last executing test programs: 8.986949981s ago: executing program 0 (id=68): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbc6, &(0x7f00000027c0)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000740)}], 0x1, 0x5a00, 0x0, 0x1a) 8.848453724s ago: executing program 0 (id=69): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 8.010764602s ago: executing program 3 (id=71): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbmon(0x0, 0x8, 0x2000) ppoll(&(0x7f00000000c0)=[{r4, 0x4}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) sched_setaffinity(r1, 0x53, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) read$FUSE(r0, &(0x7f0000001440)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 7.705612109s ago: executing program 4 (id=72): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', 0x0, &(0x7f0000000840), 0x120c002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000003f80)='.\x00', 0x50000, 0x0) getdents(r0, &(0x7f0000000600)=""/205, 0xcd) 7.699559059s ago: executing program 1 (id=73): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x962, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.126930542s ago: executing program 4 (id=74): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 6.690383802s ago: executing program 3 (id=75): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 6.042460526s ago: executing program 4 (id=76): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) 5.85924047s ago: executing program 4 (id=78): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) eventfd2(0x4, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r3], 0x0) 5.583108316s ago: executing program 0 (id=79): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbc6, &(0x7f00000027c0)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000740)}], 0x1, 0x5a00, 0x0, 0x1a) 5.473798979s ago: executing program 3 (id=80): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x40, 0xd, 0x3, "2cd89c"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 5.368993531s ago: executing program 1 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x0, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x100000000}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x2, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000000863073120400021020301090269000301ecb37f080b0002010520720904000000010120000924010401070900030904010000010220000904010101010203d7030009040200000102200009040201240102200009058209"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 5.227482834s ago: executing program 0 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x898, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x201, 0x1, 0xff, 0xbd, 0x3, 0xffff, 0x200, 0x0, 0x7fff, 0x5, 0x0, 0xd, 0x3, 0x3, 0x5, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x1, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x3ff, 0x5f24, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0xd, 0xb1, 0x10, 0x2768, 0x200, 0x1, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0x9, 0x4, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0x7, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x0, 0x3, 0x401, 0xfffffffb, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x3c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x6f41, 0x6, 0x2, 0xa, 0x2, 0xec6f, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x9, 0x6, 0x5, 0x6, 0x2e80, 0x6, 0x4, 0x9, 0x0, 0xffffffab, 0x3, 0x1000, 0x3ff, 0x1, 0x3, 0x2e70, 0x8, 0xfbd6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x64a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x470121f0, 0x93d0, 0x9, 0x3, 0xfffffff9, 0x3, 0x8, 0xf935, 0x10000007, 0x8, 0x8000, 0x40, 0x4, 0x4, 0x4, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0xfffffffd, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x0, 0x80000001, 0x1, 0x0, 0x1000, 0x40, 0x1, 0x80000001, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x6, 0x14a, 0x1, 0x7aa, 0x9, 0x3ff, 0xfffffff7, 0x3ff, 0xb, 0x81, 0xc76, 0x7f, 0x24, 0x5, 0x100, 0x400, 0x8, 0x5, 0x8e, 0x6f7, 0xd9, 0x1000, 0x5, 0x26a2, 0x4, 0x3, 0x1, 0x6, 0xc, 0x7, 0x2, 0x7d8, 0x7e, 0x7, 0x3, 0x6, 0x2, 0x5, 0xe, 0x100, 0x5, 0x0, 0x81, 0x1, 0x4, 0x6, 0x497, 0x8000, 0x3, 0xaf, 0x11, 0x8, 0x3d, 0x1000, 0x9, 0x3, 0x9, 0x80, 0x3, 0x1, 0x6, 0x2, 0xffffffff, 0x4, 0x0, 0x1, 0x0, 0x7fff, 0x200, 0x8, 0xa, 0x80000008, 0x1, 0x9c, 0x5260, 0x8, 0xff, 0x9303, 0x5, 0x0, 0x8, 0x2, 0xeca9, 0x400, 0xfa47, 0x80, 0x1, 0x9, 0x2, 0x10001, 0x4, 0x8d, 0x0, 0x8, 0x3, 0x80000000, 0xe, 0xffffcfbb, 0xb3dc, 0x401, 0x0, 0x0, 0x2, 0x3ff, 0x6, 0x401, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x7ff000, 0xfffffff8, 0x0, 0x1, 0x9, 0xfffffffc, 0x1, 0xdb, 0x0, 0x0, 0x100, 0x5, 0x0, 0x4, 0x7, 0x800, 0x2, 0x3, 0x7, 0x7, 0x5, 0x0, 0xfffffffa, 0x7fffffff, 0xffffff81, 0x6, 0x9, 0x8e, 0x9, 0xf, 0x0, 0x8, 0xe, 0x0, 0xffff8001, 0x0, 0x1ff, 0x1, 0x4, 0x3, 0x3, 0x100, 0x9, 0x7, 0x4, 0x6, 0x5, 0x9, 0x401, 0x1, 0x1, 0xaf53, 0x3, 0x4, 0x1, 0x1222, 0x8, 0xf4, 0x6, 0x9, 0xc, 0xe, 0x6, 0x9, 0x1, 0x345, 0x5fc, 0x7fff, 0x7, 0x5, 0x5, 0x2, 0x81, 0xff, 0x7, 0x1, 0x8000, 0x9, 0x2, 0x5, 0x2, 0x3, 0xa, 0xe8a7, 0x3ffc00, 0xab7, 0x4, 0x8, 0x5, 0xff, 0x1, 0x8ca, 0x4, 0x6eb38b0, 0x5, 0x9, 0x200, 0x7, 0xc, 0x8, 0x80000000, 0x200, 0xbe9d, 0x7, 0x7, 0x0, 0x3, 0x2c, 0x0, 0x9, 0x9, 0x7, 0xffffff06, 0xac, 0x3ff, 0x8000, 0x80000000, 0x2dfc, 0x75bc, 0x9, 0x5, 0x80000001, 0x10, 0x10000, 0x3ff, 0x1ec, 0x92, 0x7fffffff, 0x40000, 0x0, 0x101, 0xf, 0x9, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7ff, 0xa, 0xecbf, 0xb, 0x8001, 0xe57]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x1, 0x2, 0x6, 0x9, 0x10001}, {0x3, 0x0, 0x703, 0x2, 0x1, 0x1}, 0x0, 0x2a6, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x40041}, 0x2400c800) 5.195731475s ago: executing program 0 (id=83): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda443000090401010101023000090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000080)={0x40, 0x17, 0x4, "aa3579bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.05497858s ago: executing program 4 (id=87): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x249, &(0x7f00000007c0)="$eJzs3UFoFFcYB/BvZnebJllK2l4KhbZQSmkDIb0VekkvLQRKCKUU2kJKKb20JIU0obfEkxcPelbJyUsQb0aPkkvwogieouYQL4IGDwYPeliZnUSiWTUycUczvx9MMrP73nxvmP2/WRaGCaCyBiJiJCJqETEYEY2ISHY2+CRfBrY2F3pXJiJarR/vJu12+XZuu19/RMxHxNcRsZwm8Xc9Ynbp1/X7q99/fmSm8dmppV96u3qQWzbW137YPDl2+OzoV7OXr94eS2Ikmk8c1/5LOrxWTyLeexXFXhNJvewRsBfj/5+5luX+/Yj4tJ3/RqSRn7yj028tN+LLE8/qe+zOlQ+7OVZg/7VajewaON8CKieNiGYk6VBE5OtpOjSUf4e/XutL/5ma/m/wr6mZyT/LnqmA/dKMWPvufM+5/qfyf6uW5x84uLL8/zS+eCNb36ztuVvS6fcs4M2S5X/w97kv4uXyDxwA8g/VJf9QXfIP1fW8/KcljQnoDtd/qC75h+qSf6gu+Yfqkn+orp35BwCqpdVT9h3IQFnKnn8AAAAAAAAAAAAAAAAAAIDdFnpXJraXbtW8eDxi49uIqHeqX9t6DsHb7b9995Ks2WNJ3q2Q3z4uuIOCTpd89/U7N8utf+mjcuvPTUbMH4qI4Xp99+cvKfwcjHdf8H7jj4IFCvrm53LrP1wst/7oasSFbP4Z7jT/pPFB+3/n+aeZnb+C9f99UHAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdM2jAAAA//9BqW0t") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000033358f4864ca8d4a3a8a376204b45c5949cd6f92fd5ac4c15b2f423ffb9425ccc7f17017bbb450f83e37f5eec7f89754"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84842, 0x181) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 3.386886224s ago: executing program 1 (id=88): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) 3.342399936s ago: executing program 1 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x38, 0x100, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.305181186s ago: executing program 1 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcf) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f00000018c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) ptrace$getregs(0xe, r2, 0xb, &(0x7f00000014c0)=""/4096) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 1.034139007s ago: executing program 0 (id=92): syz_usb_connect(0x3, 0x35, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000c00)=ANY=[], 0x2, 0x1286, &(0x7f0000002440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000008c0)={'IDLETIMER\x00'}, &(0x7f0000000900)=0x1e) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write(r4, &(0x7f0000000340)="240000005a001fadd28f74d1425b8c6f9d1cde4907f4b900238400d9cf934d0800050002", 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000640)={{r5}, r7, 0x0, @inherit={0x58, &(0x7f00000005c0)={0x0, 0x2, 