last executing test programs: 53.838688287s ago: executing program 32 (id=14): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x200) r3 = dup3(r2, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') readahead(r1, 0x800, 0x2) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000002c0), 0x8000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 52.281240955s ago: executing program 33 (id=19): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x70dfbc04e1dafe2, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000a000000070000000000000803000000080000000000000700000000000000000100008d000000000800000002000000"], &(0x7f0000000a00)=""/248, 0x4e, 0xf8, 0x1, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x2) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x1, 0x9ed, 0x1, 0x81, 0x9, 0x1}}, {0xfffffffffffffe70, 0x2, [0x1000]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000006000000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, r4, 0x0, 0x7}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000100)={[{@errors_remount}, {@nobh}, {@quota}]}, 0x5, 0x560, &(0x7f00000009c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r6, 0xe0ffff, 0x19, 0x3) 52.213498277s ago: executing program 3 (id=22): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581033b"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="40300d0000000d232f1ba4cd4495887b998c461810adbe6bb6c5f91563f316c3df734d684641e578c1c47db04a4d1d923cd9f7f48411c3"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x7e3, 0x2000000, 0x20000, 0x1c, 0x0, 0x8, 0x1], 0x0, 0x41981}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="820004000000260000000500000000100000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) sendto$packet(r1, 0x0, 0x0, 0x81, 0x0, 0x0) 50.276601264s ago: executing program 6 (id=20): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21a0000, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f00000002c0)="be"}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}, {0x0, 0x0, 0x80007, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xa4, 0x0}, {0x1, 0x0, 0x2000100, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) setns(r3, 0x24020000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 50.258192154s ago: executing program 6 (id=30): r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/15, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0], 0x48}}, 0x0) r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x2) epoll_wait(r6, 0x0, 0x0, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x2a}, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0xd000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./mytrace\x00', 0x200000, &(0x7f0000000140)={[{@gid}, {@zero_size_dir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@keep_last_dots}, {@utf8}, {@codepage={'codepage', 0x3d, 'cp855'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@errors_continue}, {@namecase}]}, 0xfe, 0x153d, &(0x7f00000028c0)="$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") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 49.709690118s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 49.6149613s ago: executing program 3 (id=35): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r3, 0x1, r4, 0x6, 0x80000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {r5, r6+60000000}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) gettid() (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r3, 0x1, r4, 0x6, 0x80000}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {r5, r6+60000000}}, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) 48.757964541s ago: executing program 3 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_ublk_setup_io_uring(0x4c27, &(0x7f0000000000)={0x0, 0x9b47, 0x80, 0x1, 0xc0}, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001540)={0x10001, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/1, 0x1}], &(0x7f0000001500)=[0x5, 0x2c30c236, 0x7, 0x7fff, 0x44a, 0x4, 0x7ff, 0x6], 0x3}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x2) ioctl(r4, 0xc178fd02, &(0x7f0000000740)="0400000000000000") r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x4, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.583280406s ago: executing program 3 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xea, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1106, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfc, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000800)={0x20, 0x2b, 0xf4, {0xf4, 0xb, "ee3083707390746721d09bcfa52a7c0008943131166f56efcacb8281de510cdac1002000000000000000b98e6f0f5a714c2584edc305dfe3ec0bfe547fccee5ff0aa2a18d53751009558c55782527fa16a59d6f9fd87ed845dca8772845c2e700657255d477beae2ae6b831da49e1d42f0695600ca6925f3d4145339b8802d1ad7efd196b6c9087be0304a22f8db4b2d89ae1c04e7e2349c04df76b3e9a673e90b91ef35352a2a64cf18ae06b3624d618cc6d37927fdf73c3bf64219c9a6636e22b115d5b79baa12c5fb192b0ca078b66669b3f64f1467e0304d8e656fb86da9283c7ec1a6a4bb662d0204a40bcea8602213"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0xee01, 0xee00) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x8, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42}, [@ldst={0x0, 0x1, 0x3, 0xb, 0x2, 0x4, 0x1}, @generic={0xd5, 0x9, 0x4, 0xff, 0xf}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ffffffb}]}, &(0x7f0000000940)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x3ed2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={r2, &(0x7f00000003c0)='#{\x00', 0x4002, &(0x7f0000000400)={@align=0x4, {0x3, 0x2, 0x8}}, 0x80000001, &(0x7f0000000440), &(0x7f0000000480)=0x3ff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x26}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x5c, &(0x7f0000000300)=""/92, 0x41100, 0x2e, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x7, 0x3b, 0x776}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000600)=[r0, r0, r2], &(0x7f0000000640)=[{0x3, 0x1, 0x0, 0x5}, {0x5, 0x2, 0x0, 0x2}, {0x4, 0x5, 0x9, 0x2}, {0x3, 0x5, 0x9, 0x3}, {0x0, 0x2, 0x5}, {0x1, 0x4, 0xb, 0xc}, {0x5, 0x3, 0x0, 0x4}, {0x1, 0x2, 0xf, 0x4}], 0x10, 0x347c}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000780)={r4, &(0x7f0000000080)='syzkaller\x00', 0x0, &(0x7f00000000c0)={@align=0x5, {0x8606, 0x9b0, 0xff28, 0x1}}, 0x8a96, &(0x7f0000000140), &(0x7f0000000180)=0x5}) mount_setattr(r6, &(0x7f00000007c0)='./file0\x00', 0x9900, &(0x7f0000000900)={0x72, 0x2, 0x80000, {r4}}, 0x20) 48.554500066s ago: executing program 3 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000300)="fc65263f6af663ef2a0ccfe551c203d3735ee5bc953b9420ca75526fd97cc0456400deed270c7524dff742927c3c84b62110b1ca68eac4", 0x37}, {&(0x7f0000000340)="948fca8e0afd702bfe7d20e396b7f2f6076ceff8046560d63bafd719ba4143dbaa12a3420c17b32d2cadad772480f51c8c9ffe2b045db935101e84f0430665f60a61644a0767ae2347ae1e651005f1b0d73175938979be1bfd785a2e954688c108869ff0e7bb85578f7f646d159fed02de09b413755a99f8e8ad8ee5685dea3fe6bb10ee7de9d3419ada5c977e6cbc5ad2d57b3817b500b8cde8e3a1a5970891c54a32b019ac22f0302f7e72810b4f70259d8807a20d023e332efd476ee34628b2baf72e5e2b7f02031b5c3c934ece7c9d5ac9ff38545efbb5a090d6999c3c3bda0513a4f13d823c6e124aef3dabfa", 0xef}, {&(0x7f0000000440)="8492c8270d6e2e2592f5d837d83ca556083bbeec3d617d932af08c927a493a98368f4c5c67d519c90c93b5ec224f15c6fb528a7c5e72fcb360a2fd83cf1b6a475fa5fbdcc015f158bdc8fff061767cd28f416e9e861de69526b3cfef04e5bcbc82f635cd0116893e32bac4a798b58db54bdb378adc581a3e0ae9201c768c03bc61de1088e3d3bcce9162dde4", 0x8c}, {&(0x7f0000000500)="304a5debe32f6f8348a76935231b7608592bebad5c15dddd6f0ae7880a3c56e16e4bc74614c9f83806aab85b77e4c91b611eff5ea94b24d21807c6d61f8bcf6ad330dcdfd31a6265227630a0fb802178a0b4878c75d3cd083dfffc5b5e2f44901b41", 0x62}, {&(0x7f0000000580)="f8aa3d3e3e73072b933ae1551e0deea7e35b68d62896e943f0e4313497613acaba16dc09068c8a11946e", 0x2a}, {&(0x7f0000000640)="3fc0f327cd3323fabf4d8fd4217cb5644fc649c18d1484c06f82dff9f1356788fe26fddb442e91eef5c3c8f9228b44c420ea5fdd9e03196532ecdee8a409f80f13f890ae37e84e7fea35acdf9975874b8df4a6f80094a922c872b79d9f217dae504198601707f257c42b63f7209ea6ff6ef6c3b610816945b6e2d2005324605b4fbaa518408d0838eb709a1a25d76da332535c7f5d8cfcd41aed7abb13875602d440052fc67092343fffe338ed50bb5105bbe301daa437861d66c4216ad91ee6a63679cb020ff407df8d8a3b67dc898f32715fb76ea865d57e6818b9021a0b5358097be2c59220dfe40b0f", 0xeb}], 0x6, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x58, 0x40000}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(r6, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002240)={0x2020}, 0x2020) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r8, 0x25, 0x0, @val=@tcx}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) userfaultfd(0x80801) 48.522938827s ago: executing program 34 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000300)="fc65263f6af663ef2a0ccfe551c203d3735ee5bc953b9420ca75526fd97cc0456400deed270c7524dff742927c3c84b62110b1ca68eac4", 0x37}, {&(0x7f0000000340)="948fca8e0afd702bfe7d20e396b7f2f6076ceff8046560d63bafd719ba4143dbaa12a3420c17b32d2cadad772480f51c8c9ffe2b045db935101e84f0430665f60a61644a0767ae2347ae1e651005f1b0d73175938979be1bfd785a2e954688c108869ff0e7bb85578f7f646d159fed02de09b413755a99f8e8ad8ee5685dea3fe6bb10ee7de9d3419ada5c977e6cbc5ad2d57b3817b500b8cde8e3a1a5970891c54a32b019ac22f0302f7e72810b4f70259d8807a20d023e332efd476ee34628b2baf72e5e2b7f02031b5c3c934ece7c9d5ac9ff38545efbb5a090d6999c3c3bda0513a4f13d823c6e124aef3dabfa", 0xef}, {&(0x7f0000000440)="8492c8270d6e2e2592f5d837d83ca556083bbeec3d617d932af08c927a493a98368f4c5c67d519c90c93b5ec224f15c6fb528a7c5e72fcb360a2fd83cf1b6a475fa5fbdcc015f158bdc8fff061767cd28f416e9e861de69526b3cfef04e5bcbc82f635cd0116893e32bac4a798b58db54bdb378adc581a3e0ae9201c768c03bc61de1088e3d3bcce9162dde4", 0x8c}, {&(0x7f0000000500)="304a5debe32f6f8348a76935231b7608592bebad5c15dddd6f0ae7880a3c56e16e4bc74614c9f83806aab85b77e4c91b611eff5ea94b24d21807c6d61f8bcf6ad330dcdfd31a6265227630a0fb802178a0b4878c75d3cd083dfffc5b5e2f44901b41", 0x62}, {&(0x7f0000000580)="f8aa3d3e3e73072b933ae1551e0deea7e35b68d62896e943f0e4313497613acaba16dc09068c8a11946e", 0x2a}, {&(0x7f0000000640)="3fc0f327cd3323fabf4d8fd4217cb5644fc649c18d1484c06f82dff9f1356788fe26fddb442e91eef5c3c8f9228b44c420ea5fdd9e03196532ecdee8a409f80f13f890ae37e84e7fea35acdf9975874b8df4a6f80094a922c872b79d9f217dae504198601707f257c42b63f7209ea6ff6ef6c3b610816945b6e2d2005324605b4fbaa518408d0838eb709a1a25d76da332535c7f5d8cfcd41aed7abb13875602d440052fc67092343fffe338ed50bb5105bbe301daa437861d66c4216ad91ee6a63679cb020ff407df8d8a3b67dc898f32715fb76ea865d57e6818b9021a0b5358097be2c59220dfe40b0f", 0xeb}], 0x6, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x58, 0x40000}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(r6, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r9, &(0x7f0000002240)={0x2020}, 0x2020) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r8, 0x25, 0x0, @val=@tcx}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) userfaultfd(0x80801) 47.9899395s ago: executing program 5 (id=48): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000001140)=[{0x8, 0x67, 0xff, 0x5}, {0x5, 0x1, 0x8}, {0x986, 0x7, 0x3, 0x1ff}, {0xfff9, 0x1, 0x3, 0x5}, {0x1, 0x2, 0x5, 0x97f}, {0x101, 0x3, 0x9, 0x7}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000900)="84abdaa208618e2d27169f9ab6a203f4159a925ccb03e261", 0x18, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0xf, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file1\x00', 0x800804, &(0x7f0000001500)=ANY=[@ANYBLOB="696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d77696e6e742c757466383d312c732949686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f636173652c726f6469722c757466383d312c726f6469722c636f6465706167653d3835302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d6d6163677265656b2c757466383d302c726f6469722c726f6469722c00f43d839fd5290067cd75f54b5a1a43c206c46ac4f97525667c7aac95bc7eaa947501fa4f788f7c7d1d39407b5f28131c77"], 0x1, 0x29f, &(0x7f0000001240)="$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") ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000001180)={0x6, 0x2}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) timer_create(0x6, &(0x7f0000001080)={0x0, 0xd, 0x0, @tid=r2}, &(0x7f00000010c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000001100)={{0x0, 0x3938700}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 47.436246283s ago: executing program 5 (id=49): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000100000000000000", 0x58}], 0x1) (async) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) (async) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x10001, 0x4) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex$unlock_wake_list64(&(0x7f0000000040)=0x151, 0x28a, 0x4, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)=0x3, 0xf) 47.217307199s ago: executing program 6 (id=50): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = fsopen(&(0x7f0000000280)='binder\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97r0, &(0x7f0000000180)='debugfs\x00', 0x34403, &(0x7f0000000200)={@_ha_fsid={[0x9, 0x21e2]}, {0x3, 0x3, 0x40000000, 0x240000000}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000440)=0x1ff}) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='+p', 0x2) 46.934278556s ago: executing program 6 (id=54): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$char_usb(r0, &(0x7f0000001680)="0c70f9fa91369d5705766005e8d935", 0xf) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20044050}, 0x8040) syz_usb_connect$midi(0x6, 0xef, &(0x7f0000001a00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x1, 0x1, 0x8, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x57}, @ms_header={0x7, 0x24, 0x1, 0xe6d9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xf, 0x5}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x6, 0x1, [{0x9, 0x33}], 0x80}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x6, 0x1, [{0x5, 0x62}], 0xe}, @midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x14, 0x4, [{0x0, 0x8a}, {0x81, 0x5}, {0x8, 0x80}, {0x1, 0xd}]}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x0, 0x1, [{0x7c, 0xeb}], 0x80}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x3, 0x3, 0x70, {0x13, 0x25, 0x1, 0xf, "954538cb3ee8e263149b60106ffc24"}}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x5, 0x3, 0x81, {0xa, 0x25, 0x1, 0x6, "b2a03a848bd1"}}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x1, 0x8, 0x3, {0x4}}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x0, 0x0, 0x7, {0x10, 0x25, 0x1, 0xc, "7be30ea28012394b66d0d8e8"}}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x40, 0xe, 0x1, {0x13, 0x25, 0x1, 0xf, "34ae47a33d8d09308e3a8a47817b38"}}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x8, 0x1, 0x6, {0xe, 0x25, 0x1, 0xa, "d2676fa1e00543c1b659"}}}]}}}}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x300, 0x3, 0xbc, 0x5, 0x8, 0x6}, 0x3f, &(0x7f0000001b40)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "29c3a2a9112453a24d67a0f1e01e511b"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x9, 0xe}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x5, 0x0, 0x800, 0x32}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d98602b485fccabf0fa44546c5dff9a0"}]}, 0x3, [{0x4d, &(0x7f0000001b80)=@string={0x4d, 0x3, "b1b0db3e484ee1296e740c6f3bce512cdbd9e5eaad3a939023aef3e3112bbf4a00e5169d515634c80c40cc79e395c70d95aa7c50faff9370b5d7ca4ad4c824a821cdfa5c395d16ed1c4040"}}, {0xe3, &(0x7f0000001c00)=@string={0xe3, 0x3, "a2855d7f1957397e2d1c6f170a16789f796ffa7bddb92c1ab4f9e45f0299f3b1f9b805b0fceaeb819dd02df3701c4f92a1d3467c5b07d43f1fdf3a605c28caa7f405d7043d35050d282c71c2262850443dfba7b07d743ed3c21aed7bd3f93799c35daaa8d59d404cd0a038f8213e46a4eb9db9e2c2192ecd48f3e28e840edd4ea9fecd81ccbd7f5f76a95f6b8f9681f73dc01cacde8954f4c1aafa0869132e452823c2b30585abfa14176c3a9672b0aa0616404912ec4748cd99b9c58070eb53fb2971d10c9f2b24ac7c4c534f66c803cd165d71bb694f26b84527399279ed4964"}}, {0x80, &(0x7f0000001d00)=@string={0x80, 