last executing test programs: 16.62122778s ago: executing program 4 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c810}, 0x8000) 16.57975119s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x7c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x102, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}}}, 0x0) write$cgroup_devices(r3, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) 15.534852641s ago: executing program 4 (id=107): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chroot(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, 0x0, 0x500082c) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) chroot(0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 15.483923661s ago: executing program 4 (id=108): write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @val={0x3, 0x0, 0x8, 0xe057, 0x19, 0xc}, @ipv6=@generic={0x1, 0x6, "679605", 0xa3, 0x11, 0xff, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, {[], "c0f99f34ae44268693844b6cac0c8f0826e57bd904490e43a63c5ee840864a290050facd3291f974ba15fd51e2a246ecb263471a591105631483f57767bbf9d7490abadb8f851f3c390d9ec9775471f1c29020da2a21edc5fe744b5829aa1b704b7aed03ddc911e4eb472417f6b900ca37cc047924101522edc1da41568fb7cc870e137333102c97e46b55fb9458921525e2987b78e42d533533cb2470f448da421d26"}}}, 0xd5) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000004c0)={[{@jqfmt_vfsold}, {@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@resgid={'resgid', 0x3d, 0xee00}}, {@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@nodioread_nolock}]}, 0xfe, 0x46c, &(0x7f0000000b00)="$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") write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000340)='./file1\x00') 15.133328999s ago: executing program 4 (id=114): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14.853482173s ago: executing program 4 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xc, 0x7}, 0x50) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 14.844328314s ago: executing program 32 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xc, 0x7}, 0x50) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 5.046430033s ago: executing program 0 (id=269): io_submit(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x0, 0xf, 0x4, "e41939a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000000)={0x20, 0x8, 0x4, "882a0a11"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.602637072s ago: executing program 5 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x88, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x45, 0x2, @initdev={0xac, 0x1e, 0x4, 0x0}}}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xfffffffffffffff0, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x24008000) 4.497842853s ago: executing program 5 (id=278): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0xc01c, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4.339387417s ago: executing program 5 (id=280): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x0, 0x1, 0xe, 0x8d2, 0x0, 0x6, 0x0}) 2.784555776s ago: executing program 3 (id=289): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.224459097s ago: executing program 5 (id=291): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8004, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.176273008s ago: executing program 1 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000002380)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x0, 0x152b, &(0x7f0000005300)="$eJzs3AuYjtX6MPD7Xms9Y0zibZLDsNa6H14aLJIkh4QckiRJkpwSkiZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMmWJklCQlLru1T7s/dX+99/X7v9+f/33L/rWtes+33edT/3M/e88z7Pc13v+1Wv0fVbNqjTnIjgX4K//EgGgFgAGA4ABQAgAIDK8ZXjL23PKzH5X9sJ+3Pdn3alK2BXEvc/d+P+527c/9yN+5+7cf9zN+5/7sb9z924/4zlZjvmFr2Gx58xSuW58jX88+PffP+/QP5fHub7//8j8fv/f5Cc8lM+21T+ut7/xBLuf+7G/c/duP+5G/c/d+P+527c//98tf+Lbdz/3I37z1hudqXvP/MQv3bi37qfmH+07Qr/+THGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyyXO+8sUAPx1fqXrYowxxhhjjDHG2J/H57nSFTDGGGOMMcYYY+zfD0GABAUBxEAeiIW8EAdXQT64GvJDAYjANRAP10JBuA4KQWEoAkUhAYpBcdBgwAJBCCWgJEShFJSG6yERykBZKAcOykMFuAEqwo1QCW6CynAzVIFboCpUg+pQA26FmnAb1ILaUAduh7pQD+pDA7gDGsKd0AjugsZwNzSBe6Ap3AvN4D5oDvdDC3gAWsKD0AoegtbQBtpCO2j/T6+H5FbwHPSD56E/DIBkGAiD4AUYDENgKAyD4fAijICXYCS8DCkwCkbDKzAGXoWx8BqMg/EwAV6HiTAJJsMUmArTIBXegOnwJsyAt2AmzILZMAfSYC7Mg7dhPiyAhfAOLIJ3YTEsgaWwDNLhPciA5ZAJ78MK+ACyYCWsgtWwBtbCOlgPG2AjbILNsAW2wjbYDjvgQ9gJu2A37IG9sA/2w0dwAD6Gg/AJZMOn/+T6cz93/Jf1CNnQGwEBBQpUqDAGYzAWYzEO4zAf5sP8mB8jGMF4jMeCWBALYSEsgkUwAROwOBZHgwYJCUtgCYxiFEtjaUzERCyLZdGhwwpYASvijVgJK2FlrIxVsApWxWpYDWtgDayJNbEW1sI6WAfrYl2sj/XxDrwD78RG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsCW2xFbYCltja2yLbbE9tscO2AE7YkfsjJ2xC3bBrtgVkzAJu2E37I7dsQf2wJ7YE3thL+yNfbAPPofP4fP4PA7AumIgDsJBOBgH41AchsPwRRyBL+FL+DKm4Cgcja/gK/gqjsWzOA7H4wScgDXFJJyMU5DENEzFVJyO03EGzsCZOAtn4RxMw7k4D+fhfFyAC/AdXITv4ru4BJfgMkzHdMzA5ZiJmbgCz2EWrsRVuBrX4Fpcg+txA67HTbgZN+FW3IrbcTt+iB/iLtyFe3AP7sN9+BF+hB/jx5iC2ZiNh/AQHsbDeASPYA7m4FE8isfwGB7H43gCT+BJPIWn8RSeQfz15X4eL+AFvIjPJHzRYl+ZjSkgLlFCiRgRI2JFrIgTcSKfyCfyi/wKAES8iBcFRUFRSBQSRUQRkSASRHFRXBhhBIlQlBAlRFRERWlRWiSKRFFWlBVOOFFBVBAVRUVRSVQSlcXNooq4RVQV1UQnV0PUEDVFZ1dL1BZ1RB1RV9QT9UUD0UA0FA1FI9FINBaNRRPRRDQV94pmYiAOxfvFpc60FKOwlRiNrUUb0Va0E6/iw6KDGIsdRSfRWTwqxuM47Co6uCTxhOgmJmN38ZSYgk+LnmIa9hLPit6ij+grnhP9REfXXwwQM3GgGCTm4GAxRAwVw8R8rCcuday+eFmkiFFitHhFLMNXxVjxmhgnxosJ4nUxUUwSk8UUMVVME6niDTFdvClmiLfETDFLzBZzRJqYK+aJt8V8sUAsFO+IReJdsVgsEUvFMpEu3hMZYrnIFO+LFeIDkSVWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghPhQ7xS6xW+wRe8U+sV98JA6Ij8VB8YnIFp+KQ+Iv4rD4TBwRn4sc8YU4Kr4Ux8RX4rj4WpwQ34iT4pQ4Lb4VZ8R34qw4J86L78UF8YO4KH4UPwkvQKIUUkolAxkj88hYmVfGyatkPnm1zC8LyIi8RsbLa2VBeZ0sJAvLIrKoTJDFZHGppZFWkgxlCVlSRmUpWVpeLxNlGVlWlpNOlpcV5A2yorxRVpI3ycryZllF3iKrymqyuqwhb5U15W2ylqwt68jbZV1ZT9aXDeQdsqG8UzaSd8nG8m7ZRN4jm8p7ZTN5n2wu75ct5AOypXxQtpIPydayjWwr28n28mHZQT4iO8pOsrN8VHaRj8mu8nGZJJ+Q3eSTsrt8SvaQT8ue8hnZSz4re8s+sq/8Uf4kvewvB8hkOVAOki/IwXKIHCqHyeHyRTlCviRHypdlihwlR8tX5Bj5qhwrX5Pj5Hg5Qb4uJ8pJcrKcIqfKaTJVviGnyzflDPmWnClnydlyjkyTc+XQXzMt/G+sf/N31o/8ee/b5Q75odwpd8ndco/cK/fJ/XK/PCAPyIPyoMyW2fKQPCQPy8PyiDwic2SOPCqPymPymDwuj8sT8oQ8KU/J7+W38oz8Tp6V5+Q5+b28IC/Ii7/+DkChEkoqpQIVo/KoWJVXxamrVD51tcqvCqiIukbFq2tVQXWdKqQKqyKqqEpQxVRxpZVRVpEKVQlVUkVVKVVaXa8SVRlVVpVTTpVXFdQN//L6P6qvvWqvOqgOqqPqqDqrzqqL6qK6qq4qSSWpbqqb6q66qx6qh+qpeqpeqpfqrXqrvqqv6qf6qf6qv0pWyWqQekENVkPUUDVMDVcvqhFqhBqpRqoUlaJGq9FqjBqjxqqxapwapyaoCWqimqgmq8lqqpqqUlWqmq6mqxlqhpqpZqrZarZKU2lqnpqn5qv5aqFaqBapRWqxWqyWqqUqXaWrDJWhMlWmWqFWqCy1Uq1Uq9VqtVatVevVerVRbVSb1Wa1VW1VWWqH2qF2qp1qt9qt9qq9ar/arw6oA+qgOqiyVbY6pA6pw+qwOqKOqByVo46qo+qYOqaOq+PqhDqhTqqT6rQ6rc6oM+qsOqvOq/PqgrqgLqqL6qcYAAggEIEIVKCCmCAmiA1ig7ggLsgX5AvyB/mDSBAJ4oP4oGBwXVAoKBwUCYoGCUGxoHigAxPYgIIwKBGUDKJBqaB0cH2QGJQJygblAheUDyoENwQVgxuDSsFNcZf2VCW4JagaVAuqBzWCW4OawW1BraB2UCe4Pagb1AvqBw2CO4KGwZ1Bo+CuoHFwd9AkuCdoGtwbNAvuC5oH9wctggeClsGDQavgoaB10CZoG7QL2v+SP6gc3Pwn5Pf+bOFHXH89QCfrgXqQfkEP1kP0UD1MD9cv6hH6JT1Sv6xT9Cg9Wr+ix+hX9Vj9mh6nx+sJ+nU9UU/Sk/UUPVVP06n6DT1dv6ln6Lf0TD1Lz9ZzdJqeq+fpt/V8vUAv1O/oRfpdvVgv0Uv1Mp2u39MZernO1O/rFfoDnaVX6lV6tV6j1+p1er3eoDfqTXqz3qK36m16u96hP9Q79S69W+/Re/U+vV9/pA/oj/VB/YnO1p/qQ/ov+rD+TB/Rn+sc/YU+qr/Ux/RX+rj+Wp/Q3+iT+pQ+rb/VZ/R3+qw+p8/r7/UF/YO+qH/UP2l/6eT+0tu7UUaZGBNjYk2siTNxJp/JZ/Kb/CZiIibexJuCpqApZAqZIqaISTAJprgpbi4hQ6aEKWGiJmpKm9Im0SSasqasccaZCqaCqWgqmkqmkqlsKpsqpoqpaqqa6qa6udXcam4zt5napra53dxu6pl6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFampamlWllWpvWpq1pa9qb9qaD6WA6mo6ms+lsupgupqvpapJMkulmupnuprvpYXqYnqan6WV6md6mt+lr+pp+pp/pb/qbZJNsBplBZrAZbIaaoWa4GW5GmBFmpBlpUkyKGW1GmzFmjBlrxppxZryZYF43E80kM9lMMVPNNJNqUs10M93MMDPMTDPTzDazTZpJM/PMPDPfzDcLzUKzyCwyi81is9QsNekm3WSYDJNpMs0Ks8JkmSyzyqwya8was86sMxvMBrPJbDJbzBazzWwzO8wOs9PsNLvNbrPX7DX7zX5zwBwwB81Bk22yzSFzyBw2h80Rc8TkmBxz1Bw1x8wxc9wcNyfMCXPSnDSnzWlzxpwxZ81Zc96cNxfMD+ai+dH8ZLyJtQLi7FU2n73a5rcFbKzNa/82LmKL2gRbzBa32hayhf8uNtbaRFvGlrXlrLPlbQV7w2/iqraarW5r2FttTXubrfWbuKG90zayd9nG9m7bwN7xd3ETe49tah+0zexDtrltY1vYdralfdC2sg/Z1raNbWvb2S72MdvVPm6T7BO2m33yN3GGXW432I12k91sD9iP7Xn7vT1mv7IX7A+2vx1gh9sX7Qj7kh1pX7YpdtRv4gn2dTvRTrKT7RQ71U77TTzbzrFpdq6dZ9+28+2C38Tp9j27yGbaxXaJXWqX/RxfqinTvm9X2A9sll1pV9nVdo1da9fZ9f+31tV2q91mt9v99iO70+6yu+0eu9fu+zm+dBwH7Sc2235qj9ov7WH7mT1ij9sc+8XP8aXjO26/tifsN/akPWVP22/tGfudPWvP/Xz8l479W/uj/cl6C4QkSJKigGIoD8VSXoqjqygfXU35qQBF6BqKp2upIF1HhagwFaGilEDFqDhpMmSJKKQSVJKiVIpK0/WUSGWoLJUjR+WpAt1AFelGqkQ3UWW6marQLVSVqlF1qkG3Uk26jWpRbapDt1Ndqkf1qQHdQQ3pTmpEd1Fjupua0D3UlO6lZnQfNaf7qQU9QC3pQWpFD1FrakNtqR21p4epAz1CHakTdaZHqQs9Rl3pcUqiJ6gbPUnd6SnqQU9TT3qGetGz1Jv6UF96jvrR89SfBlAyDaRB9AINpiE0lIbRcHqRRtBLNJJephQaRaPpFRpDr9JYeo3G0XiaQK/TRJpEk2kKTaVplEpv0HR6k2bQWzSTZtFsmkNpNJfm0ds0nxbQQnqHFtG7tJiW0FJaRun0HmXQcsqk92kFfUBZtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttpx30Ie2kXbSb9tBe2kf76SM6QB/TQfqEsulTOkR/ocP0GR2hzymHvqCj9CUdU0DH6Ws6Qd/QSTpFp+lbOkPf0Vk6R+fpe7pAP9BF+pF+InkWQgxFKEMVBmFMmCeMDfOGceFVYb7w6jB/WCCMhNeE8eG1YcHwurBQWDgsEhYNE8JiYfFQhya0IYVhWCIsGUbDUmHp8PowMSwTlg3LhS4sH1YIbwgrhjeGlcKbwsrhzWGV8JawalgtfPDuGuGtYc3wtrBWWDusE94e1g3rhfXDBuEdYcPwzrBReFfYOLw7rBTeEzYN7w2bhfeFzcP7wxbhA2HL8MGwVfhQ2DpsE7YN24Xtw4fDDuEjYcewU9g5fDTsEj4Wdg0fD5PCJ8Ju4ZN/uD05HBgOCl8IXwi9v0sujS6Lpkffi2ZEl0czo+9HV0Q/iGZFV0ZXRVdH10TXRtdF10c3RDdGN0U3R7dEt0a3RbdHvW+QBxw64aRTLnAxLo+LdXldnLvK5XNXu/yugIu4a1y8u9YVdNe5Qq6wK+KKugRXzBV32hlnHbnQlXAlXdSVcqXd9S7RlXFlXTnnXHlXwbVz7V1718E94jq6Tq6ze9Q96h5zj7nH3ePuCdfNPem6u6dcD/e06+mecc+4Z11v18f1dc+5fu55198NcMku2Q1yg9xgN9gNdUPdcDfcjXAj3Eg30qW4FDfajXZj3Bg31o1149w4N8FNcBPdRDfZTXZT3VSX6lLddDfdzXAz3Ew30812s12aS3Pz3Dw33813C91CtyhxkVvsFrulbqlLd+kuw2W4TJfpVrgVLstluVVulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdjgBO91ut9vtdXvdfrffHXAH3EF30GW7bHfIHXKH3WF3xH3uctwX7qj70h1zX7nj7mt3wn3jTrpT7rT71p1x37mz7pw77753F9wP7qL70f3kvEuNvBGZHnkzMiPyVmRmZFZkdmROJC0yNzIv8nZkfmRBZGHknciiyLuRxZElkaWRZZH0yHuRjMjySGbk/ciKyAeRrMjKyKrI6siaCES8L7Yz9CV8SR/1pXxpf71P9GV8WV/OO1/eV/A3+Ir+Rl/J3+Qr+5t9FX+Lr+qr+er+Id/at/FtfTvf3j/sO/hHfEffyXf2j/ou/jHf1T/uk/wTvpt/0nf3T/ke/mnf0z/je/lnfW/fx/f1z/l+/nnf3w/wyX6gH+Rf8IP9ED/UD/PD/Yt+hH/Jj/Qv+xQ/yo/2r/gx/lU/1r/mx/nxfoJ/3U/0k/xkP8VP9dN8qn/DT/dv+hn+LT/Tz/Kz/Ryf5uf6ef5tP98v8Av9O36Rf9cv9kv8Ur/Mp/v3fIZf7jP9+36F/8Bn+ZV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/gP/U6/y+/2e/xev8/v/+WOVBz4T3y2/9Qf8n/xh/1n/oj/3Of4L/xR/6U/5r/yx/3X/oT/xp/0p/xp/60/47/zZ/05f95/7y/4H/xF/6N/5iR/Zo0xxhhj7L9D/sH2gb/zmPh1XDIIAK7eVTTn/825pdAv8yEioUsEAJ4Y0Ov+v466dZOTk399bpaEoOQSAIhcXh8DfxMnd4bHIAk6QcXfrW+I6HOB/iB/9OZLJ5mXxcLleCX8Nf+N/yD/w49OyKgSno//L/IvAUgseXlNXrgcX85f6R/kL9zhD+rP+1kqQMe/WZMPLseX81eAR+BJSPq7ZzLGGGOMMcYYY78YIqr3+PvrT/m71+cJ6vKaPPBz/PM3B1y+/vz963PGGGOMMcYYY4xdeU/36fv4w0lJnXr8L5nE/lr3/5R6ePIfOsH/pS+QP21yBf8pMcYYY4wxxv4tLp/0X+lKGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx3Ov/x9eJXeljZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq60/xMAAP//L7QeQg==") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000710d53020000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f0000000640)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x32, 0x66, 0x63, 0x34, 0x61, 0x62, 0x5c], 0x2d, [0x0, 0x38, 0x35, 0x35], 0x2d, [0x61, 0x36, 0x38], 0x2d, [0x61, 0x34, 0x7813307c2f06a3f3, 0x30], 0x2d, [0x35, 0x63, 0x62, 0x65, 0x36, 0x63, 0x32, 0x39]}}}]}, 0x6, 0x510, &(0x7f0000000c00)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.06847202s ago: executing program 0 (id=294): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x800080, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1.991475832s ago: executing program 0 (id=298): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1b7bc8ed738163b627c7eae1ab284a81f3d4dc32e5560f8b30fcff99e5513ac23f61f7313412b6d8df37867c14af5ae68a9b57f8f6f71d78cfd92b0153baf51daec4272d8e2aab6b", 0x48}], 0x1) 1.888971353s ago: executing program 0 (id=299): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0x276}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$msr(r2, &(0x7f00000004c0)=""/182, 0xb6) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f) 1.888734104s ago: executing program 3 (id=300): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x8000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0xff, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380), 0x1000000}, 0x20) socket$inet6(0xa, 0x80002, 0x88) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0xa, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.816430875s ago: executing program 0 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@alu={0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, 0x0, 0x7}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.360371834s ago: executing program 5 (id=303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}}, 0x20}}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.310107205s ago: executing program 1 (id=304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 1.305335265s ago: executing program 2 (id=305): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r1, 0x40, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x3c}}, 0x20024090) 1.296395465s ago: executing program 3 (id=306): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0x931bf64e31c7bc9e, 0x4) 1.237523056s ago: executing program 2 (id=307): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 1.237319266s ago: executing program 1 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000840)="3e26660f38f8068cfa0ff9f76fb800008ee8c1cc0a6667660f3ace1b37c4c279cf93000066b8000000000f23c80f21f86635000030000f23f866b9800000c00f326635000800000f300f79bc0000", 0x4e}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.209230986s ago: executing program 3 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigaction(0x1, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66420f38021df5000000c482adbcaf07000000c4e1fd5aa13c9c4371c48279594bcbc4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x9]}}, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x40000000000008, 0x0) capset(0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.194284827s ago: executing program 2 (id=310): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$eJzs3c9rXNUeAPDvvZPJjzbvpX08Hq/lPV7gLVp4NE36ilVXbV3YRcGCXYi4aGiSGjr9QZOCrQVTcKGgIOJWpBv/AffSvTsR1J1roYpUXKh05M7cacfJ3DSkydw09/OBOzk/buacb25O7rl3cmYCqKzJ7CGN2BcR55KIia668WhXTub73f/p1vlsS6LZfPnHJJK8rLP/g/zr7uwhiRiNiC9PRvyttrrdpRs3L842mm1vRRxevnT18NKNm4cWL81emL8wf3nmyLNHj00/N3N0ZlPi7MR16vRL/3r/7defWfiqcSiJ43G2/uZc9MSxWSZjMh7kIWb5ZtIuH4qIY1miz8/labMDQqi0Wv77WI+If8RE1Fq5tolYfK/UzgFbqlmLaAIVlRj/UFGdeUDn2r73OniklFnJ4Nw70b4AWh3/UPveSIy2ro123U+6roza9zb2bEL7WRu/39r/cbZFwX2IoU1op8jK7XYsq+NPWn3b06rN4k//dK2fRsR0RAzn/XvhCfrQfY9kK+7DrCWLP/65vvi7j0MW//H8a1Z+coPtT/bkBx0/ANV090R+Il/Jco/Of9nZuDP/iT7zn/E+566NKPv8Vzz/65zvR1vznrRnHpZExJn+T1nvLfju3VMfFrXfPf/Ltqz9zlxwEO7djtjfE/87WbD5/CeLP+lz/LNdzq2zjRe//uFUUV3Z8TfvRBwomP92ZKk1Xp88vLDYmJ9uP/Zt4/MvXvu0qP3e+OslHP9da8z/i45/VnZ1nW18dubOpaK68cce//T74eRsKzWcl7wxu7x8bSZiODmd79JVfmTtvnT26TxHFv/B//Yf/2vFP9b5k7kOV1+5eL+o7gl//x8017ljkSz+uQ0e/w/yn8Pj/PLq9X8X1a0V/3qeGwAAAAAAAHgkbb0Gm6RTD9NpOjXVXsP799iVNq4sLf9v4cr1y3MRB1v/D1lPO690T7TzSZafyf8ftpM/0pP/f0TsjYiPamOt/NT5K425soMHAAAAAAAAAAAAAAAAAACAbWJ3vv6/8xlMP9fa6/+BitjKD5gDtjfjH6qrNf7TsnsBlMH5H6qrz/ivldEPYPCc/6G6jH+oLuMfqmuoIA3sfMY8VJfxDwAAAAA70t7/3P02iYiV58daW2Y4r6uX2jNgqxnjUF3W+UB1PXzp3/J/qJx1zf9/bY5ERLO59d0BSpD0K2xNDvI3Bi0a/Hf7ficAAAAAAAAAAAAAsAUO7LP+H6rKsj+oridY/++tA+Ap563/obpc4wOPW8U/WlRh/T8AAAAAAAAAAAAADMx4a0vSqXwt8Hik6dRUxF8iYk/Uk4XFxvx0RPw1Ir6p1Uey/EzZnQYAAAAAAAAAAAAAAAAAAIAdZunGzYuzjcb8te7Eb6tKdnai8ymo26U/3YlIBt/oWERsh9g3mEjX3meoqySJWMmOfOl9bieivNZHektK/sMEAAAAAAAAAAAAAAAAAAAV1LX2uL/9nwy4RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAweI8+/3/rEmXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8nf4IAAD///HVQCU=") setgroups(0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 1.108882019s ago: executing program 1 (id=311): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) 990.818721ms ago: executing program 3 (id=312): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x300030, 0x0, 0x1, 0x0, 0x0) 472.266391ms ago: executing program 2 (id=313): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001500b595279d7000ffdbdf250a4002ff", @ANYRES32=r4, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) msync(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x6) 390.604472ms ago: executing program 0 (id=314): syz_clone(0x14000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) 206.945016ms ago: executing program 3 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x811, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0x0, 0xfff1}, {0x4, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 73.509329ms ago: executing program 1 (id=316): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 73.374889ms ago: executing program 1 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0x6}}]}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20018804}, 0x0) 15.8394ms ago: executing program 2 (id=318): syz_emit_ethernet(0x1d6, &(0x7f0000000000)={@broadcast, @random="fee302628be5", @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x7}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x198, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @mcast1, @rand_addr=' \x01\x00', [@dstopts={0x3a}, @hopopts={0xc, 0x2b, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x743}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x7fff, [0x5, 0x0, 0x91bc, 0x2a, 0x0]}}, @generic={0x4, 0xb8, "d57918428e2233d2cca400adffd73f37046be142f92e38e5c78b0baf8c1162087e305fd718f76f49cce0c69a86334360d4d14b752ba68f3e31b97b0dd485dd27ec3aa4743b71fc466d88c0a958cf40981973725d2ca61573e72dfb571af48286605c3ad28d33960414b3cd5c58c49d8b42251b775d5c43ee98c1ca5e4dbd9b7ccb685ccedfcdaaf991bde5cefd57ab11b14d1031f4dcf3e68cff29a2df73f71c951c28e0ae89efcd551498caeb9493f4f639ad68e65e1f95"}, @generic={0x2}, @calipso={0x7, 0x50, {0x1, 0x12, 0xf, 0x4, [0x8, 0x8001, 0x0, 0x2, 0x8, 0xfffffffffffffc00, 0x1ff, 0x2, 0x200]}}]}]}}}}}}}, 0x0) 752.24µs ago: executing program 2 (id=319): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 0s ago: executing program 5 (id=320): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.832080][ T112] udevd (112) used greatest stack depth: 22912 bytes left [ 24.765344][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 24.765372][ T30] audit: type=1400 audit(1756971806.552:59): avc: denied { transition } for pid=251 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.806656][ T30] audit: type=1400 audit(1756971806.552:60): avc: denied { noatsecure } for pid=251 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.837354][ T30] audit: type=1400 audit(1756971806.562:61): avc: denied { write } for pid=251 comm="sh" path="pipe:[14662]" dev="pipefs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.865839][ T30] audit: type=1400 audit(1756971806.562:62): avc: denied { rlimitinh } for pid=251 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.891099][ T30] audit: type=1400 audit(1756971806.562:63): avc: denied { siginh } for pid=251 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.104629][ T254] sshd-session (254) used greatest stack depth: 21344 bytes left Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 32.979086][ T30] audit: type=1400 audit(1756971814.772:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.982138][ T273] cgroup: Unknown subsys name 'net' [ 33.012299][ T30] audit: type=1400 audit(1756971814.772:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.064545][ T30] audit: type=1400 audit(1756971814.822:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.064868][ T273] cgroup: Unknown subsys name 'devices' [ 33.289944][ T273] cgroup: Unknown subsys name 'hugetlb' [ 33.297873][ T273] cgroup: Unknown subsys name 'rlimit' [ 33.533875][ T30] audit: type=1400 audit(1756971815.322:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.574117][ T30] audit: type=1400 audit(1756971815.322:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.584598][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.609057][ T30] audit: type=1400 audit(1756971815.322:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.656221][ T30] audit: type=1400 audit(1756971815.422:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 33.696391][ T30] audit: type=1400 audit(1756971815.422:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.749841][ T30] audit: type=1400 audit(1756971815.542:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.788098][ T30] audit: type=1400 audit(1756971815.542:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.788168][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.618702][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.627749][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.645917][ T282] device bridge_slave_0 entered promiscuous mode [ 34.660727][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.670943][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.686531][ T282] device bridge_slave_1 entered promiscuous mode [ 34.788749][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.803921][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.812543][ T281] device bridge_slave_0 entered promiscuous mode [ 34.827456][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.835465][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.845176][ T281] device bridge_slave_1 entered promiscuous mode [ 34.943132][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.951670][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.964552][ T285] device bridge_slave_0 entered promiscuous mode [ 34.992088][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.002338][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.013946][ T285] device bridge_slave_1 entered promiscuous mode [ 35.036981][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.045700][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.055306][ T283] device bridge_slave_0 entered promiscuous mode [ 35.085254][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.094011][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.110949][ T283] device bridge_slave_1 entered promiscuous mode [ 35.214395][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.225989][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.238273][ T284] device bridge_slave_0 entered promiscuous mode [ 35.259898][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.268095][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.279108][ T284] device bridge_slave_1 entered promiscuous mode [ 35.300170][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.310667][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.437163][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.452198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.464712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.502071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.512342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.524863][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.536104][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.572508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.588175][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.596627][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.612156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.623512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.667388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.680424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.715908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.726078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.754201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.766670][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.785193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.796140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.810184][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.821967][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.841515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.851158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.865927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.879767][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.890424][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.917749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.926005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.938705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.950213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.964978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.978168][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.989806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.002758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.026127][ T282] device veth0_vlan entered promiscuous mode [ 36.040249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.051562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.066990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.081573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.091076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.105554][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.117708][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.128926][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.145013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.160590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.173379][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.187182][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.202631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.213533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.231124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.248266][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.259934][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.271638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.288698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.303946][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.314156][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.335097][ T282] device veth1_macvtap entered promiscuous mode [ 36.347348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.358034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.370233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.385433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.399017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.411681][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.425082][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.436481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.451651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.464826][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.475521][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.487065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.499792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.511846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.526218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.547732][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.559349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.571011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.606068][ T285] device veth0_vlan entered promiscuous mode [ 36.615633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.626509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.638436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.649198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.664784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.674850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.687348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.700150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.711039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.723800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.737877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.749931][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.764064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.798794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.808787][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.819317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.831442][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.845519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.858884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.878607][ T283] device veth0_vlan entered promiscuous mode [ 36.889990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.902735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.912768][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 36.914767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.935223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.955142][ T281] device veth0_vlan entered promiscuous mode [ 36.966298][ T285] device veth1_macvtap entered promiscuous mode [ 36.976540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.989577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.007867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.018468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.032727][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.046265][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.058867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.070093][ T284] device veth0_vlan entered promiscuous mode [ 37.086923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.097214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.110937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.130441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.147080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.160910][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.187475][ T334] tun0: tun_chr_ioctl cmd 21731 [ 37.200869][ T281] device veth1_macvtap entered promiscuous mode [ 37.211007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.223762][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.236358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.251977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.268509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.284068][ T284] device veth1_macvtap entered promiscuous mode [ 37.303134][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.312429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.327770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.346365][ T283] device veth1_macvtap entered promiscuous mode [ 37.357226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.369214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.383661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.394143][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.406511][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.423051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.434938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.474728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.489885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.504500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.516951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.529053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.543617][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.575947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.590156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.605620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.623460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.690702][ T345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 37.714829][ T348] loop1: detected capacity change from 0 to 128 [ 37.746149][ T353] loop0: detected capacity change from 0 to 256 [ 37.759284][ T348] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.775464][ T348] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.798964][ T348] netlink: 'syz.1.2': attribute type 27 has an invalid length. [ 37.829977][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.841727][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.860465][ T353] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 38.009002][ T355] device veth0_vlan left promiscuous mode [ 38.025820][ T355] device veth0_vlan entered promiscuous mode [ 38.036686][ T355] device veth1_macvtap left promiscuous mode [ 38.047045][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 38.047061][ T30] audit: type=1400 audit(1756971819.832:113): avc: denied { name_bind } for pid=360 comm="syz.0.9" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.063392][ T355] device veth1_macvtap entered promiscuous mode [ 38.100890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.112573][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.121674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.139547][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.148171][ T30] audit: type=1400 audit(1756971819.832:114): avc: denied { node_bind } for pid=360 comm="syz.0.9" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.149095][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.191646][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.202474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.213575][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.224076][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.238312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.258075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.274314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.286759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.300639][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.311488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.320664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.333765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.344901][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.357938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.372487][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.382600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.396324][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.401397][ T30] audit: type=1400 audit(1756971820.192:115): avc: denied { bpf } for pid=371 comm="syz.3.12" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.407325][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.445288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.454972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.465522][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.474941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.485895][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.495819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.505370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.514962][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.525141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.534496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.547384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.557290][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.566751][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.627827][ T348] syz.1.2 (348) used greatest stack depth: 20904 bytes left [ 38.637152][ T355] syz.1.2 (355) used greatest stack depth: 20864 bytes left [ 38.648658][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 38.666337][ T30] audit: type=1400 audit(1756971820.452:116): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.745885][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 38.792671][ T30] audit: type=1400 audit(1756971820.582:117): avc: denied { map_create } for pid=382 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.858921][ T30] audit: type=1400 audit(1756971820.612:118): avc: denied { map_read map_write } for pid=382 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.958433][ T30] audit: type=1400 audit(1756971820.752:119): avc: denied { perfmon } for pid=371 comm="syz.3.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.040809][ T394] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 39.097464][ T30] audit: type=1400 audit(1756971820.882:120): avc: denied { prog_run } for pid=371 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.182549][ T392] device syzkaller0 entered promiscuous mode [ 39.204702][ T396] tun0: tun_chr_ioctl cmd 21731 [ 39.333065][ T30] audit: type=1326 audit(1756971821.122:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=413 comm="syz.4.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3a7f1fbe9 code=0x0 [ 40.231455][ T442] tun0: tun_chr_ioctl cmd 21731 [ 40.239490][ T30] audit: type=1400 audit(1756971822.032:122): avc: denied { setcheckreqprot } for pid=443 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.373355][ T452] loop1: detected capacity change from 0 to 256 [ 40.381559][ T448] device syzkaller0 entered promiscuous mode [ 40.407367][ T454] loop2: detected capacity change from 0 to 128 [ 40.485278][ T452] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 40.493856][ T457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 40.545132][ T454] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.574980][ T458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 40.591524][ T454] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.631248][ T454] netlink: 'syz.2.40': attribute type 27 has an invalid length. [ 40.663768][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.671903][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.685409][ T462] loop1: detected capacity change from 0 to 128 [ 40.696478][ T462] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.708495][ T462] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none. [ 40.727770][ T462] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.760692][ T462] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.879163][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.887101][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.914881][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.926424][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.950269][ T463] device veth0_vlan left promiscuous mode [ 40.962828][ T463] device veth0_vlan entered promiscuous mode [ 40.974339][ T463] device veth1_macvtap left promiscuous mode [ 40.986567][ T463] device veth1_macvtap entered promiscuous mode [ 40.999195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.012249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.023028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.044207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.054571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.065728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.088540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.102420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.148433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.179248][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.193428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.205336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 