0xffffffffffffffff, 0xbcc, {0x24, 0x1, 0x8, 0x0, 0x7}, [0x9, 0xb]}}, @devid}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000640)={{r8}, r10, 0x0, @inherit={0x58, &(0x7f00000005c0)={0x0, 0x2, 0xffffffffffffffff, 0xbcc, {0x24, 0x1, 0x8, 0x0, 0x7}, [0x9, 0xb]}}, @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000380)={"3cdf041979cfe1066fc7f79099e26047", r7, r10, {0xf, 0xd93}, {0x4, 0x9}, 0x1, [0x4, 0x7ff, 0x8, 0x400, 0x5, 0x1, 0x100000001, 0x1, 0x36, 0x10000, 0x7, 0x7, 0x2, 0x0, 0x8, 0x9]}) 678.883375ms ago: executing program 3 (id=93): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm0xAzyZTMpDQhixYR3ChaXAi66dpq3bn1x1b/CxfSUjUtVlxI5E5m2kkzk07a+VHI5wM3c8695+ac75z748zcy9wA9q3x9E8m4nBEfJREjFbnJxExUEn1R5zcKnd3Yz2XTklsbr75W1Ipc2djPRd166QOVjP/j4jv34s4ktlZb2l1bWGmUMgvV/OT5cXzk6XVtaPzizNz+bn80vGp6eljJ144cbx9sf7x09qhmx+/9uxXJ/9693/XP/ghiZNxqLqsPo52GY/x6nsykL6F27za7sp6LOl1A3gk6a7Zt7WXx+EYjb5KqonhbrYMAOiUTQBgH0qMAQBgn6l9D3BnYz1Xm3r7jUR33XolIg5sxV+7vrm1pL96ze5A5TroyJ1k25WRJCLG2lD/eMSHVyKuff7N29ei2g+upQHdcOlyRJwdG995/E923LOwV8/ttnBzqPIy/sDs/Xb+gV76Nh3/vNho/Je5N/6JBuOfoQb77qN4+P6fudGGappKx38v193bdrcu/qqxvmruX5Ux30Bybr6QT49t/46IiRgYSvNTlaKNR24Tt/++3az+NP507JdOv19554u0/vT1fonMjf6h7evMzpRnHjfumluXI57qbxR/cq//kybj39Mt1vH6S+9/1mxZGn8ab23aGX9nbV6NeKZh/9/vy2TX+xMnK5vDZG2jaODrnz8daVZ/ff+nU1p/7bNAN6T9P7J7/GNJ/f2apb3X8ePV0e+aLXt4/I23/8HkrUp6sDrv4ky5vDwVMZi8sXP+sfvr1vK18mn8E0833v+3qm28/aefCc+2GH//zV+/fPT4OyuNf3ZP/b/3xPW7C33N6m+t/6crqYnqnFaOf6028HHeOwAAAAAAAAAAAAAAAAAAAAAAAABoVSYiDkWSyd5LZzLZ7NYzvP8bI5lCsVQ+cq64sjQblWdlj8VApvZTl6N1v4c6Vf09/Ep+oJA/Vp+fL+Sfj4j/RMQnQ8OVfDZXLMz2OngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDrY5Pn/qV+Get06AKBjDvS6AQBA1zn/A8D+s7fz/3DH2gEAdI/P/wCw/7R8/j/b2XYAAN3z4Pm/r1GhhjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJadPnUqnzT831nNpfvbC6spC8cLR2XxpIbu4ksvmisvns3PF4lwhn80VF7etnKlLX9p6KRSL56djaeXiZDlfKk+WVtfOLBZXlspn5hdn5vJn8gNdjQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWlNaXVuYKRTyyxK7Jobb8X8Gex1F+xL98UQ0Q6JjifqjxHDvDlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7h/AgAA///wSSzL") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80241, 0x48) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 677.083895ms ago: executing program 1 (id=94): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x962, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 576.035247ms ago: executing program 2 (id=96): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 547.394257ms ago: executing program 2 (id=97): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) read$FUSE(r0, 0x0, 0x0) 419.82789ms ago: executing program 2 (id=98): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) 419.27716ms ago: executing program 3 (id=99): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) 411.32433ms ago: executing program 2 (id=100): syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) 222.177965ms ago: executing program 3 (id=101): syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x80000001, 0x20, @empty, @remote, 0x80, 0x8, 0x0, 0x4}}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x2, 0x3c}, 0x0, @in=@empty, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 221.670145ms ago: executing program 4 (id=102): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xfffc, 0x2, 0x3, 0x9}]}) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r5, 0x852ac000) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000480)=[{&(0x7f0000001940)=""/4104, 0x1008}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x8000) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 159.126556ms ago: executing program 2 (id=103): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x80241, 0x48) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 2 (id=104): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbc6, &(0x7f00000027c0)="$eJzs3N1rXGUaAPDnnEwmaZvdSZdl2e7NZlmWFpadJl1StmVh26XL3ngh6K3QkE5KyPSDJFKT5mKi/4Co14I3gloUL+x1bxS99UbbW8ULoUhsFEQ0cuYjic1MmtqZnJr8fvDOed/zzszzPHOYOeeFmQlg3xrJbtKIIxFxPokoNfenEVGs9wYjao37ra4sTX67sjSZxNraU18lkUTEvZWlydZzJc3toeZgMCI+/m8Sv3tha9y5hcWZiWq1MtscH5+/dPX43MLiP6YvTVysXKxcHjv5r/ET4ydHT413rdbvPjtz85u//P+L2vdv/nDj65dfT+JMDDXnNtfRLSMxsv6abFaIiIluB8tJX7OezXUmhQc8KO1xUgAAdJRuuob7Q5SiLzYu3krx/ie5JgcAAAB0xVpfxBoAAACwxyXW/wAAALDHtb4HcG9labLV8v1Gwu66ezYihhv1rzZbY6YQtfp2MPoj4uC9JDb/rDVpPOyRjUTE53dOvZO16NHvkLdTW46IP7Y7/km9/uH6r7i31p9GxGgX4o/cN/411X+mC/Hzrh+A/enW2caJbOv5L12//ok2579Cm3PXL5H3+a91/be65fpvo/6+Dtd/T+4wxvU3Xr3WaS6r/983//d2q2Xxs+0jFfUQ7i5H/KnQrv5kvf6kQ/3ndxij9OO1Sqe5vOtfey3iaLSvvyXZ/v+Jjk9NVyujjdu2MZY/Gn+rU/y868+O/8EO9bf+/6nT8b+6wxjPnDv37paddza629effllMnq73is09z03Mz8+ORRSTJ7buP7F9Lq37tJ4jq//YX7d//7erP/tMqDVfh2wtsNzcZuPn74v5nxvX3+uUT2v9l+fxv9Dh+G+u/8PC1uP/4g5j/O2Dl451mtu8/s1aFr+1FgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAljQihiJJy+v9NC2XIw5FxO/jYFq9Mjf/96krz16+kM1FDEd/OjVdrYxGRKkxTrLxWL2/MT5x3/ifEXE4Il4pHaiPy5NXqhfyLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB1hyJiKJK0HBFpRKyW0rRczjsrAAAAoOuG2+1Mdz8PAAAAoHfarv8BAACAPcX6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB47/Odbt5OIqJ0+UG+ZYnOuP9fMgF5L804AyE1f3gkAuSnknQCQm4dc47tcgD0oecD8YMeZga7nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDj6+iRW7eTiKidPlBvmWJzrj/XzIBeS/NOAMhN33aThd3LA9h93uKwf1njA8kD5gc37lP7+cxAz3ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PEzVG9JWo6IYnNfuRzxm4gYjv5karpaGY2I30bEp6X+gWw8lnPOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdN/cwuLMRLVamc06aTQ763t0NjpJ4xWrPS757IvOQET0KkSxZ8+8Fzp5fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCHuYXFmYlqtTI7l3cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN7mFhZnJqrVymwPO3nXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfn4KAAD//yFUCMc=") creat(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="af235b54a59bc012e3b61c405045b8e6637389e591f4a5b2034d", 0x1a}], 0x1, 0x5a00, 0x0, 0x1a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 21.655277][ T24] audit: type=1400 audit(1784108745.360:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.656353][ T271] cgroup: Unknown subsys name 'net' [ 21.678192][ T24] audit: type=1400 audit(1784108745.360:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.705496][ T24] audit: type=1400 audit(1784108745.390:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.705793][ T271] cgroup: Unknown subsys name 'devices' [ 21.815000][ T271] cgroup: Unknown subsys name 'hugetlb' [ 21.820633][ T271] cgroup: Unknown subsys name 'rlimit' [ 21.958604][ T24] audit: type=1400 audit(1784108745.660:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.981920][ T24] audit: type=1400 audit(1784108745.660:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.006962][ T24] audit: type=1400 audit(1784108745.660:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.012858][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.039123][ T24] audit: type=1400 audit(1784108745.740:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.064963][ T24] audit: type=1400 audit(1784108745.740:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.091569][ T24] audit: type=1400 audit(1784108745.790:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.117244][ T24] audit: type=1400 audit(1784108745.790:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.143376][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.602892][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.610024][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.617556][ T279] device bridge_slave_0 entered promiscuous mode [ 22.625515][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.632824][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.642527][ T279] device bridge_slave_1 entered promiscuous mode [ 22.705206][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.712367][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.719947][ T280] device bridge_slave_0 entered promiscuous mode [ 22.727903][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.735053][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.742350][ T280] device bridge_slave_1 entered promiscuous mode [ 22.775624][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.782680][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.790252][ T281] device bridge_slave_0 entered promiscuous mode [ 22.811414][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.818566][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.825904][ T281] device bridge_slave_1 entered promiscuous mode [ 22.868613][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.875713][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.882958][ T283] device bridge_slave_0 entered promiscuous mode [ 22.891161][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.898257][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.905617][ T283] device bridge_slave_1 entered promiscuous mode [ 22.925817][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.932859][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.940331][ T282] device bridge_slave_0 entered promiscuous mode [ 22.947736][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.954828][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.962087][ T282] device bridge_slave_1 entered promiscuous mode [ 23.059666][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.066731][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.074139][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.081372][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.095202][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.102254][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.109537][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.116570][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.130416][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.137497][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.145127][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.152150][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.164219][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.171265][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.178536][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.185573][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.230267][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.237336][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.244813][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.251934][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.262968][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.270518][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.277888][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.285872][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.293018][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.300243][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.307433][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.314869][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.322132][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.329580][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.336770][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.344331][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.351776][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.379600][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.387493][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.395943][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.403129][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.410990][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.419625][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.426778][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.434228][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.442463][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.449717][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.457301][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.465499][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.472601][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.480101][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.488241][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.495280][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.502574][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.510839][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.518011][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.525531][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.533801][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.541733][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.560114][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.567883][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.576111][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.583138][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.591116][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.599536][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.606710][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.627970][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.636184][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.644668][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.652658][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.660789][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.668974][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.676460][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.684645][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.692518][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.700954][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.709220][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.716258][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.723816][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.732067][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.740244][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.747354][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.771763][ T280] device veth0_vlan entered promiscuous mode [ 23.778562][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.787872][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.796572][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.804713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.812617][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.821153][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.829572][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.837868][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.846282][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.854463][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.862396][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.870113][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.882737][ T281] device veth0_vlan entered promiscuous mode [ 23.894430][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.902813][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.911188][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.919895][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.928583][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.936889][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.945286][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.953182][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.961328][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.968901][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.981975][ T279] device veth0_vlan entered promiscuous mode [ 23.991500][ T283] device veth0_vlan entered promiscuous mode [ 23.998636][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.007088][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.016023][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.024752][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.032911][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.040911][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.049015][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.056896][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.064927][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.072483][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.080215][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.087690][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.102764][ T282] device veth0_vlan entered promiscuous mode [ 24.111179][ T281] device veth1_macvtap entered promiscuous mode [ 