last executing test programs: 5.302954898s ago: executing program 2 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="b4050000000040006110a00000000000630138c03b53ab5b2c091f00004000006a6e1461d065e45779838257dbdc38fc585b3a1fe068b8bb76a2e7d074f19d4ebfe09e4a7bf76d167fdb622d808d80518d051737655f52d4761e41cc18e435fc1b7d2b39f6a538f540f1c2ada57c902f31b63a4872c43f3e1dc239eed5cd79ab29cb206cb28755f85868fbd7dd1b80f0b70c4b3d044350d315fbf93a9d6a65d61f8c614f3a42042d0a069f0f5613581c3d6a0359d60bb61f77ae4a0f50f4c55875ae052d448e1846b6fc8a70421072052665d6f266ce0716f772fc14a5c112f542ada65ef1e83880c2a9"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), 0x85}, 0x52) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0xb6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffff0f, 0x0}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d40)={'team_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x3, &(0x7f0000001e40)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000001e80)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x2c}}, 0x24008844) sendmsg$nl_route(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) unshare(0x24020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1005, &(0x7f0000000d00)=""/4101, 0x0, 0xc}, 0x22) 3.404061203s ago: executing program 2 (id=596): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000400000004"], 0x50) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2, 0x5514, &(0x7f0000000640)="$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") r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000beb000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4016, 0x80b08, 0x2ffffe, 0x80000005}}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005d40), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x52840, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYBLOB="2c0025496c49098c65d0ea6f23108c0f44063eb5d0f44451f44f7014"]) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000002c0)={0x3, [0x1, 0xffff], 0x68c}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000005dc0)=[@text64={0x40, &(0x7f0000005e00)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000005e80)={[0x2000000000, 0xb, 0x8, 0x4000000000000e51, 0x101, 0x5479, 0x1041, 0x200000000006, 0x2, 0x3aa, 0x7, 0x8fe0, 0x7, 0x8, 0x40000000080a8c, 0xce77], 0x6000, 0x4000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.027970691s ago: executing program 1 (id=607): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="b4050000000040006110a00000000000630138c03b53ab5b2c091f00004000006a6e1461d065e45779838257dbdc38fc585b3a1fe068b8bb76a2e7d074f19d4ebfe09e4a7bf76d167fdb622d808d80518d051737655f52d4761e41cc18e435fc1b7d2b39f6a538f540f1c2ada57c902f31b63a4872c43f3e1dc239eed5cd79ab29cb206cb28755f85868fbd7dd1b80f0b70c4b3d044350d315fbf93a9d6a65d61f8c614f3a42042d0a069f0f5613581c3d6a0359d60bb61f77ae4a0f50f4c55875ae052d448e1846b6fc8a70421072052665d6f266ce0716f772fc14a5c112f542ada65ef1e83880c2a9"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), 0x85}, 0x52) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0xb6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffff0f, 0x0}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d40)={'team_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x3, &(0x7f0000001e40)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000001e80)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x2c}}, 0x24008844) sendmsg$nl_route(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) unshare(0x24020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1005, &(0x7f0000000d00)=""/4101, 0x0, 0xc}, 0x22) 3.005147493s ago: executing program 2 (id=609): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x300c800, &(0x7f0000000080), 0x0, 0x7d5, &(0x7f0000000600)="$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") lremovexattr(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)=@random={'user.', '!%\x00'}) syz_mount_image$ext4(&(0x7f0000019900)='ext4\x00', &(0x7f0000019980)='./file0\x00', 0x400c84, &(0x7f00000199c0)={[{@nojournal_checksum}, {@discard}, {@errors_remount}]}, 0x1, 0x78f, &(0x7f000001c740)="$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") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000019940)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000019a80)=r0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f0000019d00)={&(0x7f0000000500)=""/250, 0xfffffffffffffc4f, 0x0, 0x0}}, 0x1e) 2.64228112s ago: executing program 2 (id=612): setresuid(0xee00, 0xee01, 0xee01) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) 2.64121839s ago: executing program 2 (id=613): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000740)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, 0x0, 0x0) 2.599881465s ago: executing program 2 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000880)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b80)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000c40), 0x4000087, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001740)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001800)="b9e0399a188f698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_adjtime(0x0, &(0x7f00000004c0)={0x7ffc, 0x0, 0x8010000, 0x0, 0x0, 0x6, 0x3f, 0x1, 0xffffffbffffffffc, 0x0, 0xffffffffffffffff, 0x28fe, 0x40000, 0xfffffffffffffffe, 0x7fff, 0x0, 0x6, 0x4, 0x0, 0x0, 0x9, 0x0, 0x4, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0xa}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x8, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x31}, r5}}}], 0x28}}], 0x2, 0x4000000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000005c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000600)=0x2800, 0x4) connect$inet(r7, &(0x7f0000000640)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x2c41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000b40)={0x29, 0x4, 0x0, {0x1, 0xe62, 0x1, 0x0, [0x0]}}, 0x29) 2.416290383s ago: executing program 1 (id=617): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x7fffffff, 0xc, {{0x1f, 0x4, 0x3, 0x12, 0x7c, 0x67, 0x0, 0xf9, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x29, 0x2, [{0x1, 0x11, "e7bcada7258b6ba6f3c731a514cda9"}, {0x7, 0xc, "664b9b171a604caedb14"}, {0x2, 0x6, "37bb91c2"}]}, @timestamp={0x44, 0xc, 0xe1, 0x0, 0x0, [0x2, 0x9]}, @end, @noop, @end, @end, @lsrr={0x83, 0x23, 0x2f, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @local, @empty, @rand_addr=0x64010101, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x40008, 0x28103}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x50}}, 0x5) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) 2.409155694s ago: executing program 1 (id=618): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x60d3, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x210018, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC], 0x1, 0x392, &(0x7f0000002a00)="$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") ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000004ec0)={{&(0x7f0000645000/0x4000)=nil, 0x4000}}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file1\x00', 0x6042, 0x101) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8010, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x7e, 0x2fa, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x100) write$binfmt_elf64(r4, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x95, 0xff, 0x6, 0x81, 0x84c, 0x3, 0x3, 0x8001, 0x15a, 0x40, 0x1f1, 0xd2f, 0xfff, 0x38, 0x1, 0x80, 0x5, 0x5}, [{0x6474e551, 0x7, 0x0, 0x4, 0x2, 0x400, 0x8ca000000000000, 0xbf}]}, 0x78) 2.122437174s ago: executing program 3 (id=621): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x8, 0x1e1, &(0x7f00000003c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r0], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0xde9, r3}, 0x38) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000a00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) capset(&(0x7f0000000a80)={0x19980330}, &(0x7f0000000ac0)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0x3}) read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000002b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002c00)={0xf5c, 0x14, 0x10, 0x70bd29, 0x25dfdbfc, {0xf, 0xf8}, [@INET_DIAG_REQ_BYTECODE={0xf46, 0x1, "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"}]}, 0xf5c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) timer_create(0x4, &(0x7f0000003b80)={0x0, 0x20, 0x4}, &(0x7f0000003bc0)) ftruncate(r4, 0x2000009) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x42) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00acb6e3caf7f76a6d61500bd30000001ab3dc4bf06da7f700020000f14ba2abe915"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./trace\x00', &(0x7f0000000700)='tracefs\x00', 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./trace/set_event\x00', 0x2, 0x0) pread64(r6, &(0x7f0000000780)=""/79, 0x4f, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000003c80)=ANY=[@ANYBLOB="180000000300000000000000080000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000708000000b7031a000100000085000000060000001800000008000000000000000900000055791800e2d375778520000001000000bd531800100000009500000000000000edbd4c71791b05345bd49e03005060059282440315a9e15c1678d4bd2d6dc05a8afd293c7d9ec750f4705bedb34bf45d00"/176], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x4000000c, 0x4}, {0x4, 0x2, 0x2}], 0x10, 0xfffffffc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000002c0)='bpf_lsm_locked_down\x00') 2.114861754s ago: executing program 3 (id=622): creat(&(0x7f0000000180)='./file0\x00', 0xa) close(0x3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x2, 0x700) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000006c0)={0x5f48, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x100010e, &(0x7f0000000840)={[{@i_version}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffff0}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@auto_da_alloc}]}, 0x2, 0x45c, &(0x7f0000000940)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000010000"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000f00), 0x0, &(0x7f0000000f40), &(0x7f0000000f80)={[0x1]}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000fc0)={0x9, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x2, 0x3, 0xff, 0x0, 0xa, 0x0, 0x38000, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e27, @private=0xa010101}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x0, 0xd, 0x60000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x50}, 0x1, 0x7}, 0x0) 2.103181375s ago: executing program 3 (id=623): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x4, 0x810, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x2) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x50, 0x0, 0x1, r2, 0x8, 0x7, 0x9a, 0x1, 0x0, 0x7, 0x101}, ["", "", "", "", "", ""]}, 0x3c}}, 0x24000004) recvmmsg(r3, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800891, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e08000000226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX=r3, @ANYRES64=r1, @ANYRES16=r2, @ANYRESOCT=r3], 0x55, 0x1be, &(0x7f0000001680)="$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") openat(0xffffffffffffff9c, &(0x7f0000001840)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2d4, 0xf23, 0xd5, 0x6, 0x4}, 0x1, 0x0, 0x8, 0x6, 0x62, 0x7, 0x1f, 0x11, 0x5, 0x9, {0x7f, 0x128, 0x6, 0x4, 0x848, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xe5b1cc47565b973}, 0x0) (fail_nth: 2) 1.979125148s ago: executing program 0 (id=625): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x16, 0x3, &(0x7f0000000440)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x96}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x18}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff6e, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) syz_ublk_setup_io_uring(0xd, &(0x7f00000007c0)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, &(0x7f0000000840), 0x0) (rerun: 32) sendto$packet(r2, 0x0, 0x0, 0x44010, &(0x7f0000000880)={0x11, 0x4, r1, 0x1, 0x7}, 0x14) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/mtrr\x00', 0x2, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000580)=ANY=[], 0xa) (async) syz_emit_ethernet(0xd8, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@llc_tr={0x11, {@llc={0x6, 0xdc, "f2", "ec1bd200b0b6bc2a577b2d2ee59097504e1b56d66b78d3d0b81e22f3d127f02240ac51bb37fdcbcd093ca0f85ea39dac2387b354806238ee4648187f1635b2f7798c113364cc82a2bf82ebb9d9a070236d88d306216b38143cbfb2ae5b3b5e7071d196801277a125537614a6b5ec3efe83a0f9cb1fd18125e20c94d21323890c988822b5a3ec88c5e55b2f938269cd8fec316651a3f85c798f8d4bf6d0f25b2ed78e3f6d762cf681a65ef479374f585ee3b49d9fb3b6a5db0c768756ca975aadd925b3726e5a13"}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf7}, 0x94) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0xa8744e54bdaadd2f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4, 0x30000}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.648300292s ago: executing program 0 (id=626): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000300)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000700)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0) 1.636867483s ago: executing program 0 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r4, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x38}, 0x4000004) recvmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/223, 0xdf}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}, 0x40000021) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00004abf000000000010000000000000000400ca106d820a233aa2896d6c654a76ce66b4c21832396ecbf399f07f6f7dc8ffb9bf4598e74479ecf0eff2610b25a91b966d5ca40cc6c31be84130411cd2dd07af9c38ca06299baeaab838df06f3f36c5190349e66edcb74f650399d7a9b500531d5bcda8936ce1dfbc752bb241b3cfa1e770a65318e31dc61e82a81071ec7642e57519bef262fa02a27eed53cf70594d3c356e162ced68675727454447ded456f7521122b9bdea082973f1c7ae5326d5ca58919d6689385b67ea68093", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 1.537112234s ago: executing program 0 (id=628): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="b4050000000040006110a00000000000630138c03b53ab5b2c091f00004000006a6e1461d065e45779838257dbdc38fc585b3a1fe068b8bb76a2e7d074f19d4ebfe09e4a7bf76d167fdb622d808d80518d051737655f52d4761e41cc18e435fc1b7d2b39f6a538f540f1c2ada57c902f31b63a4872c43f3e1dc239eed5cd79ab29cb206cb28755f85868fbd7dd1b80f0b70c4b3d044350d315fbf93a9d6a65d61f8c614f3a42042d0a069f0f5613581c3d6a0359d60bb61f77ae4a0f50f4c55875ae052d448e1846b6fc8a70421072052665d6f266ce0716f772fc14a5c112f542ada65ef1e83880c2a9"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), 0x85}, 0x52) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0xb6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffff0f, 0x0}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d40)={'team_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x3, &(0x7f0000001e40)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000001e80)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x2c}}, 0x24008844) sendmsg$nl_route(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) unshare(0x24020400) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1005, &(0x7f0000000d00)=""/4101, 0x0, 0xc}, 0x22) 1.490718338s ago: executing program 1 (id=629): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x4, 0x810, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r2, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000004c0)=0x2) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x50, 0x0, 0x1, r3, 0x8, 0x7, 0x9a, 0x1, 0x0, 0x7, 0x101}, ["", "", "", "", "", ""]}, 0x3c}}, 0x24000004) recvmmsg(r4, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800891, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e08000000226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX=r4, @ANYRES64=r1, @ANYRES16=r3, @ANYRESOCT=r4], 0x55, 0x1be, &(0x7f0000001680)="$eJzsmDFv2lAUhc+zjS1XlejaLq1UJOhQY5u2KkMH1LFDK7Vq1Q1UXERrSgUegKn9A107d+6QGWXhfyRDkilDki1TpDh69jN+ITgRAiGk3G+4Pva7PB9f4CABgiBuLQf7p3tbxYLJ9V0UYIjrh2rao0j94/zZk5322+2/9snuePKmOrOdvuj9NQCTmopAnIdhGMrrBXH8ACXROdTT9U9gsISuQ8FHoT0wfBb6m6S7vN+yvrZ9z/rS9Ztc2Lw4vLi8VGb9Hf9maEr+mLTeH46+N3zf6y0vXnPb85ayZmck/moKXkn+5PcrmY2dzg8OFDhCV8DwXuiXMJLZxCORnv+Blu6vLvn8fH4rm9rGi/v5G3py2BSrGyvMNFnWeXfxRf+10KsYuDgy12t1VeK/CaxmwzQ/w38MRSmfNCk/ykHnZ7k/HD1tdxotr+X9cN3KC/uZbT93y1EQxTUrAqHBjPLpznR/Ncxl9OpMx6ARBD0nrtNzd2Ag6LnzEleP8k9B6XHsms35kYs+JvfYI34oqcB5GJNh40/mwxAEQRAEQRAEQRAEQRAEQVzLQzP+l/US1SuX3HdR90UAAAD//2C6a2w=") openat(0xffffffffffffff9c, &(0x7f0000001840)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2d4, 