last executing test programs: 2m1.918063036s ago: executing program 32 (id=145): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff00000001) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2200080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '9P2000.u'}}, {@afid={'afid', 0x3d, 0x6}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_readahead}], [], 0x6b}}) 1m39.475292923s ago: executing program 33 (id=390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000c5000000070000009500000000050000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) 1m16.258937948s ago: executing program 34 (id=448): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffff5, 0x1) waitid(0x1, 0x0, 0x0, 0x4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="914001004000000014000300000000400034991400350070696dd146"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async, rerun: 64) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) (rerun: 64) 1m9.335658613s ago: executing program 5 (id=613): prctl$PR_CAPBSET_READ(0x17, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2000414, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES16=0x0], 0x1, 0x2e4, &(0x7f0000000ac0)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1m9.05545393s ago: executing program 5 (id=614): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c39e3fe21698adc968a1c1e38679dd9919f580f5ca1b96cedc2494a1e30da06159c4658c0ac67be2e7b23cf5a551472a157879ce082fc99d8576cba0457cdc2b64c4375d073c7dffe175e846501cdadd78a59b2730d7da5f3ab90ff98cadf5744420fd9f06633c2e173db5b5306ab9b79c9e6d7540995deda22cf1955550cd4be3932cf2b4f19629b5229bc2fa1cb38bf9fe9f28c302ede3bb03836172f5147af3ca9c0ec2fa51fc4f71d16d9d70fbe6b7f5955d366811c846b7a66bfc10e24aceb3433b7cff9ebfbdda58059435a9fee36724c1c410193277620c49f6c76228e7e71441875c4ca0"], 0x57) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x1, 0x553e, &(0x7f0000003d80)="$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") 1m8.548558802s ago: executing program 5 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c41"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2e5c8108dc738c4c, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r7, 0x25, 0x0, @val=@perf_event={0x5}}, 0xd) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r8, 0xffffffffffffffff, 0x4}, 0x10) 1m8.186458791s ago: executing program 5 (id=620): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)=""/49, 0xf2}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_ID={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0x8, 0xffff, 0xca, 0x0, 0x0, 0xe02, 0x2, 0x8, 0x7a, 0x10000]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1m8.008391885s ago: executing program 5 (id=621): syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0xb00, &(0x7f00000002c0)={[{@grpid}, {@noauto_da_alloc}, {@minixdf}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@nogrpid}, {@debug}]}, 0x4, 0xbc6, &(0x7f0000000940)="$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") 1m7.831294979s ago: executing program 5 (id=624): r0 = socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) mmap$KVM_VCPU(&(0x7f000092c000/0x1000)=nil, 0x0, 0x3, 0x10010, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) sendmsg(r2, &(0x7f0000000680)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x4}}, 0x80, &(0x7f0000000540), 0x0, 0x0, 0xa0}, 0x8000) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002040)="bc", 0x1}], 0x1, 0x0, 0x0, 0x48091}}], 0x2, 0x4000) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000a20000/0x4000)=nil, 0x4000, 0x4, 0x8010, r5, 0xcc9b6000) 1m7.830423189s ago: executing program 35 (id=624): r0 = socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) mmap$KVM_VCPU(&(0x7f000092c000/0x1000)=nil, 0x0, 0x3, 0x10010, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) sendmsg(r2, &(0x7f0000000680)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x4}}, 0x80, &(0x7f0000000540), 0x0, 0x0, 0xa0}, 0x8000) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002040)="bc", 0x1}], 0x1, 0x0, 0x0, 0x48091}}], 0x2, 0x4000) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000a20000/0x4000)=nil, 0x4000, 0x4, 0x8010, r5, 0xcc9b6000) 24.660073931s ago: executing program 0 (id=1001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0x4008001) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) poll(&(0x7f0000000580)=[{r2, 0x4600}], 0x1, 0xfffffffc) wait4(r3, 0x0, 0x8, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4008000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r10, 0x5) close(0x3) recvmmsg$unix(r9, &(0x7f0000003ac0)=[{{&(0x7f0000000180), 0x6e, 0x0}}], 0x1, 0x2000, 0x0) close(r8) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd0400000000000066b6a0d90c86e9b00300897108076700", @ANYRES32=0x0, @ANYBLOB="05000f000700000008000300", @ANYRES32=r7, @ANYBLOB="0c0006000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4ec3f78", @ANYRES16=r4, @ANYBLOB="01002abd7000000200001600000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20048090}, 0x4048840) r11 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r11}, &(0x7f0000000000)) syz_open_procfs(r11, &(0x7f0000000040)='net/vlan/config\x00') r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r12, &(0x7f0000000100)=""/83, 0x53) getdents64(r12, &(0x7f0000000400)=""/72, 0x48) mount$binderfs(&(0x7f0000000500), &(0x7f0000000540)='./binderfs\x00', &(0x7f0000000080), 0x90047, &(0x7f0000000680)=ANY=[]) 23.44728835s ago: executing program 0 (id=1012): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYRESDEC, @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRES8, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 23.408187941s ago: executing program 0 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000040001c0012800b00010062726964676500000c0002800500160005"], 0x3c}, 0x1, 0x2000000, 0x0, 0x400c000}, 0x44) 23.291361324s ago: executing program 0 (id=1015): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1d, 0x3, 0x8, 0x8, 0x40c6, 0xffffffffffffffff, 0x20}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x4, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000851000000100000073ef51a80d4f25c909348f5795000000000000009502a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2f4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x70bd29, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x6}}}, 0x24}}, 0x8804) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@deltfilter={0x40, 0x2d, 0x119, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0xffff}, {0xf, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6c}, @TCA_CHAIN={0x8, 0xb, 0xf52f}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 21.971774845s ago: executing program 0 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000040001c0012800b00010062726964676500000c0002800500160005"], 0x3c}, 0x1, 0x3000000, 0x0, 0x400c000}, 0x44) 21.78748134s ago: executing program 0 (id=1030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000050000000b70000000000140095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.78741908s ago: executing program 36 (id=1030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000050000000b70000000000140095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.485595167s ago: executing program 7 (id=1033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0xfe, 0x4e, 'k'}}}}}, 0x0) 21.450962778s ago: executing program 7 (id=1034): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x103, "51d4214d291b43ac85d38aa499532c609f27e9c601424459", "eb616aa3b09da740c50a901892df3224952697dc5bb3c54d9d1ebf850e64cecc"}}}}}}, 0x0) 21.365701s ago: executing program 7 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000640), 0x1, 0x0) pwrite64(r2, &(0x7f0000000ac0)="e62e", 0x2, 0x7fffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xd, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000d3c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="6466f30fc7f92e660f567e92f20fe68acf000f233f6766c7442400976ed114ea3a66d9006766c744240600000000670f011c24670f01cfbaa00066ed0f35a21611e0e035002000000f22e036670f38cb1c6500000080", 0x56}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c0000000000103000000000000000000030000092c0019800800010000080000080002000200000008000100a009000008000100140000000800010000000000000000400000000240000d8014000500fe8000000400000000000000000400bb14000400ff0200000000000000000000000000010c000380060002"], 0xc0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r13, 0x1000007, 0x13, r12, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="f36d0f01c8c4e3a179c4070f09b8010000000f01c1b9800000c00f320f300f30c4c111dedf660f6806360f2fca642ef30f5e90b9c670c377", 0x12}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, {[0xe, 0xd, 0x3, 0x583, 0x4, 0x4, 0x27b6, 0x6]}}) ioctl$KVM_RUN(r12, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 21.35225438s ago: executing program 7 (id=1036): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1d, 0x3, 0x8, 0x8, 0x40c6, 0xffffffffffffffff, 0x20}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x4, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000851000000100000073ef51a80d4f25c909348f5795000000000000009502a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2f4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x70bd29, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x6}}}, 0x24}}, 0x8804) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@deltfilter={0x40, 0x2d, 0x119, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0xffff}, {0xf, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6c}, @TCA_CHAIN={0x8, 0xb, 0xf52f}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 20.211424557s ago: executing program 7 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390500"/20, @ANYRES32=0x0, @ANYBLOB="10100000105000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000040000214000200fc020000fa"], 0x5c}}, 0x0) 19.879236665s ago: executing program 9 (id=1031): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0xa, "05821413"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 19.595475672s ago: executing program 7 (id=1053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0xfe, 0x4e, 'k'}}}}}, 0x0) 19.595044962s ago: executing program 37 (id=1053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0xfe, 0x4e, 'k'}}}}}, 0x0) 15.783626243s ago: executing program 6 (id=1076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.683973686s ago: executing program 6 (id=1077): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 15.615363587s ago: executing program 6 (id=1078): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xa9f5, 0x85}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x6}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xffffffff, 0x25dfdbfc, {0xa, 0x80}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}}, 0x8000) mount$incfs(0x0, &(0x7f0000000b80)='.