last executing test programs: 4m55.223438971s ago: executing program 2 (id=258): mkdir(0x0, 0x64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4m51.640116226s ago: executing program 2 (id=271): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x4, 0x1}, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 4m50.666725207s ago: executing program 2 (id=276): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x2, 0x12) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x1, 0x25c, &(0x7f0000000a00)="$eJzs2k9rXFUYB+D3xkpiSjoR/9GC9KAL6+bSZOVCJEFaEAOKNkIVpLfmRodcZ0LuEBgRGze6ceFHcC0u3QlSceMmGz+BC3fZZNmFeKWdaZuECBlinNI+z2Ze5p3f3HM4h8NZ3J1Xv/10bbXOV4teTGRZTCzEVtzKYjYm4q6tePmlq789/+7V999cXFq69E5KlxevzM2nlM6c//mDz3944Wbv9Hs/nvlpMrZnP9zZ/fLP7We3z+78feWTdp3adep0e6lI17vdXnG9KtNKu17LU3q7Kou6TO1OXW7s669W3fX1fio6KzPT6xtlXaei009rZT/1uqm30U/Fx0W7k/I8TzPTwXEsf3+raWK3efxaZHe/m/kjWpE9mbKnFrJnrmXPbWVnd5umNd6BckLurX/TNE98F6dvWv9Hyp5DfSqi+npzeXN58DnoL65GO6oo42K04q+4vU2GBvXlN5YuXUx3zMZX1Y1h/sbm8mP783PRitnD83ODfNqfn4zpvfn5aMXTh+fnD81PxYUX9+TzaMXvH0U3qliJ29n7+S/mUnr9raUD+XN3fgcA8LDJ0z2H3t/y/N/6g/wI98MD96tTce7UeOdORN3/bK2oqnJDMUpxftTU1DEfOhnjnvLxi8FmuzDceSfxiCaLeBBmeqTi119ee+UBGMawWDh4FIz5YOJ/cX/Rj5qYOtkBAQAAAAAAAAAAcCT/3VuE3wz/cV8rG+XNMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH0TwAAAP//vwHHww==") statfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000d80)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d102c696f636861727365743d69736f383835392d678d443a372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c726f6469722c757466383d302c636865636b3d6e6f726d616c05636f6465706167653d3836362c757466383d3149c5c0842099722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c757466383d302c757466383d3000", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x1, 0x27e, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m48.772307118s ago: executing program 2 (id=282): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x2d, 0x20800006d2, 0x3a, 0x1, 0x2c}, 0x48) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x25}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x25}) socket$inet(0x2, 0x1, 0x5) inotify_init() (async) inotify_init() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x8000, 0x0, 0x0, 0x300, 0x4, 0x0, 0x0, 0x40}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0xaa) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x138) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 4m48.512978576s ago: executing program 2 (id=286): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x0, 0xf, 0x4, 0x7}, {0x5, 0x5, 0xf, 0x10001}, {0xfffe, 0xfa, 0x5, 0x4269}]}) syz_emit_ethernet(0x6c, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x64, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x4ac, 0x3]}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x2, {0x9}}}}}}}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000500)={0x3, 0x8f, "7ba96204c522e3f999582d34c11ab11d8af7004189f0e8dd1327d370a07c97836ad1fc857cd83a23f75d44a9bfa6e249b1296e6b5319b176e0d439c405a2958f4164c86fde8579302a4a7cb50180a228432089a0f68b0b6a1003155584faeeb0ecbb8a72b294586663d4d3a097e0b5234c3142f90f00e063cbbe550e45cfebbea62bdd8d80c23fcefc8593a376dc89"}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) close_range(r3, 0xffffffffffffffff, 0x0) 4m47.869806117s ago: executing program 2 (id=289): socket$inet6(0xa, 0x3, 0x203) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$set_reqkey_keyring(0xe, 0x3) syz_open_pts(0xffffffffffffffff, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioprio_set$pid(0x2, r0, 0x2000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xffffffff, 0x3) 4m47.869617407s ago: executing program 32 (id=289): socket$inet6(0xa, 0x3, 0x203) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$set_reqkey_keyring(0xe, 0x3) syz_open_pts(0xffffffffffffffff, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioprio_set$pid(0x2, r0, 0x2000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xffffffff, 0x3) 4m32.633591986s ago: executing program 1 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7c25e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 4m27.697962705s ago: executing program 1 (id=380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4m25.478505786s ago: executing program 1 (id=382): unshare(0x60000600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f0000000080)="82"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0xc0, 0x13f, 0xf}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x4}) exit(0x9) wait4(0x0, 0x0, 0x80000000, 0x0) 4m24.41673041s ago: executing program 1 (id=391): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000940)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030f00000000000000000700000030000280080002000000000015000400"], 0x44}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$KVM_RUN(r1, 0xae80, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc786dd", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r6, r7, 0x2) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x1, 'veth0_virt_wifi\x00', {}, 0x4}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000000)={0x3, 'wlan1\x00', {0x4}, 0x8000}) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffd000/0x1000)=nil) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 4m24.190109177s ago: executing program 1 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m24.033972602s ago: executing program 1 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m23.993482794s ago: executing program 33 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m37.196973136s ago: executing program 4 (id=553): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3m35.405047604s ago: executing program 4 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x5, 0xffffff00, 0x7ff, 0x9c18, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000140)="de4b88cf1eda3265a1612d51a1754be0ad235cee517dc10dd9822406064135fe63c69f6794e4013bfab15dabef75fb6f07a828301870c0ea148445bfcf9181e24c4ec305542b90dbb8", &(0x7f00000001c0)=""/224, &(0x7f00000002c0)="ba5c9bb606c5d206270984ccd1b566de738eb952147bd524d6625926ec41b047e7b1471adc7a35be013c1a1402738768d8448aacf3fc5a0807297ce442e80198c564e5e68973921603f63c14d900d8af1b9e711b67bcd31a59dfdc69101dfeadf9", &(0x7f0000000340)="bcb8cc6db67d13ad9510efe375f1bd82b32268b91cef55061cee3b8f9e5050ce813eed28903a37465fadce", 0x4, r1}, 0x38) 3m35.384711774s ago: executing program 4 (id=560): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) r1 = io_uring_setup(0xa91, &(0x7f00000000c0)={0x0, 0x8161, 0x2, 0x3, 0x25c}) r2 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x235c, 0x3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000080)={0x5}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200009, &(0x7f00000001c0)={[{@nouser_xattr}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nombcache}, {@delalloc}, {@nombcache}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") 3m30.495656911s ago: executing program 4 (id=591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @loopback, @empty}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01", @ANYRESHEX], 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file1\x00', r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) setreuid(r1, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") (async) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @loopback, @empty}}}}}}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01", @ANYRESHEX], 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) fstat(r0, &(0x7f00000000c0)) (async) lchown(&(0x7f0000000140)='./file1\x00', r1, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) (async) setreuid(r1, r2) (async) 3m27.434955659s ago: executing program 4 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m27.245781865s ago: executing program 4 (id=612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff0200000000000000000000fde10001"], 0xfdef) 3m27.075619341s ago: executing program 34 (id=612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff0200000000000000000000fde10001"], 0xfdef) 4.96157715s ago: executing program 3 (id=2190): shutdown(0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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") (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000002800)='net/nf_conntrack_expect\x00') (async) r2 = socket(0xa, 0x3, 0xff) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000009c0)="d2df03c3ff4f84e5fbb1cb4688a8", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) (rerun: 64) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=""/4095, 0xfff}, 0x11c}], 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000640)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@uuid_off, 0x0}], [], 0x2c}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000014000305000000000000000002"], 0x18}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) read$FUSE(r1, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) pread64(r1, &(0x7f0000000000)=""/83, 0x53, 0x3) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100), 0x100a080, &(0x7f00000043c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='*wfdn9u', @ANYRESHEX=r0, @ANYBLOB="2c69676e6f726571762c616e616d653d2d2a2e5c262f232c63616368657461673d003ae4767c4aae7a3c0dda7527ebd4ec47bb2b03a386edd093739b4329e63d7705f6a6633a2c69676e6f726571762c6d6d61702c64666c747569643d", @ANYRESHEX=r9, @ANYBLOB=',uname=1&(,fsmagic=0x0000000000000008,measure,permit_directio,pcr=00000000000000000046,appraise,context=root,\x00', @ANYRES8=r8, @ANYRESOCT=r7]) (async) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r10, &(0x7f0000004200)=[{0x0}, {0x0}, {&(0x7f0000000880)}, {&(0x7f00000008c0)='\x00\x00', 0x3c}, {&(0x7f0000000240)="b570f415cc4b1bb84c554cb0ec6ea5daaea100bd71d6db1f6b0423916d51aab30ca17ee9b8ce8a908272f61c188c1161b16f1b2bba943be47eac2e9821144959d938de93bb77ef967e3705bf77b2065d4d96a12cb3fa96fe3dc9a6d382f3cf8ebe3a8737a4f5ef3a16f9001292220684b09e156d551f893cb297250034e0ef2f9e6e7c5f4bc9a1a79cfa133e550b3098d5cb32db", 0x94}, {&(0x7f0000003200)="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", 0x1000}], 0x6, 0x0, 0x4000, 0xc) (async, rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000300)=""/47) (async) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.96131257s ago: executing program 3 (id=2192): syz_btf_id_by_name$bpf_lsm(0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0xe8200, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000340)="0100fd6400000000dd70f6a295482493d1787810aeba0f474c8897478c64147fa86a9fc3fab20d", 0x27, 0x36, 0x0, 0x0, r1}]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x400100000000c595, 0x0, 0x1, 0x5, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.898020853s ago: executing program 3 (id=2196): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4.35772975s ago: executing program 6 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010025"], 0x3c}}, 0x0) (fail_nth: 1) 4.3573332s ago: executing program 5 (id=2206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='mnt\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f00004fb000/0x4000)=nil, 0x4000, 0xc, 0x10010, 0xffffffffffffffff, 0xa8e9b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./cgroup\x00', 0x0, 0x38}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0x3e, 0x6e, &(0x7f0000000680)="0c6ee38ef7ed647811b43c8abb82b592fa4e200dc6e361d09531140aedb1b14a352c03601d870143ed6543359316d177ed590279a3f55bf7817d5f265967", &(0x7f00000007c0)=""/110, 0xfffffffb, 0x0, 0x38, 0x52, &(0x7f0000000840)="76d7d014eb56a3e32969d1a9b4fb2e54ad2782149fdb07e20922d931431889d51223b024aac5f15ab23eb5bb3a0cf0b632a592156820d59c", &(0x7f0000000940)="1373d3b070b276bdf029edfe6e17091cda284fdad2ae30848f0a7666ec5e84249e274b6fbb6299d043b2ac5d3b03db60c9ec370003e3d5c90389845b229305942e01cd9ca7c074b09fe9fb165bc0cda584e7", 0x5, 0x0, 0x9}, 0x50) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff}}) r6 = syz_open_procfs(0x0, &(0x7f0000002300)='cmdline\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e0001001400dc992a681d7df069e196c5c3f05c15cce372d763564b0e39b47a14a200", @ANYRES32=0x0, @ANYBLOB="000000000a0002000800280073f900000500210005000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000040) read$FUSE(r6, &(0x7f0000002c00)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000040)=0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}}) 4.129709477s ago: executing program 6 (id=2207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) syz_usb_connect$uac1(0x6, 0xb5, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x8c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x6, 0x10, 0xfc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1c}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x5, 0x4, 0xfff, 0x3, 0x40}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x2, "d6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x62, 0x5a, {0x7, 0x25, 0x1, 0x4, 0x88, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x4a, "b3b5c46d5c"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x0, 0x50, "cb23e6"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0x1, "fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5c, 0x55, "01"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x80, 0x8, {0x7, 0x25, 0x1, 0x0, 0x1, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x86d628528415d3bb, 0x4, 0x1c, 0xec, 0x828387b43490ffee, 0xb}, 0x12e, &(0x7f0000000340)={0x5, 0xf, 0x12e, 0x5, [@generic={0x20, 0x10, 0x1, "404bc920a3bf663e8dcdb9c6f853c6f92578ea8c0f182a9d4b5240a824"}, @ptm_cap={0x3}, @generic={0xf2, 0x10, 0xb, "277ed772bd7fbac1a8f84bba79367f88bc992b9139fb9c7361582ed4ee892604fc30ffcabc87552f077c5cd6963ffebb53a944899365f388b2a9ff0870ae54ab67eb3600d6f8763e83346822c19ffa5bc462faabe012f7e9c602de921624f7ee68475d7301f6ba2fc1cba872f05ba6c0628332e7e544ded521a5d0c38e27d11695024801cb7cbf08d2b460f887ded79ac9b05591ef31173dec715702218fceb85740a1254d95bf91c9150f22cc9bea32aa8e6542f580686441187a26560cdbf226c90db56ec62e417a95e07ce26ec62c03b95f0222f4d68261feab6cf45f8cafec5d1126f0a70246e0a09fea32da78"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x69, 0xcb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf, 0x7, 0x6}]}, 0x4, [{0xe2, &(0x7f0000000480)=@string={0xe2, 0x3, "6cca2936e6963440eb7e024d4be23ce26272308d505a5c3eee03ff119a38301e4e1c557f9c0ca21030763f57869c6a8c9ce78cc8088e092992aa70f32e27f0e32a140bfc66c4b1b75e331ae58eab011579117f516f13655ff4a539346c3b0f0a39cda21fb431f05d1318c56791f540e8490a725939252f6ec3bba7eb81e00535a0bb8dc5bcefc980eff6a6054bb0fbeca4352a1f639f921e7d5c6a8a0a5e3a687fa3fddf7d0133242356fcaad5749520ed0177da3641e428e644f186cd4b59a7ea79bf56ebbe99eb8452b007d2692961f880937d8e8507a99945ff5d26b60d3e"}}, {0x23, &(0x7f0000000580)=@string={0x23, 0x3, "fb7f3b6ef5ccb131bb1dd49691b2e2f498980473066a85f04a47cb2b38d0d7c44d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x0, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x8, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001180)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@local}}, &(0x7f0000001280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@private0, @in6=@loopback, 0x4e24, 0x5, 0x4e23, 0x708a, 0xa, 0x20, 0x20, 0xff, r4, r5}, {0x7f, 0x1000, 0xbdf4, 0x6, 0x3, 0x100, 0x40, 0x2}, {0x8000000000000001, 0xa29, 0x6, 0x8000}, 0x8, 0x6e6bb8, 0x2, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x34ff, 0x3, 0x2, 0x5, 0x1, 0xc, 0xe}}, 0xe8) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000017c0)=r1, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000110001005caf"], 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40844) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x15, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) brk(0xffffffff) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x23, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x1f, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x3000, 0x80a0000, 0x8, 0xa0, 0xb0, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x40040022, 0x0, 0x6000, 0x42024, 0xb, 0x7580, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x12, 0xff05, 0x70bd26, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224, 0x11080}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000280)=ANY=[], 0x1, 0x2cd, &(0x7f0000000800)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877ad81660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100b00000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fe51000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000c9050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.026591401s ago: executing program 3 (id=2208): listen(0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 4.002680701s ago: executing program 3 (id=2209): syz_mount_image$fuse(0x0, 0x0, 0x11d04b8, 0x0, 0x85, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000000280)="$eJzs3c1LBGUcB/Df7Iu2aWJ16VIEEVGC2CEIutQlQQiJiKAEI6xLoYHp1e3UpUP3Ck9dJLplHaOLdOkPsPJgly7SISkoYmN2ZnXV3dza3dloPh/YnZd9Hp/fwH6fGcFxAiit+Yh4OiKqEbEQEfWISLobPJi95vPN/cbRekSr9cLPSbtdtp3p9JuJiGZEPBlR63y2e/jK6a/Hy4+8v1N/+JPDlxtFHV+3s9OT584/Xn3v85XHdyv5vtl82X0co5T02FdLIu4Zx2D/EUlt0hUwmM++S3N/b0Q81M5/PSp5ZD/Ynvq6Ho991Lvf1HmxdQLj0GrV03NgswWUTqV9DZxUFiMiW69UFheza/jvq0m8tbX9zsIbWzubG5OeqYARSJrZ770nz345/cXMtfz/VM3yP5AnxlwpMBZp/l98/uCHdP28OulqgELcny3S/C+8uvdoxJ/yDyVzmX/nfygb+Yfykn/4H+iX3XT/dP9u8g/lJf9QXoPmv1lgTcCI1DsrvRM8/Pn/t/wvCP99iUDR5trvrv+hvK7lP78fN79bdbCL/uXXN94cX4HAqK11VrrzDwCUS2t6wjcgAxMz6fkHAAAAAAAAAAAAAAAAAAC4ab9xtN55FTXmNx9GnD0TEbWr42ePLai2n0cccUf7/c5fkrTZhSTrNpS1IfsP69MR3329+jfPe+hl7sfRjt9H664+H3z7wHgGfPfqZqNfu73NiGbaeKlWu/n9T/Lv3636/vy7b+lYf22wAUYlubb91EvFjp+5+MfE8cfBJMa/tHIc8VU6/yz1mv8qcV972Xv+mb1yJP/IRRze/n2Y6gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjSXwEAAP//F1F1yw==") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x10, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000700)=0xe) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 3.998851851s ago: executing program 3 (id=2211): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x56, 0x0, 0x40, 0x40, 0x2, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @var={0xb, 0x0, 0x0, 0xe, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x3ff}]}}, &(0x7f0000000140)=""/240, 0x5a, 0xf0, 0x1}, 0x28) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='vegas', 0x5) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1000) 3.494754288s ago: executing program 0 (id=2215): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 3.494453498s ago: executing program 6 (id=2216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x6, 0x0, 0x20}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@empty, {0x8000000000000, 0x195, 0x1, 0xae5, 0x8253c, 0xfffffffffffffffe, 0xfffffffffffffff6}, {0xffffffffffbfffff, 0xff80, 0x1e, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.493536668s ago: executing program 7 (id=2217): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x4102, 0x64) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_getneigh={0x60, 0x1e, 0x20, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40000}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) wait4(r4, &(0x7f0000000240), 0x2, &(0x7f0000000280)) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100800, &(0x7f00000003c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x65]}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@usrquota}, {@mode={'mode', 0x3d, 0xffffffffffff4a50}}, {@quota}, {@huge_advise}, {@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x33, 0x70, 0x36]}}, {@grpquota}, {@size={'size', 0x3d, [0x36]}}], [{@obj_type={'obj_type', 0x3d, '%+:'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) (async) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0x38, 0x26, 0x100, 0x9, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x7, 0x6}, {0xf, 0x4}, {0x10, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40080) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000800)={0x0, &(0x7f0000000680)=[@nested_create_vm={0x12d, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xffffffff, 0xf56b}}, @uexit={0x0, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xba, 0x5, 0x0, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16, 0x4, 0x80, 0x3}}, @nested_load_code={0x12e, 0x7b, {0x3, "0f79b30f410000440f20c0350f000000440f22c0c7442400fc000000c7442402f4ffffffc7442406000000000f011c242e41e7f1b91c0600000f326426410f3048b847000000000000000f23d00f21f8353000000e0f23f8f345d8c73e450f215a0f09"}}], 0x14b}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x8, 0x0, [{0xbb6, 0x0, 0x9}, {0x2cc, 0x0, 0xcaf}, {0x9c7, 0x0, 0x10001}, {0xb9c, 0x0, 0x6}, {0x1a2, 0x0, 0x401}, {0xbf3, 0x0, 0x7}, {0xb0c, 0x0, 0x9a2}, {0x1b0, 0x0, 0x6}]}) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000900)={0x30, 0x5, 0x0, {0x0, 0x4, 0x5, 0x400}}, 0x30) fcntl$setown(r0, 0x8, r4) (async) bind$netlink(r0, &(0x7f0000000940)={0x10, 0x0, 0x25dfdbff, 0x400}, 0xc) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000980)=0x4) r6 = openat$cgroup(r0, &(0x7f00000009c0)='syz0\x00', 0x200002, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000b40)={r6, &(0x7f0000000a40)='usrquota_block_hardlimit', 0x4800, &(0x7f0000000a80)={@_ha_fsid={[0x0, 0x3]}, {0x10, 0x6805, 0x3}}, 0xf989, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8}) r9 = syz_ublk_setup_io_uring(0x29e1, &(0x7f0000000b80)={0x0, 0xfffffff8, 0x20, 0x0, 0xaa, 0x0, r8}, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) (async) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000cc0)={0x4, 0x0, [{0x7, 0x811, 0x1, 0x3, 0x1}, {0x80000007, 0x7, 0x81, 0x8, 0x59}, {0x6, 0x5, 0xc194, 0x1, 0xfffffffc}, {0x80000005, 0xda, 0x10001, 0x8, 0x800}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x40000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000d80)='memory.current\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000002e00)={0x50, 0x0, r10, {0x7, 0x2d, 0x4, 0xffffffff80000008, 0x7, 0xe, 0x7, 0x80, 0x0, 0x0, 0x100, 0xb97}}, 0x50) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000002ec0)={0x5, &(0x7f0000002e80)=[{0x0, 0x4, 0xff, 0x90000}, {0x5, 0xb, 0x0, 0x8bf}, {0x8, 0x62, 0x7, 0x7fff}, {0x0, 0x4, 0x9, 0x10000}, {0x0, 0x7, 0x4, 0x1780e794}]}) 2.939376955s ago: executing program 6 (id=2218): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.937676395s ago: executing program 5 (id=2219): listen(0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 2.937529715s ago: executing program 7 (id=2220): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 2.273003887s ago: executing program 0 (id=2221): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xffffffffffffff5d}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) inotify_init1(0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f00000000c0)=""/31, 0x1f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x92e0}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @generic={0x9, 0x0, 0xa, 0x9, 0x7fff}, @jmp={0x5, 0x1, 0xc, 0x0, 0x4, 0x50, 0xfffffffffffffff0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xfc, &(0x7f0000000300)=""/252, 0x41100, 0x45, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xb, 0x4, 0x1ff}, 0x10, 0x1a574, r1, 0x0, 0x0, 0x0, 0x10, 0x6a1}, 0x94) 2.272686487s ago: executing program 5 (id=2222): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000010080000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020000100000000000000090000000000000080000000000000000000000000000000000000000000000002010003000000008401050064010102000000000000000000000000000004d43200000000000000fc02000000000000000000000000000106350000000002000000000000000000000000007f000001000000000000000000000000000004d22b00000000000000fe8000000000000000000000000000000000000000000000000800000000000000000000fe80000000000000000000000000000e000004d4320000000a000000fe8000000000000000000000000000aa0000800003"], 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.210111259s ago: executing program 0 (id=2223): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x56, 0x0, 0x40, 0x40, 0x2, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @var={0xb, 0x0, 0x0, 