0x3, "14e68b4d7701620f61d219b7bc91a6c93f4af13abdaa9ae8e58b481067126f9d613d0bac610b102f205cf845066fb865be0a56151a2ba48290250a4c4e3572ea329cadb4354b4ab963ec902bb6425689929c1d517f62a1b7bf8d1fab04d5b7e64e56ba57f66e7a4d10d821b880f26eec2c3a6a9988e2f8e45e2a90c51ba1"}}]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") (async) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) (rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001800)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/171, 0xab, 0x0, &(0x7f0000001780)=""/124, 0x7c}, &(0x7f0000001840)=0x40) (async, rerun: 64) write$P9_RREADLINK(r3, &(0x7f0000001dc0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (rerun: 64) 46.802527359s ago: executing program 5 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x554d, &(0x7f000000ad80)="$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") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a8a439, &(0x7f000001dcc0)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x201884e, &(0x7f0000000100)=ANY=[], 0x1, 0x26b, &(0x7f0000000540)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006000000000000000100000d000000000200000003000000000000000000000d00000000000000000000000300000000010000000300000000000000005fd3"], &(0x7f0000001f00)=""/4096, 0x56, 0x8f, 0x3}, 0x28) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20040050}, 0x48000) 46.322646331s ago: executing program 6 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 46.216575903s ago: executing program 35 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 44.71120044s ago: executing program 5 (id=64): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = fsopen(&(0x7f0000000280)='binder\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97r0, &(0x7f0000000180)='debugfs\x00', 0x34403, &(0x7f0000000200)={@_ha_fsid={[0x9, 0x21e2]}, {0x3, 0x3, 0x40000000, 0x240000000}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000440)=0x1ff}) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='+p', 0x2) 44.525191674s ago: executing program 5 (id=68): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x40, 0x3, 0x5, @local, @private0, 0xc1, 0x80, 0x800, 0x7ff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0xc, 0x100005, 0x4080, 0x0, 0xffffffffffffffff, 0x2, '\x00', r0}, 0x50) 44.054526866s ago: executing program 5 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40}) (async) r1 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003600)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}}], 0x1, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0xe000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 43.946044179s ago: executing program 36 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40}) (async) r1 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003600)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}}], 0x1, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0xe000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 40.775168346s ago: executing program 4 (id=101): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000009c0)="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", 0x641}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getqdisc={0x34, 0x26, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff2}, {0x8, 0x2}, {0x2, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x6c, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x4, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "79e6f44d530dc1a2bbb526931e89c384"}, @mss={0x2, 0x4, 0xca}, @fastopen={0x22, 0x10, "d051b0115526f51e22f8cc846f46"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "0f7db267f6ca832e1bfe91d4d09dd847"}]}}}}}}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203ff090a0000000000000000000000030006003c000e000200000200000000000000000000000002000100000000000000000400000000030005000000000002"], 0x50}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000640)={0x1, 0xd3, "5f608f5b6378a86867fedcbf8686c068d1a0ac95e5ffbacdb0ece345bdb4455462340f7e98c78c891e581cdeb365b25a83ac2937c7b9f18449aa012d1506e561ec76ea2eacb39b85801dc3b90f75f8b00ebf58be12e1e1a715010c2411d8152aaf88d867a1e2dc0189eecd224c6ac7cae1b5feaf4ffdc4a6e7230c8ced83dd4dd9bdcb6880bda5796ce3a9439f69f5c81e6295f096e1864145cb00772e1fd3fa78c5002930973aa8eedb394f6f5b30ec40900d324ea6bf623def0761a2dda84b2e58750eeb81a4977d2b9b1e7dc7c9a631afed"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000a00)=""/220, 0xdc, 0x100008d35) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000033000000040000000200000020100000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000500000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 40.774788986s ago: executing program 4 (id=102): syz_emit_ethernet(0x7a, &(0x7f0000000480)={@empty, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fc8d3f", 0x40, 0x32, 0x0, @dev, @empty, {[@routing={0xff, 0x6, 0x2, 0xf5, 0x0, [@rand_addr=' \x01\x00', @mcast1, @mcast1]}, @srh={0x3b, 0x0, 0x4, 0x0, 0x7, 0x0, 0x7}]}}}}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000480)={@empty, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fc8d3f", 0x40, 0x32, 0x0, @dev, @empty, {[@routing={0xff, 0x6, 0x2, 0xf5, 0x0, [@rand_addr=' \x01\x00', @mcast1, @mcast1]}, @srh={0x3b, 0x0, 0x4, 0x0, 0x7, 0x0, 0x7}]}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$unix(0x1, 0x2, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/85, 0x55}], 0x1, 0x2, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000580)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0xfd7b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000580)=""/249, &(0x7f0000000680)=0xf9) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009"], 0x0) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009"], 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x401, 0x80, 0x2a}, 0x18) syz_usb_control_io(r8, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000ffff25bd00"/20, @ANYRES32=0x0, @ANYBLOB="320a0500a80001000800040009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000540)) (async) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000540)) socket$packet(0x11, 0x3, 0x300) 39.136484196s ago: executing program 4 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000020ef174760000000000001091724000100000b0757cc33a2c8b3008400092107004000221800090581030800800287"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000020ef174760000000000001091724000100000b0757cc33a2c8b3008400092107004000221800090581030800800287"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) 38.113868961s ago: executing program 8 (id=117): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x6) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) (async, rerun: 32) fchdir(r2) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000480)=[{&(0x7f0000000340)="7f", 0x1}], 0x1, 0x5412, 0x5, 0x5) (async) prlimit64(0x0, 0x1, &(0x7f0000000280)={0x8, 0x233}, 0x0) sendfile(r3, r3, 0x0, 0x6fecb1) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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") r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001, 0x3, 0x0, 0x80000000, 0xff}) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000140)=@req={0x1000, 0x3, 0x8, 0xe}, 0x10) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f00000002c0)={'bond0\x00', {0x2, 0x4e25, @loopback}}) (async) write$selinux_validatetrans(r5, 0x0, 0x69) 38.019329863s ago: executing program 8 (id=118): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) close(r2) 38.018710753s ago: executing program 8 (id=120): r0 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000280)={[{@nodioread_nolock}, {@noblock_validity}, {@resuid}, {@norecovery}, {@dax_never}, {@nodioread_nolock}, {@nomblk_io_submit}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20000000) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbe\x94~=$=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97r0, &(0x7f0000000180)='debugfs\x00', 0x34403, &(0x7f0000000200)={@_ha_fsid={[0x9, 0x21e2]}, {0x3, 0x3, 0x40000000, 0x240000000}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000440)=0x1ff}) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='+p', 0x2) 35.955184354s ago: executing program 8 (id=126): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$FIBMAP(r0, 0x2285, 0x0) (async, rerun: 32) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2080400, &(0x7f0000000280)={[{@grpquota}, {@i_version}, {@quota}]}, 0x1, 0x503, &(0x7f0000000ac0)="$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") (rerun: 32) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0xd0c, 0x1000, 0x8, 0x6, 0x0, 0x5, 0xf64, 0xfffffffe}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r1, &(0x7f0000000380)='p\x00uot\x12\x95\xd4^a\x00\x00{\xb0\xa0\xf5\xe5\x12\x12\b\x80\xb0&\xdaB\x81\xbes)\x1a\xb5\xb3)\xff\x11+7\x05\x959\xe2>\xe0\xcd\xad', 0xb2bc23bf60cc50f6, &(0x7f00000000c0)={@align=0x6, {0xc, 0x5, 0x80, 0x201}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4}) keyctl$set_reqkey_keyring(0xe, 0x2) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x1, 0x9ed, 0x1, 0x81, 0x9, 0x1}}, {0xfffffffffffffe70, 0x2, [0x1000]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100e07bae17fedbdf2513000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) 35.735237419s ago: executing program 4 (id=129): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc00, 0x34, 0x4, 0x1, 0x8, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)="653a6d795f726561645f6d7372314a5f2e1ddded220c18", 0x17) symlink(&(0x7f0000000200)='./tracing\x00', &(0x7f00000001c0)='./tracing\x00') r6 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xe000200d}) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0xa19, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004409, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r8 = signalfd4(r7, &(0x7f0000000340)={[0x9]}, 0x8, 0x1000) ioctl$PTP_EXTTS_REQUEST(r8, 0x40103d02, &(0x7f0000000380)={0x321, 0x8}) chdir(&(0x7f0000000040)='./file0\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4095, 0xfff) 34.850207101s ago: executing program 4 (id=133): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C") quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001c00000095000000e0f2f6bfda11eaec0adaf17cb3cbef4af11e6ffe8a76c3eb5accef7cba180f480aefdf7700176dcfb23cfa192700e694195c8dafda2c7cbd175c1d61ff55ddf3cf52c95d8d904756455550c13befb37b275f76991e3409ce4cd00dcef0"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x6d}, 0x30) 34.750479963s ago: executing program 37 (id=133): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001c00000095000000e0f2f6bfda11eaec0adaf17cb3cbef4af11e6ffe8a76c3eb5accef7cba180f480aefdf7700176dcfb23cfa192700e694195c8dafda2c7cbd175c1d61ff55ddf3cf52c95d8d904756455550c13befb37b275f76991e3409ce4cd00dcef0"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x6d}, 0x30) 34.04303286s ago: executing program 9 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) 33.979356002s ago: executing program 9 (id=137): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 33.956011803s ago: executing program 9 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000340), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 33.033507405s ago: executing program 9 (id=141): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000340)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@nolazytime}, {@bh}, {@noinit_itable}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa0000000000007110a940000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, 0x0, 0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) 32.82018869s ago: executing program 9 (id=146): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) 31.898387522s ago: executing program 9 (id=156): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4000000000000007910080000000000630a04ff000000009500000000000000545add3f9f4e0e73d6a0871f1789a8eb2ecfe60affa0fd043cd8957e20ba4513e8777a342aee85ab2bf542b293394b6559187d6ac446503e063515bef4d173f114d043c478232b6d95a73cd67fb780739c03a2780905b50ac355e0fc7f192bcc05d26b99c3ffa59ef4d34c6204e0f41aabfed488c7b5126e2b1cc0d889ccc20961bb2b41ca60710871366b518f72e72758177ed4a21d64b56877356fb02109bfc663f378462f49b84d1f4b571164"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900010073797a310000200008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000100003800c000080080003400000000114"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000800)=@can, 0x80) 31.730490846s ago: executing program 38 (id=156): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4000000000000007910080000000000630a04ff000000009500000000000000545add3f9f4e0e73d6a0871f1789a8eb2ecfe60affa0fd043cd8957e20ba4513e8777a342aee85ab2bf542b293394b6559187d6ac446503e063515bef4d173f114d043c478232b6d95a73cd67fb780739c03a2780905b50ac355e0fc7f192bcc05d26b99c3ffa59ef4d34c6204e0f41aabfed488c7b5126e2b1cc0d889ccc20961bb2b41ca60710871366b518f72e72758177ed4a21d64b56877356fb02109bfc663f378462f49b84d1f4b571164"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900010073797a310000200008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000100003800c000080080003400000000114"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000800)=@can, 0x80) 20.92973128s ago: executing program 39 (id=126): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$FIBMAP(r0, 0x2285, 0x0) (async, rerun: 32) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2080400, &(0x7f0000000280)={[{@grpquota}, {@i_version}, {@quota}]}, 0x1, 0x503, &(0x7f0000000ac0)="$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") (rerun: 32) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0xd0c, 0x1000, 0x8, 0x6, 0x0, 0x5, 0xf64, 0xfffffffe}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r1, &(0x7f0000000380)='p\x00uot\x12\x95\xd4^a\x00\x00{\xb0\xa0\xf5\xe5\x12\x12\b\x80\xb0&\xdaB\x81\xbes)\x1a\xb5\xb3)\xff\x11+7\x05\x959\xe2>\xe0\xcd\xad', 0xb2bc23bf60cc50f6, &(0x7f00000000c0)={@align=0x6, {0xc, 0x5, 0x80, 0x201}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4}) keyctl$set_reqkey_keyring(0xe, 0x2) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x1, 0x9ed, 0x1, 0x81, 0x9, 0x1}}, {0xfffffffffffffe70, 0x2, [0x1000]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100e07bae17fedbdf2513000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) 10.67243397s ago: executing program 2 (id=309): setresgid(0xee00, 0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 9.150719417s ago: executing program 1 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 9.150491357s ago: executing program 2 (id=313): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000002940)={0x1, 'pimreg\x00', 0x1}, 0x18) 9.150280227s ago: executing program 7 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) 9.149538797s ago: executing program 0 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 7.483277668s ago: executing program 1 (id=316): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x10000008) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10) recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) 7.483135538s ago: executing program 2 (id=317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) getpid() syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)='BBB') 7.483012718s ago: executing program 7 (id=318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = open(&(0x7f0000000280)='.