: Using ep0 maxpacket: 16 [ 1595.836007][ T9686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.846956][ T9686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.856779][ T9686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1595.869630][ T9682] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 1595.877726][ T9686] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1595.886790][ T9682] usb 8-1: config 0 has no interface number 0 [ 1595.892914][ T9682] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1595.902934][ T9686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.911226][ T9682] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1595.923498][ T9686] usb 6-1: config 0 descriptor?? [ 1596.092469][ T9682] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1596.101772][ T9682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.116190][ T9682] usb 8-1: Product: syz [ 1596.120622][ T9682] usb 8-1: Manufacturer: syz [ 1596.125357][ T9682] usb 8-1: SerialNumber: syz [ 1596.138852][ T9682] usb 8-1: config 0 descriptor?? [ 1596.167280][T23533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1596.178521][T23533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1596.404106][T23533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1596.411195][T23533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1596.418873][T23528] udc-core: couldn't find an available UDC or it's busy [ 1596.425944][T23528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1596.434989][T23528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7255'. [ 1596.457249][ T9686] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1596.464505][ T9686] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1596.472004][ T9686] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1596.479439][ T9686] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1596.486668][ T9686] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1596.494125][ T9686] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1596.505710][ T9686] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001B/input/input25 [ 1596.585979][ T9686] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1596.675992][T17349] usb 6-1: USB disconnect, device number 34 [ 1596.680178][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1596.904556][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1596.926611][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1597.304999][ T9686] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1597.449765][ T9682] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1597.788142][ T9682] asix: probe of 8-1:0.34 failed with error -71 [ 1597.843147][ T9682] usb 8-1: USB disconnect, device number 24 [ 1598.016003][ T9680] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1598.278190][ T24] audit: type=1326 audit(1781142312.873:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1598.380700][ T24] audit: type=1326 audit(1781142312.901:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1598.416841][ T24] audit: type=1326 audit(1781142312.901:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1598.442750][ T24] audit: type=1326 audit(1781142312.901:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1598.510827][ T24] audit: type=1326 audit(1781142312.901:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1598.585395][ T24] audit: type=1326 audit(1781142312.901:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b6ca0b68e code=0x7ffc0000 [ 1598.646377][ T9683] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1598.665069][ T24] audit: type=1326 audit(1781142312.901:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.5.7267" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ca4ae59 code=0x7ffc0000 [ 1598.812616][T23574] cgroup: subsys name conflicts with all [ 1599.041811][ T9683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1599.223455][ T9683] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1599.234915][ T9683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.243020][ T9683] usb 6-1: Product: syz [ 1599.250770][ T9683] usb 6-1: Manufacturer: syz [ 1599.256771][ T9683] usb 6-1: SerialNumber: syz [ 1599.352849][T23550] F2FS-fs (loop4): invalid crc value [ 1599.412659][T23550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1599.694083][T23550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1599.780226][T23559] udc-core: couldn't find an available UDC or it's busy [ 