last executing test programs: 1m57.322562813s ago: executing program 4 (id=852): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000007e2000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85d1d46b8f16489d, 0x0, 0x0, 0x0, 0xbffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) 1m57.322446213s ago: executing program 4 (id=853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 1m57.246512785s ago: executing program 4 (id=855): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) r2 = dup(r1) write$binfmt_elf64(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b801000000000000"], 0x178) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x178) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m57.207051456s ago: executing program 4 (id=857): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m57.154582427s ago: executing program 4 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x0) 1m57.138214807s ago: executing program 4 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x1) 1m57.098419588s ago: executing program 32 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x1) 1m48.588126827s ago: executing program 3 (id=998): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0x208000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x6200, 0x4) 1m48.49030403s ago: executing program 3 (id=1000): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m48.4691187s ago: executing program 3 (id=1002): socket$tipc(0x1e, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m48.406274172s ago: executing program 3 (id=1004): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000002500)='./file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x0) 1m48.393940372s ago: executing program 3 (id=1006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x3, 0x1000047, 0xfffc, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 1m48.326238103s ago: executing program 3 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x6000}, @val={0x1, 0x3, 0xe447, 0x1, 0x4, 0x2}, @ipv6=@generic={0x7, 0x6, "034ecc", 0x0, 0x11, 0x0, @empty, @remote}}, 0x36) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f901024301090212"], 0x0) write(r1, &(0x7f0000000400)="00008847", 0x4) 1m48.287208144s ago: executing program 33 (id=1011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r1, &(0x7f00000005c0)={@val={0x0, 0x6000}, @val={0x1, 0x3, 0xe447, 0x1, 0x4, 0x2}, @ipv6=@generic={0x7, 0x6, "034ecc", 0x0, 0x11, 0x0, @empty, @remote}}, 0x36) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f901024301090212"], 0x0) write(r1, &(0x7f0000000400)="00008847", 0x4) 3.466356265s ago: executing program 2 (id=1730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x989680}, 0x0) 3.465882465s ago: executing program 2 (id=1731): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x2924, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400c840) sendmsg$nl_route_sched(r2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) inotify_init() r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 3.27272772s ago: executing program 1 (id=1742): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 3.27266213s ago: executing program 1 (id=1743): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}}], 0x1, 0x20000001) recvfrom(r0, &(0x7f00000000c0)=""/210, 0xd2, 0x75, 0x0, 0x0) 2.390478441s ago: executing program 1 (id=1771): unshare(0x2020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019200)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0x61}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x110, 0xffffffffffffffff, 0x0) 2.390161791s ago: executing program 1 (id=1772): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x10, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x8000000, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x99) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020601030000000000000000050000010c00078008000800000000400900020073797a3100bde2530000000500040002000000050005000a00000005000100070000000d0003006c69"], 0x54}}, 0x4000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.190625421s ago: executing program 2 (id=1797): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="c21f", 0x2, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.190378901s ago: executing program 2 (id=1798): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) 1.067991884s ago: executing program 5 (id=1802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.040573224s ago: executing program 5 (id=1803): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x143041, 0x0) utime(&(0x7f0000000140)='./file0/file0\x00', 0x0) 986.556066ms ago: executing program 5 (id=1804): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setitimer(0x0, 0x0, 0x0) 986.437976ms ago: executing program 5 (id=1805): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3fc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000440), 0x4) 986.380926ms ago: executing program 5 (id=1806): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001640)=""/107, 0x6b}], 0x1) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 936.772877ms ago: executing program 5 (id=1807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_setup(0x81, &(0x7f0000000180)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000340)='p', 0x300}]) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x145c00}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r9, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001640)=""/107, 0x6b}], 0x2) 502.166168ms ago: executing program 0 (id=1813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 475.506489ms ago: executing program 0 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004057}, 0x4000050) 426.592629ms ago: executing program 0 (id=1815): unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) 426.450979ms ago: executing program 0 (id=1816): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x2, @remote, @multicast2}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) utime(&(0x7f0000000140)='./file0/file0\x00', 0x0) 426.201089ms ago: executing program 0 (id=1817): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x67, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000311100fc010000000000000000000000000000ff02000000000000000000000000000100000e2200319078172c046f6aef8d2f4fa4603c3abd5bb510788b833bdd4d64c77922fcf4057d118589e08d8851add5414894883efe2f5594559b7e0110bc4e4930b8ba85725121c4a84efcc9b3ea4b62afe80e2c473a4dc471b9713899393e835b1e4c38ab2437b253c1a6e130bb5f3df3"], 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0xa, &(0x7f00000003c0)=[{0x1ff, 0x6, 0xfe, 0x8}, {0xffff, 0x8, 0xf, 0x7}, {0x8, 0x81, 0x2, 0x3}, {0xe0, 0x80, 0x0, 0x3ff}, {0x101, 0x3, 0x4, 0x4}, {0x7, 0x3, 0x3, 0x23}, {0x6, 0x7, 0xb, 0x2}, {0x8, 0xb5, 0x81, 0x1}, {0x9, 0x4, 0x81, 0x91}, {0x81, 0x81, 0x5, 0xe9b}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00080055b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r7, &(0x7f00000036c0)=""/4109, 0x100d) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8b}}}, 0x3a) 422.91308ms ago: executing program 0 (id=1818): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) io_uring_setup(0x178e, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="1b98154200000900000086068e0d810982a4771b05881f2f756eda748c661e62680450ca331fb099f169a2742b233c2f6b2b6eed7ed6350d8250c34ce1b6b3800ddd6628bef11eac93fb884180d786"]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000280)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x102) 383.149481ms ago: executing program 2 (id=1819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc080) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000080)={0x84, @empty, 0x4e23, 0x0, 'fo\x00', 0x20, 0x6d64, 0x6b}, 0x2c) 326.531032ms ago: executing program 2 (id=1820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_open_procfs(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xb) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010400000000ffdb", @ANYBLOB="180600000000030077697265677561726400006b3041ee8076c7d5bc8d8e927b290fed969bc1f4fb3c0fdb874c6c86ddc0dc5adf3da2f28c20e2a37cc76d41eb59f5506047f3c8e2"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 194.377486ms ago: executing program 1 (id=1824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "01"}]}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) 194.231835ms ago: executing program 6 (id=1825): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 188.810996ms ago: executing program 1 (id=1826): syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 119.669587ms ago: executing program 6 (id=1827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 62.378648ms ago: executing program 6 (id=1828): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x67, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000311100fc010000000000000000000000000000ff02000000000000000000000000000100000e2200319078172c046f6aef8d2f4fa4603c3abd5bb510788b833bdd4d64c77922fcf4057d118589e08d8851add5414894883efe2f5594559b7e0110bc4e4930b8ba85725121c4a84efcc9b3ea4b62afe80e2c473a4dc471b9713899393e835b1e4c38ab2437b253c1a6e130bb5f3df3"], 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0xa, &(0x7f00000003c0)=[{0x1ff, 0x6, 0xfe, 0x8}, {0xffff, 0x8, 0xf, 0x7}, {0x8, 0x81, 0x2, 0x3}, {0xe0, 0x80, 0x0, 0x3ff}, {0x101, 0x3, 0x4, 0x4}, {0x7, 0x3, 0x3, 0x23}, {0x6, 0x7, 0xb, 0x2}, {0x8, 0xb5, 0x81, 0x1}, {0x9, 0x4, 0x81, 0x91}, {0x81, 0x81, 0x5, 0xe9b}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00080055b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r7, &(0x7f00000036c0)=""/4109, 0x100d) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8b}}}, 0x3a) 62.057288ms ago: executing program 6 (id=1829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x7, 0x100000008, 0x7, 0x1, 0xfffffffffffffffd, 0x2, 0xfffffffffffff804, 0x0, 0x400000000, 0x0, 0x7d, 0x5, 0x2, 0x1, 0x44319784], 0xa000, 0xcd3d0}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x57) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22.70928ms ago: executing program 6 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008054}, 0x404c094) 0s ago: executing program 6 (id=1831): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 0s ago: executing program 1 (id=1832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x0, 0x6}, 0x1c) syz_emit_ethernet(0x1ee, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "8d87371dc439a632dad2f68bf9b4f9bf"}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0, 0x4000}, {0x0, 0x4000}], 0x2}}], 0x2, 0x14) kernel console output (not intermixed with test programs): busy: -16 [ 261.568912][ T3802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 261.592711][ T1831] usb 2-1: not running at top speed; connect to a high speed hub [ 261.722950][ T1831] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 261.731281][ T1831] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 261.741904][ T1831] usb 2-1: config 4 has no interface number 0 [ 261.812595][ T26] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 261.842599][ T1798] usbhid 6-1:0.0: can't add hid device: -71 [ 261.844141][ T3825] loop6: detected capacity change from 0 to 8192 [ 261.848689][ T1798] usbhid: probe of 6-1:0.0 failed with error -71 [ 261.864124][ T1798] usb 6-1: USB disconnect, device number 3 [ 261.937904][ T3825] kvm [3824]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 261.942592][ T1831] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 261.947081][ T3825] kvm [3824]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 261.960513][ T1831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 261.977585][ T3825] kvm [3824]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 261.979379][ T1831] usb 2-1: Product: syz [ 261.994221][ T3825] kvm [3824]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 262.001937][ T1831] usb 2-1: Manufacturer: syz [ 262.009032][ T1831] usb 2-1: SerialNumber: syz [ 262.009332][ T3825] kvm [3824]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 262.028698][ T3828] loop5: detected capacity change from 0 to 8192 [ 262.076138][ T3828] kvm [3827]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 262.085179][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 262.090429][ T3828] kvm [3827]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 262.104227][ T3828] kvm [3827]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 262.202613][ T26] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.213939][ T26] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.223822][ T26] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 262.236804][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.243424][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 262.252456][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.261271][ T26] usb 1-1: config 0 descriptor?? [ 262.272585][ T413] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 262.412598][ T1798] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 262.417266][ T1831] usb 2-1: USB disconnect, device number 16 [ 262.525764][ T433] tipc: Left network mode [ 262.742680][ T413] usb 7-1: unable to get BOS descriptor or descriptor too short [ 262.743885][ T26] hid (null): unknown global tag 0xc [ 262.755689][ T26] hid (null): unknown global tag 0xc [ 262.761004][ T26] hid (null): unknown global tag 0xe [ 262.767672][ T26] hid (null): unknown global tag 0xe [ 262.773038][ T26] hid (null): unknown global tag 0xe [ 262.778350][ T26] hid (null): unknown global tag 0xd [ 262.784299][ T26] hid (null): invalid report_size 18142 [ 262.789842][ T26] hid (null): global environment stack overflow [ 262.792858][ T413] usb 7-1: not running at top speed; connect to a high speed hub [ 262.872719][ T3833] loop1: detected capacity change from 0 to 8192 [ 262.872979][ T1798] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.902626][ T413] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 262.910900][ T413] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 262.921024][ T413] usb 7-1: config 4 has no interface number 0 [ 262.927213][ T1798] usb 6-1: not running at top speed; connect to a high speed hub [ 262.957627][ T3835] loop2: detected capacity change from 0 to 128 [ 262.983948][ T26] usb 1-1: USB disconnect, device number 22 [ 262.997162][ T3835] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.012839][ T1798] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 263.021298][ T3835] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.024723][ T3833] kvm [3832]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 263.037288][ T1798] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 263.043122][ T307] usb 3-1: USB disconnect, device number 19 [ 263.058646][ T433] device bridge_slave_1 left promiscuous mode [ 263.068113][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.102615][ T413] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 263.111776][ T1798] usb 6-1: config 4 has no interface number 0 [ 263.121882][ T413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 