\x00', 0x60800, 0x40) linkat(r0, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 7.482864468s ago: executing program 0 (id=319): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="5a8c", 0x2, 0xffffffffffffffff) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, r0) 5.806417439s ago: executing program 1 (id=320): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 5.806183419s ago: executing program 7 (id=321): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000020901010000000000000a000004090001"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.805986759s ago: executing program 0 (id=322): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000200)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000001010100000000000000000202801400018008000100ac1414aa08000212e00000010c00028005000100000000"], 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.979293753s ago: executing program 1 (id=323): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000300)=0x2, 0x4) 3.979165023s ago: executing program 2 (id=324): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 3.977995123s ago: executing program 7 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) 3.977458614s ago: executing program 0 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x4008004) 1.987298692s ago: executing program 0 (id=327): r0 = socket$can_raw(0x1d, 0x3, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001000), 0x6e, 0x0}}], 0x2, 0x2021, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) fstat(r2, 0x0) getresgid(&(0x7f0000000a00), 0x0, &(0x7f0000000a80)) bind$can_raw(r0, &(0x7f00000001c0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000a80100000600000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1.987162602s ago: executing program 1 (id=328): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f0000000240)="90056788c8a2", 0x0, 0x0, 0x0, 0x6}, 0x38) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="060015000800000020001680"], 0x60}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.987076142s ago: executing program 2 (id=329): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@out_dx={0x6a, 0x28, {0xa20f}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x40000003a, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x800000005, 0x4005, 0x8, 0x0, 0x4045, 0x2, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.986952122s ago: executing program 7 (id=330): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x28000000}, {0x85, 0x0, 0x0, 0x50}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.95917ms ago: executing program 1 (id=331): r0 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) close(0x4) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='workdir', 0x0, r1) 1.06514ms ago: executing program 2 (id=332): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) read(r0, &(0x7f0000000900), 0x1000) 259.94µs ago: executing program 7 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0xf2ff}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40010) 0s ago: executing program 0 (id=334): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) kernel console output (not intermixed with test programs): 8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.622093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.630401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.638970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.646613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.667517][ T289] device veth0_vlan entered promiscuous mode [ 24.674198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.682227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.690029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.697727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.706156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.714620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.722773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.731123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.739342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.747687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.755871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.777716][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.778127][ T291] device veth1_macvtap entered promiscuous mode [ 24.796537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.805420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.813817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.821879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.831903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.852739][ T289] device veth1_macvtap entered promiscuous mode [ 24.866230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.876442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.891561][ T291] IPv6: wg0: Failed to add prefix route for address fe80::42; dropping [ 24.919667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.929240][ T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.932748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.954293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.962621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.971214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.980534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.032472][ T324] loop0: detected capacity change from 0 to 1024 [ 25.051636][ T324] EXT4-fs: Ignoring removed bh option [ 25.069570][ T327] loop2: detected capacity change from 0 to 512 [ 25.087334][ T327] ======================================================= [ 25.087334][ T327] WARNING: The mand mount option has been deprecated and [ 25.087334][ T327] and is ignored by this kernel. Remove the mand [ 25.087334][ T327] option from the mount to silence this warning. [ 25.087334][ T327] ======================================================= [ 25.087363][ T312] loop1: detected capacity change from 0 to 40427 [ 25.132219][ T312] F2FS-fs (loop1): heap/no_heap options were deprecated [ 25.136114][ T324] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.139532][ T312] F2FS-fs (loop1): fault_injection options not supported [ 25.154867][ T312] F2FS-fs (loop1): fault_type options not supported [ 25.162702][ T312] F2FS-fs (loop1): invalid crc value [ 25.169484][ T327] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.169882][ T312] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.191118][ T327] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.203288][ T295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.217517][ T324] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 25.217611][ T327] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 25.248314][ T312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.256239][ T324] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.1: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 25.276550][ T324] EXT4-fs (loop0): Remounting filesystem read-only [ 25.286134][ T324] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 25.336263][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 25.364393][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.374527][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 25.374743][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.374814][ T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 25.374945][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.374956][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.375240][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 25.375410][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.375435][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 25.375557][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.375609][ T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 25.375751][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.375761][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.375845][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 25.375976][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.375999][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 25.376116][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 25.376165][ T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 25.376286][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.376686][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.377072][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.377471][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.377863][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.378254][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.378645][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 25.414953][ T295] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.742725][ T295] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 25.769971][ T295] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 25.779392][ T354] loop4: detected capacity change from 0 to 1024 [ 25.779878][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.795072][ T295] usb 4-1: Product: syz [ 25.799357][ T354] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 25.808999][ T295] usb 4-1: Manufacturer: syz [ 25.809738][ T354] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 25.813667][ T295] usb 4-1: SerialNumber: syz [ 25.839061][ T354] EXT4-fs (loop4): orphan cleanup on readonly fs [ 25.845901][ T354] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.13: Inode bitmap for bg 0 marked uninitialized [ 25.865622][ T354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.894273][ T290] EXT4-fs (loop4): unmounting filesystem. [ 25.919425][ T359] mmap: syz.4.15 (359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.023268][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.029672][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.038623][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.040482][ T295] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.046426][ T368] device bridge_slave_0 entered promiscuous mode [ 26.059825][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.068204][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.075870][ T368] device bridge_slave_1 entered promiscuous mode [ 26.156017][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.163128][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.170437][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.177496][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.228814][ T375] loop1: detected capacity change from 0 to 1024 [ 26.236419][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 26.242780][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.250752][ T309] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.256208][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.266677][ T295] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 26.276476][ T375] EXT4-fs: Ignoring removed bh option [ 26.281898][ T375] EXT4-fs: Ignoring removed bh option [ 26.284151][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.301833][ T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.312894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.321009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.329155][ T309] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.351600][ T309] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 26.356040][ T368] device veth0_vlan entered promiscuous mode [ 26.367429][ T375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.376148][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.386391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.396115][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.405203][ T375] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.16: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 26.425198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.432788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.443184][ T375] EXT4-fs (loop1): Remounting filesystem read-only [ 26.450993][ T309] usb 3-1: Product: syz [ 26.455360][ T309] usb 3-1: Manufacturer: syz [ 26.457322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.459969][ T309] usb 3-1: SerialNumber: syz [ 26.469194][ T368] device veth1_macvtap entered promiscuous mode [ 26.484901][ T8] device bridge_slave_1 left promiscuous mode [ 26.494416][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.496256][ T375] process 'syz.1.16' launched './file0' with NULL argv: empty string added [ 26.514076][ T8] device bridge_slave_0 left promiscuous mode [ 26.520718][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.536232][ T8] device veth1_macvtap left promiscuous mode [ 26.542285][ T8] device veth0_vlan left promiscuous mode [ 26.549281][ T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 26.571986][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.579290][ T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 26.601735][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.608592][ T288] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 26.628901][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.635686][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 26.650214][ T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 26.672868][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.679624][ T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 26.702327][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.709269][ T288] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 26.731588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.740891][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.749785][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 26.764497][ T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 26.794285][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.797122][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.809315][ T288] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 26.833922][ T288] EXT4-fs (loop1): Remounting filesystem read-only [ 26.843546][ T288] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 26.871181][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 26.877301][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 26.877315][ T28] audit: type=1400 audit(1791083122.730:169): avc: denied { create } for pid=388 comm="syz.5.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.911404][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 26.936163][ T295] usb 4-1: USB disconnect, device number 2 [ 26.944123][ T28] audit: type=1400 audit(1791083122.770:170): avc: denied { create } for pid=388 comm="syz.5.24" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.978875][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 26.993329][ T28] audit: type=1400 audit(1791083122.770:171): avc: denied { map } for pid=388 comm="syz.5.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.018329][ T28] audit: type=1400 audit(1791083122.770:172): avc: denied { read write } for pid=388 comm="syz.5.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.038785][ T400] loop5: detected capacity change from 0 to 1024 [ 27.043491][ T28] audit: type=1400 audit(1791083122.770:173): avc: denied { map } for pid=388 comm="syz.5.24" path="socket:[16359]" dev="sockfs" ino=16359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 27.065003][ T400] ext4: Unknown parameter '' [ 27.076887][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.091423][ T28] audit: type=1400 audit(1791083122.830:174): avc: denied { create } for pid=388 comm="syz.5.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.114552][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.123759][ T28] audit: type=1400 audit(1791083122.970:175): avc: denied { bind } for pid=401 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.149530][ T28] audit: type=1400 audit(1791083122.970:176): avc: denied { mount } for pid=401 comm="syz.4.18" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.173887][ T402] loop4: detected capacity change from 0 to 128 [ 27.177704][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.194473][ T28] audit: type=1400 audit(1791083123.020:177): avc: denied { write } for pid=388 comm="syz.5.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.194498][ T28] audit: type=1400 audit(1791083123.020:178): avc: denied { nlmsg_write } for pid=388 comm="syz.5.