41.216663][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.227517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 41.238918][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.249539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.264812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.276266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.287228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.403906][ T491] loop4: detected capacity change from 0 to 256 [ 41.428736][ T494] tun0: tun_chr_ioctl cmd 21731 [ 41.444650][ T497] loop0: detected capacity change from 0 to 256 [ 41.473829][ T491] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 41.480497][ T492] device syzkaller0 entered promiscuous mode [ 41.742414][ T518] loop4: detected capacity change from 0 to 128 [ 41.761913][ T523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'. [ 41.804817][ T518] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.821460][ T518] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.871967][ T518] netlink: 'syz.4.66': attribute type 27 has an invalid length. [ 41.910295][ T531] loop2: detected capacity change from 0 to 256 [ 41.925313][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.936316][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.986426][ T531] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 42.067660][ T532] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.077960][ T532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.090207][ T532] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.099352][ T532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.131509][ T532] device veth0_vlan left promiscuous mode [ 42.142372][ T532] device veth0_vlan entered promiscuous mode [ 42.157020][ T532] device veth1_macvtap left promiscuous mode [ 42.165856][ T532] device veth1_macvtap entered promiscuous mode [ 42.179327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.195876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.205278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.218193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.236150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.247166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.258804][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.272233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.283886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.297587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.309688][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.324815][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.339075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.353020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.362429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.375089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.388589][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.401127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.417883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.450151][ T539] device syzkaller0 entered promiscuous mode [ 42.483278][ T545] device syzkaller0 entered promiscuous mode [ 42.527505][ T292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.698234][ T561] netlink: 272 bytes leftover after parsing attributes in process `syz.1.84'. [ 42.728968][ T564] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 42.797539][ T292] usb 4-1: Using ep0 maxpacket: 16 [ 42.804915][ T573] binder: 572:573 ioctl 541b 0 returned -22 [ 42.947780][ T292] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 42.960026][ T292] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.976239][ T292] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.994586][ T292] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 43.048137][ T341] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 43.168057][ T292] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.186769][ T292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.200692][ T292] usb 4-1: Product: syz [ 43.207243][ T292] usb 4-1: Manufacturer: syz [ 43.214774][ T292] usb 4-1: SerialNumber: syz [ 43.437697][ T341] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 43.452662][ T341] usb 1-1: config 0 has no interface number 0 [ 43.466828][ T341] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 43.600313][ T292] usb 4-1: USB disconnect, device number 2 [ 43.625878][ T341] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 43.648159][ T341] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 43.804666][ T341] usb 1-1: Manufacturer: syz [ 43.811665][ T341] usb 1-1: SerialNumber: syz [ 43.819342][ T341] usb 1-1: config 0 descriptor?? [ 43.838265][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.004555][ T585] loop1: detected capacity change from 0 to 256 [ 44.029834][ T588] loop3: detected capacity change from 0 to 128 [ 44.031566][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 44.031588][ T30] audit: type=1400 audit(1756971825.822:157): avc: denied { create } for pid=589 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.041947][ T585] ======================================================= [ 44.041947][ T585] WARNING: The mand mount option has been deprecated and [ 44.041947][ T585] and is ignored by this kernel. Remove the mand [ 44.041947][ T585] option from the mount to silence this warning. [ 44.041947][ T585] ======================================================= [ 44.050840][ T30] audit: type=1400 audit(1756971825.842:158): avc: denied { setopt } for pid=589 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.185838][ T30] audit: type=1400 audit(1756971825.972:159): avc: denied { read } for pid=591 comm="syz.4.94" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.214526][ T30] audit: type=1400 audit(1756971825.972:160): avc: denied { open } for pid=591 comm="syz.4.94" path="net:[4026532647]" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.261622][ T588] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.277506][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 44.278339][ T585] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.315529][ T588] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.320184][ T585] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 44.349729][ T30] audit: type=1400 audit(1756971826.122:161): avc: denied { write } for pid=597 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.369720][ T588] netlink: 'syz.3.90': attribute type 27 has an invalid length. [ 44.396950][ T585] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 44.427285][ T585] exFAT-fs (loop1): hint_cluster is invalid (17) [ 44.439226][ T585] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 44.468517][ T585] exFAT-fs (loop1): Filesystem has been set read-only [ 44.494478][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.503939][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.566621][ T601] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.575482][ T601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.596373][ T601] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.605895][ T601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.607595][ T30] audit: type=1400 audit(1756971826.402:162): avc: denied { ioctl } for pid=605 comm="syz.1.101" path="socket:[16270]" dev="sockfs" ino=16270 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.630117][ T601] device veth0_vlan left promiscuous mode [ 44.661713][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 44.673412][ T601] device veth0_vlan entered promiscuous mode [ 44.690166][ T601] device veth1_macvtap left promiscuous mode [ 44.705350][ T601] device veth1_macvtap entered promiscuous mode [ 44.733898][ T610] loop1: detected capacity change from 0 to 512 [ 44.787682][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.796358][ T610] EXT4-fs (loop1): Ignoring removed nobh option [ 44.816093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.818193][ T610] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 44.844244][ T610] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.103: invalid indirect mapped block 2683928664 (level 1) [ 44.848533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.885709][ T610] EXT4-fs (loop1): 1 truncate cleaned up [ 44.890370][ T6] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 44.907071][ T610] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000004,,,errors=continue. Quota mode: writeback. [ 44.925238][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.959098][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.972204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.986755][ T30] audit: type=1400 audit(1756971826.772:163): avc: denied { read } for pid=609 comm="syz.1.103" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.008255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.039473][ T30] audit: type=1400 audit(1756971826.822:164): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.043599][ T6] usb 3-1: config 0 descriptor?? [ 45.083892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.115911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.127065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.144495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.159908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.168921][ T30] audit: type=1400 audit(1756971826.952:165): avc: denied { read } for pid=614 comm="syz.1.104" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.206814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.217837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.231164][ T30] audit: type=1400 audit(1756971826.952:166): avc: denied { open } for pid=614 comm="syz.1.104" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.273502][ T619] loop1: detected capacity change from 0 to 512 [ 45.313702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.341215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.352431][ T6] usb 3-1: USB disconnect, device number 2 [ 45.369207][ T619] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.383815][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.396535][ T619] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.412203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.431396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.447123][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.460965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.481379][ T619] EXT4-fs error (device loop1): __ext4_get_inode_loc:4352: comm syz.1.106: Invalid inode table block 0 in block_group 0 [ 45.493668][ T625] loop4: detected capacity change from 0 to 512 [ 45.507902][ T619] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 45.525921][ T619] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #18: comm syz.1.106: mark_inode_dirty error [ 45.542635][ T619] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.106: Invalid block bitmap block 261707 in block_group 0 [ 45.560833][ T619] EXT4-fs error (device loop1): __ext4_get_inode_loc:4352: comm syz.1.106: Invalid inode table block 0 in block_group 0 [ 45.580755][ T619] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 45.604574][ T619] EXT4-fs error (device loop1): ext4_dirty_inode:6071: inode #18: comm syz.1.106: mark_inode_dirty error [ 45.620376][ T619] EXT4-fs error (device loop1): __ext4_get_inode_loc:4352: comm syz.1.106: Invalid inode table block 0 in block_group 0 [ 45.637264][ T619] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 45.651853][ T625] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 45.662397][ T619] EXT4-fs error (device loop1): ext4_ext_truncate:4456: inode #18: comm syz.1.106: mark_inode_dirty error [ 45.679830][ T625] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.735226][ T6] usb 1-1: USB disconnect, device number 2 [ 45.745675][ T625] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 3: comm syz.4.108: lblock 0 mapped to illegal pblock 3 (length 1) [ 45.795052][ T284] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 45.813797][ T284] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 45.832596][ T284] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 45.841740][ T639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 45.845195][ T284] EXT4-fs error (device loop4): ext4_dirty_inode:6071: inode #2: comm syz-executor: mark_inode_dirty error [ 45.886168][ T643] loop0: detected capacity change from 0 to 512 [ 45.895691][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 45.917107][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 45.953491][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 45.975123][ T650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 45.985879][ T643] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 45.998376][ T643] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.036106][ T643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.074157][ T643] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 46.125768][ T643] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 46.166671][ T662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=662 comm=syz.2.123 [ 46.193994][ T643] EXT4-fs (loop0): 1 truncate cleaned up [ 46.210555][ T643] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 46.274869][ T671] loop1: detected capacity change from 0 to 512 [ 46.294971][ T643] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #2: block 4: comm syz.0.116: lblock 0 mapped to illegal pblock 4 (length 1) [ 46.346335][ T673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9695 sclass=netlink_route_socket pid=673 comm=syz.2.129 [ 46.347129][ T671] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 46.388826][ T671] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.405379][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 46.443827][ T671] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.128: Directory hole found for htree leaf block 0 [ 46.499791][ T686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 46.523710][ T678] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.532652][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.542593][ T678] device bridge_slave_0 entered promiscuous mode [ 46.550659][ T678] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.560126][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.578015][ T678] device bridge_slave_1 entered promiscuous mode [ 46.631923][ T690] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 46.639759][ T693] mmap: syz.2.129 (693) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 46.692142][ T690] Disabled LAPIC found during irq injection [ 46.692398][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 46.716621][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.727524][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 46.738154][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.761826][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.775677][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.786295][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.800241][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.819975][ T699] loop1: detected capacity change from 0 to 256 [ 46.836038][ T702] loop0: detected capacity change from 0 to 128 [ 46.908525][ T699] exfat: Deprecated parameter 'utf8' [ 46.918754][ T699] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 46.943162][ T709] loop2: detected capacity change from 0 to 256 [ 46.951924][ T702] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.968923][ T702] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.987943][ T709] exfat: Unknown parameter 'e' [ 47.029538][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.039674][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.061334][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.074855][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.116094][ T613] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.125004][ T613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.138748][ T725] loop2: detected capacity change from 0 to 512 [ 47.147071][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.166574][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.182964][ T613] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.192876][ T613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.204735][ T45] device bridge_slave_1 left promiscuous mode [ 47.214057][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.224753][ T45] device bridge_slave_0 left promiscuous mode [ 47.225073][ T725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.234241][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.254859][ T725] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.267825][ T45] device veth1_macvtap left promiscuous mode [ 47.275505][ T45] device veth0_vlan left promiscuous mode [ 47.282105][ T725] capability: warning: `syz.2.146' uses 32-bit capabilities (legacy support in use) [ 47.384902][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.417561][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.448969][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.474211][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.505663][ T678] device veth0_vlan entered promiscuous mode [ 47.517378][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.536035][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.547357][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.570105][ T739] loop0: detected capacity change from 0 to 512 [ 47.586544][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.590921][ T739] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.151: casefold flag without casefold feature [ 47.601926][ T678] device veth1_macvtap entered promiscuous mode [ 47.622770][ T739] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.151: couldn't read orphan inode 15 (err -117) [ 47.641968][ T739] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 47.664417][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.667769][ T342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 47.688747][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.057761][ T342] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 48.085383][ T342] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 48.130743][ T342] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 48.136297][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 48.157741][ T342] usb 3-1: config 220 has no interface number 2 [ 48.167292][ T342] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 48.191017][ T342] usb 3-1: config 220 interface 0 has no altsetting 0 [ 48.200114][ T342] usb 3-1: config 220 interface 76 has no altsetting 0 [ 48.209809][ T342] usb 3-1: config 220 interface 1 has no altsetting 0 [ 48.210892][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 48.443564][ T764] loop3: detected capacity change from 0 to 512 [ 48.467751][ T342] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 48.483283][ T342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.493280][ T342] usb 3-1: Product: syz [ 48.499402][ T764] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 48.500583][ T342] usb 3-1: Manufacturer: syz [ 48.515356][ T342] usb 3-1: SerialNumber: syz [ 48.517283][ T764] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.549953][ T764] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,dioread_nolock,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 48.572225][ T764] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.660486][ T768] loop3: detected capacity change from 0 to 128 [ 48.710072][ T768] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.728502][ T768] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.742681][ T768] netlink: 'syz.3.159': attribute type 27 has an invalid length. [ 48.766612][ T768] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.778664][ T768] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.836177][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.847328][ T769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.856475][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.866854][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.887914][ T342] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 48.891189][ T769] device veth0_vlan left promiscuous mode [ 48.895497][ T342] usb 3-1: No valid video chain found. [ 48.902931][ T769] device veth0_vlan entered promiscuous mode [ 48.910719][ T342] usb 3-1: selecting invalid altsetting 0 [ 48.920634][ T769] device veth1_macvtap left promiscuous mode [ 48.934489][ T769] device veth1_macvtap entered promiscuous mode [ 48.944474][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.956759][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.967111][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.979602][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.993107][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.004775][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.016120][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.028163][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.030512][ T342] usb 3-1: USB disconnect, device number 3 [ 49.039636][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.059776][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.070126][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.081360][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.092334][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.103852][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.118054][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.174275][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 49.174291][ T30] audit: type=1400 audit(1756971830.962:208): avc: denied { validate_trans } for pid=772 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.222959][ T775] loop5: detected capacity change from 0 to 1024 [ 49.260151][ T30] audit: type=1400 audit(1756971831.052:209): avc: denied { listen } for pid=776 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.289929][ T775] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.304713][ T30] audit: type=1400 audit(1756971831.092:210): avc: denied { ioctl } for pid=779 comm="syz.1.165" path="mnt:[4026532287]" dev="nsfs" ino=4026532287 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.358430][ T783] loop2: detected capacity change from 0 to 256 [ 49.370895][ T786] netlink: 'syz.3.164': attribute type 3 has an invalid length. [ 49.392729][ T786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 49.477996][ T791] loop5: detected capacity change from 0 to 512 [ 49.679218][ T791] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 49.696006][ T791] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.729500][ T30] audit: type=1400 audit(1756971831.522:211): avc: denied { setattr } for pid=789 comm="syz.5.168" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.759833][ T791] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.168: bg 0: block 18: invalid block bitmap [ 49.781140][ T791] Quota error (device loop5): write_blk: dquota write failed [ 49.791411][ T791] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 49.803229][ T791] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.168: Failed to acquire dquot type 1 [ 49.848927][ T796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 50.038151][ T796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 50.347306][ T810] loop1: detected capacity change from 0 to 128 [ 50.361973][ T809] loop5: detected capacity change from 0 to 1024 [ 50.380684][ T809] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 50.402062][ T809] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.449789][ T30] audit: type=1400 audit(1756971832.242:212): avc: denied { ioctl } for pid=820 comm="syz.2.181" path="socket:[18564]" dev="sockfs" ino=18564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.495249][ T30] audit: type=1400 audit(1756971832.242:213): avc: denied { write } for pid=822 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.527973][ T810] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.545643][ T828] loop3: detected capacity change from 0 to 1024 [ 50.564861][ T810] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.580688][ T810] netlink: 'syz.1.175': attribute type 27 has an invalid length. [ 50.591952][ T828] EXT4-fs (loop3): Ignoring removed orlov option [ 50.608959][ T30] audit: type=1400 audit(1756971832.402:214): avc: denied { load_policy } for pid=845 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.609017][ T846] SELinux: failed to load policy [ 50.679585][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.691666][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.695521][ T851] loop2: detected capacity change from 0 to 256 [ 50.743618][ T851] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 50.762436][ T853] loop3: detected capacity change from 0 to 512 [ 50.777934][ T853] EXT4-fs (loop3): Ignoring removed nobh option [ 50.797785][ T853] EXT4-fs (loop3): error: journal path ./file1 is not a block device [ 50.834298][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.843108][ T847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.854745][ T342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.894432][ T855] loop2: detected capacity change from 0 to 1024 [ 50.898056][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.911788][ T847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.928358][ T859] loop0: detected capacity change from 0 to 1024 [ 50.939853][ T847] device veth0_vlan left promiscuous mode [ 50.948012][ T847] device veth0_vlan entered promiscuous mode [ 50.958492][ T847] device veth1_macvtap left promiscuous mode [ 50.958927][ T855] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.967776][ T847] device