\x00', 0x0, 0x1, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 15.605886858s ago: executing program 9 (id=1079): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @broadcast, 0x4e20, 0x7, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xf0000000}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15.517180689s ago: executing program 9 (id=1080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f00007d0000)) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder-control\x00', 0x0, 0x0) tee(r0, r1, 0x0, 0xe) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="080000005400010026bd70010da0890bb30a6c26", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1f00000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000880)={0x8f, 0x0, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) sendmsg$unix(r13, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010014"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.371287653s ago: executing program 9 (id=1081): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1d, 0x3, 0x8, 0x8, 0x40c6, 0xffffffffffffffff, 0x20}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x4, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000851000000100000073ef51a80d4f25c909348f5795000000000000009502a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2f4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x70bd29, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x6}}}, 0x24}}, 0x8804) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@deltfilter={0x40, 0x2d, 0x119, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0xffff}, {0xf, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6c}, @TCA_CHAIN={0x8, 0xb, 0xf52f}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 14.369495737s ago: executing program 9 (id=1085): socket(0xa, 0x3, 0xff) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, 0x24, 0x8080) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x8, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0x922) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) 14.051462304s ago: executing program 9 (id=1091): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000380000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 14.051200514s ago: executing program 38 (id=1091): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000380000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 12.068842272s ago: executing program 6 (id=1095): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1d, 0x3, 0x8, 0x8, 0x40c6, 0xffffffffffffffff, 0x20}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x4, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000851000000100000073ef51a80d4f25c909348f5795000000000000009502a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2f4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x70bd29, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x6}}}, 0x24}}, 0x8804) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@deltfilter={0x40, 0x2d, 0x119, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x1, 0xffff}, {0xf, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6c}, @TCA_CHAIN={0x8, 0xb, 0xf52f}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11.333896539s ago: executing program 6 (id=1097): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x5, 0x3, 0x100, 0x2, 0x5}) r1 = socket(0x10, 0x3, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x800) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x3, 0x0, 0x2}]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000005d000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='\x00') syz_emit_ethernet(0x142, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "bad3a5", 0x10c, 0x21, 0xff, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x16, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0xf, 0x0, 0x0, 0x8, 0x1, "a9888e", 0x6, "86ec13"}, "67256d75eb140152ded962cf79ba416aabb0dc497d404dfa9fa7d2f88fa5e52494f3a122ddaf501aaf2a688b746551eef391fe98ec8f369f454cd2ec7f8b1f617cbcbe415c7c48dac4d7579200c41ff6cd53c07b6100f56ce8030eb768ebc2396bc67fb20d0682e00a2495432878559fcc89155ebb9962bbf01c6d1eae63db89f47ee632f810f049ae51221b6741a541b6c268976d3c14ad078535242624df7acb1a3288b5507a027e009b3f7a64acbdc46803e39f3b70002f250f194bf11e0855ef12c9da8ff93971c3f84babcb804078d9d1673e45b01a6c889529"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11.116827215s ago: executing program 6 (id=1105): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@commit={'commit', 0x3d, 0x7}}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = syz_mount_image$erofs(&(0x7f0000000200), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1af, &(0x7f0000000480)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r2, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0xfffe, 0x40002102, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r5, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a84300810025000800450000280000000000019078e0000002ac1414bb0d0090780000000300"/62], 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)='J', 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x1000) mremap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000004e000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYBLOB="d0821c0f9d7cbea513", @ANYBLOB="ffffffff000000000900"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="05000000feffffff00"/28], 0x50) mincore(&(0x7f0000714000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/37) 11.090113035s ago: executing program 39 (id=1105): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@commit={'commit', 0x3d, 0x7}}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = syz_mount_image$erofs(&(0x7f0000000200), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1af, &(0x7f0000000480)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r2, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0xfffe, 0x40002102, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) bind$packet(r5, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a84300810025000800450000280000000000019078e0000002ac1414bb0d0090780000000300"/62], 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)='J', 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x1000) mremap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000004e000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYBLOB="d0821c0f9d7cbea513", @ANYBLOB="ffffffff000000000900"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="05000000feffffff00"/28], 0x50) mincore(&(0x7f0000714000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/37) 6.351379258s ago: executing program 4 (id=1156): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) lchown(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000100)={0xa, 