0xe, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x3ff}]}}, &(0x7f0000000140)=""/240, 0x5a, 0xf0, 0x1}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='vegas', 0x5) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) 1.470287283s ago: executing program 0 (id=2224): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09307a15b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x30, 0xae, {0xae, 0x3, "b8ba3a1ba375165d5f3cdc2405c92c3af4180493fd3659c855f854370f53bba07d02491b247c7ace96c9d067cb0dca572e37c0a103e8f7e491e7b22213761d1f9a5da1c5ceb19dbc1c32fde31a59e5649296d1f829f57fcab22051086a5ed4443395a0cb270cea79e2af97313441a7210f53252547395d2f3059a521c43b27b78cb850bc269cf658da65bc6aa73a405bb9cdaa79903baab558f996baed965e70873ad5219b245971d984142f"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00031500000015036220b517deead510e5fab9aab0ff0f7fbb20d4"], &(0x7f0000000240)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x1, 0x51}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x4}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x18, 0x4a, 0xf, "d7258dd3", "256f105c"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x4, 0x7f, 0x9, 0x0, 0x3}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0xf, 0x6c, "d78d64c7cf3806dc975224d1165817071b7a84fda3cecea212cd0be4b96f8344b854f6c6d3341e94ac3395794b1a67a73537ccb7dffb01686674e227987b9cede227579dbaebc8c6f49bf14bd6ab2f302e6a8160b1c2fe197c7072f5126d194b33b3e747bb35e90c4230177b"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000500)={0x40, 0x7, 0x2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "1250"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="9aa8a4713208"}, &(0x7f0000000680)={0x40, 0x19, 0x2, ',$'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xbdb1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 1.470052353s ago: executing program 5 (id=2225): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0x70bd27, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x369}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025"], 0x3c}, 0x1, 0x0, 0x6000000}, 0x0) 1.469268553s ago: executing program 7 (id=2226): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x1b0, 0x12, 0x60d, 0x0, 0x202, 0x280, 0x2e8, 0x2e8, 0x280, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xfffd, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x49, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="583600001900010000000000fbdbdf251d010900e8010f80e401f880e001738008008700", @ANYRES32=0x0, @ANYBLOB="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"], 0x3658}, 0x1, 0x0, 0x0, 0x11}, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000000950000000000000021b1eea5a866123679e80f334ded7e8705bd00bc2be68923f836b03fb211979650df65d154a5dc2c8124ed282b67b318121473f46a74bac5c7bb902abbfe1e7096e333c1785766dc3ba48b83694ddd31bbe49541bafa7b1770d4b66406ee25c3d687ef24658ab65d03aca743e8337d6fa03da7eacb2bb9f70066190094d73b7b9c418de1e1901472ab5a3da501cc95c8423bf76feae8c331606aad901cbaa86e961c4e8013716f2214c06a703a5ccc6b14dd738f93736d75d7ec2dabe234637b9f45e5d2"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r4, 0x1, 0x0, @void}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 584.654681ms ago: executing program 0 (id=2227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x22}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r5 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r5}, 0x20) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r7, 0x3, 0x1}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x7) prlimit64(r8, 0x9, 0x0, 0x0) 583.691271ms ago: executing program 6 (id=2228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x6, 0x0, 0x20}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@empty, {0x8000000000000, 0x195, 0x1, 0xae5, 0x8253c, 0xfffffffffffffffe, 0xfffffffffffffff6}, {0xffffffffffbfffff, 0x28000000, 0x1e, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 583.436861ms ago: executing program 5 (id=2229): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r1 = socket(0x840000000002, 0x3, 0xff) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003800)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000021c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2e1a}}], 0x38}}], 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) syz_emit_ethernet(0x86, &(0x7f0000000680)={@local, @random="1ab900", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b70bff", 0x4c, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}, 0x0) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r6, r7}}}], 0x20, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r10 = signalfd(r9, &(0x7f0000000140)={[0x7]}, 0x8) write$binfmt_elf64(r9, &(0x7f0000000480)=ANY=[@ANYRESHEX=r10, @ANYRESDEC=r0, @ANYBLOB="ab162439a73bb2210068ab44875f3816706795de87a050ee04dea003cd9a0de2b9edc79f2c701d8de13582a733d63f0a8b96ac4855599f7c29c19118dcf8e3796615568c684dd82e2887bf3f51b8dd2167b238c7750492ad0d83fddaf0f4b93feebcf59eaa1cc05ea44eb4b8d4bfd0457f339baffbe2674bdcffb486cb91ebe592e4693dd378c6bf86139deb14f933a5617429d56caeb57c87d89474"], 0xfffffffffffffd0c) (async, rerun: 64) splice(r4, 0x0, r9, 0x0, 0x1039000, 0x2) (async, rerun: 64) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r13, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x3, 0x1fb, 0xfffffffc, 0x2c0000}]}) ioctl$KVM_X86_SETUP_MCE(r13, 0x4008ae9c, &(0x7f00000002c0)={0x13, 0x5, 0x6}) (async) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r14, &(0x7f0000002300)=""/20, 0x14, 0x0) (async) write$eventfd(r14, &(0x7f0000000100)=0x1, 0x8) fcntl$setpipe(r8, 0x407, 0x6) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$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") 177.524074ms ago: executing program 6 (id=2230): syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x8000005}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r5, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYBLOB="080003004000000005002000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r5, r7, 0x2, 0x3, 0x5}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40) mount$bind(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000000, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='securityfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x908422, &(0x7f0000006480)=ANY=[@ANYBLOB="6d10387b3e6276e75a303030262c000000000000000002144d"]) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)={[&(0x7f0000000340)='pipefs\x00', &(0x7f0000000380)='\',\x00', &(0x7f00000004c0)='%+\\(*.\x00', &(0x7f0000000500)='%1B&\x00', &(0x7f0000000540)='{\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)=',#$$%\x00', &(0x7f0000000600)='pipefs\x00']}, &(0x7f0000000780)={[&(0x7f00000006c0)='\\\x84\'-%$(!\x13\"\x00']}) 177.302994ms ago: executing program 5 (id=2231): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 177.080424ms ago: executing program 35 (id=2231): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 176.640794ms ago: executing program 7 (id=2232): listen(0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 82.179497ms ago: executing program 7 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x56, 0x0, 0x40, 0x40, 0x2, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @var={0xb, 0x0, 0x0, 0xe, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x3ff}]}}, &(0x7f0000000140)=""/240, 0x5a, 0xf0, 0x1}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='vegas', 0x5) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) 68.466618ms ago: executing program 7 (id=2235): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 0s ago: executing program 0 (id=2236): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09307a15b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x30, 0xae, {0xae, 0x3, "b8ba3a1ba375165d5f3cdc2405c92c3af4180493fd3659c855f854370f53bba07d02491b247c7ace96c9d067cb0dca572e37c0a103e8f7e491e7b22213761d1f9a5da1c5ceb19dbc1c32fde31a59e5649296d1f829f57fcab22051086a5ed4443395a0cb270cea79e2af97313441a7210f53252547395d2f3059a521c43b27b78cb850bc269cf658da65bc6aa73a405bb9cdaa79903baab558f996baed965e70873ad5219b245971d984142f"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00031500000015036220b517deead510e5fab9aab0ff0f7fbb20d4"], &(0x7f0000000240)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x1, 0x51}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x4}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x18, 0x4a, 0xf, "d7258dd3", "256f105c"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x4, 0x7f, 0x9, 0x0, 0x3}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0xf, 0x6c, "d78d64c7cf3806dc975224d1165817071b7a84fda3cecea212cd0be4b96f8344b854f6c6d3341e94ac3395794b1a67a73537ccb7dffb01686674e227987b9cede227579dbaebc8c6f49bf14bd6ab2f302e6a8160b1c2fe197c7072f5126d194b33b3e747bb35e90c4230177b"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000500)={0x40, 0x7, 0x2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, "1250"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="9aa8a4713208"}, &(0x7f0000000680)={0x40, 0x19, 0x2, ',$'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xbdb1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) kernel console output (not intermixed with test programs): ferent from the interface descriptor's value: 12 [ 140.458032][ T6] usb 7-1: config 220 interface 0 has no altsetting 0 [ 140.696478][ T6] usb 7-1: config 220 interface 76 has no altsetting 0 [ 140.709726][ T6] usb 7-1: config 220 interface 1 has no altsetting 0 [ 140.916031][ T293] usb 1-1: selecting invalid altsetting 0 [ 140.923349][ T293] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 141.190716][ T2013] securityfs: Unknown parameter 'm8{>bvZ000&' [ 141.840362][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.858536][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.883512][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.902684][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.921462][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.937593][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.955643][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.975480][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.993118][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 142.307721][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 142.317786][ T2014] bridge0: port 3(syz_tun) entered disabled state [ 142.327075][ T2014] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.334370][ T2014] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.373592][ T293] usb 1-1: No valid video chain found. [ 142.427279][ T2023] binder: BINDER_SET_CONTEXT_MGR already set [ 142.433313][ T2023] binder: 2022:2023 ioctl 4018620d 200000004a80 returned -16 [ 142.485495][ T6] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.743322][ T2034] loop5: detected capacity change from 0 to 1024 [ 146.643872][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.659401][ T6] usb 7-1: Product: syz [ 146.706891][ T6] usb 7-1: can't set config #220, error -71 [ 146.739399][ T6] usb 7-1: USB disconnect, device number 3 [ 146.770754][ T293] usb 1-1: USB disconnect, device number 7 [ 146.791103][ T2047] xt_hashlimit: size too large, truncated to 1048576 [ 148.026204][ T2048] overlayfs: failed to clone upperpath [ 148.383157][ T2061] fuse: Bad value for 'blksize' [ 148.416442][ T2061] __nla_validate_parse: 39 callbacks suppressed [ 148.416466][ T2061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.539'. [ 149.321351][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 149.321368][ T30] audit: type=1326 audit(1780683427.490:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.0.543" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b6181ae59 code=0x0 [ 150.221286][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 150.276149][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.185361][ T30] audit: type=1400 audit(1780683428.760:512): avc: denied { ioctl } for pid=2098 comm="syz.3.545" path="socket:[23046]" dev="sockfs" ino=23046 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.222872][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 153.261446][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.293809][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.302179][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.315506][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.332424][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.535158][ T349] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.241169][ T659] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 154.605334][ T349] usb 6-1: Using ep0 maxpacket: 16 [ 154.632804][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.655140][ T659] usb 7-1: Using ep0 maxpacket: 16 [ 154.725242][ T349] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.775179][ T659] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.795219][ T331] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.905155][ T349] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 154.914466][ T349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.922648][ T349] usb 6-1: Product: syz [ 154.926917][ T349] usb 6-1: Manufacturer: syz [ 154.931546][ T349] usb 6-1: SerialNumber: syz [ 154.937167][ T349] usb 6-1: config 0 descriptor?? [ 154.945150][ T659] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 154.954256][ T659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.962714][ T659] usb 7-1: Product: syz [ 154.966943][ T659] usb 7-1: Manufacturer: syz [ 154.971538][ T659] usb 7-1: SerialNumber: syz [ 154.976715][ T349] sr9700: probe of 6-1:0.0 failed with error -22 [ 154.986981][ T659] usb 7-1: config 0 descriptor?? [ 155.015228][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.025702][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 155.026946][ T659] sr9700: probe of 7-1:0.0 failed with error -22 [ 155.038800][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25956, setting to 1024 [ 155.055240][ T6] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 155.064386][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.073793][ T6] usb 1-1: config 0 descriptor?? [ 155.095319][ T2115] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.155143][ T331] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 155.163484][ T331] usb 5-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 155.173958][ T331] usb 5-1: config 220 has no interface number 2 [ 155.180297][ T331] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.193492][ T331] usb 5-1: config 220 interface 0 has no altsetting 0 [ 155.200321][ T331] usb 5-1: config 220 interface 76 has no altsetting 0 [ 155.207694][ T331] usb 5-1: config 220 interface 1 has no altsetting 0 [ 155.346388][ T2010] usb 7-1: USB disconnect, device number 4 [ 155.443395][ T331] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.453457][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 155.462530][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.472280][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 155.481564][ T331] usb 5-1: Product: syz [ 155.489098][ T331] usb 5-1: Manufacturer: syz [ 155.498005][ T331] usb 5-1: SerialNumber: syz [ 155.744289][ T30] audit: type=1400 audit(1780683433.910:513): avc: denied { view } for pid=2114 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.817644][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 155.852260][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 155.859660][ T6] usb 1-1: USB disconnect, device number 8 [ 155.895172][ T331] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 155.906566][ T331] usb 5-1: No valid video chain found. [ 155.920140][ T331] usb 5-1: selecting invalid altsetting 0 [ 156.007200][ T331] usb 5-1: USB disconnect, device number 13 [ 156.491372][ T30] audit: type=1400 audit(1780683434.660:514): avc: denied { ioctl } for pid=2161 comm="syz.0.562" path="socket:[23094]" dev="sockfs" ino=23094 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.596061][ T331] usb 6-1: USB disconnect, device number 5 [ 156.633282][ T2166] binder_alloc: 2165: binder_alloc_buf, no vma [ 156.675141][ T2010] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 157.211565][ T2010] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.220740][ T2010] usb 5-1: config 0 has no interface number 0 [ 157.329391][ T2010] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.360288][ T2010] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.376322][ T2010] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.264011][ T2181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 158.524174][ T2185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.569'. [ 158.536079][ T2185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.569'. [ 158.545108][ T2010] usb 5-1: config 0 interface 1 has no altsetting 0 [ 158.551857][ T2010] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 158.562241][ T2010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.576038][ T2010] usb 5-1: config 0 descriptor?? [ 159.085069][ T331] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 159.412721][ T2198] loop4: detected capacity change from 0 to 512 [ 159.425430][ T2010] uclogic 0003:145F:0212.000A: pen parameters not found [ 159.432679][ T2010] uclogic 0003:145F:0212.000A: interface is invalid, ignoring [ 159.467801][ T2198] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 159.467801][ T2198] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 159.467801][ T2198] [ 159.486773][ T331] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 159.495226][ T331] usb 7-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 159.504407][ T2198] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 159.516848][ T2198] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 159.522323][ T331] usb 7-1: config 220 has no interface number 2 [ 159.527530][ T2198] EXT4-fs (loop4): group descriptors corrupted! [ 159.540780][ T331] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 159.555186][ T331] usb 7-1: config 220 interface 0 has no altsetting 0 [ 159.562320][ T331] usb 7-1: config 220 interface 76 has no altsetting 0 [ 159.569968][ T331] usb 7-1: config 220 interface 1 has no altsetting 0 [ 159.747872][ T2210] securityfs: Unknown parameter 'm8{>bvZ000&' [ 159.975088][ T331] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 159.984776][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.993291][ T331] usb 7-1: Product: syz [ 159.997931][ T331] usb 7-1: Manufacturer: syz [ 160.002615][ T331] usb 7-1: SerialNumber: syz [ 160.134858][ T30] audit: type=1400 audit(1780683438.300:515): avc: denied { relabelfrom } for pid=2220 comm="syz.0.580" name="TCP" dev="sockfs" ino=23223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 160.157713][ T30] audit: type=1401 audit(1780683438.300:516): op=setxattr invalid_context="" [ 160.395848][ T331] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 160.402551][ T331] usb 7-1: No valid video chain found. [ 160.408695][ T331] usb 7-1: selecting invalid altsetting 0 [ 160.539385][ T331] usb 7-1: USB disconnect, device number 5 [ 160.756476][ T2234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.585'. [ 161.202165][ T6] usb 5-1: USB disconnect, device number 14 [ 161.236900][ T2249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 161.250045][ T2250] loop4: detected capacity change from 0 to 512 [ 161.305653][ T2250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.342946][ T2260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.596'. [ 161.357605][ T2250] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.591: invalid indirect mapped block 9 (level 0) [ 161.402068][ T2263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 161.411596][ T2263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 161.425321][ T2250] EXT4-fs (loop4): 1 truncate cleaned up [ 161.431279][ T2250] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 161.475047][ T30] audit: type=1400 audit(1780683439.630:517): avc: denied { mounton } for pid=2245 comm="syz.4.591" path="/97/bus/file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.531659][ T30] audit: type=1400 audit(1780683439.630:518): avc: denied { remove_name } for pid=2245 comm="syz.4.591" name="#28" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.554479][ T30] audit: type=1400 audit(1780683439.630:519): avc: denied { unlink } for pid=2245 comm="syz.4.591" name="#29" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.658039][ T2272] loop6: detected capacity change from 0 to 1024 [ 163.131342][ T2284] loop5: detected capacity change from 0 to 256 [ 163.145024][ T6] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.189818][ T2284] FAT-fs (loop5): Directory bread(block 64) failed [ 163.196911][ T2284] FAT-fs (loop5): Directory bread(block 65) failed [ 163.203663][ T2284] FAT-fs (loop5): Directory bread(block 66) failed [ 163.210816][ T2284] FAT-fs (loop5): Directory bread(block 67) failed [ 163.217885][ T2284] FAT-fs (loop5): Directory bread(block 68) failed [ 163.224692][ T2284] FAT-fs (loop5): Directory bread(block 69) failed [ 163.231799][ T2284] FAT-fs (loop5): Directory bread(block 70) failed [ 163.238966][ T2284] FAT-fs (loop5): Directory bread(block 71) failed [ 163.245818][ T2284] FAT-fs (loop5): Directory bread(block 72) failed [ 163.252514][ T2284] FAT-fs (loop5): Directory bread(block 73) failed [ 163.264171][ T2290] loop6: detected capacity change from 0 to 40427 [ 163.385028][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 163.395742][ T2284] attempt to access beyond end of device [ 163.395742][ T2284] loop5: rw=2049, want=1480, limit=256 [ 163.407153][ T2284] attempt to access beyond end of device [ 163.407153][ T2284] loop5: rw=2049, want=1832, limit=256 [ 163.418777][ T2284] attempt to access beyond end of device [ 163.418777][ T2284] loop5: rw=2049, want=2272, limit=256 [ 163.431567][ T2290] F2FS-fs (loop6): invalid crc value [ 163.457845][ T2290] F2FS-fs (loop6): Found nat_bits in checkpoint [ 163.538781][ T2290] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 163.605661][ T2290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.665186][ T6] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 163.729007][ T2299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 163.905074][ T331] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 164.016651][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.024719][ T6] usb 5-1: Product: syz [ 164.029078][ T6] usb 5-1: Manufacturer: syz [ 164.033742][ T6] usb 5-1: SerialNumber: syz [ 164.039624][ T6] usb 5-1: config 0 descriptor?? [ 164.165054][ T331] usb 7-1: Using ep0 maxpacket: 16 [ 164.258953][ T285] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 164.295422][ T6] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 164.305100][ T331] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 164.313881][ T331] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.330711][ T331] usb 7-1: config 0 has no interface number 0 [ 164.364397][ T6] usb 5-1: USB disconnect, device number 15 [ 164.377673][ T10] attempt to access beyond end of device [ 164.377673][ T10] loop5: rw=1, want=1240, limit=256 [ 164.443939][ T2305] netlink: 40 bytes leftover after parsing attributes in process `syz.5.610'. [ 164.495354][ T331] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 164.505102][ T331] usb 7-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 164.513364][ T331] usb 7-1: Product: syz [ 164.519291][ T331] usb 7-1: Manufacturer: syz [ 164.524095][ T331] usb 7-1: SerialNumber: syz [ 164.586482][ T331] usb 7-1: config 0 descriptor?? [ 164.856576][ T2290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.607'. [ 164.885130][ T331] usb 7-1: Found UVC 0.00 device syz (046c:14e8) [ 164.891722][ T331] usb 7-1: No valid video chain found. [ 164.905596][ T2312] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.912733][ T2312] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.920437][ T2312] device bridge_slave_0 entered promiscuous mode [ 164.927587][ T2312] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.934913][ T2312] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.942837][ T2312] device bridge_slave_1 entered promiscuous mode [ 164.996978][ T2312] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.004107][ T2312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.011664][ T2312] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.018747][ T2312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.042095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.049993][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.057840][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.067232][ T313] device bridge_slave_1 left promiscuous mode [ 165.073485][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.081489][ T313] device bridge_slave_0 left promiscuous mode [ 165.089156][ T6] usb 7-1: USB disconnect, device number 6 [ 165.095808][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.104762][ T313] device veth1_macvtap left promiscuous mode [ 165.110936][ T313] device veth0_vlan left promiscuous mode [ 165.273117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.281633][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.289027][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.304217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.313410][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.320692][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.890181][ T2327] loop5: detected capacity change from 0 to 1024 [ 165.981519][ T2327] EXT4-fs (loop5): Ignoring removed orlov option [ 166.456774][ T2327] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 166.484223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.506118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.577033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.602591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.632725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.642635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.669231][ T2312] device veth0_vlan entered promiscuous mode [ 166.675773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.684051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.702316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.726470][ T2345] netlink: 60 bytes leftover after parsing attributes in process `syz.6.623'. [ 166.745570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.752956][ T2345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.623'. [ 166.763192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.784316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.803982][ T2312] device veth1_macvtap entered promiscuous mode [ 166.824313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.834755][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.854097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.889266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.907895][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.987748][ T2354] overlayfs: failed to clone upperpath [ 167.325148][ T2010] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 167.337029][ T2359] binder: BINDER_SET_CONTEXT_MGR already set [ 167.349363][ T2359] binder: 2358:2359 ioctl 4018620d 200000004a80 returned -16 [ 167.358692][ T2350] loop5: detected capacity change from 0 to 40427 [ 167.376481][ T2350] F2FS-fs (loop5): invalid crc value [ 167.387295][ T2350] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.426278][ T2350] F2FS-fs (loop5): Start checkpoint disabled! [ 167.433202][ T2350] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 167.463857][ T30] audit: type=1400 audit(1780683445.630:520): avc: denied { read } for pid=2349 comm="syz.5.625" path="/63/file0/file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.490350][ T2350] attempt to access beyond end of device [ 167.490350][ T2350] loop5: rw=2049, want=45192, limit=40427 [ 167.507204][ T2350] attempt to access beyond end of device [ 167.507204][ T2350] loop5: rw=2049, want=77864, limit=40427 [ 167.518916][ T2350] attempt to access beyond end of device [ 167.518916][ T2350] loop5: rw=2049, want=45192, limit=40427 [ 167.531440][ T30] audit: type=1400 audit(1780683445.700:521): avc: denied { append } for pid=2349 comm="syz.5.625" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.586450][ T10] attempt to access beyond end of device [ 167.586450][ T10] loop5: rw=2049, want=40984, limit=40427 [ 167.695119][ T2010] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.715033][ T2010] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.805230][ T2010] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.817874][ T2010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.834897][ T2010] usb 7-1: SerialNumber: syz [ 168.176019][ T2010] usb 7-1: 0:2 : does not exist [ 168.193780][ T2374] loop7: detected capacity change from 0 to 512 [ 168.332436][ T2374] EXT4-fs (loop7): 1 orphan inode deleted [ 168.347399][ T2374] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,nombcache,delalloc,dioread_lock,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 168.502666][ T2010] usb 7-1: USB disconnect, device number 7 [ 168.843755][ T2391] loop5: detected capacity change from 0 to 128 [ 169.105710][ T2391] EXT4-fs (loop5): Test dummy encryption mode enabled [ 169.497457][ T2391] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 169.606996][ T2391] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.661845][ T2391] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 169.786718][ T2410] binder: BINDER_SET_CONTEXT_MGR already set [ 169.792788][ T2410] binder: 2409:2410 ioctl 4018620d 200000004a80 returned -16 [ 169.814228][ T2406] x_tables: duplicate underflow at hook 1 [ 169.986453][ T2429] netlink: 60 bytes leftover after parsing attributes in process `syz.7.647'. [ 169.996334][ T2429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.647'. [ 170.089088][ T2441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.654'. [ 170.162032][ T2443] overlayfs: failed to clone upperpath [ 170.285112][ T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 170.655132][ T26] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.673599][ T26] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.775070][ T26] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.790268][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.813953][ T26] usb 8-1: SerialNumber: syz [ 170.971428][ T2449] netlink: 484 bytes leftover after parsing attributes in process `syz.5.656'. [ 171.095779][ T26] usb 8-1: 0:2 : does not exist [ 171.112754][ T26] usb 8-1: USB disconnect, device number 2 [ 171.132754][ T1660] udevd[1660]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.329626][ T2472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.662'. [ 172.255905][ T2474] securityfs: Unknown parameter 'm8{>bvZ000&' [ 172.454758][ T2477] binder: BINDER_SET_CONTEXT_MGR already set [ 172.475132][ T2477] binder: 2476:2477 ioctl 4018620d 200000004a80 returned -16 [ 173.760253][ T30] audit: type=1326 audit(1780683451.930:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 173.810380][ T30] audit: type=1326 audit(1780683451.950:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 173.904026][ T30] audit: type=1326 audit(1780683451.950:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 175.738626][ T30] audit: type=1326 audit(1780683451.950:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 175.789362][ T30] audit: type=1326 audit(1780683451.950:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 175.871585][ T30] audit: type=1326 audit(1780683451.950:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 175.910406][ T30] audit: type=1326 audit(1780683451.950:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 175.935590][ T30] audit: type=1326 audit(1780683451.950:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.7.673" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 176.099416][ T2515] overlayfs: failed to clone upperpath [ 176.295109][ T349] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 176.422948][ T2505] loop6: detected capacity change from 0 to 40427 [ 176.447355][ T2505] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 176.523801][ T2505] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 176.536105][ T2505] F2FS-fs (loop6): invalid crc value [ 176.543231][ T2505] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 176.567510][ T2505] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 176.574794][ T2505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 176.605150][ T349] usb 8-1: device descriptor read/64, error -71 [ 176.712449][ T2530] loop5: detected capacity change from 0 to 128 [ 176.865031][ T2010] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 176.907166][ T2533] loop5: detected capacity change from 0 to 1024 [ 176.958905][ T2533] EXT4-fs (loop5): Ignoring removed orlov option [ 177.004402][ T2533] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 177.055036][ T349] usb 8-1: device descriptor read/64, error -71 [ 177.155516][ T2546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2546 comm=syz.5.688 [ 177.168652][ T2546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=2546 comm=syz.5.688 [ 177.189181][ T2546] loop5: detected capacity change from 0 to 2048 [ 177.275171][ T2010] usb 7-1: unable to get BOS descriptor or descriptor too short [ 177.285183][ T2546] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 177.305173][ T2546] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 177.335153][ T349] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 177.362061][ T2546] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,discard,errors=remount-ro,mblk_io_submit,quota,mblk_io_submit,errors=continue,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: writeback. [ 177.375247][ T2010] usb 7-1: config index 0 descriptor too short (expected 64366, got 110) [ 177.394520][ T2010] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.404867][ T2010] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 177.516648][ T30] audit: type=1326 audit(1780683455.690:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.5.688" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x0 [ 177.575176][ T2010] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 177.591323][ T2010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.618166][ T2010] usb 7-1: Product: syz [ 177.631498][ T2010] usb 7-1: Manufacturer: syz [ 177.646724][ T2010] usb 7-1: SerialNumber: syz [ 177.655180][ T349] usb 8-1: device descriptor read/64, error -71 [ 178.050381][ T10] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 234: padding at end of block bitmap is not set [ 178.065148][ T349] usb 8-1: device descriptor read/64, error -71 [ 178.097075][ T10] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.112740][ T10] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.112740][ T10] [ 178.138072][ T10] EXT4-fs (loop5): Total free blocks count 0 [ 178.146280][ T10] EXT4-fs (loop5): Free/Dirty block details [ 178.152301][ T10] EXT4-fs (loop5): free_blocks=0 [ 178.157891][ T10] EXT4-fs (loop5): dirty_blocks=4112 [ 178.163269][ T10] EXT4-fs (loop5): Block reservation details [ 178.169811][ T10] EXT4-fs (loop5): i_reserved_data_blocks=257 [ 178.178582][ T10] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 178.191809][ T349] usb usb8-port1: attempt power cycle [ 178.197546][ T10] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.197546][ T10] [ 178.255107][ T2010] usb 7-1: Can't get UAC3 power state for id 10 [ 178.335084][ T2010] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 178.358372][ T2010] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 178.383598][ T2010] usb 7-1: USB disconnect, device number 8 [ 178.407717][ T2574] binder: BINDER_SET_CONTEXT_MGR already set [ 178.413823][ T2574] binder: 2573:2574 ioctl 4018620d 200000004a80 returned -16 [ 178.543472][ T2580] overlayfs: failed to clone upperpath [ 178.665097][ T349] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 178.875097][ T349] usb 8-1: device descriptor read/8, error -71 [ 179.049733][ T2585] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 179.058476][ T2585] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 179.067138][ T2585] pit: kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 179.075929][ T2585] pit: kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 179.084425][ T2585] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 179.093056][ T2585] pit: kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 179.095259][ T349] usb 8-1: device descriptor read/8, error -71 [ 179.108195][ T2585] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 181.654771][ T2601] binder: BINDER_SET_CONTEXT_MGR already set [ 181.709574][ T2601] binder: 2595:2601 ioctl 4018620d 200000004a80 returned -16 [ 183.264152][ T2623] overlayfs: failed to clone upperpath [ 183.430616][ T2634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 184.237903][ T2611] loop5: detected capacity change from 0 to 40427 [ 184.256054][ T2611] F2FS-fs (loop5): invalid crc value [ 184.266737][ T2611] F2FS-fs (loop5): Found nat_bits in checkpoint [ 184.306295][ T2611] F2FS-fs (loop5): Start checkpoint disabled! [ 184.313550][ T2611] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 184.371224][ T2649] binder_alloc: 2648: binder_alloc_buf, no vma [ 184.573795][ T2652] binder: BINDER_SET_CONTEXT_MGR already set [ 184.580294][ T2652] binder: 2651:2652 ioctl 4018620d 200000004a80 returned -16 [ 185.773587][ T2678] overlayfs: failed to clone upperpath [ 186.078876][ T2683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2683 comm=syz.7.727 [ 186.111086][ T2683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.727'. [ 186.129082][ T2683] xt_hashlimit: size too large, truncated to 1048576 [ 186.244913][ T2661] loop6: detected capacity change from 0 to 131072 [ 186.304255][ T2661] F2FS-fs (loop6): Test dummy encryption mode enabled [ 186.320783][ T2661] F2FS-fs (loop6): invalid crc value [ 186.346713][ T2661] F2FS-fs (loop6): Found nat_bits in checkpoint [ 186.389169][ T2661] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 186.474432][ T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 186.636298][ T2696] netlink: 12 bytes leftover after parsing attributes in process `syz.7.728'. [ 187.900310][ T2700] binder_alloc: 2699: binder_alloc_buf, no vma [ 187.983071][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 188.665178][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 188.720883][ T2714] binder: BINDER_SET_CONTEXT_MGR already set [ 188.727110][ T20] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 188.784106][ T2714] binder: 2713:2714 ioctl 4018620d 200000004a80 returned -16 [ 188.866208][ T20] usb 6-1: can't read configurations, error -71 [ 188.886758][ T2718] device vlan2 entered promiscuous mode [ 188.892427][ T2718] device syz_tun entered promiscuous mode [ 190.436476][ T2727] overlayfs: failed to clone upperpath [ 190.458637][ T2726] overlayfs: failed to clone upperpath [ 190.485062][ T30] audit: type=1326 audit(1780683468.650:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.503437][ T2732] loop6: detected capacity change from 0 to 1024 [ 190.516949][ T30] audit: type=1326 audit(1780683468.690:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.542246][ T30] audit: type=1326 audit(1780683468.690:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.574182][ T30] audit: type=1326 audit(1780683468.690:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.599514][ T30] audit: type=1326 audit(1780683468.690:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.632844][ T30] audit: type=1326 audit(1780683468.690:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.659027][ T30] audit: type=1326 audit(1780683468.690:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.684210][ T2732] EXT4-fs (loop6): Ignoring removed orlov option [ 190.697305][ T30] audit: type=1326 audit(1780683468.690:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 190.707950][ T2732] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 190.725059][ T30] audit: type=1326 audit(1780683468.690:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.5.739" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd962e84e59 code=0x7ffc0000 [ 191.165030][ T20] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 193.028492][ T20] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.037226][ T20] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 193.048893][ T20] usb 6-1: config 220 has no interface number 2 [ 193.055352][ T20] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 193.068740][ T20] usb 6-1: config 220 interface 0 has no altsetting 0 [ 193.075679][ T20] usb 6-1: config 220 interface 76 has no altsetting 0 [ 193.083047][ T20] usb 6-1: config 220 interface 1 has no altsetting 0 [ 193.100663][ T2765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.751'. [ 193.109886][ T2765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 193.132486][ T2763] binder: BINDER_SET_CONTEXT_MGR already set [ 193.138825][ T2763] binder: 2762:2763 ioctl 4018620d 200000004a80 returned -16 [ 193.426307][ T20] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.435440][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.443451][ T20] usb 6-1: Product: syz [ 193.447894][ T20] usb 6-1: Manufacturer: syz [ 193.452520][ T20] usb 6-1: SerialNumber: syz [ 193.487650][ T2772] overlayfs: failed to resolve './file0': -2 [ 193.582714][ T30] audit: type=1400 audit(1780683471.750:540): avc: denied { bind } for pid=2778 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.630763][ T2783] loop5: detected capacity change from 0 to 512 [ 193.641267][ T2783] EXT4-fs (loop5): Ignoring removed nobh option [ 193.658166][ T2783] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 193.672747][ T2783] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.683294][ T20] usb 6-1: selecting invalid altsetting 0 [ 193.689234][ T20] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 193.696457][ T20] usb 6-1: No valid video chain found. [ 193.702628][ T2783] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.756: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 193.786560][ T20] usb 6-1: USB disconnect, device number 7 [ 194.616050][ T2797] loop6: detected capacity change from 0 to 131072 [ 194.638195][ T2797] F2FS-fs (loop6): Test dummy encryption mode enabled [ 194.656186][ T2797] F2FS-fs (loop6): invalid crc value [ 194.681450][ T2797] F2FS-fs (loop6): Found nat_bits in checkpoint [ 194.734736][ T2818] bridge0: port 3(syz_tun) entered disabled state [ 194.759640][ T20] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 194.803816][ T2822] overlayfs: failed to clone upperpath [ 194.820932][ T2797] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 195.148622][ T2827] fuse: Bad value for 'user_id' [ 195.525097][ T20] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.587984][ T20] usb 6-1: config 220 has an invalid descriptor of length 118, skipping remainder of the config [ 195.603325][ T20] usb 6-1: config 220 has no interface number 2 [ 195.610151][ T20] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.623541][ T20] usb 6-1: config 220 interface 0 has no altsetting 0 [ 195.640845][ T20] usb 6-1: config 220 interface 76 has no altsetting 0 [ 195.649114][ T2835] binder: BINDER_SET_CONTEXT_MGR already set [ 195.655271][ T20] usb 6-1: config 220 interface 1 has no altsetting 0 [ 195.665915][ T2835] binder: 2834:2835 ioctl 4018620d 200000004a80 returned -16 [ 195.815098][ T20] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.828474][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.845042][ T20] usb 6-1: Product: syz [ 195.851028][ T20] usb 6-1: Manufacturer: syz [ 195.856070][ T20] usb 6-1: SerialNumber: syz [ 195.967548][ T2851] netlink: 388 bytes leftover after parsing attributes in process `syz.7.777'. [ 196.355641][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 196.355655][ T30] audit: type=1326 audit(1780683474.530:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 196.574345][ T30] audit: type=1326 audit(1780683474.560:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 197.103332][ T30] audit: type=1326 audit(1780683474.560:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 197.133176][ T2881] loop5: detected capacity change from 0 to 4096 [ 197.145216][ T20] usb 6-1: selecting invalid altsetting 0 [ 197.153270][ T20] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 197.160625][ T2881] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 197.170451][ T20] usb 6-1: No valid video chain found. [ 197.179994][ T2881] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 197.190235][ T30] audit: type=1326 audit(1780683474.560:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 197.215189][ T30] audit: type=1326 audit(1780683474.560:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 197.215271][ T2881] System zones: [ 197.240026][ T30] audit: type=1326 audit(1780683474.560:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 197.268421][ T30] audit: type=1326 audit(1780683474.560:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2862 comm="syz.7.780" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 197.282323][ T2881] 0-5 [ 197.296388][ T20] usb 6-1: USB disconnect, device number 8 [ 197.302540][ T2881] [ 197.324688][ T2881] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,bsddf,errors=continue,jqfmt=vfsv0,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 197.408668][ T30] audit: type=1400 audit(1780683475.580:555): avc: denied { write } for pid=2880 comm="syz.5.787" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.430550][ T30] audit: type=1400 audit(1780683475.580:556): avc: denied { add_name } for pid=2880 comm="syz.5.787" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.433492][ T2881] netlink: 72 bytes leftover after parsing attributes in process `syz.5.787'. [ 197.452026][ T30] audit: type=1400 audit(1780683475.600:557): avc: denied { read write } for pid=2880 comm="syz.5.787" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.660384][ T2896] netlink: 60 bytes leftover after parsing attributes in process `syz.7.792'. [ 197.671817][ T2896] netlink: 28 bytes leftover after parsing attributes in process `syz.7.792'. [ 197.968500][ T20] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 198.214998][ T20] usb 7-1: Using ep0 maxpacket: 32 [ 198.255108][ T20] usb 7-1: too many configurations: 66, using maximum allowed: 8 [ 198.385065][ T20] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 198.392775][ T20] usb 7-1: can't read configurations, error -61 [ 199.328637][ T2917] netlink: 16 bytes leftover after parsing attributes in process `syz.7.798'. [ 199.346523][ T2917] loop7: detected capacity change from 0 to 512 [ 199.377094][ T2917] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.525062][ T20] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 199.573304][ T2935] netlink: 60 bytes leftover after parsing attributes in process `syz.7.803'. [ 199.582792][ T2935] netlink: 28 bytes leftover after parsing attributes in process `syz.7.803'. [ 199.719371][ T2937] loop5: detected capacity change from 0 to 512 [ 199.778232][ T2937] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 199.815629][ T2937] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.089195][ T2949] binder: BINDER_SET_CONTEXT_MGR already set [ 200.105011][ T2949] binder: 2948:2949 ioctl 4018620d 200000004a80 returned -16 [ 200.275037][ T20] usb 7-1: Using ep0 maxpacket: 32 [ 200.315180][ T20] usb 7-1: too many configurations: 66, using maximum allowed: 8 [ 200.435089][ T20] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 200.442949][ T20] usb 7-1: can't read configurations, error -61 [ 200.449728][ T20] usb usb7-port1: attempt power cycle [ 201.035061][ T6] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 201.141890][ T2968] securityfs: Unknown parameter 'm8{>bvZ000&' [ 201.324286][ T2970] netlink: 60 bytes leftover after parsing attributes in process `syz.6.815'. [ 201.333675][ T2970] netlink: 28 bytes leftover after parsing attributes in process `syz.6.815'. [ 202.243994][ T2987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 202.306364][ T2982] securityfs: Unknown parameter 'm8{>bvZ000&' [ 202.618132][ T2996] fuse: Unknown parameter '0xffffffffffffffff' [ 202.995044][ T6] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 203.006701][ T6] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 203.030795][ T6] usb 8-1: config 220 has no interface number 2 [ 203.043367][ T6] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 203.071781][ T6] usb 8-1: config 220 interface 0 has no altsetting 0 [ 203.085839][ T6] usb 8-1: config 220 interface 76 has no altsetting 0 [ 203.100091][ T6] usb 8-1: config 220 interface 1 has no altsetting 0 [ 203.108822][ T3001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'. [ 203.118051][ T3001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 203.265155][ T6] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 203.278456][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.301955][ T6] usb 8-1: Product: syz [ 203.311559][ T6] usb 8-1: Manufacturer: syz [ 203.321600][ T6] usb 8-1: SerialNumber: syz [ 204.040559][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 204.040574][ T30] audit: type=1400 audit(1780683482.175:562): avc: denied { create } for pid=3020 comm="syz.7.