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.236608][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.257046][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.272581][ T409] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 27.283664][ T288] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.383269][ T288] syz-executor (288) used greatest stack depth: 21024 bytes left [ 27.475970][ T413] overlayfs: missing 'workdir' [ 27.513309][ T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.616647][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.631339][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.646212][ T416] device bridge_slave_0 entered promiscuous mode [ 27.653962][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.661058][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.669451][ T416] device bridge_slave_1 entered promiscuous mode [ 27.703240][ T295] usb 5-1: Using ep0 maxpacket: 16 [ 27.712925][ T295] usb 5-1: unable to get BOS descriptor or descriptor too short [ 27.737867][ T295] usb 5-1: config index 0 descriptor too short (expected 11052, got 44) [ 27.756588][ T295] usb 5-1: config 156 has too many interfaces: 200, using maximum allowed: 32 [ 27.767606][ T295] usb 5-1: config 156 has an invalid descriptor of length 144, skipping remainder of the config [ 27.793365][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.799760][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.804286][ T295] usb 5-1: config 156 has 0 interfaces, different from the descriptor's value: 200 [ 27.808190][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.819786][ T295] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 27.824762][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.840885][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.848372][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.856858][ T295] usb 5-1: Product: syz [ 27.861752][ T295] usb 5-1: Manufacturer: syz [ 27.866481][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.866805][ T295] usb 5-1: SerialNumber: syz [ 27.874754][ T426] loop5: detected capacity change from 0 to 256 [ 27.884736][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.907889][ T426] FAT-fs (loop5): Directory bread(block 64) failed [ 27.914544][ T426] FAT-fs (loop5): Directory bread(block 65) failed [ 27.915310][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.921125][ T426] FAT-fs (loop5): Directory bread(block 66) failed [ 27.929344][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.935184][ T426] FAT-fs (loop5): Directory bread(block 67) failed [ 27.950070][ T426] FAT-fs (loop5): Directory bread(block 68) failed [ 27.956786][ T426] FAT-fs (loop5): Directory bread(block 69) failed [ 27.963501][ T426] FAT-fs (loop5): Directory bread(block 70) failed [ 27.970166][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.978434][ T426] FAT-fs (loop5): Directory bread(block 71) failed [ 27.978811][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.985456][ T426] FAT-fs (loop5): Directory bread(block 72) failed [ 27.993879][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.999698][ T426] FAT-fs (loop5): Directory bread(block 73) failed [ 28.006732][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.007636][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.013397][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 28.020908][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.030065][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.034789][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.042119][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.052998][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.053691][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.062583][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.070118][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.080492][ T6] usb 4-1: config 0 descriptor?? [ 28.090087][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.107619][ T309] usb 3-1: MIDIStreaming interface descriptor not found [ 28.114524][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.132426][ T428] loop2: detected capacity change from 0 to 512 [ 28.141783][ T386] device bridge_slave_1 left promiscuous mode [ 28.142660][ T6] hub 4-1:0.0: USB hub found [ 28.152492][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.174942][ T386] device bridge_slave_0 left promiscuous mode [ 28.178721][ T430] loop5: detected capacity change from 0 to 128 [ 28.181602][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.199081][ T309] usb 3-1: USB disconnect, device number 2 [ 28.210963][ T410] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.220185][ T386] device veth1_macvtap left promiscuous mode [ 28.223939][ T430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 28.226817][ T386] device veth0_vlan left promiscuous mode [ 28.241851][ T430] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.335018][ T6] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 28.389218][ T416] device veth0_vlan entered promiscuous mode [ 28.402446][ T416] device veth1_macvtap entered promiscuous mode [ 28.412428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.421144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.429806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.438396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.439426][ T368] EXT4-fs (loop5): unmounting filesystem. [ 28.446671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.460239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.622876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.636707][ T446] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 28.644386][ T446] FAT-fs (loop2): Filesystem has been set read-only [ 28.690513][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.759584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.776406][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.796430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.809659][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.822610][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.837817][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.850359][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.863480][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.876518][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.891186][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.903418][ T310] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 28.912306][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.094431][ T310] usb 6-1: not running at top speed; connect to a high speed hub [ 29.347487][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.353788][ T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.355984][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.374336][ T310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.383850][ T310] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 29.393359][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.401422][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.401750][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.425378][ T310] usb 6-1: Found UVC 1.00 device (046d:0825) [ 29.467352][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 29.474408][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 29.531940][ T6] usb 4-1: USB disconnect, device number 3 [ 29.753271][ T37] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 29.944310][ T37] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 29.954090][ T37] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 29.956216][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.972925][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.975048][ T37] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 29.982212][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.996674][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.006635][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.010692][ T37] usb 7-1: Product: syz [ 30.018228][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.022573][ T37] usb 7-1: Manufacturer: syz [ 30.031253][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.035843][ T37] usb 7-1: SerialNumber: syz [ 30.045110][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.058537][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.059525][ T468] overlayfs: statfs failed on './file0' [ 30.067639][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.067695][ T462] netlink: 888 bytes leftover after parsing attributes in process `syz.2.33'. [ 30.130403][ T295] usb 5-1: USB disconnect, device number 2 [ 30.177444][ T475] capability: warning: `syz.4.37' uses deprecated v2 capabilities in a way that may be insecure [ 30.254875][ T37] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 30.282894][ T486] set_capacity_and_notify: 1 callbacks suppressed [ 30.282915][ T486] loop4: detected capacity change from 0 to 1024 [ 30.300526][ T486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.314487][ T486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.328160][ T486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 30.344306][ T486] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 30.357049][ T486] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.357049][ T486] [ 30.366784][ T486] EXT4-fs (loop4): Total free blocks count 0 [ 30.372770][ T486] EXT4-fs (loop4): Free/Dirty block details [ 30.378719][ T486] EXT4-fs (loop4): free_blocks=20480 [ 30.385904][ T486] EXT4-fs (loop4): dirty_blocks=32 [ 30.391134][ T486] EXT4-fs (loop4): Block reservation details [ 30.397159][ T486] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 30.425606][ T386] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 30.454287][ T492] futex_wake_op: syz.4.39 tries to shift op by -1; fix this program [ 30.970595][ T505] loop3: detected capacity change from 0 to 512 [ 30.985655][ T505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.994801][ T505] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.053254][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.089778][ T287] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 31.102826][ T287] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 31.145183][ T287] EXT4-fs (loop3): unmounting filesystem. [ 31.234670][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.244842][ T6] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 31.254060][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.262049][ T6] usb 3-1: Product: syz [ 31.266518][ T6] usb 3-1: Manufacturer: syz [ 31.271127][ T6] usb 3-1: SerialNumber: syz [ 31.300737][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.307871][ T510] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.315466][ T510] device bridge_slave_0 entered promiscuous mode [ 31.322583][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.329840][ T510] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.337359][ T510] device bridge_slave_1 entered promiscuous mode [ 31.445530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.454716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.462745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.470531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.476584][ T310] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 31.479338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.488021][ T310] usb 6-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 31.496998][ T520] loop2: detected capacity change from 0 to 256 [ 31.505944][ T310] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 31.513171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.522179][ T310] usb 6-1: No streaming interface found for terminal 2. [ 31.567483][ T522] loop4: detected capacity change from 0 to 128 [ 31.688816][ T310] usb 6-1: USB disconnect, device number 2 [ 31.727143][ T522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.737443][ T522] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.832726][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.839860][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.889383][ T503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.963166][ T503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.028897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.068180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.078484][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.085566][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.280102][ T6] usb 3-1: MIDIStreaming interface descriptor not found [ 32.292842][ T510] device veth0_vlan entered promiscuous mode [ 32.299279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.308344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.317105][ T6] usb 3-1: USB disconnect, device number 3 [ 32.324089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.332262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.340443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.355262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.364572][ T510] device veth1_macvtap entered promiscuous mode [ 32.374742][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.383086][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.395841][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.404243][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.438502][ T535] loop7: detected capacity change from 0 to 4096 [ 32.446717][ T535] EXT4-fs: Ignoring removed bh option [ 32.453051][ T535] EXT4-fs (loop7): Test dummy encryption mode enabled [ 32.461826][ T535] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 32.473894][ T377] device bridge_slave_1 left promiscuous mode [ 32.480117][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.488999][ T295] usb 7-1: USB disconnect, device number 2 [ 32.496207][ T377] device bridge_slave_0 left promiscuous mode [ 32.504508][ T295] usblp0: removed [ 32.508768][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.518924][ T539] loop6: detected capacity change from 0 to 1024 [ 32.530575][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 32.530588][ T28] audit: type=1400 audit(1791083128.380:231): avc: denied { append } for pid=534 comm="syz.7.46" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.537874][ T539] EXT4-fs: Ignoring removed bh option [ 32.559664][ T28] audit: type=1400 audit(1791083128.380:232): avc: denied { mount } for pid=534 comm="syz.7.46" name="/" dev="configfs" ino=13412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.566509][ T377] device veth1_macvtap left promiscuous mode [ 32.588634][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.618018][ T28] audit: type=1400 audit(1791083128.380:233): avc: denied { search } for pid=534 comm="syz.7.46" name="/" dev="configfs" ino=13412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.655317][ T377] device veth0_vlan left promiscuous mode [ 32.661890][ T539] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 32.736790][ T510] EXT4-fs (loop7): unmounting filesystem. [ 32.751293][ T539] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 32.767714][ T28] audit: type=1400 audit(1791083128.620:234): avc: denied { unlink } for pid=538 comm="syz.6.50" name="#9" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.791230][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.813904][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.820707][ T548] device veth1_to_bond entered promiscuous mode [ 32.821784][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.849155][ T547] device veth1_to_bond left promiscuous mode [ 32.850092][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.862111][ T416] EXT4-fs error (device loop6): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 