1599.792862][T23559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1599.823291][ T307] Bluetooth: hci0: Frame reassembly failed (-84) [ 1599.826452][T23550] udc-core: couldn't find an available UDC or it's busy [ 1599.837115][T23550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1599.865296][ T9683] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1600.036593][T23591] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue [ 1600.054514][T23591] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.739867][T23601] cgroup: subsys name conflicts with all [ 1601.210998][ T9680] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1601.467465][ T9680] usb 1-1: Using ep0 maxpacket: 16 [ 1601.681581][ T9680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.780545][ T9680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.894219][ T9680] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1602.018377][ T9680] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1602.106267][ T9680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.138563][ T9680] usb 1-1: config 0 descriptor?? [ 1602.144059][ T9681] Bluetooth: hci0: command 0x1003 tx timeout [ 1602.150741][T23209] Bluetooth: hci0: sending frame failed (-49) [ 1602.161594][ T9686] usb 6-1: USB disconnect, device number 35 [ 1602.372227][ T24] audit: type=1326 audit(1781142316.700:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23614 comm="syz.4.7279" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1602.375626][ T9686] usblp0: removed [ 1602.406211][ T24] audit: type=1326 audit(1781142316.728:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23614 comm="syz.4.7279" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1602.437147][ T24] audit: type=1326 audit(1781142316.728:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23614 comm="syz.4.7279" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78f987e59 code=0x7ffc0000 [ 1602.656441][T23603] udc-core: couldn't find an available UDC or it's busy [ 1602.663431][T23603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1602.703060][T23603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1602.761974][ T9680] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1602.780192][ T9680] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1602.787799][ T9680] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1602.795610][ T9680] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1602.802843][ T9680] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1602.813907][ T9680] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1602.824670][ T9686] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1602.833876][T23622] FAT-fs (loop4): Directory bread(block 64) failed [ 1602.840442][T23622] FAT-fs (loop4): Directory bread(block 65) failed [ 1602.847139][T23622] FAT-fs (loop4): Directory bread(block 66) failed [ 1602.853655][T23622] FAT-fs (loop4): Directory bread(block 67) failed [ 1602.860252][T23622] FAT-fs (loop4): Directory bread(block 68) failed [ 1602.866761][T23622] FAT-fs (loop4): Directory bread(block 69) failed [ 1602.873325][T23622] FAT-fs (loop4): Directory bread(block 70) failed [ 1602.879856][T23622] FAT-fs (loop4): Directory bread(block 71) failed [ 1602.886407][T23622] FAT-fs (loop4): Directory bread(block 72) failed [ 1602.892981][T23622] FAT-fs (loop4): Directory bread(block 73) failed [ 1602.907722][ T9680] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001C/input/input26 [ 1602.920788][T17352] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1602.986015][ T9680] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1603.008683][ T9680] usb 1-1: USB disconnect, device number 52 [ 1603.031589][T23624] fido_id[23624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1603.176132][T23619] udc-core: couldn't find an available UDC or it's busy [ 1603.183274][T23619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1603.284167][ T9686] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1603.455146][ T9686] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1603.464421][ T9686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.472461][ T9686] usb 6-1: Product: syz [ 1603.476645][ T9686] usb 6-1: Manufacturer: syz [ 1603.481229][ T9686] usb 6-1: SerialNumber: syz [ 1603.852069][ T5] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1604.032133][T17352] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1604.107563][ T9686] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1604.277992][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1604.299276][ T9686] Bluetooth: hci0: command 0x1001 tx timeout [ 1604.305342][T23209] Bluetooth: hci0: sending frame failed (-49) [ 1604.438259][T17352] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1604.446804][T17352] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1604.457135][ T5] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1604.466306][T17352] usb 8-1: config 0 has no interface number 0 [ 1604.472402][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.499693][ T5] usb 5-1: Product: syz [ 1604.510405][ T5] usb 5-1: Manufacturer: syz [ 1604.515214][ T5] usb 5-1: SerialNumber: syz [ 1605.546308][T17352] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1605.556327][ T5] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1605.567332][T17352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.578023][T17352] usb 8-1: Product: syz [ 1605.582503][T17352] usb 8-1: Manufacturer: syz [ 1605.587092][T17352] usb 8-1: SerialNumber: syz [ 1605.592108][T17352] usb 8-1: config 0 descriptor?? [ 1605.618026][T12822] usb 6-1: USB disconnect, device number 36 [ 1605.624555][T12822] usblp0: removed [ 1606.212107][T12822] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1606.468555][T12822] usb 6-1: Using ep0 maxpacket: 16 [ 1606.521970][T17349] Bluetooth: hci0: command 0x1009 tx timeout [ 1606.596851][T12822] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1606.605400][T12822] usb 6-1: config 0 has no interface number 0 [ 1606.612031][T12822] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1606.622465][T12822] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1606.660976][T17352] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 1606.667585][T17352] uvcvideo: No valid video chain found. [ 1606.677949][T17352] usb 8-1: USB disconnect, device number 26 [ 1606.780455][T23650] udc-core: couldn't find an available UDC or it's busy [ 1606.787643][T23650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1606.799806][ T5] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1606.810537][T12822] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1606.819582][T12822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.827666][T12822] usb 6-1: Product: syz [ 1606.831848][T12822] usb 6-1: Manufacturer: syz [ 1606.836430][T12822] usb 6-1: SerialNumber: syz [ 1606.845356][T12822] usb 6-1: config 0 descriptor?? [ 1606.863990][T23647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1606.871017][T23647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1606.975046][T17349] usb 5-1: USB disconnect, device number 35 [ 1606.982988][T17349] usblp1: removed [ 1607.056304][T17352] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1607.100497][T23647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1607.107484][T23647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1607.312733][T17352] usb 8-1: Using ep0 maxpacket: 16 [ 1607.387623][T12822] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1607.441060][T17352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.462339][T17352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.472089][T17352] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1607.505110][T17352] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1607.514181][T17352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.527099][T17352] usb 8-1: config 0 descriptor?? [ 1607.633376][T12822] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1607.643699][T12822] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 1608.039828][T23652] udc-core: couldn't find an available UDC or it's busy [ 1608.046811][T23652] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1608.056346][T23652] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7290'. [ 1608.928366][T17352] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1608.935622][T17352] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1608.943052][T12822] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1608.953351][T12822] asix: probe of 6-1:0.34 failed with error -71 [ 1608.968256][T17352] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1608.985408][T12822] usb 6-1: USB disconnect, device number 37 [ 1608.992908][T17352] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1609.006534][T17352] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1609.059336][T17352] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1609.093306][T17352] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.001D/input/input27 [ 1609.173096][T17352] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1609.199184][T17352] usb 8-1: USB disconnect, device number 27 [ 1609.226015][T23669] fido_id[23669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1609.385832][T17349] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1609.599571][T17352] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1609.813873][T17349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1609.825218][T17349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1609.836019][T17349] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1610.332198][T17352] usb 8-1: device descriptor read/64, error -71 [ 1610.465218][T17349] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1610.474335][T17349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.482698][T17349] usb 5-1: Product: syz [ 1610.733531][T17349] usb 5-1: Manufacturer: syz [ 1610.738158][T17349] usb 5-1: SerialNumber: syz [ 1610.764441][T23665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1610.978197][T17352] usb 8-1: device descriptor read/64, error -71 [ 1611.001045][T23665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1611.101003][T23714] netlink: 'syz.2.7315': attribute type 4 has an invalid length. [ 1611.112519][T23714] netlink: 'syz.2.7315': attribute type 4 has an invalid length. [ 1611.266580][T17352] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1611.314469][T23720] xt_hashlimit: size too large, truncated to 1048576 [ 1611.455236][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 1611.455245][ T24] audit: type=1400 audit(1781142325.197:2265): avc: denied { create } for pid=23724 comm="syz.5.7320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1611.501704][T17349] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1611.508880][T17349] cdc_ncm 5-1:1.0: bind() failure [ 1611.518607][T17349] cdc_ncm 5-1:1.1: bind() failure [ 1611.533905][T17349] usb 5-1: USB disconnect, device number 36 [ 1611.555090][T17352] usb 8-1: device descriptor read/64, error -71 [ 1611.597316][T23739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23739 comm=syz.5.7327 [ 1611.624430][T23741] device syzkaller0 entered promiscuous mode [ 1611.632027][T23741] tipc: Started in network mode [ 1611.636927][T23741] tipc: Own node identity ba8672578b0e, cluster identity 4711 [ 1611.644622][T23741] tipc: Enabled bearer , priority 0 [ 1611.652033][T23740] tipc: Resetting bearer [ 1611.660206][T23740] tipc: Disabling bearer [ 1611.768026][T23747] ================================================================== [ 1611.776260][T23747] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x32b0 [ 1611.784394][T23747] Read of size 8 at addr ffff888119a6cfc0 by task syz.5.7331/23747 [ 1611.792252][T23747] [ 1611.794569][T23747] CPU: 0 PID: 23747 Comm: syz.5.7331 Not tainted syzkaller #0 [ 1611.801997][T23747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1611.812040][T23747] Call Trace: [ 1611.815337][T23747] __dump_stack+0x21/0x24 [ 1611.819674][T23747] dump_stack_lvl+0x1a7/0x208 [ 1611.824355][T23747] ? show_regs_print_info+0x18/0x18 [ 1611.829549][T23747] ? thaw_kernel_threads+0x220/0x220 [ 1611.834813][T23747] print_address_description+0x7f/0x2c0 [ 1611.840360][T23747] ? tc_setup_flow_action+0x842/0x32b0 [ 1611.845798][T23747] kasan_report+0xe2/0x130 [ 1611.850250][T23747] ? flow_action_cookie_create+0x28/0x90 [ 1611.855870][T23747] ? tc_setup_flow_action+0x842/0x32b0 [ 1611.861305][T23747] __asan_report_load8_noabort+0x14/0x20 [ 1611.866919][T23747] tc_setup_flow_action+0x842/0x32b0 [ 1611.872180][T23747] ? __kmalloc+0x1a4/0x330 [ 1611.876573][T23747] ? flow_rule_alloc+0x32/0x2c0 [ 1611.881454][T23747] mall_replace_hw_filter+0x2cc/0x8a0 [ 1611.886903][T23747] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 1611.892947][T23747] ? mall_set_parms+0x410/0x410 [ 1611.897776][T23747] ? tcf_exts_destroy+0xb0/0xb0 [ 1611.902611][T23747] ? pcpu_alloc+0xf9b/0x16b0 [ 1611.907177][T23747] ? mall_set_parms+0x19d/0x410 [ 1611.912011][T23747] mall_change+0x546/0x760 [ 1611.916414][T23747] ? __kasan_check_write+0x14/0x20 [ 1611.921503][T23747] ? mall_get+0xa0/0xa0 [ 1611.925636][T23747] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 1611.931523][T23747] ? nla_strcmp+0xf4/0x140 [ 1611.935914][T23747] tc_new_tfilter+0x1452/0x1a90 [ 1611.940742][T23747] ? mall_get+0xa0/0xa0 [ 1611.944873][T23747] ? tcf_gate_entry_destructor+0x20/0x20 [ 1611.950488][T23747] ? security_capable+0x87/0xb0 [ 1611.955386][T23747] ? ns_capable+0x8c/0xf0 [ 1611.959699][T23747] ? netlink_net_capable+0x125/0x160 [ 1611.964961][T23747] ? tcf_gate_entry_destructor+0x20/0x20 [ 1611.970623][T23747] rtnetlink_rcv_msg+0x845/0xcc0 [ 1611.975542][T23747] ? rtnetlink_bind+0x80/0x80 [ 1611.980193][T23747] ? arch_stack_walk+0xee/0x140 [ 1611.985031][T23747] ? stack_trace_save+0xa6/0xf0 [ 1611.989859][T23747] ? stack_trace_snprint+0xf0/0xf0 [ 1611.994956][T23747] ? avc_has_perm+0x168/0x3d0 [ 1611.999615][T23747] ? memcpy+0x56/0x70 [ 1612.003574][T23747] ? avc_has_perm+0x27f/0x3d0 [ 1612.008229][T23747] ? __kasan_slab_alloc+0xbd/0xf0 [ 1612.013230][T23747] ? slab_post_alloc_hook+0x5d/0x2f0 [ 1612.018493][T23747] ? avc_has_perm_noaudit+0x260/0x260 [ 1612.023848][T23747] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 1612.029198][T23747] netlink_rcv_skb+0x1f5/0x440 [ 1612.033942][T23747] ? rtnetlink_bind+0x80/0x80 [ 1612.038593][T23747] ? netlink_ack+0xb70/0xb70 [ 1612.043160][T23747] ? __netlink_lookup+0x387/0x3b0 [ 1612.048160][T23747] rtnetlink_rcv+0x1c/0x20 [ 1612.052551][T23747] netlink_unicast+0x876/0xa40 [ 1612.057294][T23747] netlink_sendmsg+0x89c/0xb50 [ 1612.062036][T23747] ? netlink_getsockopt+0x530/0x530 [ 1612.067212][T23747] ? security_socket_sendmsg+0x82/0xa0 [ 1612.072643][T23747] ? netlink_getsockopt+0x530/0x530 [ 1612.077817][T23747] ____sys_sendmsg+0x5b7/0x8f0 [ 1612.082561][T23747] ? __sys_sendmsg_sock+0x40/0x40 [ 1612.087561][T23747] ? import_iovec+0x7c/0xb0 [ 1612.092041][T23747] ___sys_sendmsg+0x236/0x2e0 [ 1612.096693][T23747] ? __sys_sendmsg+0x280/0x280 [ 1612.101439][T23747] ? alloc_file+0x82/0x540 [ 1612.105838][T23747] ? __fdget+0x1a1/0x230 [ 1612.110055][T23747] __x64_sys_sendmsg+0x1f9/0x2c0 [ 1612.114989][T23747] ? __kasan_check_write+0x14/0x20 [ 1612.120123][T23747] ? ___sys_sendmsg+0x2e0/0x2e0 [ 1612.124962][T23747] ? __kasan_check_read+0x11/0x20 [ 1612.129968][T23747] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 1612.135582][T23747] do_syscall_64+0x31/0x40 [ 1612.139976][T23747] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1612.145843][T23747] RIP: 0033:0x7f2b6ca4ae59 [ 1612.150235][T23747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.169910][T23747] RSP: 002b:00007f2b6b4a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1612.178299][T23747] RAX: ffffffffffffffda RBX: 00007f2b6ccc3fa0 RCX: 00007f2b6ca4ae59 [ 1612.186251][T23747] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1612.194198][T23747] RBP: 00007f2b6cae0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1612.202150][T23747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.210120][T23747] R13: 00007f2b6ccc4038 R14: 00007f2b6ccc3fa0 R15: 00007ffdc0fc8e58 [ 1612.218088][T23747] [ 1612.220396][T23747] Allocated by task 23747: [ 1612.224793][T23747] __kasan_kmalloc+0xda/0x110 [ 1612.229445][T23747] __kmalloc+0x1a4/0x330 [ 1612.233662][T23747] tcf_idr_create+0x5f/0x790 [ 1612.238227][T23747] tcf_idr_create_from_flags+0x61/0x70 [ 1612.243660][T23747] tcf_gact_init+0x2e6/0x560 [ 1612.248225][T23747] tcf_action_init_1+0x443/0x6e0 [ 1612.253144][T23747] tcf_action_init+0x227/0x780 [ 1612.257883][T23747] tcf_exts_validate+0x248/0x570 [ 1612.262795][T23747] mall_set_parms+0x4b/0x410 [ 1612.267358][T23747] mall_change+0x47a/0x760 [ 1612.271750][T23747] tc_new_tfilter+0x1452/0x1a90 [ 1612.276584][T23747] rtnetlink_rcv_msg+0x845/0xcc0 [ 1612.281497][T23747] netlink_rcv_skb+0x1f5/0x440 [ 1612.286237][T23747] rtnetlink_rcv+0x1c/0x20 [ 1612.290629][T23747] netlink_unicast+0x876/0xa40 [ 1612.295364][T23747] netlink_sendmsg+0x89c/0xb50 [ 1612.300102][T23747] ____sys_sendmsg+0x5b7/0x8f0 [ 1612.304838][T23747] ___sys_sendmsg+0x236/0x2e0 [ 1612.309488][T23747] __x64_sys_sendmsg+0x1f9/0x2c0 [ 1612.314398][T23747] do_syscall_64+0x31/0x40 [ 1612.318788][T23747] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1612.324652][T23747] [ 1612.326955][T23747] Last potentially related work creation: [ 1612.332649][T23747] kasan_save_stack+0x3a/0x60 [ 1612.337305][T23747] __kasan_record_aux_stack+0xd2/0x100 [ 1612.342735][T23747] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1612.348518][T23747] call_rcu+0x11a/0x10b0 [ 1612.352735][T23747] neigh_parms_release+0x1c8/0x200 [ 1612.357829][T23747] inetdev_event+0x82e/0x1040 [ 1612.362480][T23747] raw_notifier_call_chain+0x90/0x100 [ 1612.367828][T23747] unregister_netdevice_many+0x1074/0x1a80 [ 1612.373605][T23747] default_device_exit_batch+0x35e/0x3c0 [ 1612.379210][T23747] cleanup_net+0x603/0xb80 [ 1612.383601][T23747] process_one_work+0x6e1/0xba0 [ 1612.388423][T23747] worker_thread+0xa6a/0x13c0 [ 1612.393075][T23747] kthread+0x346/0x3d0 [ 1612.397117][T23747] ret_from_fork+0x1f/0x30 [ 1612.401501][T23747] [ 1612.403803][T23747] Second to last potentially related work creation: [ 1612.410367][T23747] kasan_save_stack+0x3a/0x60 [ 1612.415015][T23747] __kasan_record_aux_stack+0xd2/0x100 [ 1612.420447][T23747] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1612.426226][T23747] kvfree_call_rcu+0x11c/0x650 [ 1612.431040][T23747] fib_rules_unregister+0x2f2/0x380 [ 1612.436247][T23747] fib4_rules_exit+0x3b/0x40 [ 1612.440817][T23747] ip_fib_net_exit+0x307/0x350 [ 1612.445554][T23747] fib_net_exit+0x6c/0x80 [ 1612.449859][T23747] cleanup_net+0x58e/0xb80 [ 1612.454253][T23747] process_one_work+0x6e1/0xba0 [ 1612.459077][T23747] worker_thread+0xa6a/0x13c0 [ 1612.463726][T23747] kthread+0x346/0x3d0 [ 1612.467774][T23747] ret_from_fork+0x1f/0x30 [ 1612.472156][T23747] [ 1612.474464][T23747] The buggy address belongs to the object at ffff888119a6cf00 [ 1612.474464][T23747] which belongs to the cache kmalloc-192 of size 192 [ 1612.488500][T23747] The buggy address is located 0 bytes to the right of [ 1612.488500][T23747] 192-byte region [ffff888119a6cf00, ffff888119a6cfc0) [ 1612.502100][T23747] The buggy address belongs to the page: [ 1612.507721][T23747] page:ffffea0004669b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119a6c [ 1612.517934][T23747] flags: 0x4000000000000200(slab) [ 1612.522939][T23747] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043380 [ 1612.531528][T23747] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1612.540091][T23747] page dumped because: kasan: bad access detected [ 1612.546476][T23747] page_owner tracks the page as allocated [ 1612.552175][T23747] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 95, ts 3848182748, free_ts 0 [ 1612.567087][T23747] prep_new_page+0x179/0x180 [ 1612.571660][T23747] get_page_from_freelist+0x223b/0x23d0 [ 1612.577177][T23747] __alloc_pages_nodemask+0x290/0x620 [ 1612.582522][T23747] new_slab+0x84/0x3f0 [ 1612.586695][T23747] ___slab_alloc+0x2a6/0x450 [ 1612.591283][T23747] __slab_alloc+0x63/0xa0 [ 1612.595600][T23747] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 1612.600953][T23747] kernfs_fop_open+0x343/0xb30 [ 1612.605696][T23747] do_dentry_open+0x793/0x1090 [ 1612.610437][T23747] vfs_open+0x73/0x80 [ 1612.614398][T23747] path_openat+0x280f/0x31c0 [ 1612.618965][T23747] do_filp_open+0x1e2/0x410 [ 1612.623443][T23747] do_sys_openat2+0x19f/0x750 [ 1612.628098][T23747] __x64_sys_openat+0x136/0x160 [ 1612.633060][T23747] do_syscall_64+0x31/0x40 [ 1612.637452][T23747] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1612.643313][T23747] page_owner free stack trace missing [ 1612.648665][T23747] [ 1612.650968][T23747] Memory state around the buggy address: [ 1612.656578][T23747] ffff888119a6ce80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 1612.664615][T23747] ffff888119a6cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1612.672650][T23747] >ffff888119a6cf80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1612.680684][T23747] ^ [ 1612.686811][T23747] ffff888119a6d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1612.694848][T23747] ffff888119a6d080: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb [ 1612.702879][T23747] ================================================================== [ 1612.710916][T23747] Disabling lock debugging due to kernel taint [ 1612.735028][ T24] audit: type=1400 audit(1781142326.404:2266): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1612.739007][T23749] netlink: 'syz.0.7332': attribute type 17 has an invalid length. [ 1612.759200][ T24] audit: type=1400 audit(1781142326.404:2267): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1612.786608][ T24] audit: type=1400 audit(1781142326.404:2268): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1612.792985][T23749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7332'. [ 1612.808872][ T24] audit: type=1400 audit(1781142326.404:2269): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1612.840276][ T24] audit: type=1400 audit(1781142326.404:2270): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1