last executing test programs: 15.416517678s ago: executing program 1 (id=84): syz_usb_connect$uac3(0x5, 0x94, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 12.360007645s ago: executing program 1 (id=106): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x11, 0x3, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x8040400, &(0x7f0000000140)="d2ede275131b6736c8563552e615c6a2444da4dbbf11be02c387656ac9b7c21d7df08a9b0b43971b4e0048fde37df0bb5a9bcc26ca267afa92188b455a3d565f3fb8fe6b0a018192b0e6f2617e9411159852b14f", 0x54, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="f13eb42beb63131bc2260d3122617f4a91d56664bcb7179ff7cf3ee01c56561f5d506dd61a340f5fdb494bfa152dba2291193e27167d16daff86e81424ff2d1f68fe8e6e071ad8796b128234993cb4c94b695c5a03aa09a8") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x3) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x40) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000003c0)={"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"}) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) syz_usb_connect$uac1(0x6, 0xc9, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902b70003010a60930904000000010100000a2401020022000201020924030601040501640a240704060005dd186905240402060904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETNSID={0x3c, 0x5a, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4000094) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.335924813s ago: executing program 1 (id=130): getpid() pipe2$9p(0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f0000000380)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@test_dummy_encryption_v1}, {@discard}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@inlinecrypt}]}, 0x3, 0x439, &(0x7f0000001380)="$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") (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) (rerun: 64) write$P9_RGETLOCK(r4, 0x0, 0x0) (async, rerun: 64) r5 = open(0x0, 0x80202, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000f9ef4c7e71acf96bacf4d89590170dac5132075ad9edbc0edc447725021c53d5e49776239f238", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async, rerun: 32) sendto$unix(r7, 0x0, 0x0, 0xc844, 0x0, 0x0) (async) ftruncate(r5, 0x2007ffc) setreuid(0xee01, 0xee01) socket$nl_route(0x10, 0x3, 0x0) 9.204456796s ago: executing program 1 (id=131): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@mblk_io_submit}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) (async) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, 0x3e, 0x8, 0xffffffff, 0x25dfdbfd, {0x19}, [@generic="c5932840a802fd3d2cd4bff61ea7cde859c360435e2bd6f78de9a348ce58cefea4d36294bc0a310ee95f722235e98b7fa51d00d635aa5fb97687c02dd85410f2ea20e8781250195435beea55ba494f60987c7a897511a5c5c4ce591358e45ae5d6da89edc1680b76a955a7f84a3cdd0b0e2877c847198c4d3c7cba9e5ce144a37fcbea0ea584cc9a2314d2790d36866d078ff340e6319e1c7618e4a24ae512eb683d3ed7ef6ae4479c8b197992896509d2bb824c6f67d05475c26c9b7c91437191fb50e81a0cc0cf7d935ecec85e7621ab1a9ea8693c37748270ffb5d629893b0f7bb423d3c44ce54548ef72e842fcb49744356a16", @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@loopback}, @generic="5f1e3f70950fda6161a4a0f5bfab2d71118d67dca96ed02bcc5ec2bdb772a4b8adcea8646ba4fa11c7c425ee59534809f9c9dee921c22bf2717e9255c3eabbd68cb3cb4fc7915b6b433a3705c96adf144f9bcc3d9c56317a6dfd7f16d653d5327f8d257855d70c1bcf54b316ef64bd0326de20c56c066d803f4a5cf71b1615a7c8cccc95b905c8a8eace6029b16a"]}, 0x1a8}, 0x1, 0x0, 0x0, 0x60000}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 8.951577142s ago: executing program 1 (id=134): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f0000000140)={[{@nobh}, {@test_dummy_encryption_v1}, {@orlov}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@noinit_itable}, {@nombcache}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@oldalloc}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f0000000140)={[{@nobh}, {@test_dummy_encryption_v1}, {@orlov}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@noinit_itable}, {@nombcache}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@oldalloc}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000003c0), 0xfc, 0x3f7, &(0x7f0000003080)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') (async) syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') setresuid(0x0, 0xee00, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 8.882773624s ago: executing program 1 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000040)=0x46c, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r4, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) sendmmsg$inet(r6, &(0x7f0000002240)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0xbb31, 0x3, 0x7, 0x1, 0x1, 0xffffffff, 0x2, 0x4}, &(0x7f0000000040)={0x5, 0x3, 0x9, 0xa7, 0x8, 0x8, 0x1, 0x3}, &(0x7f00000000c0)={0xd, 0xe1a3, 0xd, 0x9, 0x3ff, 0x0, 0x3ff, 0x3b}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 8.865560124s ago: executing program 32 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000040)=0x46c, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r4, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) sendmmsg$inet(r6, &(0x7f0000002240)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0xbb31, 0x3, 0x7, 0x1, 0x1, 0xffffffff, 0x2, 0x4}, &(0x7f0000000040)={0x5, 0x3, 0x9, 0xa7, 0x8, 0x8, 0x1, 0x3}, &(0x7f00000000c0)={0xd, 0xe1a3, 0xd, 0x9, 0x3ff, 0x0, 0x3ff, 0x3b}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 6.740211268s ago: executing program 3 (id=148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x9, 0x7fffffffffffffff, 0x0, 0x4}) 6.442318636s ago: executing program 3 (id=152): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) unlink(&(0x7f0000000000)='./file0\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') lseek(r1, 0x6, 0x2) getdents64(r1, 0xffffffffffffffff, 0x43) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setregid(r4, r4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) keyctl$chown(0x4, r6, r8, 0xee01) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000001700)=0x4) getgroups(0x7, &(0x7f0000001680)=[0x0, 0x0, 0xee00, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff]) sendmmsg$unix(r1, &(0x7f0000001700)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="06c8d63c146ddd578cc60fa621b3a03f90da80fa0a35583729484e3d96b0a500598c98b9814b41e5030bedc1040672f1ebe9e2f594a662856679757b1ccd200410a82d607370d40a5a2ee4fa8ca70138aaed5f818f2a667d2f7c347b25e689ac419649ff45f81cbd786b99d6b6933938b5cea28648bf86013a080213e7b0f1fc791855", 0x83}, {&(0x7f00000001c0)="ddf33b6a00048a6d5fccff54cbc4b71c7fb20087cb3d0b99ae0b717d4c99e8fd44d1a7ffe76278e8b0f10dd22e6af7de4e471b122b228d1e2d435b36c06021c21cb7da8db4bb830d0413390a97c3e13d090780379c882f4e6e7b8114ce42409f9f40765ad2eb69fe4ba26ea5bdf3c56193f713a4cf4fab340894ec5a76ea", 0x7e}, {&(0x7f0000000240)="ead7c17a5054a64ad2a5c6fe1c81034ef2f6d416340ad00e378a1ca819694b864fda6d2e0b64de86311f095ab621d4de3311715f6f8512cff60f4097c20b3ee9d504a0c26b2a9d564b46df9a9b281b1804d6b9499584b68836c49cb8d2e819739748a309624d22e2feb9d12df4985a", 0x6f}, {&(0x7f00000002c0)="b22315bb6146eb79ffd04e2855313bc61111679e100f83e4f7265b078bcbea243916ec100f619ce99bd16cd4d05bb0c80b977252bff5d7bf01d39b92ffd73d", 0x3f}, {&(0x7f0000000300)="7f52bf508c01536a1b18992edfe49378833be0686e6e4a21a21d6658d5feabac020b03bbb3fc99c542610feef06d08947860516af6aaae0543dce7bf431caee4cbc3f5933d2497531fa7104d7cb7908c8ee08d515eba8cb8f5400068ed5be589d0e873b9985e36c3c7984ebdb0b0e90ca72c7e73177da0ab91ac8cd810c6efd404b6306df09580a0d333622f92655a3a06cab269758ec92b6b5f0170003f30746e74db215c141d1bae090573a5cbe55f6b4825f519104496c20841519ddf96e0a013f3233c8a528bae3fda4046602c74271b2e5232d55b", 0xd7}], 0x5, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8}}}], 0x40, 0x8400}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r10}}}], 0x20, 0x4000000}}], 0x2, 0x2) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 6.331779489s ago: executing program 3 (id=156): syz_usb_connect$uac1(0x1, 0x90, &(0x7f0000000680)=ANY=[@ANYBLOB="1201010200000008da0b144040000102030109027e0003018160030904000000010100000a2401090028000201020924030205040106090924060604010900090c240204"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e000000720a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000f0ff04000000000000009500000000fb0000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001b00)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40048c2}, 0x48000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$midi(0x3, 0xa2, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x1, 0x1, 0xe9, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xfa, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xfe, 0x5}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0x7, 0x40, {0x12, 0x25, 0x1, 0xe, "164b51dc7655640fb2883d5982a4"}}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x0, 0x0, 0xff, {0x4}}}, {{0x9, 0x5, 0xf, 0x2, 0x248, 0x10, 0x4, 0x7, {0x13, 0x25, 0x1, 0xf, "138c0c0cf4b3f076ce4e49b4151ff4"}}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x20, 0x42, 0x81, {0xe, 0x25, 0x1, 0xa, "353513c51a22d9ebc99a"}}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x3, 0xd3, 0x9, {0x14, 0x25, 0x1, 0x10, "fb22616a20c5fa0a1fc199d27ce4ded1"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x2, 0x8, 0xe1, 0x8, 0x2e}, 0xd3, &(0x7f0000000340)={0x5, 0xf, 0xd3, 0x2, [@generic={0xc7, 0x10, 0xb, "ee1bb680289d6d5ef31386e2e687548315e817c9b31bacc12200ad036a3354c794c9f43ebd47b322b9ef52408e646f09f31c932f913efc828ff3754cbf35cd8d6724408c8ea1a0a5d4d50423e4d6f12eb0270eda8d0a2e40d3d9f41331837b85c4dd4d8bde38ae25c74c93da87182e075e63e2ad7bc9bd0a3b1ba18f14079871aa098ea387e9c42dce3730fee5c0e956d88491943e7c31a51bff0e1868734ccedc2b6800239b54b13441491aab5dee2088245fe984be9900c96f51ac569b3b213e56171a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0x2}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x413}}, {0xc9, &(0x7f0000000700)=@string={0xc9, 0x3, "f85df0b4ebb629b2281bad76364e5293abb418298a7a8ad01f21270bc69beb80e976b650e401ecd2cd476c0883161fc00483108551508f8512f6d6226fe29f96ab6848124a94ac959b1fe5b098ed48474e12b79556e0cb962d85727b1aaa0d3bbb2026e19a3a3b00e03965675d319f0eb2ac3830f78095239be09e1b383ac348ddf90bf61a9b0a0a44e33f139bbf84523aae357789cad86d779c428dcbd17949809ce062cf4d3f3b66619331a5cb7beade5af87b4c9a781a399871fe608b4160fd7ed1452f78f8"}}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1e, r0, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 6.144028403s ago: executing program 4 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_btf_id_by_name$bpf_lsm(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x29, &(0x7f00000005c0)=""/226, &(0x7f00000006c0)=0xe2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e66732c646f733178666c6f7070792c756d61736b3d30313737373737373737373736303030303030303030302c756e695f786c6174653d302c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365743d63703836392c73686f72746e616d653d6d697865642c636f6465706167653d3835372c696f636861727365743d63703835302c696f636861727365743d69736f383835392d362c71756965742c636865636b3d7374726963742c00da1927b05b94a985908e5ef7811ae81f4cce15f72af9d0ce9965ee75231986f20019fe77af7eb1b96f3654120322d8a2bf5f41f9b715ac50e9693d9a1c2d39cf2fa0d0ab489e2044622795381d622533"], 0x1, 0x38c, &(0x7f0000000380)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") link(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@noblock_validity}, {@grpjquota}, {@sysvgroups}, {@debug}, {@sysvgroups}, {@grpid}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000300ea09cec767e3bbbbbbbbbbbbaaaaaaaaaa25e6ab0b0260c4b9f548989f54754970a8eb8ad7c68268c0b60c94"]) 4.989482663s ago: executing program 4 (id=174): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050009000d000000", 0x24) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8008, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc2299feec75ae06d3eafa38e22c3acf88", @ANYRESHEX=0x0], 0x1, 0x122c, &(0x7f0000000200)="$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") syz_usb_connect$uac3(0x3, 0x9f, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010200000008820582054100010203012c028d000301092081080b0002010130f60904000000010130000a24010e2900000000000c240b0601020000000e0500132403030103020606ff0100000001cf4340b30397e1ff7180e406000904010000010230000904010101010230000905010940000c09090a242504000000f706000904020000010230000904020101010230000905820920000300020a"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4.983656493s ago: executing program 5 (id=176): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^:$\x00', 0x50300, &(0x7f0000000040)={@align=0xffffffffffffff81, {0xfff8, 0x5, 0x7fffffff, 0x5}}, 0x80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7fffffff}) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x260, 0xc, 0xa, 0x401, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x6}, [@generic="6d5083039b09b1737f4b905ff4cd13441211093209438467683159e54f6202d6c13ae449d5f04f5a8f13d2ceee85bf8f6686e297b50290716d3a84232d71762ae424d7503b5f485276e69a67994b883e0a0ddd37a38d84787abe761b56396fac8ecf7d1206d8035041fb899c94e6ac4524b6b7f833bcae8b91e96ceaf90a55febdfafc0daae4bdaa3ce6b06cd40c73f071b2c8609ee3a9", @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xd6, 0x163, 0x0, 0x1, [@generic="2bb89cde1f434396e1ae5652beb7ff7c0a39434bdb4c399216604ca671820ee1087fbf29b7140b747c2c214249994a6358a3dd34331766d671968dcb88ae3f8457713921b2604128702187926ed95bf7969b6fc48152a130321a32cfb34024fd6927624f161f6130291d06acf2c9b8ee8ae85055d40915d4ee74fcad4f1e7bcfca886049c828", @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x40}, @nested={0x4, 0x54}, @nested={0x4, 0xf7}, @typed={0x2a, 0x10f, 0x0, 0x0, @binary="6ea39f14348fdce4e03fd391ff92577c19fd250212eb59cba45f1d33b5f0b687ea746b725967"}]}, @generic="d7169f128a58da6266f244db3caac418e64ca9d2e8d62b622dd057fce76dfda3ddadcb8f1e2942bc8bbeba1919fb0c8ccf32e508ceeafbc9319d866ba7634914c4d5b6a74f646e5da9758d0c6d4e67c0a2ac0dab15c4a8c1ef166049f63dd1b12e1b1125d03624554c63cb1f9e4279b388e90e4b0362af3f2a82842de1549874906fc8f9f8db33d0b675476a18eb12eb5f6a459ca86507250e98bb94d2e67ec3bc8c3bffe6b174e9eb635ecbf56047a96625b9a2ec8695a092539df15cb0d8744613cc9784fd8386ccdbe76d38ae6a59a2281d5311"]}, 0x260}, 0x1, 0x0, 0x0, 0x4040002}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x78cc0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) connect$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000580), 0xfffffffffffffff7, 0x18000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f00000005c0)) (async) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000700)) (async) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000740)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{0xfffffffffffffffd}], 0x1}, 0x4}, {{&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/163, 0xa3}], 0x1, &(0x7f0000000980)=""/157, 0x9d}, 0x4}], 0x2, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000b00)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/68, 0x44}, {&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/96, 0x60}], 0x4, &(0x7f0000000e40)=""/11, 0xb}, 0xfffffff9}, {{&(0x7f0000000e80)=@l2tp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/182, 0xb6}], 0x1, &(0x7f0000001000)=""/35, 0x23}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001040)=""/45, 0x2d}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/54, 0x36}, {&(0x7f00000020c0)=""/245, 0xf5}], 0x4}, 0xe3}, {{&(0x7f0000002200)=@phonet, 0x80, &(0x7f0000002340)=[{&(0x7f0000002280)=""/93, 0x5d}, {&(0x7f0000002300)=""/48, 0x30}], 0x2, &(0x7f0000002380)=""/79, 0x4f}, 0xd}, {{&(0x7f0000002400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002480)=""/205, 0xcd}, {&(0x7f0000002580)=""/254, 0xfe}, {&(0x7f0000002680)}, {&(0x7f00000026c0)=""/243, 0xf3}], 0x4, &(0x7f0000002800)=""/144, 0x90}, 0x2}, {{&(0x7f00000028c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002940)=""/239, 0xef}, {&(0x7f0000002a40)=""/252, 0xfc}, {&(0x7f0000002b40)=""/31, 0x1f}, {&(0x7f0000002b80)=""/44, 0x2c}, {&(0x7f0000002bc0)=""/161, 0xa1}], 0x5, &(0x7f0000002d00)=""/91, 0x5b}, 0x8001}, {{&(0x7f0000002d80)=@nl, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e00)=""/102, 0x66}, {&(0x7f0000002e80)=""/171, 0xab}, {&(0x7f0000002f40)=""/168, 0xa8}, {&(0x7f0000003000)=""/220, 0xdc}, {&(0x7f0000003100)=""/141, 0x8d}, {&(0x7f00000031c0)=""/247, 0xf7}, {&(0x7f00000032c0)=""/125, 0x7d}], 0x7, &(0x7f00000033c0)=""/208, 