32.882685][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.882705][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.882823][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.882965][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.882998][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.883161][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.883266][ T416] EXT4-fs error (device loop6): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 32.883396][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.883411][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.883513][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.883669][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.883693][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.883812][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.883864][ T416] EXT4-fs error (device loop6): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 32.883981][ T416] EXT4-fs (loop6): Remounting filesystem read-only [ 32.883992][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.884108][ T416] EXT4-fs error (device loop6): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 32.884445][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.884830][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.885233][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.885616][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.885988][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.886392][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.895368][ T416] EXT4-fs warning (device loop6): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 32.932586][ T566] netlink: 'syz.7.55': attribute type 3 has an invalid length. [ 33.073270][ T295] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.092872][ T564] loop5: detected capacity change from 0 to 40427 [ 33.097354][ T564] F2FS-fs (loop5): Mismatch start address, segment0(16) cp_blkaddr(0) [ 33.233893][ T566] loop7: detected capacity change from 0 to 40427 [ 33.237729][ T564] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 33.281771][ T566] F2FS-fs (loop7): Unrecognized mount option "./cgroup" or missing value [ 33.302225][ T28] audit: type=1400 audit(1791083129.120:235): avc: denied { mounton } for pid=561 comm="syz.7.55" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.333418][ T564] F2FS-fs (loop5): Image doesn't support compression [ 33.374341][ T295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.385761][ T564] F2FS-fs (loop5): invalid crc value [ 33.395098][ T295] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.405212][ T295] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.419039][ T564] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.419570][ T295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 33.456159][ T564] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 33.464193][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 33.477447][ T564] F2FS-fs (loop5): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 134217728, run fsck to fix. [ 33.480839][ T295] usb 3-1: Product: syz [ 33.496449][ T564] F2FS-fs (loop5): Failed to read root inode [ 33.500836][ T295] usb 3-1: Manufacturer: syz [ 33.512269][ T295] usb 3-1: SerialNumber: syz [ 33.652588][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.659801][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.667801][ T576] device bridge_slave_0 entered promiscuous mode [ 33.677592][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.679962][ T564] loop5: detected capacity change from 0 to 512 [ 33.685385][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.693410][ T564] EXT4-fs: Ignoring removed nobh option [ 33.705956][ T576] device bridge_slave_1 entered promiscuous mode [ 33.861203][ T564] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 33.899511][ T564] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.022281][ T564] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 34.053391][ T28] audit: type=1400 audit(1791083129.870:236): avc: denied { remount } for pid=563 comm="syz.5.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.076073][ T546] capability: warning: `syz.2.53' uses 32-bit capabilities (legacy support in use) [ 34.258208][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.265325][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.272603][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.279647][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.298381][ T377] device bridge_slave_1 left promiscuous mode [ 34.306008][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.316740][ T377] device bridge_slave_0 left promiscuous mode [ 34.323167][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.335380][ T377] device veth1_macvtap left promiscuous mode [ 34.341850][ T377] device veth0_vlan left promiscuous mode [ 34.599888][ T295] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 34.615965][ T295] usb 3-1: USB disconnect, device number 4 [ 34.622606][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.631419][ T295] usblp0: removed [ 34.636000][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.691754][ T28] audit: type=1400 audit(1791083130.540:237): avc: denied { ioctl } for pid=587 comm="syz.7.61" path="socket:[17044]" dev="sockfs" ino=17044 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.698505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.733669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.746491][ T290] EXT4-fs (loop4): unmounting filesystem. [ 34.752765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.754549][ T590] loop7: detected capacity change from 0 to 128 [ 34.761444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.776344][ T28] audit: type=1400 audit(1791083130.540:238): avc: denied { read write } for pid=587 comm="syz.7.61" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.779419][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.802162][ T28] audit: type=1400 audit(1791083130.540:239): avc: denied { open } for pid=587 comm="syz.7.61" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.807126][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.830949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.846453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.850133][ T590] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 34.864777][ T590] FAT-fs (loop7): Filesystem has been set read-only [ 34.872053][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.873275][ T590] syz.7.62: attempt to access beyond end of device [ 34.873275][ T590] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 34.879132][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.894827][ T28] audit: type=1400 audit(1791083130.540:240): avc: denied { ioctl } for pid=587 comm="syz.7.61" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.914434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.925277][ T590] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 34.934369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.948986][ T590] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 34.949786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.961744][ T590] syz.7.62: attempt to access beyond end of device [ 34.961744][ T590] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 34.966512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.978222][ T368] EXT4-fs (loop5): unmounting filesystem. [ 34.993381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.999320][ T590] syz.7.62: attempt to access beyond end of device [ 34.999320][ T590] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 35.003774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.022565][ T595] EXT4-fs: Ignoring removed bh option [ 35.027132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.036244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.045679][ T576] device veth0_vlan entered promiscuous mode [ 35.052390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.058162][ T595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 35.060166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.072644][ T595] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 35.082393][ T576] device veth1_macvtap entered promiscuous mode [ 35.103012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.120253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.128639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.148574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.153601][ T602] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000057f) [ 35.157314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.164989][ T602] FAT-fs (loop2): Filesystem has been set read-only [ 35.172969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.187742][ T602] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000057f) [ 35.195975][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.196199][ T602] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000057f) [ 35.226617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.230354][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.241923][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.273449][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.281252][ T368] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 35.292057][ T609] set_capacity_and_notify: 2 callbacks suppressed [ 35.292074][ T609] loop2: detected capacity change from 0 to 256 [ 35.301741][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.321344][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.341260][ T609] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1e94b07c, utbl_chksum : 0xe619d30d) [ 35.345093][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.375641][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.382219][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.404607][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.411241][ T368] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 35.419705][ T618] loop2: detected capacity change from 0 to 512 [ 35.437828][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.444642][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.459171][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.459540][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.459572][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.460450][ T618] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.72: inode has both inline data and extents flags [ 35.460542][ T618] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.72: couldn't read orphan inode 15 (err -117) [ 35.460604][ T618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.460808][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.460870][ T368] EXT4-fs error (device loop5): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 35.461013][ T368] EXT4-fs (loop5): Remounting filesystem read-only [ 35.461023][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.461106][ T368] EXT4-fs error (device loop5): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.461477][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.461888][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.462286][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.462694][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.463097][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.465492][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.465916][ T368] EXT4-fs warning (device loop5): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 35.494924][ T291] EXT4-fs (loop2): unmounting filesystem. [ 35.833244][ T295] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.859376][ T629] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.866486][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.874151][ T629] device bridge_slave_0 entered promiscuous mode [ 35.879942][ T634] loop4: detected capacity change from 0 to 512 [ 35.881258][ T629] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.894498][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.901867][ T634] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.902044][ T629] device bridge_slave_1 entered promiscuous mode [ 35.914214][ T634] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.929159][ T634] EXT4-fs (loop4): group descriptors corrupted! [ 35.966140][ T629] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.973226][ T629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.980469][ T629] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.987528][ T629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.013134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.021346][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.029168][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 36.035279][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.044746][ T295] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 36.066104][ T295] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 36.075590][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.083699][ T295] usb 3-1: Product: syz [ 36.087885][ T295] usb 3-1: Manufacturer: syz [ 36.092497][ T295] usb 3-1: SerialNumber: syz [ 36.097529][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.106931][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.114099][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.123536][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.131861][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.138931][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.152895][ T639] loop7: detected capacity change from 0 to 512 [ 36.155237][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.183615][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.189620][ T639] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 36.208238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.221803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.232328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.240303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.249941][ T639] EXT4-fs (loop7): 1 truncate cleaned up [ 36.256666][ T639] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 36.269724][ T629] device veth0_vlan entered promiscuous mode [ 36.275299][ T636] syz.4.77 (636) used greatest stack depth: 20744 bytes left [ 36.284446][ T642] netlink: 'syz.7.78': attribute type 30 has an invalid length. [ 36.291561][ T629] device veth1_macvtap entered promiscuous mode [ 36.301436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.313610][ T295] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.320816][ T295] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 36.325618][ T510] EXT4-fs (loop7): unmounting filesystem. [ 36.328602][ T295] usb 3-1: unit 9 not found! [ 36.343760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.364865][ T295] usb 3-1: USB disconnect, device number 5 [ 36.366065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.416805][ T385] device bridge_slave_1 left promiscuous mode [ 36.425985][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.434973][ T385] device bridge_slave_0 left promiscuous mode [ 36.441149][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.458892][ T385] device veth1_macvtap left promiscuous mode [ 36.465406][ T385] device veth0_vlan left promiscuous mode [ 36.501448][ T661] loop7: detected capacity change from 0 to 256 [ 36.520636][ T661] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 36.583465][ T432] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.634340][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.733309][ T6] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 36.805456][ T432] usb 5-1: Using ep0 maxpacket: 16 [ 36.812544][ T671] syz.7.86 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.287686][ T432] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.305185][ T432] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.314723][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.322744][ T432] usb 5-1: Product: syz [ 37.326946][ T432] usb 5-1: Manufacturer: syz [ 37.331540][ T432] usb 5-1: SerialNumber: syz [ 37.393231][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 37.399849][ T6] usb 10-1: unable to get BOS descriptor or descriptor too short [ 37.408439][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.418694][ T6] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.429485][ T6] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 37.438671][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.446759][ T6] usb 10-1: Product: syz [ 37.450994][ T6] usb 10-1: Manufacturer: syz [ 37.455684][ T6] usb 10-1: SerialNumber: syz [ 37.592958][ T684] kvm: emulating exchange as write [ 37.663270][ T627] Bluetooth: hci0: command 0x1003 tx timeout [ 37.663735][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.671431][ T659] loop9: detected capacity change from 0 to 512 [ 37.706365][ T659] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.716249][ T659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 37.724913][ T659] EXT4-fs (loop9): orphan cleanup on readonly fs [ 37.732066][ T659] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3861: comm syz.9.82: Allocating blocks 41-42 which overlap fs metadata [ 37.748955][ T659] __quota_error: 26 callbacks suppressed [ 37.748973][ T659] Quota error (device loop9): write_blk: dquota write failed [ 37.762376][ T659] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 37.772713][ T659] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.82: Failed to acquire dquot type 0 [ 37.784487][ T659] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 37.800614][ T690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=690 comm=syz.8.90 [ 37.813031][ T659] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.82: corrupted inode contents [ 37.825313][ T659] EXT4-fs error (device loop9): ext4_dirty_inode:6158: inode #12: comm syz.9.82: mark_inode_dirty error [ 37.836692][ T659] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.82: corrupted inode contents [ 37.848553][ T659] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.82: mark_inode_dirty error [ 37.859871][ T659] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.82: corrupted inode contents [ 37.871735][ T659] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 37.877380][ T28] audit: type=1400 audit(1791083133.730:267): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.880484][ T659] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #12: comm syz.9.82: corrupted inode contents [ 37.919007][ T28] audit: type=1400 audit(1791083133.770:268): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.932098][ T659] EXT4-fs error (device loop9): ext4_truncate:4327: inode #12: comm syz.9.82: mark_inode_dirty error [ 37.949827][ T28] audit: type=1400 audit(1791083133.770:269): avc: denied { read } for pid=142 comm="dhcpcd" name="n20" dev="tmpfs" ino=1121 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.955339][ T659] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 37.973938][ T28] audit: type=1400 audit(1791083133.770:270): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n20" dev="tmpfs" ino=1121 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.003343][ T659] EXT4-fs (loop9): 1 truncate cleaned up [ 38.004785][ T28] audit: type=1400 audit(1791083133.770:271): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n20" dev="tmpfs" ino=1121 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.020677][ T659] EXT4-fs (loop9): pa ffff888133ef0348: logic 1, phys. 41, len 23 [ 38.036962][ T28] audit: type=1400 audit(1791083133.890:272): avc: denied { read } for pid=699 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.040768][ T659] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 38.073688][ T28] audit: type=1400 audit(1791083133.890:273): avc: denied { open } for pid=699 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.073712][ T28] audit: type=1400 audit(1791083133.890:274): avc: denied { getattr } for pid=699 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.124309][ T700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 38.127659][ T659] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 38.165019][ T659] ext4: Unknown parameter '' [ 38.175280][ T6] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 38.199454][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.215535][ T6] usb 10-1: USB disconnect, device number 2 [ 38.382950][ T432] cdc_ncm 5-1:1.0: failed to get mac address [ 38.390342][ T432] cdc_ncm 5-1:1.0: bind() failure [ 38.397731][ T432] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 38.404653][ T432] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 38.412591][ T432] usb 5-1: USB disconnect, device number 3 [ 38.433341][ T309] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 38.573276][ T450] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 38.614603][ T309] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.622601][ T309] usb 3-1: not running at top speed; connect to a high speed hub [ 38.631151][ T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.643134][ T309] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 38.652235][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.660275][ T309] usb 3-1: Product: syz [ 38.664463][ T309] usb 3-1: Manufacturer: syz [ 38.669047][ T309] usb 3-1: SerialNumber: syz [ 38.692450][ T659] syz.9.82 (659) used greatest stack depth: 20512 bytes left [ 38.700602][ T629] EXT4-fs (loop9): unmounting filesystem. [ 38.726272][ T450] usb 8-1: device descriptor read/64, error -71 [ 38.883162][ T309] usb 3-1: USB disconnect, device number 6 [ 38.892869][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.943187][ T764] netlink: 'syz.9.103': attribute type 30 has an invalid length. [ 38.953592][ T764] loop9: detected capacity change from 0 to 512 [ 38.965139][ T764] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 38.974197][ T764] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.988840][ T760] __nla_validate_parse: 56 callbacks suppressed [ 38.988855][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 39.013283][ T450] usb 8-1: device descriptor read/64, error -71 [ 39.040203][ T762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.043409][ T764] ip_tables: iptables: counters copy to user failed while replacing table [ 39.048968][ T769] ip_tables: iptables: counters copy to user failed while replacing table [ 39.057444][ T762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.069428][ T769] ip_tables: iptables: counters copy to user failed while replacing table [ 39.074021][ T764] ip_tables: iptables: counters copy to user failed while replacing table [ 39.283301][ T450] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 39.313274][ T309] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.407649][ T775] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.416883][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.425852][ T775] netlink: 2 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.434774][ T450] usb 8-1: device descriptor read/64, error -71 [ 39.493266][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 39.499501][ T309] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 39.509798][ T309] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.522963][ T309] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 39.532352][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.567344][ T786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.108'. [ 39.576339][ T786] device bridge_slave_1 left promiscuous mode [ 39.582839][ T786] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.671007][ T791] loop2: detected capacity change from 0 to 2048 [ 39.824661][ T786] device bridge_slave_0 left promiscuous mode [ 39.848390][ T786] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.887720][ T629] EXT4-fs (loop9): unmounting filesystem. [ 40.023308][ T450] usb 8-1: device descriptor read/64, error -71 [ 40.072332][ T309] usb 5-1: USB disconnect, device number 4 [ 40.143440][ T450] usb usb8-port1: attempt power cycle [ 40.335390][ T802] 9pnet_fd: Insufficient options for proto=fd [ 40.553314][ T450] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 40.584249][ T450] usb 8-1: device descriptor read/8, error -71 [ 40.613285][ T37] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 40.663276][ T309] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.734269][ T450] usb 8-1: device descriptor read/8, error -71 [ 40.793519][ T37] usb 9-1: Using ep0 maxpacket: 8 [ 40.800076][ T37] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.810253][ T37] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.820513][ T37] usb 9-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 40.829612][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.837655][ T37] usb 9-1: Product: syz [ 40.841822][ T37] usb 9-1: Manufacturer: syz [ 40.846434][ T37] usb 9-1: SerialNumber: syz [ 40.853264][ T432] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.861911][ T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.872203][ T309] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.881248][ T309] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.894198][ T309] usb 3-1: config 1 interface 0 has no altsetting 0 [ 40.910754][ T309] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 40.919882][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.927989][ T309] usb 3-1: Product: syz [ 40.932146][ T309] usb 3-1: Manufacturer: syz [ 40.936873][ T309] usb 3-1: SerialNumber: syz [ 41.023428][ T450] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 41.033268][ T432] usb 5-1: Using ep0 maxpacket: 32 [ 41.039818][ T432] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 41.047457][ T432] usb 5-1: can't read configurations, error -61 [ 41.053767][ T6] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 41.058474][ T37] usb 9-1: unit 2 not found! [ 41.066291][ T37] usb 9-1: 6:0: failed to get current value for ch 0 (-71) [ 41.074088][ T450] usb 8-1: device descriptor read/8, error -71 [ 41.099334][ T37] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 41.107956][ T37] usb 9-1: USB disconnect, device number 2 [ 41.145552][ T309] usb 3-1: selecting invalid altsetting 0 [ 41.154241][ T309] usb 3-1: USB disconnect, device number 7 [ 41.203393][ T432] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 41.224200][ T450] usb 8-1: device descriptor read/8, error -71 [ 41.233249][ T6] usb 10-1: Using ep0 maxpacket: 32 [ 41.239505][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.250541][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.260441][ T6] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 41.269578][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.278120][ T6] usb 10-1: config 0 descriptor?? [ 41.284108][ T6] hub 10-1:0.0: USB hub found [ 41.323688][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.324204][ T810] xt_hashlimit: size too large, truncated to 1048576 [ 41.344157][ T450] usb usb8-port1: unable to enumerate USB device [ 41.373827][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.403269][ T432] usb 5-1: Using ep0 maxpacket: 32 [ 41.411041][ T432] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 41.418723][ T432] usb 5-1: can't read configurations, error -61 [ 41.425289][ T432] usb usb5-port1: attempt power cycle [ 41.510134][ T808] loop9: detected capacity change from 0 to 8192 [ 41.512514][ T813] loop7: detected capacity change from 0 to 8192 [ 41.689289][ T826] loop8: detected capacity change from 0 to 1024 [ 41.696173][ T826] EXT4-fs: dax option not supported [ 41.702050][ T826] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 41.715613][ T319] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.725314][ T319] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.735634][ T319] Buffer I/O error on dev loop6p8, logical block 1, async page read [ 41.804393][ T846] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 41.834854][ T846] FAT-fs (loop7): Filesystem has been set read-only [ 41.853234][ T432] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 41.876353][ T847] loop9: detected capacity change from 0 to 512 [ 41.893580][ T432] usb 5-1: Using ep0 maxpacket: 32 [ 41.895199][ T847] EXT4-fs: quotafile must be on filesystem root [ 41.907418][ T432] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 41.917484][ T432] usb 5-1: can't read configurations, error -61 [ 41.976988][ T847] Zero length message leads to an empty skb [ 42.073275][ T432] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 42.113594][ T432] usb 5-1: Using ep0 maxpacket: 32 [ 42.121622][ T432] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 42.134633][ T432] usb 5-1: can't read configurations, error -61 [ 42.148563][ T432] usb usb5-port1: unable to enumerate USB device [ 42.173252][ T295] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 42.373240][ T295] usb 9-1: Using ep0 maxpacket: 16 [ 42.379838][ T295] usb 9-1: unable to get BOS descriptor or descriptor too short [ 42.395776][ T295] usb 9-1: config 6 has an invalid interface number: 150 but max is 0 [ 42.412605][ T295] usb 9-1: config 6 has an invalid descriptor of length 41, skipping remainder of the config [ 42.433708][ T295] usb 9-1: config 6 has no interface number 0 [ 42.447395][ T295] usb 9-1: config 6 interface 150 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.469133][ T295] usb 9-1: config 6 interface 150 has no altsetting 0 [ 42.481711][ T295] usb 9-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 42.495160][ T295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.513275][ T295] usb 9-1: Product: syz [ 42.517521][ T295] usb 9-1: Manufacturer: syz [ 42.522172][ T295] usb 9-1: SerialNumber: syz [ 42.616245][ T851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.855761][ T858] loop2: detected capacity change from 0 to 2048 [ 42.873603][ T858] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.900884][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 42.900898][ T28] audit: type=1400 audit(1791083138.750:382): avc: denied { create } for pid=857 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.023810][ T28] audit: type=1400 audit(1791083138.780:383): avc: denied { write } for pid=857 comm="syz.2.124" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.078167][ T295] usb 9-1: USB disconnect, device number 3 [ 43.719221][ T862] loop4: detected capacity change from 0 to 1024 [ 43.736612][ T862] EXT4-fs: Ignoring removed bh option [ 43.821536][ T862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.915293][ T862] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 43.937250][ T867] loop2: detected capacity change from 0 to 1024 [ 43.978404][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.010807][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.033165][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.055920][ T867] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.081352][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.088459][ T290] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 44.113264][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.119870][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.120784][ T291] EXT4-fs (loop2): unmounting filesystem. [ 44.135336][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.162344][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.169215][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.191672][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.201781][ T290] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 44.221832][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.241739][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.257258][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.282444][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.289760][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.312074][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.327834][ T290] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 44.353734][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 44.363281][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.393907][ T290] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.431595][ T6] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 44.433810][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.451003][ T6] usbhid 10-1:0.0: can't add hid device: -71 [ 44.460261][ T6] usbhid: probe of 10-1:0.0 failed with error -71 [ 44.463276][ T672] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 44.484060][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.504100][ T6] usb 10-1: USB disconnect, device number 3 [ 44.505148][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.533299][ T450] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.551232][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.566425][ T28] audit: type=1400 audit(1791083140.420:384): avc: denied { getopt } for pid=882 comm="syz.9.