24.118635][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.127036][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.135895][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.143696][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.151177][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.159618][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.167779][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.175991][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.186078][ T280] device veth1_macvtap entered promiscuous mode [ 24.195148][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.202837][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.211124][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.228805][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.237143][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.245637][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.254469][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.262791][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.271111][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.279696][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.288190][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.303105][ T279] device veth1_macvtap entered promiscuous mode [ 24.310816][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.318791][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.327724][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.335979][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.345018][ T282] device veth1_macvtap entered promiscuous mode [ 24.355566][ T283] device veth1_macvtap entered promiscuous mode [ 24.366592][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.374683][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.383197][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.383542][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 24.402443][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.420134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.429684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.444318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.452540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.461132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.469526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.478160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.486555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.496371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.505140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.840983][ T314] EXT4-fs (loop2): Ignoring removed orlov option [ 24.936669][ T5] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.973073][ T314] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 25.374785][ T5] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.423511][ T5] usb 1-1: not running at top speed; connect to a high speed hub [ 25.717730][ T5] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 25.726730][ T5] usb 1-1: config 0 has no interface number 0 [ 25.733540][ T5] usb 1-1: config 0 interface 175 has no altsetting 0 [ 28.133494][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 28.133527][ T24] audit: type=1400 audit(1784108749.650:110): avc: denied { create } for pid=325 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.195207][ T334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.453955][ T24] audit: type=1400 audit(1784108749.660:111): avc: denied { write } for pid=325 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.525989][ T24] audit: type=1400 audit(1784108749.660:112): avc: denied { nlmsg_read } for pid=325 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.573009][ T24] audit: type=1400 audit(1784108749.670:113): avc: denied { prog_load } for pid=325 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.652430][ T24] audit: type=1400 audit(1784108749.670:114): avc: denied { bpf } for pid=325 comm="syz.2.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.691852][ T24] audit: type=1400 audit(1784108751.580:115): avc: denied { perfmon } for pid=325 comm="syz.2.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.713357][ T24] audit: type=1400 audit(1784108751.590:116): avc: denied { prog_run } for pid=325 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.713929][ T5] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 28.732071][ T24] audit: type=1400 audit(1784108751.880:117): avc: denied { read } for pid=325 comm="syz.2.7" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.713783][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.021639][ T24] audit: type=1400 audit(1784108751.880:118): avc: denied { open } for pid=325 comm="syz.2.7" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.077056][ T5] usb 1-1: config 0 descriptor?? [ 31.082214][ T24] audit: type=1400 audit(1784108751.890:119): avc: denied { ioctl } for pid=325 comm="syz.2.7" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.106575][ T5] usb 1-1: can't set config #0, error -71 [ 31.114212][ T5] usb 1-1: USB disconnect, device number 2 [ 31.219432][ T346] F2FS-fs (loop0): invalid crc value [ 31.226293][ T346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.260486][ T346] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 31.274069][ T346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.278337][ T362] ====================================================== [ 31.278337][ T362] WARNING: the mand mount option is being deprecated and [ 31.278337][ T362] will be removed in v5.15! [ 31.278337][ T362] ====================================================== [ 31.325306][ T362] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.338601][ T362] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.356085][ T362] EXT4-fs (loop4): 1 truncate cleaned up [ 31.373944][ T362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 31.426659][ T376] attempt to access beyond end of device [ 31.426659][ T376] loop0: rw=0, want=45072, limit=40427 [ 32.433443][ T384] EXT4-fs (loop3): Ignoring removed orlov option [ 32.469520][ T384] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 32.843210][ T404] binder: BINDER_SET_CONTEXT_MGR already set [ 32.852748][ T404] binder: 402:404 ioctl 4018620d 200000004a80 returned -16 [ 32.860297][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.878818][ T405] EXT4-fs (loop3): Ignoring removed bh option [ 32.885206][ T405] EXT4-fs (loop3): Ignoring removed bh option [ 32.924088][ T405] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 32.987478][ T405] EXT4-fs (loop3): re-mounted. Opts: (null) [ 33.010137][ T279] EXT4-fs error (device loop3): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /4/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 33.032501][ T279] EXT4-fs error (device loop3): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /4/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 33.066111][ T409] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 33.075805][ T409] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.093177][ T409] F2FS-fs (loop0): invalid crc value [ 33.101266][ T409] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.113383][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 33.138265][ T417] fuse: Invalid rootmode [ 33.185784][ T409] F2FS-fs (loop0): Start checkpoint disabled! [ 33.192298][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 33.192308][ T24] audit: type=1400 audit(1784108756.890:144): avc: denied { read write } for pid=418 comm="syz.3.27" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.222367][ T24] audit: type=1400 audit(1784108756.890:145): avc: denied { open } for pid=418 comm="syz.3.27" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.222612][ T409] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.252834][ T24] audit: type=1400 audit(1784108756.890:146): avc: denied { ioctl } for pid=418 comm="syz.3.27" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.259996][ T409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 33.303447][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.322280][ T24] audit: type=1400 audit(1784108756.910:147): avc: denied { create } for pid=418 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.344071][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 33.373448][ T5] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 