0xf23, 0xd5, 0x6, 0x4}, 0x1, 0x0, 0x8, 0x6, 0x62, 0x7, 0x1f, 0x11, 0x5, 0x9, {0x7f, 0x128, 0x6, 0x4, 0x848, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xe5b1cc47565b973}, 0x0) 1.490353268s ago: executing program 4 (id=630): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x25, 0x55bf, &(0x7f0000006180)="$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") (async) symlinkat(&(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file7\x00', 0x1c0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) (async) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x100000000e2) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) (async) keyctl$clear(0x3, 0xfffffffffffffffd) (async) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000480)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) (async) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x8000, &(0x7f0000000700)=ANY=[], 0x1, 0x14fe, &(0x7f0000000a80)="$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") (async) open(&(0x7f0000001f80)='./file1\x00', 0x145142, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x64000400) renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file7/file0\x00', 0x0) 950.343603ms ago: executing program 0 (id=631): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x20040, &(0x7f0000000080)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000008b80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000009000)={0x1, &(0x7f0000009040)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r2 = getpid() r3 = creat(&(0x7f0000009080)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000090c0)={0x8, 0x8b}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000009100)={0x13, 0x4, &(0x7f00000091c0)=ANY=[@ANYBLOB="1800000008000000000000001ada04006b11710000000000"], &(0x7f0000009200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000009240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000009280)=0x2) sched_setscheduler(r5, 0x2, &(0x7f00000092c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000009300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000009340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000093c0), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000009400)='/sys/kernel/fscaps', 0x2202, 0x0) write$cgroup_subtree(r3, &(0x7f0000009440)=ANY=[], 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004084, &(0x7f0000009480)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c) recvmmsg(r6, &(0x7f00000094c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000009500)='asymmetric\x00', 0x0, &(0x7f0000009540)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b716380327727385edb72ae6e0decfbb66d017fe95566dfbf1d76780228fbb57ff8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cde982d4b55b2d321f1c9d55f844f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb0252799c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ad", 0x559, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009ac0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000ff10000104e55affffffff000000000000000000", @ANYRES8=r0, @ANYRES64], 0x3c}}, 0x4044) r8 = syz_pidfd_open(r2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000009b80)=ANY=[@ANYBLOB="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"], 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000009cc0)='.\x00', 0x2) close_range(r1, r4, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000009d00)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 865.745292ms ago: executing program 3 (id=632): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x8, 0x1e1, &(0x7f00000003c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r0], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0xde9, r3}, 0x38) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000a00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) capset(&(0x7f0000000a80)={0x19980330}, &(0x7f0000000ac0)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0x3}) read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000002b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002c00)={0xf5c, 0x14, 0x10, 0x70bd29, 0x25dfdbfc, {0xf, 0xf8}, [@INET_DIAG_REQ_BYTECODE={0xf46, 0x1, "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"}]}, 0xf5c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) timer_create(0x4, &(0x7f0000003b80)={0x0, 0x20, 0x4}, &(0x7f0000003bc0)) ftruncate(r4, 0x2000009) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x42) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00acb6e3caf7f76a6d61500bd30000001ab3dc4bf06da7f700020000f14ba2abe915"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./trace\x00', &(0x7f0000000700)='tracefs\x00', 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./trace/set_event\x00', 0x2, 0x0) pread64(r6, &(0x7f0000000780)=""/79, 0x4f, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000003c80)=ANY=[@ANYBLOB="180000000300000000000000080000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000708000000b7031a000100000085000000060000001800000008000000000000000900000055791800e2d375778520000001000000bd531800100000009500000000000000edbd4c71791b05345bd49e03005060059282440315a9e15c1678d4bd2d6dc05a8afd293c7d9ec750f4705bedb34bf45d00"/176], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x4000000c, 0x4}, {0x4, 0x2, 0x2}], 0x10, 0xfffffffc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000002c0)='bpf_lsm_locked_down\x00') 708.525678ms ago: executing program 3 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x800, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1048020, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001d80)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000001e00), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file2\x00', 0x2084004, &(0x7f0000001e40)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r0, @ANYBLOB="5c164963a5310f1b5ffa3794d55883276c11fc8cee67dae908f583554dcd934449c7b8d07c09ba8dbff770da8b98ea3ff82744a6777a186cdc6d2cdb7b4af4de70ed2e3a9c53ff89baca1740bf8eaa4ce1a2cc24d8d9e08ae5b9133327324a6123e4f8ff28a0bc46c43d42836ac8"], 0x1, 0x11fc, &(0x7f0000000640)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x3, 0xc, 0x0, &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000019c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001a00)='./proc\x00', &(0x7f0000001a40)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001ac0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xe, 0x2000007, 0x401d031, r2, 0x0) syz_emit_ethernet(0x31, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES8=r2], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="f84900000000000400"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x9}, 0x94) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40002, 0x128) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./sys\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d362c757466383d302c756e695f786c6174653d302c747a3d5554432c756e695f786c6174653d302c757466383d312c696f6368617273650500000069382d72752c73686f72746e616d653d77696e39352c696f636861727365743d63703836362c636f6465706167653d3933322c757466383d302c756e695f786c6174653d302c757466383d312c7379735f696d6d757461626c652c757466383d302c696f636861727365743d69736f383835392d362c00"], 0x1, 0x298, &(0x7f0000000280)="$eJzs3c1qa1UUAOB18p97B8nAkQj3gA4cXW59ghapIBYEJQN1oMWmIE0otBCoirEjn8AncOLLOBFfwAdQnFlBeiQ9OfkpJ7WVtCne7xtt1tqrZ+2dnXSUnc9eGx4dHJ8enn/9a7RaSVS2YzsukuhGJQrfRqlffi+PAwCP3EWWxR9ZrpmHzpZn1FdU1ir33hwAcC8W//9vuhcA4GF8+NHH7+3s7e1+kKatiOF3o14S0Zrndw7jixhEP15EJ/6OyGby8Tvv7u1GLZ3oxhvD8ag36kUMP/2pqP8t4qp+KzrRLa/fSnML9eNRrx5Pps/fHkT//R+iE68s1V8W9W+V1EevEW++vtD/8+jEz5/HcQziYNrbtP6vb7bS9O3s+z+/+mQSndQn41GvOZs3nV19sBcFAAAAAAAAAAAAAAAAAAAAAID/vefpTHf5/p3i4v8b8mX3AxW35Czc7/MiTdMsycPz+lq8WovaptYNAAAAAAAAAAAAAAAAAAAAj8np2ZdH+4NB/2Stg+Jr/SWpuFyONCPiNn+5WZp6dvvG8n6iuJ9gkETcbV31aF5V/vvk6h13rD3pp3+S1GJ9L0Eyi7QXU88if9Yk0s4HC5FbP+LHp/kuXk+18khxuo72k+hXbtyx1tIhqa/tHGYlx6+6sqpxPdKO8gVOUjc8vfH0P/WcdVakkoiozzZzec7Vm+zJ/EDW1/teLv24aNzDRxAAAAAAAAAAAAAAAAAAADA1/9JvSfJ8Aw0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAbMf///DoPxtHjVnKw6GdRiGtnwEgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgJ/BMAAP//dw9WdQ==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000600)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000001b00)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa", @ANYRES16], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000001b40)={0x2, 0x0, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001940)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) connect$inet(r6, &(0x7f0000001b80)={0x2, 0x4, @multicast1}, 0x10) prlimit64(r4, 0x3, &(0x7f00000000c0)={0x6, 0x6}, &(0x7f0000000540)) 446.454235ms ago: executing program 4 (id=635): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000740)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, 0x0, 0x0) 446.065875ms ago: executing program 4 (id=636): prlimit64(0x0, 0xe, &(0x7f0000001480)={0x41, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000001500)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001540)=0x5) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/236, 0xec}], 0x2, &(0x7f0000002800)=""/97, 0x61}}, {{&(0x7f0000002880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002940)=""/197, 0xc5}], 0x1, &(0x7f0000002a40)=""/45, 0x2d}}], 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000015c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000001640), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f0000001680), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000016c0)=0x2) r4 = epoll_create1(0x80000) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x6e, 0x0, 0x0) (async) close(r4) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000640)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000680)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r6, 0xffffffffffffff84, &(0x7f0000000780)}, 0x8) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f00000003c0)="$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") (async) clock_nanosleep(0x4, 0x0, &(0x7f0000001440)={0x77359400}, 0x0) 432.474866ms ago: executing program 4 (id=637): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000700)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0) 410.408969ms ago: executing program 4 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1420, 0x40000}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r4, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r2, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x38}, 0x4000004) recvmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/223, 0xdf}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}, 0x40000021) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00004abf000000000010000000000000000400ca106d820a233aa2896d6c654a76ce66b4c21832396ecbf399f07f6f7dc8ffb9bf4598e74479ecf0eff2610b25a91b966d5ca40cc6c31be84130411cd2dd07af9c38ca06299baeaab838df06f3f36c5190349e66edcb74f650399d7a9b500531d5bcda8936ce1dfbc752bb241b3cfa1e770a65318e31dc61e82a81071ec7642e57519bef262fa02a27eed53cf70594d3c356e162ced68675727454447ded456f7521122b9bdea082973f1c7ae5326d5ca58919d6689385b67ea68093", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 226.977338ms ago: executing program 4 (id=639): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x60d3, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x210018, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC], 0x1, 0x392, &(0x7f0000002a00)="$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") ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000004ec0)={{&(0x7f0000645000/0x4000)=nil, 0x4000}}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file1\x00', 0x6042, 0x101) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8010, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x7e, 0x2fa, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x100) write$binfmt_elf64(r4, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x95, 0xff, 0x6, 0x81, 0x84c, 0x3, 0x3, 0x8001, 0x15a, 0x40, 0x1f1, 0xd2f, 0xfff, 0x38, 0x1, 0x80, 0x5, 0x5}, [{0x6474e551, 0x7, 0x0, 0x4, 0x2, 0x400, 0x8ca000000000000, 0xbf}]}, 0x78) 70.510874ms ago: executing program 1 (id=640): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) 70.216684ms ago: executing program 1 (id=641): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000006340)={0xa, 0x400000000008d}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000063c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000006400)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000006440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000064c0)=@abs, 0x6e) syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe7c00000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x0) sendmmsg$unix(r5, &(0x7f0000006540), 0x651, 0x0) recvmmsg(r4, &(0x7f0000006580), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000006640)='./file0\x00', 0x18000, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT=r2, @ANYRES16=r5, @ANYRES64=r1, @ANYRES64=r0], 0x1, 0x313, &(0x7f0000006700)="$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") fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x12a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=642): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="b4050000000040006110a00000000000630138c03b53ab5b2c091f00004000006a6e1461d065e45779838257dbdc38fc585b3a1fe068b8bb76a2e7d074f19d4ebfe09e4a7bf76d167fdb622d808d80518d051737655f52d4761e41cc18e435fc1b7d2b39f6a538f540f1c2ada57c902f31b63a4872c43f3e1dc239eed5cd79ab29cb206cb28755f85868fbd7dd1b80f0b70c4b3d044350d315fbf93a9d6a65d61f8c614f3a42042d0a069f0f5613581c3d6a0359d60bb61f77ae4a0f50f4c55875ae052d448e1846b6fc8a70421072052665d6f266ce0716f772fc14a5c112f542ada65ef1e83880c2a9"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), 0x85}, 0x52) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0xb6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffff0f, 0x0}]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d40)={'team_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x3, &(0x7f0000001e40)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000001e80)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x2c}}, 0x24008844) sendmsg$nl_route(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) unshare(0x24020400) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1005, &(0x7f0000000d00)=""/4101, 0x0, 0xc}, 0x22) kernel console output (not intermixed with test programs): y change from 0 to 1024 [ 26.155513][ T321] ======================================================= [ 26.155513][ T321] WARNING: The mand mount option has been deprecated and [ 26.155513][ T321] and is ignored by this kernel. Remove the mand [ 26.155513][ T321] option from the mount to silence this warning. [ 26.155513][ T321] ======================================================= [ 26.191349][ T321] EXT4-fs: Ignoring removed bh option [ 26.199583][ T321] EXT4-fs: Ignoring removed bh option [ 26.206976][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.215723][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.223595][ T321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.225804][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.232846][ T321] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.241100][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.259841][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.268244][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.276209][ T321] EXT4-fs (loop0): shut down requested (2) [ 26.325306][ T333] ip_tables: iptables: counters copy to user failed while replacing table [ 26.339581][ T333] 9pnet_fd: Insufficient options for proto=fd [ 26.355055][ T287] EXT4-fs (loop0): unmounting filesystem. [ 26.483755][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 26.662110][ T329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.775169][ T351] loop2: detected capacity change from 0 to 512 [ 26.796779][ T351] EXT4-fs: Ignoring removed bh option [ 26.850638][ T351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.862194][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.876942][ T329] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 