263.140291][ T413] usb 7-1: Product: syz [ 263.144717][ T413] usb 7-1: Manufacturer: syz [ 263.149309][ T413] usb 7-1: SerialNumber: syz [ 263.170061][ T433] device bridge_slave_0 left promiscuous mode [ 263.176551][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.184861][ T433] device bridge0 left promiscuous mode [ 263.190422][ T433] device veth1_macvtap left promiscuous mode [ 263.196576][ T433] device veth0_vlan left promiscuous mode [ 263.273173][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.289293][ T1798] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 263.302532][ T1798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 263.310800][ T1798] usb 6-1: Product: syz [ 263.318914][ T1798] usb 6-1: Manufacturer: syz [ 263.325740][ T1798] usb 6-1: SerialNumber: syz [ 263.473272][ T383] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 263.556188][ T413] usb 7-1: USB disconnect, device number 2 [ 263.641426][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 263.641440][ T30] audit: type=1400 audit(1786174404.187:475): avc: denied { mount } for pid=3834 comm="syz.2.1026" name="/" dev="configfs" ino=13155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 263.678624][ T30] audit: type=1400 audit(1786174404.207:476): avc: denied { search } for pid=3834 comm="syz.2.1026" name="/" dev="configfs" ino=13155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.702598][ T30] audit: type=1400 audit(1786174404.227:477): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 263.746316][ T30] audit: type=1400 audit(1786174404.297:478): avc: denied { append } for pid=3895 comm="syz.2.1029" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.772996][ T307] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 263.774683][ T1798] usb 6-1: USB disconnect, device number 4 [ 263.912556][ T383] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.952574][ T383] usb 2-1: not running at top speed; connect to a high speed hub [ 264.052563][ T383] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 264.061514][ T383] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 264.073218][ T383] usb 2-1: config 4 has no interface number 0 [ 264.232685][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.408657][ T383] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 264.412643][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.418226][ T383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 264.427203][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.435232][ T383] usb 2-1: Product: syz [ 264.443360][ T307] usb 1-1: Product: syz [ 264.447773][ T383] usb 2-1: Manufacturer: syz [ 264.451717][ T307] usb 1-1: Manufacturer: syz [ 264.451733][ T307] usb 1-1: SerialNumber: syz [ 264.465873][ T383] usb 2-1: SerialNumber: syz [ 264.588719][ T3920] device veth3 entered promiscuous mode [ 264.736110][ T3922] loop2: detected capacity change from 0 to 512 [ 264.824223][ T3922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.835372][ T3922] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.853753][ T383] usb 2-1: USB disconnect, device number 17 [ 264.999574][ T3929] loop2: detected capacity change from 0 to 256 [ 265.012571][ T3929] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.023303][ T3929] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 265.032994][ T3929] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.341939][ T3938] loop5: detected capacity change from 0 to 256 [ 266.402297][ T3938] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.413901][ T3938] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 266.424413][ T3938] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.538043][ T3940] loop6: detected capacity change from 0 to 512 [ 267.376364][ T3940] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.400729][ T30] audit: type=1400 audit(1786174407.947:479): avc: denied { read } for pid=3935 comm="syz.6.1042" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 267.794779][ T3949] 9pnet: p9_fd_create_tcp (3949): problem binding to privport [ 268.032608][ T307] cdc_ncm 1-1:1.0: failed to get mac address [ 268.062570][ T307] cdc_ncm 1-1:1.0: bind() failure [ 268.067962][ T3958] loop6: detected capacity change from 0 to 256 [ 268.092548][ T307] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 268.132542][ T307] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 268.144488][ T3958] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.178855][ T307] usb 1-1: USB disconnect, device number 23 [ 268.182532][ T3958] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 268.193360][ T3965] loop2: detected capacity change from 0 to 256 [ 268.222921][ T3965] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.252535][ T3965] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 268.265978][ T3958] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 268.282864][ T3965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 268.380659][ T3968] kernel profiling enabled (shift: 63) [ 268.481275][ T3968] profiling shift: 63 too large [ 269.444058][ T3962] loop5: detected capacity change from 0 to 40427 [ 269.482353][ T30] audit: type=1400 audit(1786174410.027:480): avc: denied { write } for pid=3973 comm="syz.6.1051" name="usb_gadget" dev="configfs" ino=13156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.522800][ T3962] F2FS-fs (loop5): invalid crc value [ 269.544498][ T30] audit: type=1400 audit(1786174410.077:481): avc: denied { add_name } for pid=3973 comm="syz.6.1051" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.564993][ T30] audit: type=1400 audit(1786174410.077:482): avc: denied { create } for pid=3973 comm="syz.6.1051" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 269.586800][ T30] audit: type=1400 audit(1786174410.117:483): avc: denied { create } for pid=3973 comm="syz.6.1051" name="yuyv" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 269.588840][ T3979] loop2: detected capacity change from 0 to 512 [ 269.617439][ T3962] F2FS-fs (loop5): Found nat_bits in checkpoint [ 269.719395][ T3993] overlayfs: missing 'lowerdir' [ 269.824451][ T3962] F2FS-fs (loop5): Start checkpoint disabled! [ 269.906698][ T3979] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1052: inode #1: comm syz.2.1052: iget: illegal inode # [ 269.950836][ T3962] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 269.961943][ T4003] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1062'. [ 269.963194][ T3979] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1052: error while reading EA inode 1 err=-117 [ 269.971505][ T4003] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 270.001029][ T3979] EXT4-fs (loop2): 1 orphan inode deleted [ 270.009684][ T3979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.073508][ T8] attempt to access beyond end of device [ 270.073508][ T8] loop5: rw=2049, want=40992, limit=40427 [ 270.162579][ T4022] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=4022 comm=syz.6.1072 [ 270.312531][ T308] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 270.337545][ T4039] loop6: detected capacity change from 0 to 40427 [ 270.395690][ T4039] F2FS-fs (loop6): invalid crc value [ 270.402073][ T4039] F2FS-fs (loop6): Found nat_bits in checkpoint [ 270.425449][ T4039] F2FS-fs (loop6): Start checkpoint disabled! [ 270.432296][ T4039] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 270.507636][ T8] attempt to access beyond end of device [ 270.507636][ T8] loop6: rw=2049, want=40976, limit=40427 [ 270.594121][ T4048] loop6: detected capacity change from 0 to 512 [ 270.741697][ T4048] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.817707][ T4048] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.909723][ T4054] loop5: detected capacity change from 0 to 256 [ 271.041919][ T4054] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.098237][ T4054] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 271.114381][ T4054] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 271.991263][ T4065] loop6: detected capacity change from 0 to 512 [ 272.009143][ T308] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.018600][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.026809][ T308] usb 2-1: Product: syz [ 272.030977][ T308] usb 2-1: Manufacturer: syz [ 272.037079][ T308] usb 2-1: SerialNumber: syz [ 272.045222][ T4069] loop5: detected capacity change from 0 to 512 [ 272.057167][ T4065] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.069524][ T4065] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.149965][ T4072] device veth7 entered promiscuous mode [ 272.264224][ T4069] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.292603][ T4069] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.232148][ T30] audit: type=1326 audit(1786174413.777:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.1089" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 273.300962][ T4085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1091'. [ 273.312549][ T30] audit: type=1326 audit(1786174413.817:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.1089" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 273.340795][ T30] audit: type=1326 audit(1786174413.817:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.1089" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 273.366011][ T30] audit: type=1326 audit(1786174413.817:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.1089" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 273.421774][ T4094] loop6: detected capacity change from 0 to 512 [ 273.445914][ T30] audit: type=1326 audit(1786174413.867:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.1089" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f282e81e90e code=0x7ffc0000 [ 273.476254][ T30] audit: type=1326 audit(1786174413.867:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.1089" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f282e81e90e code=0x7ffc0000 [ 273.519049][ T4094] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.552721][ T4094] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.608248][ T1525] usb 2-1: USB disconnect, device number 18 [ 274.703954][ T4119] tipc: Started in network mode [ 274.708849][ T4119] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 274.857603][ T4142] loop1: detected capacity change from 0 to 512 [ 274.871523][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 274.954026][ T4142] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.996459][ T4142] ext4 filesystem being mounted at /195/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.152590][ T307] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 275.235416][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 275.235431][ T30] audit: type=1400 audit(1786174415.787:522): avc: denied { bind } for pid=4184 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.267249][ T30] audit: type=1400 audit(1786174415.807:523): avc: denied { listen } for pid=4184 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.297164][ T30] audit: type=1400 audit(1786174415.817:524): avc: denied { connect } for pid=4184 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.317097][ T30] audit: type=1400 audit(1786174415.817:525): avc: denied { setopt } for pid=4186 comm="syz.5.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.402516][ T307] usb 1-1: Using ep0 maxpacket: 8 [ 275.672356][ T307] usb 1-1: config 2 has an invalid interface number: 133 but max is 0 [ 275.749951][ T307] usb 1-1: config 2 has no interface number 0 [ 275.762283][ T307] usb 1-1: config 2 interface 133 has no altsetting 0 [ 275.932588][ T307] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 275.943021][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.965587][ T4214] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1148'. [ 275.975682][ T307] usb 1-1: Product: syz [ 275.985892][ T30] audit: type=1400 audit(1786174416.537:526): avc: denied { create } for pid=4215 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 276.022510][ T383] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 276.023247][ T307] usb 1-1: Manufacturer: syz [ 276.035571][ T307] usb 1-1: SerialNumber: syz [ 276.045347][ T30] audit: type=1326 audit(1786174416.597:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.6.1154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e8600d9 code=0x7ffc0000 [ 276.070439][ T30] audit: type=1326 audit(1786174416.597:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.6.1154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e8600d9 code=0x7ffc0000 [ 276.095576][ T30] audit: type=1326 audit(1786174416.597:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.6.1154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e8600d9 code=0x7ffc0000 [ 276.120923][ T30] audit: type=1326 audit(1786174416.597:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.6.1154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f486e8600d9 code=0x7ffc0000 [ 276.196854][ T30] audit: type=1326 audit(1786174416.597:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.6.1154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e8600d9 code=0x7ffc0000 [ 276.296363][ T4150] UDC core: couldn't find an available UDC or it's busy: -16 [ 276.346537][ T4150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 276.472528][ T383] usb 6-1: Using ep0 maxpacket: 16 [ 276.599720][ T4255] loop2: detected capacity change from 0 to 512 [ 276.612607][ T383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.632514][ T383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.642397][ T383] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.647790][ T4255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.655575][ T383] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 276.675482][ T383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.683995][ T4255] ext4 filesystem being mounted at /258/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.697774][ T383] usb 6-1: config 0 descriptor?? [ 278.616465][ T307] usb 1-1: USB disconnect, device number 24 [ 278.642605][ T383] usbhid 6-1:0.0: can't add hid device: -71 [ 278.660952][ T383] usbhid: probe of 6-1:0.0 failed with error -71 [ 278.676505][ T4270] loop6: detected capacity change from 0 to 256 [ 278.714696][ T383] usb 6-1: USB disconnect, device number 5 [ 278.793576][ T4270] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.812555][ T4270] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 278.843646][ T4270] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 278.992574][ T307] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 279.131959][ T4316] loop5: detected capacity change from 0 to 512 [ 279.272569][ T307] usb 1-1: Using ep0 maxpacket: 8 [ 279.436404][ T307] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 279.445493][ T4316] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.474008][ T307] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.488392][ T4316] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.517754][ T307] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.537879][ T307] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.618102][ T307] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.640457][ T307] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.649974][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.762383][ T1525] usb 1-1: USB disconnect, device number 25 [ 281.916008][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 281.916022][ T30] audit: type=1400 audit(1786174422.467:539): avc: denied { map } for pid=4354 comm="syz.0.1199" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.537330][ T4360] device veth3 entered promiscuous mode [ 282.565704][ T4363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=4363 comm=syz.0.1201 [ 282.579311][ T4365] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=4365 comm=syz.5.1202 [ 282.675981][ T4367] loop1: detected capacity change from 0 to 256 [ 282.720646][ T30] audit: type=1400 audit(1786174423.267:540): avc: denied { bind } for pid=4388 comm="syz.6.