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.093049][ T6] usb 8-1: selecting invalid altsetting 0 [ 204.098961][ T6] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 204.105780][ T6] usb 8-1: No valid video chain found. [ 204.142857][ T2989] loop6: detected capacity change from 0 to 131072 [ 204.164784][ T2989] F2FS-fs (loop6): Test dummy encryption mode enabled [ 204.183732][ T2989] F2FS-fs (loop6): invalid crc value [ 204.198957][ T2989] F2FS-fs (loop6): Found nat_bits in checkpoint [ 204.530657][ T6] usb 8-1: USB disconnect, device number 7 [ 204.557610][ T2989] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 204.605333][ T30] audit: type=1400 audit(1780683482.690:563): avc: denied { create } for pid=3038 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 206.826849][ T3066] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 206.836646][ T3066] SELinux: security_context_str_to_sid(root) failed for (dev cgroup2, type cgroup2) errno=-22 [ 206.959281][ T3075] netlink: 40 bytes leftover after parsing attributes in process `syz.5.845'. [ 207.071783][ T3076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.847'. [ 207.526513][ T30] audit: type=1400 audit(1780683485.431:564): avc: denied { block_suspend } for pid=3080 comm="syz.0.849" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.567954][ T3083] netlink: 388 bytes leftover after parsing attributes in process `syz.0.850'. [ 207.873088][ T3099] 9pnet_virtio: no channels available for device syz [ 208.018276][ T3105] securityfs: Unknown parameter 'm8{>bvZ000&' [ 208.702405][ T3119] loop5: detected capacity change from 0 to 256 [ 208.732057][ T30] audit: type=1400 audit(1780683486.553:565): avc: denied { nlmsg_read } for pid=3122 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.763693][ T30] audit: type=1400 audit(1780683486.581:566): avc: denied { ioctl } for pid=3122 comm="syz.0.867" path="socket:[25987]" dev="sockfs" ino=25987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.807613][ T3119] exfat: Unknown parameter 'uf8O@[$C}RN`R&ɺXUԕ{D”3$SHs9Ty O3e> [ 208.807613][ T3119] G`2_0ٲk#' [ 208.854846][ T3101] loop7: detected capacity change from 0 to 131072 [ 208.916655][ T3101] F2FS-fs (loop7): Test dummy encryption mode enabled [ 208.924505][ T3101] F2FS-fs (loop7): invalid crc value [ 208.935549][ T3101] F2FS-fs (loop7): Found nat_bits in checkpoint [ 208.985486][ T3101] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 209.024941][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.869'. [ 209.864460][ T3154] netlink: 388 bytes leftover after parsing attributes in process `syz.6.878'. [ 209.943414][ T30] audit: type=1400 audit(1780683487.694:567): avc: denied { connect } for pid=3158 comm="syz.7.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.007724][ T3159] xt_hashlimit: size too large, truncated to 1048576 [ 211.310897][ T3179] device vlan2 entered promiscuous mode [ 211.317343][ T3180] loop7: detected capacity change from 0 to 128 [ 211.323809][ T3179] device syz_tun entered promiscuous mode [ 211.427389][ T3180] attempt to access beyond end of device [ 211.427389][ T3180] loop7: rw=2049, want=172, limit=128 [ 211.461372][ T3180] Buffer I/O error on dev loop7, logical block 171, lost async page write [ 211.814423][ T380] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 212.164754][ T380] usb 8-1: Using ep0 maxpacket: 16 [ 212.287544][ T3220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 212.549044][ T20] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 212.804243][ T380] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 212.814448][ T380] usb 8-1: New USB device strings: Mfr=18, Product=2, SerialNumber=3 [ 212.825971][ T380] usb 8-1: Product: syz [ 212.831344][ T380] usb 8-1: Manufacturer: syz [ 212.837124][ T380] usb 8-1: SerialNumber: syz [ 213.003276][ T20] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.013685][ T20] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.105033][ T20] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 213.116425][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.126701][ T20] usb 7-1: SerialNumber: syz [ 213.172157][ T20] usb 7-1: 0:2 : does not exist [ 213.416889][ T20] usb 7-1: USB disconnect, device number 12 [ 213.570120][ T380] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 213.596790][ T380] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 213.605346][ T380] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 213.643863][ T380] usb 8-1: USB disconnect, device number 8 [ 213.688169][ T3249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 213.734283][ T8] attempt to access beyond end of device [ 213.734283][ T8] loop7: rw=1, want=172, limit=128 [ 213.745079][ T8] Buffer I/O error on dev loop7, logical block 171, lost async page write [ 213.810532][ T349] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 213.826222][ T3251] loop7: detected capacity change from 0 to 16 [ 213.845495][ T1682] udevd[1682]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.861462][ T3251] erofs: (device loop7): mounted with root inode @ nid 36. [ 213.874880][ T3251] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 213.890657][ T1660] udevd[1660]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 214.144002][ T3256] securityfs: Unknown parameter 'm8{>bvZ000&' [ 214.227475][ T380] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 214.653039][ T349] usb 6-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 214.663404][ T349] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 214.675359][ T349] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 8909, setting to 1024 [ 214.677820][ T3260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'. [ 214.686807][ T349] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.696389][ T380] usb 8-1: Using ep0 maxpacket: 32 [ 214.703719][ T349] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 214.716875][ T349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.725732][ T349] usb 6-1: config 0 descriptor?? [ 214.826173][ T380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 214.837541][ T380] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.850665][ T380] usb 8-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 214.859802][ T380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.868940][ T380] usb 8-1: config 0 descriptor?? [ 215.242573][ T349] kye 0003:0458:5015.000B: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 215.289215][ T349] kye 0003:0458:5015.000B: tablet-enabling feature report not found [ 215.299041][ T349] kye 0003:0458:5015.000B: tablet enabling failed [ 215.452356][ T20] usb 6-1: USB disconnect, device number 9 [ 215.629398][ T3272] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 215.638402][ T3272] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 215.821694][ T3291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.923'. [ 216.302466][ T3303] binder: BINDER_SET_CONTEXT_MGR already set [ 216.332954][ T3303] binder: 3302:3303 ioctl 4018620d 200000004a80 returned -16 [ 216.880683][ T3322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'. [ 217.196705][ T380] usbhid 8-1:0.0: can't add hid device: -71 [ 217.226161][ T380] usbhid: probe of 8-1:0.0 failed with error -71 [ 217.324803][ T380] usb 8-1: USB disconnect, device number 9 [ 217.348431][ T3330] loop5: detected capacity change from 0 to 1024 [ 217.372567][ T3330] EXT4-fs (loop5): Ignoring removed orlov option [ 217.397274][ T3330] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 217.940914][ T3353] netlink: 16 bytes leftover after parsing attributes in process `syz.6.945'. [ 217.955329][ T3353] loop6: detected capacity change from 0 to 512 [ 218.009299][ T3353] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.379864][ T3358] loop6: detected capacity change from 0 to 131072 [ 218.503052][ T3358] F2FS-fs (loop6): Found nat_bits in checkpoint [ 218.569982][ T3358] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 218.670239][ T3377] FAULT_INJECTION: forcing a failure. [ 218.670239][ T3377] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 218.790220][ T3377] CPU: 1 PID: 3377 Comm: syz.7.949 Not tainted syzkaller #0 [ 218.797586][ T3377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.807902][ T3377] Call Trace: [ 218.811213][ T3377] [ 218.814182][ T3377] __dump_stack+0x21/0x30 [ 218.818596][ T3377] dump_stack_lvl+0x110/0x170 [ 218.823314][ T3377] ? show_regs_print_info+0x20/0x20 [ 218.828548][ T3377] ? format_decode+0x1bb/0x1520 [ 218.833440][ T3377] dump_stack+0x15/0x20 [ 218.837718][ T3377] should_fail+0x3c1/0x510 [ 218.842180][ T3377] should_fail_usercopy+0x1a/0x20 [ 218.847263][ T3377] _copy_from_user+0x20/0xd0 [ 218.852014][ T3377] kstrtouint_from_user+0xd3/0x220 [ 218.857167][ T3377] ? kstrtol_from_user+0x2a0/0x2a0 [ 218.862319][ T3377] ? 0xffffffff81000000 [ 218.866503][ T3377] ? _copy_to_user+0x78/0x90 [ 218.871115][ T3377] ? simple_read_from_buffer+0x10f/0x160 [ 218.876779][ T3377] proc_fail_nth_write+0x8b/0x200 [ 218.881832][ T3377] ? proc_fail_nth_read+0x220/0x220 [ 218.887064][ T3377] ? security_file_permission+0x79/0xa0 [ 218.892640][ T3377] ? security_file_permission+0x83/0xa0 [ 218.898304][ T3377] ? proc_fail_nth_read+0x220/0x220 [ 218.903598][ T3377] vfs_write+0x3f9/0xfd0 [ 218.907872][ T3377] ? file_end_write+0x1b0/0x1b0 [ 218.912748][ T3377] ? __kasan_check_write+0x14/0x20 [ 218.917882][ T3377] ? mutex_lock+0x9b/0x1c0 [ 218.922328][ T3377] ? wait_for_completion_killable_timeout+0x10/0x10 [ 218.928941][ T3377] ? __fget_files+0x2c4/0x320 [ 218.933646][ T3377] ? __fdget_pos+0x2d2/0x380 [ 218.938253][ T3377] ? ksys_write+0x71/0x250 [ 218.942698][ T3377] ksys_write+0x149/0x250 [ 218.947051][ T3377] ? __ia32_sys_read+0x90/0x90 [ 218.952018][ T3377] ? debug_smp_processor_id+0x17/0x20 [ 218.957410][ T3377] __x64_sys_write+0x7b/0x90 [ 218.962021][ T3377] x64_sys_call+0x8ef/0x9a0 [ 218.966547][ T3377] do_syscall_64+0x4c/0xa0 [ 218.970987][ T3377] ? clear_bhb_loop+0x50/0xa0 [ 218.975687][ T3377] ? clear_bhb_loop+0x50/0xa0 [ 218.980397][ T3377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.986321][ T3377] RIP: 0033:0x7f3d966a468e [ 218.990760][ T3377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.010484][ T3377] RSP: 002b:00007f3d950fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.018938][ T3377] RAX: ffffffffffffffda RBX: 00007f3d950fc6c0 RCX: 00007f3d966a468e [ 219.026939][ T3377] RDX: 0000000000000001 RSI: 00007f3d950fc0a0 RDI: 0000000000000005 [ 219.035112][ T3377] RBP: 00007f3d950fc090 R08: 0000000000000000 R09: 0000000000000000 [ 219.043192][ T3377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.051188][ T3377] R13: 00007f3d9695d218 R14: 00007f3d9695d180 R15: 00007ffdbf56b9b8 [ 219.059194][ T3377] [ 219.219947][ T293] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 219.260182][ T3385] overlayfs: failed to clone upperpath [ 219.465456][ T3387] loop7: detected capacity change from 0 to 256 [ 219.497918][ T293] usb 6-1: Using ep0 maxpacket: 32 [ 219.545095][ T380] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 219.560584][ T30] audit: type=1400 audit(1780683496.684:568): avc: denied { create } for pid=3386 comm="syz.7.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.571617][ T3389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'. [ 219.634610][ T30] audit: type=1326 audit(1780683496.749:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.659660][ T30] audit: type=1326 audit(1780683496.749:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.697056][ T30] audit: type=1326 audit(1780683496.749:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.727734][ T30] audit: type=1326 audit(1780683496.749:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.754890][ T30] audit: type=1326 audit(1780683496.749:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.780290][ T293] usb 6-1: unable to get BOS descriptor or descriptor too short [ 219.814199][ T30] audit: type=1326 audit(1780683496.749:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.847947][ T30] audit: type=1326 audit(1780683496.749:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.880021][ T30] audit: type=1326 audit(1780683496.749:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.908252][ T30] audit: type=1326 audit(1780683496.749:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.957" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 219.946936][ T293] usb 6-1: config 10 has an invalid interface number: 110 but max is 0 [ 219.957262][ T293] usb 6-1: config 10 has no interface number 0 [ 219.964357][ T293] usb 6-1: config 10 interface 110 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 64 [ 219.975781][ T293] usb 6-1: config 10 interface 110 has no altsetting 0 [ 220.160718][ T293] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=ac.5c [ 220.169892][ T293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.178151][ T293] usb 6-1: Product: syz [ 220.182540][ T293] usb 6-1: Manufacturer: syz [ 220.187266][ T293] usb 6-1: SerialNumber: syz [ 220.214194][ T3381] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 220.224836][ T380] usb 7-1: device descriptor read/64, error -71 [ 220.538085][ T293] rtl8150 6-1:10.110: couldn't find required endpoints [ 220.554076][ T293] rtl8150: probe of 6-1:10.110 failed with error -5 [ 220.570103][ T293] usb 6-1: USB disconnect, device number 10 [ 220.581632][ T3416] overlayfs: failed to clone upperpath [ 220.947161][ T380] usb 7-1: device descriptor read/64, error -71 [ 221.075056][ T3428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 222.357495][ T3435] overlayfs: failed to clone upperpath [ 222.551690][ T3437] binder: BINDER_SET_CONTEXT_MGR already set [ 222.557845][ T3437] binder: 3436:3437 ioctl 4018620d 200000004a80 returned -16 [ 222.764252][ T3446] binder: BINDER_SET_CONTEXT_MGR already set [ 222.773412][ T3446] binder: 3445:3446 ioctl 4018620d 200000004a80 returned -16 [ 222.952248][ T3457] overlayfs: failed to clone upperpath [ 223.890086][ T3476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.983'. [ 225.474929][ T3488] fuse: Bad value for 'fd' [ 226.088595][ T3508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.995'. [ 226.623236][ T3528] overlayfs: failed to resolve './file0': -2 [ 226.895598][ T380] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 227.354924][ T3545] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1005'. [ 227.417249][ T3548] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1006'. [ 227.454398][ T3549] overlayfs: failed to clone upperpath [ 227.488297][ T3552] loop6: detected capacity change from 0 to 512 [ 227.526758][ T3552] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.815041][ T380] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 227.823368][ T380] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 227.842202][ T380] usb 8-1: config 220 has no interface number 2 [ 227.856264][ T380] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 227.869603][ T380] usb 8-1: config 220 interface 0 has no altsetting 0 [ 227.876455][ T380] usb 8-1: config 220 interface 76 has no altsetting 0 [ 227.883508][ T380] usb 8-1: config 220 interface 1 has no altsetting 0 [ 227.996186][ T3567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1013'. [ 228.103724][ T380] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 228.112875][ T380] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.126674][ T3573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1016'. [ 228.142028][ T380] usb 8-1: Product: syz [ 228.160788][ T380] usb 8-1: Manufacturer: syz [ 228.165512][ T380] usb 8-1: SerialNumber: syz [ 228.194413][ T3577] overlayfs: failed to clone upperpath [ 228.348015][ T3579] overlayfs: failed to resolve './file0': -2 [ 228.462192][ T3581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 228.709734][ T3589] loop5: detected capacity change from 0 to 1024 [ 228.723834][ T380] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 228.731214][ T380] usb 8-1: No valid video chain found. [ 228.741259][ T380] usb 8-1: selecting invalid altsetting 0 [ 228.777932][ T3589] EXT4-fs (loop5): Ignoring removed orlov option [ 228.811655][ T3589] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 228.836760][ T380] usb 8-1: USB disconnect, device number 10 [ 229.268880][ T315] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 229.281209][ T3596] loop6: detected capacity change from 0 to 128 [ 229.295124][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 229.295138][ T30] audit: type=1400 audit(1780683505.795:579): avc: denied { mount } for pid=3598 comm="syz.7.1024" name="/" dev="pstore" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 229.328899][ T30] audit: type=1400 audit(1780683505.823:580): avc: denied { getopt } for pid=3598 comm="syz.7.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.348815][ T3596] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 229.476260][ T3596] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.498220][ T3596] ext2 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.575568][ T3596] fuse: Bad value for 'group_id' [ 229.609920][ T30] audit: type=1326 audit(1780683506.085:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 229.666621][ T3612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 229.677402][ T30] audit: type=1326 audit(1780683506.113:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 229.722397][ T30] audit: type=1326 audit(1780683506.113:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 229.760071][ T30] audit: type=1326 audit(1780683506.113:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 229.963223][ T3617] overlayfs: failed to clone upperpath [ 230.060332][ T3618] overlayfs: failed to clone upperpath [ 230.117579][ T30] audit: type=1326 audit(1780683506.113:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 230.229207][ T30] audit: type=1326 audit(1780683506.113:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 230.255716][ T30] audit: type=1326 audit(1780683506.113:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3607 comm="syz.0.1027" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 230.389475][ T3620] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1028'. [ 230.455571][ T315] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 230.467202][ T315] usb 6-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 230.488524][ T315] usb 6-1: config 220 has no interface number 2 [ 230.565798][ T3624] overlayfs: failed to resolve './file0': -2 [ 230.829681][ T315] usb 6-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 230.840763][ T315] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 230.865165][ T315] usb 6-1: config 220 interface 0 has no altsetting 0 [ 230.885230][ T315] usb 6-1: config 220 interface 76 has no altsetting 0 [ 230.899853][ T315] usb 6-1: config 220 interface 1 has no altsetting 0 [ 231.086420][ T315] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 231.097067][ T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.105181][ T315] usb 6-1: Product: syz [ 231.109570][ T315] usb 6-1: Manufacturer: syz [ 231.114249][ T315] usb 6-1: SerialNumber: syz [ 231.393181][ T3650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1041'. [ 231.416675][ T3650] loop6: detected capacity change from 0 to 512 [ 231.459297][ T3650] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.535673][ T315] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 231.545929][ T315] usb 6-1: No valid video chain found. [ 231.608696][ T3656] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1043'. [ 231.637324][ T315] usb 6-1: USB disconnect, device number 11 [ 231.703631][ T3658] loop6: detected capacity change from 0 to 512 [ 232.155317][ T315] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 232.211519][ T3673] overlayfs: failed to clone upperpath [ 232.839545][ T315] usb 7-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xA1, skipping [ 232.862525][ T315] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 232.901057][ T315] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.921223][ T315] usb 7-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 232.950710][ T315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.990106][ T315] usb 7-1: config 0 descriptor?? [ 233.021980][ T3659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.044062][ T315] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 233.102664][ T3685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1052'. [ 233.201215][ T3689] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1054'. [ 233.321919][ T3658] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1044'. [ 233.389590][ T3658] loop6: detected capacity change from 0 to 512 [ 233.503230][ T3702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 233.740341][ T3658] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 233.786080][ T3658] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.845322][ T3710] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1060'. [ 233.874233][ T30] audit: type=1400 audit(1780683510.070:588): avc: denied { mounton } for pid=3657 comm="syz.6.1044" path="/102/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.960422][ T3658] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz.6.1044: corrupted xattr block 6 [ 235.752478][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 235.773561][ T3719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 235.801538][ T3658] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1044: corrupted xattr block 33 [ 235.841725][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 235.852926][ T3727] netlink: 'syz.3.1064': attribute type 4 has an invalid length. [ 235.940372][ T3659] overlayfs: './file1' not a directory [ 235.971843][ T30] audit: type=1400 audit(1780683511.978:589): avc: denied { mounton } for pid=3657 comm="syz.6.1044" path="/102/file0/bus" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.121281][ T3658] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1044: corrupted xattr block 33 [ 236.207703][ T3734] overlayfs: failed to clone upperpath [ 236.235499][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 236.260441][ T3658] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1044: corrupted xattr block 33 [ 236.282460][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 236.303687][ T3658] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1044: corrupted xattr block 33 [ 236.320527][ T3736] securityfs: Unknown parameter 'm8{>bvZ000&' [ 236.338120][ T3658] fscrypt (loop6, inode 15): Error -117 getting