33.378960][ T24] audit: type=1400 audit(1784108756.910:148): avc: denied { connect } for pid=418 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.393409][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.403022][ T24] audit: type=1400 audit(1784108757.010:149): avc: denied { read append open } for pid=407 comm="syz.0.24" path="/4/file0/memory.events.local" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.420133][ T5] usb 3-1: config 0 descriptor?? [ 33.484018][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 33.492652][ T428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 33.623378][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.863399][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 34.023410][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.038788][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.048992][ T24] audit: type=1400 audit(1784108757.750:150): avc: denied { map } for pid=432 comm="syz.3.30" path="socket:[15065]" dev="sockfs" ino=15065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 34.131514][ T112] attempt to access beyond end of device [ 34.131514][ T112] loop0: rw=2049, want=45104, limit=40427 [ 34.213904][ T438] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 34.220424][ T24] audit: type=1400 audit(1784108757.920:151): avc: denied { create } for pid=437 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.239977][ T24] audit: type=1400 audit(1784108757.920:152): avc: denied { create } for pid=437 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.287574][ T20] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 34.297069][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.305287][ T20] usb 2-1: Product: syz [ 34.309474][ T20] usb 2-1: Manufacturer: syz [ 34.314206][ T20] usb 2-1: SerialNumber: syz [ 34.343442][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.410895][ T440] process 'syz.0.32' launched '/dev/fd/8' with NULL argv: empty string added [ 34.464238][ T24] audit: type=1400 audit(1784108758.110:153): avc: denied { create } for pid=437 comm="syz.0.32" dev="anon_inodefs" ino=15965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.723964][ T20] usb 2-1: unit 6 not found! [ 34.751754][ T20] usb 2-1: USB disconnect, device number 2 [ 34.757833][ T338] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.140971][ T443] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.173885][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.263517][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.274395][ T338] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.360864][ T338] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.370054][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.378065][ T338] usb 1-1: SerialNumber: syz [ 35.383392][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 35.471656][ T454] fuse: Invalid rootmode [ 35.476018][ T441] usb 3-1: USB disconnect, device number 2 [ 35.493433][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.513532][ T284] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.523472][ T5] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 35.531780][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.541939][ T5] usb 4-1: config 1 has no interface number 0 [ 35.548187][ T5] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.558184][ T5] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.571207][ T5] usb 4-1: config 1 interface 105 has no altsetting 0 [ 35.733460][ T5] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 35.742778][ T5] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 35.743518][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 35.751050][ T5] usb 4-1: Product: syz [ 35.760559][ T5] usb 4-1: Manufacturer: syz [ 35.765233][ T5] usb 4-1: SerialNumber: syz [ 35.793484][ T436] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 35.893465][ T441] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.923418][ T284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.003451][ T284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.013840][ T284] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.022779][ T284] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 36.033883][ T20] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 36.043008][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.043017][ T20] usb 2-1: Product: syz [ 36.043024][ T20] usb 2-1: Manufacturer: syz [ 36.043030][ T20] usb 2-1: SerialNumber: syz [ 36.043366][ T284] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 36.043381][ T284] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.043398][ T284] usb 5-1: config 1 interface 1 has no altsetting 0 [ 36.113669][ T5] aqc111: probe of 4-1:1.105 failed with error -22 [ 36.133410][ T441] usb 3-1: Using ep0 maxpacket: 16 [ 36.253501][ T441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 36.264818][ T441] usb 3-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 36.274136][ T441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.282975][ T441] usb 3-1: config 0 descriptor?? [ 36.288018][ T284] usb 5-1: string descriptor 0 read error: -22 [ 36.294421][ T284] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 36.303847][ T284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.316931][ T5] usb 4-1: USB disconnect, device number 2 [ 36.344077][ T284] usb 5-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 36.351256][ T284] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 36.833418][ T441] usbhid 3-1:0.0: can't add hid device: -71 [ 36.839424][ T441] usbhid: probe of 3-1:0.0 failed with error -71 [ 36.855700][ T441] usb 3-1: USB disconnect, device number 3 [ 37.004375][ T20] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 37.017772][ T20] usb 2-1: USB disconnect, device number 3 [ 37.253897][ T338] usb 1-1: 0:2 : does not exist [ 37.267271][ T338] usb 1-1: USB disconnect, device number 3 [ 37.429282][ T476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 37.437495][ T476] System zones: 1-3, 19-19, 35-36 [ 37.443084][ T476] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 37.493886][ T476] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.615992][ T481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 37.623993][ T481] System zones: 1-3, 19-19, 35-36 [ 37.629482][ T481] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 37.639524][ T481] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.182350][ T494] fuse: Bad value for 'rootmode' [ 38.228013][ T495] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.245924][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 38.245933][ T24] audit: type=1400 audit(1784108761.950:161): avc: denied { create } for pid=492 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.246914][ T15] usb 5-1: USB disconnect, device number 2 [ 38.757419][ T506] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 38.770412][ T506] erofs: (device loop2): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 38.787412][ T506] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 38.804410][ T506] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 38.821407][ T506] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 38.832424][ T506] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 38.841530][ T506] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 38.851869][ T506] attempt to access beyond end of device [ 38.851869][ T506] loop2: rw=524288, want=34359738368, limit=16 [ 38.865477][ T506] attempt to access beyond end of device [ 38.865477][ T506] loop2: rw=524288, want=136, limit=16 [ 38.877395][ T506] attempt to access beyond end of device [ 38.877395][ T506] loop2: rw=524288, want=88, limit=16 [ 38.889193][ T506] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 38.897883][ T506] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 38.906542][ T506] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 38.915203][ T506] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 39.242420][ T24] audit: type=1400 audit(1784108762.140:162): avc: denied { bind } for pid=492 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.293868][ T24] audit: type=1400 audit(1784108762.140:163): avc: denied { write } for pid=492 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.314264][ T24] audit: type=1400 