26.888712][ T329] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 26.899476][ T329] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 26.919010][ T351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.928982][ T329] usb 2-1: config 129 has no interface number 0 [ 26.936876][ T351] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.948425][ T329] usb 2-1: config 129 has no interface number 1 [ 26.958471][ T329] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 27.011947][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 27.011967][ T28] audit: type=1400 audit(1793793982.139:156): avc: denied { write open } for pid=346 comm="syz.2.12" path="/2/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.085437][ T329] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 27.198872][ T329] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 27.234402][ T28] audit: type=1400 audit(1793793982.249:157): avc: denied { ioctl } for pid=346 comm="syz.2.12" path="/2/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.258514][ T28] audit: type=1400 audit(1793793982.249:158): avc: denied { create } for pid=346 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.291907][ T329] usb 2-1: config 129 interface 135 has no altsetting 0 [ 27.298892][ T329] usb 2-1: config 129 interface 5 has no altsetting 0 [ 27.314782][ T28] audit: type=1400 audit(1793793982.269:159): avc: denied { create } for pid=346 comm="syz.2.12" name="dev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.332018][ T361] Illegal XDP return value 2239551041 on prog (id 2) dev N/A, expect packet loss! [ 27.340745][ T329] usb 2-1: string descriptor 0 read error: -22 [ 27.357733][ T329] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 27.360597][ T366] loop4: detected capacity change from 0 to 128 [ 27.370572][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.374240][ T28] audit: type=1400 audit(1793793982.409:160): avc: denied { write } for pid=346 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.392439][ T329] usb 2-1: MIDIStreaming interface descriptor not found [ 27.408388][ T28] audit: type=1400 audit(1793793982.409:161): avc: denied { nlmsg_write } for pid=346 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.441706][ T369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 27.474438][ T28] audit: type=1400 audit(1793793982.489:162): avc: denied { name_bind } for pid=365 comm="syz.4.16" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.494012][ T372] loop4: detected capacity change from 0 to 4096 [ 27.510188][ T28] audit: type=1400 audit(1793793982.529:163): avc: denied { mount } for pid=365 comm="syz.4.16" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.532897][ T28] audit: type=1400 audit(1793793982.559:164): avc: denied { ioctl } for pid=368 comm="syz.0.17" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.536399][ T372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.558887][ T28] audit: type=1400 audit(1793793982.569:165): avc: denied { bind } for pid=368 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.602869][ T291] EXT4-fs (loop4): unmounting filesystem. [ 27.629745][ T293] EXT4-fs (loop2): unmounting filesystem. [ 27.661999][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.757550][ T384] loop4: detected capacity change from 0 to 16 [ 27.815805][ T384] erofs: (device loop4): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 27.853619][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 27.865255][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.894079][ T24] usb 4-1: config 0 has no interface number 0 [ 27.935029][ T24] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 27.957467][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.992269][ T24] usb 4-1: config 0 descriptor?? [ 28.012193][ T24] usb 4-1: bad CDC descriptors [ 28.785004][ T390] loop2: detected capacity change from 0 to 128 [ 29.567289][ T329] usb 2-1: USB disconnect, device number 2 [ 29.671657][ T6] usb 4-1: USB disconnect, device number 2 [ 29.698432][ T404] 9pnet_fd: Insufficient options for proto=fd [ 29.699892][ T403] loop1: detected capacity change from 0 to 512 [ 29.732287][ T403] EXT4-fs: Ignoring removed nobh option [ 29.766958][ T403] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 29.782941][ T403] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.25: attempt to clear invalid blocks 2 len 1 [ 29.802473][ T403] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 29.817219][ T403] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.25: invalid indirect mapped block 1819239214 (level 0) [ 29.831238][ T403] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.25: invalid indirect mapped block 1819239214 (level 1) [ 29.846150][ T403] EXT4-fs (loop1): 1 truncate cleaned up [ 29.851995][ T403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.871684][ T403] EXT4-fs (loop1): shut down requested (2) [ 29.878128][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.887176][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.897385][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.906329][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.915331][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 29.986605][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.995567][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 30.005010][ T403] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 30.051942][ T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.113069][ T411] loop2: detected capacity change from 0 to 1024 [ 30.121093][ T411] EXT4-fs: Ignoring removed oldalloc option [ 30.127157][ T411] EXT4-fs: Ignoring removed oldalloc option [ 30.134387][ T411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.153057][ T411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.182081][ T418] loop3: detected capacity change from 0 to 512 [ 30.265228][ T329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 30.275283][ T329] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 30.283726][ T329] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 30.292661][ T329] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 30.293313][ T293] EXT4-fs (loop2): unmounting filesystem. [ 30.301789][ T329] usb 5-1: config 129 has no interface number 0 [ 30.301807][ T329] usb 5-1: config 129 has no interface number 1 [ 30.301830][ T329] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 30.301851][ T329] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 30.301943][ T329] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 30.358058][ T329] usb 5-1: config 129 interface 135 has no altsetting 0 [ 30.386097][ T329] usb 5-1: config 129 interface 5 has no altsetting 0 [ 30.558198][ T329] usb 5-1: string descriptor 0 read error: -22 [ 30.565346][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.602571][ T329] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 30.611693][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.622820][ T329] usb 5-1: MIDIStreaming interface descriptor not found [ 30.763216][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.771645][ T19] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 30.787249][ T19] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 30.795685][ T19] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 30.891579][ T435] loop0: detected capacity change from 0 to 512 [ 30.902560][ T435] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.446094][ T435] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.34: inode has both inline data and extents flags [ 31.460360][ T435] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.34: couldn't read orphan inode 15 (err -117) [ 31.473442][ T435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.604019][ T435] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.792940][ T19] usb 2-1: config 129 has no interface number 0 [ 31.799240][ T19] usb 2-1: config 129 has no interface number 1 [ 31.805564][ T19] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 31.818840][ T19] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 31.829764][ T19] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 31.842979][ T19] usb 2-1: config 129 interface 135 has no altsetting 0 [ 31.850304][ T19] usb 2-1: config 129 interface 5 has no altsetting 0 [ 31.881814][ T442] loop3: detected capacity change from 0 to 4096 [ 31.889099][ T287] EXT4-fs (loop0): unmounting filesystem. [ 31.907178][ T19] usb 2-1: string descriptor 0 read error: -22 [ 31.914980][ T19] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 31.934269][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.954849][ T442] EXT4-fs: Ignoring removed orlov option [ 31.966663][ T19] usb 2-1: MIDIStreaming interface descriptor not found [ 31.982328][ T442] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.022541][ T442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.048319][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 32.048334][ T28] audit: type=1400 audit(1793793987.179:210): avc: denied { write } for pid=448 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.075909][ T442] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.104274][ T28] audit: type=1400 audit(1793793987.239:211): avc: denied { mounton } for pid=441 comm="syz.3.36" path=2F342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F7472616365 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.130033][ T437] loop2: detected capacity change from 0 to 40427 [ 32.151808][ T437] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(301990400) [ 32.161004][ T437] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 32.178960][ T437] F2FS-fs (loop2): fault_injection options not supported [ 32.186849][ T437] F2FS-fs (loop2): fault_type options not supported [ 32.190524][ T19] usb 2-1: USB disconnect, device number 3 [ 32.193593][ T28] audit: type=1400 audit(1793793987.319:212): avc: denied { remove_name } for pid=288 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.211180][ T437] F2FS-fs (loop2): invalid crc value [ 32.223545][ T28] audit: type=1400 audit(1793793987.319:213): avc: denied { rmdir } for pid=288 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.249302][ T437] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.250510][ T28] audit: type=1400 audit(1793793987.319:214): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.343134][ T455] loop0: detected capacity change from 0 to 1024 [ 32.353515][ T455] EXT4-fs: Ignoring removed oldalloc option [ 32.359497][ T455] EXT4-fs: Ignoring removed oldalloc option [ 32.368801][ T28] audit: type=1400 audit(1793793987.319:215): avc: denied { unlink } for pid=288 comm="syz-executor" name=66696C6507 dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.392030][ T28] audit: type=1400 audit(1793793987.359:216): avc: denied { rmdir } for pid=288 comm="syz-executor" name="trace" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.415394][ T455] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.438870][ T288] EXT4-fs (loop3): unmounting filesystem. [ 32.510965][ T28] audit: type=1400 audit(1793793987.439:217): avc: denied { create } for pid=448 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 32.560400][ T455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.731494][ T329] usb 5-1: USB disconnect, device number 2 [ 32.797962][ T437] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 32.875257][ T437] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.026423][ T28] audit: type=1400 audit(1793793987.489:218): avc: denied { mounton } for pid=448 comm="syz.0.38" path="/syzcgroup/unified/syz0/file1" dev="cgroup2" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.055522][ T28] audit: type=1400 audit(1793793987.749:219): avc: denied { mounton } for pid=448 comm="syz.0.38" path="/syzcgroup/unified/syz0/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.132726][ T294] EXT4-fs (loop1): unmounting filesystem. [ 33.151105][ T462] tmpfs: Unknown parameter 'nrBí-€úuôd' [ 33.179535][ T437] syz.2.35: attempt to access beyond end of device [ 33.179535][ T437] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 33.205983][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 33.300554][ T480] loop3: detected capacity change from 0 to 128 [ 33.367969][ T293] syz-executor: attempt to access beyond end of device [ 33.367969][ T293] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 33.503162][ T482] random: crng reseeded on system resumption [ 33.575931][ T478] loop1: detected capacity change from 0 to 40427 [ 33.731076][ T487] loop2: detected capacity change from 0 to 512 [ 33.790150][ T487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.802058][ T487] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.010050][ T293] EXT4-fs (loop2): unmounting filesystem. [ 34.233490][ T508] loop1: detected capacity change from 0 to 256 [ 35.253778][ T528] fuse: Bad value for 'fd' [ 35.294689][ T531] xt_hashlimit: size too large, truncated to 1048576 [ 35.349542][ T535] xt_hashlimit: size too large, truncated to 1048576 [ 35.541746][ T539] loop3: detected capacity change from 0 to 1024 [ 35.567718][ T539] EXT4-fs (loop3): filesystem is read-only [ 35.630400][ T543] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 35.638447][ T373] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.696818][ T547] loop2: detected capacity change from 0 to 8192 [ 35.761331][ T552] overlayfs: filesystem on './file0' not supported as upperdir [ 35.978975][ T560] ip_tables: iptables: counters copy to user failed while replacing table [ 36.035195][ T568] Zero length message leads to an empty skb [ 36.044154][ T568] loop1: detected capacity change from 0 to 256 [ 36.061265][ T568] exfat: Bad value for 'gid' [ 36.288291][ T589] loop4: detected capacity change from 0 to 128 [ 36.613509][ T616] loop2: detected capacity change from 0 to 256 [ 36.637772][ T616] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 36.681945][ T616] device xfrm0 entered promiscuous mode [ 36.698856][ T616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 36.760423][ T624] ip_tables: iptables: counters copy to user failed while replacing table [ 36.795693][ T616] syz.2.86 (616) used greatest stack depth: 21352 bytes left [ 36.838500][ T629] mmap: syz.3.89 (629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.080783][ T594] loop1: detected capacity change from 0 to 131072 [ 37.096991][ T594] F2FS-fs (loop1): invalid crc value [ 37.118988][ T594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.151908][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.160339][ T594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 37.179266][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 37.179280][ T28] audit: type=1400 audit(1793793992.309:334): avc: denied { getopt } for pid=592 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.311935][ T24] usb 3-1: device descriptor read/64, error -71 [ 37.319868][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 37.342272][ T28] audit: type=1400 audit(1793793992.479:335): avc: denied { getopt } for pid=640 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.444587][ T645] futex_wake_op: syz.4.92 tries to shift op by 144; fix this program [ 37.463376][ T645] loop4: detected capacity change from 0 to 512 [ 37.582059][ T24] usb 3-1: device descriptor read/64, error -71 [ 37.643737][ T645] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 37.652026][ T645] System zones: 0-2, 18-18, 34-35 [ 37.692242][ T28] audit: type=1400 audit(1793793992.829:336): avc: denied { ioctl } for pid=647 comm="syz.0.95" path="socket:[17043]" dev="sockfs" ino=17043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.728518][ T645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.731556][ T660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 37.737814][ T645] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.788817][ T28] audit: type=1400 audit(1793793992.909:337): avc: denied { write } for pid=640 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.862707][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.875208][ T28] audit: type=1400 audit(1793793993.009:338): avc: denied { create } for pid=668 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 37.904846][ T672] loop3: detected capacity change from 0 to 512 [ 37.912176][ T672] ext4: Unknown parameter 'dont_measure' [ 37.926323][ T672] loop3: detected capacity change from 0 to 2048 [ 37.943409][ T672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.021946][ T24] usb 3-1: device descriptor read/64, error -71 [ 38.304027][ T291] EXT4-fs (loop4): unmounting filesystem. [ 38.322409][ T679] loop4: detected capacity change from 0 to 512 [ 38.334299][ T679] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.347470][ T679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.359082][ T679] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.101: invalid indirect mapped block 32768 (level 2) [ 38.373009][ T679] EXT4-fs (loop4): 1 orphan inode deleted [ 38.378729][ T679] EXT4-fs (loop4): 1 truncate cleaned up [ 38.384811][ T679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.397607][ T28] audit: type=1400 audit(1793793993.529:339): avc: denied { write } for pid=678 comm="syz.4.101" name="bus" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.451947][ T24] usb 3-1: device descriptor read/64, error -71 [ 38.571963][ T24] usb usb3-port1: attempt power cycle [ 38.691960][ T432] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 38.799737][ T288] EXT4-fs (loop3): unmounting filesystem. [ 38.893247][ T432] usb 5-1: unable to get BOS descriptor or descriptor too short [ 38.904098][ T432] usb 5-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 38.916379][ T432] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 38.981964][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.001914][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.013710][ T24] usb 3-1: device descriptor read/8, error -71 [ 39.163458][ T24] usb 3-1: device descriptor read/8, error -71 [ 39.203077][ T6] usb 1-1: unable to get BOS descriptor set [ 39.212504][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.222633][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.243095][ T6] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 39.252179][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.260183][ T6] usb 1-1: Product: syz [ 39.264369][ T6] usb 1-1: Manufacturer: syz [ 39.268968][ T6] usb 1-1: SerialNumber: syz [ 39.431946][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.463298][ T24] usb 3-1: device descriptor read/8, error -71 [ 39.480462][ T6] usb 1-1: cannot find UAC_HEADER [ 39.493088][ T6] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 39.501304][ T6] usb 1-1: USB disconnect, device number 2 [ 39.627059][ T24] usb 3-1: device descriptor read/8, error -71 [ 39.702239][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.751973][ T24] usb usb3-port1: unable to enumerate USB device [ 39.796905][ T705] erofs: (device loop3): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 39.884001][ T710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.893339][ T710] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.905643][ T710] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.111: bg 0: block 112: padding at end of block bitmap is not set [ 39.920305][ T710] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 39.933071][ T710] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.933071][ T710] [ 39.942873][ T710] EXT4-fs (loop2): Total free blocks count 0 [ 39.949143][ T710] EXT4-fs (loop2): Free/Dirty block details [ 39.955261][ T710] EXT4-fs (loop2): free_blocks=0 [ 39.960788][ T710] EXT4-fs (loop2): dirty_blocks=16 [ 39.966109][ T710] EXT4-fs (loop2): Block reservation details [ 39.972294][ T710] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 39.974095][ T713] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.111: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.999927][ T710] xt_hashlimit: max too large, truncated to 1048576 [ 40.271914][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 40.341927][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.421923][ T24] usb 3-1: device descriptor read/64, error -71 [ 40.522948][ T6] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 40.531170][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.541327][ T6] usb 1-1: config 0 has no interface number 0 [ 40.547473][ T6] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 40.556552][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.565368][ T6] usb 1-1: config 0 descriptor?? [ 40.571112][ T6] usb 1-1: bad CDC descriptors [ 40.701917][ T24] usb 3-1: device descriptor read/64, error -71 [ 40.772974][ T329] usb 1-1: USB disconnect, device number 3 [ 40.947712][ T729] set_capacity_and_notify: 4 callbacks suppressed [ 40.947732][ T729] loop1: detected capacity change from 0 to 128 [ 40.971937][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 41.093509][ T733] loop3: detected capacity change from 0 to 128 [ 41.247081][ T735] loop1: detected capacity change from 0 to 40427 [ 41.262914][ T735] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 41.277123][ T735] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.296931][ T735] F2FS-fs (loop1): invalid crc value [ 41.308020][ T28] audit: type=1400 audit(1793793996.439:340): avc: denied { ioctl } for pid=736 comm="syz.0.121" path="socket:[18218]" dev="sockfs" ino=18218 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.398303][ T432] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.413540][ T291] EXT4-fs (loop4): unmounting filesystem. [ 41.424950][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.434348][ T735] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.466607][ T432] usb 5-1: can't set config #1, error -71 [ 41.474618][ T373] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.485350][ T432] usb 5-1: USB disconnect, device number 3 [ 41.501991][ T742] loop4: detected capacity change from 0 to 16 [ 41.521004][ T742] erofs: (device loop4): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 41.522562][ T735] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.540788][ T735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.548422][ T24] usb 3-1: device descriptor read/64, error -71 [ 41.641718][ T28] audit: type=1400 audit(1793793996.769:341): avc: denied { connect } for pid=746 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.912013][ T24] usb 3-1: device descriptor read/64, error -71 [ 42.045879][ T24] usb usb3-port1: attempt power cycle [ 42.109021][ T757] loop3: detected capacity change from 0 to 512 [ 42.115818][ T757] FAT-fs (loop3): Unrecognized mount option "ÿ000000000000000000030000000000000000000300000000000000000000" or missing value [ 42.230968][ T373] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.471954][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 42.502911][ T24] usb 3-1: device descriptor read/8, error -71 [ 42.652910][ T24] usb 3-1: device descriptor read/8, error -71 [ 42.865502][ T293] EXT4-fs (loop2): unmounting filesystem. [ 42.913207][ T774] loop2: detected capacity change from 0 to 512 [ 42.921972][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 42.934678][ T778] overlayfs: failed to resolve './bus': -2 [ 42.957093][ T774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.132: missing EA_INODE flag [ 42.972299][ T774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.132: error while reading EA inode 2 err=-117 [ 42.985263][ T774] EXT4-fs (loop2): 1 orphan inode deleted [ 43.001919][ T774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.020689][ T293] EXT4-fs (loop2): unmounting filesystem. [ 43.213271][ T796] loop4: detected capacity change from 0 to 1024 [ 43.223137][ T796] EXT4-fs: Ignoring removed oldalloc option [ 43.229141][ T796] EXT4-fs: Ignoring removed oldalloc option [ 43.262625][ T796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.418854][ T24] usb 3-1: device not accepting address 9, error -71 [ 43.456701][ T24] usb usb3-port1: unable to enumerate USB device [ 44.011204][ T796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.095858][ T28] audit: type=1400 audit(1793793999.079:342): avc: denied { listen } for pid=795 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.178151][ T765] syz.1.127 (765) used greatest stack depth: 21000 bytes left [ 44.306611][ T815] futex_wake_op: syz.2.140 tries to shift op by 144; fix this program [ 44.322774][ T815] loop2: detected capacity change from 0 to 256 [ 44.338900][ T815] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 44.352347][ T816] loop3: detected capacity change from 0 to 128 [ 44.371752][ T28] audit: type=1400 audit(1793793999.499:343): avc: denied { add_name } for pid=806 comm="syz.2.140" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.514266][ T28] audit: type=1400 audit(1793793999.499:344): avc: denied { associate } for pid=806 comm="syz.2.140" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.589084][ T28] audit: type=1400 audit(1793793999.499:345): avc: denied { read write } for pid=806 comm="syz.2.140" name="file1" dev="loop2" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.612130][ T28] audit: type=1400 audit(1793793999.499:346): avc: denied { open } for pid=806 comm="syz.2.140" path="/23/file1/file1" dev="loop2" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.655025][ T819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 44.683046][ T819] futex_wake_op: syz.4.143 tries to shift op by -1; fix this program [ 44.839764][ T28] audit: type=1326 audit(1793793999.969:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=831 comm="syz.0.148" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b139fb19 code=0x7ffc0000 [ 44.892025][ T28] audit: type=1326 audit(1793793999.969:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=831 comm="syz.0.148" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b139fb19 code=0x7ffc0000 [ 44.944248][ T28] audit: type=1326 audit(1793793999.969:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=831 comm="syz.0.148" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b139fb19 code=0x7ffc0000 [ 44.993468][ T28] audit: type=1326 audit(1793793999.969:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=831 comm="syz.0.148" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b139fb19 code=0x7ffc0000 [ 45.028959][ T28] audit: type=1326 audit(1793793999.999:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=831 comm="syz.0.148" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f82b139fb19 code=0x7ffc0000 [ 45.781632][ T848] loop1: detected capacity change from 0 to 512 [ 45.813087][ T848] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.152: iget: bad i_size value: 38620345925642 [ 45.830816][ T848] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.152: couldn't read orphan inode 15 (err -117) [ 45.843130][ T848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.864033][ T848] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.152: bg 0: block 5: invalid block bitmap [ 45.928009][ T294] EXT4-fs (loop1): unmounting filesystem. [ 45.939805][ T860] ip_tables: iptables: counters copy to user failed while replacing table [ 46.026376][ T857] loop3: detected capacity change from 0 to 2048 [ 46.047171][ T857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.111247][ T866] loop1: detected capacity change from 0 to 2048 [ 46.137103][ T868] netlink: 'syz.1.157': attribute type 34 has an invalid length. [ 46.177994][ T866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.209063][ T294] EXT4-fs (loop1): unmounting filesystem. [ 46.215160][ T6] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 46.287657][ T884] syz.4.158 (884): /proc/863/oom_adj is deprecated, please use /proc/863/oom_score_adj instead. [ 46.319218][ T881] syz.2.161 uses obsolete (PF_INET,SOCK_PACKET) [ 46.327159][ T881] loop2: detected capacity change from 0 to 256 [ 46.336597][ T887] loop1: detected capacity change from 0 to 512 [ 46.344978][ T887] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.363090][ T370] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.413005][ T6] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 46.424086][ T6] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.437242][ T6] usb 1-1: config 0 interface 0 has no altsetting 0 [ 46.444063][ T6] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 46.453395][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.462614][ T6] usb 1-1: config 0 descriptor?? [ 46.467994][ T860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.595873][ T889] loop1: detected capacity change from 0 to 128 [ 46.607562][ T889] netlink: 76 bytes leftover after parsing attributes in process `syz.1.163'. [ 46.673888][ T288] EXT4-fs (loop3): unmounting filesystem. [ 46.748967][ T893] cgroup: fork rejected by pids controller in /syz1 [ 46.880178][ T860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.893402][ T860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.971929][ T883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.986080][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 47.263093][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.271779][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.282370][ T308] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.291591][ T308] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 47.304729][ T308] usb 4-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 47.314259][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.322615][ T308] usb 4-1: Product: syz [ 47.327140][ T308] usb 4-1: Manufacturer: syz [ 47.332099][ T308] usb 4-1: SerialNumber: syz [ 47.681913][ T883] usb 2-1: Using ep0 maxpacket: 16 [ 47.688145][ T883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 194, changing to 7 [ 47.699597][ T883] usb 2-1: language id specifier not provided by device, defaulting to English [ 47.709734][ T883] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 47.718894][ T883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.726924][ T883] usb 2-1: Product: syz [ 47.731134][ T883] usb 2-1: Manufacturer: 玈ឱ陼쫡霎줋绥︛ჳ앫⃬䵿뛔졓戗玖㣌譆밌䖜ꙕ叻⌖짷ギ쇭霷꿯⤎웒䬺赿ꐞ■缣穕猆ﴞ尘힚ⵤ뮵릚ꏴ퉩⳿ⴂ㛨௝ₒसᛓ읊ꩰ [ 47.763632][ T883] usb 2-1: SerialNumber: syz [ 48.301775][ T949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 48.424195][ T308] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 48.432335][ T308] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 48.439998][ T308] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 48.447420][ T308] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 48.457740][ T308] usb 4-1: unit 2 not found! [ 48.462418][ T308] usb 4-1: unit 0 not found! [ 48.470651][ T308] usb 4-1: USB disconnect, device number 3 [ 48.485257][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.605083][ T946] syz.4.168 (946) used greatest stack depth: 20008 bytes left [ 48.929706][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 48.937483][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 48.939645][ T971] loop2: detected capacity change from 0 to 40427 [ 48.945347][ T6] usb 1-1: USB disconnect, device number 4 [ 48.958076][ T971] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 48.965976][ T971] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.980501][ T971] F2FS-fs (loop2): invalid crc value [ 49.001498][ T971] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.038222][ T971] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 49.045701][ T971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.584083][ T28] kauditd_printk_skb: 886 callbacks suppressed [ 49.584104][ T28] audit: type=1400 audit(1793794004.719:1238): avc: denied { mounton } for pid=983 comm="syz.3.181" path="/33/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 50.267580][ T997] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 50.275471][ T883] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.284802][ T883] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 50.302643][ T883] usb 2-1: USB disconnect, device number 4 [ 50.312927][ T997] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 50.523122][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.546358][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 50.604077][ T28] audit: type=1400 audit(1793794005.739:1239): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.673685][ T28] audit: type=1400 audit(1793794005.739:1240): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.721996][ T28] audit: type=1400 audit(1793794005.739:1241): avc: denied { read } for pid=142 comm="dhcpcd" name="n140" dev="tmpfs" ino=1511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.744236][ T28] audit: type=1400 audit(1793794005.739:1242): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n140" dev="tmpfs" ino=1511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.768691][ T28] audit: type=1400 audit(1793794005.739:1243): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n140" dev="tmpfs" ino=1511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.909030][ T1018] incfs: Can't find or create .index dir in ./file0 [ 50.916084][ T1018] incfs: mount failed -22 [ 51.063910][ T28] audit: type=1400 audit(1793794006.149:1244): avc: denied { read } for pid=1013 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.452973][ T28] audit: type=1400 audit(1793794006.229:1245): avc: denied { search } for pid=1015 comm="syz.0.190" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.858723][ T1028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'. [ 51.867813][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 51.876629][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 51.885543][ T1028] netlink: 108 bytes leftover after parsing attributes in process `syz.4.192'. [ 51.918704][ T28] audit: type=1400 audit(1793794006.909:1246): avc: denied { checkpoint_restore } for pid=1024 comm="syz.4.192" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.681871][ C0] sched: RT throttling activated [ 52.751985][ T329] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.899172][ T1040] futex_wake_op: syz.0.196 tries to shift op by 144; fix this program [ 53.051969][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 53.059071][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.072001][ T28] audit: type=1400 audit(1793794008.059:1247): avc: denied { read } for pid=1037 comm="syz.0.196" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.131480][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.159858][ T329] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.161384][ T1046] loop2: detected capacity change from 0 to 512 [ 53.178818][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.191011][ T1046] ext4: Unknown parameter 'dont_measure' [ 53.212923][ T329] usb 2-1: config 0 descriptor?? [ 53.242967][ T373] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.262171][ T1046] loop2: detected capacity change from 0 to 2048 [ 53.309482][ T1046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.720822][ T1064] loop3: detected capacity change from 0 to 1024 [ 53.813481][ T329] HID 045e:07da: Invalid code 65791 type 1 [ 53.894132][ T329] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 [ 53.928966][ T1064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.195254][ T293] EXT4-fs (loop2): unmounting filesystem. [ 54.247887][ T329] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 54.612827][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 54.612840][ T28] audit: type=1400 audit(1793794009.749:1259): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=743 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.645379][ T1063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 54.677495][ T28] audit: type=1400 audit(1793794009.789:1260): avc: denied { name_bind } for pid=1031 comm="syz.1.193" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 54.699389][ T28] audit: type=1400 audit(1793794009.809:1261): avc: denied { create } for pid=1069 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.701426][ T288] EXT4-fs (loop3): unmounting filesystem. [ 54.722475][ T28] audit: type=1400 audit(1793794009.809:1262): avc: denied { setopt } for pid=1069 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.750545][ T28] audit: type=1400 audit(1793794009.829:1263): avc: denied { connect } for pid=1069 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.770358][ T1074] device lo entered promiscuous mode [ 54.792379][ T1074] device tunl0 entered promiscuous mode [ 54.821790][ T1074] device gre0 entered promiscuous mode [ 54.832764][ T1078] loop3: detected capacity change from 0 to 16 [ 54.847057][ T1074] device gretap0 entered promiscuous mode [ 54.860338][ T6] usb 2-1: USB disconnect, device number 5 [ 54.870514][ T1074] device erspan0 entered promiscuous mode [ 54.882433][ T1078] erofs: (device loop3): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 54.893702][ T1074] device ip_vti0 entered promiscuous mode [ 54.997743][ T1076] loop2: detected capacity change from 0 to 40427 [ 55.015679][ T1076] F2FS-fs (loop2): Unrecognized mount option "checkpoinoinline_dentry" or missing value [ 55.701521][ T1105] process 'syz.1.216' launched './file0' with NULL argv: empty string added [ 55.713237][ T28] audit: type=1400 audit(1793794010.839:1264): avc: denied { execute_no_trans } for pid=1104 comm="syz.1.216" path="/39/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.763686][ T1105] loop1: detected capacity change from 0 to 1024 [ 55.883215][ T1105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.898730][ T28] audit: type=1400 audit(1793794011.029:1265): avc: denied { append } for pid=1104 comm="syz.1.216" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.929820][ T373] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.969538][ T294] EXT4-fs (loop1): unmounting filesystem. [ 56.003794][ T28] audit: type=1400 audit(1793794011.139:1266): avc: denied { read } for pid=1114 comm="syz.0.220" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.029223][ T1115] fuse: Bad value for 'user_id' [ 56.047897][ T28] audit: type=1400 audit(1793794011.159:1267): avc: denied { open } for pid=1114 comm="syz.0.220" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.080225][ T1120] loop1: detected capacity change from 0 to 512 [ 56.095534][ T1120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.141733][ T1120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.147194][ T1130] loop3: detected capacity change from 0 to 256 [ 56.197486][ T1120] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.261408][ T1134] loop2: detected capacity change from 0 to 128 [ 56.276550][ T1120] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.222: corrupted xattr block 32 [ 56.523692][ T1136] incfs: Can't find or create .index dir in ./file0 [ 56.530553][ T1136] incfs: mount failed -22 [ 56.683559][ T1120] EXT4-fs (loop1): Remounting filesystem read-only [ 56.833368][ T1120] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 57.241713][ T1120] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.222: corrupted xattr block 32 [ 57.274402][ T1120] EXT4-fs (loop1): Remounting filesystem read-only [ 57.292903][ T1120] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 57.315145][ T294] EXT4-fs (loop1): unmounting filesystem. [ 57.341976][ T329] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 57.504493][ T1156] loop1: detected capacity change from 0 to 512 [ 57.543233][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.557607][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.581237][ T329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 57.593858][ T1156] EXT4-fs (loop1): 1 orphan inode deleted [ 57.599716][ T1156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.609255][ T1156] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.619864][ T43] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.619921][ T43] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1 [ 57.652731][ T329] usb 4-1: string descriptor 0 read error: -22 [ 57.659106][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.668223][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.680220][ T1140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.690654][ T329] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 57.712470][ T40] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.871971][ T40] usb 5-1: device descriptor read/64, error -71 [ 57.890808][ T6] usb 4-1: USB disconnect, device number 4 [ 57.957818][ T1161] syz.2.232 (1161) used greatest stack depth: 18408 bytes left [ 58.000798][ T1169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.009543][ T1169] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.152117][ T40] usb 5-1: device descriptor read/64, error -71 [ 58.486417][ T294] EXT4-fs (loop1): unmounting filesystem. [ 58.602042][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.995039][ T40] usb 5-1: device descriptor read/64, error -71 [ 59.008915][ T1180] set_capacity_and_notify: 1 callbacks suppressed [ 59.008942][ T1180] loop3: detected capacity change from 0 to 128 [ 59.322027][ T40] usb 5-1: device descriptor read/64, error -71 [ 59.442207][ T40] usb usb5-port1: attempt power cycle [ 59.645794][ T293] EXT4-fs (loop2): unmounting filesystem. [ 59.679049][ T1186] loop2: detected capacity change from 0 to 16 [ 59.699655][ T1186] erofs: (device loop2): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 59.820922][ T373] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.840245][ T1192] loop3: detected capacity change from 0 to 512 [ 59.848294][ T1192] ext4: Unknown parameter 'dont_measure' [ 59.861977][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.876892][ T1192] loop3: detected capacity change from 0 to 2048 [ 59.896310][ T1192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.922892][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 59.922905][ T28] audit: type=1400 audit(1793794015.059:1270): avc: denied { remount } for pid=1195 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.959925][ T40] usb 5-1: device descriptor read/8, error -71 [ 60.187995][ T843] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.232888][ T40] usb 5-1: device descriptor read/8, error -71 [ 60.361948][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 60.391944][ T843] usb 1-1: Using ep0 maxpacket: 32 [ 60.398285][ T843] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 60.409309][ T843] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.420385][ T843] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 60.425846][ T1206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 60.433656][ T843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.449017][ T843] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 60.458131][ T843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.472354][ T843] usb 1-1: config 0 descriptor?? [ 60.511958][ T6] usb 3-1: device descriptor read/64, error -71 [ 60.530591][ T1212] virtio-fs: tag <> not found [ 60.538943][ T1212] loop1: detected capacity change from 0 to 16 [ 60.566529][ T1212] erofs: (device loop1): mounted with root inode @ nid 36. [ 60.575178][ T28] audit: type=1400 audit(1793794015.709:1271): avc: denied { map } for pid=1211 comm="syz.1.250" path="/45/file2/file1" dev="loop1" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.578623][ T1212] syz.1.250: attempt to access beyond end of device [ 60.578623][ T1212] loop1: rw=524288, sector=1342177272, nr_sectors = 2560 limit=16 [ 60.609033][ T28] audit: type=1400 audit(1793794015.709:1272): avc: denied { execute } for pid=1211 comm="syz.1.250" path="/45/file2/file1" dev="loop1" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.620038][ T1212] syz.1.250: attempt to access beyond end of device [ 60.620038][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.649626][ T1212] syz.1.250: attempt to access beyond end of device [ 60.649626][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.687572][ T1212] syz.1.250: attempt to access beyond end of device [ 60.687572][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.701435][ T1212] syz.1.250: attempt to access beyond end of device [ 60.701435][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.712584][ T28] audit: type=1400 audit(1793794015.829:1273): avc: denied { read } for pid=1207 comm="syz.4.248" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.738705][ T288] EXT4-fs (loop3): unmounting filesystem. [ 60.739314][ T28] audit: type=1400 audit(1793794015.849:1274): avc: denied { open } for pid=1207 comm="syz.4.248" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.768778][ T28] audit: type=1400 audit(1793794015.849:1275): avc: denied { write } for pid=1207 comm="syz.4.248" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.778220][ T1212] syz.1.250: attempt to access beyond end of device [ 60.778220][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.792186][ T28] audit: type=1400 audit(1793794015.849:1276): avc: denied { ioctl } for pid=1207 comm="syz.4.248" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.820346][ T1212] syz.1.250: attempt to access beyond end of device [ 60.820346][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.840695][ T28] audit: type=1400 audit(1793794015.969:1277): avc: denied { getopt } for pid=1214 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.844295][ T1212] syz.1.250: attempt to access beyond end of device [ 60.844295][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.863748][ T6] usb 3-1: device descriptor read/64, error -71 [ 60.877790][ T1212] syz.1.250: attempt to access beyond end of device [ 60.877790][ T1212] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 60.899142][ T843] input: HID 046d:c087 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C087.0002/input/input5 [ 60.906418][ T1213] syz.1.250: attempt to access beyond end of device [ 60.906418][ T1213] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 61.911542][ T843] logitech-hidpp-device 0003:046D:C087.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c087] on usb-dummy_hcd.0-1/input0 [ 61.986389][ T843] usb 1-1: USB disconnect, device number 5 [ 62.055124][ T1232] fido_id[1232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 62.295086][ T28] audit: type=1400 audit(1793794017.409:1278): avc: denied { accept } for pid=1235 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.326540][ T1229] loop1: detected capacity change from 0 to 40427 [ 62.334160][ T1229] F2FS-fs (loop1): invalid crc value [ 62.340617][ T1229] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.395839][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 62.399141][ T1229] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.450377][ T1229] netlink: 'syz.1.254': attribute type 11 has an invalid length. [ 62.462307][ T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 62.519663][ T28] audit: type=1400 audit(1793794017.649:1279): avc: denied { append } for pid=1258 comm="syz.1.263" name="uprobe_events" dev="tracefs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.622066][ T6] usb 3-1: device descriptor read/64, error -71 [ 62.721961][ T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 62.911030][ T1277] loop1: detected capacity change from 0 to 128 [ 62.921401][ T40] usb 4-1: Using ep0 maxpacket: 8 [ 63.006019][ T40] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.063742][ T6] usb 3-1: device descriptor read/64, error -71 [ 63.117675][ T40] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.286769][ T40] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.351797][ T6] usb usb3-port1: attempt power cycle [ 63.389364][ T40] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 63.542796][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.725734][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 63.736137][ T40] usb 4-1: Product: syz [ 63.741710][ T40] usb 4-1: Manufacturer: syz [ 63.746691][ T40] usb 4-1: SerialNumber: syz [ 64.028166][ T1298] loop2: detected capacity change from 0 to 1024 [ 64.037610][ T1298] EXT4-fs: Ignoring removed oldalloc option [ 64.043626][ T1298] EXT4-fs: Ignoring removed oldalloc option [ 64.051187][ T1298] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.086822][ T40] usb 4-1: USB disconnect, device number 5 [ 64.691673][ T1299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 64.700636][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 64.709427][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 64.718232][ T1299] netlink: 108 bytes leftover after parsing attributes in process `syz.1.278'. [ 64.791951][ T901] udevd[901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.858072][ T1298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.198266][ T1305] loop1: detected capacity change from 0 to 1024 [ 65.216295][ T28] audit: type=1326 audit(1793794020.349:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.246059][ T1311] loop3: detected capacity change from 0 to 512 [ 65.269076][ T28] audit: type=1326 audit(1793794020.369:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.269737][ T1305] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (56885!