encryption context [ 236.359694][ T315] usb 7-1: USB disconnect, device number 15 [ 236.988267][ T3749] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1072'. [ 237.004076][ T1572] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 237.036193][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.066190][ T1572] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 237.104648][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.133540][ T1572] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 237.169114][ T30] audit: type=1400 audit(1780683513.156:590): avc: denied { setopt } for pid=3753 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.193094][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.223500][ T1572] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 237.269431][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.280258][ T3760] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1077'. [ 237.303684][ T1572] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 237.322733][ T3760] loop7: detected capacity change from 0 to 512 [ 237.353946][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.371020][ T3760] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.373573][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.404646][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.413963][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.423466][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.433660][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.443270][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.452602][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.463476][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.476192][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.491831][ T3765] securityfs: Unknown parameter 'm8{>bvZ000&' [ 237.500878][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.519845][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.530533][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 237.541470][ T30] audit: type=1400 audit(1780683513.502:591): avc: denied { rmdir } for pid=1572 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.554044][ T1572] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -117) [ 237.574478][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 237.584081][ T1572] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 237.593328][ T30] audit: type=1400 audit(1780683513.559:592): avc: denied { unlink } for pid=1572 comm="syz-executor" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.594516][ T1572] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -117) [ 238.180445][ T3782] overlayfs: failed to clone upperpath [ 238.270259][ T293] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 238.317902][ T3793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'. [ 238.842291][ T293] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.842384][ T293] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 238.950870][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1092'. [ 239.025275][ T293] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.025756][ T293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.026053][ T293] usb 7-1: Product: syz [ 239.027066][ T293] usb 7-1: Manufacturer: syz [ 239.027328][ T293] usb 7-1: SerialNumber: syz [ 239.184490][ T293] cdc_mbim 7-1:1.0: skipping garbage [ 239.910301][ T3776] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.088141][ T30] audit: type=1400 audit(1780683515.888:593): avc: denied { read } for pid=3818 comm="syz.3.1097" path="socket:[28920]" dev="sockfs" ino=28920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.144282][ T30] audit: type=1400 audit(1780683515.944:594): avc: denied { read } for pid=3818 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.226584][ T380] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 240.234668][ T3824] binder: 3823:3824 ioctl 4018620d 0 returned -22 [ 240.590451][ T3776] UDC core: couldn't find an available UDC or it's busy: -16 [ 240.597963][ T3776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.605937][ T3776] UDC core: couldn't find an available UDC or it's busy: -16 [ 240.613436][ T3776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.622203][ T380] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.632803][ T380] usb 8-1: too many endpoints for config 0 interface 0 altsetting 15: 238, using maximum allowed: 30 [ 240.643996][ T380] usb 8-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 240.654585][ T293] cdc_mbim 7-1:1.0: bind() failure [ 240.657813][ T380] usb 8-1: config 0 interface 0 has no altsetting 0 [ 240.666760][ T293] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 240.675817][ T293] cdc_ncm 7-1:1.1: bind() failure [ 240.681996][ T293] usb 7-1: USB disconnect, device number 16 [ 240.761399][ T380] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 240.770591][ T380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 240.778893][ T380] usb 8-1: SerialNumber: syz [ 240.784397][ T380] usb 8-1: config 0 descriptor?? [ 240.836639][ T380] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 240.979744][ T3827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 241.052063][ T30] audit: type=1400 audit(1780683516.795:595): avc: denied { create } for pid=3810 comm="syz.7.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 241.077094][ T3811] loop7: detected capacity change from 0 to 16 [ 241.122157][ T3811] erofs: (device loop7): mounted with root inode @ nid 36. [ 241.141342][ T3833] overlayfs: failed to clone upperpath [ 241.435471][ T30] audit: type=1400 audit(1780683517.151:596): avc: denied { listen } for pid=3810 comm="syz.7.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 241.480420][ T3841] loop6: detected capacity change from 0 to 128 [ 241.514109][ T30] audit: type=1400 audit(1780683517.225:597): avc: denied { mounton } for pid=3840 comm="syz.6.1104" path="/105/file0" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 241.515530][ T3841] incfs: ino conflict with backing FS 1 [ 242.443430][ T3859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1110'. [ 242.459457][ T3859] loop5: detected capacity change from 0 to 512 [ 242.539284][ T3859] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.920530][ T315] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 243.168903][ T293] usb 8-1: USB disconnect, device number 11 [ 243.539853][ T3878] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1116'. [ 243.706217][ T315] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 243.714931][ T315] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 243.725270][ T315] usb 6-1: config 220 has no interface number 2 [ 243.732013][ T315] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 243.745225][ T315] usb 6-1: config 220 interface 0 has no altsetting 0 [ 243.752187][ T315] usb 6-1: config 220 interface 76 has no altsetting 0 [ 243.765099][ T315] usb 6-1: config 220 interface 1 has no altsetting 0 [ 243.957602][ T315] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 243.977578][ T315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.986009][ T315] usb 6-1: Product: syz [ 244.010856][ T315] usb 6-1: Manufacturer: syz [ 244.017559][ T315] usb 6-1: SerialNumber: syz [ 244.066789][ T3887] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1119'. [ 244.175809][ T3886] overlayfs: failed to clone upperpath [ 244.438747][ T315] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 244.445995][ T315] usb 6-1: No valid video chain found. [ 244.451700][ T315] usb 6-1: selecting invalid altsetting 0 [ 244.548809][ T315] usb 6-1: USB disconnect, device number 12 [ 244.956774][ T3898] device vlan0 entered promiscuous mode [ 244.997040][ T3898] device syz_tun entered promiscuous mode [ 245.036009][ T3900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 245.162833][ T3903] loop5: detected capacity change from 0 to 512 [ 245.260965][ T3903] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1124: inode has both inline data and extents flags [ 245.381725][ T3903] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1124: couldn't read orphan inode 15 (err -117) [ 245.400876][ T3903] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.471334][ T3903] EXT4-fs (loop5): shut down requested (2) [ 245.481460][ T3903] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.490008][ T30] audit: type=1400 audit(1780683520.948:598): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 245.853187][ T30] audit: type=1400 audit(1780683520.948:599): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.881794][ T30] audit: type=1400 audit(1780683520.948:600): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.918100][ T30] audit: type=1400 audit(1780683520.948:601): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.961901][ T30] audit: type=1400 audit(1780683520.948:602): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 245.985601][ T30] audit: type=1400 audit(1780683520.948:603): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.216240][ T30] audit: type=1400 audit(1780683520.948:604): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.427803][ T30] audit: type=1326 audit(1780683521.818:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.7.1133" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d966e3e59 code=0x0 [ 246.455563][ T3933] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1132'. [ 246.530387][ T3929] overlayfs: failed to clone upperpath [ 246.584878][ T3939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1135'. [ 248.264155][ T3954] overlayfs: failed to clone upperpath [ 248.623710][ T3963] overlayfs: failed to clone upperpath [ 249.029049][ T3971] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1146'. [ 249.059531][ T3973] binder: BINDER_SET_CONTEXT_MGR already set [ 249.074495][ T3973] binder: 3972:3973 ioctl 4018620d 200000004a80 returned -16 [ 249.377563][ T293] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 249.783886][ T293] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.796159][ T293] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 249.807855][ T293] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 249.986976][ T293] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.996279][ T293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.004587][ T293] usb 8-1: Product: syz [ 250.009684][ T293] usb 8-1: Manufacturer: syz [ 250.014374][ T293] usb 8-1: SerialNumber: syz [ 250.051356][ T3976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.268246][ T3996] tipc: Started in network mode [ 250.273429][ T3996] tipc: Node identity ac1414aa, cluster identity 4711 [ 250.282173][ T3996] tipc: Enabled bearer , priority 10 [ 250.292969][ T3976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.458532][ T4002] overlayfs: missing 'lowerdir' [ 250.753099][ T3996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.762021][ T3976] UDC core: couldn't find an available UDC or it's busy: -16 [ 250.769596][ T3976] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 251.019345][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 251.019370][ T30] audit: type=1400 audit(1780683526.112:615): avc: denied { name_bind } for pid=3975 comm="syz.7.1148" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 251.048091][ T3976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.323503][ T293] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 251.335375][ T293] cdc_ncm 8-1:1.0: dwNtbInMaxSize=1231 is too small. Using 2048 [ 251.361034][ T293] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 251.483591][ T315] tipc: Node number set to 2886997162 [ 251.779604][ T4034] loop5: detected capacity change from 0 to 512 [ 251.811108][ T4034] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.989894][ T4044] overlayfs: missing 'lowerdir' [ 252.040207][ T30] audit: type=1400 audit(1780683527.075:616): avc: denied { create } for pid=4045 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.307079][ T30] audit: type=1400 audit(1780683527.309:617): avc: denied { write } for pid=4045 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.501886][ T30] audit: type=1400 audit(1780683527.309:618): avc: denied { nlmsg_write } for pid=4045 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.518185][ T293] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 252.850531][ T293] usb 8-1: USB disconnect, device number 12 [ 253.575849][ T4056] loop7: detected capacity change from 0 to 512 [ 253.596763][ T293] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 253.633980][ T30] audit: type=1400 audit(1780683528.544:619): avc: denied { ioctl } for pid=4045 comm="syz.5.1171" path="socket:[29187]" dev="sockfs" ino=29187 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.686543][ T4056] EXT4-fs (loop7): Test dummy encryption mode enabled [ 253.701700][ T4056] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 253.725152][ T30] audit: type=1400 audit(1780683528.544:620): avc: denied { create } for pid=4045 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.749046][ T4056] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 253.798199][ T4056] EXT4-fs (loop7): orphan cleanup on readonly fs [ 253.813260][ T4056] EXT4-fs error (device loop7): xattr_find_entry:297: inode #15: comm syz.7.1173: corrupted xattr entries [ 253.835884][ T4056] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 253.897463][ T4056] EXT4-fs (loop7): 1 orphan inode deleted [ 253.924535][ T4056] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000001,debug_want_extra_isize=0x0000000000000068,nobarrier,resgid=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: none. [ 254.081684][ T4092] overlayfs: failed to clone upperpath [ 254.393752][ T4099] overlayfs: missing 'lowerdir' [ 254.421868][ T4103] tipc: Started in network mode [ 254.426873][ T4103] tipc: Node identity ac1414aa, cluster identity 4711 [ 254.433880][ T4103] tipc: Enabled bearer , priority 10 [ 254.445261][ T6] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 254.603579][ T4103] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 254.744148][ T293] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 254.754965][ T6] usb 6-1: device descriptor read/64, error -71 [ 254.867728][ T4120] fuse: Bad value for 'fd' [ 255.129079][ T293] usb 8-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 255.139456][ T293] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 255.148558][ T293] usb 8-1: config 220 interface 0 has no altsetting 0 [ 255.171949][ T6] usb 6-1: device descriptor read/64, error -71 [ 255.321550][ T293] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 255.330822][ T293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.339125][ T293] usb 8-1: Product: syz [ 255.344106][ T293] usb 8-1: Manufacturer: syz [ 255.349098][ T293] usb 8-1: SerialNumber: syz [ 255.578013][ T6] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 255.699639][ T315] tipc: Node number set to 2886997162 [ 255.791862][ T293] usb 8-1: Found UVC 0.00 device syz (8086:0b07) [ 255.799440][ T293] usb 8-1: No valid video chain found. [ 255.819249][ T293] usb 8-1: USB disconnect, device number 13 [ 255.940097][ T4143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'. [ 255.995008][ T6] usb 6-1: device descriptor read/64, error -71 [ 256.025497][ T4147] overlayfs: missing 'lowerdir' [ 256.188837][ T4151] overlayfs: failed to clone upperpath [ 256.546894][ T4153] loop7: detected capacity change from 0 to 128 [ 256.574407][ T4153] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.591633][ T4153] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.679171][ T6] usb 6-1: device descriptor read/64, error -71 [ 256.818283][ T6] usb usb6-port1: attempt power cycle [ 257.406099][ T2600] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 257.491621][ T6] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 257.531529][ T4179] overlayfs: missing 'lowerdir' [ 257.548699][ T30] audit: type=1326 audit(1780683532.220:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.642006][ T30] audit: type=1326 audit(1780683532.220:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.673406][ T2600] usb 7-1: Using ep0 maxpacket: 32 [ 257.678059][ T30] audit: type=1326 audit(1780683532.220:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.710498][ T30] audit: type=1326 audit(1780683532.220:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.789056][ T30] audit: type=1326 audit(1780683532.220:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.815496][ T4191] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1208'. [ 257.833996][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.851828][ T30] audit: type=1326 audit(1780683532.220:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.866395][ T2600] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.891180][ T30] audit: type=1326 audit(1780683532.220:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.7.1207" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d966e3e59 code=0x7ffc0000 [ 257.916728][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 257.928165][ T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 258.101519][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.101667][ T2600] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 258.121869][ T2600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.133135][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.142432][ T6] usb 6-1: Product: syz [ 258.150289][ T2600] usb 7-1: Product: syz [ 258.151409][ T6] usb 6-1: Manufacturer: syz [ 258.163250][ T2600] usb 7-1: Manufacturer: syz [ 258.168167][ T6] usb 6-1: SerialNumber: syz [ 258.168915][ T2600] usb 7-1: SerialNumber: syz [ 258.283303][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.528805][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.683281][ T30] audit: type=1400 audit(1780683533.287:628): avc: denied { execute } for pid=4207 comm="syz.3.1213" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 258.704760][ T30] audit: type=1400 audit(1780683533.305:629): avc: denied { execute_no_trans } for pid=4207 comm="syz.3.1213" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 258.738649][ T4206] overlayfs: failed to clone upperpath [ 258.806679][ T2600] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 258.838661][ T2600] usb 7-1: found format II with max.bitrate = 6, frame size=524 [ 258.846556][ T2600] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 258.874320][ T2600] usb 7-1: USB disconnect, device number 17 [ 258.988597][ T4171] UDC core: couldn't find an available UDC or it's busy: -16 [ 258.998498][ T4171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 259.106305][ T1682] udevd[1682]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.246322][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 259.663257][ T4219] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1216'. [ 259.758172][ T4223] overlayfs: missing 'lowerdir' [ 259.834208][ T6] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 259.840717][ T6] cdc_ncm 6-1:1.0: dwNtbInMaxSize=1231 is too small. Using 2048 [ 259.848484][ T6] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 259.858932][ T4225] loop7: detected capacity change from 0 to 256 [ 259.891375][ T30] audit: type=1400 audit(1780683534.409:630): avc: denied { mounton } for pid=4224 comm="syz.7.1219" path="/95/file0/file1" dev="loop7" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 259.920953][ T4225] incfs: Can't find or create .incomplete dir in ./file0 [ 259.932632][ T4225] incfs: mount failed -28 [ 260.133198][ T4238] FAULT_INJECTION: forcing a failure. [ 260.133198][ T4238] name failslab, interval 1, probability 0, space 0, times 0 [ 260.146035][ T4238] CPU: 0 PID: 4238 Comm: syz.6.1223 Not tainted syzkaller #0 [ 260.153437][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.163521][ T4238] Call Trace: [ 260.166827][ T4238] [ 260.169784][ T4238] __dump_stack+0x21/0x30 [ 260.174145][ T4238] dump_stack_lvl+0x110/0x170 [ 260.178847][ T4238] ? show_regs_print_info+0x20/0x20 [ 260.184180][ T4238] dump_stack+0x15/0x20 [ 260.188376][ T4238] should_fail+0x3c1/0x510 [ 260.192844][ T4238] ? netlink_sendmsg+0x611/0xb80 [ 260.197815][ T4238] __should_failslab+0xa4/0xe0 [ 260.202716][ T4238] should_failslab+0x9/0x20 [ 260.207254][ T4238] slab_pre_alloc_hook+0x3b/0xe0 [ 260.212235][ T4238] ? netlink_sendmsg+0x611/0xb80 [ 260.217292][ T4238] ? netlink_sendmsg+0x611/0xb80 [ 260.222250][ T4238] __kmalloc_track_caller+0x6c/0x2c0 [ 260.227627][ T4238] ? netlink_sendmsg+0x611/0xb80 [ 260.232564][ T4238] ? netlink_sendmsg+0x611/0xb80 [ 260.237589][ T4238] __alloc_skb+0x21a/0x740 [ 260.242004][ T4238] netlink_sendmsg+0x611/0xb80 [ 260.246892][ T4238] ? netlink_getsockopt+0x530/0x530 [ 260.252208][ T4238] ? kasan_set_track+0x4a/0x70 [ 260.257013][ T4238] ? security_socket_sendmsg+0x82/0xa0 [ 260.262894][ T4238] ? netlink_getsockopt+0x530/0x530 [ 260.268128][ T4238] ____sys_sendmsg+0x5b7/0x8f0 [ 260.272905][ T4238] ? __sys_sendmsg_sock+0x40/0x40 [ 260.277933][ T4238] ? import_iovec+0x7c/0xb0 [ 260.282433][ T4238] ___sys_sendmsg+0x236/0x2e0 [ 260.287107][ T4238] ? __sys_sendmsg+0x280/0x280 [ 260.291901][ T4238] ? __fdget+0x1a1/0x230 [ 260.296171][ T4238] __x64_sys_sendmsg+0x206/0x2f0 [ 260.301371][ T4238] ? ___sys_sendmsg+0x2e0/0x2e0 [ 260.306219][ T4238] ? ksys_write+0x1f4/0x250 [ 260.310752][ T4238] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 260.316823][ T4238] x64_sys_call+0x4b/0x9a0 [ 260.321256][ T4238] do_syscall_64+0x4c/0xa0 [ 260.325778][ T4238] ? clear_bhb_loop+0x50/0xa0 [ 260.330464][ T4238] ? clear_bhb_loop+0x50/0xa0 [ 260.335151][ T4238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.341070][ T4238] RIP: 0033:0x7fbc2b3fbe59 [ 260.345500][ T4238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.365152][ T4238] RSP: 002b:00007fbc29e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.373583][ T4238] RAX: ffffffffffffffda RBX: 00007fbc2b674fa0 RCX: 00007fbc2b3fbe59 [ 260.381569][ T4238] RDX: 000000000400c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 260.389640][ T4238] RBP: 00007fbc29e56090 R08: 0000000000000000 R09: 0000000000000000 [ 260.397806][ T4238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.405957][ T4238] R13: 00007fbc2b675038 R14: 00007fbc2b674fa0 R15: 00007ffffbcb0588 [ 260.413957][ T4238] [ 260.490922][ T4251] overlayfs: failed to clone upperpath [ 260.867749][ T6] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 260.894948][ T6] usb 6-1: USB disconnect, device number 15 [ 260.905604][ T6] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 260.943055][ T4265] loop7: detected capacity change from 0 to 512 [ 262.234320][ T4298] xt_hashlimit: size too large, truncated to 1048576 [ 262.248257][ T4299] fuse: blksize only supported for fuseblk [ 262.665749][ T6] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 262.698856][ T4314] loop5: detected capacity change from 0 to 40427 [ 262.710297][ T4314] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 262.718812][ T4314] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 262.738187][ T4314] F2FS-fs (loop5): Found nat_bits in checkpoint [ 262.778052][ T4314] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 262.785334][ T4314] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 262.808515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 262.816870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.825206][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 262.835159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.844053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.854067][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.862437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.871264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.879585][ T2600] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 262.880175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 262.894979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 263.061406][ T6] usb 8-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xA1, skipping [ 263.072392][ T6] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 263.085783][ T6] usb 8-1: config 0 interface 0 has no altsetting 0 [ 263.092601][ T6] usb 8-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 263.103738][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.106481][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 263.106526][ T30] audit: type=1400 audit(1780683537.421:641): avc: denied { setattr } for pid=4336 comm="syz.5.1248" name="tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 263.123953][ T6] usb 8-1: config 0 descriptor?? [ 263.157607][ T4289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 263.180078][ T6] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 263.371495][ T2600] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.380586][ T2600] usb 7-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 263.391548][ T2600] usb 7-1: config 220 has no interface number 2 [ 263.421005][ T2600] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 263.472197][ T4265] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1231'. [ 263.481161][ T2600] usb 7-1: config 220 interface 0 has no altsetting 0 [ 263.481206][ T2600] usb 7-1: config 220 interface 76 has no altsetting 0 [ 263.481225][ T2600] usb 7-1: config 220 interface 1 has no altsetting 0 [ 263.504244][ T4265] loop7: detected capacity change from 0 to 512 [ 263.576632][ T4265] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 263.591652][ T4265] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.628104][ T4265] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz.7.1231: corrupted xattr block 6 [ 263.640204][ T4265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 263.649850][ T4265] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.1231: corrupted xattr block 33 [ 263.660343][ T2600] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.662677][ T4265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 263.670717][ T2600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.687864][ T2600] usb 7-1: Product: syz [ 263.692274][ T2600] usb 7-1: Manufacturer: syz [ 263.696930][ T2600] usb 7-1: SerialNumber: syz [ 263.713653][ T4265] overlayfs: './file1' not a directory [ 263.719717][ T4265] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.1231: corrupted xattr block 33 [ 263.732327][ T4265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 263.742330][ T4265] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.1231: corrupted xattr block 33 [ 263.755595][ T4265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 263.764947][ T4265] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.1231: corrupted xattr block 33 [ 263.777292][ T4265] fscrypt (loop7, inode 15): Error -117 getting encryption context [ 263.787724][ T569] usb 8-1: USB disconnect, device number 14 [ 263.870332][ T4352] overlayfs: failed to clone upperpath [ 264.131186][ T2600] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 264.137835][ T2600] usb 7-1: No valid video chain found. [ 264.143859][ T2600] usb 7-1: selecting invalid altsetting 0 [ 264.269431][ T2600] usb 7-1: USB disconnect, device number 18 [ 265.263969][ T2312] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 265.286948][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 265.296960][ T2312] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 265.349794][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 265.365047][ T2312] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 265.416591][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 265.425835][ T2312] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 265.439498][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 265.448808][ T2312] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 265.575592][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 265.978793][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.032304][ T4371] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1258'. [ 266.042422][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.052902][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.079336][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.124534][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.139383][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.156185][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.175306][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.217636][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.227281][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.236648][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.246034][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.255590][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 266.265779][ T2312] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117) [ 266.276557][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 266.286166][ T2312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 266.296171][ T2312] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117) [ 266.326443][ T4381] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1261'. [ 266.943431][ T4385] loop5: detected capacity change from 0 to 131072 [ 266.975843][ T4385] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(2560) blocks(512) [ 266.984534][ T4385] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 266.993826][ T4385] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root and reserve_node [ 267.008330][ T4385] F2FS-fs (loop5): Found nat_bits in checkpoint [ 267.046291][ T4385] F2FS-fs (loop5): recover fsync data on readonly fs [ 267.053424][ T4385] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 267.060719][ T4385] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.084521][ T30] audit: type=1400 audit(1780683541.144:642): avc: denied { quotaon } for pid=4382 comm="syz.5.1262" name="file0" dev="loop5" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.727407][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1264'. [ 269.759685][ T4415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1272'. [ 269.770038][ T4413] loop6: detected capacity change from 0 to 1024 [ 269.808550][ T4413] EXT4-fs (loop6): Ignoring removed orlov option [ 269.895940][ T4413] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 269.973355][ T4425] overlayfs: failed to clone upperpath [ 270.882220][ T4445] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1283'. [ 270.902491][ T4440] loop6: detected capacity change from 0 to 131072 [ 270.987026][ T4440] F2FS-fs (loop6): Wrong SIT boundary, start(1536) end(2560) blocks(512) [ 270.995615][ T4440] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 271.010016][ T4440] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root and reserve_node [ 271.038548][ T4440] F2FS-fs (loop6): Found nat_bits in checkpoint [ 271.077852][ T4440] F2FS-fs (loop6): recover fsync data on readonly fs [ 271.084956][ T4440] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 271.092346][ T4440] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 271.463980][ T4192] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 271.859593][ T4192] usb 8-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 271.875471][ T4192] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 271.897822][ T4192] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 8909, setting to 1024 [ 271.921916][ T4192] usb 8-1: config 0 interface 0 has no altsetting 0 [ 271.936344][ T4192] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 271.961456][ T4192] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.989216][ T4192] usb 8-1: config 0 descriptor?? [ 272.248208][ T4472] FAULT_INJECTION: forcing a failure. [ 272.248208][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 272.261413][ T4472] CPU: 1 PID: 4472 Comm: syz.6.1289 Not tainted syzkaller #0 [ 272.268837][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.278923][ T4472] Call Trace: [ 272.282229][ T4472] [ 272.285187][ T4472] __dump_stack+0x21/0x30 [ 272.289556][ T4472] dump_stack_lvl+0x110/0x170 [ 272.294262][ T4472] ? show_regs_print_info+0x20/0x20 [ 272.299494][ T4472] ? nfnetlink_rcv_msg+0x8af/0x9b0 [ 272.304634][ T4472] ? stack_trace_save+0xf0/0xf0 [ 272.309520][ T4472] dump_stack+0x15/0x20 [ 272.313707][ T4472] should_fail+0x3c1/0x510 [ 272.318156][ T4472] __should_failslab+0xa4/0xe0 [ 272.322953][ T4472] should_failslab+0x9/0x20 [ 272.327487][ T4472] slab_pre_alloc_hook+0x3b/0xe0 [ 272.332467][ T4472] ? __alloc_skb+0xe0/0x740 [ 272.337093][ T4472] kmem_cache_alloc+0x44/0x260 [ 272.341890][ T4472] __alloc_skb+0xe0/0x740 [ 272.346253][ T4472] netlink_ack+0x372/0xb50 [ 272.350697][ T4472] ? selinux_capable+0x2b6/0x3b0 [ 272.355666][ T4472] ? netlink_dump+0xd60/0xd60 [ 272.360371][ T4472] netlink_rcv_skb+0x27a/0x440 [ 272.365334][ T4472] ? nfnetlink_bind+0xf0/0xf0 [ 272.370038][ T4472] ? netlink_ack+0xb50/0xb50 [ 272.374671][ T4472] ? ns_capable+0x8c/0xf0 [ 272.379026][ T4472] ? netlink_net_capable+0x125/0x160 [ 272.384354][ T4472] nfnetlink_rcv+0x2b4/0x2310 [ 272.389064][ T4472] ? __kernel_text_address+0xa0/0x100 [ 272.394475][ T4472] ? unwind_get_return_address+0x4d/0x90 [ 272.400140][ T4472] ? stack_trace_save+0xf0/0xf0 [ 272.405022][ T4472] ? arch_stack_walk+0xee/0x140 [ 272.409906][ T4472] ? stack_trace_save+0xa6/0xf0 [ 272.414781][ T4472] ? nfnetlink_net_exit_batch+0xf0/0xf0 [ 272.420440][ T4472] ? __kasan_slab_alloc+0xcf/0xf0 [ 272.425534][ T4472] ? __kasan_kmalloc+0xec/0x110 [ 272.430410][ T4472] ? __kasan_kmalloc+0xda/0x110 [ 272.435305][ T4472] ? __kmalloc_track_caller+0x13c/0x2c0 [ 272.440884][ T4472] ? __alloc_skb+0x21a/0x740 [ 272.445510][ T4472] ? netlink_sendmsg+0x611/0xb80 [ 272.450478][ T4472] ? ____sys_sendmsg+0x5b7/0x8f0 [ 272.455443][ T4472] ? ___sys_sendmsg+0x236/0x2e0 [ 272.460324][ T4472] ? __x64_sys_sendmsg+0x206/0x2f0 [ 272.465467][ T4472] ? x64_sys_call+0x4b/0x9a0 [ 272.470091][ T4472] ? do_syscall_64+0x4c/0xa0 [ 272.474709][ T4472] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.480811][ T4472] ? selinux_nlmsg_lookup+0x33c/0x4c0 [ 272.486216][ T4472] ? selinux_netlink_send+0x765/0x820 [ 272.491624][ T4472] ? selinux_vm_enough_memory+0x190/0x190 [ 272.497377][ T4472] ? _copy_from_iter+0x4b2/0x1070 [ 272.502456][ T4472] ? __netlink_lookup+0x387/0x3b0 [ 272.507517][ T4472] netlink_unicast+0x876/0xa40 [ 272.512400][ T4472] netlink_sendmsg+0x879/0xb80 [ 272.517288][ T4472] ? netlink_getsockopt+0x530/0x530 [ 272.522695][ T4472] ? kasan_set_track+0x4a/0x70 [ 272.527488][ T4472] ? security_socket_sendmsg+0x82/0xa0 [ 272.532978][ T4472] ? netlink_getsockopt+0x530/0x530 [ 272.538201][ T4472] ____sys_sendmsg+0x5b7/0x8f0 [ 272.542990][ T4472] ? __sys_sendmsg_sock+0x40/0x40 [ 272.548059][ T4472] ? import_iovec+0x7c/0xb0 [ 272.552575][ T4472] ___sys_sendmsg+0x236/0x2e0 [ 272.557270][ T4472] ? __sys_sendmsg+0x280/0x280 [ 272.562065][ T4472] ? __fdget+0x1a1/0x230 [ 272.566317][ T4472] __x64_sys_sendmsg+0x206/0x2f0 [ 272.571270][ T4472] ? ___sys_sendmsg+0x2e0/0x2e0 [ 272.576141][ T4472] ? ksys_write+0x1f4/0x250 [ 272.580660][ T4472] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 272.586742][ T4472] x64_sys_call+0x4b/0x9a0 [ 272.591173][ T4472] do_syscall_64+0x4c/0xa0 [ 272.595605][ T4472] ? clear_bhb_loop+0x50/0xa0 [ 272.600297][ T4472] ? clear_bhb_loop+0x50/0xa0 [ 272.604983][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.610890][ T4472] RIP: 0033:0x7fbc2b3fbe59 [ 272.615321][ T4472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.635248][ T4472] RSP: 002b:00007fbc29e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.643684][ T4472] RAX: ffffffffffffffda RBX: 00007fbc2b674fa0 RCX: 00007fbc2b3fbe59 [ 272.651670][ T4472] RDX: 000000000400c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.659654][ T4472] RBP: 00007fbc29e56090 R08: 0000000000000000 R09: 0000000000000000 [ 272.667636][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.675621][ T4472] R13: 00007fbc2b675038 R14: 00007fbc2b674fa0 R15: 00007ffffbcb0588 [ 272.683618][ T4472] [ 272.919894][ T4192] kye 0003:0458:5015.000C: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.7-1/input0 [ 272.930940][ T4192] kye 0003:0458:5015.000C: tablet-enabling feature report not found [ 272.938989][ T4192] kye 0003:0458:5015.000C: tablet enabling failed [ 273.067534][ T60] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 273.142515][ T2600] usb 8-1: USB disconnect, device number 15 [ 273.366888][ T60] usb 6-1: device descriptor read/64, error -71 [ 273.628712][ T4486] loop6: detected capacity change from 0 to 128 [ 273.689782][ T4486] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.700722][ T4486] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.728248][ T4490] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1297'. [ 273.783937][ T60] usb 6-1: device descriptor read/64, error -71 [ 274.108466][ T315] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 274.117241][ T60] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 274.222912][ T4502] overlayfs: failed to clone upperpath [ 274.229384][ T4503] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1301'. [ 274.253949][ T30] audit: type=1400 audit(1780683547.842:643): avc: denied { mounton } for pid=4499 comm="syz.0.1301" path="/279/bus" dev="tmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 274.293724][ T4500] overlayfs: failed to clone upperpath [ 274.425231][ T315] usb 7-1: Using ep0 maxpacket: 32 [ 274.457320][ T60] usb 6-1: device descriptor read/64, error -71 [ 274.596330][ T315] usb 7-1: unable to get BOS descriptor or descriptor too short [ 274.682240][ T315] usb 7-1: config 10 has an invalid interface number: 110 but max is 0 [ 274.690543][ T315] usb 7-1: config 10 has no interface number 0 [ 274.696821][ T315] usb 7-1: config 10 interface 110 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 64 [ 274.706874][ T315] usb 7-1: config 10 interface 110 has no altsetting 0 [ 275.872830][ T4509] overlayfs: failed to resolve './file0': -2 [ 275.909012][ T4512] loop7: detected capacity change from 0 to 128 [ 275.929909][ T4512] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.932669][ T60] usb 6-1: device descriptor read/64, error -71 [ 275.947083][ T4512] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.007539][ T315] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=ac.5c [ 276.030645][ T315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.044267][ T315] usb 7-1: Product: syz [ 276.049587][ T315] usb 7-1: Manufacturer: syz [ 276.054557][ T315] usb 7-1: SerialNumber: syz [ 276.060916][ T4520] overlayfs: missing 'workdir' [ 276.087369][ T4494] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.103794][ T60] usb usb6-port1: attempt power cycle [ 276.129874][ T4524] loop7: detected capacity change from 0 to 512 [ 276.136586][ T4522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1309'. [ 276.254485][ T4524] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 276.268772][ T4524] EXT4-fs (loop7): invalid journal inode [ 276.279045][ T4524] EXT4-fs (loop7): can't get journal size [ 276.295615][ T4524] EXT4-fs (loop7): 1 truncate cleaned up [ 276.301890][ T4524] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 276.706365][ T315] rtl8150 7-1:10.110: couldn't find required endpoints [ 276.714071][ T315] rtl8150: probe of 7-1:10.110 failed with error -5 [ 276.725856][ T315] usb 7-1: USB disconnect, device number 19 [ 276.884042][ T6] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 277.268933][ T6] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 277.280591][ T6] usb 8-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 277.296895][ T6] usb 8-1: config 220 has no interface number 2 [ 277.304139][ T6] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 277.321767][ T6] usb 8-1: config 220 interface 0 has no altsetting 0 [ 277.333019][ T6] usb 8-1: config 220 interface 76 has no altsetting 0 [ 277.345425][ T6] usb 8-1: config 220 interface 1 has no altsetting 0 [ 277.432938][ T4549] loop5: detected capacity change from 0 to 128 [ 277.455377][ T4549] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.466181][ T4549] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.524889][ T4552] loop5: detected capacity change from 0 to 1024 [ 277.525719][ T6] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 277.540599][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.548764][ T6] usb 8-1: Product: syz [ 277.553120][ T6] usb 8-1: Manufacturer: syz [ 277.558030][ T6] usb 8-1: SerialNumber: syz [ 277.562425][ T4552] EXT4-fs (loop5): Ignoring removed orlov option [ 277.581220][ T4552] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 278.010261][ T4560] overlayfs: missing 'workdir' [ 278.103073][ T6] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 278.109614][ T6] usb 8-1: No valid video chain found. [ 278.115395][ T6] usb 8-1: selecting invalid altsetting 0 [ 278.205328][ T6] usb 8-1: USB disconnect, device number 16 [ 278.656882][ T4575] overlayfs: failed to clone upperpath [ 278.861865][ T331] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 279.028861][ T4577] loop6: detected capacity change from 0 to 40427 [ 279.091285][ T4577] F2FS-fs (loop6): invalid crc value [ 279.098306][ T4577] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 279.133093][ T4577] F2FS-fs (loop6): Start checkpoint disabled! [ 279.140569][ T4577] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 279.246676][ T331] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.255088][ T331] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.265649][ T331] usb 8-1: config 220 has no interface number 2 [ 279.279008][ T331] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 279.292436][ T331] usb 8-1: config 220 interface 0 has no altsetting 0 [ 279.299271][ T331] usb 8-1: config 220 interface 76 has no altsetting 0 [ 279.306371][ T331] usb 8-1: config 220 interface 1 has no altsetting 0 [ 279.487670][ T331] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 279.627349][ T331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.636852][ T331] usb 8-1: Product: syz [ 279.641174][ T331] usb 8-1: Manufacturer: syz [ 279.646752][ T331] usb 8-1: SerialNumber: syz [ 279.843490][ T4587] binder: BINDER_SET_CONTEXT_MGR already set [ 279.849644][ T4587] binder: 4584:4587 ioctl 4018620d 200000004a80 returned -16 [ 279.857868][ T4587] binder: 4584:4587 ioctl c0306201 0 returned -14 [ 280.032325][ T4600] overlayfs: failed to clone upperpath [ 280.081091][ T331] usb 8-1: selecting invalid altsetting 0 [ 280.087636][ T331] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 280.094133][ T331] usb 8-1: No valid video chain found. [ 280.209223][ T331] usb 8-1: USB disconnect, device number 17 [ 280.612345][ T4608] loop7: detected capacity change from 0 to 512 [ 280.734467][ T4608] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.746221][ T4612] tipc: Started in network mode [ 280.751229][ T4612] tipc: Node identity ac1414aa, cluster identity 4711 [ 280.786234][ T4612] tipc: Enabled bearer , priority 10 [ 280.803362][ T4608] 9pnet: Insufficient options for proto=fd [ 280.872948][ T4615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1338'. [ 281.090525][ T4625] loop6: detected capacity change from 0 to 128 [ 281.149986][ T4625] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.192361][ T4625] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.806397][ T60] tipc: Node number set to 2886997162 [ 283.012891][ T4644] binder: 4643:4644 ioctl c0306201 0 returned -14 [ 283.031997][ T4642] binder: 4641:4642 ioctl c0306201 0 returned -14 [ 283.083958][ T4651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1350'. [ 283.526024][ T4646] overlayfs: failed to resolve './file0': -2 [ 283.577796][ T4666] overlayfs: failed to clone upperpath [ 283.978323][ T4673] loop5: detected capacity change from 0 to 512 [ 283.988181][ T4673] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 284.000135][ T4674] binder: BINDER_SET_CONTEXT_MGR already set [ 284.011033][ T4673] EXT4-fs (loop5): invalid journal inode [ 284.017005][ T4674] binder: 4669:4674 ioctl 4018620d 200000004a80 returned -16 [ 284.030205][ T4673] EXT4-fs (loop5): can't get journal size [ 284.038136][ T4674] binder: 4669:4674 ioctl c0306201 0 returned -14 [ 284.050537][ T4673] EXT4-fs (loop5): 1 truncate cleaned up [ 284.056222][ T4673] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 284.191163][ T4679] tipc: Enabling of bearer rejected, already enabled [ 284.378020][ T60] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 284.762963][ T60] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 284.771397][ T60] usb 6-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 284.782652][ T60] usb 6-1: config 220 has no interface number 2 [ 284.789231][ T60] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 284.824814][ T4686] overlayfs: failed to clone upperpath [ 284.831236][ T60] usb 6-1: config 220 interface 0 has no altsetting 0 [ 284.838148][ T60] usb 6-1: config 220 interface 76 has no altsetting 0 [ 284.845110][ T60] usb 6-1: config 220 interface 1 has no altsetting 0 [ 285.145592][ T60] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 285.184063][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.211762][ T60] usb 6-1: Product: syz [ 285.216393][ T60] usb 6-1: Manufacturer: syz [ 285.221076][ T60] usb 6-1: SerialNumber: syz [ 286.464119][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 286.474867][ T4713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4713 comm=syz.3.1367 [ 286.484648][ T60] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 286.494744][ T60] usb 6-1: No valid video chain found. [ 286.501465][ T60] usb 6-1: selecting invalid altsetting 0 [ 286.505589][ T4713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4713 comm=syz.3.1367 [ 286.546125][ T4715] overlayfs: failed to clone upperpath [ 286.599102][ T60] usb 6-1: USB disconnect, device number 19 [ 286.716089][ T4720] loop6: detected capacity change from 0 to 128 [ 286.784020][ T4720] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.803981][ T4720] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.301228][ T4755] loop5: detected capacity change from 0 to 512 [ 288.664893][ T1273] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 288.739834][ T4777] overlayfs: failed to clone upperpath [ 288.868595][ T4781] loop7: detected capacity change from 0 to 512 [ 288.888711][ T4781] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.953537][ T60] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 288.972165][ T4785] overlayfs: failed to clone upperpath [ 289.220815][ T1273] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xA1, skipping [ 289.238348][ T1273] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 289.263554][ T1273] usb 6-1: config 0 interface 0 has no altsetting 0 [ 289.279069][ T1273] usb 6-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 289.295770][ T1273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.324065][ T1273] usb 6-1: config 0 descriptor?? [ 289.338422][ T60] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 289.348940][ T60] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 289.359358][ T4756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.367571][ T60] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 289.377681][ T1273] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 289.391855][ T60] usb 7-1: config 220 has no interface number 1 [ 289.411567][ T60] usb 7-1: config 220 interface 0 has no altsetting 0 [ 289.425336][ T60] usb 7-1: config 220 interface 76 has no altsetting 0 [ 289.602859][ T4755] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1382'. [ 289.605946][ T60] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 289.627001][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.638512][ T4755] loop5: detected capacity change from 0 to 512 [ 289.644846][ T60] usb 7-1: Product: syz [ 289.653714][ T60] usb 7-1: Manufacturer: syz [ 289.664183][ T60] usb 7-1: SerialNumber: syz [ 289.736286][ T4755] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 289.766182][ T4755] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.852976][ T4755] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.1382: corrupted xattr block 6 [ 289.865260][ T4755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 289.874938][ T4755] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1382: corrupted xattr block 33 [ 289.887987][ T4755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 289.898191][ T4755] overlayfs: './file1' not a directory [ 289.904267][ T4755] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1382: corrupted xattr block 33 [ 289.916610][ T4755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 289.925693][ T4755] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1382: corrupted xattr block 33 [ 289.938277][ T4755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 289.949161][ T4755] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1382: corrupted xattr block 33 [ 289.961652][ T4755] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 289.972131][ T1273] usb 6-1: USB disconnect, device number 20 [ 290.065405][ T60] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 290.072426][ T60] usb 7-1: No valid video chain found. [ 290.120264][ T60] usb 7-1: USB disconnect, device number 20 [ 290.540426][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 290.557403][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 290.569824][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 290.593969][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 290.605729][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 290.618711][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 290.628002][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 290.718632][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 290.728191][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 290.740986][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.413691][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.431259][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.444249][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.454806][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.465304][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.677903][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.693088][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.710350][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.722643][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.732281][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.746644][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.763727][ T4828] tipc: Enabling of bearer rejected, already enabled [ 291.771693][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 291.793367][ T1250] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117) [ 291.865922][ T4833] overlayfs: failed to clone upperpath [ 291.948449][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 291.967913][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 291.994528][ T1250] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117) [ 292.725884][ T4851] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1412'. [ 292.820102][ T4850] overlayfs: failed to clone upperpath [ 294.285186][ T4888] device bridge1 entered promiscuous mode [ 294.311871][ T4889] overlayfs: failed to clone upperpath [ 294.355675][ T30] audit: type=1400 audit(1780683566.653:644): avc: denied { create } for pid=4887 comm="syz.5.