0xd0}, 0x6}, {{&(0x7f00000034c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003540)=""/173, 0xad}, {&(0x7f0000003600)=""/63, 0x3f}], 0x2, &(0x7f0000003680)=""/5, 0x5}, 0x1000}], 0x8, 0x10000, &(0x7f00000038c0)={0x77359400}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000003900)={0x9, 0x0, [{0xa5e, 0x0, 0x3}, {0x374, 0x0, 0x3}, {0x3f8, 0x0, 0x7fff}, {0x4000009b}, {0x824, 0x0, 0x209f}, {0x303, 0x0, 0x3}, {0xa83, 0x0, 0x27c}, {0x9a0, 0x0, 0x79}, {0x92e, 0x0, 0x8}]}) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write$selinux_load(r2, &(0x7f00000039c0)={0xf97cff8c, 0x8, 'SE Linux', "3e8115e429a08540ee"}, 0x19) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000003a00)={'\x00', 0x2, 0x400, 0x3, 0x8, 0x1ff, 0xffffffffffffffff}) prlimit64(r6, 0xe, &(0x7f0000003a80)={0x6, 0x200000000000000}, 0x0) syz_open_dev$MSR(&(0x7f0000003ac0), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b40), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x28, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x24}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0xb69) listen(r1, 0x9) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000003e40)={&(0x7f0000003e00)=[{&(0x7f0000003c40)="71db108af199b997ead53ffd0beaae74b239ff03b676e029bd0a72df68400411bb3cbc5c6b03fe439141579bf7bba5770c332274f2bda6d8ad0df8d34830dba83b1ae5d5d9245c22bca2f2699cdac9c14e976d807e462cac05d2c8cb46bb8fc972de6e4bd13d9de6cd12435208781c93d85ae65f570ec3e9b2125210b9582cad53fa6174dee834bb76be7368c3c9816eb096477f97bfa5c8754d5615f031c1", 0x9f}, {&(0x7f0000003d00)="b4ac1791b41281ef67551c8d4b7b86679a9d1189ae781100e227da9dc99c08bf46185b75f3528ec8d8088799203209958e60e5bc61c004d22f654a4e4186cee54e5a5d58c481fe0f4d30bbcf963942909af8d5e0958632c92dbe06bf3da0005bab2606cd0924b23ca005c06d2506f9f3f0d324e3e0d4160e59bd2454c04207c15804e47dc902165bae40c0b381f7166006b19b1c67a19e4f2b0d7f19a7e118d17dff71524436fd05724458845e74a75b354a98c321d23adfc8d1a41bc05e70fa70", 0xc1}], 0x2, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x3, 0x8, 0x9}) (async) futimesat(r2, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)={{0x0, 0x2710}, {0x0, 0x2710}}) (async) setrlimit(0x2, &(0x7f0000003f40)={0x13, 0x7}) sendmsg$nl_route(r4, &(0x7f0000004040)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd26, 0x7, {0x2, 0x80, 0x20, 0xc0, 0x7, 0x0, 0x0, 0x8, 0x10002}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008005}, 0x40011) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000004080)={@private1, 0x0}, &(0x7f00000040c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000004100)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x6f, r8}) 4.899428325s ago: executing program 5 (id=177): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x6}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) getpgid(0x0) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000a00)='1', 0x1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 4.836029076s ago: executing program 0 (id=178): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a60002f4abe04009050202000202"], 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x11, 0x32, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x1c}], 0x1}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a3030303030303423950200000000000000000000000000000000000000001a0000"], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) recvmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/219, 0xdb}, {&(0x7f00000016c0)=""/118, 0x76}, {&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000001840)=""/29, 0x1d}, {&(0x7f0000001880)=""/251, 0xfb}], 0x7, &(0x7f0000001a00)=""/23, 0x17}, 0x29a0}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ac0)=""/231, 0xe7}, {&(0x7f0000001bc0)=""/221, 0xdd}, {&(0x7f0000001cc0)=""/100, 0x64}, {&(0x7f0000001d40)=""/197, 0xc5}, {&(0x7f0000001e40)=""/137, 0x89}, {&(0x7f0000001f00)=""/9, 0x9}, {&(0x7f0000001f40)=""/138, 0x8a}, {&(0x7f0000002000)=""/126, 0x7e}, {&(0x7f0000002080)=""/39, 0x27}, {&(0x7f00000020c0)=""/69, 0x45}], 0xa, &(0x7f0000002200)=""/224, 0xe0}, 0x7}, {{&(0x7f0000002300)=@qipcrtr, 0x80, &(0x7f0000002940)=[{&(0x7f0000002380)=""/89, 0x59}, {&(0x7f0000002400)=""/221, 0xdd}, {&(0x7f0000002500)=""/196, 0xc4}, {&(0x7f0000002600)=""/124, 0x7c}, {&(0x7f0000002680)=""/243, 0xf3}, {&(0x7f0000002780)=""/227, 0xe3}, {&(0x7f0000002880)=""/172, 0xac}], 0x7}, 0x24f}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000029c0)=""/25, 0x19}, {&(0x7f0000002a00)=""/119, 0x77}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/92, 0x5c}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x5, &(0x7f0000003bc0)=""/181, 0xb5}, 0x800}, {{&(0x7f0000003c80)=@tipc=@name, 0x80, &(0x7f0000004180)=[{&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/248, 0xf8}, {&(0x7f0000003f00)=""/46, 0x2e}, {&(0x7f0000003f40)=""/241, 0xf1}, {&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/91, 0x5b}], 0x6, &(0x7f0000004200)=""/51, 0x33}, 0x3}, {{&(0x7f0000004240)=@nl, 0x80, &(0x7f00000043c0)=[{&(0x7f00000042c0)=""/231, 0xe7}], 0x1, &(0x7f0000004400)=""/213, 0xd5}, 0x1}, {{&(0x7f0000004500)=@can, 0x80, &(0x7f0000004600)=[{&(0x7f0000004580)=""/34, 0x22}, {&(0x7f00000045c0)=""/4, 0x4}], 0x2, &(0x7f0000004640)=""/197, 0xc5}, 0x7}, {{&(0x7f0000004740)=@sco={0x1f, @none}, 0x80, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/123, 0x7b}, {&(0x7f0000004840)=""/171, 0xab}, {&(0x7f0000004900)}], 0x3}, 0xc6}, {{&(0x7f0000004980)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004a00)=""/27, 0x1b}, {&(0x7f0000004a40)=""/136, 0x88}, {&(0x7f0000004b00)=""/201, 0xc9}, {&(0x7f0000004c00)=""/215, 0xd7}, {&(0x7f0000004d00)=""/210, 0xd2}, {&(0x7f0000004e00)=""/1, 0x1}], 0x6, &(0x7f0000004ec0)=""/102, 0x66}, 0x2}], 0x9, 0x143, 0x0) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) 4.078531076s ago: executing program 5 (id=181): eventfd(0x1) syz_usb_connect(0x2, 0x138, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000001000)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x60, 0x3, 0xa, 0xff, 0x8}, 0xc4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, [{0x0, 0x0}]}) 4.077947616s ago: executing program 3 (id=182): r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x200380, 0x80, 0x10}, 0x18) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000340)) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020da0b154040000102030109081200010105106380de163dc90809ad000000010300035130000016f8bedd7e8baf5ee205c5203846638e43f3be59aa35b46247177ccd2f43ab78367dc47f000000000000"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xcc474a04b99fda94}}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x0, 0x1, 0x5, 0x3}, {0x9, 0x5, 0x8, 0x2, 0x10, 0x9, 0x92, 0x80}, {0x9, 0x5, 0xf, 0x3, 0x20, 0x5, 0x23, 0x5}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x5, 0x85, {0x85, 0x14, "b6b6623aef42ddf4c9544abfa845aa220d135c72a1455f365814415d2e7b7f0ff2a4bebeaf34e0bf3f12919a6a7f3eff6557724158f5016acaa28c35feeba9722422946d512addd37e6ddd285e19c9180873ddd979b7b4d47338aba50760c5107b25636c90a19a9b10ec0fdb1f27785a10154de168fa8036bdd8ec8f583ce766284674"}}, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00']}, &(0x7f0000000b40)={0x1c, &(0x7f0000000200)={0x0, 0x12, 0x8d, "d77b1c0152b9c3f766e6842cf01eb308deaafdc57ae468e316a718afe005b9fe3e92bc1fc140fb0305ecc4243d0250a0e7ae08c9239744429455a7b4fec33736e4a374928d1b6bd9dd08825556e1dffc370e9d69adf384be944b377837fd6a052111a7c3d0cf5f9df230d1db0b686c0c0f00fc5486309c1d1201a2e854307106517fea175c1226d5aa56987c7b"}, &(0x7f00000006c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b00)={0x21, 0x0, 0x2, "b268"}}) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x200380, 0x80, 0x10}, 0x18) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000340)) (async) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020da0b154040000102030109081200010105106380de163dc90809ad000000010300035130000016f8bedd7e8baf5ee205c5203846638e43f3be59aa35b46247177ccd2f43ab78367dc47f000000000000"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xcc474a04b99fda94}}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) ioctl$TIOCSBRK(r1, 0x5427) (async) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x0, 0x1, 0x5, 0x3}, {0x9, 0x5, 0x8, 0x2, 0x10, 0x9, 0x92, 0x80}, {0x9, 0x5, 0xf, 0x3, 0x20, 0x5, 0x23, 0x5}}}}}}]}}, 0x0) (async) syz_usb_control_io$sierra_net(r2, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x5, 0x85, {0x85, 0x14, "b6b6623aef42ddf4c9544abfa845aa220d135c72a1455f365814415d2e7b7f0ff2a4bebeaf34e0bf3f12919a6a7f3eff6557724158f5016acaa28c35feeba9722422946d512addd37e6ddd285e19c9180873ddd979b7b4d47338aba50760c5107b25636c90a19a9b10ec0fdb1f27785a10154de168fa8036bdd8ec8f583ce766284674"}}, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00']}, &(0x7f0000000b40)={0x1c, &(0x7f0000000200)={0x0, 0x12, 0x8d, "d77b1c0152b9c3f766e6842cf01eb308deaafdc57ae468e316a718afe005b9fe3e92bc1fc140fb0305ecc4243d0250a0e7ae08c9239744429455a7b4fec33736e4a374928d1b6bd9dd08825556e1dffc370e9d69adf384be944b377837fd6a052111a7c3d0cf5f9df230d1db0b686c0c0f00fc5486309c1d1201a2e854307106517fea175c1226d5aa56987c7b"}, &(0x7f00000006c0)={0xa1, 0x1, 0x400, "c32eade845160235d4e1cf0917e85224ae2f8dbcfd670aab87637a915afd7116f59453edfbdbeebf7211bf4b4449d6be0860010d9ab2b15905400b4a7e54ad0bc8b89eb87f7fba3d1641663d7a654e7e1827c04af2e0e5197367ad8c5a02a141e3c501ccabe83702bb646f5df0dfc65021985896ade68cd9aca055334b94f5f0ad883f5a909f7da492284491231aa2ce150d7da3902131afe54b98ef3885fe123602a23e3fed9a79a61bc49d1fae04b500ab6fe498657788898a41b47a21d474886fe9f032c99d7c6e706f77d1dfc63d16f0c8a0a90f2cd9f2bdc4212f733b095360821a2742ed5ae7232491387c150ba3ad027808ff5002d13f8669e63c50ec1e099b6a233794d7912f1167009e3044d6748474da85a774c0b0676fd9c81ad71068676465f7eff7855cfbbf89619932ef9ff92fd7675bed762873fa3a8726cb885cabc1b5df5dd467199c7eecc3b3e464ddf9fbe7fbffca2fbbff24ecaf450dbd2bb85ab5711fe47ecbdaefe550030b0b855136ca9792aa27def9dcaf1bbc99cf8e7581f4c6b0a4e2207e2fad0249c963e533e561f0658e1fb78cb121c4b43dde011d59c3b89a8cc0fa987a58330535d00eef31967bd400a1ec8fd6342c23235060db91f19773579ca9206fae21f8509089c1a2b42a2f83009b618d2bdabe703bdb6aac088c26d4f2a29dc9da2db1cdc57321c2162b48da1f0b6126e2d963c3136cd099bd4a93a5a9853e49a11d20f460b197b6d6fd159c59e786f347fcd53fe13f2278f9981af2ac39e864dadfe92b7fd33836c303e91fc86068632c9570992e442629ccf5795d8f5f7ca46b41d8a5b69fb9bde78a89b36de39442ba32b0771312c63f11e930d3abffc5170d3ed4f43d4be7b5c2bf1ca648f95c34ec5666f99f5f734d11b85604bbe7293e2685dac4fad19b1033a620b5e5ee6bfc845b0e1282029db2651c2d7ccf85f507166f43cd659f4c0f3aa8d10df36d87f37df974e9fad1db9b19cd7e9065114a80b5fa7c44bca8f789787d7120f8f2dd6b03a311a5d8d0e4514232cec2ac442d85a7cda9d37eb87fface3a3c0c1f8a91d54ed93fe8cf68b160afb0a4eef5e3a881d5e68e636f835169fe34d21d2fea3ab86a7691a8634aa2c97f7479830dc95f57d20d39eb2faae0cb8825720db0705a17d815e83d8c01ee6079b15dd043edf2a1df41a0134730bc2e281cf74b9d15c863e0bb2df7af510adcf57b611be27e4b94e0eb7686ec9787a0c5b95ef184136e9fdf2716e45ca4af4cadb1b6a20343b8e69586895599988f4ab56da6cc2d2fe163c54c516321a59250f0907a88cf826c57c0383f73ef7cfe85ad64e75d38cfaae1b75b7d01f81dfa0180598d50d9cd5c6c438004806e4c07a532ac78a56e5feef99c72934cd3312aec502822544176228b6d4c6d758b0bb64542a7c0ed7a39f54e495c0b87"}, &(0x7f0000000b00)={0x21, 0x0, 0x2, "b268"}}) (async) 3.962729389s ago: executing program 2 (id=184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$clear(0x3, 0xfffffffffffffffd) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001b0000000000000000000000000000000000ff9f004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a000000000000008f6b000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e00ac1414bb00"/188], 0x104}}, 0x8000) (async) r2 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x7b8, &(0x7f0000000880)="$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") (async) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) (async) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r4, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f00000000c0)='./file7\x00', &(0x7f0000000100), 0x1200020, &(0x7f0000003080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@version_9p2000}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x18}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) 3.962167589s ago: executing program 2 (id=185): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$inet(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xd4, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xc}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2400c050}, 0x4004080) (async) preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8400, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x20008000, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @mcast1}, 0x1c) (async) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x40000040) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000140)=0x3) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'bridge0\x00', 0x0}) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007f00), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000007fc0)={0x0, 0x0, &(0x7f0000007f80)={&(0x7f0000007f40)={0x20, r10, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004040) (async) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001780)={0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001840)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000001940)=0xe8) (async) r13 = getegid() sendmsg$unix(r4, &(0x7f0000001a00)={&(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001440)="76e191b1cbdde6e6e32d0ddfe60c4836b8535e5e4f9ecccd97387b5bdd076ae00deba116c7ed4db77c9f2a5b820dca199e3353742347f692fbade310e56c1cdcf2a73ab3398658517d884edbc7f0fe436959f93e2d8b61d7331a8d6d60fb6f2b48b36f1eeb2c7aa8d7f8809c586019362731592f702118de018e9b3bb5ae163a2da991de5527", 0x86}, {&(0x7f0000001500)="a476147f9ad5e2105451db2e6f0df2def824832030fb0d54cdf6f3854f147abdbbea0c65cfd9b0dcd0e9ed0df6fe9f84c48cd446ec4f2bb9fcb409e5f15805f23a712d2dc124e2d40d43e286ea8eb39cbc062d572043d0ce3da1683aba2ff4a0637ed655b6e42329a4aa0f4cf1b8d6a5edee2de1d330d923adc04abc4faaedae39ba52c7a16812122958d059723a8d6599b6cdf47a2c3822ee62b2dbafc61efde8fdf7f0ad62e1d223552a325efaa7ae73cca38a8242d5", 0xb7}], 0x2, &(0x7f0000001980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x78, 0x4008012}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0x7ffc9ffb}, {0x3ff, 0x4, 0x10, 0x7fd}]}) (async) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 3.962006799s ago: executing program 2 (id=186): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket(0x2c, 0x3, 0x0) (async) r1 = socket(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x200000, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) (async) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x200000, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.864068841s ago: executing program 2 (id=187): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x99d430c7ef57520c, 0x4, 0xfffffffffffffffa, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 3.094315601s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x9, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x0, [{0x5, 0x4, 0x84, '\x00', 0x2b02}, {0x2, 0x800000000000359e, 0x4, '\x00', 0x1701}]}) 3.064641332s ago: executing program 2 (id=189): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) recvmmsg(r1, &(0x7f0000005600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/75, 0x4b}, 0x10001}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e30, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x85}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) write$tun(0xffffffffffffffff, 0x0, 0x45) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x206}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000008000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000001000)={0x0, 0x0}) listen(r0, 0x4) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000001c0)={0x10, 0x0, [{0x0, 0x0, 0xa}, {0xffff, 0x0, 0x7}, {0x10}, {0x56, 0x0, 0x1000000000000004}, {0x5, 0x0, 0x1000}, {0x400, 0x0, 0x200000ffffffff}, {0x7, 0x0, 0x4}, {0x1, 0x0, 0xfffffffffffffff7}, {0xffff, 0x0, 0x7}, {0x1, 0x0, 0x5}, {0x4, 0x0, 0x1}, {0xfffffffe, 0x0, 0x1ff}, {0x5, 0x0, 0x743}, {0x5, 0x0, 0x7fffffffffffffff}, {0x7af6, 0x0, 0x9}, {0x2, 0x0, 0xc65e607}]}) 2.939882365s ago: executing program 4 (id=190): r0 = socket(0x1, 0x5, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async, rerun: 64) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (rerun: 64) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 64) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) (async, rerun: 64) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0xc0000000}) 2.939495925s ago: executing program 4 (id=191): signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x4e23, @local}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) (async) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xa9203000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.928690405s ago: executing program 4 (id=192): memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) (async) r0 = memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0xc, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14d442, 0x4d) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x10c6a) (async) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x10c6a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000002c0)={[{@journal_async_commit}, {}, {@minixdf}, {@lazytime}, {@nolazytime}]}, 0x1, 0x50d, &(0x7f0000000fc0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000002c0)={[{@journal_async_commit}, {}, {@minixdf}, {@lazytime}, {@nolazytime}]}, 0x1, 0x50d, &(0x7f0000000fc0)="$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") mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x40802, 0x74) write$cgroup_int(r2, &(0x7f0000000100)=0x8c3, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x37, 0x0, 0x8001, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r3, 0xcef70a3c7884b748, 0x2af80daa29faace5, r3, @void, @void, @value=0xffffffffffffffff, @void, r4}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/llc/core\x00') mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r5, r1, 0x2b, 0xc, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2.899959056s ago: executing program 4 (id=193): r0 = socket(0x1, 0x5, 0x0) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x200a}) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x9, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)={0x20, 0x2, 0x28, {0x28, 0x23, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) 2.878085617s ago: executing program 0 (id=194): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x218040, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x1) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x7, 0x54, 0x1, {0x22, 0xe51}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x9, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x6, 0x1, 0x8, 0x80}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x7, 0xbad5}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0x38, &(0x7f0000000280)=@string={0x38, 0x3, "d5544e1912af4aeedd0af1d024082c3e1fe1b8516c832700b9cbc0033e7a6d8045fed79d7d869848baabbc756095a138290bd4609065"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xb4, {0xb4, 0x7, "0a5da64396b277c907a58e9ab0bfc739df55e69db6ed83e1901874219cff80ef4f28ab805f1b6d6174968472455cd1af43ad99271c078bdc2a410f2814bb07e5a6713a5e6a3e9199aa08c3cf6ee2d263dcdbc01e7c8d3b998a795fbe6b612ba602e4924901b4c92f9764c05aa5a18597e332390268a3a9bfd0b6bd4f2438ada7fcf73ab4d7c5840f62f75e02bba4af42610c70ff5c06e411d05d08509df2d49e01b160289093990616f7f21c5fb254657783"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, &(0x7f0000000440)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x7, "2bad"}, @local=@item_4={0x3, 0x2, 0x0, "4061db22"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x40, 0x1, {0x22, 0xb89}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0xc, 0x54, "c2ae1c036afea471a06e12ee2c6031ebb12c09845416653c3fe4dea29c7b0e48f44945967b3dde7ade0010e76ea8a8b1427dc9df910204e6edd120954cb5b54e6222f91229a8d098c17b134c8b082068848c185a"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x1, 0xa2, "d6562c34bd0dac459ff006008e5caa1fda6f9459d6ca7e81a991dade7dd7179ad87ec7840ae98abf663e815e68a9a2230b84646eb305fc26c64e44376453212a1015b74379f0c56acdfc984265630488eaf87b82e63f9098f0e695eea085f41db079f157cb1a998ff495bfec9e146badf41f58f89479e7090c650f0a50fed3c39829bb5786e13f7125a2b53d08617c6d601725587bb885588fdd7fa886d881d69855"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xf}}) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\b\x00W'], 0x0}, 0x0) 2.35399601s ago: executing program 5 (id=195): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) syz_usb_ep_write(r0, 0x3, 0xe4, &(0x7f0000000080)="46c484908df4ed71d9e790ed6aa7327b9966fb25f2dc73db213b3ac95112404b375464449cf27441a1fe5776369c582ed22fe745af08181dc0bdb95ac699de794f39fe0f9804c231cdb213702efa74de9c953e43fcc056c0f66d3dc6af314faa1533d43ec0a74425d7561dfac9830e673db03e8b3b0de5861f688164516152198f720c85bf6ad5647bc53c75e0609d33450096950ef359d572335b19ce3b53a7e7552bd2526e98d5eda7c0b37a95a60ef5bafa1f430c3495ebacfae42598dc16e0261c0b3aa4a131491508f9866956331a712830f81fdbf8e14af2e2b154b5fec8ce89d5") 2.141225155s ago: executing program 2 (id=196): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r4, 0x2000007b, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, 0x0, 0x0, 0x8) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES64, @ANYRES8=0x0], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) 1.019942153s ago: executing program 3 (id=197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112200000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000280)=0x6534, 0x4) sendmmsg(r7, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/129, 0x81}], 0x1}}], 0x1, 0x2002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8=r6], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=5,size=4']) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c0c018014000300fe8000000000ab000000000000001ecca9e000bb16000400ff0200000000000000000000000000010c000280028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe800000000000000200000000000000080007400000000008000d8004000380000000000000000000000000000086349fe3a7c55b863209bf09f741d7bd918dc57ce582e51cc9a740f1ebea429b908e8ae60e040ff2b7d96cce8046fafa39bb12299822344a278048763d5c37b78fb1a0eb14ff55c037931fed650893"], 0x9c}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a000000000000000b0000000000000080080008"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 949.026866ms ago: executing program 0 (id=198): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) memfd_create(&(0x7f0000000500)='\'\xcfI\xdc\f\xba4L\xc1\xd4WI\f\x0f\xc4\xe6&k\xb5r\xce\xc2k\xb1\xa9\x99\xd5z\x82y\xa0\x8c\x19n6\xd4/\xcf\xaf_9\x0f\xf3\xbb\xab\x97\x17Y\xe2\xbeX\v\xc5\xffY\xf0\xc5\xf8\x1e`\x14<\xa0\b\xf8\xa3Qfl\xb0u\x0e\x8d\xe6_\xa4\x15\xa2\xb7Fr\xb0(3\x9ei\xb0\x89a\xdb\\\x85-\xfb\xc3\xfb=\x97\x9bbMo\xd2x]\x1f\x81cn\x04|g\x90\xe5\xe0\xf0Q\xda6\x11~W\x8c6\xce\x19R\x06\xcf\x9e0E\x14\x84m\x0f\xe7Gg\xd7\xc0Eb\x88/\xf0IWFx\xe3@={\x14\xee\x80\x14\xea\xfd\"\x95\xbc\x9e\x83%\xa7\x18\xcc\x1c\xad\xdeo\xcc=\x0e\t\xba\xd2i\xd0\xbd\x81/\xd3\xb7\xa1\xfc\a\xc3*d\xdb\xb2\xca O\xcfTe\xe99\xc8\x86\xd6\xebz\xc7L\xc4\x8bC\xad\xf53\x02#\x9b\x12\xdb\xe5\xe7\xdb\xbc\xbb\xe8A\x03\x1ayzQ\xbb\xd8\xce\xba\xfe\xb4\xa9wn8\xf2\xd2\x8c1\x1a\xfb\x17\xbd\x89\xafD\xcf\n\xee\xaa\x8a\xbe\xfa\xfe\x17\v\xe1\xca\xf0\xc1F_Z\xfa\xdb\x9ff\x91\xf5j\x1bD\x12\x90\xe1C\xe4\xf3g\xa4\x8e\x1e\xcb\xa0\x86\x12\xa3\x86\x7fl~\xd2\xc6;\xc1\xe79\x9ax\xca\xf7\xb0c\x9a\xe7+\x8eN\xf6uO\xb8\xc8\xcd', 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x2285, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x800, 0x548, 0x3}, 0x20) (async) r2 = syz_open_pts(0xffffffffffffffff, 0x151000) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x14, 0x16, 0xcf, &(0x7f00000000c0)="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"}) 693.899882ms ago: executing program 0 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5cb, &(0x7f0000000e40)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0xfffffffffffffedd}], 0x1, 0x6, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x8002, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 376.02836ms ago: executing program 5 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff9}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x44000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0x0, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45, [0x20000000]}}) r2 = socket$inet6(0xa, 0xa, 0x2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000080)=0x7ff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007110c300000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 294.163762ms ago: executing program 5 (id=201): syz_open_dev$loop(&(0x7f0000000000), 0xc7a, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x20037fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x800000009, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x8, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xd, 0x1a) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r9) r10 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r7, r10, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) 124.723907ms ago: executing program 3 (id=202): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c05020100c0000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000100905810300020500000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x2284, &(0x7f0000000100)=0x3) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000000000/0x2000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x2, 0x7fff, 0x7fff, 0x9, 0xfffd, 0x1, 0x1, 0xa, 0x3, 0x7, 0x6, 0xf000}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0x20, 0x190, 0x1d}, {0x9, 0x2a560215, 0x6, 0x3, 0xffff, 0x0, 0xacf5, 0xfffffffffffffffc}, {0x7ef, 0x7fffffff, 0x5, 0x8}, 0x7ffffffe, 0x6e6bb7, 0x3, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0x9, 0xee8d, 0xffffffff, 0x6}}, 0xe8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 0 (id=203): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x104020, 0x0, 0xfc, 0x0, 0x0) mount(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x11, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808008, &(0x7f0000000380)={[{@test_dummy_encryption}, {@abort}]}, 0x2, 0xbdb, &(0x7f0000000c00)="$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") unlink(&(0x7f0000000180)='./file2\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") syz_mount_image$fuse(0x0, 0x0, 0x234a047, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x9, 0x7fffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r1, 0x0) getresuid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) setreuid(r1, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000005700000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x100, 0x1) getdents64(r4, 0xfffffffffffffffe, 0x29) syz_emit_ethernet(0xc2, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa3e8100100008004500001400000000fb019078ac1e0001ac1414aa0301907803240000450040000001ffff00010007e0000002e000ccd04d17377eb4ba000e08c82ce8da6ee06cb8dd94520509000000f4bfe0f0021201008548c8ee4a000000000000000000000900de6c83d500000207cfa11cab1a00108475be675de6a70a8525dc91e5c6060a0000000000800000071273bc23f9ffffffa3a00900a301c84600010cc8f46976e79ea788f03d860600000020000000"], 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r6, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000540), &(0x7f0000000580)='./file3\x00', &(0x7f00000005c0), 0x2188000, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=rdma,port=0x0000200000004e23,sq=0xffffffff80000001,hash,smackfsdef=syzkaller\x00,appraise,fowner>', @ANYRESDEC=r6, @ANYBLOB=',\x00']) mount$bind(&(0x7f00000003c0)='./bus\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x220840, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="756e695f786c6174653d312cf3686f72746ecd6d656c6f7765722c666c7573682c73686f72746e616d653d77696e391a2c73686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d31332c756e695f786c6174653d312c6e6f6e756d7461696c3d302c666d61736b3d30303030303030303030303030303030303030303030372c73686f72746e616d653d6c6f7765722c696f6368480c7365743d69736f383835392d31352c00"], 0x1, 0x240, &(0x7f0000000100)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_FPEXC(0xc, 0x20080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 20.503890][ T24] audit: type=1400 audit(1785931714.509:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.504927][ T271] cgroup: Unknown subsys name 'net' [ 20.526582][ T24] audit: type=1400 audit(1785931714.509:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.553940][ T24] audit: type=1400 audit(1785931714.529:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.554104][ T271] cgroup: Unknown subsys name 'devices' [ 20.694184][ T271] cgroup: Unknown subsys name 'hugetlb' [ 20.699776][ T271] cgroup: Unknown subsys name 'rlimit' [ 20.807400][ T24] audit: type=1400 audit(1785931714.809:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.830565][ T24] audit: type=1400 audit(1785931714.809:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.855651][ T24] audit: type=1400 audit(1785931714.809:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.861107][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.887545][ T24] audit: type=1400 audit(1785931714.889:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.913029][ T24] audit: type=1400 audit(1785931714.889:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.939293][ T24] audit: type=1400 audit(1785931714.939:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.964826][ T24] audit: type=1400 audit(1785931714.939:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.990907][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.447425][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.454794][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.462061][ T279] device bridge_slave_0 entered promiscuous mode [ 21.469778][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.476929][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.484306][ T279] device bridge_slave_1 entered promiscuous mode [ 21.564387][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.571426][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.578763][ T281] device bridge_slave_0 entered promiscuous mode [ 21.585613][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.592637][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.600040][ T281] device bridge_slave_1 entered promiscuous mode [ 21.655479][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.662528][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.670061][ T284] device bridge_slave_0 entered promiscuous mode [ 21.678190][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.685231][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.692574][ T284] device bridge_slave_1 entered promiscuous mode [ 21.706841][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.713916][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.721327][ T282] device bridge_slave_0 entered promiscuous mode [ 21.730822][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.737907][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.745289][ T282] device bridge_slave_1 entered promiscuous mode [ 21.783914][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.790986][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.798458][ T280] device bridge_slave_0 entered promiscuous mode [ 21.807684][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.814799][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.822038][ T280] device bridge_slave_1 entered promiscuous mode [ 