veth1_macvtap entered promiscuous mode [ 50.995065][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.011180][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.012056][ T859] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 51.021349][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.050908][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.062914][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.073318][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.085155][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.097553][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.109773][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.121660][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.134868][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.145782][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.156974][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.170458][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.183065][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.258558][ T873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 51.277614][ T342] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 51.294686][ T342] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 51.314048][ T880] loop1: detected capacity change from 0 to 512 [ 51.330265][ T880] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.330765][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 51.367236][ T880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.419124][ T30] audit: type=1400 audit(1756971833.212:215): avc: denied { write } for pid=889 comm="syz.2.203" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.425539][ T880] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.478651][ T880] EXT4-fs (loop1): 1 truncate cleaned up [ 51.487233][ T880] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 51.527579][ T342] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 51.547221][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.559255][ T342] usb 6-1: Product: syz [ 51.565948][ T342] usb 6-1: Manufacturer: syz [ 51.572491][ T342] usb 6-1: SerialNumber: syz [ 51.584687][ T342] usb 6-1: config 0 descriptor?? [ 51.607524][ T830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.620045][ T830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.659351][ T903] loop3: detected capacity change from 0 to 128 [ 51.665786][ T904] loop2: detected capacity change from 0 to 2048 [ 51.697909][ T903] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.714738][ T903] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.757676][ T903] netlink: 'syz.3.207': attribute type 27 has an invalid length. [ 51.791825][ T904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.855972][ T830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.868342][ T830] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.948890][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.957337][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.238073][ T903] syz.3.207 (903) used greatest stack depth: 20824 bytes left [ 52.379835][ T920] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 52.405305][ T922] loop0: detected capacity change from 0 to 512 [ 52.432804][ T926] loop3: detected capacity change from 0 to 512 [ 52.440838][ T342] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 52.459248][ T922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.480530][ T922] EXT4-fs (loop0): 1 truncate cleaned up [ 52.490341][ T922] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none. [ 52.507768][ T935] option changes via remount are deprecated (pid=934 comm=syz.1.221) [ 52.530024][ T926] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 52.581873][ T926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.591170][ T926] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.217: Block bitmap for bg 0 marked uninitialized [ 52.610233][ T926] EXT4-fs (loop3): Remounting filesystem read-only [ 52.618988][ T926] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 52.640252][ T926] EXT4-fs (loop3): Remounting filesystem read-only [ 52.641832][ T939] loop1: detected capacity change from 0 to 1024 [ 52.650240][ T926] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.217: Block bitmap for bg 0 marked uninitialized [ 52.674330][ T926] EXT4-fs (loop3): Remounting filesystem read-only [ 52.681607][ T939] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.681987][ T926] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 52.692754][ T939] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.702571][ T926] EXT4-fs (loop3): Remounting filesystem read-only [ 52.719096][ T926] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.217: Block bitmap for bg 0 marked uninitialized [ 52.738128][ T939] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.222: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.758378][ T939] EXT4-fs (loop1): 1 orphan inode deleted [ 52.766316][ T939] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.780460][ T926] EXT4-fs (loop3): Remounting filesystem read-only [ 52.807043][ T926] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 52.818295][ T926] EXT4-fs (loop3): Remounting filesystem read-only [ 52.826688][ T926] EXT4-fs (loop3): 1 orphan inode deleted [ 52.835447][ T926] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 52.887537][ T342] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 52.913987][ T342] usb 6-1: USB disconnect, device number 2 [ 52.914869][ T943] loop1: detected capacity change from 0 to 128 [ 52.946887][ T945] loop3: detected capacity change from 0 to 2048 [ 52.948724][ T943] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.974457][ T943] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.006557][ T943] netlink: 'syz.1.223': attribute type 27 has an invalid length. [ 53.035878][ T943] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.044385][ T945] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.045629][ T943] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.118104][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 53.182834][ T951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 53.290188][ T953] loop1: detected capacity change from 0 to 512 [ 53.375451][ T955] loop0: detected capacity change from 0 to 8192 [ 53.381082][ T953] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.518394][ T971] loop5: detected capacity change from 0 to 128 [ 53.545292][ T973] loop0: detected capacity change from 0 to 512 [ 53.566518][ T971] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.624640][ T973] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.235: corrupted inode contents [ 53.624867][ T971] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.675814][ T971] netlink: 'syz.5.236': attribute type 27 has an invalid length. [ 53.686869][ T973] EXT4-fs error (device loop0): ext4_dirty_inode:6071: inode #16: comm syz.0.235: mark_inode_dirty error [ 53.703850][ T973] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.235: corrupted inode contents [ 53.721591][ T973] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.235: mark_inode_dirty error [ 53.747906][ T973] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.235: corrupted inode contents [ 53.769845][ T341] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.782906][ T973] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 53.794536][ T973] EXT4-fs error (device loop0): ext4_do_update_inode:5235: inode #16: comm syz.0.235: corrupted inode contents [ 53.813263][ T973] EXT4-fs error (device loop0): ext4_truncate:4304: inode #16: comm syz.0.235: mark_inode_dirty error [ 53.831986][ T973] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 53.848703][ T973] EXT4-fs (loop0): 1 truncate cleaned up [ 53.856253][ T973] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.872566][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.873017][ T973] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.883674][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.940079][ T973] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.235: iget: bad i_size value: 1407374883557376 [ 54.044233][ T985] loop3: detected capacity change from 0 to 2048 [ 54.080244][ T985] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 54.124220][ T995] loop0: detected capacity change from 0 to 1024 [ 54.135854][ T995] EXT4-fs (loop0): Ignoring removed nobh option [ 54.144345][ T993] loop5: detected capacity change from 0 to 2048 [ 54.147725][ T995] EXT4-fs (loop0): Ignoring removed bh option [ 54.156021][ T341] usb 3-1: config 8 has an invalid interface number: 235 but max is 0 [ 54.167711][ T995] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.209045][ T341] usb 3-1: config 8 has no interface number 0 [ 54.224056][ T341] usb 3-1: config 8 interface 235 has no altsetting 0 [ 54.243417][ T341] usb 3-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 54.258609][ T993] Alternate GPT is invalid, using primary GPT. [ 54.266466][ T999] loop3: detected capacity change from 0 to 128 [ 54.268849][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.281281][ T995] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 54.286812][ T993] loop5: p2 p3 p7 [ 54.354112][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 54.354130][ T30] audit: type=1400 audit(1756971836.142:225): avc: denied { read write } for pid=992 comm="syz.5.242" name="loop5p3" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.392565][ T999] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 54.428307][ T425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 54.428517][ T30] audit: type=1400 audit(1756971836.192:226): avc: denied { open } for pid=992 comm="syz.5.242" path="/dev/loop5p3" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.511644][ T1005] loop0: detected capacity change from 0 to 2048 [ 54.538289][ T1003] loop5: detected capacity change from 0 to 8192 [ 54.552033][ T1009] loop1: detected capacity change from 0 to 128 [ 54.559430][ T30] audit: type=1400 audit(1756971836.352:227): avc: denied { mounton } for pid=1010 comm="syz.3.250" path="/proc/120/task" dev="proc" ino=18878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 54.597764][ T30] audit: type=1400 audit(1756971836.382:228): avc: denied { getattr } for pid=964 comm="syz.2.232" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.612070][ T1005] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,grpid,lazytime,,errors=continue. Quota mode: none. [ 54.641677][ T1017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 54.648724][ T341] usb 3-1: string descriptor 0 read error: -71 [ 54.669207][ T1009] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.695708][ T30] audit: type=1400 audit(1756971836.482:229): avc: denied { mounton } for pid=1004 comm="syz.0.246" path="/43/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.702805][ T341] usb 3-1: USB disconnect, device number 4 [ 54.729031][ T1009] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.738491][ T347] udevd[347]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 54.761794][ T1001] udevd[1001]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 54.780061][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 54.781782][ T1000] udevd[1000]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 54.837486][ T347] udevd[347]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 54.851945][ T1000] udevd[1000]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 54.859461][ T1001] udevd[1001]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 54.889541][ T30] audit: type=1400 audit(1756971836.682:230): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 54.939025][ T1020] device veth0_vlan left promiscuous mode [ 54.947741][ T1020] device veth0_vlan entered promiscuous mode [ 54.965324][ T1024] loop1: detected capacity change from 0 to 2048 [ 54.969336][ T1020] device veth1_macvtap left promiscuous mode [ 54.984713][ T1020] device veth1_macvtap entered promiscuous mode [ 55.011198][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.030075][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.030448][ T1024] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 55.040173][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.066864][ T613] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.075785][ T1024] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.255: iget: bad i_size value: 8796093031208 [ 55.076530][ T613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.097507][ T30] audit: type=1400 audit(1756971836.892:231): avc: denied { bind } for pid=1025 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.100692][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.141863][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.152142][ T613] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.160869][ T613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.170783][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.182298][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 55.193572][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.203702][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 55.213594][ T30] audit: type=1400 audit(1756971837.002:232): avc: denied { read } for pid=1031 comm="syz.2.256" path="socket:[18927]" dev="sockfs" ino=18927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.214380][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.259361][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.274190][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.285154][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.297633][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.309986][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.319355][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.333560][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.350911][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.362242][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.376880][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.391694][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.391989][ T1037] loop1: detected capacity change from 0 to 8192 [ 55.402553][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.419469][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.430344][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.441005][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.454470][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.465298][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.475367][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.484741][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.495166][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.506711][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.519104][ T30] audit: type=1400 audit(1756971837.312:233): avc: denied { write } for pid=1038 comm="syz.1.259" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.559342][ T1039] binder_alloc: binder_alloc_mmap_handler: 1038 200000ffe000-200001000000 already mapped failed -16 [ 55.559998][ T1026] netlink: 'syz.0.254': attribute type 6 has an invalid length. [ 55.583369][ T1026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'. [ 55.602596][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.656140][ T1045] loop3: detected capacity change from 0 to 1024 [ 55.676995][ T30] audit: type=1400 audit(1756971837.462:234): avc: denied { getopt } for pid=1048 comm="syz.5.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.711112][ T1045] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.768724][ T1045] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 55.794091][ T1059] loop5: detected capacity change from 0 to 512 [ 55.812325][ T1045] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 55.837103][ T1045] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.858233][ T1045] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.858233][ T1045] [ 55.875646][ T1045] EXT4-fs (loop3): Total free blocks count 0 [ 55.883714][ T1045] EXT4-fs (loop3): Free/Dirty block details [ 55.891690][ T1045] EXT4-fs (loop3): free_blocks=20480 [ 55.905841][ T1045] EXT4-fs (loop3): dirty_blocks=32 [ 55.913999][ T1045] EXT4-fs (loop3): Block reservation details [ 55.919591][ T1059] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 55.921424][ T1045] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 55.938495][ T1059] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.953563][ T1060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28 [ 55.977272][ T1060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.977272][ T1060] [ 56.007687][ T606] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 56.079363][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 56.146629][ T1075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 56.164444][ T1074] loop2: detected capacity change from 0 to 256 [ 56.177607][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 56.196067][ T1077] loop5: detected capacity change from 0 to 128 [ 56.216054][ T1074] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 56.261941][ T1077] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.282649][ T1079] loop2: detected capacity change from 0 to 2048 [ 56.292929][ T1077] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.369400][ T1079] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.389106][ T1079] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.275: bg 0: block 432: padding at end of block bitmap is not set [ 56.425828][ T1084] netlink: 32 bytes leftover after parsing attributes in process `syz.5.276'. [ 56.447693][ T606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.457539][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 56.474762][ T606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.504396][ T606] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.00 [ 56.517572][ T606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.534726][ T1090] loop2: detected capacity change from 0 to 512 [ 56.541701][ T606] usb 2-1: config 0 descriptor?? [ 56.567713][ T1087] loop5: detected capacity change from 0 to 8192 [ 56.618947][ T1090] EXT4-fs (loop2): 1 orphan inode deleted [ 56.628581][ T1090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.646359][ T1090] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.647632][ T39] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 56.673790][ T1090] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.279: iget: bad i_size value: 360287970189639690 [ 56.682548][ T39] usb 1-1: config 0 has no interface number 0 [ 56.857636][ T39] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.869812][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.882305][ T39] usb 1-1: Product: syz [ 56.887085][ T39] usb 1-1: Manufacturer: syz [ 56.893454][ T39] usb 1-1: SerialNumber: syz [ 56.916034][ T39] usb 1-1: config 0 descriptor?? [ 56.968047][ T39] smsc95xx v2.0.0 [ 57.042442][ T606] apple 0003:05AC:020F.0001: unknown main item tag 0xe [ 57.051059][ T606] apple 0003:05AC:020F.0001: unknown main item tag 0x0 [ 57.064867][ T606] apple 0003:05AC:020F.0001: unexpected long global item [ 57.079374][ T606] apple 0003:05AC:020F.0001: parse failed [ 57.087902][ T341] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.088606][ T606] apple: probe of 0003:05AC:020F.0001 failed with error -22 [ 57.264389][ T606] usb 2-1: USB disconnect, device number 2 [ 57.337736][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 57.398295][ T39] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 57.415695][ T39] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.467904][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 57.484668][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.501415][ T341] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 57.517701][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.537893][ T341] usb 3-1: config 0 descriptor?? [ 57.880982][ T1109] binder: binder_mmap: 1108 200000000000-200000b36000 bad vm_flags failed -1 [ 57.929008][ T1111] loop1: detected capacity change from 0 to 128 [ 57.974137][ T1111] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.997028][ T1111] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.035228][ T1111] device veth0_vlan left promiscuous mode [ 58.042231][ T1111] device veth0_vlan entered promiscuous mode [ 58.056115][ T1111] device veth1_macvtap left promiscuous mode [ 58.065999][ T1111] device veth1_macvtap entered promiscuous mode [ 58.077431][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.090192][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.102162][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.108436][ T341] usbhid 3-1:0.0: can't add hid device: -71 [ 58.118947][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.126509][ T341] usbhid: probe of 3-1:0.0 failed with error -71 [ 58.135063][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.135587][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.145736][ T341] usb 3-1: USB disconnect, device number 5 [ 58.166398][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.184013][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.194568][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.210216][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.221611][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 58.238580][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.249313][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 58.258768][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.272429][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.282214][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.296113][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.310808][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.325028][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.338892][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.349775][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.367143][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.367930][ T39] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 58.386153][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.408164][ T39] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 58.420530][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.446749][ T39] usb 1-1: USB disconnect, device number 3 [ 58.451450][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.478659][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.489193][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.505145][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.523318][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.535349][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.551868][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.566666][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.582896][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.598156][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.621801][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.623820][ T1119] loop2: detected capacity change from 0 to 512 [ 58.640272][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.664052][ T1119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.685814][ T1119] EXT4-fs (loop2): 1 truncate cleaned up [ 58.696141][ T1119] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000040000,noblock_validity,max_batch_time=0x0000000000000007,minixdf,,errors=continue. Quota mode: none. [ 58.746127][ T1119] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.290: corrupted in-inode xattr [ 58.768910][ T1119] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1760: inode #15: comm syz.2.290: unable to update i_inline_off [ 58.791794][ T1119] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.290: corrupted in-inode xattr [ 58.849016][ T1125] loop1: detected capacity change from 0 to 256 [ 58.961242][ T1138] loop2: detected capacity change from 0 to 1024 [ 58.986586][ T1125] loop1: detected capacity change from 0 to 512 [ 59.001086][ T1138] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,max_batch_time=0x0000000000008000,,errors=continue. Quota mode: none. [ 59.031644][ T1138] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.054787][ T1138] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 3: comm syz.2.297: lblock 3 mapped to illegal pblock 3 (length 3) [ 59.081131][ T1138] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 59.102024][ T1138] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.102024][ T1138] [ 59.124880][ T1125] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 59.346181][ T425] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 59.504351][ T425] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 59.547792][ T1150] kvm [1149]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x2a00000000 [ 59.562749][ T1150] kvm [1149]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x4200000000 [ 59.587497][ T425] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.587497][ T425] [ 59.619494][ T1155] loop5: detected capacity change from 0 to 128 [ 59.648684][ T1150] kvm [1149]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x7400000000 [ 59.698482][ T1155] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.748047][ T1155] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.795128][ T1155] netlink: 'syz.5.303': attribute type 27 has an invalid length. [ 59.820626][ T1173] loop2: detected capacity change from 0 to 1024 [ 59.911210][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.920478][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.942692][ T1173] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.096200][ T1173] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.197148][ T1173] __quota_error: 8 callbacks suppressed [ 60.197207][ T1173] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 