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.564255][ T4192] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 294.982966][ T4192] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 294.991473][ T4192] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 295.001913][ T4192] usb 8-1: config 220 has no interface number 2 [ 295.008322][ T4192] usb 8-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 295.019496][ T4192] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 295.032766][ T4192] usb 8-1: config 220 interface 0 has no altsetting 0 [ 295.039601][ T4192] usb 8-1: config 220 interface 76 has no altsetting 0 [ 295.046476][ T4192] usb 8-1: config 220 interface 1 has no altsetting 0 [ 295.154721][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 295.250262][ T4192] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 295.268098][ T4192] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.278736][ T4896] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1428'. [ 295.291312][ T4192] usb 8-1: Product: syz [ 295.299135][ T4905] loop5: detected capacity change from 0 to 128 [ 295.308189][ T4192] usb 8-1: Manufacturer: syz [ 295.319972][ T4192] usb 8-1: SerialNumber: syz [ 295.351623][ T4896] overlayfs: failed to clone upperpath [ 295.407936][ T4905] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.419024][ T4905] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.902365][ T4192] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 295.908804][ T4192] usb 8-1: No valid video chain found. [ 296.010729][ T4192] usb 8-1: USB disconnect, device number 18 [ 296.218390][ T4927] loop7: detected capacity change from 0 to 512 [ 296.400782][ T4927] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.420371][ T4936] netlink: 'syz.5.1442': attribute type 12 has an invalid length. [ 297.428246][ T4936] netlink: 'syz.5.1442': attribute type 29 has an invalid length. [ 297.448133][ T4936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1442'. [ 297.482488][ T4943] loop5: detected capacity change from 0 to 512 [ 297.503637][ T4946] loop7: detected capacity change from 0 to 128 [ 297.556851][ T4946] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.587253][ T4946] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.997609][ T4192] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 298.200806][ T1273] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 298.229235][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 298.393312][ T4192] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xA1, skipping [ 298.404661][ T4192] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 298.418128][ T4192] usb 6-1: config 0 interface 0 has no altsetting 0 [ 298.424898][ T4192] usb 6-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 298.469775][ T4192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.508779][ T4192] usb 6-1: config 0 descriptor?? [ 298.679547][ T4951] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 298.709084][ T4192] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 298.724687][ T1273] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 300.125452][ T4943] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1446'. [ 300.151447][ T4943] loop5: detected capacity change from 0 to 512 [ 300.258434][ T4943] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 300.294987][ T4943] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.321440][ T1273] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 300.331904][ T1273] usb 8-1: config 220 has no interface number 2 [ 300.338185][ T1273] usb 8-1: too many endpoints for config 220 interface 1 altsetting 5: 255, using maximum allowed: 30 [ 300.349300][ T1273] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 300.363907][ T1273] usb 8-1: config 220 interface 0 has no altsetting 0 [ 300.370734][ T1273] usb 8-1: config 220 interface 76 has no altsetting 0 [ 300.377678][ T1273] usb 8-1: config 220 interface 1 has no altsetting 0 [ 300.470888][ T4943] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.1446: corrupted xattr block 6 [ 300.493677][ T4943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 300.520726][ T4943] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1446: corrupted xattr block 33 [ 300.552849][ T4943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 300.564740][ T4978] loop6: detected capacity change from 0 to 128 [ 300.571722][ T4943] overlayfs: './file1' not a directory [ 300.574452][ T1273] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 300.586680][ T4943] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1446: corrupted xattr block 33 [ 300.606127][ T1273] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.611038][ T4943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 300.635816][ T1273] usb 8-1: Product: syz [ 300.640182][ T1273] usb 8-1: Manufacturer: syz [ 300.644805][ T1273] usb 8-1: SerialNumber: syz [ 300.649722][ T4943] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1446: corrupted xattr block 33 [ 300.691865][ T4943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 300.718887][ T4943] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1446: corrupted xattr block 33 [ 300.742261][ T4943] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 300.778613][ T20] usb 6-1: USB disconnect, device number 21 [ 301.322407][ T1273] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 301.328907][ T1273] usb 8-1: No valid video chain found. [ 301.348265][ T832] attempt to access beyond end of device [ 301.348265][ T832] loop6: rw=1, want=1041, limit=128 [ 301.423432][ T1273] usb 8-1: USB disconnect, device number 19 [ 301.442729][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 301.455661][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.465212][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 301.477114][ T4997] overlayfs: failed to clone upperpath [ 301.495334][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.506436][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 301.519445][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.541333][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 301.554384][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.570068][ T1250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz-executor: corrupted xattr block 6 [ 301.585579][ T5001] loop7: detected capacity change from 0 to 512 [ 301.592345][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.619781][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.630876][ T5001] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.645190][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.668236][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.677644][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.687352][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.696981][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.706594][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.716418][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.728889][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.771633][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.781502][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.795331][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 301.810308][ T1250] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117) [ 301.824219][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 301.841612][ T1250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 301.874480][ T1250] EXT4-fs warning (device loop5): ext4_evict_inode:305: xattr delete (err -117) [ 302.374311][ T5017] x_tables: duplicate underflow at hook 3 [ 306.129124][ T5060] overlayfs: failed to clone upperpath [ 306.767285][ T5065] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1486'. [ 306.988349][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 307.121589][ T5073] binder: 5072:5073 ioctl c0306201 2000000003c0 returned -14 [ 307.192306][ T4192] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 307.294007][ T5077] fuse: Bad value for 'fd' [ 307.309060][ T386] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 307.417757][ T5083] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1491'. [ 307.442246][ T5085] tipc: Enabling of bearer rejected, already enabled [ 307.545341][ T5088] overlayfs: failed to clone upperpath [ 307.715310][ T4192] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 307.723809][ T4192] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 307.738840][ T4192] usb 8-1: config 220 has no interface number 2 [ 307.745343][ T4192] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 307.758886][ T4192] usb 8-1: config 220 interface 0 has no altsetting 0 [ 307.765741][ T4192] usb 8-1: config 220 interface 76 has no altsetting 0 [ 307.773065][ T4192] usb 8-1: config 220 interface 1 has no altsetting 0 [ 307.875664][ T386] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.961458][ T386] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 307.971333][ T386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.980690][ T386] usb 6-1: SerialNumber: syz [ 308.136659][ T386] cdc_ether 6-1:1.0: skipping garbage [ 308.142567][ T386] usb 6-1: bad CDC descriptors [ 308.504027][ T30] audit: type=1400 audit(1780683579.880:645): avc: denied { create } for pid=5068 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 308.571376][ T5069] UDC core: couldn't find an available UDC or it's busy: -16 [ 308.637754][ T5069] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.667646][ T30] audit: type=1400 audit(1780683579.945:646): avc: denied { connect } for pid=5068 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.087585][ T4192] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 309.169171][ T4192] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.192083][ T5102] overlayfs: failed to clone upperpath [ 309.197697][ T4192] usb 8-1: Product: syz [ 310.325962][ T4192] usb 8-1: Manufacturer: syz [ 310.330828][ T4192] usb 8-1: SerialNumber: syz [ 310.336323][ T60] usb 6-1: USB disconnect, device number 22 [ 310.377208][ T4192] usb 8-1: can't set config #220, error -71 [ 310.390499][ T4192] usb 8-1: USB disconnect, device number 20 [ 310.807910][ T5129] loop7: detected capacity change from 0 to 1024 [ 310.850110][ T5131] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 310.919554][ T5129] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.070948][ T5136] tipc: Started in network mode [ 311.108867][ T5136] tipc: Node identity 00000000002d003a0040ffffe0000001, cluster identity 4711 [ 311.194984][ T5136] tipc: Enabling of bearer rejected, failed to enable media [ 311.427942][ T5141] tipc: Enabled bearer , priority 10 [ 311.618795][ T5141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 311.637757][ T30] audit: type=1400 audit(1780683582.817:647): avc: denied { setopt } for pid=5146 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.861087][ T5163] loop6: detected capacity change from 0 to 128 [ 312.974404][ T4192] tipc: Node number set to 3765305284 [ 312.983057][ T5163] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.008621][ T5163] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 313.053683][ T5183] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1527'. [ 313.075958][ T5184] tipc: Enabling of bearer rejected, already enabled [ 313.222539][ T30] audit: type=1400 audit(1780683584.304:648): avc: denied { getopt } for pid=5194 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.288537][ T5184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 316.094551][ T5230] loop5: detected capacity change from 0 to 256 [ 316.139704][ T5230] exfat: Bad value for 'uid' [ 316.331706][ T30] audit: type=1404 audit(1780683587.120:649): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 316.374482][ T30] audit: type=1400 audit(1780683587.167:650): avc: denied { read write } for pid=1250 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.455448][ T30] audit: type=1400 audit(1780683587.269:651): avc: denied { read write } for pid=2312 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.530361][ T30] audit: type=1400 audit(1780683587.279:652): avc: denied { read write } for pid=5238 comm="syz.7.1546" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.589980][ T30] audit: type=1400 audit(1780683587.288:653): avc: denied { name_bind } for pid=5238 comm="syz.7.1546" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 316.631025][ T30] audit: type=1400 audit(1780683587.307:654): avc: denied { execute } for pid=5238 comm="syz.7.1546" name="file0" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 316.673798][ T30] audit: type=1400 audit(1780683587.354:655): avc: denied { read write } for pid=2312 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.730511][ T30] audit: type=1400 audit(1780683587.372:656): avc: denied { create } for pid=5240 comm="syz.7.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 316.770016][ T30] audit: type=1400 audit(1780683587.372:657): avc: denied { read write } for pid=5240 comm="syz.7.1547" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 316.876621][ T30] audit: type=1400 audit(1780683587.709:658): avc: denied { map_create } for pid=5236 comm="syz.5.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.896913][ T5250] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1550'. [ 317.844686][ T5298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 317.876674][ T5298] x_tables: duplicate underflow at hook 2 [ 318.579430][ T5313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4 sclass=netlink_tcpdiag_socket pid=5313 comm=syz.5.1574 [ 321.722499][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 321.722516][ T30] audit: type=1400 audit(1780683592.255:816): avc: denied { bpf } for pid=5405 comm="syz.5.1608" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 321.869669][ T30] audit: type=1400 audit(1780683592.395:817): avc: denied { mounton } for pid=5411 comm="syz.0.1611" path="/351/bus" dev="tmpfs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 321.912100][ T30] audit: type=1400 audit(1780683592.424:818): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.050690][ T30] audit: type=1400 audit(1780683592.555:819): avc: denied { create } for pid=5416 comm="syz.6.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 322.053465][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1612'. [ 322.082990][ T30] audit: type=1400 audit(1780683592.592:820): avc: denied { module_request } for pid=5420 comm="syz.3.1613" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 322.087611][ T5419] x_tables: duplicate underflow at hook 2 [ 322.120447][ T30] audit: type=1400 audit(1780683592.592:821): avc: denied { sys_module } for pid=5420 comm="syz.3.1613" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 322.157820][ T5425] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1615'. [ 322.166998][ T30] audit: type=1400 audit(1780683592.611:822): avc: denied { create } for pid=5420 comm="syz.3.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 322.203803][ T30] audit: type=1400 audit(1780683592.639:823): avc: denied { create } for pid=5422 comm="syz.3.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 322.249559][ T30] audit: type=1400 audit(1780683592.685:824): avc: denied { mounton } for pid=5424 comm="syz.3.1615" path="/432/file0" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 322.290043][ T30] audit: type=1400 audit(1780683592.685:825): avc: denied { create } for pid=5424 comm="syz.3.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 324.987125][ T5496] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1638'. [ 326.541973][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 327.115468][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 327.115485][ T30] audit: type=1400 audit(1780683597.288:966): avc: denied { map_create } for pid=5559 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.160292][ T30] audit: type=1400 audit(1780683597.334:967): avc: denied { map_create } for pid=5559 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.179491][ T30] audit: type=1400 audit(1780683597.334:968): avc: denied { prog_load } for pid=5559 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.198683][ T30] audit: type=1400 audit(1780683597.344:969): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 327.251516][ T30] audit: type=1400 audit(1780683597.419:970): avc: denied { prog_load } for pid=5566 comm="syz.3.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.282345][ T30] audit: type=1400 audit(1780683597.456:971): avc: denied { create } for pid=5568 comm="syz.3.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 327.362856][ T30] audit: type=1400 audit(1780683597.522:972): avc: denied { mounton } for pid=5562 comm="syz.6.1667" path="/218/bus" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 327.417689][ T30] audit: type=1400 audit(1780683597.559:973): avc: denied { map_create } for pid=5573 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.460930][ T30] audit: type=1400 audit(1780683597.624:974): avc: denied { bpf } for pid=5568 comm="syz.3.1669" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 327.514090][ T30] audit: type=1400 audit(1780683597.671:975): avc: denied { create } for pid=5573 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 330.887590][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 330.924940][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 330.959062][ T5705] futex_wake_op: syz.3.1718 tries to shift op by -1; fix this program [ 331.720322][ T5727] FAULT_INJECTION: forcing a failure. [ 331.720322][ T5727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.734055][ T5727] CPU: 0 PID: 5727 Comm: syz.6.1726 Not tainted syzkaller #0 [ 331.741677][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.751856][ T5727] Call Trace: [ 331.755164][ T5727] [ 331.758121][ T5727] __dump_stack+0x21/0x30 [ 331.762497][ T5727] dump_stack_lvl+0x110/0x170 [ 331.767208][ T5727] ? show_regs_print_info+0x20/0x20 [ 331.772450][ T5727] dump_stack+0x15/0x20 [ 331.776636][ T5727] should_fail+0x3c1/0x510 [ 331.781077][ T5727] should_fail_usercopy+0x1a/0x20 [ 331.786124][ T5727] _copy_to_user+0x20/0x90 [ 331.790559][ T5727] simple_read_from_buffer+0xe9/0x160 [ 331.795964][ T5727] proc_fail_nth_read+0x1a6/0x220 [ 331.801015][ T5727] ? proc_fault_inject_write+0x310/0x310 [ 331.806673][ T5727] ? security_file_permission+0x83/0xa0 [ 331.812241][ T5727] ? proc_fault_inject_write+0x310/0x310 [ 331.817944][ T5727] vfs_read+0x28d/0xc40 [ 331.822126][ T5727] ? kernel_read+0x1f0/0x1f0 [ 331.826734][ T5727] ? __kasan_check_write+0x14/0x20 [ 331.831864][ T5727] ? mutex_lock+0x9b/0x1c0 [ 331.836335][ T5727] ? wait_for_completion_killable_timeout+0x10/0x10 [ 331.842985][ T5727] ? __fget_files+0x2c4/0x320 [ 331.847868][ T5727] ? __fdget_pos+0x2d2/0x380 [ 331.852486][ T5727] ? ksys_read+0x71/0x250 [ 331.856943][ T5727] ksys_read+0x149/0x250 [ 331.861202][ T5727] ? vfs_write+0xfd0/0xfd0 [ 331.865669][ T5727] ? debug_smp_processor_id+0x17/0x20 [ 331.871065][ T5727] __x64_sys_read+0x7b/0x90 [ 331.875592][ T5727] x64_sys_call+0x96d/0x9a0 [ 331.880114][ T5727] do_syscall_64+0x4c/0xa0 [ 331.884549][ T5727] ? clear_bhb_loop+0x50/0xa0 [ 331.889251][ T5727] ? clear_bhb_loop+0x50/0xa0 [ 331.893951][ T5727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.899866][ T5727] RIP: 0033:0x7fbc2b3bc68e [ 331.904313][ T5727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.924128][ T5727] RSP: 002b:00007fbc29e34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.932572][ T5727] RAX: ffffffffffffffda RBX: 00007fbc29e356c0 RCX: 00007fbc2b3bc68e [ 331.940575][ T5727] RDX: 000000000000000f RSI: 00007fbc29e350a0 RDI: 0000000000000005 [ 331.948571][ T5727] RBP: 00007fbc29e35090 R08: 0000000000000000 R09: 0000000000000000 [ 331.956566][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.964554][ T5727] R13: 00007fbc2b675128 R14: 00007fbc2b675090 R15: 00007ffffbcb0588 [ 331.972556][ T5727] [ 332.614219][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 332.614234][ T30] audit: type=1400 audit(1780683602.442:1107): avc: denied { read write } for pid=1250 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.667845][ T5753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1736'. [ 332.709758][ T30] audit: type=1400 audit(1780683602.470:1108): avc: denied { create } for pid=5752 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 332.777015][ T30] audit: type=1400 audit(1780683602.470:1109): avc: denied { read write } for pid=5752 comm="syz.5.1736" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.835485][ T30] audit: type=1400 audit(1780683602.479:1110): avc: denied { read write } for pid=5752 comm="syz.5.1736" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.901871][ T30] audit: type=1400 audit(1780683602.517:1111): avc: denied { read write } for pid=5752 comm="syz.5.1736" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 333.046727][ T30] audit: type=1400 audit(1780683602.844:1112): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 333.092785][ T30] audit: type=1400 audit(1780683602.881:1113): avc: denied { execmem } for pid=5756 comm="syz.6.