audit(1784108762.150:164): avc: denied { read } for pid=492 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.335022][ T24] audit: type=1400 audit(1784108762.150:165): avc: denied { map } for pid=492 comm="syz.2.47" path="/8/file0/file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.533331][ C0] sched: RT throttling activated [ 39.549345][ T504] EXT4-fs (loop0): Ignoring removed orlov option [ 39.812279][ T504] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 41.053125][ T527] fuse: Bad value for 'user_id' [ 41.073499][ T352] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.100672][ T24] audit: type=1400 audit(1784108764.750:166): avc: denied { mounton } for pid=526 comm="syz.2.54" path="/9/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.466835][ T352] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.483388][ T352] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.678169][ T352] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 42.108337][ T352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.186997][ T352] usb 2-1: SerialNumber: syz [ 43.103418][ T352] usb 2-1: can't set config #1, error -71 [ 43.126572][ T352] usb 2-1: USB disconnect, device number 4 [ 43.151856][ T555] fuse: Bad value for 'rootmode' [ 43.403441][ T357] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.480891][ T538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 43.487637][ T352] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 43.503402][ T538] System zones: 1-3, 19-19, 35-36 [ 43.508817][ T538] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 43.518888][ T538] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.853447][ T357] usb 5-1: unable to get BOS descriptor or descriptor too short [ 43.933410][ T24] audit: type=1400 audit(1784108767.630:167): avc: denied { setopt } for pid=563 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.961438][ T352] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.003508][ T357] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.013679][ T352] usb 2-1: not running at top speed; connect to a high speed hub [ 44.021437][ T357] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.036716][ T357] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 44.048058][ T357] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 44.062009][ T357] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.071938][ T357] usb 5-1: config 1 interface 1 has no altsetting 0 [ 44.093590][ T352] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.103779][ T352] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.223423][ T304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 44.313434][ T357] usb 5-1: string descriptor 0 read error: -22 [ 44.319672][ T357] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 44.328799][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.343467][ T15] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.363454][ T352] usb 2-1: string descriptor 0 read error: -22 [ 44.369745][ T352] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 44.379546][ T357] usb 5-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 44.386628][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.394843][ T357] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 44.444194][ T352] usb 2-1: unit 255 not found! [ 44.463478][ T304] usb 4-1: Using ep0 maxpacket: 8 [ 44.623507][ T304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.645862][ T352] usb 2-1: USB disconnect, device number 5 [ 44.703493][ T304] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 44.712349][ T304] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 44.722587][ T304] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.731631][ T304] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.744559][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.823529][ T15] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 44.834484][ T15] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1931, setting to 1024 [ 44.856461][ T574] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.867920][ T574] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 44.876780][ T574] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #15: comm syz.0.68: mark_inode_dirty error [ 44.888612][ T574] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 44.896999][ T574] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #15: comm syz.0.68: mark_inode_dirty error [ 44.903541][ T304] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 44.908420][ T574] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 44.917165][ T304] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 44.926151][ T574] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #15: comm syz.0.68: mark_inode_dirty error [ 44.934265][ T304] usb 4-1: Product: syz [ 44.945169][ T574] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 44.948952][ T304] usb 4-1: Manufacturer: syz [ 44.957871][ T574] EXT4-fs error (device loop0): ext4_truncate:4403: inode #15: comm syz.0.68: mark_inode_dirty error [ 44.962160][ T304] usb 4-1: SerialNumber: syz [ 44.973458][ T574] EXT4-fs error (device loop0) in ext4_setattr:5745: error 27 [ 45.013595][ T15] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 45.023021][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.031118][ T15] usb 3-1: Product: syz [ 45.035368][ T15] usb 3-1: Manufacturer: syz [ 45.039962][ T15] usb 3-1: SerialNumber: syz [ 45.442279][ T572] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.464055][ T572] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.560489][ T572] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 45.586554][ T572] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.712418][ T572] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 45.721078][ T24] audit: type=1400 audit(1784108769.380:168): avc: denied { create } for pid=571 comm="syz.2.67" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.102119][ T521] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.128288][ T53] usb 5-1: USB disconnect, device number 3 [ 46.152739][ T595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.197788][ T304] usb 4-1: USB disconnect, device number 3 [ 46.224305][ T595] EXT4-fs (loop3): 1 truncate cleaned up [ 46.229998][ T595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 46.247943][ T601] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 46.256010][ T24] audit: type=1400 audit(1784108769.960:169): avc: denied { read } for pid=571 comm="syz.2.67" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.323139][ T600] F2FS-fs (loop4): invalid crc value [ 46.343481][ T521] usb 1-1: Using ep0 maxpacket: 16 [ 46.417157][ T600] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.457160][ T600] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 46.464208][ T521] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 46.472483][ T521] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.483369][ T521] usb 1-1: config 1 has no interface number 0 [ 46.489515][ T521] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 46.499602][ T521] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.499642][ T600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.512656][ T521] usb 1-1: config 1 interface 105 has no altsetting 0 [ 46.583383][ T352] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.681061][ T283] attempt to access beyond end of device [ 46.681061][ T283] loop4: rw=2049, want=45104, limit=40427 [ 46.843484][ T521] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 46.857056][ T521] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 46.865524][ T521] usb 1-1: Product: syz [ 46.903390][ T352] usb 2-1: Using ep0 maxpacket: 16 [ 47.138824][ T521] usb 1-1: Manufacturer: syz [ 47.143511][ T521] usb 1-1: SerialNumber: syz [ 47.159890][ T24] audit: type=1400 audit(1784108770.860:170): avc: denied { unlink } for pid=614 comm="syz.4.74" name="#3" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.181901][ T580] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.190698][ T616] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 47.203418][ T352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 47.219900][ T352] usb 2-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 47.237189][ T352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.252942][ T352] usb 2-1: config 0 descriptor?? [ 47.413635][ T521] aqc111: probe of 1-1:1.105 failed with error -22 [ 47.427770][ T620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 47.435875][ T620] System zones: 1-3, 19-19, 35-36 [ 47.442539][ T620] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue [ 47.452916][ T620] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.619905][ T513] usb 1-1: USB disconnect, device number 4 [ 47.948922][ T24] audit: type=1400 audit(1784108771.650:171): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.013391][ T352] usbhid 2-1:0.0: can't add hid device: -71 [ 48.019410][ T352] usbhid: probe of 2-1:0.0 failed with error -71 [ 48.026931][ T352] usb 2-1: USB disconnect, device number 6 [ 48.046707][ T15] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 48.065544][ T15] usb 3-1: USB disconnect, device number 4 [ 48.343447][ T357] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.405442][ T635] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 48.461378][ T635] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 48.483635][ T635] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #15: comm syz.0.79: mark_inode_dirty error [ 48.495845][ T635] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 48.504398][ T635] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #15: comm syz.0.79: mark_inode_dirty error [ 48.516280][ T635] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 48.525391][ T635] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #15: comm syz.0.79: mark_inode_dirty error [ 48.538756][ T635] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 48.547564][ T635] EXT4-fs error (device loop0): ext4_truncate:4403: inode #15: comm syz.0.79: mark_inode_dirty error [ 48.558936][ T635] EXT4-fs error (device loop0) in ext4_setattr:5745: error 27 [ 48.703392][ T357] usb 5-1: Using ep0 maxpacket: 8 [ 48.743423][ T513] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.813416][ T15] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.823543][ T357] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.833699][ T357] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.913596][ T604] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.983390][ T513] usb 4-1: Using ep0 maxpacket: 16 [ 48.993443][ T357] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 49.002549][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.006891][ T649] F2FS-fs (loop2): invalid crc value [ 49.010815][ T357] usb 5-1: Product: syz [ 49.020242][ T357] usb 5-1: Manufacturer: syz [ 49.025123][ T357] usb 5-1: SerialNumber: syz [ 49.026963][ T649] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.050888][ T649] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 49.058201][ T649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.077566][ T282] attempt to access beyond end of device [ 49.077566][ T282] loop2: rw=2049, want=45104, limit=40427 [ 49.088899][ T15] usb 2-1: Using ep0 maxpacket: 8 [ 49.103495][ T513] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 49.111759][ T513] usb 4-1: config 0 has no interface number 0 [ 49.118192][ T513] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 49.128433][ T513] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 49.171008][ T656] binder_alloc: 655: binder_alloc_buf, no vma [ 49.171016][ T24] audit: type=1400 audit(1784108772.870:172): avc: denied { call } for pid=655 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.283505][ T15] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.313497][ T513] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 49.322660][ T513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.323466][ T604] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.330936][ T513] usb 4-1: Product: syz [ 49.342477][ T513] usb 4-1: Manufacturer: syz [ 49.347196][ T513] usb 4-1: SerialNumber: syz [ 49.352416][ T513] usb 4-1: config 0 descriptor?? [ 49.373567][ T639] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.373600][ T15] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.380938][ T639] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.389697][ T15] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 49.396616][ T357] usb 5-1: unit 6 not found! [ 49.406784][ T15] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.420387][ T15] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.424110][ T357] usb 5-1: USB disconnect, device number 4 [ 49.433675][ T604] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.449541][ T604] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.458559][ T604] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 49.469781][ T604] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 49.483018][ T604] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.492836][ T521] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.500410][ T604] usb 1-1: config 1 interface 1 has no altsetting 0 [ 49.603479][ T15] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 49.612675][ T15] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 49.620876][ T15] usb 2-1: Product: syz [ 49.625282][ T15] usb 2-1: Manufacturer: syz [ 49.628399][ T639] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.629879][ T15] usb 2-1: SerialNumber: syz [ 49.637155][ T639] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.743446][ T604] usb 1-1: string descriptor 0 read error: -22 [ 49.749640][ T604] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 49.759464][ T521] usb 3-1: Using ep0 maxpacket: 16 [ 49.764945][ T604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.814085][ T604] usb 1-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 49.821265][ T604] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 49.873491][ T513] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 49.883410][ T521] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 49.891614][ T521] usb 3-1: config 1 has no interface number 0 [ 49.897858][ T521] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 49.907906][ T521] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.918522][ T521] usb 3-1: config 1 interface 105 has no altsetting 0 [ 50.038936][ T15] usb 2-1: USB disconnect, device number 7 [ 50.047986][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.063719][ T357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.083532][ T521] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 50.092697][ T521] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 50.101177][ T521] usb 3-1: Product: syz [ 50.106097][ T521] usb 3-1: Manufacturer: syz [ 50.110686][ T521] usb 3-1: SerialNumber: syz [ 50.133528][ T658] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 50.140696][ T658] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 50.463460][ T357] usb 5-1: unable to get BOS descriptor or descriptor too short [ 50.543544][ T357] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.554618][ T357] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1931, setting to 1024 [ 50.573904][ T658] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 50.580885][ T658] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 50.723489][ T357] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 50.736562][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.745468][ T357] usb 5-1: Product: syz [ 50.749952][ T357] usb 5-1: Manufacturer: syz [ 50.754845][ T357] usb 5-1: SerialNumber: syz [ 50.813550][ T521] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 50.824698][ T521] aqc111: probe of 3-1:1.105 failed with error -71 [ 50.832057][ T521] usb 3-1: USB disconnect, device number 5 [ 51.054824][ T660] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.061726][ T660] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.069626][ T660] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 51.083318][ T660] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.094810][ T24] audit: type=1400 audit(1784108774.800:173): avc: denied { create } for pid=659 comm="syz.4.87" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 52.552344][ T513] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 52.572280][ T513] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 52.609554][ T513] asix: probe of 4-1:0.34 failed with error -71 [ 