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.593763][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.618663][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.643503][ T290] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.664624][ T672] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 44.682522][ T672] usb 8-1: can't read configurations, error -61 [ 44.713300][ T450] usb 3-1: Using ep0 maxpacket: 8 [ 44.719502][ T450] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 194, changing to 7 [ 44.742146][ T450] usb 3-1: New USB device found, idVendor=0499, idProduct=1718, bcdDevice= 0.40 [ 44.761883][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.770134][ T450] usb 3-1: Product: ᰊ [ 44.774387][ T450] usb 3-1: Manufacturer: 踸㍖彪겄ᨧ늤됾橗걸鈊†贑죞ū嶵 [ 44.793307][ T450] usb 3-1: SerialNumber: 莕侯꒽例䬒갚春⽎퐋馠셳뾉Ⳉ봠鑴癗悸ၛ貞ՠホ⨬ꏠ鐢涽렴︓쓈᯾峥䦐䝐섵㐇찃㩟캦콹닯選˾Ꮷ実▓념⨉飥졽셿﹥㭍蘔貕蟀をഇ␱샋਼䨌끭聻㴙颉耥䄈겾밖麠첷滂饎뾙￈셊 [ 44.833312][ T672] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 45.025611][ T672] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 45.043286][ T672] usb 8-1: can't read configurations, error -61 [ 45.051961][ T28] audit: type=1400 audit(1791083140.900:385): avc: denied { setopt } for pid=879 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.076040][ T672] usb usb8-port1: attempt power cycle [ 45.256717][ T450] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.274106][ T8] device bridge_slave_1 left promiscuous mode [ 45.280276][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.288077][ T450] usb 3-1: cannot setup if 2: error -71 [ 45.297651][ T450] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 45.318868][ T8] device bridge_slave_0 left promiscuous mode [ 45.325147][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.342565][ T450] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.357979][ T8] device veth1_macvtap left promiscuous mode [ 45.373715][ T450] usb 3-1: cannot setup if 2: error -71 [ 45.389493][ T8] device veth0_vlan left promiscuous mode [ 45.395489][ T450] snd-usb-audio: probe of 3-1:1.1 failed with error -71 [ 45.426927][ T450] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.443512][ T450] usb 3-1: cannot setup if 2: error -71 [ 45.470755][ T450] snd-usb-audio: probe of 3-1:1.2 failed with error -71 [ 45.489610][ T450] usb 3-1: USB disconnect, device number 8 [ 45.495524][ T672] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 45.496597][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.534931][ T672] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 45.548144][ T672] usb 8-1: can't read configurations, error -61 [ 45.586698][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.594728][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.602238][ T904] device bridge_slave_0 entered promiscuous mode [ 45.610673][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.617816][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.629118][ T904] device bridge_slave_1 entered promiscuous mode [ 45.689297][ T28] audit: type=1400 audit(1791083141.540:386): avc: denied { unmount } for pid=629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.709143][ T672] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 45.722806][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.729898][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.737203][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.744253][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.776061][ T672] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 45.787731][ T672] usb 8-1: can't read configurations, error -61 [ 45.797727][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.805625][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.812819][ T672] usb usb8-port1: unable to enumerate USB device [ 45.819549][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.846294][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.884948][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.925125][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.932204][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.976937][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.005504][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.015632][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.022703][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.049673][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.059520][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.088872][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.099476][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.123288][ T450] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.134956][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.144091][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.167415][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.176987][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.189105][ T904] device veth0_vlan entered promiscuous mode [ 46.196103][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.204685][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.231296][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.240970][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.255439][ T904] device veth1_macvtap entered promiscuous mode [ 46.278052][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.287561][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.296877][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.323383][ T450] usb 3-1: Using ep0 maxpacket: 16 [ 46.324148][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.339288][ T450] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 46.339777][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.366607][ T28] audit: type=1400 audit(1791083142.220:387): avc: denied { mount } for pid=904 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.371663][ T450] usb 3-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 46.444021][ T450] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.465890][ T450] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 46.481714][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.490543][ T450] usb 3-1: Product: syz [ 46.494812][ T450] usb 3-1: Manufacturer: syz [ 46.499475][ T450] usb 3-1: SerialNumber: syz [ 46.513551][ T450] usb 3-1: config 0 descriptor?? [ 46.525055][ T921] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 46.695606][ T931] loop9: detected capacity change from 0 to 1024 [ 46.725824][ T931] EXT4-fs: Ignoring removed bh option [ 46.731293][ T931] EXT4-fs: Ignoring removed bh option [ 46.785257][ T931] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 46.793785][ T28] audit: type=1400 audit(1791083142.640:388): avc: denied { create } for pid=935 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.827071][ T931] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.141: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 46.851612][ T931] EXT4-fs (loop9): Remounting filesystem read-only [ 46.893538][ T629] EXT4-fs error (device loop9): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 46.944038][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 46.977061][ T629] EXT4-fs error (device loop9): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.043868][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.060808][ T629] EXT4-fs error (device loop9): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 47.101573][ T28] audit: type=1400 audit(1791083142.950:389): avc: denied { sqpoll } for pid=918 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.111175][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.139110][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.170211][ T629] EXT4-fs error (device loop9): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.203444][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.212966][ T629] EXT4-fs error (device loop9): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.263809][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.270741][ T629] EXT4-fs error (device loop9): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 47.306208][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.312797][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.327376][ T629] EXT4-fs error (device loop9): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.352293][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.359579][ T629] EXT4-fs error (device loop9): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /14/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.382866][ T629] EXT4-fs (loop9): Remounting filesystem read-only [ 47.390597][ T629] EXT4-fs error (device loop9): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 47.411474][ T28] audit: type=1400 audit(1791083143.270:390): avc: denied { connect } for pid=961 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.432770][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.449475][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.466104][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.482518][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.499118][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.517143][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.533921][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.550338][ T629] EXT4-fs warning (device loop9): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 47.583349][ T672] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 47.779180][ T672] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 47.812913][ T672] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.821872][ T672] usb 8-1: Product: syz [ 47.826741][ T672] usb 8-1: Manufacturer: syz [ 47.831644][ T672] usb 8-1: SerialNumber: syz [ 47.860640][ T672] usb 8-1: config 0 descriptor?? [ 48.168861][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.176905][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.184894][ T966] device bridge_slave_0 entered promiscuous mode [ 48.194323][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.201452][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.210593][ T966] device bridge_slave_1 entered promiscuous mode [ 48.273642][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.280752][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.288053][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.295094][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.330181][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.337875][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.346394][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.367006][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.375919][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.382962][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.390845][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.399210][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.406275][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.414024][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.422077][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.429982][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.449838][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.462385][ T966] device veth0_vlan entered promiscuous mode [ 48.474637][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.482778][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.491854][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.500146][ T355] device bridge_slave_1 left promiscuous mode [ 48.506771][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.514517][ T355] device bridge_slave_0 left promiscuous mode [ 48.520697][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.529106][ T355] device veth1_macvtap left promiscuous mode [ 48.535187][ T355] device veth0_vlan left promiscuous mode [ 48.638707][ T966] device veth1_macvtap entered promiscuous mode [ 48.647411][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.654327][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.665612][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.675865][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.676414][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.686614][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.706807][ T6] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 48.711782][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.716021][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.779826][ T672] usb 3-1: USB disconnect, device number 9 [ 48.796371][ T28] audit: type=1400 audit(1791083144.650:391): avc: denied { read } for pid=975 comm="syz.2.159" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.819642][ T28] audit: type=1400 audit(1791083144.680:392): avc: denied { open } for pid=975 comm="syz.2.159" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.873244][ T28] audit: type=1400 audit(1791083144.700:393): avc: denied { ioctl } for pid=975 comm="syz.2.159" path="/newroot/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.907474][ T28] audit: type=1400 audit(1791083144.710:394): avc: denied { read } for pid=978 comm="syz.2.160" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.995278][ T28] audit: type=1400 audit(1791083144.720:395): avc: denied { mounton } for pid=980 comm="syz.1.161" path="/proc/4/task" dev="proc" ino=20265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 50.016122][ T28] audit: type=1400 audit(1791083145.870:396): avc: denied { create } for pid=1003 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.144874][ T6] usb 8-1: USB disconnect, device number 10 [ 50.165496][ T28] audit: type=1400 audit(1791083146.020:397): avc: denied { mount } for pid=1012 comm="syz.7.169" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.195043][ T28] audit: type=1400 audit(1791083146.020:398): avc: denied { search } for pid=1012 comm="syz.7.169" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.285273][ T28] audit: type=1400 audit(1791083146.020:399): avc: denied { write } for pid=1012 comm="syz.7.169" name="filter" dev="tracefs" ino=2563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.415468][ T28] audit: type=1400 audit(1791083146.020:400): avc: denied { open } for pid=1012 comm="syz.7.169" path="/29/trace/events/sched/sched_switch/filter" dev="tracefs" ino=2563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.593008][ T1041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.180'. [ 51.164310][ T450] usb 1-1: USB disconnect, device number 2 [ 51.947136][ T1084] overlayfs: unrecognized mount option "verity=on" or missing value [ 52.463507][ T672] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.643283][ T672] usb 1-1: Using ep0 maxpacket: 8 [ 52.650190][ T672] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 52.665972][ T672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.686329][ T672] usb 1-1: config 0 has no interface number 0 [ 52.698620][ T672] usb 1-1: config 0 interface 52 has no altsetting 0 [ 52.712681][ T672] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 52.731499][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.752826][ T672] usb 1-1: config 0 descriptor?? [ 53.993254][ T295] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.193783][ T295] usb 3-1: Using ep0 maxpacket: 16 [ 54.203916][ T295] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 54.215364][ T295] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 54.224647][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.232687][ T295] usb 3-1: Product: syz [ 54.237116][ T295] usb 3-1: Manufacturer: syz [ 54.241752][ T295] usb 3-1: SerialNumber: syz [ 54.254584][ T1148] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.473916][ T295] usb 3-1: USB disconnect, device number 10 [ 54.497945][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.993877][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 54.993892][ T28] audit: type=1400 audit(1791083150.838:413): avc: denied { write } for pid=1179 comm="syz.2.238" path="socket:[21767]" dev="sockfs" ino=21767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.999938][ T672] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 55.119512][ T295] usb 1-1: USB disconnect, device number 3 [ 55.211579][ T672] usb 2-1: Using ep0 maxpacket: 32 [ 55.217940][ T672] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 55.227557][ T672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.240442][ T672] usb 2-1: config 0 descriptor?? [ 56.039633][ T28] audit: type=1400 audit(1791083151.880:414): avc: denied { create } for pid=1195 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.079570][ T28] audit: type=1400 audit(1791083151.900:415): avc: denied { getopt } for pid=1195 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.126268][ T28] audit: type=1400 audit(1791083151.960:416): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.455380][ T28] audit: type=1400 audit(1791083153.280:417): avc: denied { write } for pid=1221 comm="syz.0.255" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 57.479282][ T1222] < [ 57.590957][ T1232] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 57.611250][ T28] audit: type=1400 audit(1791083153.438:418): avc: denied { read } for pid=1233 comm="syz.2.260" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.643660][ T28] audit: type=1400 audit(1791083153.468:419): avc: denied { open } for pid=1233 comm="syz.2.260" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.674577][ T1236] FAULT_INJECTION: forcing a failure. [ 57.674577][ T1236] name failslab, interval 1, probability 0, space 0, times 0 [ 57.687466][ T1236] CPU: 0 PID: 1236 Comm: syz.0.261 Not tainted syzkaller #0 [ 57.694773][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.704855][ T1236] Call Trace: [ 57.708133][ T1236] [ 57.711061][ T1236] __dump_stack+0x21/0x24 [ 57.715409][ T1236] dump_stack_lvl+0x110/0x170 [ 57.720097][ T1236] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.725136][ T1236] dump_stack+0x15/0x24 [ 57.729309][ T1236] should_fail_ex+0x3bf/0x510 [ 57.733996][ T1236] __should_failslab+0xac/0xf0 [ 57.738773][ T1236] should_failslab+0x9/0x20 [ 57.743282][ T1236] __kmem_cache_alloc_node+0x3d/0x2d0 [ 57.748665][ T1236] ? fib_default_rule_add+0x55/0x3d0 [ 57.753958][ T1236] ? fib_default_rule_add+0x55/0x3d0 [ 57.759248][ T1236] __kmalloc+0xa4/0x1e0 [ 57.763407][ T1236] fib_default_rule_add+0x55/0x3d0 [ 57.768571][ T1236] fib6_rules_net_init+0x46/0x110 [ 57.773611][ T1236] ops_init+0x2ce/0x470 [ 57.777776][ T1236] setup_net+0x4b4/0xcd0 [ 57.782030][ T1236] ? copy_net_ns+0x5c0/0x5c0 [ 57.786633][ T1236] ? __kasan_kmalloc+0x95/0xb0 [ 57.791406][ T1236] ? copy_net_ns+0x185/0x5c0 [ 57.796007][ T1236] copy_net_ns+0x355/0x5c0 [ 57.800434][ T1236] create_new_namespaces+0x3a8/0x660 [ 57.805728][ T1236] unshare_nsproxy_namespaces+0x120/0x170 [ 57.811462][ T1236] ksys_unshare+0x4d5/0x850 [ 57.815977][ T1236] ? __cfi_ksys_unshare+0x10/0x10 [ 57.821011][ T1236] ? fpregs_restore_userregs+0x128/0x260 [ 57.826653][ T1236] __x64_sys_unshare+0x38/0x40 [ 57.831429][ T1236] x64_sys_call+0x767/0x9a0 [ 57.835941][ T1236] do_syscall_64+0x4c/0xa0 [ 57.840370][ T1236] ? clear_bhb_loop+0x30/0x80 [ 57.845051][ T1236] ? clear_bhb_loop+0x30/0x80 [ 57.849734][ T1236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.855629][ T1236] RIP: 0033:0x7f51ec19e159 [ 57.860049][ T1236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.879669][ T1236] RSP: 002b:00007f51ecff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 57.888101][ T1236] RAX: ffffffffffffffda RBX: 00007f51ec425fa0 RCX: 00007f51ec19e159 [ 57.896082][ T1236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 57.904069][ T1236] RBP: 00007f51ec23506b R08: 0000000000000000 R09: 0000000000000000 [ 57.912050][ T1236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.920044][ T1236] R13: 00007f51ec426038 R14: 00007f51ec425fa0 R15: 00007ffec0644798 [ 57.928037][ T1236] [ 57.975664][ T295] usb 2-1: USB disconnect, device number 2 [ 57.983897][ T28] audit: type=1400 audit(1791083153.816:420): avc: denied { ioctl } for pid=1233 comm="syz.2.260" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.457643][ T672] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 58.729109][ T672] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.745787][ T672] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.764484][ T672] usb 8-1: config 1 has no interface number 0 [ 58.781417][ T672] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 58.807742][ T672] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 58.827788][ T672] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.853644][ T672] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.879089][ T672] usb 8-1: Product: syz [ 58.888249][ T672] usb 8-1: Manufacturer: syz [ 58.893804][ T672] usb 8-1: SerialNumber: syz [ 58.919360][ T28] audit: type=1400 audit(1791083154.729:421): avc: denied { unmount } for pid=904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.969909][ T60] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.151222][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 59.157613][ T60] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.166244][ T60] usb 3-1: config 151 has an invalid interface number: 33 but max is 0 [ 59.174679][ T60] usb 3-1: config 151 has no interface number 0 [ 59.180948][ T60] usb 3-1: config 151 interface 33 has no altsetting 0 [ 59.189468][ T60] usb 3-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 59.198594][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.206624][ T60] usb 3-1: Product: syz [ 59.210776][ T60] usb 3-1: Manufacturer: syz [ 59.215384][ T60] usb 3-1: SerialNumber: syz [ 59.221719][ T295] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.394022][ T308] device veth1_macvtap left promiscuous mode [ 59.400080][ T308] device veth0_vlan left promiscuous mode [ 59.425389][ T295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.425983][ T60] uvcvideo 3-1:151.33: Found multiple Units with ID 3 [ 59.435849][ T295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.452269][ T60] usb 3-1: Found UVC 0.0a device syz (1608:021b) [ 59.452275][ T295] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.452296][ T295] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.468913][ T60] usb 3-1: No valid video chain found. [ 59.471026][ T295] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 59.494318][ T60] usb 3-1: USB disconnect, device number 11 [ 59.501707][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.713125][ T672] cdc_ncm 8-1:1.1: bind() failure [ 59.916195][ T672] usb 8-1: USB disconnect, device number 11 [ 61.216551][ T28] audit: type=1400 audit(1791083157.012:422): avc: denied { mount } for pid=1303 comm="syz.2.285" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 61.239153][ T28] audit: type=1400 audit(1791083157.012:423): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 61.467786][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.649012][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 61.655255][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.665418][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.675701][ T6] usb 2-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 61.684795][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.692827][ T6] usb 2-1: Product: syz [ 61.697079][ T6] usb 2-1: Manufacturer: syz [ 61.701801][ T6] usb 2-1: SerialNumber: syz [ 61.910861][ T672] usb 2-1: USB disconnect, device number 3 [ 61.972684][ T24] usb 1-1: USB disconnect, device number 4 [ 62.024084][ T1312] FAULT_INJECTION: forcing a failure. [ 62.024084][ T1312] name failslab, interval 1, probability 0, space 0, times 0 [ 62.037076][ T1312] CPU: 1 PID: 1312 Comm: syz.2.288 Not tainted syzkaller #0 [ 62.044371][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.054439][ T1312] Call Trace: [ 62.057716][ T1312] [ 62.060648][ T1312] __dump_stack+0x21/0x24 [ 62.064975][ T1312] dump_stack_lvl+0x110/0x170 [ 62.069634][ T1312] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.074642][ T1312] ? kasan_save_alloc_info+0x1f/0x30 [ 62.079927][ T1312] ? __kasan_kmalloc+0x95/0xb0 [ 62.084675][ T1312] dump_stack+0x15/0x24 [ 62.088815][ T1312] should_fail_ex+0x3bf/0x510 [ 62.093483][ T1312] ? build_skb+0x2a/0x220 [ 62.097792][ T1312] __should_failslab+0xac/0xf0 [ 62.102623][ T1312] should_failslab+0x9/0x20 [ 62.107106][ T1312] kmem_cache_alloc+0x3b/0x320 [ 62.111866][ T1312] ? __kasan_check_write+0x14/0x20 [ 62.116972][ T1312] build_skb+0x2a/0x220 [ 62.121113][ T1312] bpf_prog_test_run_skb+0x38e/0x18a0 [ 62.126464][ T1312] ? __fget_files+0x2d1/0x330 [ 62.131143][ T1312] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 62.136932][ T1312] bpf_prog_test_run+0x3b4/0x5c0 [ 62.141859][ T1312] ? bpf_prog_query+0x270/0x270 [ 62.146695][ T1312] ? selinux_bpf+0xce/0xf0 [ 62.151096][ T1312] ? security_bpf+0x93/0xb0 [ 62.155644][ T1312] __sys_bpf+0x5ee/0x850 [ 62.159870][ T1312] ? bpf_link_show_fdinfo+0x330/0x330 [ 62.165231][ T1312] ? fpregs_restore_userregs+0x128/0x260 [ 62.170846][ T1312] __x64_sys_bpf+0x7c/0x90 [ 62.175244][ T1312] x64_sys_call+0x488/0x9a0 [ 62.179729][ T1312] do_syscall_64+0x4c/0xa0 [ 62.184131][ T1312] ? clear_bhb_loop+0x30/0x80 [ 62.188794][ T1312] ? clear_bhb_loop+0x30/0x80 [ 62.193465][ T1312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.199362][ T1312] RIP: 0033:0x7fe77319e159 [ 62.203796][ T1312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.223444][ T1312] RSP: 002b:00007fe77404f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.231879][ T1312] RAX: ffffffffffffffda RBX: 00007fe773425fa0 RCX: 00007fe77319e159 [ 62.239842][ T1312] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 62.248235][ T1312] RBP: 00007fe77323506b R08: 0000000000000000 R09: 0000000000000000 [ 62.256305][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.264263][ T1312] R13: 00007fe773426038 R14: 00007fe773425fa0 R15: 00007ffe9ba5dbd8 [ 62.272397][ T1312] [ 65.084851][ T28] audit: type=1400 audit(1791083160.856:424): avc: denied { write } for pid=1341 comm="syz.7.300" name="usb_gadget" dev="configfs" ino=13413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.116219][ T28] audit: type=1400 audit(1791083160.856:425): avc: denied { bind } for pid=1347 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.135752][ T28] audit: type=1400 audit(1791083160.876:426): avc: denied { add_name } for pid=1341 comm="syz.7.300" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.158244][ T28] audit: type=1400 audit(1791083160.876:427): avc: denied { create } for pid=1341 comm="syz.7.300" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 65.178026][ T28] audit: type=1400 audit(1791083160.886:428): avc: denied { create } for pid=1341 comm="syz.7.300" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 65.198196][ T28] audit: type=1400 audit(1791083160.935:429): avc: denied { unmount } for pid=510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.821274][ T1368] Mass Storage Function, version: 2009/09/11 [ 67.827322][ T1368] LUN: removable file: (no medium) [ 70.637112][ T28] audit: type=1400 audit(1791083166.371:430): avc: denied { mount } for pid=1386 comm="syz.7.314" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.775891][ T28] audit: type=1400 audit(1791083166.510:431): avc: denied { unmount } for pid=510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 72.196755][ T28] audit: type=1400 audit(1791083167.921:432): avc: denied { read } for pid=1395 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.458719][ T432] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 72.639767][ T432] usb 3-1: Using ep0 maxpacket: 16 [ 72.646123][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.657027][ T432] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.669827][ T432] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.678880][ T432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.687448][ T432] usb 3-1: config 0 descriptor?? [ 73.097710][ T432] HID 045e:07da: Invalid code 65791 type 1 [ 73.105681][ T432] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input4 [ 73.117605][ T28] audit: type=1400 audit(1791083168.846:433): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=772 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.118741][ T432] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 73.139908][ T28] audit: type=1400 audit(1791083168.846:434): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=772 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.183180][ T28] audit: type=1400 audit(1791083168.915:435): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=772 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.710525][ T295] usb 3-1: USB disconnect, device number 12 [ 75.745415][ T28] audit: type=1400 audit(1791083171.451:436): avc: denied { create } for pid=1416 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.279250][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 78.321912][ T28] audit: type=1400 audit(1791083173.967:437): avc: denied { bind } for pid=1428 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=273 state=1 status=67 (errno 9: Bad file descriptor) [ 79.739916][ T28] audit: type=1400 audit(1791083175.409:438): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[15221]" dev="pipefs" ino=15221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 80.534341][ T386] device bridge_slave_1 left promiscuous mode [ 80.540491][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.548019][ T386] device bridge_slave_0 left promiscuous mode [ 80.554229][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.562176][ T386] device veth1_macvtap left promiscuous mode [ 80.568272][ T386] device veth0_vlan left promiscuous mode [ 81.378733][ T386] device bridge_slave_1 left promiscuous mode [ 81.384882][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.392363][ T386] device bridge_slave_0 left promiscuous mode [ 81.398548][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.406383][ T386] device bridge_slave_1 left promiscuous mode [ 81.412564][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.419994][ T386] device bridge_slave_0 left promiscuous mode [ 81.426077][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.434028][ T386] device veth1_macvtap left promiscuous mode [ 81.440135][ T386] device veth0_vlan left promiscuous mode [ 81.446138][ T386] device veth1_macvtap left promiscuous mode [ 81.452190][ T386] device veth0_vlan left promiscuous mode