21.838828][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.845877][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.853167][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.860173][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.924450][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.931494][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.938776][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.945804][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.962486][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.969546][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.976898][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.983918][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.018892][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.026318][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.034035][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.041117][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.048361][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.055510][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.063267][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.070607][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.093504][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.101633][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.108690][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.116232][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.124414][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.131422][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.151001][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.158538][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.166559][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.178959][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.203661][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.212563][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.220830][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.227861][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.235386][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.243867][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.250884][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.258590][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.266576][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.283434][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.291614][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.298651][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.306258][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.314435][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.321434][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.332206][ T279] device veth0_vlan entered promiscuous mode [ 22.344515][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.352515][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.360069][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.367544][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.375345][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.382924][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.390806][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.403818][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.412009][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.419206][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.426553][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.434837][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.442029][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.455698][ T280] device veth0_vlan entered promiscuous mode [ 22.465501][ T279] device veth1_macvtap entered promiscuous mode [ 22.474790][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.483303][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.491557][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.500716][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.508449][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.517623][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.525764][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.536903][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.544514][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.558085][ T284] device veth0_vlan entered promiscuous mode [ 22.565971][ T280] device veth1_macvtap entered promiscuous mode [ 22.583861][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.592145][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.600897][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.609360][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.617787][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.626075][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.634573][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.642345][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.650510][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.658684][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.667004][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.674750][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.682736][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.690614][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.699461][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.707811][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.714844][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.722138][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.730454][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.738642][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.745679][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.753207][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.761164][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.769148][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.777135][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.785192][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.792606][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.800073][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.814289][ T281] device veth0_vlan entered promiscuous mode [ 22.825358][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.834313][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.842608][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.850595][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.858563][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.866890][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.875091][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.882454][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.893944][ T284] device veth1_macvtap entered promiscuous mode [ 22.906509][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 22.913252][ T282] device veth0_vlan entered promiscuous mode [ 22.921380][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.929597][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.937924][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.946363][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.954348][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.964135][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.971545][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.979010][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.987312][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.995906][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.004171][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.015216][ T281] device veth1_macvtap entered promiscuous mode [ 23.023756][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.027321][ T282] device veth1_macvtap entered promiscuous mode [ 23.041346][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.049557][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.059041][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.064524][ T303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.067579][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.090996][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.099473][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.107881][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.116389][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.124653][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.133005][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.146807][ T303] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 23.157273][ T303] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.180756][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.191043][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.195238][ T303] APIC base relocation is unsupported by KVM [ 23.199850][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.215323][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.224377][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.232584][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.241174][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.249634][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.320764][ T312] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure [ 23.363100][ T315] ====================================================== [ 23.363100][ T315] WARNING: the mand mount option is being deprecated and [ 23.363100][ T315] will be removed in v5.15! [ 23.363100][ T315] ====================================================== [ 23.483233][ T316] EXT4-fs (loop2): Test dummy encryption mode enabled [ 23.490052][ T316] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 23.503403][ T316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 23.504236][ T315] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue [ 23.523253][ T316] EXT4-fs (loop2): 1 truncate cleaned up [ 23.526808][ T315] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 23.531305][ T316] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 23.596142][ T323] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x00000000000000b2,usrquota,minixdf,nombcache,,errors=continue [ 23.609849][ T323] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 23.642719][ T308] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.666161][ T318] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 23.678650][ T318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 23.686035][ T318] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 24 vs 41 free clusters [ 23.700666][ T318] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.5: Failed to acquire dquot type 0 [ 23.713141][ T318] EXT4-fs (loop4): 1 truncate cleaned up [ 23.723731][ T318] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue [ 23.889941][ T335] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #13: comm syz.2.7: iget: bad i_size value: -360287970189638630 [ 23.903255][ T335] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.7: couldn't read orphan inode 13 (err -117) [ 23.915110][ T335] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.938454][ T335] kvm [334]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc1 data 0xe50000000000 [ 23.948586][ T335] kvm [334]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0xc2 data 0xe50000000000 [ 23.960681][ T335] kvm [334]: vcpu6, guest rIP: 0x9139 ignored wrmsr: 0x11e data 0xe500be702111 [ 23.960708][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.972128][ T335] kvm [334]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x186 data 0xe50000000000 [ 23.987349][ T335] kvm [334]: vcpu6, guest rIP: 0x9139 disabled perfctr wrmsr: 0x187 data 0xe50000000000 [ 24.032969][ T308] usb 2-1: config 6 has an invalid interface number: 240 but max is 0 [ 24.041380][ T308] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 24.051553][ T15] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.059196][ T308] usb 2-1: config 6 has no interface number 0 [ 24.065327][ T308] usb 2-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 24.078469][ T308] usb 2-1: config 6 interface 240 has no altsetting 0 [ 24.138779][ T344] input: syz1 as /devices/virtual/input/input4 [ 24.162848][ T20] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.322776][ T308] usb 2-1: string descriptor 0 read error: -22 [ 24.329029][ T308] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 24.338376][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.352754][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.363015][ T5] usb 1-1: config 0 has no interfaces? [ 24.368480][ T5] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 24.377745][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.386222][ T308] cdc_ether 2-1:6.240: skipping garbage [ 24.391767][ T308] usb 2-1: bad CDC descriptors [ 24.397216][ T5] usb 1-1: config 0 descriptor?? [ 24.402282][ T308] usb 2-1: unsupported MDLM descriptors [ 24.408131][ T308] cdc_acm 2-1:6.240: skipping garbage [ 24.412685][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 24.462942][ T15] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.504123][ T15] usb 4-1: not running at top speed; connect to a high speed hub [ 24.552747][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 24.583669][ T15] usb 4-1: config 2 has an invalid interface number: 65 but max is 0 [ 24.591818][ T15] usb 4-1: config 2 has no interface number 0 [ 24.593339][ T53] usb 2-1: USB disconnect, device number 2 [ 24.598239][ T15] usb 4-1: config 2 interface 65 has no altsetting 0 [ 24.645233][ T308] usb 1-1: USB disconnect, device number 2 [ 24.732787][ T20] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 24.741934][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.750009][ T20] usb 5-1: Product: syz [ 24.754359][ T20] usb 5-1: Manufacturer: syz [ 24.758948][ T20] usb 5-1: SerialNumber: syz [ 24.762930][ T15] usb 4-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= d.c9 [ 24.772608][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.780659][ T15] usb 4-1: Product: syz [ 24.784905][ T15] usb 4-1: Manufacturer: syz [ 24.789475][ T15] usb 4-1: SerialNumber: syz [ 24.792799][ T340] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 25.113146][ T15] usb 4-1: NDI device with a latency value of 1 [ 25.132773][ T15] ftdi_sio 4-1:2.65: FTDI USB Serial Device converter detected [ 25.140940][ T15] usb 4-1: Detected FT232H [ 25.162773][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 25.182762][ T15] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 25.192852][ T20] usb 5-1: MIDIStreaming interface descriptor not found [ 25.202804][ T15] ftdi_sio 4-1:2.65: GPIO initialisation failed: -71 [ 25.204717][ T20] usb 5-1: USB disconnect, device number 2 [ 25.220272][ T15] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 25.247164][ T15] usb 4-1: USB disconnect, device number 2 [ 25.268939][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 25.280766][ T15] ftdi_sio 4-1:2.65: device disconnected [ 25.334638][ T348] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 25.352817][ T348] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.362285][ T348] F2FS-fs (loop2): invalid crc value [ 25.369367][ T348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.391147][ T348] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.398299][ T348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 25.405956][ T309] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 25.463663][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.482709][ T53] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.654104][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 25.654114][ T24] audit: type=1400 audit(1785931719.659:134): avc: denied { create } for pid=361 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.778560][ T366] Illegal XDP return value 4294967274, expect packet loss! [ 25.863086][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.873072][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 25.906732][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 26.058203][ T309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.068703][ T309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.098137][ T24] audit: type=1400 audit(1785931720.099:135): avc: denied { mount } for pid=369 comm="syz.2.16" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 26.133347][ T370] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 26.217554][ T24] audit: type=1400 audit(1785931720.219:136): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 26.237605][ T53] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 26.246792][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.254836][ T53] usb 1-1: Product: syz [ 26.259143][ T53] usb 1-1: Manufacturer: syz [ 26.264006][ T53] usb 1-1: SerialNumber: syz [ 26.269332][ T53] usb 1-1: config 0 descriptor?? [ 26.275935][ T360] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 26.282268][ T24] audit: type=1400 audit(1785931720.279:137): avc: denied { name_bind } for pid=373 comm="syz.2.17" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.284952][ T360] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.306449][ T24] audit: type=1400 audit(1785931720.279:138): avc: denied { node_bind } for pid=373 comm="syz.2.17" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.314714][ T352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.344192][ T375] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 26.345071][ T352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.352756][ T309] usb 2-1: string descriptor 0 read error: -22 [ 26.359324][ T360] F2FS-fs (loop4): invalid crc value [ 26.365227][ T375] : renamed from team_slave_1 [ 26.371425][ T24] audit: type=1400 audit(1785931720.279:139): avc: denied { setopt } for pid=373 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.375902][ T309] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 26.405000][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.422316][ T360] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.444676][ T360] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.452185][ T360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 26.460880][ T309] usb 2-1: 0:1 : does not exist [ 26.465879][ T309] usb 2-1: 0:2 : does not exist [ 26.584671][ T24] audit: type=1400 audit(1785931720.589:140): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.622715][ T24] audit: type=1400 audit(1785931720.609:141): avc: denied { create } for pid=386 comm="syz.3.20" dev="anon_inodefs" ino=15987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.652352][ T352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.659758][ T352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.667086][ T24] audit: type=1400 audit(1785931720.609:142): avc: denied { ioctl } for pid=386 comm="syz.3.20" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15987 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.763260][ T389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 26.774483][ T389] System zones: 1-3, 19-19, 35-36 [ 26.785469][ T389] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue [ 26.837446][ T389] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.889772][ T393] udc-core: couldn't find an available UDC or it's busy [ 26.896805][ T393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.935924][ T391] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11'. [ 26.951196][ T24] audit: type=1400 audit(1785931720.949:143): avc: denied { mounton } for pid=394 comm="syz.4.18" path="/3/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 27.031991][ T300] tipc: Subscription rejected, illegal request [ 27.152737][ T53] Error reading MAC address [ 27.158686][ T53] usb 1-1: USB disconnect, device number 3 [ 27.242441][ T399] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.252823][ T399] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.345980][ T403] "2 [ 27.662744][ T422] EXT4-fs (loop2): Ignoring removed orlov option [ 27.671898][ T425] binder: 424:425 unknown command 29196 [ 27.677674][ T425] binder: 424:425 ioctl c0306201 0 returned -22 [ 27.694099][ T422] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 27.732550][ T427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.749561][ T427] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 27.759953][ T427] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 27.769814][ T427] EXT4-fs (loop0): re-mounted. Opts: journal_ioprio=0x0000000000000001,delalloc,init_itable,grpjquota=,data=writeback,noblock_validity,minixdf,journal_checksum,acl,max_batch_time=0x0000000000000007, [ 27.812859][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.872725][ T15] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.992717][ T308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.050736][ T440] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use) [ 28.182910][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.194135][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.203992][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.217065][ T5] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.226287][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.237891][ T15] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 28.250241][ T5] usb 5-1: config 0 descriptor?? [ 28.255605][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.274729][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.291129][ T15] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 28.307918][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.324092][ T15] usb 4-1: config 0 descriptor?? [ 28.362738][ T308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.362769][ T309] usb 2-1: 6:0: cannot get min/max values for control 4 (id 6) [ 28.377177][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.462801][ T308] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.471907][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.479965][ T308] usb 3-1: SerialNumber: syz [ 28.485813][ T309] usb 2-1: USB disconnect, device number 3 [ 28.716018][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.784801][ T455] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 28.872719][ T53] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.884981][ T420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.891875][ T420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 28.899568][ T420] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 28.913721][ T420] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.928691][ T420] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.953373][ T308] usb 3-1: 0:2 : does not exist [ 28.968529][ T308] usb 3-1: USB disconnect, device number 2 [ 29.012818][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 29.018820][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 29.028319][ T5] usb 5-1: USB disconnect, device number 3 [ 29.112709][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 29.238647][ T464] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.246222][ T15] logitech 0003:046D:C29C.0001: unknown main item tag 0x4 [ 29.255715][ T15] logitech 0003:046D:C29C.0001: item fetching failed at offset 4/5 [ 29.263779][ T15] logitech 0003:046D:C29C.0001: parse failed [ 29.271952][ T15] logitech: probe of 0003:046D:C29C.0001 failed with error -22 [ 29.302869][ T53] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.353503][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.376159][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 29.393344][ T53] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.403764][ T53] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.413178][ T477] EXT4-fs (loop1): dax option not supported [ 29.529054][ T480] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext2 [ 29.582782][ T53] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 29.591879][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.600315][ T53] usb 1-1: Product: syz [ 29.604585][ T53] usb 1-1: Manufacturer: syz [ 29.609495][ T53] usb 1-1: SerialNumber: syz [ 29.685409][ T491] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 29.693097][ T491] FAT-fs (loop4): Filesystem has been set read-only [ 29.700014][ T491] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 29.710720][ T491] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 29.802875][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.973193][ T53] usb 1-1: cannot setup if 1: error -71 [ 29.993844][ T496] overlayfs: invalid origin (0000) [ 29.999965][ T53] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 30.052827][ T309] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.083131][ T53] usb 1-1: cannot setup if 1: error -71 [ 30.089676][ T53] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 30.158519][ T53] usb 1-1: USB disconnect, device number 4 [ 30.242832][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.294232][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.313271][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.326407][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 30.363545][ T499] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.562805][ T309] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 49, changing to 7 [ 30.582843][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.592162][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.600455][ T25] usb 2-1: Product: syz [ 30.604732][ T25] usb 2-1: Manufacturer: syz [ 30.609350][ T25] usb 2-1: SerialNumber: syz [ 30.632396][ T308] usb 4-1: USB disconnect, device number 3 [ 30.662848][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 30.662857][ T24] audit: type=1326 audit(1785931724.669:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a8b7784e code=0x7ffc0000 [ 30.663152][ T25] hub 2-1:1.0: bad descriptor, ignoring hub [ 30.699486][ T25] hub: probe of 2-1:1.0 failed with error -5 [ 30.772746][ T309] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.783267][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.792150][ T309] usb 3-1: Product: ⻄啯䎚钶෴뫸䄝ㄸ뼦탚멩禍幋肑瀀䤮靜䖙햸鐐ཕƴꯤ닂汶鯱㐦៿ή䒬碪⣴왃벰︛곰ǖ鶼悗蔐僤蓳忥栔覂諸ૻ솣㈅⡙紴榐Ḛ䢨瀘䞄쌂㽵銚藆攈츍㗊鞠؞ꫢᒸᗏ쭲毴튒浊둶㦰㝊튕硞඾ꃗ荬অ띑뫆၈삽⽢⢡ꕯ酕ꂈ캕貦 [ 30.823393][ T309] usb 3-1: Manufacturer: ф [ 30.827940][ T309] usb 3-1: SerialNumber: 尧팚ᚫ䥶鲠負筟栜⣻ߓ坮뱷狲⒥⼥釅쌳絅婽㔴顨澲꽖ꅖ╫倱쀍젘チ㾂䀕⾯诎ꎫ찊症撋숴㺗鞏쟜뼯᪀줳ﺰ魦重칸뜕ᄔ肠䲉㢱黋ﱵಚ勭剓ሱ癓祩⚳∛ᕣꂀ⌏槞䌽圔諜탰Ꞟ泖韅 [ 30.863029][ T24] audit: type=1326 audit(1785931724.869:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8bb7019 code=0x7ffc0000 [ 30.888063][ T24] audit: type=1326 audit(1785931724.869:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8bb7019 code=0x7ffc0000 [ 30.888614][ T25] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 30.913787][ T24] audit: type=1326 audit(1785931724.869:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8bb7019 code=0x7ffc0000 [ 30.923858][ T53] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.948262][ T24] audit: type=1326 audit(1785931724.869:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59a8bb6cab code=0x7ffc0000 [ 30.980162][ T24] audit: type=1326 audit(1785931724.869:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59a8bb6cab code=0x7ffc0000 [ 31.004930][ T24] audit: type=1326 audit(1785931724.889:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f59a8b7784e code=0x7ffc0000 [ 31.088072][ T24] audit: type=1326 audit(1785931725.089:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8bb7019 code=0x7ffc0000 [ 31.112729][ T24] audit: type=1326 audit(1785931725.089:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8bb7019 code=0x7ffc0000 [ 31.137476][ T24] audit: type=1326 audit(1785931725.089:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.41" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a8bb7019 code=0x7ffc0000 [ 31.192731][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 31.298037][ T525] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 31.307266][ T525] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.317666][ T53] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 31.325822][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.336148][ T53] usb 1-1: config 0 has no interface number 0 [ 31.336883][ T531] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 31.351897][ T531] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.402520][ T531] fs-verity: sha512 using implementation "sha512-avx2" [ 31.424757][ T531] xt_hashlimit: size too large, truncated to 1048576 [ 31.492781][ T53] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 31.508016][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.533630][ T53] usb 1-1: Product: syz [ 31.542908][ T53] usb 1-1: Manufacturer: syz [ 31.552805][ T53] usb 1-1: SerialNumber: syz [ 31.570912][ T53] usb 1-1: config 0 descriptor?? [ 31.613214][ T25] usb 2-1: USB disconnect, device number 4 [ 31.622054][ T25] usblp0: removed [ 31.742738][ T503] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 31.747275][ T538] F2FS-fs (loop3): invalid crc value [ 31.756511][ T538] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.778492][ T538] F2FS-fs (loop3): Start checkpoint disabled! [ 31.785293][ T538] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 31.828382][ T502] usb 1-1: USB disconnect, device number 5 [ 31.907689][ T300] attempt to access beyond end of device [ 31.907689][ T300] loop3: rw=1, want=79880, limit=40427 [ 31.921883][ T300] attempt to access beyond end of device [ 31.921883][ T300] loop3: rw=1, want=81920, limit=40427 [ 31.937202][ T300] attempt to access beyond end of device [ 31.937202][ T300] loop3: rw=1, want=53248, limit=40427 [ 31.957314][ T300] attempt to access beyond end of device [ 31.957314][ T300] loop3: rw=1, want=65536, limit=40427 [ 31.979449][ T300] attempt to access beyond end of device [ 31.979449][ T300] loop3: rw=1, want=77824, limit=40427 [ 32.000185][ T300] attempt to access beyond end of device [ 32.000185][ T300] loop3: rw=1, want=88576, limit=40427 [ 32.012473][ T300] attempt to access beyond end of device [ 32.012473][ T300] loop3: rw=2049, want=40984, limit=40427 [ 32.103137][ T503] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.120553][ T503] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.134559][ T503] usb 5-1: config 0 interface 0 has no altsetting 0 [ 32.141365][ T503] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 32.150844][ T503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.160992][ T503] usb 5-1: config 0 descriptor?? [ 32.248271][ T558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 32.531295][ T503] usbhid 5-1:0.0: can't add hid device: -71 [ 32.537305][ T503] usbhid: probe of 5-1:0.0 failed with error -71 [ 32.546406][ T503] usb 5-1: USB disconnect, device number 4 [ 32.556139][ T560] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 32.642744][ T309] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.662901][ T309] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 32.670922][ T565] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.695988][ T565] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.697048][ T309] usb 3-1: USB disconnect, device number 3 [ 32.712727][ T308] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 32.858191][ T594] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 32.868041][ T594] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 32.875672][ T594] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.887481][ T598] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 32.888496][ T594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e057c01c, mo2=0002] [ 32.900438][ T598] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.907847][ T594] System zones: 0-1, 3-36 [ 32.908895][ T594] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,barrier=0x0000000000000003,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 33.092706][ T503] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.132746][ T308] usb 1-1: config 6 has an invalid interface number: 240 but max is 0 [ 33.141121][ T308] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 33.151704][ T308] usb 1-1: config 6 has no interface number 0 [ 33.153172][ T616] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 33.160694][ T308] usb 1-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 33.165693][ T616] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.185636][ T616] EXT4-fs (loop1): Ignoring removed bh option [ 33.191864][ T616] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 33.199773][ T308] usb 1-1: config 6 interface 240 has no altsetting 0 [ 33.270301][ T625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 33.287093][ T601] F2FS-fs (loop2): Test dummy encryption mode enabled [ 33.295093][ T601] F2FS-fs (loop2): invalid crc value [ 33.317925][ T601] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.332799][ T503] usb 4-1: Using ep0 maxpacket: 8 [ 33.337971][ T309] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.343665][ T601] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.462781][ T503] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 33.482594][ T638] Zero length message leads to an empty skb [ 33.482705][ T503] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid wMaxPacketSize 0 [ 33.488611][ T308] usb 1-1: string descriptor 0 read error: -22 [ 33.512825][ T503] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 0 [ 33.522735][ T308] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 33.531872][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.532797][ T503] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.592897][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 33.613283][ T308] cdc_ether 1-1:6.240: skipping garbage [ 33.619056][ T308] usb 1-1: bad CDC descriptors [ 33.619563][ T642] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.634613][ T642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.637726][ T308] usb 1-1: unsupported MDLM descriptors [ 33.646631][ T642] EXT4-fs (loop1): 1 truncate cleaned up [ 33.650209][ T308] cdc_acm 1-1:6.240: skipping garbage [ 33.655972][ T642] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 33.712848][ T503] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 33.722738][ T503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.736376][ T503] usb 4-1: Product: ᰉ [ 33.741190][ T503] usb 4-1: Manufacturer: 塘聿邎న쭛厉磊௢궓穹콩ጳ⫴鶕酋ꏷ䒛햻⋶椪턛䎣ꖡ겡ᇽ켕䜍ꮌ⥤猪㹿뉰昅ﰅⲳ겁픤▝郛塈䂳㿛ᬶ蟎ᡧ㯙胹Ⱔม誷ꬫ鋜蝄䈘剪㰄蘫藏잫 [ 33.763356][ T503] usb 4-1: SerialNumber: ዕϝ폤ﳔ⅂Ⅎ鞅퀲ﰮ⯙吖⠠뮎땊⢔㮻鸛魬뷊钹꥝碖뮷帗ᄰ䖙ᑝ>荢屴ꆦꂛꝪ椱곽鹤䞫옔㹝뭫 [ 33.785816][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 33.812776][ T590] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 33.826910][ T15] usb 1-1: USB disconnect, device number 6 [ 33.872870][ T309] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 34.042756][ T309] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 34.051871][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.060109][ T309] usb 5-1: Product: syz [ 34.064312][ T309] usb 5-1: Manufacturer: syz [ 34.068898][ T309] usb 5-1: SerialNumber: syz [ 34.073876][ T503] usblp0: Disabling reads from problematic bidirectional printer [ 34.093478][ T503] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 9 proto 2 vid 0x03F0 pid 0x0004 [ 34.106252][ T503] usb 4-1: USB disconnect, device number 4 [ 34.113164][ T503] usblp0: removed [ 34.122772][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.392831][ T25] usb 2-1: device descriptor read/64, error -71 [ 34.395550][ T662] xt_hashlimit: overflow, try lower: 0/0 [ 34.432761][ T309] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 34.441116][ T309] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 34.450806][ T309] usb 5-1: USB disconnect, device number 5 [ 34.782710][ T25] usb 2-1: device descriptor read/64, error -71 [ 34.832702][ T53] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.003060][ T679] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.009968][ T679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.020829][ T679] EXT4-fs (loop4): 1 truncate cleaned up [ 35.026670][ T679] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 35.052724][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.072750][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 35.272760][ T53] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 118, changing to 7 [ 35.322760][ T25] usb 2-1: device descriptor read/64, error -71 [ 35.352716][ T502] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 35.497796][ T687] Dead loop on virtual device ip6_vti0, fix it urgently! [ 35.505000][ T688] Dead loop on virtual device ip6_vti0, fix it urgently! [ 35.522803][ T53] usb 4-1: string descriptor 0 read error: -22 [ 35.532586][ T53] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 35.541828][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.583282][ T53] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 35.591724][ T53] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 35.598721][ T502] usb 5-1: Using ep0 maxpacket: 16 [ 35.709467][ T24] kauditd_printk_skb: 322 callbacks suppressed [ 35.709477][ T24] audit: type=1326 audit(1785931729.709:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=695 comm="syz.0.98" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4286aa019 code=0x0 [ 35.712755][ T25] usb 2-1: device descriptor read/64, error -71 [ 35.746267][ T502] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 35.754439][ T502] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 35.764897][ T502] usb 5-1: config 32 has no interface number 0 [ 35.771047][ T502] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 35.780103][ T502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.789516][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 35.803214][ T308] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 35.817285][ T15] usb 4-1: USB disconnect, device number 5 [ 35.834862][ T502] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 35.841934][ T502] uvcvideo: No valid video chain found. [ 35.892750][ T25] usb usb2-port1: attempt power cycle [ 35.933320][ T697] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 35.940654][ T697] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 35.950175][ T697] F2FS-fs (loop0): invalid crc value [ 35.956234][ T697] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 35.976241][ T697] F2FS-fs (loop0): Start checkpoint disabled! [ 35.983167][ T697] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 35.990196][ T697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 36.002100][ T24] audit: type=1400 audit(1785931729.999:554): avc: denied { ioctl } for pid=695 comm="syz.0.98" path="/17/file0/file0" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.030173][ T24] audit: type=1400 audit(1785931730.029:555): avc: denied { getopt } for pid=695 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.050190][ T24] audit: type=1400 audit(1785931730.039:556): avc: denied { setattr } for pid=695 comm="syz.0.98" name="" dev="pipefs" ino=13075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 36.072287][ T24] audit: type=1400 audit(1785931730.049:557): avc: denied { nlmsg_read } for pid=682 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.091594][ T15] usb 5-1: USB disconnect, device number 6 [ 36.222789][ T308] usb 3-1: config 6 has an invalid interface number: 240 but max is 0 [ 36.231032][ T308] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 36.241185][ T308] usb 3-1: config 6 has no interface number 0 [ 36.247323][ T308] usb 3-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 36.260367][ T308] usb 3-1: config 6 interface 240 has no altsetting 0 [ 36.302729][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.373760][ T701] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.502733][ T308] usb 3-1: string descriptor 0 read error: -22 [ 36.508969][ T308] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 36.518019][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.522729][ T25] usb 2-1: device descriptor read/8, error -71 [ 36.546701][ T300] attempt to access beyond end of device [ 36.546701][ T300] loop0: rw=2049, want=45104, limit=40427 [ 36.573120][ T308] cdc_ether 3-1:6.240: skipping garbage [ 36.578756][ T308] usb 3-1: bad CDC descriptors [ 36.583902][ T308] usb 3-1: unsupported MDLM descriptors [ 36.589605][ T308] cdc_acm 3-1:6.240: skipping garbage [ 36.753364][ T709] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.760283][ T709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.762935][ T712] xt_hashlimit: size too large, truncated to 1048576 [ 36.786990][ T502] usb 3-1: USB disconnect, device number 4 [ 36.792968][ T25] usb 2-1: device descriptor read/8, error -71 [ 36.793534][ T709] EXT4-fs (loop4): 1 truncate cleaned up [ 36.814031][ T709] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 36.883074][ T24] audit: type=1400 audit(1785931730.879:558): avc: denied { read } for pid=717 comm="syz.1.106" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 36.916293][ T24] audit: type=1400 audit(1785931730.879:559): avc: denied { open } for pid=717 comm="syz.1.106" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.096065][ T714] F2FS-fs (loop0): invalid crc value [ 37.102401][ T714] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 37.122263][ T714] F2FS-fs (loop0): recover fsync data on readonly fs [ 37.129232][ T714] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 37.136342][ T714] F2FS-fs (loop0): checkpoint=disable on readonly fs [ 37.212743][ T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 37.286105][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.303699][ T308] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 37.313736][ T24] audit: type=1326 audit(1785931731.319:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=728 comm="syz.2.109" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbca2be6019 code=0x0 [ 37.425234][ T729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.435161][ T729] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 37.452762][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 37.462768][ T25] usb 2-1: device descriptor read/8, error -71 [ 37.473005][ T727] F2FS-fs (loop0): invalid crc value [ 37.479681][ T727] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 37.500502][ T727] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.519947][ T727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.108'. [ 37.572785][ T53] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.582973][ T53] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.614264][ T24] audit: type=1400 audit(1785931731.619:561): avc: denied { append } for pid=738 comm="syz.0.110" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.637943][ T24] audit: type=1400 audit(1785931731.619:562): avc: denied { append } for pid=738 comm="syz.0.110" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.714335][ T739] EXT4-fs (loop0): Unrecognized mount option "subj_role=/dev/fuse" or missing value [ 37.752796][ T25] usb 2-1: device descriptor read/8, error -71 [ 37.759052][ T53] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 37.762782][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.768136][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.783840][ T53] usb 5-1: Product: syz [ 37.787988][ T53] usb 5-1: Manufacturer: syz [ 37.792562][ T53] usb 5-1: SerialNumber: syz [ 37.832119][ T745] netlink: 5 bytes leftover after parsing attributes in process `syz.0.111'. [ 37.841119][ T744] netlink: 9 bytes leftover after parsing attributes in process `syz.0.111'. [ 37.850447][ T744] device gretap0 entered promiscuous mode [ 37.882804][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.882822][ T25] usb usb2-port1: unable to enumerate USB device [ 37.894315][ T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.916328][ T750] binder: 749:750 ioctl 400c620e 2000000000c0 returned -22 [ 37.973398][ T750] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #2: comm syz.0.113: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 261(261) [ 37.991364][ T750] EXT4-fs (loop0): Remounting filesystem read-only [ 37.998254][ T750] EXT4-fs (loop0): get root inode failed [ 38.004071][ T750] EXT4-fs (loop0): mount failed [ 38.093622][ T754] udc-core: couldn't find an available UDC or it's busy [ 38.102863][ T754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.143523][ T758] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.150812][ T758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.161685][ T758] EXT4-fs (loop0): 1 truncate cleaned up [ 38.162761][ T308] usb 4-1: string descriptor 0 read error: -22 [ 38.171050][ T53] usb 5-1: USB disconnect, device number 7 [ 38.173596][ T308] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 38.188475][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.195511][ T758] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 38.233462][ T308] usb 4-1: 0:1 : does not exist [ 38.238322][ T308] usb 4-1: 0:2 : does not exist [ 38.412755][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.479600][ T723] udc-core: couldn't find an available UDC or it's busy [ 38.486639][ T723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.494539][ T723] netlink: 2 bytes leftover after parsing attributes in process `syz.3.107'. [ 38.672752][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 38.697299][ T772] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 38.705117][ T308] usb 4-1: 6:0: cannot get min/max values for control 4 (id 6) [ 38.792830][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.797852][ T308] usb 4-1: USB disconnect, device number 6 [ 38.803790][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 38.829218][ T25] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 38.838407][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.852000][ T25] usb 3-1: config 0 descriptor?? [ 39.003111][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.106186][ T782] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 39.111637][ T782] loop3: partition table partially beyond EOD, truncated [ 39.119369][ T782] loop3: p2 start 4278190080 is beyond EOD, truncated [ 39.127262][ T782] loop3: p4 size 8192 extends beyond EOD, truncated [ 39.135056][ T782] loop3: p6 size 8192 extends beyond EOD, truncated [ 39.142832][ T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 39.151784][ T791] erofs: (device loop0): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 39.319497][ T799] SELinux: duplicate or incompatible mount options [ 39.322334][ T800] SELinux: duplicate or incompatible mount options [ 39.333195][ T25] hid (null): unknown global tag 0xe [ 39.339789][ T25] hid-multitouch 0003:0EEF:72D0.0002: unknown global tag 0xe [ 39.347221][ T25] hid-multitouch 0003:0EEF:72D0.0002: item 0 2 1 14 parsing failed [ 39.355458][ T25] hid-multitouch: probe of 0003:0EEF:72D0.0002 failed with error -22 [ 39.373543][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.382795][ T794] udevd[794]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 39.383461][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 39.397412][ T447] udevd[447]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.399223][ T804] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.409553][ T301] udevd[301]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.414955][ T804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.425412][ T326] udevd[326]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 39.439296][ T804] EXT4-fs (loop3): 1 truncate cleaned up [ 39.449873][ T447] udevd[447]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.451170][ T326] udevd[326]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 39.460891][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.470262][ T804] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 39.480441][ T794] udevd[794]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 39.509082][ T808] netlink: 'syz.0.125': attribute type 29 has an invalid length. [ 39.602834][ T53] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 39.611183][ T53] usb 5-1: config 0 has no interface number 0 [ 39.615337][ T810] EXT4-fs error (device loop3): ext4_quota_enable:6451: inode #4: comm syz.3.128: iget: checksum invalid [ 39.628924][ T810] EXT4-fs error (device loop3): ext4_quota_enable:6454: comm syz.3.128: Bad quota inode: 4, type: 1 [ 39.640009][ T810] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 39.655025][ T810] EXT4-fs (loop3): mount failed [ 39.772921][ T53] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 39.782004][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.790135][ T53] usb 5-1: Product: syz [ 39.794321][ T53] usb 5-1: Manufacturer: syz [ 39.798894][ T53] usb 5-1: SerialNumber: syz [ 39.804096][ T53] usb 5-1: config 0 descriptor?? [ 39.934600][ T819] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.943066][ T819] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.130: inode #1: comm syz.1.130: iget: illegal inode # [ 39.956961][ T819] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.130: error while reading EA inode 1 err=-117 [ 39.969618][ T819] EXT4-fs (loop1): 1 orphan inode deleted [ 39.975400][ T819] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,test_dummy_encryption=v1,discard,dioread_lock,noblock_validity,noquota,,errors=continue [ 40.037802][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 40.092789][ T53] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 40.099306][ T53] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 40.115305][ T53] usb 5-1: USB disconnect, device number 8 [ 40.170011][ T825] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.183678][ T825] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 40.190865][ T825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.201596][ T825] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.131: bad orphan inode 131083 [ 40.212447][ T825] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,mblk_io_submit,usrquota,,errors=continue [ 40.227044][ T828] EXT4-fs (loop0): 1 truncate cleaned up [ 40.233122][ T828] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,inode_readahead_blks=0x0000000000000800,nodiscard,,errors=continue [ 40.236563][ T825] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 40.266177][ T825] overlayfs: upper fs needs to support d_type. [ 40.277713][ T279] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /25/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 40.451355][ T838] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.458529][ T838] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.466027][ T838] device bridge_slave_0 entered promiscuous mode [ 40.475103][ T838] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.482207][ T838] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.489570][ T838] device bridge_slave_1 entered promiscuous mode [ 40.496002][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.527429][ T838] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.534505][ T838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.541722][ T838] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.548756][ T838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.556067][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 40.572349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.580585][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.587905][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.593124][ T287] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 40.624193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.632444][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.639505][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.646944][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 40.646991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.657815][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64 [ 40.677555][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.681067][ T846] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.684633][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.698002][ T846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.699146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.709469][ T846] EXT4-fs (loop4): 1 truncate cleaned up [ 40.716683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.721807][ T846] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 40.754253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.766356][ T845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.774532][ T845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.781965][ T845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.792125][ T838] device veth0_vlan entered promiscuous mode [ 40.808121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.812689][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 40.812700][ T24] audit: type=1400 audit(1785931734.809:590): avc: denied { mount } for pid=849 comm="syz.4.139" name="/" dev="ramfs" ino=17715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.816358][ T25] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 40.830279][ T24] audit: type=1400 audit(1785931734.819:591): avc: denied { mounton } for pid=849 comm="syz.4.139" path="/25/file0" dev="ramfs" ino=17715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 40.845193][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.855144][ T838] device veth1_macvtap entered promiscuous mode [ 40.875902][ T25] usb 4-1: Product: syz [ 40.893884][ T25] usb 4-1: Manufacturer: syz [ 40.898506][ T25] usb 4-1: SerialNumber: syz [ 40.905632][ T24] audit: type=1400 audit(1785931734.909:592): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.922757][ T816] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 40.932451][ T816] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 40.944239][ T24] audit: type=1400 audit(1785931734.939:593): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.964848][ T845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.973533][ T845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.990000][ T24] audit: type=1400 audit(1785931734.989:594): avc: denied { mounton } for pid=838 comm="syz-executor" path="/root/syzkaller.9DiYxK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.035281][ T24] audit: type=1400 audit(1785931735.039:595): avc: denied { create } for pid=854 comm="syz.5.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.055224][ T300] device bridge_slave_1 left promiscuous mode [ 41.062063][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.069580][ T24] audit: type=1400 audit(1785931735.039:596): avc: denied { ioctl } for pid=854 comm="syz.5.136" path="socket:[17082]" dev="sockfs" ino=17082 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.094238][ T300] device bridge_slave_0 left promiscuous mode [ 41.100525][ T24] audit: type=1326 audit(1785931735.059:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=854 comm="syz.5.136" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e7bab019 code=0x0 [ 41.101604][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.132759][ T287] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.140623][ T300] device veth1_macvtap left promiscuous mode [ 41.152227][ T857] udc-core: couldn't find an available UDC or it's busy [ 41.159770][ T856] fuse: Unknown parameter '0xffffffffffffffff' [ 41.159868][ T309] usb 3-1: USB disconnect, device number 5 [ 41.166069][ T24] audit: type=1400 audit(1785931735.159:598): avc: denied { setopt } for pid=854 comm="syz.5.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.173369][ T300] device veth0_vlan left promiscuous mode [ 41.197209][ T857] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.252805][ T287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.272686][ T287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.308487][ T860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.396282][ T863] EXT4-fs (loop2): Ignoring removed bh option [ 41.402721][ T863] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.411717][ T863] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.142: inode #1: comm syz.2.142: iget: illegal inode # [ 41.424911][ T863] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.142: error while reading EA inode 1 err=-117 [ 41.437355][ T863] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.450743][ T863] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.142: inode #1: comm syz.2.142: iget: illegal inode # [ 41.464260][ T863] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.142: error while reading EA inode 1 err=-117 [ 41.476801][ T863] EXT4-fs (loop2): 1 orphan inode deleted [ 41.482638][ T863] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,bh,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,test_dummy_encryption,dioread_lock,noblock_validity,bsddf,,errors=continue [ 41.532802][ T287] usb 1-1: string descriptor 0 read error: -22 [ 41.542438][ T287] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 41.562010][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.623951][ T287] usb 1-1: 0:1 : does not exist [ 41.629179][ T287] usb 1-1: 0:2 : does not exist [ 41.682736][ T868] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz.2.142: deleted inode referenced: 15 [ 41.698291][ T868] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 41.722725][ T24] audit: type=1400 audit(1785931735.709:599): avc: denied { relabelto } for pid=862 comm="syz.2.142" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 41.785694][ T853] F2FS-fs (loop4): Test dummy encryption mode enabled [ 41.902195][ T836] udc-core: couldn't find an available UDC or it's busy [ 41.909525][ T836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.919273][ T836] netlink: 2 bytes leftover after parsing attributes in process `syz.0.133'. [ 41.986193][ T853] F2FS-fs (loop4): invalid crc value [ 42.300894][ T853] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.400384][ T853] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.459034][ T874] fuse: Bad value for 'fd' [ 42.515350][ T880] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,data_err=abort,,errors=continue [ 42.592791][ T287] usb 1-1: 6:0: cannot get min/max values for control 4 (id 6) [ 42.618915][ T895] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.619502][ T880] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 42.628599][ T856] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 42.638797][ T895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.663203][ T856] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 42.663450][ T898] exfat: Deprecated parameter 'utf8' [ 42.682514][ T287] usb 1-1: USB disconnect, device number 7 [ 42.692582][ T898] exfat: Unknown parameter 'zero_size_dir' [ 42.693115][ T856] F2FS-fs (loop5): Found nat_bits in checkpoint [ 42.727494][ T895] EXT4-fs (loop3): 1 truncate cleaned up [ 42.733388][ T856] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 42.736310][ T895] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 42.740522][ T856] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 42.772782][ T25] usb 4-1: MIDIStreaming interface descriptor not found [ 42.836846][ T25] usb 4-1: USB disconnect, device number 7 [ 42.870939][ T906] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 42.951115][ T906] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 43.026618][ T920] EXT4-fs (loop0): Ignoring removed nobh option [ 43.033121][ T920] EXT4-fs (loop0): Unrecognized mount option "grpquota.." or missing value [ 43.069269][ T929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=929 comm=syz.5.154 [ 43.091576][ T931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 43.108624][ T933] device syzkaller0 entered promiscuous mode [ 43.221554][ T933] FAT-fs (loop4): Directory bread(block 64) failed [ 43.228452][ T933] FAT-fs (loop4): Directory bread(block 65) failed [ 43.240297][ T950] EXT4-fs (loop2): Test dummy encryption mode enabled [ 43.247358][ T950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.258971][ T933] FAT-fs (loop4): Directory bread(block 66) failed [ 43.265609][ T933] FAT-fs (loop4): Directory bread(block 67) failed [ 43.273091][ T950] EXT4-fs (loop2): 1 truncate cleaned up [ 43.273542][ T933] FAT-fs (loop4): Directory bread(block 68) failed [ 43.282489][ T950] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 43.285567][ T933] FAT-fs (loop4): Directory bread(block 69) failed [ 43.320395][ T954] device veth0_to_bond entered promiscuous mode [ 43.326805][ T933] FAT-fs (loop4): Directory bread(block 70) failed [ 43.328126][ T954] device macsec1 entered promiscuous mode [ 43.340170][ T933] FAT-fs (loop4): Directory bread(block 71) failed [ 43.347057][ T933] FAT-fs (loop4): Directory bread(block 72) failed [ 43.353752][ T933] FAT-fs (loop4): Directory bread(block 73) failed [ 43.423829][ T958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 43.435170][ T958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 43.456909][ T25] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 43.643882][ T966] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 43.651992][ T966] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 43.671763][ T968] FAT-fs (loop5): bogus number of reserved sectors [ 43.678587][ T968] FAT-fs (loop5): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 43.692949][ T968] FAT-fs (loop5): Can't find a valid FAT filesystem [ 43.709475][ T958] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.716716][ T958] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.736286][ T933] attempt to access beyond end of device [ 43.736286][ T933] loop4: rw=2049, want=1352, limit=256 [ 43.747580][ T933] attempt to access beyond end of device [ 43.747580][ T933] loop4: rw=2049, want=1512, limit=256 [ 43.758833][ T933] attempt to access beyond end of device [ 43.758833][ T933] loop4: rw=2049, want=1832, limit=256 [ 43.775240][ T933] attempt to access beyond end of device [ 43.775240][ T933] loop4: rw=2049, want=9832, limit=256 [ 43.788754][ T933] attempt to access beyond end of device [ 43.788754][ T933] loop4: rw=2049, want=10528, limit=256 [ 43.821287][ T933] attempt to access beyond end of device [ 43.821287][ T933] loop4: rw=524288, want=1352, limit=256 [ 43.832838][ T933] attempt to access beyond end of device [ 43.832838][ T933] loop4: rw=524288, want=1512, limit=256 [ 43.844904][ T933] attempt to access beyond end of device [ 43.844904][ T933] loop4: rw=0, want=1232, limit=256 [ 43.855724][ T933] attempt to access beyond end of device [ 43.855724][ T933] loop4: rw=0, want=1232, limit=256 [ 43.866623][ T933] attempt to access beyond end of device [ 43.866623][ T933] loop4: rw=0, want=1232, limit=256 [ 43.877615][ T966] EXT4-fs (loop2): Test dummy encryption mode enabled [ 43.892790][ T966] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 43.897111][ T973] EXT4-fs (loop5): Test dummy encryption mode enabled [ 43.911615][ T966] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 43.916018][ T973] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 43.924929][ T966] System zones: [ 43.930957][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.934668][ T966] 0-5 [ 43.935402][ T966] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 43.948058][ T973] EXT4-fs (loop5): 1 truncate cleaned up [ 44.002800][ T966] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #12: comm syz.2.165: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 44.020914][ T966] EXT4-fs (loop2): Remounting filesystem read-only [ 44.024984][ T973] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 44.052736][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.069506][ T966] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #12: comm syz.2.165: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 44.082694][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.203672][ T980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=980 comm=syz.0.171 [ 44.216556][ T980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=980 comm=syz.0.171 [ 44.229742][ T980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=980 comm=syz.0.171 [ 44.255022][ T980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=980 comm=syz.0.171 [ 44.344424][ T997] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.351378][ T997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.362238][ T997] EXT4-fs (loop0): 1 truncate cleaned up [ 44.368081][ T997] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 44.372730][ T25] usb 4-1: string descriptor 0 read error: -22 [ 44.387282][ T25] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 44.399024][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.410203][ T1003] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 44.434202][ T983] kvm: MONITOR instruction emulated as NOP! [ 44.443789][ T25] usb 4-1: 0:1 : does not exist [ 44.448771][ T25] usb 4-1: 0:2 : does not exist [ 44.646921][ T924] udc-core: couldn't find an available UDC or it's busy [ 44.653905][ T924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.661559][ T924] netlink: 2 bytes leftover after parsing attributes in process `syz.3.156'. [ 44.662703][ T308] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 44.782743][ T309] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 44.882777][ T25] usb 4-1: 6:0: cannot get min/max values for control 4 (id 6) [ 44.912738][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 44.965137][ T25] usb 4-1: USB disconnect, device number 8 [ 44.982503][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.071878][ T1013] device-mapper: ioctl: name not supplied when creating device [ 45.142940][ T309] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 45.151172][ T309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.152794][ T308] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.161568][ T309] usb 1-1: config 0 has no interface number 0 [ 45.169838][ T1013] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.203184][ T309] usb 1-1: config 0 interface 166 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 45.214479][ T309] usb 1-1: config 0 interface 166 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.272757][ T308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.286402][ T308] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 45.382842][ T309] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 45.391944][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.400163][ T309] usb 1-1: Product: syz [ 45.404433][ T309] usb 1-1: Manufacturer: syz [ 45.409175][ T309] usb 1-1: SerialNumber: syz [ 45.414293][ T309] usb 1-1: config 0 descriptor?? [ 45.432778][ T1007] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 45.473023][ T308] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.41 [ 45.482218][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.490228][ T308] usb 5-1: Product: syz [ 45.492698][ T25] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 45.494401][ T308] usb 5-1: Manufacturer: syz [ 45.506448][ T308] usb 5-1: SerialNumber: syz [ 45.542762][ T5] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 45.653172][ T1007] futex_wake_op: syz.0.178 tries to shift op by -1; fix this program [ 45.693150][ T309] net1080: probe of 1-1:0.166 failed with error -22 [ 45.701091][ T309] usb 1-1: USB disconnect, device number 8 [ 45.776452][ T308] usb 5-1: USB disconnect, device number 9 [ 45.802737][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 45.852742][ T25] usb 6-1: config 6 has an invalid interface number: 240 but max is 0 [ 45.861106][ T25] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 45.871411][ T25] usb 6-1: config 6 has no interface number 0 [ 45.877560][ T25] usb 6-1: config 6 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 45.890692][ T25] usb 6-1: config 6 interface 240 has no altsetting 0 [ 45.992762][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.132785][ T25] usb 6-1: string descriptor 0 read error: -22 [ 46.139035][ T25] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 46.148078][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.152743][ T5] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.163664][ T5] usb 4-1: can't read configurations, error -61 [ 46.193093][ T25] cdc_ether 6-1:6.240: skipping garbage [ 46.198728][ T25] usb 6-1: bad CDC descriptors [ 46.203734][ T25] usb 6-1: unsupported MDLM descriptors [ 46.209406][ T25] cdc_acm 6-1:6.240: skipping garbage [ 46.219556][ T1041] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.225092][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 46.225102][ T24] audit: type=1400 audit(1785931740.229:627): avc: denied { name_bind } for pid=1043 comm="syz.2.189" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 46.226802][ T1041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.265340][ T1041] EXT4-fs (loop0): 1 truncate cleaned up [ 46.271039][ T1041] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 46.283662][ T24] audit: type=1400 audit(1785931740.269:628): avc: denied { setopt } for pid=1051 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.283681][ T24] audit: type=1400 audit(1785931740.269:629): avc: denied { write } for pid=1051 comm="syz.4.191" path="socket:[17917]" dev="sockfs" ino=17917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.338718][ T5] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.395846][ T287] usb 6-1: USB disconnect, device number 2 [ 46.425662][ T24] audit: type=1400 audit(1785931740.429:630): avc: denied { listen } for pid=1043 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.592744][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 46.642700][ T308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 46.712727][ T25] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 46.752750][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.882690][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 46.892866][ T5] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.900665][ T5] usb 4-1: can't read configurations, error -61 [ 46.918857][ T5] usb usb4-port1: attempt power cycle [ 47.002766][ T308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 47.009529][ T308] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 47.018659][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.030268][ T308] usb 5-1: config 0 descriptor?? [ 47.072741][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.092681][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.102449][ T25] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 47.111707][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.124640][ T25] usb 1-1: config 0 descriptor?? [ 47.138386][ T1068] cgroup: syz.2.196 (1068) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 47.154777][ T1068] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 47.192772][ T309] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.332795][ T5] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.422771][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 47.452746][ T308] usbhid 5-1:0.0: can't add hid device: -32 [ 47.458840][ T308] usbhid: probe of 5-1:0.0 failed with error -32 [ 47.512730][ T337] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 47.582804][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.592752][ T309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.613664][ T25] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 47.621581][ T25] hid-generic 0003:0925:8066.0003: hidraw0: USB HID v0.00 Device [HID 0925:8066] on usb-dummy_hcd.0-1/input0 [ 47.702886][ T5] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.710514][ T5] usb 4-1: can't read configurations, error -61 [ 47.762753][ T309] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 47.772111][ T309] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 47.780314][ T309] usb 6-1: Product: syz [ 47.784506][ T309] usb 6-1: SerialNumber: syz [ 47.789739][ T309] usb 6-1: config 0 descriptor?? [ 47.792708][ T337] usb 3-1: device descriptor read/64, error -71 [ 47.814349][ T25] usb 1-1: USB disconnect, device number 9 [ 47.833148][ T309] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 47.840865][ T309] usb 6-1: Detected SIO [ 47.845481][ T309] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.872906][ T5] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.972758][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 48.034862][ T25] usb 6-1: USB disconnect, device number 3 [ 48.041389][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.050918][ T25] ftdi_sio 6-1:0.0: device disconnected [ 48.142735][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 48.192720][ T337] usb 3-1: device descriptor read/64, error -71 [ 48.266287][ T5] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 48.274103][ T5] usb 4-1: can't read configurations, error -71 [ 48.280513][ T5] usb usb4-port1: unable to enumerate USB device [ 48.469991][ T1078] tmpfs: Too few inodes for current use [ 48.484504][ T1078] netlink: 76 bytes leftover after parsing attributes in process `syz.3.197'. [ 48.493433][ T1078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.197'. [ 48.520936][ T24] audit: type=1400 audit(1785931742.469:631): avc: denied { remount } for pid=1072 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.542424][ T24] audit: type=1400 audit(1785931742.509:632): avc: denied { bind } for pid=1072 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.724399][ T1080] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=2 [ 48.734339][ T24] audit: type=1400 audit(1785931742.509:633): avc: denied { name_bind } for pid=1072 comm="syz.3.197" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 48.756927][ T1080] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 48.802939][ T1080] EXT4-fs (loop0): mount failed [ 48.813125][ T24] audit: type=1400 audit(1785931742.509:634): avc: denied { node_bind } for pid=1072 comm="syz.3.197" saddr=fe80::f src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.917436][ T1085] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 49.141262][ T24] audit: type=1400 audit(1785931743.139:635): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.142716][ T337] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 49.314127][ T1092] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.322936][ T1092] ================================================================== [ 49.331035][ T1092] BUG: KASAN: use-after-free in __ext4_iget+0x378/0x44e0 [ 49.338047][ T1092] Read of size 8 at addr ffff88811c70a558 by task syz.0.203/1092 [ 49.345742][ T1092] [ 49.348066][ T1092] CPU: 1 PID: 1092 Comm: syz.0.203 Not tainted syzkaller #0 [ 49.355318][ T1092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.365356][ T1092] Call Trace: [ 49.368632][ T1092] __dump_stack+0x21/0x24 [ 49.372945][ T1092] dump_stack_lvl+0x1a7/0x208 [ 49.377615][ T1092] ? show_regs_print_info+0x18/0x18 [ 49.382805][ T1092] ? thaw_kernel_threads+0x220/0x220 [ 49.385405][ T308] usb 5-1: USB disconnect, device number 10 [ 49.388089][ T1092] ? _raw_spin_lock+0x94/0xf0 [ 49.388103][ T1092] print_address_description+0x7f/0x2c0 [ 49.388121][ T1092] ? __ext4_iget+0x378/0x44e0 [ 49.408837][ T1092] kasan_report+0x100/0x140 [ 49.413336][ T1092] ? __ext4_iget+0x378/0x44e0 [ 49.418003][ T1092] __asan_report_load8_noabort+0x14/0x20 [ 49.423612][ T1092] __ext4_iget+0x378/0x44e0 [ 49.428099][ T1092] ? __kasan_check_write+0x14/0x20 [ 49.432548][ T337] usb 3-1: device descriptor read/64, error -71 [ 49.433201][ T1092] ? _raw_write_trylock+0x150/0x150 [ 49.444607][ T1092] ? __proc_create+0x581/0x8f0 [ 49.449352][ T1092] ? _raw_write_trylock+0x150/0x150 [ 49.454531][ T1092] ? ext4_get_projid+0x140/0x140 [ 49.459449][ T1092] ? _raw_write_unlock+0x2b/0x60 [ 49.464363][ T1092] ? proc_register+0x339/0x4d0 [ 49.469102][ T1092] ext4_enable_quotas+0x338/0x6d0 [ 49.474105][ T1092] ? ext4_register_sysfs+0x251/0x290 [ 49.479369][ T1092] ext4_fill_super+0x84cc/0x8d90 [ 49.484284][ T1092] ? ext4_mount+0x40/0x40 [ 49.488587][ T1092] ? vscnprintf+0x80/0x80 [ 49.492890][ T1092] ? set_blocksize+0x1eb/0x3a0 [ 49.497628][ T1092] ? sb_set_blocksize+0xaa/0xf0 [ 49.502459][ T1092] mount_bdev+0x26a/0x380 [ 49.506767][ T1092] ? ext4_mount+0x40/0x40 [ 49.511073][ T1092] ext4_mount+0x34/0x40 [ 49.515203][ T1092] legacy_get_tree+0xed/0x190 [ 49.519852][ T1092] ? ext4_chksum+0x180/0x180 [ 49.524424][ T1092] vfs_get_tree+0x89/0x260 [ 49.528826][ T1092] do_new_mount+0x25a/0xa30 [ 49.533355][ T1092] path_mount+0x581/0xca0 [ 49.537688][ T1092] __se_sys_mount+0x320/0x390 [ 49.542345][ T1092] ? __x64_sys_mount+0xd0/0xd0 [ 49.547087][ T1092] ? debug_smp_processor_id+0x17/0x20 [ 49.552494][ T1092] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.559128][ T1092] __x64_sys_mount+0xbf/0xd0 [ 49.563701][ T1092] do_syscall_64+0x31/0x40 [ 49.568123][ T1092] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.572523][ T5] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 49.573995][ T1092] RIP: 0033:0x7fb4286ab28a [ 49.574011][ T1092] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.607057][ T1092] RSP: 002b:00007fb427102e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.615755][ T1092] RAX: ffffffffffffffda RBX: 00007fb427102ee0 RCX: 00007fb4286ab28a [ 49.623737][ T1092] RDX: 0000200000000bc0 RSI: 0000200000000140 RDI: 00007fb427102ea0 [ 49.631718][ T1092] RBP: 0000200000000bc0 R08: 00007fb427102ee0 R09: 0000000000808008 [ 49.639671][ T1092] R10: 0000000000808008 R11: 0000000000000246 R12: 0000200000000140 [ 49.647624][ T1092] R13: 00007fb427102ea0 R14: 0000000000000bdb R15: 0000200000000380 [ 49.655577][ T1092] [ 49.657890][ T1092] Allocated by task 714: [ 49.662131][ T1092] __kasan_slab_alloc+0xb7/0xe0 [ 49.666964][ T1092] slab_post_alloc_hook+0x5d/0x2f0 [ 49.672055][ T1092] kmem_cache_alloc+0x15a/0x2d0 [ 49.676891][ T1092] f2fs_alloc_inode+0x26/0x410 [ 49.681656][ T1092] iget_locked+0x146/0x7d0 [ 49.686147][ T1092] f2fs_iget+0x55/0x4ae0 [ 49.690398][ T1092] f2fs_fill_super+0x4d3d/0x73d0 [ 49.695337][ T1092] mount_bdev+0x26a/0x380 [ 49.699648][ T1092] f2fs_mount+0x34/0x40 [ 49.703779][ T1092] legacy_get_tree+0xed/0x190 [ 49.708451][ T1092] vfs_get_tree+0x89/0x260 [ 49.712871][ T1092] do_new_mount+0x25a/0xa30 [ 49.717361][ T1092] path_mount+0x581/0xca0 [ 49.721664][ T1092] __se_sys_mount+0x320/0x390 [ 49.726323][ T1092] __x64_sys_mount+0xbf/0xd0 [ 49.730904][ T1092] do_syscall_64+0x31/0x40 [ 49.735308][ T1092] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.741187][ T1092] [ 49.743493][ T1092] Last potentially related work creation: [ 49.749194][ T1092] kasan_save_stack+0x3a/0x60 [ 49.753864][ T1092] __kasan_record_aux_stack+0xd2/0x100 [ 49.759308][ T1092] kasan_record_aux_stack_noalloc+0xb/0x10 [ 49.765754][ T1092] call_rcu+0x11a/0x1090 [ 49.769974][ T1092] evict+0x88f/0x940 [ 49.773840][ T1092] iput+0x654/0x7e0 [ 49.777622][ T1092] f2fs_fill_super+0x5c93/0x73d0 [ 49.782537][ T1092] mount_bdev+0x26a/0x380 [ 49.786858][ T1092] f2fs_mount+0x34/0x40 [ 49.790994][ T1092] legacy_get_tree+0xed/0x190 [ 49.795644][ T1092] vfs_get_tree+0x89/0x260 [ 49.800038][ T1092] do_new_mount+0x25a/0xa30 [ 49.804516][ T1092] path_mount+0x581/0xca0 [ 49.808819][ T1092] __se_sys_mount+0x320/0x390 [ 49.813469][ T1092] __x64_sys_mount+0xbf/0xd0 [ 49.818036][ T1092] do_syscall_64+0x31/0x40 [ 49.822341][ T337] usb 3-1: device descriptor read/64, error -71 [ 49.822443][ T1092] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.834509][ T1092] [ 49.836816][ T1092] The buggy address belongs to the object at ffff88811c70a030 [ 49.836816][ T1092] which belongs to the cache f2fs_inode_cache of size 1520 [ 49.851379][ T1092] The buggy address is located 1320 bytes inside of [ 49.851379][ T1092] 1520-byte region [ffff88811c70a030, ffff88811c70a620) [ 49.864907][ T1092] The buggy address belongs to the page: [ 49.870535][ T1092] page:ffffea000471c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811c708670 pfn:0x11c708 [ 49.882050][ T1092] head:ffffea000471c200 order:3 compound_mapcount:0 compound_pincount:0 [ 49.890355][ T1092] flags: 0x4000000000010200(slab|head) [ 49.895806][ T1092] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888102580900 [ 49.904385][ T1092] raw: ffff88811c708670 0000000080130012 00000001ffffffff 0000000000000000 [ 49.912958][ T1092] page dumped because: kasan: bad access detected [ 49.919360][ T1092] page_owner tracks the page as allocated [ 49.925072][ T1092] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 348, ts 25429358057, free_ts 0 [ 49.932341][ T5] usb 4-1: config index 0 descriptor too short (expected 1372, got 92) [ 49.945533][ T1092] prep_new_page+0x176/0x190 [ 49.945542][ T1092] get_page_from_freelist+0x225f/0x23f0 [ 49.945549][ T1092] __alloc_pages_nodemask+0x29a/0x640 [ 49.945556][ T1092] new_slab+0x84/0x3f0 [ 49.945565][ T1092] ___slab_alloc+0x2f8/0x4c0 [ 49.945571][ T1092] __slab_alloc+0x63/0xa0 [ 49.945579][ T1092] kmem_cache_alloc+0x1a4/0x2d0 [ 49.945589][ T1092] f2fs_alloc_inode+0x26/0x410 [ 49.945606][ T1092] new_inode_pseudo+0x62/0x210 [ 49.953999][ T337] usb usb3-port1: attempt power cycle [ 49.958392][ T1092] new_inode+0x28/0x1e0 [ 49.958402][ T1092] f2fs_new_inode+0xef/0x1420 [ 49.958416][ T1092] f2fs_create+0x204/0x1aa0 [ 49.964116][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.969298][ T1092] path_openat+0x15ff/0x3040 [ 49.969307][ T1092] do_filp_open+0x1df/0x400 [ 49.969315][ T1092] do_sys_openat2+0x19f/0x750 [ 49.969322][ T1092] __x64_sys_open+0x11c/0x140 [ 49.969333][ T1092] page_owner free stack trace missing [ 50.048842][ T1092] [ 50.051159][ T1092] Memory state around the buggy address: [ 50.056771][ T1092] ffff88811c70a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.064819][ T1092] ffff88811c70a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.072869][ T1092] >ffff88811c70a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.080903][ T1092] ^ [ 50.087812][ T1092] ffff88811c70a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.095848][ T1092] ffff88811c70a600: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 50.103883][ T1092] ================================================================== [ 50.111915][ T1092] Disabling lock debugging due to kernel taint [ 50.118814][ T1092] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 50.133791][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.141152][ T1092] EXT4-fs (loop0): mount failed [ 50.144121][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.156021][ T5] usb 4-1: Product: syz [ 50.160236][ T5] usb 4-1: Manufacturer: syz [ 50.165410][ T5] usb 4-1: SerialNumber: syz [ 50.851886][ T5] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 50.857933][ T5] cdc_ncm 4-1:1.0: bind() failure [ 50.864449][ T5] cdc_ncm 4-1:1.1: bind() failure [ 51.142007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 52.202976][ T5] usb 4-1: USB disconnect, device number 13