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 333.131326][ T30] audit: type=1400 audit(1780683602.919:1114): avc: denied { create } for pid=5758 comm="syz.0.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 333.179896][ T30] audit: type=1400 audit(1780683602.919:1115): avc: denied { create } for pid=5758 comm="syz.0.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 333.221830][ T30] audit: type=1400 audit(1780683602.919:1116): avc: denied { create } for pid=5758 comm="syz.0.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 335.552507][ T5805] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1753'. [ 336.727096][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1766'. [ 337.381175][ T5847] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1770'. [ 337.973344][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 337.973361][ T30] audit: type=1400 audit(1780683607.456:1237): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.047377][ T30] audit: type=1400 audit(1780683607.484:1238): avc: denied { create } for pid=5878 comm="syz.6.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 338.131080][ T30] audit: type=1400 audit(1780683607.605:1239): avc: denied { bpf } for pid=5878 comm="syz.6.1782" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 338.226832][ T30] audit: type=1400 audit(1780683607.690:1240): avc: denied { read write } for pid=1250 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.265684][ T5884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5884 comm=syz.5.1783 [ 338.268642][ T30] audit: type=1400 audit(1780683607.718:1241): avc: denied { read write } for pid=5883 comm="syz.5.1783" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.343447][ T30] audit: type=1400 audit(1780683607.718:1242): avc: denied { create } for pid=5883 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 338.396741][ T30] audit: type=1400 audit(1780683607.718:1243): avc: denied { create } for pid=5883 comm="syz.5.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 338.450182][ T30] audit: type=1400 audit(1780683607.774:1244): avc: denied { read write } for pid=1250 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.503642][ T30] audit: type=1400 audit(1780683607.783:1245): avc: denied { read write } for pid=5885 comm="syz.5.1784" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 338.548291][ T30] audit: type=1400 audit(1780683607.783:1246): avc: denied { read write } for pid=5885 comm="syz.5.1784" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 338.579360][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 338.750978][ T5908] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1793'. [ 340.932534][ T5958] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1807'. [ 342.231251][ T5982] SELinux: security_context_str_to_sid(5] S9q#) failed for (dev ?, type ?) errno=-22 [ 342.263517][ T5982] SELinux: security_context_str_to_sid(5] S9q#) failed for (dev pstore, type pstore) errno=-22 [ 342.282336][ T5986] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 342.420325][ T5997] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1820'. [ 342.665863][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 343.375801][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 343.375817][ T30] audit: type=1400 audit(1780683612.498:1397): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.467609][ T30] audit: type=1400 audit(1780683612.544:1398): avc: denied { bpf } for pid=6029 comm="syz.7.1834" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 343.549516][ T30] audit: type=1400 audit(1780683612.544:1399): avc: denied { bpf } for pid=6031 comm="syz.3.1835" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 343.604691][ T30] audit: type=1400 audit(1780683612.544:1400): avc: denied { create } for pid=6037 comm="syz.6.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 343.648071][ T30] audit: type=1400 audit(1780683612.554:1401): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.695524][ T30] audit: type=1400 audit(1780683612.563:1402): avc: denied { create } for pid=6039 comm="syz.6.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 343.752637][ T30] audit: type=1400 audit(1780683612.572:1403): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.806088][ T30] audit: type=1400 audit(1780683612.610:1404): avc: denied { module_request } for pid=6041 comm="syz.6.1838" kmod="rtnl-link-ore" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 343.881003][ T30] audit: type=1400 audit(1780683612.610:1405): avc: denied { create } for pid=6041 comm="syz.6.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 343.923791][ T30] audit: type=1400 audit(1780683612.610:1406): avc: denied { map_create } for pid=6041 comm="syz.6.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 344.214994][ T6066] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 344.870252][ T6090] : renamed from bond_slave_0 [ 345.474576][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1866'. [ 348.736025][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 348.736041][ T30] audit: type=1400 audit(1780683617.521:1594): avc: denied { create } for pid=6219 comm="syz.7.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 348.796527][ T30] audit: type=1400 audit(1780683617.549:1595): avc: denied { create } for pid=6225 comm="syz.5.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 348.834204][ T30] audit: type=1400 audit(1780683617.568:1596): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.880139][ T30] audit: type=1400 audit(1780683617.605:1597): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.926203][ T30] audit: type=1400 audit(1780683617.642:1598): avc: denied { execute } for pid=6231 comm="syz.6.1908" name="file0" dev="tmpfs" ino=1636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 348.966884][ T30] audit: type=1400 audit(1780683617.652:1599): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 349.009430][ T30] audit: type=1400 audit(1780683617.680:1600): avc: denied { read write } for pid=6233 comm="syz.6.1909" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 349.052345][ T30] audit: type=1400 audit(1780683617.680:1601): avc: denied { name_bind } for pid=6233 comm="syz.6.1909" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 349.090026][ T30] audit: type=1400 audit(1780683617.680:1602): avc: denied { read write } for pid=6233 comm="syz.6.1909" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 349.233705][ T30] audit: type=1400 audit(1780683617.979:1603): avc: denied { create } for pid=6235 comm="syz.0.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 350.533346][ T6282] syz.3.1927 uses obsolete (PF_INET,SOCK_PACKET) [ 350.581706][ T6288] xt_socket: unknown flags 0x58 [ 352.684387][ T6358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6358 comm=syz.6.1958 [ 353.345548][ T6397] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 353.787128][ T6418] device veth1_to_team entered promiscuous mode [ 354.121794][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 354.121810][ T30] audit: type=1400 audit(1780683622.553:1810): avc: denied { mounton } for pid=6422 comm="syz.0.1983" path="/427/bus" dev="tmpfs" ino=2349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 354.177518][ T30] audit: type=1400 audit(1780683622.609:1811): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.229256][ T30] audit: type=1400 audit(1780683622.637:1812): avc: denied { create } for pid=6426 comm="syz.6.1984" dev="anon_inodefs" ino=35218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 354.255813][ T30] audit: type=1400 audit(1780683622.647:1813): avc: denied { create } for pid=6426 comm="syz.6.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 354.276652][ T30] audit: type=1400 audit(1780683622.647:1814): avc: denied { create } for pid=6426 comm="syz.6.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 354.297350][ T30] audit: type=1400 audit(1780683622.647:1815): avc: denied { create } for pid=6426 comm="syz.6.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 354.318527][ T30] audit: type=1400 audit(1780683622.656:1816): avc: denied { read write } for pid=1572 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.343091][ T30] audit: type=1400 audit(1780683622.684:1817): avc: denied { read write } for pid=2312 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.411002][ T30] audit: type=1400 audit(1780683622.722:1818): avc: denied { read write } for pid=1250 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.455856][ T30] audit: type=1400 audit(1780683622.750:1819): avc: denied { create } for pid=6430 comm="syz.7.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 354.487278][ T6441] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 354.513728][ T6441] device veth0_vlan left promiscuous mode [ 354.520183][ T6441] device veth1_macvtap left promiscuous mode [ 354.527423][ T6441] device veth1_macvtap entered promiscuous mode [ 354.537119][ T6441] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl3: link becomes ready [ 354.546641][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 354.557890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.567539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.577441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.591618][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.599014][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.615275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.624205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.632984][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.640107][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.648010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.656587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 354.665406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.673853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 354.682421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.691158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.699504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.708007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.716651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.725141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.735305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.754036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.766043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.778798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.790559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.803495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.816418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.829580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.848075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.863107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.878130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.892945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.922984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.956734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.568970][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'. [ 357.758440][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 357.770313][ T6570] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2038'. [ 358.129187][ T6575] device syzkaller0 entered promiscuous mode [ 358.655171][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 359.345670][ T6663] device bridge1 entered promiscuous mode [ 359.474670][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 359.474686][ T30] audit: type=1326 audit(1780683627.558:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 359.526178][ T6687] audit: audit_backlog=65 > audit_backlog_limit=64 [ 359.540952][ T6687] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 359.554911][ T30] audit: type=1326 audit(1780683627.558:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 359.559603][ T6687] audit: backlog limit exceeded [ 359.611436][ T30] audit: type=1326 audit(1780683627.595:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 359.679443][ T30] audit: type=1326 audit(1780683627.595:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 359.724858][ T30] audit: type=1326 audit(1780683627.595:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 359.771953][ T30] audit: type=1326 audit(1780683627.595:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 359.823776][ T30] audit: type=1326 audit(1780683627.595:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.2086" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff765c2de59 code=0x7ffc0000 [ 360.107872][ T6713] device veth0_to_bond entered promiscuous mode [ 360.115053][ T6713] device macsec1 entered promiscuous mode [ 361.820628][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2115'. [ 364.255365][ T6848] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 364.932827][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 364.932849][ T30] audit: type=1400 audit(1780683632.674:2363): avc: denied { create } for pid=6856 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 364.970417][ T30] audit: type=1400 audit(1780683632.703:2364): avc: denied { create } for pid=6858 comm="syz.3.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 365.080794][ T30] audit: type=1400 audit(1780683632.815:2365): avc: denied { read write } for pid=1250 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.110941][ T30] audit: type=1400 audit(1780683632.834:2366): avc: denied { read write } for pid=2312 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.140297][ T30] audit: type=1400 audit(1780683632.862:2367): avc: denied { read write } for pid=6862 comm="syz.7.2152" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.181762][ T30] audit: type=1400 audit(1780683632.899:2368): avc: denied { read write } for pid=2312 comm="syz-executor" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.206544][ T30] audit: type=1400 audit(1780683632.918:2369): avc: denied { read write } for pid=6864 comm="syz.7.2153" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.281525][ T30] audit: type=1326 audit(1780683632.993:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.0.2154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 365.307704][ T6870] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2153'. [ 365.316017][ T30] audit: type=1326 audit(1780683632.993:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.0.2154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 365.352839][ T30] audit: type=1326 audit(1780683632.993:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.0.2154" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6181ae59 code=0x7ffc0000 [ 366.531506][ T6947] netlink: 'syz.0.2185': attribute type 3 has an invalid length. [ 367.119596][ T6992] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.132714][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.300063][ T7008] FAULT_INJECTION: forcing a failure. [ 367.300063][ T7008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.313495][ T7008] CPU: 0 PID: 7008 Comm: syz.6.2205 Not tainted syzkaller #0 [ 367.320906][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.330997][ T7008] Call Trace: [ 367.334467][ T7008] [ 367.337419][ T7008] __dump_stack+0x21/0x30 [ 367.342040][ T7008] dump_stack_lvl+0x110/0x170 [ 367.346836][ T7008] ? show_regs_print_info+0x20/0x20 [ 367.352078][ T7008] dump_stack+0x15/0x20 [ 367.356269][ T7008] should_fail+0x3c1/0x510 [ 367.360824][ T7008] should_fail_usercopy+0x1a/0x20 [ 367.365876][ T7008] _copy_to_user+0x20/0x90 [ 367.370345][ T7008] simple_read_from_buffer+0xe9/0x160 [ 367.376040][ T7008] proc_fail_nth_read+0x1a6/0x220 [ 367.381125][ T7008] ? proc_fault_inject_write+0x310/0x310 [ 367.386795][ T7008] ? security_file_permission+0x83/0xa0 [ 367.392466][ T7008] ? proc_fault_inject_write+0x310/0x310 [ 367.398133][ T7008] vfs_read+0x28d/0xc40 [ 367.402406][ T7008] ? kernel_read+0x1f0/0x1f0 [ 367.407027][ T7008] ? __kasan_check_write+0x14/0x20 [ 367.412237][ T7008] ? mutex_lock+0x9b/0x1c0 [ 367.417029][ T7008] ? wait_for_completion_killable_timeout+0x10/0x10 [ 367.423662][ T7008] ? __fget_files+0x2c4/0x320 [ 367.428476][ T7008] ? __fdget_pos+0x2d2/0x380 [ 367.433104][ T7008] ? ksys_read+0x71/0x250 [ 367.437467][ T7008] ksys_read+0x149/0x250 [ 367.441730][ T7008] ? vfs_write+0xfd0/0xfd0 [ 367.446186][ T7008] ? debug_smp_processor_id+0x17/0x20 [ 367.451633][ T7008] __x64_sys_read+0x7b/0x90 [ 367.456158][ T7008] x64_sys_call+0x96d/0x9a0 [ 367.460720][ T7008] do_syscall_64+0x4c/0xa0 [ 367.465186][ T7008] ? clear_bhb_loop+0x50/0xa0 [ 367.469960][ T7008] ? clear_bhb_loop+0x50/0xa0 [ 367.474657][ T7008] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.480571][ T7008] RIP: 0033:0x7fbc2b3bc68e [ 367.485042][ T7008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.504677][ T7008] RSP: 002b:00007fbc29e55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.513169][ T7008] RAX: ffffffffffffffda RBX: 00007fbc29e566c0 RCX: 00007fbc2b3bc68e [ 367.521152][ T7008] RDX: 000000000000000f RSI: 00007fbc29e560a0 RDI: 0000000000000003 [ 367.529137][ T7008] RBP: 00007fbc29e56090 R08: 0000000000000000 R09: 0000000000000000 [ 367.537371][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.545365][ T7008] R13: 00007fbc2b675038 R14: 00007fbc2b674fa0 R15: 00007ffffbcb0588 [ 367.553354][ T7008] [ 367.569789][ T7013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7013 comm=syz.6.2207 [ 367.779008][ T7030] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 367.786936][ T7030] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2214'. [ 368.245880][ T313] device bridge_slave_1 left promiscuous mode [ 368.252107][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.259791][ T313] device bridge_slave_0 left promiscuous mode [ 368.266022][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.274501][ T313] device veth1_macvtap left promiscuous mode [ 370.286922][ T30] kauditd_printk_skb: 14342 callbacks suppressed [ 370.286939][ T30] audit: type=1400 audit(1780683637.679:16715): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.315040][ T30] audit: type=1400 audit(1780683637.679:16716): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.336760][ T30] audit: type=1400 audit(1780683637.679:16717): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.358337][ T30] audit: type=1400 audit(1780683637.679:16718): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.379803][ T7089] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 370.380111][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.393856][ T140] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 370.401507][ T140] audit: backlog limit exceeded [ 370.406498][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.413016][ T140] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 370.420831][ T30] audit: type=1400 audit(1780683637.679:16719): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 371.453467][ T313] tipc: Disabling bearer [ 371.458883][ T313] tipc: Left network mode [ 371.944556][ T313] device bridge_slave_1 left promiscuous mode [ 371.953256][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.970723][ T313] device bridge_slave_0 left promiscuous mode [ 371.985413][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.012336][ T313] device veth1_macvtap left promiscuous mode [ 372.024138][ T313] device veth0_vlan left promiscuous mode [ 375.642205][ T30] kauditd_printk_skb: 51250 callbacks suppressed [ 375.642222][ T30] audit: type=1400 audit(1780683642.683:65698): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.660555][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 375.670270][ T30] audit: type=1400 audit(1780683642.693:65699): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.676168][ T140] audit: audit_lost=761 audit_rate_limit=0 audit_backlog_limit=64 [ 375.676183][ T140] audit: backlog limit exceeded [ 375.676592][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 375.698275][ T30] audit: type=1400 audit(1780683642.693:65700): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.705373][ T140] audit: audit_lost=762 audit_rate_limit=0 audit_backlog_limit=64 [ 375.710739][ T30] audit: type=1400 audit(1780683642.693:65701): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.716859][ T140] audit: backlog limit exceeded [ 380.998124][ T30] kauditd_printk_skb: 57895 callbacks suppressed [ 380.998141][ T30] audit: type=1400 audit(1780683647.707:123597): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.025773][ T30] audit: type=1400 audit(1780683647.707:123598): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.026727][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.047366][ T30] audit: type=1400 audit(1780683647.707:123599): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.053767][ T140] audit: audit_lost=763 audit_rate_limit=0 audit_backlog_limit=64 [ 381.075005][ T30] audit: type=1400 audit(1780683647.707:123600): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.082577][ T140] audit: backlog limit exceeded [ 381.103895][ T30] audit: type=1400 audit(1780683647.707:123601): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.109909][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.129925][ T30] audit: type=1400 audit(1780683647.707:123602): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.354002][ T30] kauditd_printk_skb: 57712 callbacks suppressed [ 386.354020][ T30] audit: type=1400 audit(1780683652.702:180941): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.381036][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.388048][ T30] audit: type=1400 audit(1780683652.711:180942): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.388137][ T140] audit: audit_lost=889 audit_rate_limit=0 audit_backlog_limit=64 [ 386.417148][ T30] audit: type=1400 audit(1780683652.711:180943): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.417334][ T140] audit: backlog limit exceeded [ 386.438686][ T30] audit: type=1400 audit(1780683652.711:180944): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.444622][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.464608][ T30] audit: type=1400 audit(1780683652.711:180945): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.471039][ T140] audit: audit_lost=890 audit_rate_limit=0 audit_backlog_limit=64 [ 391.709913][ T30] kauditd_printk_skb: 58286 callbacks suppressed [ 391.709932][ T30] audit: type=1400 audit(1780683657.716:239231): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.736900][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.737728][ T30] audit: type=1400 audit(1780683657.725:239232): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.744745][ T140] audit: audit_lost=891 audit_rate_limit=0 audit_backlog_limit=64 [ 391.766248][ T30] audit: type=1400 audit(1780683657.725:239233): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.776960][ T140] audit: backlog limit exceeded [ 391.796176][ T30] audit: type=1400 audit(1780683657.725:239234): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.801234][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.821257][ T30] audit: type=1400 audit(1780683657.725:239235): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.827500][ T140] audit: audit_lost=892 audit_rate_limit=0 audit_backlog_limit=64