0x4e23, 0x10, @mcast2}, 0x15) r1 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADDIR(r2, &(0x7f0000000280)={0xa6, 0x29, 0x2, {0x0, [{{0x1, 0x2, 0x6}, 0x7, 0xf, 0x7, './file0'}, {{0x1, 0x0, 0x2}, 0xfff, 0x7, 0x7, './file0'}, {{0x0, 0x2, 0x7}, 0x17d, 0x7, 0x7, './file0'}, {{0x1, 0x3, 0x7}, 0x7f, 0x4, 0x7, './file1'}, {{0x0, 0x0, 0x3}, 0x9, 0x1, 0x7, './file0'}]}}, 0xa6) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x36) io_setup(0x3, &(0x7f0000000200)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 6.104377794s ago: executing program 1 (id=1159): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/233, 0x4}, 0x20) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) creat(0x0, 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1084, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x14c) preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}], 0x1, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x4}) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x0, 0x6, 0x7ff, 0x401, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) r4 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1003, 0x3a, '\x95l\\\xec\xbd\xa2\x03\xc5[\xcdd\x9a\x89\x83>\f:\\x\xac\x9c\xdc\xd7\xa4[\x8700\xf1:O\xc1|RS\xd7\xf6\x1b&j\xdcPQ\xf0\xbaJ\xd1S\xba\x85Q;\xc1W`P\xf8\xff)\xa9\x1c\xf5\x97\x83\xcd\x8c\xb0\xc6\xc1\xca&\xac4j\x0f\x89\xed\xe5\x95R\\j\xa6\x12[\xc7E\xa7\xf4b\x10J\xb9\x90\xd4\xda\xfa\xbe\x95\xa01\x1fz\x054\x00E\x96\x03\xa8}9\x9cq\x81W\x1d\xfc\xc0\xa5\x94\x88\xeajx\xc5\x8f%\xbf>?%\a-\xf3\x16\x19=bb\xc0@\'G]\x1doI\xd4pB\x14\x85\xa4a\x8d\xa7\xa5]\x86\x90Dg\xa4\x80\x149z\x93\xc1M\xa14\nd3.s\x93\xe9H\x97\x97\x93p$]7Y.\x1b\xa9qLN\x01\xa0\xe2\x1e]&eNC\x94\x15DD\a\xc9\xd4P\x9dLn\xcf$\n\x9e\x9b*\x9d`\xd0\xd1\xc2/\xcf\xb7\xd6\xda\xa1~d', 0x3a, '\xe5E\x10$\xf4}\x85\xd3/tsb/00#/00#\x00\xc1S3\xa0~\xc51H\xdcF)?\x8aV\xee', 0x3a, './file0'}, 0x135) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x5e) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 5.382442772s ago: executing program 4 (id=1163): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000000)={[{@debug}, {@test_dummy_encryption_v1}, {@sysvgroups}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) r1 = syz_open_dev$mouse(0x0, 0x5f, 0x88000) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect$midi(0x1, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12134100000000088c0d030140002402070109021200010108a002090400000001032009186544d13096df5ee92891ad5e3eccadd9730299d40f3f0d7c3cadbe8ee0481341c5db5cf91408d3f944a93215aa2ff27f0520b8fd3f173e418080ff64987d1a2630b84f2db2697b38da9b9adb5dbd2ec4cbd120ad8904ef01b4343ef4013a29f30e7e5697164fb82ed1500d71be86772554c0762cb77ec22fe69e3b7d0c18c6"], &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000280)=[{0x48, 0x0, 0x40, 0x7ff}, {0x30, 0x1, 0x8, 0xfffff024}, {0x6, 0x2, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) socket$inet6(0xa, 0x1, 0xff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 4.918159513s ago: executing program 1 (id=1175): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2db, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1d7efb9a, 0x9000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d10, 0x0, 0x51c, 0x0) 4.804718395s ago: executing program 1 (id=1179): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000001b00)="120000001200e7ef007b00000000018b4ba1", 0x12, 0x20040090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000010c0)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4114, 0x1012}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000001000)=""/123, 0x7b}, {&(0x7f0000000540)=""/76, 0x4c}], 0x6}, 0x5}], 0x1, 0x40010120, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = syz_clone3(&(0x7f00000002c0)={0x80800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x15}, &(0x7f0000000100)=""/11, 0xb, &(0x7f00000001c0)=""/152, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5, {r1}}, 0x58) sched_setaffinity(r2, 0x8, &(0x7f0000000640)=0x4) fcntl$lock(r1, 0x5, 0x0) socketpair(0xf, 0xd, 0x1, &(0x7f0000000180)) 4.697072568s ago: executing program 1 (id=1181): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff000100007f000001000000000000000000000000fc01000000000000000000000000050a0000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000101000000000000809201000000000010a39b000000000000ffef0000000000001c250800000000000800000000000000fcffffffffffffff0200000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600"], 0x140}}, 0x844) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff000100007f000001000000000000000000000000fc01000000000000000000000000050a0000003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000101000000000000809201000000000010a39b000000000000ffef0000000000001c250800000000000800000000000000fcffffffffffffff0200000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600"], 0x140}}, 0x844) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) close(r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) (async) 4.653695609s ago: executing program 1 (id=1183): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xd, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1b}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x80801) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x28, {0x28, 0x8, "83efb930f01842562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$printer(0xf9024cd0748a298b, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x9f, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x7, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xae, 0x1a, 0x4, 0x0, 0x9}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x8, 0x7, 0x6c0, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0xbd, 0x4, 0x8, 0x1e000, 0x6, [0x30, 0x6000, 0xc0, 0xf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x2, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe2, 0x3, 0xe2, 0x2, 0x3}]}, 