60.283346][ T1181] loop3: detected capacity change from 0 to 512 [ 60.287639][ T1173] EXT4-fs warning (device loop2): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 60.322173][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.331660][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.340069][ T1173] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 60.369038][ T1173] EXT4-fs (loop2): 1 truncate cleaned up [ 60.376925][ T1173] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 60.397730][ T1181] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.312: corrupted in-inode xattr [ 60.399304][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.416302][ T1181] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.312: couldn't read orphan inode 15 (err -117) [ 60.424288][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.436715][ T1176] device veth0_vlan left promiscuous mode [ 60.455025][ T1176] device veth0_vlan entered promiscuous mode [ 60.463742][ T1176] device veth1_macvtap left promiscuous mode [ 60.472743][ T1176] device veth1_macvtap entered promiscuous mode [ 60.485530][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.495913][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.505107][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.515710][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.517977][ T1181] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 60.528298][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.577044][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.594365][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.604343][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.623137][ T30] audit: type=1400 audit(1756971842.412:243): avc: denied { create } for pid=1180 comm="syz.3.312" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 60.625122][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.686851][ T1181] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 12: comm syz.3.312: lblock 3 mapped to illegal pblock 12 (length 1) [ 60.687510][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.720944][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.735159][ T1186] loop0: detected capacity change from 0 to 512 [ 60.736334][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.757227][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.770041][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.786461][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.860368][ T1186] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.314: iget: bad i_size value: 38620345925642 [ 60.879575][ T1184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 60.893946][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 60.893948][ T1186] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.314: couldn't read orphan inode 15 (err -117) [ 60.906896][ T1186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.968012][ T1197] ================================================================== [ 60.977993][ T1197] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 60.987716][ T1197] Read of size 8 at addr ffff8881132537c0 by task syz.1.317/1197 [ 60.997118][ T1197] [ 60.999969][ T1197] CPU: 1 PID: 1197 Comm: syz.1.317 Not tainted syzkaller #0 [ 61.010568][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.031257][ T1197] Call Trace: [ 61.039900][ T1197] [ 61.045210][ T1197] __dump_stack+0x21/0x30 [ 61.051256][ T1197] dump_stack_lvl+0xee/0x150 [ 61.057171][ T1197] ? show_regs_print_info+0x20/0x20 [ 61.063586][ T1197] ? load_image+0x3a0/0x3a0 [ 61.069366][ T1197] print_address_description+0x7f/0x2c0 [ 61.076324][ T1197] ? tc_setup_flow_action+0x870/0x3240 [ 61.082767][ T1197] kasan_report+0xf1/0x140 [ 61.088745][ T1197] ? _raw_spin_lock_irq+0xe0/0xe0 [ 61.096634][ T1197] ? tc_setup_flow_action+0x870/0x3240 [ 61.103207][ T1197] __asan_report_load8_noabort+0x14/0x20 [ 61.110778][ T1197] tc_setup_flow_action+0x870/0x3240 [ 61.117284][ T1197] mall_replace_hw_filter+0x293/0x820 [ 61.124617][ T1197] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 61.132991][ T1197] ? mall_set_parms+0x520/0x520 [ 61.138534][ T1197] ? tcf_exts_destroy+0xb0/0xb0 [ 61.146482][ T1197] ? mall_set_parms+0x1e8/0x520 [ 61.152556][ T1197] mall_change+0x526/0x740 [ 61.161178][ T1197] ? __kasan_check_write+0x14/0x20 [ 61.170024][ T1197] ? mall_get+0xa0/0xa0 [ 61.174671][ T1197] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 61.182225][ T1197] tc_new_tfilter+0x12a2/0x1870 [ 61.189988][ T1197] ? tcf_gate_entry_destructor+0x20/0x20 [ 61.196543][ T1197] ? security_capable+0x87/0xb0 [ 61.202692][ T1197] ? ns_capable+0x8c/0xf0 [ 61.208115][ T1197] ? netlink_net_capable+0x125/0x160 [ 61.215415][ T1197] ? tcf_gate_entry_destructor+0x20/0x20 [ 61.222607][ T1197] rtnetlink_rcv_msg+0x81b/0xb90 [ 61.232619][ T1197] ? rtnetlink_bind+0x80/0x80 [ 61.238613][ T1197] ? memcpy+0x56/0x70 [ 61.243330][ T1197] ? avc_has_perm_noaudit+0x2f4/0x460 [ 61.250876][ T1197] ? arch_stack_walk+0xee/0x140 [ 61.258900][ T1197] ? avc_denied+0x1b0/0x1b0 [ 61.264612][ T1197] ? stack_trace_save+0x98/0xe0 [ 61.270986][ T1197] ? avc_has_perm+0x158/0x240 [ 61.278814][ T1197] ? avc_has_perm_noaudit+0x460/0x460 [ 61.285590][ T1197] ? x64_sys_call+0x4b/0x9a0 [ 61.290988][ T1197] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 61.297705][ T1197] netlink_rcv_skb+0x1e0/0x430 [ 61.303872][ T1197] ? rtnetlink_bind+0x80/0x80 [ 61.309746][ T1197] ? netlink_ack+0xb60/0xb60 [ 61.315252][ T1197] ? __netlink_lookup+0x387/0x3b0 [ 61.321483][ T1197] rtnetlink_rcv+0x1c/0x20 [ 61.326550][ T1197] netlink_unicast+0x876/0xa40 [ 61.332263][ T1197] netlink_sendmsg+0x86a/0xb70 [ 61.340486][ T1197] ? netlink_getsockopt+0x530/0x530 [ 61.346896][ T1197] ? netlink_getsockopt+0x530/0x530 [ 61.353612][ T1197] ____sys_sendmsg+0x5a2/0x8c0 [ 61.359206][ T1197] ? __sys_sendmsg_sock+0x40/0x40 [ 61.366061][ T1197] ? import_iovec+0x7c/0xb0 [ 61.373665][ T1197] ___sys_sendmsg+0x1f0/0x260 [ 61.380843][ T1197] ? __sys_sendmsg+0x250/0x250 [ 61.385838][ T1197] ? preempt_schedule_irq+0xbb/0x110 [ 61.394907][ T1197] ? irqentry_exit_cond_resched+0x29/0x30 [ 61.402854][ T1197] ? __fdget+0x1a1/0x230 [ 61.408739][ T1197] __x64_sys_sendmsg+0x1e2/0x2a0 [ 61.415037][ T1197] ? ___sys_sendmsg+0x260/0x260 [ 61.421582][ T1197] ? __kasan_check_write+0x14/0x20 [ 61.429109][ T1197] ? switch_fpu_return+0x15d/0x2c0 [ 61.436934][ T1197] x64_sys_call+0x4b/0x9a0 [ 61.442142][ T1197] do_syscall_64+0x4c/0xa0 [ 61.447628][ T1197] ? clear_bhb_loop+0x50/0xa0 [ 61.453899][ T1197] ? clear_bhb_loop+0x50/0xa0 [ 61.459488][ T1197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.466625][ T1197] RIP: 0033:0x7f093ef8fbe9 [ 61.471356][ T1197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.495979][ T1197] RSP: 002b:00007f093d9f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.506670][ T1197] RAX: ffffffffffffffda RBX: 00007f093f1c6fa0 RCX: 00007f093ef8fbe9 [ 61.516444][ T1197] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 61.527097][ T1197] RBP: 00007f093f012e19 R08: 0000000000000000 R09: 0000000000000000 [ 61.537122][ T1197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.547297][ T1197] R13: 00007f093f1c7038 R14: 00007f093f1c6fa0 R15: 00007fff37c96f28 [ 61.557377][ T1197] [ 61.560861][ T1197] [ 61.563814][ T1197] Allocated by task 1197: [ 61.569486][ T1197] __kasan_kmalloc+0xda/0x110 [ 61.576354][ T1197] __kmalloc+0x13d/0x2c0 [ 61.581231][ T1197] tcf_idr_create+0x5f/0x790 [ 61.587859][ T1197] tcf_idr_create_from_flags+0x61/0x70 [ 61.595104][ T1197] tcf_gact_init+0x346/0x580 [ 61.601504][ T1197] tcf_action_init_1+0x3f7/0x6a0 [ 61.607268][ T1197] tcf_action_init+0x1e9/0x710 [ 61.612944][ T1197] tcf_exts_validate+0x217/0x520 [ 61.618742][ T1197] mall_set_parms+0x48/0x520 [ 61.623845][ T1197] mall_change+0x45a/0x740 [ 61.629563][ T1197] tc_new_tfilter+0x12a2/0x1870 [ 61.635072][ T1197] rtnetlink_rcv_msg+0x81b/0xb90 [ 61.641647][ T1197] netlink_rcv_skb+0x1e0/0x430 [ 61.647761][ T1197] rtnetlink_rcv+0x1c/0x20 [ 61.652957][ T1197] netlink_unicast+0x876/0xa40 [ 61.658378][ T1197] netlink_sendmsg+0x86a/0xb70 [ 61.664773][ T1197] ____sys_sendmsg+0x5a2/0x8c0 [ 61.670195][ T1197] ___sys_sendmsg+0x1f0/0x260 [ 61.676920][ T1197] __x64_sys_sendmsg+0x1e2/0x2a0 [ 61.682509][ T1197] x64_sys_call+0x4b/0x9a0 [ 61.688887][ T1197] do_syscall_64+0x4c/0xa0 [ 61.695125][ T1197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.702207][ T1197] [ 61.707139][ T1197] The buggy address belongs to the object at ffff888113253700 [ 61.707139][ T1197] which belongs to the cache kmalloc-192 of size 192 [ 61.726550][ T1197] The buggy address is located 0 bytes to the right of [ 61.726550][ T1197] 192-byte region [ffff888113253700, ffff8881132537c0) [ 61.745120][ T1197] The buggy address belongs to the page: [ 61.752284][ T1197] page:ffffea00044c94c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113253 [ 61.767517][ T1197] flags: 0x4000000000000200(slab|zone=1) [ 61.776102][ T1197] raw: 4000000000000200 ffffea00044d3e00 0000000700000007 ffff888100042c00 [ 61.787318][ T1197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 61.799947][ T1197] page dumped because: kasan: bad access detected [ 61.808437][ T1197] page_owner tracks the page as allocated [ 61.815112][ T1197] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 115, ts 12236627218, free_ts 12236563595 [ 61.835018][ T1197] post_alloc_hook+0x192/0x1b0 [ 61.840190][ T1197] prep_new_page+0x1c/0x110 [ 61.845950][ T1197] get_page_from_freelist+0x2cc5/0x2d50 [ 61.853968][ T1197] __alloc_pages+0x18f/0x440 [ 61.859337][ T1197] new_slab+0xa1/0x4d0 [ 61.864346][ T1197] ___slab_alloc+0x381/0x810 [ 61.870337][ T1197] __slab_alloc+0x49/0x90 [ 61.875495][ T1197] kmem_cache_alloc_trace+0x146/0x270 [ 61.881755][ T1197] kernfs_fop_open+0x343/0xb30 [ 61.887472][ T1197] do_dentry_open+0x834/0x1010 [ 61.893425][ T1197] vfs_open+0x73/0x80 [ 61.898429][ T1197] path_openat+0x2646/0x2f10 [ 61.903249][ T1197] do_filp_open+0x1b3/0x3e0 [ 61.908644][ T1197] do_sys_openat2+0x14c/0x7b0 [ 61.917083][ T1197] __x64_sys_openat+0x136/0x160 [ 61.922925][ T1197] x64_sys_call+0x219/0x9a0 [ 61.930737][ T1197] page last free stack trace: [ 61.937518][ T1197] free_unref_page_prepare+0x542/0x550 [ 61.944339][ T1197] free_unref_page+0xa2/0x550 [ 61.949467][ T1197] __free_pages+0x6c/0x100 [ 61.954735][ T1197] free_pages+0x82/0x90 [ 61.959536][ T1197] selinux_genfs_get_sid+0x20b/0x250 [ 61.965715][ T1197] inode_doinit_with_dentry+0x86e/0xd70 [ 61.973137][ T1197] selinux_d_instantiate+0x27/0x40 [ 61.979698][ T1197] security_d_instantiate+0x9e/0xf0 [ 61.985829][ T1197] d_splice_alias+0x6d/0x390 [ 61.991569][ T1197] kernfs_iop_lookup+0x2c2/0x310 [ 61.997098][ T1197] __lookup_slow+0x2aa/0x3e0 [ 62.002287][ T1197] lookup_slow+0x57/0x70 [ 62.008449][ T1197] walk_component+0x325/0x460 [ 62.014241][ T1197] path_lookupat+0x180/0x490 [ 62.019313][ T1197] filename_lookup+0x1e2/0x4f0 [ 62.024887][ T1197] user_path_at_empty+0x47/0x1c0 [ 62.032112][ T1197] [ 62.036932][ T1197] Memory state around the buggy address: [ 62.047174][ T1197] ffff888113253680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 62.059155][ T1197] ffff888113253700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.069534][ T1197] >ffff888113253780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 62.081094][ T1197] ^ [ 62.088735][ T1197] ffff888113253800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.100003][ T1197] ffff888113253880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 62.110440][ T1197] ================================================================== [ 62.120534][ T1197] Disabling lock debugging due to kernel taint [ 62.137877][ T30] audit: type=1400 audit(1756971843.932:244): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.169107][ T30] audit: type=1400 audit(1756971843.932:245): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.206363][ T30] audit: type=1400 audit(1756971843.932:246): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.250359][ T30] audit: type=1400 audit(1756971843.932:247): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.280513][ T30] audit: type=1400 audit(1756971843.932:248): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.311440][ T30] audit: type=1400 audit(1756971843.932:249): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.347262][ T30] audit: type=1400 audit(1756971843.932:250): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.437530][ T742] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.677635][ T742] usb 3-1: Using ep0 maxpacket: 8 [ 62.957825][ T742] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 62.971041][ T742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.983939][ T742] usb 3-1: Product: syz [ 62.989086][ T742] usb 3-1: Manufacturer: syz [ 62.995644][ T742] usb 3-1: SerialNumber: syz [ 63.005815][ T742] usb 3-1: config 0 descriptor?? [ 64.260891][ T606] usb 3-1: USB disconnect, device number 6