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.768474][ T4367] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.818104][ T4367] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 282.829009][ T4367] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 282.901062][ T4394] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=4394 comm=syz.6.1216 [ 282.928529][ T4399] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=4399 comm=syz.1.1215 [ 283.002611][ T413] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 283.111413][ T4410] device syzkaller0 entered promiscuous mode [ 283.169450][ T4410] tipc: Started in network mode [ 283.202616][ T4413] loop6: detected capacity change from 0 to 256 [ 283.212830][ T4410] tipc: Node identity aa0082b64cfe, cluster identity 4711 [ 283.220457][ T4410] tipc: Enabled bearer , priority 0 [ 283.253569][ T4413] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.264337][ T4413] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 283.273832][ T4414] tipc: Resetting bearer [ 283.281759][ T4413] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 283.293901][ T4408] tipc: Resetting bearer [ 283.300475][ T4408] tipc: Disabling bearer [ 283.396759][ T4418] loop1: detected capacity change from 0 to 512 [ 283.687296][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.705660][ T4418] ext4 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.865313][ T4434] incfs: Backing dir is not set, filesystem can't be mounted. [ 285.872874][ T4434] incfs: mount failed -2 [ 285.940695][ T413] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.985321][ T413] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.012056][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1231'. [ 286.062568][ T413] usb 1-1: string descriptor 0 read error: -71 [ 286.065237][ T4445] device syzkaller0 entered promiscuous mode [ 286.071651][ T413] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.081599][ T4445] tipc: Started in network mode [ 286.088829][ T4445] tipc: Node identity 5e84088abb55, cluster identity 4711 [ 286.102538][ T4445] tipc: Enabled bearer , priority 0 [ 286.114543][ T4445] tipc: Resetting bearer [ 286.121760][ T4444] tipc: Resetting bearer [ 286.128359][ T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.136754][ T4444] tipc: Disabling bearer [ 286.172606][ T413] usb 1-1: can't set config #1, error -71 [ 286.183224][ T413] usb 1-1: USB disconnect, device number 26 [ 287.056324][ T30] audit: type=1400 audit(1786174427.607:541): avc: denied { write } for pid=4478 comm="syz.5.1243" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 287.056534][ T4479] binder: BINDER_SET_CONTEXT_MGR already set [ 287.092698][ T4479] binder: 4478:4479 ioctl 4018620d 200000000040 returned -16 [ 287.184330][ T4482] device veth13 entered promiscuous mode [ 287.446342][ T4490] tipc: Started in network mode [ 287.454174][ T4490] tipc: Node identity 0eb4085aa626, cluster identity 4711 [ 287.461439][ T4490] tipc: Enabled bearer , priority 0 [ 287.492574][ T4490] device syzkaller0 entered promiscuous mode [ 287.500152][ T4494] loop0: detected capacity change from 0 to 512 [ 287.508739][ T4490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 287.548038][ T4490] tipc: Resetting bearer [ 287.562603][ T4489] tipc: Resetting bearer [ 287.569248][ T4489] tipc: Disabling bearer [ 287.580093][ T4497] device syzkaller0 entered promiscuous mode [ 287.588915][ T4497] tipc: Enabled bearer , priority 0 [ 287.599099][ T4497] tipc: Resetting bearer [ 287.607084][ T4496] tipc: Resetting bearer [ 287.614407][ T4496] tipc: Disabling bearer [ 287.621429][ T4494] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.656551][ T4494] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.726441][ T30] audit: type=1326 audit(1786174428.277:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.6.1252" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f486e8600d9 code=0x0 [ 289.979828][ T4510] incfs: Backing dir is not set, filesystem can't be mounted. [ 289.987412][ T4510] incfs: mount failed -2 [ 290.299397][ T4526] loop6: detected capacity change from 0 to 256 [ 290.353679][ T4526] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.364414][ T4526] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 290.374198][ T4526] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 290.502544][ T1798] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 290.862590][ T1798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.872748][ T1798] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.962614][ T1798] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.971729][ T1798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.979754][ T1798] usb 2-1: SerialNumber: syz [ 293.242875][ T1798] usb 2-1: bad CDC descriptors [ 293.250816][ T4532] loop5: detected capacity change from 0 to 8192 [ 293.254743][ T1798] usb 2-1: USB disconnect, device number 19 [ 293.262557][ T4539] device syzkaller0 entered promiscuous mode [ 293.278957][ T4539] tipc: Enabled bearer , priority 0 [ 293.307155][ T4539] tipc: Resetting bearer [ 293.327932][ T4538] tipc: Resetting bearer [ 293.338936][ T4538] tipc: Disabling bearer [ 293.376593][ T4532] kvm_set_msr_common: 6 callbacks suppressed [ 293.376609][ T4532] kvm [4530]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 293.392515][ T4532] kvm [4530]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 293.406955][ T4532] kvm [4530]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 293.693658][ T26] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 293.729353][ T4532] kvm [4530]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 293.744086][ T4532] kvm [4530]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 294.112568][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 294.152554][ T26] usb 6-1: not running at top speed; connect to a high speed hub [ 294.180132][ T4561] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.190044][ T4563] loop1: detected capacity change from 0 to 512 [ 294.238876][ T26] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 294.266501][ T30] audit: type=1326 audit(1786174434.817:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.2.1273" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f282e85e0d9 code=0x0 [ 294.291519][ T4563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.302690][ T4563] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.310665][ T26] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 294.385042][ T26] usb 6-1: config 4 has no interface number 0 [ 294.427009][ T4578] loop6: detected capacity change from 0 to 512 [ 294.449099][ T4578] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 294.460310][ T4578] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.578315][ T26] usb 6-1: Dual-Role OTG device on HNP port [ 294.602534][ T26] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 294.614914][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 294.650348][ T26] usb 6-1: Product: syz [ 294.659225][ T26] usb 6-1: Manufacturer: syz [ 294.669154][ T26] usb 6-1: SerialNumber: syz [ 295.595600][ T30] audit: type=1400 audit(1786174436.147:544): avc: denied { write } for pid=4585 comm="syz.2.1277" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 295.727121][ T4590] loop0: detected capacity change from 0 to 512 [ 295.751150][ T4592] loop2: detected capacity change from 0 to 256 [ 295.767324][ T4590] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.779211][ T4592] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.837974][ T26] usb 6-1: USB disconnect, device number 6 [ 295.910694][ T4590] ext4 filesystem being mounted at /231/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.922785][ T4592] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 296.037156][ T4592] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 297.112550][ T1798] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 297.143475][ T4607] loop5: detected capacity change from 0 to 8192 [ 297.211123][ T4611] loop1: detected capacity change from 0 to 512 [ 297.245864][ T4607] kvm [4605]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 297.261379][ T4607] kvm [4605]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 297.292094][ T4611] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.310899][ T4607] kvm [4605]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 297.326800][ T4611] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.370643][ T4607] kvm [4605]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 297.382538][ T1798] usb 7-1: Using ep0 maxpacket: 8 [ 297.435928][ T4607] kvm [4605]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 297.583977][ T307] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 298.362609][ T307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 298.432705][ T1798] usb 7-1: config 2 has an invalid interface number: 133 but max is 0 [ 298.440902][ T1798] usb 7-1: config 2 has no interface number 0 [ 298.447040][ T1798] usb 7-1: config 2 interface 133 has no altsetting 0 [ 298.468326][ T307] usb 6-1: not running at top speed; connect to a high speed hub [ 298.562554][ T307] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 298.576001][ T307] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 298.587211][ T307] usb 6-1: config 4 has no interface number 0 [ 298.912748][ T307] usb 6-1: Dual-Role OTG device on HNP port [ 299.012539][ T4637] UDC core: couldn't find an available UDC or it's busy: -16 [ 299.020279][ T4637] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 299.021061][ T307] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 299.037467][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 299.045811][ T307] usb 6-1: Product: syz [ 299.050124][ T307] usb 6-1: Manufacturer: syz [ 299.055004][ T307] usb 6-1: SerialNumber: syz [ 299.060514][ T1798] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 299.069596][ T1798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.077620][ T1798] usb 7-1: Product: syz [ 299.081800][ T1798] usb 7-1: Manufacturer: syz [ 299.086420][ T1798] usb 7-1: SerialNumber: syz [ 299.196051][ T4640] device veth15 entered promiscuous mode [ 299.435084][ T4650] loop0: detected capacity change from 0 to 512 [ 299.497715][ T4650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.508887][ T4650] ext4 filesystem being mounted at /241/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.558275][ T307] usb 6-1: USB disconnect, device number 7 [ 300.577504][ T4661] device macsec1 entered promiscuous mode [ 300.616577][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1302'. [ 300.652804][ T4667] loop5: detected capacity change from 0 to 512 [ 300.674054][ T1798] usb 7-1: USB disconnect, device number 3 [ 300.978175][ T4667] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.022610][ T4667] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.237590][ T4680] device veth7 entered promiscuous mode [ 301.442498][ T1798] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 301.913934][ T1831] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 301.946140][ T4696] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1314'. [ 301.962523][ T1798] usb 7-1: device descriptor read/64, error -71 [ 302.027060][ T4700] device macsec1 entered promiscuous mode [ 302.054079][ T4706] loop1: detected capacity change from 0 to 1024 [ 302.085121][ T4706] EXT4-fs (loop1): Ignoring removed bh option [ 302.094321][ T4706] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #3: block 1: comm syz.1.1319: lblock 1 mapped to illegal pblock 1 (length 1) [ 302.108682][ T4706] Quota error (device loop1): write_blk: dquota write failed [ 302.116320][ T4706] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 302.127520][ T4706] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.1319: Failed to acquire dquot type 0 [ 302.139285][ T4706] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.1319: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.155216][ T4706] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1319: Invalid inode bitmap blk 0 in block_group 0 [ 302.168486][ T4706] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 302.172492][ T1831] usb 1-1: Using ep0 maxpacket: 16 [ 302.177385][ T433] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 302.196664][ T4706] EXT4-fs (loop1): 1 orphan inode deleted [ 302.202967][ T433] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 302.214791][ T4706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 302.231692][ T433] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 302.312561][ T1831] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 302.320915][ T1831] usb 1-1: config 0 has no interface number 0 [ 302.327076][ T1831] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 302.344236][ T1831] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 302.362569][ T1798] usb 7-1: device descriptor read/64, error -71 [ 302.522617][ T1831] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 302.531721][ T1831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.539730][ T1831] usb 1-1: Product: syz [ 302.543908][ T1831] usb 1-1: Manufacturer: syz [ 302.548495][ T1831] usb 1-1: SerialNumber: syz [ 302.553666][ T1831] usb 1-1: config 0 descriptor?? [ 302.572583][ T4688] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 302.579576][ T4688] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 302.642538][ T1798] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 302.794308][ T4688] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 302.801473][ T4688] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 302.912558][ T1798] usb 7-1: device descriptor read/64, error -71 [ 302.980126][ T4720] tipc: Enabled bearer , priority 0 [ 302.989663][ T4720] device syzkaller0 entered promiscuous mode [ 302.998402][ T4720] tipc: Resetting bearer [ 303.004658][ T4719] tipc: Resetting bearer [ 303.010878][ T4719] tipc: Disabling bearer [ 303.022559][ T1831] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 303.032679][ T1831] asix: probe of 1-1:0.34 failed with error -71 [ 303.040151][ T1831] usb 1-1: USB disconnect, device number 27 [ 303.915922][ T4722] device veth5 entered promiscuous mode [ 304.423257][ T4744] device macsec1 entered promiscuous mode [ 304.513480][ T30] audit: type=1400 audit(1786174445.067:545): avc: denied { setopt } for pid=4750 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.717474][ T4767] incfs: Backing dir is not set, filesystem can't be mounted. [ 304.725141][ T4767] incfs: mount failed -2 [ 304.822505][ T1831] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 304.840326][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 304.892689][ T307] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 304.933467][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1343'. [ 304.955597][ T4771] loop6: detected capacity change from 0 to 512 [ 304.994417][ T4771] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.005588][ T4771] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.092528][ T1831] usb 2-1: Using ep0 maxpacket: 16 [ 305.106602][ T4776] loop6: detected capacity change from 0 to 256 [ 305.132686][ T307] usb 6-1: Using ep0 maxpacket: 8 [ 305.153118][ T4776] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.164107][ T4776] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 305.174056][ T4776] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 305.212591][ T1831] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 305.220814][ T1831] usb 2-1: config 0 has no interface number 0 [ 305.226963][ T1831] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 305.237194][ T1831] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 305.252533][ T307] usb 6-1: config 2 has an invalid interface number: 133 but max is 0 [ 305.260811][ T307] usb 6-1: config 2 has no interface number 0 [ 305.266994][ T307] usb 6-1: config 2 interface 133 has no altsetting 0 [ 305.322912][ T4783] loop6: detected capacity change from 0 to 512 [ 305.354528][ T4783] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.366457][ T4783] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.463757][ T1831] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 305.473016][ T1831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.482526][ T1831] usb 2-1: Product: syz [ 305.487858][ T1831] usb 2-1: Manufacturer: syz [ 305.489300][ T4790] mmap: syz.2.1349 (4790) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 305.492590][ T1831] usb 2-1: SerialNumber: syz [ 305.512554][ T307] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 305.521606][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.544031][ T1831] usb 2-1: config 0 descriptor?? [ 305.549383][ T307] usb 6-1: Product: syz [ 305.553845][ T307] usb 6-1: Manufacturer: syz [ 305.558461][ T307] usb 6-1: SerialNumber: syz [ 305.607031][ T4756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.746159][ T4756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 305.903120][ T4765] UDC core: couldn't find an available UDC or it's busy: -16 [ 305.955629][ T4765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 306.027214][ T4756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 306.081961][ T4756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 306.456582][ T4794] loop2: detected capacity change from 0 to 8192 [ 306.713025][ T1831] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 306.762430][ T4800] device veth5 entered promiscuous mode [ 306.814875][ T26] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 306.831540][ T1831] asix: probe of 2-1:0.34 failed with error -71 [ 306.877800][ T1831] usb 2-1: USB disconnect, device number 20 [ 307.242544][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.282598][ T26] usb 3-1: not running at top speed; connect to a high speed hub [ 307.362557][ T26] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 307.370758][ T26] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 307.420616][ T26] usb 3-1: config 4 has no interface number 0 [ 307.485340][ T4810] loop6: detected capacity change from 0 to 256 [ 307.525147][ T4810] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.535949][ T4810] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 307.555152][ T4810] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 307.582569][ T26] usb 3-1: Dual-Role OTG device on HNP port [ 307.602915][ T26] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 307.612142][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 307.626232][ T26] usb 3-1: Product: syz [ 307.630957][ T26] usb 3-1: Manufacturer: syz [ 307.635892][ T26] usb 3-1: SerialNumber: syz [ 307.704426][ T307] usb 6-1: USB disconnect, device number 8 [ 308.054066][ T26] usb 3-1: USB disconnect, device number 20 [ 308.102524][ T307] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 308.352535][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 308.462169][ T4836] loop2: detected capacity change from 0 to 512 [ 308.472755][ T307] usb 6-1: config 3 has an invalid interface number: 20 but max is 0 [ 308.488996][ T307] usb 6-1: config 3 has no interface number 0 [ 308.508520][ T307] usb 6-1: config 3 interface 20 has no altsetting 0 [ 308.516641][ T4836] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.528405][ T4836] ext4 filesystem being mounted at /304/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.529707][ T4850] incfs: Backing dir is not set, filesystem can't be mounted. [ 309.537284][ T4850] incfs: mount failed -2 [ 309.622668][ T307] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 309.632222][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.664209][ T307] usb 6-1: Product: syz [ 309.686413][ T307] usb 6-1: Manufacturer: syz [ 309.703566][ T4852] loop0: detected capacity change from 0 to 512 [ 309.744345][ T4855] loop2: detected capacity change from 0 to 512 [ 309.753260][ T307] usb 6-1: SerialNumber: syz [ 309.762618][ T6] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 309.781053][ T4852] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.792330][ T4852] ext4 filesystem being mounted at /251/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.814277][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.825610][ T4855] ext4 filesystem being mounted at /305/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.036522][ T4827] loop5: detected capacity change from 0 to 7 [ 310.165350][ T307] usbhid 6-1:3.20: couldn't find an input interrupt endpoint [ 310.176634][ T307] usb 6-1: USB disconnect, device number 9 [ 311.107227][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 311.112432][ T1798] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 311.379649][ T6] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 311.387934][ T6] usb 2-1: config 0 has no interface number 0 [ 311.394282][ T6] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 311.404493][ T6] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 311.432528][ T39] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 311.811749][ T6] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 311.820980][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.829083][ T6] usb 2-1: Product: syz [ 311.834211][ T6] usb 2-1: config 0 descriptor?? [ 311.842540][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 311.852584][ T6] usb 2-1: can't set config #0, error -71 [ 311.859189][ T6] usb 2-1: USB disconnect, device number 21 [ 312.002531][ T39] usb 1-1: config 2 has an invalid interface number: 133 but max is 0 [ 312.014337][ T39] usb 1-1: config 2 has no interface number 0 [ 312.019983][ T1798] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 312.039090][ T1798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.040436][ T39] usb 1-1: config 2 interface 133 has no altsetting 0 [ 312.048212][ T1798] usb 7-1: Product: syz [ 312.060884][ T1798] usb 7-1: Manufacturer: syz [ 312.066132][ T1798] usb 7-1: SerialNumber: syz [ 312.119538][ T4900] loop2: detected capacity change from 0 to 1024 [ 312.182980][ T4900] EXT4-fs (loop2): Ignoring removed bh option [ 312.205824][ T4900] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.1382: lblock 1 mapped to illegal pblock 1 (length 1) [ 312.220610][ T4900] Quota error (device loop2): write_blk: dquota write failed [ 312.228787][ T4900] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 312.239725][ T4900] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.1382: Failed to acquire dquot type 0 [ 312.251444][ T4900] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1382: Freeing blocks not in datazone - block = 0, count = 4096 [ 312.265248][ T4900] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1382: Invalid inode bitmap blk 0 in block_group 0 [ 312.272582][ T39] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 312.278218][ T4900] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 312.292498][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.295818][ T10] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 312.312288][ T39] usb 1-1: Product: syz [ 312.323581][ T39] usb 1-1: Manufacturer: syz [ 312.328225][ T39] usb 1-1: SerialNumber: syz [ 312.333501][ T4900] EXT4-fs (loop2): 1 orphan inode deleted [ 312.337850][ T307] usb 7-1: USB disconnect, device number 6 [ 312.339337][ T4900] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 312.355369][ T10] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 312.370234][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 312.502526][ T4906] loop2: detected capacity change from 0 to 7 [ 312.584052][ T4882] UDC core: couldn't find an available UDC or it's busy: -16 [ 312.591634][ T4882] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.672525][ T1798] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 312.718401][ T4909] loop5: detected capacity change from 0 to 512 [ 312.803986][ T4909] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.815180][ T4909] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.832954][ T4913] loop6: detected capacity change from 0 to 512 [ 312.889817][ T4913] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.901138][ T4913] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.922729][ T1798] usb 2-1: Using ep0 maxpacket: 16 [ 313.062572][ T1798] usb 2-1: config 3 has an invalid interface number: 20 but max is 0 [ 313.070835][ T1798] usb 2-1: config 3 has no interface number 0 [ 313.077489][ T1798] usb 2-1: config 3 interface 20 has no altsetting 0 [ 313.242580][ T1798] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 313.251695][ T1798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.259737][ T1798] usb 2-1: Product: syz [ 313.263937][ T1798] usb 2-1: Manufacturer: syz [ 313.268672][ T1798] usb 2-1: SerialNumber: syz [ 313.602904][ T1798] usbhid 2-1:3.20: couldn't find an input interrupt endpoint [ 313.611891][ T1798] usb 2-1: USB disconnect, device number 22 [ 314.825363][ T1831] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 314.836174][ T39] usb 1-1: USB disconnect, device number 28 [ 314.904117][ T4953] loop6: detected capacity change from 0 to 8192 [ 314.937580][ T4951] loop0: detected capacity change from 0 to 256 [ 314.949475][ T4951] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.984927][ T4951] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 314.995373][ T4951] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 315.066206][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 315.116308][ T1831] usb 3-1: Using ep0 maxpacket: 8 [ 315.152650][ T1525] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 315.252570][ T1831] usb 3-1: config 2 has an invalid interface number: 133 but max is 0 [ 315.260841][ T1831] usb 3-1: config 2 has no interface number 0 [ 315.267180][ T1831] usb 3-1: config 2 interface 133 has no altsetting 0 [ 315.326941][ T4971] loop0: detected capacity change from 0 to 512 [ 315.372535][ T1798] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 315.374266][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 315.391119][ T4971] ext4 filesystem being mounted at /261/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.443671][ T1831] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 315.452799][ T1831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.460848][ T1831] usb 3-1: Product: syz [ 315.465182][ T1831] usb 3-1: Manufacturer: syz [ 315.469836][ T1831] usb 3-1: SerialNumber: syz [ 315.714062][ T4930] UDC core: couldn't find an available UDC or it's busy: -16 [ 315.721609][ T4930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.792524][ T1798] usb 7-1: unable to get BOS descriptor or descriptor too short [ 315.862568][ T1798] usb 7-1: not running at top speed; connect to a high speed hub [ 315.919575][ T1525] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 315.928747][ T1525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.937058][ T1525] usb 6-1: Product: syz [ 315.941290][ T1525] usb 6-1: Manufacturer: syz [ 315.946338][ T1525] usb 6-1: SerialNumber: syz [ 315.952778][ T1798] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 315.960954][ T1798] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 315.971022][ T1798] usb 7-1: config 4 has no interface number 0 [ 316.211739][ T308] usb 6-1: USB disconnect, device number 10 [ 316.332583][ T1798] usb 7-1: Dual-Role OTG device on HNP port [ 316.362524][ T1798] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 316.371642][ T1798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 316.379831][ T1798] usb 7-1: Product: syz [ 316.384059][ T1798] usb 7-1: Manufacturer: syz [ 316.388683][ T1798] usb 7-1: SerialNumber: syz [ 316.512554][ T1525] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 316.736317][ T4990] loop5: detected capacity change from 0 to 512 [ 316.767336][ T1525] usb 1-1: Using ep0 maxpacket: 8 [ 316.787208][ T4990] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.799250][ T4990] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.812764][ T1798] usb 7-1: USB disconnect, device number 7 [ 316.832069][ T4998] loop1: detected capacity change from 0 to 512 [ 316.872749][ T4998] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.885541][ T4998] ext4 filesystem being mounted at /256/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.936055][ T1525] usb 1-1: config 2 has an invalid interface number: 133 but max is 0 [ 316.945289][ T1525] usb 1-1: config 2 has no interface number 0 [ 316.951388][ T1525] usb 1-1: config 2 interface 133 has no altsetting 0 [ 316.961393][ T1831] usb 3-1: USB disconnect, device number 21 [ 317.932845][ T1525] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 317.942369][ T1525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.934971][ T1525] usb 1-1: Product: syz [ 318.939170][ T1525] usb 1-1: Manufacturer: syz [ 318.943894][ T1525] usb 1-1: SerialNumber: syz [ 319.016230][ T30] audit: type=1326 audit(1786174459.567:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.052137][ T5016] loop5: detected capacity change from 0 to 1024 [ 319.062865][ T30] audit: type=1326 audit(1786174459.597:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.095071][ T5015] loop1: detected capacity change from 0 to 256 [ 319.101492][ T30] audit: type=1326 audit(1786174459.597:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.128454][ T30] audit: type=1326 audit(1786174459.597:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.137746][ T1831] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 319.154590][ T30] audit: type=1326 audit(1786174459.597:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.185621][ T30] audit: type=1326 audit(1786174459.597:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.210696][ T30] audit: type=1326 audit(1786174459.597:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.216020][ T5020] device veth7 entered promiscuous mode [ 319.239696][ T30] audit: type=1326 audit(1786174459.597:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.265762][ T4988] UDC core: couldn't find an available UDC or it's busy: -16 [ 319.265779][ T4988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 319.269363][ T5016] EXT4-fs (loop5): Ignoring removed bh option [ 319.293317][ T30] audit: type=1326 audit(1786174459.597:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.307206][ T5015] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.318666][ T30] audit: type=1326 audit(1786174459.597:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.5.1422" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4478ae50d9 code=0x7ffc0000 [ 319.336745][ T5015] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 319.358709][ T5016] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #3: block 1: comm syz.5.1422: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.371270][ T5015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 319.380549][ T5016] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.1422: Failed to acquire dquot type 0 [ 319.405932][ T5016] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.1422: Freeing blocks not in datazone - block = 0, count = 4096 [ 319.419663][ T5016] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1422: Invalid inode bitmap blk 0 in block_group 0 [ 319.433052][ T10] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.433361][ T5016] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 319.455925][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 319.456681][ T5016] EXT4-fs (loop5): 1 orphan inode deleted [ 319.473185][ T5016] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 319.489656][ T1831] usb 3-1: Using ep0 maxpacket: 16 [ 319.507492][ T5027] loop6: detected capacity change from 0 to 1024 [ 319.608379][ T5027] EXT4-fs (loop6): Ignoring removed bh option [ 319.622559][ T1831] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 319.628623][ T5027] EXT4-fs error (device loop6): ext4_map_blocks:742: inode #3: block 1: comm syz.6.1426: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.630738][ T1831] usb 3-1: config 3 has no interface number 0 [ 319.647830][ T5027] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1426: Failed to acquire dquot type 0 [ 319.656214][ T1831] usb 3-1: config 3 interface 20 has no altsetting 0 [ 319.666693][ T5027] EXT4-fs error (device loop6): ext4_free_blocks:6231: comm syz.6.1426: Freeing blocks not in datazone - block = 0, count = 4096 [ 319.682524][ T5027] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1426: Invalid inode bitmap blk 0 in block_group 0 [ 319.695308][ T10] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.695815][ T5027] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 319.709761][ T10] EXT4-fs error (device loop6): ext4_release_dquot:6263: comm kworker/u4:1: Failed to release dquot type 0 [ 319.718945][ T5027] EXT4-fs (loop6): 1 orphan inode deleted [ 319.735301][ T5027] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 319.822591][ T414] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 319.852618][ T1831] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 319.861907][ T1831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.870625][ T1831] usb 3-1: Product: syz [ 319.875145][ T1831] usb 3-1: Manufacturer: syz [ 319.879742][ T1831] usb 3-1: SerialNumber: syz [ 319.902701][ T1831] usb 3-1: can't set config #3, error -71 [ 319.910231][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.910883][ T1831] usb 3-1: USB disconnect, device number 22 [ 320.112618][ T307] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 320.352589][ T414] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 320.361667][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.369707][ T307] usb 7-1: Using ep0 maxpacket: 8 [ 320.374782][ T414] usb 2-1: Product: syz [ 320.378930][ T414] usb 2-1: Manufacturer: syz [ 320.383548][ T414] usb 2-1: SerialNumber: syz [ 320.410201][ T5045] input: syz1 as /devices/virtual/input/input11 [ 320.512584][ T307] usb 7-1: config 2 has an invalid interface number: 133 but max is 0 [ 320.520889][ T307] usb 7-1: config 2 has no interface number 0 [ 320.527040][ T307] usb 7-1: config 2 interface 133 has no altsetting 0 [ 320.535744][ T1525] usb 1-1: USB disconnect, device number 29 [ 320.792823][ T414] usb 2-1: USB disconnect, device number 23 [ 320.862561][ T307] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 320.871665][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.879944][ T307] usb 7-1: Product: syz [ 320.884216][ T307] usb 7-1: Manufacturer: syz [ 320.888829][ T307] usb 7-1: SerialNumber: syz [ 320.912522][ T1798] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 321.025530][ T5056] loop5: detected capacity change from 0 to 131072 [ 321.063151][ T5056] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 321.070851][ T5056] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 321.079677][ T5056] F2FS-fs (loop5): invalid crc value [ 321.086652][ T5056] F2FS-fs (loop5): Found nat_bits in checkpoint [ 321.108447][ T5056] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 321.115572][ T5056] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 321.133846][ T5041] UDC core: couldn't find an available UDC or it's busy: -16 [ 321.141246][ T5041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 321.152516][ T1798] usb 3-1: Using ep0 maxpacket: 16 [ 321.292571][ T1798] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 321.303776][ T1798] usb 3-1: config 3 has no interface number 0 [ 321.340311][ T5067] loop0: detected capacity change from 0 to 512 [ 321.346913][ T1798] usb 3-1: config 3 interface 20 has no altsetting 0 [ 321.354044][ T5065] loop5: detected capacity change from 0 to 8192 [ 321.384687][ T5067] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.396112][ T5067] ext4 filesystem being mounted at /264/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.532599][ T1798] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 323.881849][ T1798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.890907][ T1798] usb 3-1: Product: syz [ 323.895325][ T1798] usb 3-1: Manufacturer: syz [ 323.899981][ T1798] usb 3-1: SerialNumber: syz [ 323.945179][ T1798] usb 3-1: can't set config #3, error -71 [ 323.979829][ T1798] usb 3-1: USB disconnect, device number 23 [ 323.979938][ T5068] device veth17 entered promiscuous mode [ 324.094935][ T307] usb 7-1: USB disconnect, device number 8 [ 324.303095][ T5095] loop0: detected capacity change from 0 to 256 [ 324.352931][ T5095] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.364843][ T5095] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 324.382128][ T5095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 324.515776][ T5097] loop0: detected capacity change from 0 to 512 [ 324.522862][ T307] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 324.553882][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 324.565049][ T5097] ext4 filesystem being mounted at /268/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.575645][ T6] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 324.772505][ T307] usb 7-1: Using ep0 maxpacket: 16 [ 324.849198][ T5101] loop2: detected capacity change from 0 to 8192 [ 324.902510][ T307] usb 7-1: config 3 has an invalid interface number: 20 but max is 0 [ 324.954476][ T307] usb 7-1: config 3 has no interface number 0 [ 324.960732][ T307] usb 7-1: config 3 interface 20 has no altsetting 0 [ 324.969706][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 324.969721][ T30] audit: type=1400 audit(1786174465.517:608): avc: denied { read } for pid=5107 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.996397][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 325.071883][ T5111] loop1: detected capacity change from 0 to 8192 [ 325.089921][ T5106] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.114646][ T5113] loop5: detected capacity change from 0 to 256 [ 325.121270][ T5106] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.123828][ T6] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 325.141225][ T6] usb 6-1: can't read configurations, error -71 [ 325.141249][ T5113] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.152647][ T307] usb 7-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 325.167544][ T5113] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 325.176058][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.176083][ T307] usb 7-1: Product: syz [ 325.176103][ T307] usb 7-1: Manufacturer: syz [ 325.193069][ T307] usb 7-1: SerialNumber: syz [ 325.198624][ T5113] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 325.210748][ T1798] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 325.220531][ T5116] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 325.228975][ T5116] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 325.251278][ T5111] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 325.259506][ T5111] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 325.300741][ T5120] loop0: detected capacity change from 0 to 512 [ 325.363886][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.375461][ T5120] ext4 filesystem being mounted at /270/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.441831][ T5080] loop5: detected capacity change from 0 to 7 [ 325.456115][ T5129] loop0: detected capacity change from 0 to 512 [ 325.504223][ T5129] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.515578][ T5129] ext4 filesystem being mounted at /271/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.565848][ T307] usbhid 7-1:3.20: couldn't find an input interrupt endpoint [ 325.574300][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 325.591945][ T307] usb 7-1: USB disconnect, device number 9 [ 325.632552][ T1798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.592947][ T1798] usb 3-1: not running at top speed; connect to a high speed hub [ 326.648399][ T5144] loop5: detected capacity change from 0 to 512 [ 326.700698][ T5143] loop6: detected capacity change from 0 to 256 [ 326.709535][ T5143] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.710602][ T5144] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.720264][ T5143] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 326.732329][ T5144] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.739900][ T1798] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 326.758898][ T1798] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 326.763789][ T5143] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 326.769086][ T1798] usb 3-1: config 4 has no interface number 0 [ 327.899083][ T26] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 328.052555][ T1798] usb 3-1: Dual-Role OTG device on HNP port [ 328.072791][ T1798] usb 3-1: can't set HNP mode: -71 [ 328.142577][ T414] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 328.206544][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 328.362688][ T26] usb 1-1: config 2 has an invalid interface number: 133 but max is 0 [ 328.372821][ T26] usb 1-1: config 2 has no interface number 0 [ 328.379086][ T26] usb 1-1: config 2 interface 133 has no altsetting 0 [ 328.502506][ T1798] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 328.528869][ T5174] kvm [5173]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 328.538222][ T5174] kvm [5173]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 328.551700][ T5174] kvm [5173]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 328.565679][ T5174] kvm [5173]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 328.575958][ T26] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 328.585078][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.585242][ T5174] kvm [5173]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 328.593380][ T26] usb 1-1: Product: syz [ 328.607466][ T26] usb 1-1: Manufacturer: syz [ 328.612111][ T26] usb 1-1: SerialNumber: syz [ 328.642631][ T414] usb 2-1: unable to get BOS descriptor or descriptor too short [ 328.702546][ T414] usb 2-1: not running at top speed; connect to a high speed hub [ 328.742521][ T1798] usb 3-1: Using ep0 maxpacket: 8 [ 328.792560][ T414] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 328.800826][ T414] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 328.811138][ T414] usb 2-1: config 4 has no interface number 0 [ 328.862552][ T1798] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 328.870824][ T1798] usb 3-1: config 179 has no interface number 0 [ 328.877290][ T1798] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 328.888555][ T1798] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 328.899990][ T1798] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 328.911223][ T1798] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 328.921328][ T1798] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 328.934741][ T1798] usb 3-1: config 179 interface 65 has no altsetting 0 [ 328.941609][ T1798] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 328.950943][ T1798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.985393][ T414] usb 2-1: Dual-Role OTG device on HNP port [ 328.995711][ T1798] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 329.012554][ T414] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 329.021866][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 329.030689][ T414] usb 2-1: Product: syz [ 329.035113][ T414] usb 2-1: Manufacturer: syz [ 329.039757][ T414] usb 2-1: SerialNumber: syz [ 329.303610][ T1798] usb 3-1: USB disconnect, device number 25 [ 329.314318][ T1798] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 329.474734][ T414] usb 2-1: USB disconnect, device number 24 [ 329.914442][ T5195] set_capacity_and_notify: 2 callbacks suppressed [ 329.914535][ T5195] loop2: detected capacity change from 0 to 512 [ 329.975683][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.986798][ T5195] ext4 filesystem being mounted at /323/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.111130][ T5207] loop0: detected capacity change from 0 to 8192 [ 330.119006][ T26] usb 1-1: USB disconnect, device number 30 [ 332.331635][ T1798] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 332.849348][ T5207] kvm [5206]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 332.858659][ T5207] kvm [5206]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 332.873499][ T5207] kvm [5206]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 332.894052][ T5207] kvm [5206]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 332.906743][ T5207] kvm [5206]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 332.937245][ T30] audit: type=1326 audit(1786174473.487:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 332.962362][ T30] audit: type=1326 audit(1786174473.507:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 333.801952][ T5223] loop2: detected capacity change from 0 to 1024 [ 333.820077][ T30] audit: type=1326 audit(1786174473.507:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 333.868436][ T5223] EXT4-fs (loop2): Ignoring removed bh option [ 333.896733][ T30] audit: type=1326 audit(1786174473.507:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 333.936555][ T30] audit: type=1326 audit(1786174473.507:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 333.964496][ T5223] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.1482: lblock 1 mapped to illegal pblock 1 (length 1) [ 333.971223][ T30] audit: type=1326 audit(1786174473.507:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 333.979407][ T5223] Quota error (device loop2): write_blk: dquota write failed [ 334.003704][ T30] audit: type=1326 audit(1786174473.507:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 334.011008][ T5223] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 334.045608][ T1798] usb 6-1: device not accepting address 13, error -71 [ 334.054421][ T5223] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.1482: Failed to acquire dquot type 0 [ 334.077349][ T30] audit: type=1326 audit(1786174473.507:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.2.1482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 334.102221][ T5223] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1482: Freeing blocks not in datazone - block = 0, count = 4096 [ 334.109110][ T5240] loop5: detected capacity change from 0 to 1024 [ 334.124470][ T308] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 334.133549][ T5240] EXT4-fs (loop5): Ignoring removed bh option [ 334.133829][ T5223] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1482: Invalid inode bitmap blk 0 in block_group 0 [ 334.153378][ T2269] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 334.162634][ T5223] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 334.169138][ T5240] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #3: block 1: comm syz.5.1489: lblock 1 mapped to illegal pblock 1 (length 1) [ 334.176738][ T5223] EXT4-fs (loop2): 1 orphan inode deleted [ 334.190657][ T2269] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:7: Failed to release dquot type 0 [ 334.209034][ T5240] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.1489: Failed to acquire dquot type 0 [ 334.221964][ T5240] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.1489: Freeing blocks not in datazone - block = 0, count = 4096 [ 334.238468][ T5240] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1489: Invalid inode bitmap blk 0 in block_group 0 [ 334.256130][ T5249] incfs: Backing dir is not set, filesystem can't be mounted. [ 334.263816][ T5249] incfs: mount failed -2 [ 334.311490][ T2269] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 334.326456][ T5240] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 334.336960][ T2269] EXT4-fs error (device loop5): ext4_release_dquot:6263: comm kworker/u4:7: Failed to release dquot type 0 [ 334.348956][ T5240] EXT4-fs (loop5): 1 orphan inode deleted [ 334.355575][ T5240] EXT4-fs (loop5): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 334.360873][ T5223] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 334.492501][ T308] usb 7-1: Using ep0 maxpacket: 8 [ 334.653908][ T5256] incfs: Backing dir is not set, filesystem can't be mounted. [ 334.661644][ T5256] incfs: mount failed -2 [ 334.817754][ T308] usb 7-1: config 2 has an invalid interface number: 133 but max is 0 [ 334.826260][ T308] usb 7-1: config 2 has no interface number 0 [ 334.832546][ T308] usb 7-1: config 2 interface 133 has no altsetting 0 [ 334.906186][ T5258] loop5: detected capacity change from 0 to 256 [ 334.932266][ T5258] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.945887][ T5258] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 334.970426][ T5258] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 335.022619][ T308] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 335.032016][ T308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.041144][ T308] usb 7-1: Product: syz [ 335.045889][ T308] usb 7-1: Manufacturer: syz [ 335.050524][ T308] usb 7-1: SerialNumber: syz [ 335.084116][ T5269] loop5: detected capacity change from 0 to 512 [ 335.134013][ T5269] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.145130][ T5269] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.232492][ T414] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 335.472762][ T414] usb 2-1: Using ep0 maxpacket: 8 [ 335.738086][ T414] usb 2-1: config 2 has an invalid interface number: 133 but max is 0 [ 335.738769][ T5277] loop0: detected capacity change from 0 to 512 [ 335.753189][ T414] usb 2-1: config 2 has no interface number 0 [ 335.759418][ T414] usb 2-1: config 2 interface 133 has no altsetting 0 [ 335.780496][ T5277] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 336.833354][ T5277] ext4 filesystem being mounted at /278/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.912574][ T414] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 337.923484][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.930247][ T308] usb 7-1: USB disconnect, device number 10 [ 337.957374][ T414] usb 2-1: Product: syz [ 337.961799][ T414] usb 2-1: Manufacturer: syz [ 337.998483][ T414] usb 2-1: SerialNumber: syz [ 338.006963][ T5304] incfs: Backing dir is not set, filesystem can't be mounted. [ 338.014649][ T5304] incfs: mount failed -2 [ 338.312554][ T414] usb 2-1: can't set config #2, error -71 [ 338.328759][ T414] usb 2-1: USB disconnect, device number 25 [ 338.339546][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 338.339561][ T30] audit: type=1326 audit(1786174478.887:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.345360][ T5311] loop2: detected capacity change from 0 to 1024 [ 338.348572][ T30] audit: type=1326 audit(1786174478.887:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.401838][ T30] audit: type=1326 audit(1786174478.887:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.427324][ T30] audit: type=1326 audit(1786174478.887:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.452882][ T5311] EXT4-fs (loop2): Ignoring removed bh option [ 338.456957][ T5305] device veth9 entered promiscuous mode [ 338.465890][ T30] audit: type=1326 audit(1786174478.887:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.471870][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.490809][ T30] audit: type=1326 audit(1786174478.887:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.532586][ T30] audit: type=1326 audit(1786174478.887:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.559000][ T30] audit: type=1326 audit(1786174478.887:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f282e85e0d9 code=0x7ffc0000 [ 338.583917][ T30] audit: type=1326 audit(1786174478.887:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f282e85de42 code=0x7ffc0000 [ 338.585220][ T5311] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.1509: lblock 1 mapped to illegal pblock 1 (length 1) [ 338.608932][ T30] audit: type=1326 audit(1786174478.887:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.1509" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f282e81e90e code=0x7ffc0000 [ 338.623164][ T5311] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.1509: Failed to acquire dquot type 0 [ 338.658840][ T5311] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1509: Freeing blocks not in datazone - block = 0, count = 4096 [ 338.672355][ T5311] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1509: Invalid inode bitmap blk 0 in block_group 0 [ 338.685044][ T433] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 338.685129][ T5311] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 338.707865][ T433] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 338.707882][ T5311] EXT4-fs (loop2): 1 orphan inode deleted [ 338.722498][ T414] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 338.725068][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 338.820339][ T5325] loop0: detected capacity change from 0 to 512 [ 339.637103][ T414] usb 2-1: Using ep0 maxpacket: 8 [ 339.639520][ T5325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.660067][ T5325] ext4 filesystem being mounted at /280/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.745185][ T5337] loop5: detected capacity change from 0 to 256 [ 339.766873][ T5337] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.777530][ T414] usb 2-1: config 2 has an invalid interface number: 133 but max is 0 [ 339.777557][ T414] usb 2-1: config 2 has no interface number 0 [ 339.777576][ T414] usb 2-1: config 2 interface 133 has no altsetting 0 [ 339.800628][ T5337] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 339.813732][ T5342] loop2: detected capacity change from 0 to 512 [ 339.817456][ T5337] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 339.914322][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.925989][ T5342] ext4 filesystem being mounted at /331/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.932636][ T414] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=89.e3 [ 340.880874][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.889933][ T414] usb 2-1: Product: syz [ 340.894132][ T414] usb 2-1: Manufacturer: syz [ 340.898728][ T414] usb 2-1: SerialNumber: syz [ 341.556422][ T5359] loop1: detected capacity change from 0 to 512 [ 341.941047][ T414] usb 2-1: USB disconnect, device number 26 [ 341.974903][ T5355] loop0: detected capacity change from 0 to 1024 [ 342.053224][ T5355] EXT4-fs (loop0): Ignoring removed bh option [ 342.061383][ T5355] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #3: block 1: comm syz.0.1518: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.075648][ T5355] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.1518: Failed to acquire dquot type 0 [ 342.083219][ T5367] ip_tables: iptables: counters copy to user failed while replacing table [ 342.087500][ T5355] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.1518: Freeing blocks not in datazone - block = 0, count = 4096 [ 342.109161][ T5355] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1518: Invalid inode bitmap blk 0 in block_group 0 [ 342.122689][ T306] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.137228][ T5355] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 342.143294][ T306] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0 [ 342.154756][ T5355] EXT4-fs (loop0): 1 orphan inode deleted [ 342.165778][ T5355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 342.170980][ T5365] loop2: detected capacity change from 0 to 256 [ 342.185197][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.199662][ T5359] ext4 filesystem being mounted at /279/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.303029][ T5365] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.317575][ T5365] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 342.327423][ T5365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 343.100364][ T5375] loop0: detected capacity change from 0 to 256 [ 343.125563][ T5375] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.141199][ T5375] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 343.155488][ T5380] device veth7 entered promiscuous mode [ 343.157048][ T5375] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 343.262585][ T414] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 343.705899][ T5392] incfs: Backing dir is not set, filesystem can't be mounted. [ 343.713464][ T5392] incfs: mount failed -2 [ 344.103596][ T5396] loop5: detected capacity change from 0 to 512 [ 344.154094][ T5396] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.165266][ T5396] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.259153][ T383] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 344.422632][ T414] usb 7-1: not running at top speed; connect to a high speed hub [ 345.527106][ T5407] loop0: detected capacity change from 0 to 512 [ 345.542523][ T414] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.552942][ T414] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 345.562021][ T414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.611984][ T414] usb 7-1: Found UVC 1.00 device (046d:0825) [ 345.697278][ T5407] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.709034][ T5407] ext4 filesystem being mounted at /285/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.802608][ T26] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 345.811204][ T383] usb 3-1: device descriptor read/64, error -71 [ 345.818458][ T5377] UDC core: couldn't find an available UDC or it's busy: -16 [ 345.829954][ T5377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 346.202505][ T383] usb 3-1: device descriptor read/64, error -71 [ 346.209699][ T414] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 346.232529][ T414] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 346.241583][ T414] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 346.250533][ T414] usb 7-1: USB disconnect, device number 11 [ 346.266826][ T5418] loop2: detected capacity change from 0 to 512 [ 346.345407][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 346.356533][ T5418] ext4 filesystem being mounted at /335/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.462553][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.534392][ T5428] incfs: Backing dir is not set, filesystem can't be mounted. [ 346.542077][ T5428] incfs: mount failed -2 [ 346.735422][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.800028][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.808347][ T26] usb 2-1: Product: syz [ 346.812795][ T26] usb 2-1: Manufacturer: syz [ 346.817458][ T26] usb 2-1: SerialNumber: syz [ 347.393839][ T5445] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1546'. [ 347.477794][ T5452] loop5: detected capacity change from 0 to 8192 [ 347.563330][ T5452] kvm [5451]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 347.591656][ T5452] kvm [5451]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 347.605926][ T5452] kvm [5451]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 347.619140][ T5452] kvm [5451]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 347.629814][ T5452] kvm [5451]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 348.640110][ T5468] UDC core: couldn't find an available UDC or it's busy: -16 [ 348.647769][ T5468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 349.209166][ T5474] loop2: detected capacity change from 0 to 1024 [ 349.216971][ T5474] EXT4-fs (loop2): Ignoring removed bh option [ 349.225243][ T5474] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.1555: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.239515][ T5474] __quota_error: 55 callbacks suppressed [ 349.239533][ T5474] Quota error (device loop2): write_blk: dquota write failed [ 349.242646][ T26] cdc_ncm 2-1:1.0: failed to get mac address [ 349.245402][ T5474] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 349.269094][ T308] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 349.269156][ T5474] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.1555: Failed to acquire dquot type 0 [ 349.288017][ T26] cdc_ncm 2-1:1.0: bind() failure [ 349.288531][ T5474] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1555: Freeing blocks not in datazone - block = 0, count = 4096 [ 349.306900][ T5474] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1555: Invalid inode bitmap blk 0 in block_group 0 [ 349.319723][ T26] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 349.319824][ T5474] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 349.326542][ T433] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.335174][ T5474] EXT4-fs (loop2): 1 orphan inode deleted [ 349.349085][ T1525] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 349.349165][ T26] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 349.355284][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; acl,auto_da_alloc,bh,usrjquota=,inlinecrypt,acl,i_version,,errors=continue. Quota mode: writeback. [ 349.364425][ T26] usb 2-1: USB disconnect, device number 27 [ 349.376974][ T433] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 349.400109][ T433] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 349.592526][ T308] usb 6-1: device descriptor read/64, error -71 [ 349.629619][ T5477] loop6: detected capacity change from 0 to 512 [ 349.635110][ T5479] loop2: detected capacity change from 0 to 512 [ 349.648225][ T5479] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1567: inode #1: comm syz.2.1567: iget: illegal inode # [ 349.661539][ T5479] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1567: error while reading EA inode 1 err=-117 [ 349.663442][ T5477] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 349.674471][ T5479] EXT4-fs (loop2): 1 orphan inode deleted [ 349.683870][ T5477] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 349.689735][ T5479] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.699570][ T5477] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1556: Failed to acquire dquot type 1 [ 349.721354][ T1525] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.752797][ T5477] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 349.764115][ T5477] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 349.774380][ T5477] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1556: Failed to acquire dquot type 1 [ 349.786695][ T5477] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1556: bg 0: block 248: padding at end of block bitmap is not set [ 349.801295][ T5477] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 349.816075][ T5477] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 349.826647][ T5477] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 349.837227][ T5477] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1556: Failed to acquire dquot type 1 [ 349.839235][ T5486] loop2: detected capacity change from 0 to 8192 [ 349.849317][ T5477] EXT4-fs (loop6): 1 orphan inode deleted [ 349.860808][ T5477] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 349.872840][ T5477] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.892538][ T1525] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.912313][ T5488] incfs: Backing dir is not set, filesystem can't be mounted. [ 349.919965][ T5488] incfs: mount failed -2 [ 349.988868][ T1525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.997837][ T1525] usb 1-1: Product: syz [ 350.002121][ T1525] usb 1-1: Manufacturer: syz [ 350.008002][ T1525] usb 1-1: SerialNumber: syz [ 350.085170][ T5477] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 350.097979][ T5477] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1556: Failed to acquire dquot type 1 [ 350.126106][ T5486] kvm [5485]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc1 data 0x400 [ 350.135383][ T5486] kvm [5485]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0xc2 data 0x400 [ 350.148949][ T5486] kvm [5485]: vcpu0, guest rIP: 0x912c ignored wrmsr: 0x11e data 0x400 [ 350.162731][ T5486] kvm [5485]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x186 data 0xb8004200000400 [ 350.173014][ T5486] kvm [5485]: vcpu0, guest rIP: 0x912c disabled perfctr wrmsr: 0x187 data 0xb8004200000400 [ 350.192492][ T308] usb 6-1: device descriptor read/64, error -71 [ 350.442510][ T307] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 350.463342][ T308] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 350.912820][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.970450][ T307] usb 3-1: not running at top speed; connect to a high speed hub [ 350.974949][ T5502] loop6: detected capacity change from 0 to 256 [ 351.015274][ T5502] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.028153][ T5502] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 351.048009][ T5502] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 351.060391][ T307] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 351.069484][ T307] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 351.084985][ T307] usb 3-1: config 4 has no interface number 0 [ 351.242617][ T307] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 351.252239][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 351.260825][ T5471] UDC core: couldn't find an available UDC or it's busy: -16 [ 351.268314][ T5471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 351.276263][ T307] usb 3-1: Product: syz [ 351.290728][ T307] usb 3-1: Manufacturer: syz [ 351.299858][ T307] usb 3-1: SerialNumber: syz [ 351.323220][ T1525] cdc_ncm 1-1:1.0: failed to get mac address [ 351.345771][ T1525] cdc_ncm 1-1:1.0: bind() failure [ 351.360784][ T5513] loop6: detected capacity change from 0 to 2048 [ 351.372578][ T1525] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 351.384889][ T5513] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.392552][ T1525] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 351.410236][ T1525] usb 1-1: USB disconnect, device number 31 [ 351.431991][ T306] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 351.447901][ T306] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 351.460391][ T306] EXT4-fs (loop6): This should not happen!! Data will be lost [ 351.460391][ T306] [ 351.470322][ T306] EXT4-fs (loop6): Total free blocks count 0 [ 351.476403][ T306] EXT4-fs (loop6): Free/Dirty block details [ 351.482291][ T306] EXT4-fs (loop6): free_blocks=66060288 [ 351.487915][ T306] EXT4-fs (loop6): dirty_blocks=160 [ 351.493155][ T306] EXT4-fs (loop6): Block reservation details [ 351.499140][ T306] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 351.537715][ T5520] loop1: detected capacity change from 0 to 256 [ 351.574129][ T5524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1571'. [ 351.580678][ T5520] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.612460][ T5520] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 351.645914][ T5520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 351.784597][ T5529] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 351.793488][ T5529] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 352.638730][ T5533] loop6: detected capacity change from 0 to 512 [ 352.644184][ T307] usb 3-1: USB disconnect, device number 28 [ 352.672788][ T5533] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 352.693524][ T5533] EXT4-fs (loop6): Unrecognized mount option "uid=00000000000000000000" or missing value [ 352.722365][ T5538] loop0: detected capacity change from 0 to 256 [ 352.773769][ T5538] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.784605][ T5538] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 352.796306][ T5538] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 352.843200][ T5545] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.882739][ T5543] loop5: detected capacity change from 0 to 256 [ 352.913354][ T5543] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.924084][ T5543] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 352.933845][ T5543] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 353.565916][ T5554] overlayfs: missing 'lowerdir' [ 353.669154][ T1525] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 353.808346][ T5560] loop2: detected capacity change from 0 to 256 [ 353.826007][ T5560] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.893025][ T5560] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 353.906259][ T5560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 353.980835][ T5563] loop5: detected capacity change from 0 to 40427 [ 355.657780][ T5566] loop6: detected capacity change from 0 to 512 [ 355.687668][ T1525] usb 2-1: Using ep0 maxpacket: 8 [ 356.032634][ T1525] usb 2-1: device descriptor read/all, error -71 [ 356.080537][ T5563] F2FS-fs (loop5): invalid crc value [ 356.190850][ T5566] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.326156][ T5563] F2FS-fs (loop5): Found nat_bits in checkpoint [ 356.717784][ T5563] F2FS-fs (loop5): Start checkpoint disabled! [ 356.769489][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 356.769532][ T30] audit: type=1400 audit(1786174497.317:729): avc: denied { read } for pid=5584 comm="syz.6.1588" path="socket:[42441]" dev="sockfs" ino=42441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 356.779979][ T5583] loop1: detected capacity change from 0 to 8192 [ 356.806062][ T5563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 357.883846][ T5600] loop2: detected capacity change from 0 to 4096 [ 357.905436][ T5600] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 357.938270][ T30] audit: type=1400 audit(1786174498.487:730): avc: denied { write } for pid=5599 comm="syz.2.1595" name="mcfilter" dev="proc" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 357.966528][ T30] audit: type=1400 audit(1786174498.517:731): avc: denied { bind } for pid=5604 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.106113][ T308] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 358.262649][ T414] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 358.582469][ T414] usb 6-1: Using ep0 maxpacket: 16 [ 358.703508][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 358.712556][ T414] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.724142][ T414] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.734257][ T414] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 358.747501][ T414] usb 6-1: config 0 interface 0 has no altsetting 0 [ 358.752589][ T308] usb 2-1: not running at top speed; connect to a high speed hub [ 358.754215][ T414] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 358.771290][ T414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.784998][ T414] usb 6-1: config 0 descriptor?? [ 359.795843][ T5629] loop2: detected capacity change from 0 to 256 [ 359.832551][ T308] usb 2-1: unable to read config index 0 descriptor/all [ 359.839597][ T308] usb 2-1: can't read configurations, error -71 [ 359.850292][ T5629] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.919662][ T5629] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 359.933724][ T5639] loop1: detected capacity change from 0 to 128 [ 359.946624][ T5629] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 359.963655][ T5639] FAT-fs (loop1): Directory bread(block 32) failed [ 359.970211][ T5639] FAT-fs (loop1): Directory bread(block 33) failed [ 359.978305][ T5639] FAT-fs (loop1): Directory bread(block 34) failed [ 359.989182][ T5639] FAT-fs (loop1): Directory bread(block 35) failed [ 360.048551][ T5639] FAT-fs (loop1): Directory bread(block 36) failed [ 360.055215][ T5639] FAT-fs (loop1): Directory bread(block 37) failed [ 360.061772][ T5639] FAT-fs (loop1): Directory bread(block 38) failed [ 360.068387][ T5639] FAT-fs (loop1): Directory bread(block 39) failed [ 360.074971][ T5639] FAT-fs (loop1): Directory bread(block 40) failed [ 360.081570][ T5639] FAT-fs (loop1): Directory bread(block 41) failed [ 360.269945][ T5644] loop0: detected capacity change from 0 to 512 [ 360.794055][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1605'. [ 360.812553][ T414] usbhid 6-1:0.0: can't add hid device: -71 [ 360.818976][ T414] usbhid: probe of 6-1:0.0 failed with error -71 [ 360.834495][ T5644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 360.867822][ T5639] device veth0_to_batadv entered promiscuous mode [ 360.885323][ T414] usb 6-1: USB disconnect, device number 17 [ 361.068314][ T5637] loop6: detected capacity change from 0 to 131072 [ 361.078353][ T5637] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 361.087142][ T5637] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 361.099460][ T5637] F2FS-fs (loop6): invalid crc value [ 361.162409][ T5637] F2FS-fs (loop6): Found nat_bits in checkpoint [ 361.262885][ T5637] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 361.281718][ T5637] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 361.364090][ T5688] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1622'. [ 361.395700][ T5686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 361.418634][ T5686] kvm: apic: phys broadcast and lowest prio [ 361.492034][ T30] audit: type=1326 audit(1786174502.037:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.5.1625" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4478ae50d9 code=0x0 [ 361.878699][ T5707] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 361.932887][ T5707] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 361.952554][ T5707] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 361.971246][ T5707] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 361.991591][ T5707] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 362.019422][ T5707] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 362.053772][ T5707] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 362.108700][ T5707] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 362.130115][ T5707] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 362.161531][ T5707] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 362.307582][ T5741] input: syz0 as /devices/virtual/input/input13 [ 362.428535][ T5754] device syzkaller0 entered promiscuous mode [ 362.475733][ T5758] netlink: 'syz.1.1651': attribute type 3 has an invalid length. [ 362.492537][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1651'. [ 362.779186][ T5793] device veth1_macvtap left promiscuous mode [ 362.787334][ T5793] device veth1_macvtap entered promiscuous mode [ 362.906593][ T308] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 362.915591][ T30] audit: type=1326 audit(1786174503.467:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.5.1670" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4478ae50d9 code=0x0 [ 362.966400][ T30] audit: type=1400 audit(1786174503.517:734): avc: denied { accept } for pid=5808 comm="syz.6.