0x7, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "dc2a9498dffbb2c5f4f89f007cf186b5b537b359b0be28ae6ea57136d131bdff7a4e7bdd0be2337c94ba65f6150552010ac986281e88dd7c78a6fd4c6d9d44133c07000000a92bf83fddd15f03be5ec714a03d4877ea4789cf959bfdcbe9002aa99d1bf47e2e5df51ad95ad5fa1231c5922058fe6cf8ee8e30ab102441f6c8ff335f796e1c75f34231c606dcbe213c0d0998e9dddbad04b1ccfe30f9bb1e2e624f52acab2f4241bbd14187e1f691e5be8eae44fe9cdaf578b13511a158c63dc4b3b7002f4e819005e455b4025db10a747c453fe15a7337f08c1213fec9022665d58824d282596c452092e68ffd688c0e3872f8b0fdfddfaa5c982dc574"}}, {0xaf, &(0x7f0000000280)=@string={0xaf, 0x3, "4a04d5f8c3f0d8d2c2a4796d316f09f83a03fc0451a073f0a204d0efc1cb5199b8a7012f3fa69ec9b75819e7a148bc65f8bae4eaf8227af366892a5e640f7c369355ded32a5f695027fb0fb73cf683c3c59d198218f5cc53e4c4e4339e79e81b82c77bb0919d3f1eccd866cf4362ddc0a9eb55f9313e1302965795e82f8336be53012e1fb2a82910664b4ea0913192d71a843796ffcb6f8a4d68d8f0f77587da29a69187fdd029eba4d65100a0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x429}}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "4cb0245247faa5cefee7bc341fb158a4db308f60861cc6398720a870670dd0879ac4da52c638995ecc9fc289f321a7a08d9275e8d008b957e4bcd38eec5e970d9c505a07d4a373a29743c16977b3bf7959ca346ac330676f7a777d7d727097cf31ca22fce933bd778ae5278ec9e5644ce450aa1d542c7ca0dc16cfd332b8caf916bc8dc10c4a4c71d70abb272a093a9389abb9f48c367a"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f00000005c0)={0x20, 0x3, 0x67, {0x67, 0x7, "2f1fcfdc773ad9400ce48f03aa978d43dc2c3b86f7372dadd2cd678c6d9a3a318d00447b1fb7fc2f20d00eb2b8ece4a56e82405e1de1c1f80a4c5bad6b964fbf8a2817711d7ccf86a0bf87a2a23a00ca88e167e71c2b39ca31e1f2de221f30e8c382404b1c"}}, &(0x7f0000000640)={0x0, 0x3, 0xde, @string={0xde, 0x3, "df2328b2fc1fe4b81e4a4d0553c94d8c4063dfcaad75176971779f87567704978ec55be0b85670fa4d39c1b72a8bdafadec5b26574abec45529aed35fc4d55a8b4389b87a63b67767a8818b6fbc915bd237dd42f88e6ecdc0e12259533d9c0cf8a88ae29b52fbaec70b7d2038a994d0e866c13385f40f13df2c7ba8ba1b7a6e49e9d7ee313dfa485985fa37ce564083c8ef305fd8147140cb15462ceb5a7cd8dc9c3d502a20bede7c7d00cb7e07809c33da9ea4cdf4aa8d5e72071f05aa8a1395792ead2aab6672155234f4a16657f48cb1e69f4e26769332059e136"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000780)={0x40, 0xe, 0xd1, "9321af190ea46c97ed72e59cde8b31cdbde04d694ccdc73987c651a366a616836e6acec46ae6919c2ec3bae48ff6ff3d56e04dd1c3539bf51854d63f3450400f03fe9c588063a96edfc6fbbefca263974a1597cd3223e323ecc4d596d69239f676ec3430a21b548f706cbb38ffe043a70ae99fd2c1029cddcced3c3d596e86a1e864ebcecc378d6e4c12a24b5dd0487ee59fa20c43f131ca5afbff97f64e8d8d4dce8f2f145a3e275f06f697d259fd4fcdca66ac4cd382b40c71776d191645d7d3514b01721e5872f1519fe70658d13771"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x88, {0x86, "9274e17e3aa61a784313b915dbe54af0cc0e18db80904ffadf9730a811b415c1919d6e1614c1533ed551169a5d3e58aaea67cdfaef26f3346f41850029790bc6b8c5f50efb3c1a3553a62201833166eb92a32567fde53bf544541aa8605211365e5b37a245dc0faf4860afa496ca5c68b22d7fce23f83fea4c1019c6c646de094ab3754e62fe"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000a00)={0x20, 0x0, 0x1}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xd, 0x2}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1b}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) userfaultfd(0x80801) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x28, {0x28, 0x8, "83efb930f01842562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$printer(0xf9024cd0748a298b, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x9f, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x7, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x7}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xae, 0x1a, 0x4, 0x0, 0x9}, 0x44, &(0x7f0000000100)={0x5, 0xf, 0x44, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x8, 0x7, 0x6c0, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0xbd, 0x4, 0x8, 0x1e000, 0x6, [0x30, 0x6000, 0xc0, 0xf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x2, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe2, 0x3, 0xe2, 0x2, 0x3}]}, 0x7, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "dc2a9498dffbb2c5f4f89f007cf186b5b537b359b0be28ae6ea57136d131bdff7a4e7bdd0be2337c94ba65f6150552010ac986281e88dd7c78a6fd4c6d9d44133c07000000a92bf83fddd15f03be5ec714a03d4877ea4789cf959bfdcbe9002aa99d1bf47e2e5df51ad95ad5fa1231c5922058fe6cf8ee8e30ab102441f6c8ff335f796e1c75f34231c606dcbe213c0d0998e9dddbad04b1ccfe30f9bb1e2e624f52acab2f4241bbd14187e1f691e5be8eae44fe9cdaf578b13511a158c63dc4b3b7002f4e819005e455b4025db10a747c453fe15a7337f08c1213fec9022665d58824d282596c452092e68ffd688c0e3872f8b0fdfddfaa5c982dc574"}}, {0xaf, &(0x7f0000000280)=@string={0xaf, 0x3, "4a04d5f8c3f0d8d2c2a4796d316f09f83a03fc0451a073f0a204d0efc1cb5199b8a7012f3fa69ec9b75819e7a148bc65f8bae4eaf8227af366892a5e640f7c369355ded32a5f695027fb0fb73cf683c3c59d198218f5cc53e4c4e4339e79e81b82c77bb0919d3f1eccd866cf4362ddc0a9eb55f9313e1302965795e82f8336be53012e1fb2a82910664b4ea0913192d71a843796ffcb6f8a4d68d8f0f77587da29a69187fdd029eba4d65100a0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x429}}, {0x99, &(0x7f0000000440)=@string={0x99, 0x3, "4cb0245247faa5cefee7bc341fb158a4db308f60861cc6398720a870670dd0879ac4da52c638995ecc9fc289f321a7a08d9275e8d008b957e4bcd38eec5e970d9c505a07d4a373a29743c16977b3bf7959ca346ac330676f7a777d7d727097cf31ca22fce933bd778ae5278ec9e5644ce450aa1d542c7ca0dc16cfd332b8caf916bc8dc10c4a4c71d70abb272a093a9389abb9f48c367a"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}]}) (async) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f00000005c0)={0x20, 0x3, 0x67, {0x67, 0x7, "2f1fcfdc773ad9400ce48f03aa978d43dc2c3b86f7372dadd2cd678c6d9a3a318d00447b1fb7fc2f20d00eb2b8ece4a56e82405e1de1c1f80a4c5bad6b964fbf8a2817711d7ccf86a0bf87a2a23a00ca88e167e71c2b39ca31e1f2de221f30e8c382404b1c"}}, &(0x7f0000000640)={0x0, 0x3, 0xde, @string={0xde, 