=20869) [ 65.311945][ T28] audit: type=1326 audit(1793794020.379:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.332436][ T1311] ext4: Unknown parameter 'dont_measure' [ 65.337429][ T1305] EXT4-fs error (device loop1): __ext4_iget:5104: inode #8: block 1803188595: comm syz.1.279: invalid block [ 65.356571][ T28] audit: type=1326 audit(1793794020.379:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.381827][ T1305] EXT4-fs (loop1): no journal found [ 65.387097][ T1305] EXT4-fs (loop1): can't get journal size [ 65.394626][ T28] audit: type=1326 audit(1793794020.379:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.398554][ T1311] loop3: detected capacity change from 0 to 2048 [ 65.432027][ T1305] EXT4-fs error (device loop1): __ext4_iget:5104: inode #8: block 1803188595: comm syz.1.279: invalid block [ 65.449537][ T1305] EXT4-fs (loop1): failed to initialize system zone (-117) [ 65.457544][ T28] audit: type=1326 audit(1793794020.379:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.482856][ T1305] EXT4-fs (loop1): mount failed [ 65.488022][ T28] audit: type=1326 audit(1793794020.379:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.513727][ T28] audit: type=1326 audit(1793794020.379:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.539074][ T1311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.551176][ T28] audit: type=1326 audit(1793794020.379:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.576218][ T28] audit: type=1326 audit(1793794020.379:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1307 comm="syz.2.280" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f057a59fb19 code=0x7ffc0000 [ 65.948820][ T1305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1305 comm=syz.1.279 [ 66.106317][ T288] EXT4-fs (loop3): unmounting filesystem. [ 66.248597][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 66.258356][ T1352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.281480][ T1353] loop1: detected capacity change from 0 to 128 [ 66.307606][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 66.337324][ T1355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.452993][ T6] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 66.623127][ T1362] incfs: Can't find or create .incomplete dir in ./file0 [ 66.630401][ T1362] incfs: mount failed -22 [ 67.471929][ T6] usb 4-1: device descriptor read/64, error -71 [ 67.677580][ T1383] device pim6reg1 entered promiscuous mode [ 67.741914][ T6] usb 4-1: device descriptor read/64, error -71 [ 67.942465][ T1389] loop1: detected capacity change from 0 to 128 [ 68.011921][ T6] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 68.161907][ T6] usb 4-1: device descriptor read/64, error -71 [ 68.168941][ T373] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.431920][ T6] usb 4-1: device descriptor read/64, error -71 [ 68.552090][ T6] usb usb4-port1: attempt power cycle [ 68.723024][ T40] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 68.952019][ T40] usb 1-1: device descriptor read/64, error -71 [ 69.221990][ T40] usb 1-1: device descriptor read/64, error -71 [ 69.521981][ T40] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 69.637991][ T1435] FAULT_INJECTION: forcing a failure. [ 69.637991][ T1435] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.651242][ T1435] CPU: 1 PID: 1435 Comm: syz.4.318 Not tainted syzkaller #0 [ 69.658536][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.668614][ T1435] Call Trace: [ 69.671888][ T1435] [ 69.674813][ T1435] __dump_stack+0x21/0x24 [ 69.679169][ T1435] dump_stack_lvl+0x110/0x170 [ 69.683847][ T1435] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.688873][ T1435] dump_stack+0x15/0x24 [ 69.693028][ T1435] should_fail_ex+0x3bf/0x510 [ 69.697705][ T1435] should_fail+0xb/0x10 [ 69.701856][ T1435] should_fail_usercopy+0x1a/0x20 [ 69.706876][ T1435] _copy_from_user+0x1e/0xc0 [ 69.711466][ T1435] __sys_bpf+0x2a0/0x850 [ 69.715704][ T1435] ? bpf_link_show_fdinfo+0x330/0x330 [ 69.721076][ T1435] ? __cfi_ksys_write+0x10/0x10 [ 69.725926][ T1435] ? debug_smp_processor_id+0x17/0x20 [ 69.731302][ T1435] __x64_sys_bpf+0x7c/0x90 [ 69.735714][ T1435] x64_sys_call+0x488/0x9a0 [ 69.740219][ T1435] do_syscall_64+0x4c/0xa0 [ 69.744633][ T1435] ? clear_bhb_loop+0x30/0x80 [ 69.749309][ T1435] ? clear_bhb_loop+0x30/0x80 [ 69.753985][ T1435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.759893][ T1435] RIP: 0033:0x7f283719fb19 [ 69.764310][ T1435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.783922][ T1435] RSP: 002b:00007f2838148028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.792336][ T1435] RAX: ffffffffffffffda RBX: 00007f2837425fa0 RCX: 00007f283719fb19 [ 69.800313][ T1435] RDX: 000000000000000c RSI: 0000200000000500 RDI: 0000000000000023 [ 69.808289][ T1435] RBP: 00007f2838148090 R08: 0000000000000000 R09: 0000000000000000 [ 69.816265][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.824237][ T1435] R13: 00007f2837426038 R14: 00007f2837425fa0 R15: 00007fff95e87998 [ 69.832212][ T1435] [ 69.836144][ T40] usb 1-1: device descriptor read/64, error -71 [ 69.840677][ T1436] loop1: detected capacity change from 0 to 128 [ 69.887601][ T1440] virtio-fs: tag <> not found [ 70.111917][ T40] usb 1-1: device descriptor read/64, error -71 [ 70.172117][ T1446] loop1: detected capacity change from 0 to 512 [ 70.178709][ T1446] ext4: Unknown parameter 'subj_type' [ 70.222449][ T28] kauditd_printk_skb: 1493 callbacks suppressed [ 70.222462][ T28] audit: type=1326 audit(1793794025.349:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.253872][ T28] audit: type=1326 audit(1793794025.359:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.279171][ T28] audit: type=1326 audit(1793794025.359:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.304630][ T28] audit: type=1326 audit(1793794025.359:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.337613][ T28] audit: type=1326 audit(1793794025.359:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.348439][ T843] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 70.369845][ T40] usb usb1-port1: attempt power cycle [ 70.375498][ T28] audit: type=1326 audit(1793794025.359:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.400645][ T28] audit: type=1326 audit(1793794025.359:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.426239][ T28] audit: type=1326 audit(1793794025.359:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.462840][ T28] audit: type=1326 audit(1793794025.359:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.511574][ T28] audit: type=1326 audit(1793794025.359:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.3.315" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce60f6034e code=0x7ffc0000 [ 70.573410][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 70.628106][ T1458] incfs: Can't find or create .index dir in ./file0 [ 70.634848][ T1458] incfs: mount failed -22 [ 70.701911][ T843] usb 5-1: device descriptor read/64, error -71 [ 70.794578][ T1462] loop3: detected capacity change from 0 to 512 [ 70.808114][ T1462] EXT4-fs: Ignoring removed bh option [ 70.814926][ T1462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.827066][ T1462] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.855034][ T1462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.864712][ T1462] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.901913][ T40] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 70.993601][ T40] usb 1-1: device descriptor read/8, error -71 [ 71.020518][ T1466] netem: change failed [ 71.031927][ T843] usb 5-1: device descriptor read/64, error -71 [ 71.051083][ T1468] loop1: detected capacity change from 0 to 16 [ 71.067704][ T1468] erofs: (device loop1): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 71.142931][ T40] usb 1-1: device descriptor read/8, error -71 [ 71.311912][ T843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 71.364822][ T1472] device ip6_vti0 entered promiscuous mode [ 71.407274][ T1470] loop1: detected capacity change from 0 to 40427 [ 71.411911][ T40] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 71.431407][ T1470] F2FS-fs (loop1): invalid crc value [ 71.442629][ T1470] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.471931][ T843] usb 5-1: device descriptor read/64, error -71 [ 71.481848][ T1470] F2FS-fs (loop1): Start checkpoint disabled! [ 71.488749][ T1470] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 71.497087][ T1470] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 71.514910][ T1470] bio_check_eod: 5 callbacks suppressed [ 71.514925][ T1470] syz.1.329: attempt to access beyond end of device [ 71.514925][ T1470] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.535048][ T1470] syz.1.329: attempt to access beyond end of device [ 71.535048][ T1470] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 71.577433][ T851] kworker/u4:9: attempt to access beyond end of device [ 71.577433][ T851] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 71.654820][ T288] EXT4-fs (loop3): unmounting filesystem. [ 71.688718][ T1489] loop1: detected capacity change from 0 to 2048 [ 71.705196][ T1489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.714091][ T1489] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.741923][ T843] usb 5-1: device descriptor read/64, error -71 [ 71.755031][ T294] EXT4-fs (loop1): unmounting filesystem. [ 71.862032][ T40] usb 1-1: device not accepting address 9, error -71 [ 71.869032][ T843] usb usb5-port1: attempt power cycle [ 71.874760][ T40] usb usb1-port1: unable to enumerate USB device [ 72.051913][ T60] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 72.232934][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.242937][ T60] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.254845][ T60] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 72.264390][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.272777][ T60] usb 2-1: Product: syz [ 72.277197][ T60] usb 2-1: Manufacturer: syz [ 72.281953][ T843] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 72.289659][ T60] usb 2-1: SerialNumber: syz [ 72.295776][ T60] ums-karma 2-1:1.0: USB Mass Storage device detected [ 72.303217][ T60] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 72.303217][ T60] Please send a copy of this message to and [ 72.330369][ T843] usb 5-1: device descriptor read/8, error -71 [ 72.358334][ T60] ums-karma: probe of 2-1:1.0 failed with error -5 [ 72.482995][ T843] usb 5-1: device descriptor read/8, error -71 [ 72.498583][ T60] usb 2-1: USB disconnect, device number 6 [ 72.609266][ T1515] loop3: detected capacity change from 0 to 8192 [ 72.636055][ T1515] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 72.771927][ T843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 72.813324][ T843] usb 5-1: device descriptor read/8, error -71 [ 72.887467][ T1520] incfs: Can't find or create .incomplete dir in ./file0 [ 72.894797][ T1520] incfs: mount failed -22 [ 73.149342][ T843] usb 5-1: device descriptor read/8, error -71 [ 73.312283][ T843] usb usb5-port1: unable to enumerate USB device [ 73.569437][ T1525] device-mapper: ioctl: Unable to rename non-existent device, syzb1 to uuid LVM-syzb3 [ 74.118118][ T1541] loop3: detected capacity change from 0 to 256 [ 74.135704][ T1541] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 74.146088][ T1541] exFAT-fs (loop3): invalid boot region [ 74.151850][ T1541] exFAT-fs (loop3): failed to recognize exfat type [ 74.363677][ T1551] loop3: detected capacity change from 0 to 128 [ 75.367637][ T28] kauditd_printk_skb: 980 callbacks suppressed [ 75.367660][ T28] audit: type=1400 audit(1793794030.499:3773): avc: denied { create } for pid=1577 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.430012][ T1579] loop3: detected capacity change from 0 to 1024 [ 75.439591][ T1579] EXT4-fs: Ignoring removed oldalloc option [ 75.445606][ T1579] EXT4-fs: Ignoring removed oldalloc option [ 75.454373][ T1579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.513788][ T1579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.916483][ T28] audit: type=1400 audit(1793794030.639:3774): avc: denied { bind } for pid=1577 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.175521][ T28] audit: type=1400 audit(1793794030.639:3775): avc: denied { setopt } for pid=1577 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.200612][ T28] audit: type=1400 audit(1793794031.329:3776): avc: denied { create } for pid=1590 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.345052][ T28] audit: type=1326 audit(1793794031.469:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1611 comm="syz.3.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce60f9fb19 code=0x7ffc0000 [ 76.371835][ T28] audit: type=1326 audit(1793794031.469:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1611 comm="syz.3.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce60f9fb19 code=0x7ffc0000 [ 76.398391][ T28] audit: type=1326 audit(1793794031.469:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1611 comm="syz.3.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce60f9fb19 code=0x7ffc0000 [ 76.424812][ T28] audit: type=1326 audit(1793794031.469:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1611 comm="syz.3.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fce60f9fb19 code=0x7ffc0000 [ 76.463773][ T28] audit: type=1326 audit(1793794031.469:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1611 comm="syz.3.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce60f9fb19 code=0x7ffc0000 [ 76.497373][ T1617] loop1: detected capacity change from 0 to 128 [ 76.510120][ T28] audit: type=1326 audit(1793794031.469:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1611 comm="syz.3.372" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce60f9fb19 code=0x7ffc0000 [ 77.101522][ T1623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 78.435069][ T1650] incfs: Can't find or create .incomplete dir in ./file0 [ 78.442208][ T1650] incfs: mount failed -22 [ 78.458636][ T1654] loop1: detected capacity change from 0 to 2048 [ 78.492616][ T1654] loop1: p1 < > p4 [ 78.497752][ T1654] loop1: p4 size 722688 extends beyond EOD, truncated [ 78.815113][ T1659] overlayfs: overlapping lowerdir path [ 79.090326][ T1673] loop1: detected capacity change from 0 to 512 [ 79.106037][ T1673] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.142431][ T1673] EXT4-fs (loop1): invalid journal inode [ 79.148150][ T1673] EXT4-fs (loop1): can't get journal size [ 79.187605][ T1673] EXT4-fs (loop1): 1 truncate cleaned up [ 79.194181][ T1673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.223381][ T294] EXT4-fs (loop1): unmounting filesystem. [ 80.057881][ T1689] loop5: detected capacity change from 0 to 7 [ 80.308475][ T1700] loop1: detected capacity change from 0 to 1024 [ 80.318256][ T1700] EXT4-fs: Ignoring removed oldalloc option [ 80.324291][ T1700] EXT4-fs: Ignoring removed oldalloc option [ 80.362862][ T1700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.541846][ T1700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.128187][ T28] kauditd_printk_skb: 423 callbacks suppressed [ 81.128202][ T28] audit: type=1326 audit(1793794036.259:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.159198][ T28] audit: type=1326 audit(1793794036.269:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.184644][ T28] audit: type=1326 audit(1793794036.269:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.209715][ T28] audit: type=1326 audit(1793794036.269:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.360082][ T28] audit: type=1326 audit(1793794036.269:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.405150][ T28] audit: type=1326 audit(1793794036.269:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.433123][ T28] audit: type=1326 audit(1793794036.269:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.458390][ T28] audit: type=1326 audit(1793794036.269:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.485219][ T28] audit: type=1326 audit(1793794036.269:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 81.518415][ T28] audit: type=1326 audit(1793794036.269:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1703 comm="syz.1.