52.674175][ T681] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 52.686586][ T681] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 52.686586][ T681] [ 52.696412][ T681] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,abort,noblock_validity, [ 52.736106][ T681] EXT4-fs warning (device loop2): dx_probe:836: inode #2: comm syz.2.91: Unimplemented hash flags: 0x0001 [ 52.747574][ T681] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.91: Corrupt directory, running e2fsck is recommended [ 53.131120][ T513] usb 4-1: USB disconnect, device number 4 [ 53.155254][ T284] usb 1-1: USB disconnect, device number 5 [ 53.270197][ T686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 53.272238][ T697] binder: 696:697 ioctl c0306201 0 returned -14 [ 53.296109][ T686] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.311033][ T686] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.316279][ T699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.323420][ T686] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.323420][ T686] [ 53.334901][ T699] EXT4-fs (loop2): 1 truncate cleaned up [ 53.343386][ T686] EXT4-fs (loop3): Total free blocks count 0 [ 53.349203][ T699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 53.354694][ T686] EXT4-fs (loop3): Free/Dirty block details [ 53.354710][ T686] EXT4-fs (loop3): free_blocks=2415919504 [ 53.375339][ T686] EXT4-fs (loop3): dirty_blocks=64 [ 53.380472][ T686] EXT4-fs (loop3): Block reservation details [ 53.386516][ T686] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 53.392604][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 53.405096][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.405096][ T7] [ 53.443436][ T15] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.513457][ T284] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.533856][ T707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.100: bg 0: block 473: padding at end of block bitmap is not set [ 53.548282][ T707] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 53.557396][ T707] EXT4-fs (loop2): 1 orphan inode deleted [ 53.563134][ T707] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 53.572184][ T707] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.724768][ T24] audit: type=1400 audit(1784108777.430:174): avc: denied { read } for pid=712 comm="syz.4.102" dev="nsfs" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.726333][ T357] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 53.745834][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 53.756290][ T357] usb 5-1: USB disconnect, device number 5 [ 53.766413][ T24] audit: type=1400 audit(1784108777.430:175): avc: denied { open } for pid=712 comm="syz.4.102" path="net:[4026532614]" dev="nsfs" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.790475][ T284] usb 1-1: Using ep0 maxpacket: 8 [ 53.797809][ T717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 53.816081][ T717] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.834931][ T7] ------------[ cut here ]------------ [ 53.840619][ T7] kernel BUG at fs/ext4/inode.c:2780! [ 53.846254][ T7] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.852400][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 53.859700][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 53.870061][ T7] Workqueue: writeback wb_workfn (flush-7:2) [ 53.876039][ T7] RIP: 0010:ext4_writepages+0x2edb/0x2f00 [ 53.881742][ T7] Code: ff 49 bd 00 00 00 00 00 fc ff df 4c 8b a4 24 98 00 00 00 48 8b 5c 24 38 4c 8b b4 24 c0 00 00 00 e9 fe f7 ff ff e8 85 ed 92 ff <0f> 0b e8 7e ed 92 ff e8 b5 b7 2e ff eb 92 e8 72 ed 92 ff e8 a9 b7 [ 53.901329][ T7] RSP: 0018:ffffc90000077180 EFLAGS: 00010293 [ 53.907416][ T7] RAX: ffffffff81d1b5db RBX: 0000008410000000 RCX: ffff888100248000 [ 53.915370][ T7] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 53.923357][ T7] RBP: ffffc900000774f0 R08: ffff8881311e1ddf R09: 1ffff1102623c3bb [ 53.931312][ T7] R10: dffffc0000000000 R11: ffffed102623c3bc R12: ffff8881189fb000 [ 53.939267][ T7] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff8881311e1dd8 [ 53.947226][ T7] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.956140][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.962703][ T7] CR2: 00007ffc94f0ccf0 CR3: 0000000125dd1000 CR4: 00000000003506a0 [ 53.970657][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.973439][ T521] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.978629][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.994027][ T7] Call Trace: [ 53.997342][ T7] ? __kasan_check_write+0x14/0x20 [ 54.002436][ T7] ? _raw_spin_lock+0x94/0xf0 [ 54.003488][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 54.007142][ T7] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 54.007153][ T7] ? update_load_avg+0x505/0x1540 [ 54.007162][ T7] ? ext4_readpage+0x220/0x220 [ 54.007179][ T7] ? enqueue_task_fair+0xabb/0x2250 [ 54.018486][ T15] usb 2-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 54.023897][ T7] ? sched_group_set_shares+0x480/0x480 [ 54.023906][ T7] ? ext4_readpage+0x220/0x220 [ 54.023916][ T7] do_writepages+0x12e/0x280 [ 54.023924][ T7] ? __writepage+0x130/0x130 [ 54.023941][ T7] ? __kasan_check_write+0x14/0x20 [ 54.029587][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.033700][ T7] ? __kasan_check_write+0x14/0x20 [ 54.033711][ T7] ? _raw_spin_lock+0x94/0xf0 [ 54.033719][ T7] __writeback_single_inode+0xd9/0xa30 [ 54.033729][ T7] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 54.033745][ T7] writeback_sb_inodes+0x96d/0x1680 [ 54.042557][ T15] usb 2-1: config 0 descriptor?? [ 54.047943][ T7] ? queue_io+0x4b0/0x4b0 [ 54.047956][ T7] ? __kasan_check_read+0x11/0x20 [ 54.047962][ T7] ? queue_io+0x37a/0x4b0 [ 54.047970][ T7] wb_writeback+0x40f/0xb80 [ 54.047987][ T7] ? wb_io_lists_depopulated+0x180/0x180 [ 54.135221][ T7] ? set_worker_desc+0x1ba/0x1f0 [ 54.140136][ T7] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 54.145749][ T7] ? __kasan_check_write+0x14/0x20 [ 54.150839][ T7] wb_workfn+0x3ac/0xf30 [ 54.155071][ T7] ? inode_wait_for_writeback+0x220/0x220 [ 54.160779][ T7] ? __update_idle_core+0x280/0x280 [ 54.165960][ T7] ? _raw_spin_unlock_irq+0x4e/0x70 [ 54.171140][ T7] ? finish_task_switch+0x12e/0x5a0 [ 54.176381][ T7] ? switch_mm_irqs_off+0x34d/0x990 [ 54.181562][ T7] ? __switch_to_asm+0x3a/0x60 [ 54.186333][ T7] ? __kasan_check_read+0x11/0x20 [ 54.191342][ T7] ? read_word_at_a_time+0x12/0x20 [ 54.196434][ T7] ? strscpy+0x9b/0x290 [ 54.200572][ T7] process_one_work+0x6fd/0xbc0 [ 54.205411][ T7] worker_thread+0xa8e/0x13c0 [ 54.210074][ T7] kthread+0x324/0x3b0 [ 54.214123][ T7] ? worker_clr_flags+0x190/0x190 [ 54.219223][ T7] ? kthread_blkcg+0xd0/0xd0 [ 54.223794][ T7] ret_from_fork+0x1f/0x30 [ 54.228189][ T7] Modules linked in: [ 54.232976][ T7] ---[ end trace 1012a7dd96ee4416 ]--- [ 54.238675][ T7] RIP: 0010:ext4_writepages+0x2edb/0x2f00 [ 54.244747][ T7] Code: ff 49 bd 00 00 00 00 00 fc ff df 4c 8b a4 24 98 00 00 00 48 8b 5c 24 38 4c 8b b4 24 c0 00 00 00 e9 fe f7 ff ff e8 85 ed 92 ff <0f> 0b e8 7e ed 92 ff e8 b5 b7 2e ff eb 92 e8 72 ed 92 ff e8 a9 b7 [ 54.264680][ T7] RSP: 0018:ffffc90000077180 EFLAGS: 00010293 [ 54.270747][ T7] RAX: ffffffff81d1b5db RBX: 0000008410000000 RCX: ffff888100248000 [ 54.278739][ T7] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 54.286735][ T7] RBP: ffffc900000774f0 R08: ffff8881311e1ddf R09: 1ffff1102623c3bb [ 54.294778][ T7] R10: dffffc0000000000 R11: ffffed102623c3bc R12: ffff8881189fb000 [ 54.302746][ T7] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff8881311e1dd8 [ 54.310778][ T7] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.319797][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.323413][ T284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.326417][ T7] CR2: 0000001b2e422ff8 CR3: 000000010ceb3000 CR4: 00000000003506b0 [ 54.342056][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.350089][ T521] usb 4-1: Using ep0 maxpacket: 32 [ 54.351142][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.363237][ T7] Kernel panic - not syncing: Fatal exception [ 54.364390][ T24] audit: type=1400 audit(1784108778.060:176): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.369626][ T7] Kernel Offset: disabled [ 54.395697][ T7] Rebooting in 86400 seconds..