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.070300][ T5818] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1675'. [ 363.148299][ T30] audit: type=1400 audit(1786174503.697:735): avc: denied { create } for pid=5825 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 363.172507][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 363.239575][ T5838] device syzkaller0 entered promiscuous mode [ 363.312565][ T308] usb 3-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 363.327437][ T308] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.335090][ T308] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 363.355434][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.368477][ T308] usb 3-1: config 0 descriptor?? [ 363.369174][ T5854] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1692'. [ 363.492231][ T30] audit: type=1400 audit(1786174504.037:736): avc: denied { read write } for pid=5866 comm="syz.6.1698" name="usbmon6" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 363.516241][ T30] audit: type=1400 audit(1786174504.037:737): avc: denied { open } for pid=5866 comm="syz.6.1698" path="/dev/usbmon6" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 363.723962][ T308] usbhid 3-1:0.0: can't add hid device: -71 [ 363.730592][ T308] usbhid: probe of 3-1:0.0 failed with error -71 [ 363.749015][ T308] usb 3-1: USB disconnect, device number 29 [ 364.213539][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 364.380539][ T5951] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 364.425110][ T5957] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=5957 comm=syz.1.1734 [ 364.451999][ T5961] input: syz1 as /devices/virtual/input/input14 [ 364.469340][ T30] audit: type=1400 audit(1786174505.017:738): avc: denied { sys_module } for pid=5964 comm="syz.0.1737" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 364.501809][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1738'. [ 364.594056][ T30] audit: type=1400 audit(1786174505.147:739): avc: denied { getopt } for pid=5983 comm="syz.6.1746" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.622766][ T5986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.630060][ T5986] IPv6: NLM_F_CREATE should be set when creating new route [ 364.643674][ T30] audit: type=1326 audit(1786174505.197:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.1748" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97742920d9 code=0x0 [ 364.652565][ T1525] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 364.683262][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.690494][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.747215][ T30] audit: type=1400 audit(1786174505.297:741): avc: denied { mounton } for pid=5995 comm="syz.5.1751" path="/169/file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 365.032573][ T1525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.043649][ T1525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.053462][ T1525] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 365.062958][ T1525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.071885][ T1525] usb 3-1: config 0 descriptor?? [ 365.553179][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.560004][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.567086][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.573892][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.580688][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.587525][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.594483][ T1525] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.601966][ T1525] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 365.712475][ T308] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 365.857673][ T30] audit: type=1400 audit(1786174506.407:742): avc: denied { setopt } for pid=6089 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.012768][ T5951] netlink: 'syz.2.1731': attribute type 4 has an invalid length. [ 366.032537][ T1525] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 366.039938][ T1525] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 366.047067][ T1525] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 366.056746][ T1525] usb 3-1: USB disconnect, device number 30 [ 366.070701][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 366.262535][ T308] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 366.271648][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.279703][ T308] usb 2-1: Product: syz [ 366.283927][ T308] usb 2-1: Manufacturer: syz [ 366.288525][ T308] usb 2-1: SerialNumber: syz [ 366.294063][ T308] usb 2-1: config 0 descriptor?? [ 366.816945][ T6126] syz.5.1804 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 367.312015][ T6144] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1811'. [ 367.396765][ T6157] input: syz0 as /devices/virtual/input/input15 [ 367.534897][ T6166] binder: 6165:6166 ioctl c018620c 200000000000 returned -1 [ 367.586439][ T6169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1820'. [ 367.611073][ T1831] usb 2-1: USB disconnect, device number 32 [ 367.745495][ T6184] input: syz0 as /devices/virtual/input/input16 [ 367.881820][ T6195] ================================================================== [ 367.889925][ T6195] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 367.898191][ T6195] Read of size 8 at addr ffff888115c283c0 by task syz.1.1832/6195 [ 367.905997][ T6195] [ 367.908319][ T6195] CPU: 1 PID: 6195 Comm: syz.1.1832 Not tainted syzkaller #0 [ 367.915687][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.925770][ T6195] Call Trace: [ 367.929106][ T6195] [ 367.932041][ T6195] __dump_stack+0x21/0x30 [ 367.936523][ T6195] dump_stack_lvl+0x110/0x170 [ 367.941189][ T6195] ? show_regs_print_info+0x20/0x20 [ 367.946394][ T6195] ? load_image+0x3f0/0x3f0 [ 367.950886][ T6195] print_address_description+0x7f/0x2c0 [ 367.956415][ T6195] ? tc_setup_flow_action+0x88e/0x3200 [ 367.961858][ T6195] kasan_report+0x10f/0x150 [ 367.966403][ T6195] ? tc_setup_flow_action+0x88e/0x3200 [ 367.971846][ T6195] __asan_report_load8_noabort+0x14/0x20 [ 367.977463][ T6195] tc_setup_flow_action+0x88e/0x3200 [ 367.982740][ T6195] mall_replace_hw_filter+0x2db/0x8d0 [ 367.988187][ T6195] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 367.994240][ T6195] ? mall_set_parms+0x520/0x520 [ 367.999073][ T6195] ? tcf_exts_destroy+0xb0/0xb0 [ 368.003912][ T6195] ? pcpu_alloc+0x1118/0x16f0 [ 368.008575][ T6195] ? mall_set_parms+0x1e4/0x520 [ 368.013409][ T6195] mall_change+0x544/0x760 [ 368.017809][ T6195] ? __kasan_check_write+0x14/0x20 [ 368.022904][ T6195] ? mall_get+0xa0/0xa0 [ 368.027040][ T6195] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 368.032920][ T6195] ? mall_get+0xa0/0xa0 [ 368.037060][ T6195] tc_new_tfilter+0x13df/0x1990 [ 368.041897][ T6195] ? tcf_gate_entry_destructor+0x20/0x20 [ 368.047512][ T6195] ? security_capable+0x87/0xb0 [ 368.052434][ T6195] ? ns_capable+0x8c/0xf0 [ 368.056782][ T6195] ? netlink_net_capable+0x125/0x160 [ 368.062056][ T6195] ? tcf_gate_entry_destructor+0x20/0x20 [ 368.067674][ T6195] rtnetlink_rcv_msg+0x83c/0xcb0 [ 368.072643][ T6195] ? rtnetlink_bind+0x80/0x80 [ 368.077309][ T6195] ? avc_has_perm_noaudit+0x390/0x490 [ 368.082740][ T6195] ? memcpy+0x56/0x70 [ 368.086720][ T6195] ? avc_has_perm_noaudit+0x30a/0x490 [ 368.092076][ T6195] ? arch_stack_walk+0xee/0x140 [ 368.096942][ T6195] ? avc_denied+0x1b0/0x1b0 [ 368.101435][ T6195] ? stack_trace_save+0xa6/0xf0 [ 368.106334][ T6195] ? avc_has_perm+0x163/0x250 [ 368.111019][ T6195] ? avc_has_perm_noaudit+0x490/0x490 [ 368.116383][ T6195] ? x64_sys_call+0x4b/0x9a0 [ 368.121022][ T6195] ? selinux_nlmsg_lookup+0x39d/0x440 [ 368.126416][ T6195] netlink_rcv_skb+0x1e9/0x430 [ 368.131175][ T6195] ? rtnetlink_bind+0x80/0x80 [ 368.135839][ T6195] ? netlink_ack+0xb10/0xb10 [ 368.140420][ T6195] ? _copy_from_iter+0x4a4/0x10a0 [ 368.145469][ T6195] ? __netlink_lookup+0x387/0x3b0 [ 368.150484][ T6195] rtnetlink_rcv+0x1c/0x20 [ 368.154887][ T6195] netlink_unicast+0x86c/0xa30 [ 368.159650][ T6195] netlink_sendmsg+0x879/0xb80 [ 368.164403][ T6195] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 368.170125][ T6195] ? netlink_getsockopt+0x530/0x530 [ 368.175322][ T6195] ? security_socket_sendmsg+0x82/0xa0 [ 368.180764][ T6195] ? netlink_getsockopt+0x530/0x530 [ 368.185946][ T6195] ____sys_sendmsg+0x5be/0x8f0 [ 368.190765][ T6195] ? __sys_sendmsg_sock+0x40/0x40 [ 368.195771][ T6195] ? import_iovec+0x7c/0xb0 [ 368.200297][ T6195] ___sys_sendmsg+0x236/0x2e0 [ 368.204959][ T6195] ? __sys_sendmsg+0x280/0x280 [ 368.209705][ T6195] ? sock_show_fdinfo+0xa0/0xa0 [ 368.214558][ T6195] ? __fdget+0x1a1/0x230 [ 368.218829][ T6195] __x64_sys_sendmsg+0x201/0x2d0 [ 368.223750][ T6195] ? ___sys_sendmsg+0x2e0/0x2e0 [ 368.228584][ T6195] ? __kasan_check_write+0x14/0x20 [ 368.233678][ T6195] ? switch_fpu_return+0x15d/0x2c0 [ 368.238776][ T6195] x64_sys_call+0x4b/0x9a0 [ 368.243178][ T6195] do_syscall_64+0x4c/0xa0 [ 368.247578][ T6195] ? clear_bhb_loop+0x50/0xa0 [ 368.252244][ T6195] ? clear_bhb_loop+0x50/0xa0 [ 368.256902][ T6195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.262792][ T6195] RIP: 0033:0x7f3d9b0a00d9 [ 368.267246][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.286834][ T6195] RSP: 002b:00007f3d99af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.295282][ T6195] RAX: ffffffffffffffda RBX: 00007f3d9b327fa0 RCX: 00007f3d9b0a00d9 [ 368.303239][ T6195] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 368.311228][ T6195] RBP: 00007f3d9b137024 R08: 0000000000000000 R09: 0000000000000000 [ 368.319203][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.327165][ T6195] R13: 00007f3d9b328038 R14: 00007f3d9b327fa0 R15: 00007ffe10908b38 [ 368.335141][ T6195] [ 368.338152][ T6195] [ 368.340461][ T6195] Allocated by task 6195: [ 368.344834][ T6195] __kasan_kmalloc+0xd4/0x100 [ 368.349498][ T6195] __kmalloc+0x13d/0x2c0 [ 368.353734][ T6195] tcf_idr_create+0x5f/0x790 [ 368.358309][ T6195] tcf_idr_create_from_flags+0x61/0x70 [ 368.363750][ T6195] tcf_gact_init+0x342/0x570 [ 368.368323][ T6195] tcf_action_init_1+0x3fd/0x6b0 [ 368.373240][ T6195] tcf_action_init+0x233/0x7a0 [ 368.377983][ T6195] tcf_exts_validate+0x24a/0x580 [ 368.382903][ T6195] mall_set_parms+0x48/0x520 [ 368.387474][ T6195] mall_change+0x478/0x760 [ 368.391870][ T6195] tc_new_tfilter+0x13df/0x1990 [ 368.396730][ T6195] rtnetlink_rcv_msg+0x83c/0xcb0 [ 368.401654][ T6195] netlink_rcv_skb+0x1e9/0x430 [ 368.406401][ T6195] rtnetlink_rcv+0x1c/0x20 [ 368.410796][ T6195] netlink_unicast+0x86c/0xa30 [ 368.415542][ T6195] netlink_sendmsg+0x879/0xb80 [ 368.420287][ T6195] ____sys_sendmsg+0x5be/0x8f0 [ 368.425029][ T6195] ___sys_sendmsg+0x236/0x2e0 [ 368.429685][ T6195] __x64_sys_sendmsg+0x201/0x2d0 [ 368.434607][ T6195] x64_sys_call+0x4b/0x9a0 [ 368.439007][ T6195] do_syscall_64+0x4c/0xa0 [ 368.443407][ T6195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.449281][ T6195] [ 368.451586][ T6195] The buggy address belongs to the object at ffff888115c28300 [ 368.451586][ T6195] which belongs to the cache kmalloc-192 of size 192 [ 368.465889][ T6195] The buggy address is located 0 bytes to the right of [ 368.465889][ T6195] 192-byte region [ffff888115c28300, ffff888115c283c0) [ 368.479508][ T6195] The buggy address belongs to the page: [ 368.485138][ T6195] page:ffffea0004570a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115c28 [ 368.495365][ T6195] flags: 0x4000000000000200(slab|zone=1) [ 368.501085][ T6195] raw: 4000000000000200 ffffea00043c8880 0000000200000002 ffff888100042c00 [ 368.509676][ T6195] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 368.518409][ T6195] page dumped because: kasan: bad access detected [ 368.524803][ T6195] page_owner tracks the page as allocated [ 368.530554][ T6195] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 4665022445, free_ts 0 [ 368.545552][ T6195] post_alloc_hook+0x192/0x1b0 [ 368.550305][ T6195] prep_new_page+0x1c/0x110 [ 368.554790][ T6195] get_page_from_freelist+0x2c3a/0x2cd0 [ 368.560318][ T6195] __alloc_pages+0x1a2/0x460 [ 368.564896][ T6195] new_slab+0xa0/0x4d0 [ 368.568966][ T6195] ___slab_alloc+0x3ac/0x840 [ 368.573549][ T6195] __slab_alloc+0x49/0x90 [ 368.577867][ T6195] kmem_cache_alloc_trace+0x146/0x270 [ 368.583230][ T6195] kernfs_fop_open+0x375/0xbb0 [ 368.588061][ T6195] do_dentry_open+0x82a/0x1010 [ 368.592811][ T6195] vfs_open+0x73/0x80 [ 368.596790][ T6195] path_openat+0x26e6/0x2f80 [ 368.601403][ T6195] do_filp_open+0x1df/0x400 [ 368.605894][ T6195] do_sys_openat2+0x15e/0x7f0 [ 368.610557][ T6195] __x64_sys_openat+0x136/0x160 [ 368.615387][ T6195] x64_sys_call+0x219/0x9a0 [ 368.619875][ T6195] page_owner free stack trace missing [ 368.625220][ T6195] [ 368.627539][ T6195] Memory state around the buggy address: [ 368.633155][ T6195] ffff888115c28280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 368.641201][ T6195] ffff888115c28300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 368.649248][ T6195] >ffff888115c28380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 368.657293][ T6195] ^ [ 368.663439][ T6195] ffff888115c28400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.671496][ T6195] ffff888115c28480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.679544][ T6195] ================================================================== [ 368.687589][ T6195] Disabling lock debugging due to kernel taint [ 368.699492][ T30] audit: type=1400 audit(1786174509.247:743): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 368.771997][ T30] audit: type=1400 audit(1786174509.247:744): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.812465][ T30] audit: type=1400 audit(1786174509.247:745): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.848004][ T30] audit: type=1400 audit(1786174509.247:746): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.868553][ T30] audit: type=1400 audit(1786174509.247:747): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.889000][ T30] audit: type=1400 audit(1786174509.247:748): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.912041][ T30] audit: type=1400 audit(1786174509.247:749): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1