0x3, "df2328b2fc1fe4b81e4a4d0553c94d8c4063dfcaad75176971779f87567704978ec55be0b85670fa4d39c1b72a8bdafadec5b26574abec45529aed35fc4d55a8b4389b87a63b67767a8818b6fbc915bd237dd42f88e6ecdc0e12259533d9c0cf8a88ae29b52fbaec70b7d2038a994d0e866c13385f40f13df2c7ba8ba1b7a6e49e9d7ee313dfa485985fa37ce564083c8ef305fd8147140cb15462ceb5a7cd8dc9c3d502a20bede7c7d00cb7e07809c33da9ea4cdf4aa8d5e72071f05aa8a1395792ead2aab6672155234f4a16657f48cb1e69f4e26769332059e136"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000780)={0x40, 0xe, 0xd1, "9321af190ea46c97ed72e59cde8b31cdbde04d694ccdc73987c651a366a616836e6acec46ae6919c2ec3bae48ff6ff3d56e04dd1c3539bf51854d63f3450400f03fe9c588063a96edfc6fbbefca263974a1597cd3223e323ecc4d596d69239f676ec3430a21b548f706cbb38ffe043a70ae99fd2c1029cddcced3c3d596e86a1e864ebcecc378d6e4c12a24b5dd0487ee59fa20c43f131ca5afbff97f64e8d8d4dce8f2f145a3e275f06f697d259fd4fcdca66ac4cd382b40c71776d191645d7d3514b01721e5872f1519fe70658d13771"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x88, {0x86, "9274e17e3aa61a784313b915dbe54af0cc0e18db80904ffadf9730a811b415c1919d6e1614c1533ed551169a5d3e58aaea67cdfaef26f3346f41850029790bc6b8c5f50efb3c1a3553a62201833166eb92a32567fde53bf544541aa8605211365e5b37a245dc0faf4860afa496ca5c68b22d7fce23f83fea4c1019c6c646de094ab3754e62fe"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000a00)={0x20, 0x0, 0x1}}) (async) 2.397918103s ago: executing program 3 (id=1202): syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@grpid}, {@noauto_da_alloc}, {@minixdf}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nodelalloc}, {@nogrpid}, {@debug}]}, 0x4, 0xbc6, &(0x7f0000000940)="$eJzs3N1rXGUaAPDnnHy2ze6ky7Js96ZZlqWF3Z2mXVK2ZcFWKt54Ieit0JBOSsj0gyRSk+Ziov+AqNeCN4JalF7Y694oeOuN1luLF0KR2CiIH5EzH0nazCSTdpITmt8P3sz7znPOvM8zh9NzXpjTAPasoezPYMShiDifRBTq76cR0Vvt9UdUatstLc6P/bg4P5bE8vIL3yWRRMT9xfmxxmclaz84qe4Znz+dxJ9eWz/v9Ozc5Gi5XJqqj4/NXLp6bHp27j8Tl0Yvli6WLh8/+b+REyMnh0+NdKzWn74+c+uHvz/7TeXn93+98f2b7yZxJgbqsbV1dMpQDD34ndR1R8RopyfLSVe9nrV1Jt2b7JRuc1IAALSUrrmH+0sUoitWb94K8ckXuSYHAAAAdMRyV8Rye5I2twMAAAB2naTd9X9/uxsCAAAAu0vjdwD3F+fHGi3fXyTsrHtna88/Z3Uv1Vst0h2V6mt/9ETE/vtJrH2sNant9tiGIuLuV6c+ylps03PIG6ksRMRfmx3/pFr/YPUp7vX1pxEx3IH5hx4a77b6/93buv4zHZg/7/oB2Jtun61dyNZf/9KV+59ocv3rbnLtehR5X/8a939L6+7/VuvvanH/93ybc1x/7+1rrWJZ/f+/9cyHjZbNn70+VlFbcG8h4m/dzepPVupPWtR/vs05Cr9dK7WK5V3/8jsRR6J5/Q3Jxv8/0bHxiXJpuPa36RwLn4180Gr+Ldff81jlrpMd//0t6t/s+F9tc46Xzp272Sq2ef3pt73Ji9Veb/2dV0ZnZqaOR/Qmz61//0T9gfYWGts0PiOr/+g/Nj7/m9WfTVGpfw/ZWmCh/pqNX31ozqduXP94dfTLuvqztV+e5/+FRzz+r7c5xz8/feNoq9ja9W/WsvnvJrW1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0pBExEElaXOmnabEYcSAi/hz70/KV6Zl/jV95+fKFLBYxGD3p+ES5NBwRhdo4ycbHq/3V8YmHxv+NiIMR8VZhX3VcHLtSvpB38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw4EBEDkaTFiEgjYqmQpsVi3lkBAAAAHTeYdwIAAADAtrP+BwAAgCef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb7ODh23eSiKic3ldtmd56rCfXzIDtluadAJCbrrwTAHLTnXcCQG62uMZ3uwBPoGSTeH/LSF/HcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg9zpy6PadJCIqp/dVW6a3HutpusfhHcwO2E5p3gkAuenaKNi9c3kAO88pDntX8zU+sJckm8T7V7epPBjp27acAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh9BqotSYsRkVb7aVosRvwhIgajJxmfKJeGI+KPEfFloacvG/flnTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemdHR08u0kzUPLuZynef/LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHqZn5yZHy+XS1HTemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m56dmxwtl0tTbXRubmXjNZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//9v2Atw") 2.222160267s ago: executing program 1 (id=1204): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = eventfd2(0x2, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="6effef930c53dea1", 0x8}, {&(0x7f0000000280)='~', 0x1}], 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100149a20a10e6040a000002010203010902120001fe0610800904340800080001"], 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8886, &(0x7f0000000140)={[{@oldalloc}, {@data_err_abort}, {@debug}, {@stripe={'stripe', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x9}}, {@noblock_validity}, {@grpquota}, {@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x0, 0x51d, &(0x7f0000001fc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x6, 0x4, 0x1, 0x8004, r2, 0x0, '\x00', 0x0, r2, 0x3, 0x4, 0x3, 0x0, @value=r2}, 0x50) 1.531486894s ago: executing program 4 (id=1206): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44840}, 0x20004040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000001c0)) syz_mount_image$fuse(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.483291495s ago: executing program 3 (id=1207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000018360a000000000000180100002020782500000000002020207b1af8ff00000000dba100000000000087010000f9ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xfdee, &(0x7f0000000340)=""/222}, 0x6f) 1.28746783s ago: executing program 3 (id=1209): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1.176020152s ago: executing program 8 (id=1211): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) 1.113984653s ago: executing program 8 (id=1212): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x1065d, @empty, 0xff}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) write$cgroup_pid(r3, 0x0, 0x5b) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7, 0x36a850c2fde6aa6d, 0x4, 0x1, {{0xf, 0x4, 0x1, 0x4, 0x3c, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0x92, 0x0, 0x5, [0x1ff, 0x74, 0x2, 0x401, 0x7]}, @ssrr={0x89, 0xf, 0xa2, [@private=0xa010101, @empty, @empty]}, @end]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="000072000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000028a3f8fffcffffff1cab0001f0ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095000400000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x76, &(0x7f0000000280)=""/118, 0x41000, 0x2, '\x00', r4, 0x25, r3, 0x8, &(0x7f00000003c0)={0x4f03, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xc, 