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb48539fb19 code=0x7ffc0000 [ 83.001937][ T40] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 83.046273][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 83.204997][ T40] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 83.217227][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.233503][ T40] usb 4-1: Product: syz [ 83.241837][ T40] usb 4-1: Manufacturer: syz [ 83.251644][ T40] usb 4-1: SerialNumber: syz [ 83.693266][ T40] rtl8150 4-1:1.0: couldn't reset the device [ 83.699665][ T40] rtl8150: probe of 4-1:1.0 failed with error -5 [ 83.707900][ T40] usb 4-1: USB disconnect, device number 9 [ 83.930805][ T1773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 83.968824][ T1776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 84.411669][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 84.651928][ T40] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 84.841910][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 84.848710][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.860051][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.869972][ T40] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.879203][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.893847][ T40] usb 1-1: config 0 descriptor?? [ 84.901652][ T40] hub 1-1:0.0: USB hub found [ 84.992731][ T1831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.110371][ T40] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 85.211912][ T843] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 85.319463][ T40] usbhid 1-1:0.0: can't add hid device: -71 [ 85.325601][ T40] usbhid: probe of 1-1:0.0 failed with error -71 [ 85.362517][ T40] usb 1-1: USB disconnect, device number 10 [ 85.392999][ T843] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 85.401280][ T843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.411440][ T843] usb 5-1: config 0 has no interface number 0 [ 85.417632][ T843] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 85.426767][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.435255][ T843] usb 5-1: config 0 descriptor?? [ 85.440890][ T843] usb 5-1: bad CDC descriptors [ 85.642035][ T1829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.650566][ T1829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.659409][ T6] usb 5-1: USB disconnect, device number 12 [ 86.067951][ T1869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 86.100556][ T1876] netlink: 'syz.1.459': attribute type 5 has an invalid length. [ 86.108958][ T1876] binder: 1875:1876 ioctl c0306201 200000000180 returned -14 [ 86.117439][ T1876] binder_alloc: 1875: binder_alloc_buf, no vma [ 86.184964][ T28] kauditd_printk_skb: 2475 callbacks suppressed [ 86.184980][ T28] audit: type=1326 audit(1793794041.319:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.222056][ T28] audit: type=1326 audit(1793794041.319:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.247393][ T28] audit: type=1326 audit(1793794041.349:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.273486][ T28] audit: type=1326 audit(1793794041.349:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.298773][ T28] audit: type=1326 audit(1793794041.349:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.325084][ T28] audit: type=1326 audit(1793794041.349:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.352686][ T28] audit: type=1326 audit(1793794041.349:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.378710][ T28] audit: type=1326 audit(1793794041.349:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.405650][ T28] audit: type=1326 audit(1793794041.349:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.432599][ T28] audit: type=1326 audit(1793794041.349:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.4.463" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 86.751945][ T883] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 86.901931][ T883] usb 1-1: device descriptor read/64, error -71 [ 87.171952][ T883] usb 1-1: device descriptor read/64, error -71 [ 87.451948][ T883] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 87.601946][ T883] usb 1-1: device descriptor read/64, error -71 [ 87.635790][ T40] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 87.871916][ T883] usb 1-1: device descriptor read/64, error -71 [ 87.901925][ T6] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 87.991968][ T883] usb usb1-port1: attempt power cycle [ 88.082957][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 88.088557][ T6] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 88.097450][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.107997][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.121386][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.128971][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.139479][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.152651][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.160050][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.170473][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.183675][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.191061][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.201488][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.214675][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.222093][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.232364][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.245967][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.253519][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.263931][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.277113][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.284666][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.295059][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.308276][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.315788][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.326421][ T6] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.339728][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.347288][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 88.356666][ T6] usb 5-1: New USB device strings: Mfr=247, Product=0, SerialNumber=0 [ 88.365085][ T6] usb 5-1: Manufacturer: syz [ 88.370501][ T6] usb 5-1: config 0 descriptor?? [ 88.401964][ T883] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 88.432948][ T883] usb 1-1: device descriptor read/8, error -71 [ 88.583044][ T883] usb 1-1: device descriptor read/8, error -71 [ 88.644331][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 88.651769][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 88.662872][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 88.674064][ T40] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.683661][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.703375][ T40] usb 2-1: config 0 descriptor?? [ 88.713076][ T40] hub 2-1:0.0: USB hub found [ 88.720227][ T1924] netlink: 104 bytes leftover after parsing attributes in process `syz.3.480'. [ 88.729943][ T1924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 88.738885][ T1924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 88.750826][ T1924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.480'. [ 88.851914][ T883] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 88.882921][ T883] usb 1-1: device descriptor read/8, error -71 [ 89.032936][ T883] usb 1-1: device descriptor read/8, error -71 [ 89.151997][ T883] usb usb1-port1: unable to enumerate USB device [ 89.472197][ T40] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 89.500351][ T40] usbhid 2-1:0.0: can't add hid device: -71 [ 89.512257][ T40] usbhid: probe of 2-1:0.0 failed with error -71 [ 89.552400][ T40] usb 2-1: USB disconnect, device number 7 [ 89.648274][ T1948] binder: 1947:1948 ioctl c0306201 200000000180 returned -14 [ 89.923277][ T1957] FAULT_INJECTION: forcing a failure. [ 89.923277][ T1957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.936420][ T1957] CPU: 1 PID: 1957 Comm: syz.2.494 Not tainted syzkaller #0 [ 89.943720][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.953783][ T1957] Call Trace: [ 89.957061][ T1957] [ 89.959987][ T1957] __dump_stack+0x21/0x24 [ 89.964316][ T1957] dump_stack_lvl+0x110/0x170 [ 89.968988][ T1957] ? __cfi_dump_stack_lvl+0x8/0x8 [ 89.974008][ T1957] dump_stack+0x15/0x24 [ 89.978157][ T1957] should_fail_ex+0x3bf/0x510 [ 89.982922][ T1957] should_fail+0xb/0x10 [ 89.987072][ T1957] should_fail_usercopy+0x1a/0x20 [ 89.992091][ T1957] _copy_to_user+0x1e/0x90 [ 89.996550][ T1957] simple_read_from_buffer+0xe9/0x160 [ 90.001926][ T1957] proc_fail_nth_read+0x1a6/0x220 [ 90.006954][ T1957] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 90.012498][ T1957] ? security_file_permission+0x94/0xb0 [ 90.018050][ T1957] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 90.023593][ T1957] vfs_read+0x286/0x930 [ 90.027746][ T1957] ? __cfi_vfs_read+0x10/0x10 [ 90.032427][ T1957] ? __kasan_check_write+0x14/0x20 [ 90.037537][ T1957] ? mutex_lock+0x93/0x1b0 [ 90.041951][ T1957] ? __cfi_mutex_lock+0x10/0x10 [ 90.046803][ T1957] ? __fdget_pos+0x2cd/0x380 [ 90.051390][ T1957] ? ksys_read+0x70/0x260 [ 90.055719][ T1957] ksys_read+0x14a/0x260 [ 90.059967][ T1957] ? __cfi_ksys_read+0x10/0x10 [ 90.064731][ T1957] ? fpregs_restore_userregs+0x128/0x260 [ 90.070368][ T1957] __x64_sys_read+0x7b/0x90 [ 90.074876][ T1957] x64_sys_call+0x2f/0x9a0 [ 90.079291][ T1957] do_syscall_64+0x4c/0xa0 [ 90.083704][ T1957] ? clear_bhb_loop+0x30/0x80 [ 90.088377][ T1957] ? clear_bhb_loop+0x30/0x80 [ 90.093054][ T1957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.098952][ T1957] RIP: 0033:0x7f057a56034e [ 90.103362][ T1957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.122966][ T1957] RSP: 002b:00007f0578ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.131388][ T1957] RAX: ffffffffffffffda RBX: 00007f0578ff76c0 RCX: 00007f057a56034e [ 90.139405][ T1957] RDX: 000000000000000f RSI: 00007f0578ff70a0 RDI: 0000000000000007 [ 90.147385][ T1957] RBP: 00007f0578ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.155367][ T1957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.163343][ T1957] R13: 00007f057a826218 R14: 00007f057a826180 R15: 00007ffe3972a928 [ 90.171323][ T1957] [ 90.205321][ T40] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.271962][ T843] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 90.370182][ T6] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 90.379392][ T1962] netlink: 96 bytes leftover after parsing attributes in process `syz.4.495'. [ 90.390052][ T6] usb 5-1: USB disconnect, device number 13 [ 90.402068][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 90.416448][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 90.453753][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 90.465207][ T843] usb 4-1: Using ep0 maxpacket: 16 [ 90.471401][ T843] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 90.482237][ T843] usb 4-1: config 0 has no interface number 0 [ 90.488459][ T843] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 90.504108][ T40] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 90.513518][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.521594][ T843] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 90.532061][ T40] usb 2-1: Product: syz [ 90.536302][ T40] usb 2-1: Manufacturer: syz [ 90.541104][ T40] usb 2-1: SerialNumber: syz [ 90.547357][ T843] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 90.560438][ T40] usb 2-1: config 0 descriptor?? [ 90.565596][ T843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.573956][ T843] usb 4-1: Product: syz [ 90.578306][ T1938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.587131][ T843] usb 4-1: Manufacturer: syz [ 90.597278][ T40] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 90.607359][ T843] usb 4-1: SerialNumber: syz [ 90.636490][ T843] usb 4-1: config 0 descriptor?? [ 90.642968][ T1952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.653929][ T1952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.809561][ T1938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.819466][ T1938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.828330][ T6] usb 2-1: USB disconnect, device number 8 [ 90.869449][ T1952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.877227][ T1952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.071934][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 91.086446][ T843] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 91.273484][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.284690][ T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 91.298505][ T843] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 91.308683][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 91.315502][ T843] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 91.326037][ T843] asix: probe of 4-1:0.34 failed with error -61 [ 91.333689][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.346962][ T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 91.362050][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 91.382321][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.401941][ T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 91.415188][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 91.419595][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 91.445302][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.462463][ T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 91.476139][ T1987] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 91.479652][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 91.502282][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.514998][ T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 91.529454][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 91.575489][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.584804][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.592947][ T24] usb 1-1: SerialNumber: syz [ 91.597721][ T28] kauditd_printk_skb: 1328 callbacks suppressed [ 91.597735][ T28] audit: type=1326 audit(1793794046.729:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.663549][ T28] audit: type=1326 audit(1793794046.729:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.711360][ T28] audit: type=1326 audit(1793794046.729:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.737563][ T28] audit: type=1326 audit(1793794046.729:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.762513][ T28] audit: type=1326 audit(1793794046.729:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.788378][ T28] audit: type=1326 audit(1793794046.759:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.830663][ T28] audit: type=1326 audit(1793794046.759:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.831078][ T2026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.863786][ T28] audit: type=1326 audit(1793794046.759:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.889505][ T28] audit: type=1326 audit(1793794046.759:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.4.510" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283719fb19 code=0x7ffc0000 [ 91.915017][ T2026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.936402][ T2030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.994308][ T24] usb 1-1: USB disconnect, device number 15 [ 92.230360][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 93.004544][ T2053] tipc: Failed to remove unknown binding: 66,0,0/0:3298650853/3298650854 [ 93.013256][ T2053] tipc: Failed to remove unknown binding: 66,0,0/0:3298650853/3298650854 [ 93.071230][ T6] usb 4-1: USB disconnect, device number 10 [ 93.363956][ T2078] netlink: 140 bytes leftover after parsing attributes in process `syz.3.526'. [ 93.373648][ T2078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.526'. [ 93.444585][ T2085] ip_tables: iptables: counters copy to user failed while replacing table [ 93.503263][ T2092] xt_hashlimit: size too large, truncated to 1048576 [ 93.504573][ T2082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 93.579487][ T2095] FAULT_INJECTION: forcing a failure. [ 93.579487][ T2095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.609574][ T2095] CPU: 0 PID: 2095 Comm: syz.3.532 Not tainted syzkaller #0 [ 93.616926][ T2095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.626990][ T2095] Call Trace: [ 93.630279][ T2095] [ 93.633213][ T2095] __dump_stack+0x21/0x24 [ 93.637552][ T2095] dump_stack_lvl+0x110/0x170 [ 93.642233][ T2095] ? __cfi_dump_stack_lvl+0x8/0x8 [ 93.647265][ T2095] dump_stack+0x15/0x24 [ 93.651428][ T2095] should_fail_ex+0x3bf/0x510 [ 93.656113][ T2095] should_fail+0xb/0x10 [ 93.660280][ T2095] should_fail_usercopy+0x1a/0x20 [ 93.665306][ T2095] _copy_from_iter+0x18a/0xfe0 [ 93.670084][ T2095] ? __alloc_pages+0x1fa/0x610 [ 93.674860][ T2095] ? __kernel_text_address+0xd/0x30 [ 93.680069][ T2095] ? __cfi__copy_from_iter+0x10/0x10 [ 93.685369][ T2095] ? stack_trace_save+0xa6/0xf0 [ 93.690229][ T2095] copy_page_from_iter+0x1de/0x2c0 [ 93.695343][ T2095] ? skb_page_frag_refill+0x221/0x3a0 [ 93.700721][ T2095] tun_get_user+0x6f5/0x32f0 [ 93.705324][ T2095] ? tun_do_read+0x1d70/0x1d70 [ 93.710096][ T2095] ? __kasan_check_write+0x14/0x20 [ 93.715210][ T2095] ? ref_tracker_alloc+0x319/0x4a0 [ 93.720328][ T2095] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 93.725793][ T2095] ? avc_policy_seqno+0x1b/0x70 [ 93.730648][ T2095] ? selinux_file_permission+0x2a5/0x510 [ 93.736298][ T2095] tun_chr_write_iter+0x1f9/0x300 [ 93.741340][ T2095] vfs_write+0x5ef/0xd00 [ 93.745586][ T2095] ? __cfi_vfs_write+0x10/0x10 [ 93.750355][ T2095] ? __fget_files+0x2d1/0x330 [ 93.755038][ T2095] ? __fdget_pos+0x1f2/0x380 [ 93.759634][ T2095] ? ksys_write+0x70/0x260 [ 93.764049][ T2095] ksys_write+0x14a/0x260 [ 93.768371][ T2095] ? __cfi_ksys_write+0x10/0x10 [ 93.773232][ T2095] ? debug_smp_processor_id+0x17/0x20 [ 93.778621][ T2095] __x64_sys_write+0x7b/0x90 [ 93.783242][ T2095] x64_sys_call+0x27b/0x9a0 [ 93.787750][ T2095] do_syscall_64+0x4c/0xa0 [ 93.792167][ T2095] ? clear_bhb_loop+0x30/0x80 [ 93.796843][ T2095] ? clear_bhb_loop+0x30/0x80 [ 93.801524][ T2095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.807420][ T2095] RIP: 0033:0x7fce60f6034e [ 93.811847][ T2095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.831460][ T2095] RSP: 002b:00007fce61eb8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.839882][ T2095] RAX: ffffffffffffffda RBX: 00007fce61eb96c0 RCX: 00007fce60f6034e [ 93.847862][ T2095] RDX: 0000000000000083 RSI: 0000200000000900 RDI: 00000000000000c8 [ 93.855883][ T2095] RBP: 00007fce61eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 93.863879][ T2095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.871859][ T2095] R13: 00007fce61226128 R14: 00007fce61226090 R15: 00007ffd844b1748 [ 93.879842][ T2095] [ 94.139628][ T2134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 94.282807][ T2139] incfs: Can't find or create .index dir in ./file0 [ 94.289697][ T2139] incfs: mount failed -22 [ 94.415330][ T2140] netlink: 22 bytes leftover after parsing attributes in process `syz.4.548'. [ 95.237632][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 95.389499][ T2164] EXT4-fs (loop1): unmounting filesystem. [ 95.434046][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.442482][ T6] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 95.450964][ T6] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 95.459239][ T6] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 95.468438][ T6] usb 1-1: config 129 has no interface number 0 [ 95.474703][ T6] usb 1-1: config 129 has no interface number 1 [ 95.481159][ T6] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.494456][ T6] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 95.505368][ T6] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 95.518569][ T6] usb 1-1: config 129 interface 135 has no altsetting 0 [ 95.525619][ T6] usb 1-1: config 129 interface 5 has no altsetting 0 [ 95.534532][ T6] usb 1-1: string descriptor 0 read error: -22 [ 95.540769][ T6] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 95.550098][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.560349][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 95.882311][ T2166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 96.001706][ T2171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 96.387808][ T843] usb 1-1: USB disconnect, device number 16 [ 97.759904][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 97.934092][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 97.934106][ T28] audit: type=1400 audit(1793794052.696:8121): avc: denied { ioctl } for pid=2212 comm="syz.0.573" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 98.025200][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 98.251669][ T28] audit: type=1400 audit(1793794053.001:8122): avc: denied { mounton } for pid=2220 comm="syz.3.577" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 99.256206][ T2243] fuse: Bad value for 'fd' [ 99.312082][ T2238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 99.321867][ T2251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.588'. [ 99.637814][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 99.856613][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.880887][ T24] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 99.958215][ T24] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 100.027037][ T24] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 100.101875][ T24] usb 3-1: config 129 has no interface number 0 [ 100.226735][ T24] usb 3-1: config 129 has no interface number 1 [ 100.233035][ T24] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.283349][ T24] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 100.310959][ T24] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 100.334756][ T24] usb 3-1: config 129 interface 135 has no altsetting 0 [ 100.342200][ T24] usb 3-1: config 129 interface 5 has no altsetting 0 [ 100.342207][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 100.354556][ T24] usb 3-1: string descriptor 0 read error: -22 [ 100.363633][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 100.374837][ T28] audit: type=1400 audit(1793794054.948:8123): avc: denied { name_bind } for pid=2257 comm="syz.4.590" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 100.383866][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.423064][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 100.555336][ T28] audit: type=1400 audit(1793794055.114:8124): avc: denied { ioctl } for pid=2269 comm="syz.0.593" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 100.581281][ T6] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.592412][ T6] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.605441][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.612110][ T6] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 100.621414][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.630355][ T6] usb 4-1: config 0 descriptor?? [ 101.236451][ T883] usb 3-1: USB disconnect, device number 13 [ 101.404893][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 101.410884][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 101.436914][ T6] usb 4-1: USB disconnect, device number 11 [ 101.485983][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 101.521413][ T28] audit: type=1400 audit(1793794056.009:8125): avc: denied { watch watch_reads } for pid=2297 comm="syz.0.602" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 101.566322][ T28] audit: type=1404 audit(1793794056.046:8126): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 101.592375][ T28] audit: type=1400 audit(1793794056.074:8127): avc: denied { create } for pid=2305 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.628625][ T28] audit: type=1400 audit(1793794056.074:8128): avc: denied { read } for pid=2305 comm="syz.0.606" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 101.649945][ T28] audit: type=1400 audit(1793794056.074:8129): avc: denied { setopt } for pid=2305 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 101.671276][ T28] audit: type=1400 audit(1793794056.101:8130): avc: denied { getattr } for pid=2305 comm="syz.0.606" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 102.026922][ T2319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 102.660029][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.668462][ T2357] FAULT_INJECTION: forcing a failure. [ 102.668462][ T2357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.670881][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.691307][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.700147][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.709124][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.710598][ T2357] CPU: 1 PID: 2357 Comm: syz.3.623 Not tainted syzkaller #0 [ 102.718006][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.724888][ T2357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.724900][ T2357] Call Trace: [ 102.724904][ T2357] [ 102.724910][ T2357] __dump_stack+0x21/0x24 [ 102.753915][ T2357] dump_stack_lvl+0x110/0x170 [ 102.758584][ T2357] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.763592][ T2357] dump_stack+0x15/0x24 [ 102.767733][ T2357] should_fail_ex+0x3bf/0x510 [ 102.772395][ T2357] should_fail+0xb/0x10 [ 102.776533][ T2357] should_fail_usercopy+0x1a/0x20 [ 102.781542][ T2357] _copy_from_user+0x1e/0xc0 [ 102.786116][ T2357] iovec_from_user+0x1aa/0x2e0 [ 102.790863][ T2357] __import_iovec+0x6d/0x460 [ 102.795436][ T2357] ? kstrtoull+0x137/0x1d0 [ 102.799837][ T2357] import_iovec+0x7c/0xb0 [ 102.804151][ T2357] ___sys_sendmsg+0x252/0x360 [ 102.808814][ T2357] ? __sys_sendmsg+0x290/0x290 [ 102.813560][ T2357] ? __kasan_check_write+0x14/0x20 [ 102.818657][ T2357] ? proc_fail_nth_write+0x180/0x200 [ 102.823932][ T2357] ? vfs_write+0xa51/0xd00 [ 102.828365][ T2357] ? __fdget+0x19c/0x220 [ 102.832592][ T2357] __x64_sys_sendmsg+0x20d/0x2e0 [ 102.837530][ T2357] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 102.842976][ T2357] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 102.849033][ T2357] x64_sys_call+0x171/0x9a0 [ 102.853524][ T2357] do_syscall_64+0x4c/0xa0 [ 102.857922][ T2357] ? clear_bhb_loop+0x30/0x80 [ 102.862582][ T2357] ? clear_bhb_loop+0x30/0x80 [ 102.867244][ T2357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.873151][ T2357] RIP: 0033:0x7fce60f9fb19 [ 102.877552][ T2357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.897143][ T2357] RSP: 002b:00007fce61e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.905543][ T2357] RAX: ffffffffffffffda RBX: 00007fce61226180 RCX: 00007fce60f9fb19 [ 102.913503][ T2357] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000005 [ 102.921463][ T2357] RBP: 00007fce61e98090 R08: 0000000000000000 R09: 0000000000000000 [ 102.929423][ T2357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.937400][ T2357] R13: 00007fce61226218 R14: 00007fce61226180 R15: 00007ffd844b1748 [ 102.945362][ T2357] [ 102.948725][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.957674][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.966936][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 102.975983][ T2351] ip_tables: iptables: counters copy to user failed while replacing table [ 103.079189][ T2364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 103.228879][ T2374] futex_wake_op: syz.4.630 tries to shift op by 144; fix this program [ 103.668175][ T28] kauditd_printk_skb: 343 callbacks suppressed [ 103.668189][ T28] audit: type=1400 audit(1793794057.984:8474): avc: denied { read } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.713170][ T28] audit: type=1400 audit(1793794058.020:8475): avc: denied { read write } for pid=2380 comm="syz.0.631" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 103.736950][ T28] audit: type=1400 audit(1793794058.030:8476): avc: denied { read write } for pid=2380 comm="syz.0.631" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.762511][ T28] audit: type=1400 audit(1793794058.030:8477): avc: denied { execmem } for pid=2380 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.783062][ T28] audit: type=1400 audit(1793794058.030:8478): avc: denied { bpf } for pid=2380 comm="syz.0.631" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 103.832125][ T28] audit: type=1400 audit(1793794058.030:8479): avc: denied { prog_load } for pid=2380 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.870849][ T28] audit: type=1400 audit(1793794058.039:8480): avc: denied { read } for pid=288 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.914108][ T28] audit: type=1400 audit(1793794058.085:8481): avc: denied { read write } for pid=2382 comm="syz.3.632" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.965488][ T28] audit: type=1400 audit(1793794058.122:8482): avc: denied { bpf } for pid=2382 comm="syz.3.632" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 103.986134][ T28] audit: type=1400 audit(1793794058.122:8483): avc: denied { map_create } for pid=2382 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.346164][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 104.818251][ T456] ------------[ cut here ]------------ [ 104.823775][ T456] kernel BUG at fs/buffer.c:2714! [ 104.829401][ T456] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 104.835482][ T456] CPU: 1 PID: 456 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 104.842850][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.852904][ T456] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 104.858289][ T456] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 d4 e7 ff e9 b0 fe ff ff e8 1e 38 a2 ff 0f 0b e8 17 38 a2 ff <0f> 0b e8 10 38 a2 ff 0f 0b e8 09 38 a2 ff 0f 0b e8 02 38 a2 ff 0f [ 104.877900][ T456] RSP: 0018:ffffc9000dcbfca0 EFLAGS: 00010293 [ 104.883973][ T456] RAX: ffffffff81cf3a09 RBX: 0000000000000000 RCX: ffff88811a9de540 [ 104.891947][ T456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.899922][ T456] RBP: ffffc9000dcbfcf0 R08: ffff8881331950af R09: 1ffff11026632a15 [ 104.907901][ T456] R10: dffffc0000000000 R11: ffffed1026632a16 R12: 0000000000000000 [ 104.915876][ T456] R13: 1ffff11026632a15 R14: ffff8881331950a8 R15: 0000000000003801 [ 104.923853][ T456] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 104.932791][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.939385][ T456] CR2: 00007f206b383e80 CR3: 00000001179e7000 CR4: 00000000003506a0 [ 104.947366][ T456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.955346][ T456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.963325][ T456] Call Trace: [ 104.966609][ T456] [ 104.969538][ T456] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 104.975354][ T456] submit_bh+0x1f/0x30 [ 104.979467][ T456] write_mmp_block_thawed+0x397/0x510 [ 104.984847][ T456] ? __cfi_schedule_timeout+0x10/0x10 [ 104.990229][ T456] ? read_mmp_block+0x700/0x700 [ 104.995085][ T456] ? __cfi_process_timeout+0x10/0x10 [ 105.000381][ T456] write_mmp_block+0x138/0x2b0 [ 105.005150][ T456] kmmpd+0x382/0x940 [ 105.009055][ T456] kthread+0x281/0x320 [ 105.013124][ T456] ? __cfi_kmmpd+0x10/0x10 [ 105.017564][ T456] ? __cfi_kthread+0x10/0x10 [ 105.022156][ T456] ret_from_fork+0x1f/0x30 [ 105.026585][ T456] [ 105.029630][ T456] Modules linked in: [ 105.034187][ T456] ---[ end trace 0000000000000000 ]--- [ 105.042286][ T456] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 105.047903][ T456] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 d4 e7 ff e9 b0 fe ff ff e8 1e 38 a2 ff 0f 0b e8 17 38 a2 ff <0f> 0b e8 10 38 a2 ff 0f 0b e8 09 38 a2 ff 0f 0b e8 02 38 a2 ff 0f [ 105.067732][ T456] RSP: 0018:ffffc9000dcbfca0 EFLAGS: 00010293 [ 105.073914][ T456] RAX: ffffffff81cf3a09 RBX: 0000000000000000 RCX: ffff88811a9de540 [ 105.082096][ T456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.090494][ T456] RBP: ffffc9000dcbfcf0 R08: ffff8881331950af R09: 1ffff11026632a15 [ 105.098654][ T456] R10: dffffc0000000000 R11: ffffed1026632a16 R12: 0000000000000000 [ 105.106775][ T456] R13: 1ffff11026632a15 R14: ffff8881331950a8 R15: 0000000000003801 [ 105.114951][ T456] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 105.124043][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.130817][ T456] CR2: 00007fce611f72f8 CR3: 00000001179e7000 CR4: 00000000003506a0 [ 105.138918][ T456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.147093][ T456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.155221][ T456] Kernel panic - not syncing: Fatal exception [ 105.161527][ T456] Kernel Offset: disabled [ 105.165841][ T456] Rebooting in 86400 seconds..