0xffffffb3, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r3, r3], &(0x7f0000000480)=[{0x4, 0x1, 0x2, 0xa}, {0x1, 0x1, 0x1, 0x7}, {0x0, 0x4, 0x10, 0x8}, {0x5, 0x5, 0x2, 0x7}, {0x3, 0x4, 0x10}, {0x4, 0x3, 0x3, 0xa}, {0x4, 0x2, 0xf, 0xc}], 0x10, 0x3}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r5, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) (async) fcntl$lock(r1, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xffffffffffffffff}) 1.113650093s ago: executing program 2 (id=1213): r0 = socket(0x18, 0x80000, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x461d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = socket(0x1, 0x5, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0xc000201c}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x9, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x81) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0xb, 0x7, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x700, 0x8000, 0x101, 0x2}}) r7 = signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000000c0)=""/55, 0x100000, 0x1000, 0x10001, 0x1}, 0x20) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xa0, r5, 0x400, 0x70bd29, 0x25dfdc02, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x200080c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000002000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x105, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc7, 0x10, 0x0, 0xe}, 0x24) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.107079354s ago: executing program 4 (id=1214): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10011, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x18}) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r2, 0x0, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb5cfc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x9) r3 = socket(0xa, 0x2, 0x0) futex(&(0x7f0000000140)=0x1, 0x2, 0x4, &(0x7f0000000180), &(0x7f00000001c0), 0x1) readv(r3, &(0x7f0000003600)=[{&(0x7f0000000240)=""/138, 0x8a}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x2, &(0x7f0000000540)=[{0x94b0, 0xf1, 0x4, 0x4}, {0xfff9, 0xd, 0x7, 0x2}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000040005"], 0x40}], 0x1}, 0x0) setuid(0xee00) setxattr$security_ima(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@md5={0x1, "a63b2451482209b5e0c4893b9143d047"}, 0x11, 0x3) syz_emit_ethernet(0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080049c0007600000000000c907864010100ac1414128907efe0000001860600000000000000936fb35bf641dd19195ea29b25693efae5974726cbeb57393c7dcbdfdc6c6124cf8455701c4a5bd5980071554cb919c0047ed2601969559a0f532e2464bff958c69a000009380c2fe91b0600000000000000"], 0x0) 1.039308735s ago: executing program 8 (id=1215): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/233, 0x4}, 0x20) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) creat(0x0, 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1084, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x14c) preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}], 0x1, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x4}) pselect6(0x40, &(0x7f0000000000)={0xd, 0x3, 0x0, 0x6, 0x7ff, 0x401, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) r4 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1003, 0x3a, '\x95l\\\xec\xbd\xa2\x03\xc5[\xcdd\x9a\x89\x83>\f:\\x\xac\x9c\xdc\xd7\xa4[\x8700\xf1:O\xc1|RS\xd7\xf6\x1b&j\xdcPQ\xf0\xbaJ\xd1S\xba\x85Q;\xc1W`P\xf8\xff)\xa9\x1c\xf5\x97\x83\xcd\x8c\xb0\xc6\xc1\xca&\xac4j\x0f\x89\xed\xe5\x95R\\j\xa6\x12[\xc7E\xa7\xf4b\x10J\xb9\x90\xd4\xda\xfa\xbe\x95\xa01\x1fz\x054\x00E\x96\x03\xa8}9\x9cq\x81W\x1d\xfc\xc0\xa5\x94\x88\xeajx\xc5\x8f%\xbf>?%\a-\xf3\x16\x19=bb\xc0@\'G]\x1doI\xd4pB\x14\x85\xa4a\x8d\xa7\xa5]\x86\x90Dg\xa4\x80\x149z\x93\xc1M\xa14\nd3.s\x93\xe9H\x97\x97\x93p$]7Y.\x1b\xa9qLN\x01\xa0\xe2\x1e]&eNC\x94\x15DD\a\xc9\xd4P\x9dLn\xcf$\n\x9e\x9b*\x9d`\xd0\xd1\xc2/\xcf\xb7\xd6\xda\xa1~d', 0x3a, '\xe5E\x10$\xf4}\x85\xd3/tsb/00#/00#\x00\xc1S3\xa0~\xc51H\xdcF)?\x8aV\xee', 0x3a, './file0'}, 0x135) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x5e) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 1.039157815s ago: executing program 3 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00') pread64(r1, &(0x7f00000000c0)=""/105, 0x69, 0x12c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0xba01, 0x0, 0x40854}, 0x810) syz_usb_connect$midi(0x5, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000203512148240000102030109023d00010118100409040000020103000609058e0b20000fd702052501012709058c273bf348a89c74fa882b0e2dea0200026df7801425011068d414f95a2cac8a3ccde8fe612b90c559fd17f5bf989cf9ce5470446ab23b7658cceb84f246711309fc7cdf17fa6b7a1bb377a6e4"], 0x0) 1.026774596s ago: executing program 2 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x121181, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0xfff0, 0x7, 0x1, 0xfffffffa, 0x2}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) syz_usb_connect$midi(0x2, 0x3a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0x0, 0x1a0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x5, 0x1, [{0xe, 0x8}], 0x5}], [{{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3, 0x7, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) 267.424654ms ago: executing program 2 (id=1218): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='binfmt_misc\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000880)=ANY=[], 0x81, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="147622158bd56319cebd70000000000002030000"], 0x14}}, 0x0) 207.390535ms ago: executing program 2 (id=1219): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c5602117002007900000000cc3e000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r3, 0x0) truncate(0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) pwrite64(r4, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x3fd, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xda0, 0x0, 0x8}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES8=r5, @ANYRESOCT=r9, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)='@', 0x1}], 0x1}}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 205.170955ms ago: executing program 2 (id=1220): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) fstatfs(r0, &(0x7f0000000240)=""/172) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "789dabefd431bafc31089003e9d1bf732664d0918e6672d4f87f1c42eccdaa9019dd3a4b0ac9195533d8b4aebeb86f2f5205ce160c69f580ef9507b47f3bda44", 0x17}, 0x48, 0xfffffffffffffffa) 205.029455ms ago: executing program 3 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000040001c0012800b00010062726964676500000c0002800500160005"], 0x3c}, 0x1, 0xffffff0f, 0x0, 0x400c000}, 0x44) 141.543347ms ago: executing program 8 (id=1222): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000050000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x600, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 121.495057ms ago: executing program 8 (id=1223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000001480)={0x40, 0x7, 0x2, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x80000005, 0x4) (async) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x0, 0x0, 0x6, "691c0e6064f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000440)={0x0, 0x1, 0x40, {0x40, 0x9, "f9b1a08609aa16a2d2e347bb3fe93ff7ed15ac2b85b70a92d33013047b88da0bac1ba530335770388a9a3aa32799ce3316f2ff84be1ea57153e5e903a796"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0xf, 0xc0, "341d5a56151406daedc27c669f6f3f71134f6105365bf9730b5013ab27c175c3a66de77432158508c3ebf8c781191ee5624ecdb5cfda40f9c4fb01324358a6020948f43aade842c062fe95994f0656184c439cfd40f99a9e9767a8082c87a9cce9add89264f78077c8bbee1e8f4bed87e65b5146579c5c75a37da3c54e244ea1dcee76ec8c25e529dbcb447cc35ebac4bb9ff85b8d11121017058d69fc1caef86dcc58a280ac51dbfdb6f206b4bd13b08d31e89af2a79297155f9cd31450bf5c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000040)={0x20, 0x80, 0x1c, {0x1, 0x3ff, 0x6, 0x3, 0x40, 0xe166, 0x0, 0x7, 0x1, 0xac, 0xd13, 0x5}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x752c}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) (async, rerun: 32) ioctl$KDSETKEYCODE(r2, 0x4b52, &(0x7f0000000000)={0xffffffff, 0x6}) 102.217558ms ago: executing program 2 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) getrandom(&(0x7f00000023c0)=""/266, 0x10a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x22401) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x4, 0x0, 0x7, 0xead63c, 0x1, "d6a3896c40244c3cac27ac3781e28c0eb473fd"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401014e2d7db4240439720d0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6e8b, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000085}, 0x80) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030302c757365725f69643ddb08f4950e31016275b2afe948e00082768acaa3f819f8c77275dd8cef6646705b61b4dc11628c4cb80c67700b8031d94087d4f71ea3f49b4da833a82d1986d2c2a3f740ed01479fbc3d8d7751ebf435b1aaeffdc020eb05d0fd42d634f315f7963a364ae8e24de34ff2e271f5bbd39b2356f799528fea451075909b7502a9104ae46723768e909be67c1ccc53b557f9e4db42955d0189f14be4750afa1d65b6c853231096440b3293f4e318c459e6adb4c2eba3b040ae8c86fa3202fb8438", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="abf1c014f31ff8b2984b118e1aa66fc0ad52eec909ddc25d3694c5840127a86a01cb131d59ca0aa937dd15e26803836086e3f3e9b966ec45ecb54afb9f3d659a83398b246f2cb4fb0730f8a2e12113935a2c2d3d24fb42fd9c34c90fb6c4ceebbb54f6e7f53c829ba8deefe77364153e87f9a6171c"]) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000004800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x3, 0xe0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1c}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x3, 0x1, "67b4"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1f9, 0x6, 0x2, 0x9e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xcf, 0x20, {0x7, 0x25, 0x1, 0x8, 0x3e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe5, 0x7, 0x2, {0x7, 0x25, 0x1, 0xc, 0x6, 0xff}}}}}}}}]}}, 0x0) syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) close(r6) 100.092668ms ago: executing program 4 (id=1225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000c5000000070000009500000000060000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) 51.339569ms ago: executing program 3 (id=1226): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x402, 0x80) read$FUSE(r0, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000002c0)={'filter\x00', 0x0, [0xc56, 0x8, 0x1, 0x8001, 0xbb]}, &(0x7f0000000340)=0x54) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) (async) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) dup3(r1, r0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@grpquota}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==") (async) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) (async) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="403e760000007ac307e289bd12339ec854ec443f25115f268eff351842973cfb39dacb8c2ba4fec2e595658ee4ebfb1f3c7b6f5fabf3e3f3b8445e5c3b74ae469a370c7e8c1a405d0fdb1493ea4c9dcab166bfa5f73af9c21ff21b2da7e38f9831fa23f6c1ef9728ac378cb16d133ea75f806300"], 0x0, 0x0, 0x0, 0x0, 0x0}) 50.337139ms ago: executing program 8 (id=1227): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', 0x0}) syz_usb_connect(0x3, 0x276, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x11, 0x5e, 0x6b, 0x20, 0x5c6, 0x9003, 0xf1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x264, 0x1, 0x4, 0x80, 0x0, 0x0, "", [{{0x9, 0x4, 0xdb, 0x4, 0x7, 0xb2, 0x27, 0xf5, 0x1, [], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x7, 0xfd, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x5, 0x78, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3f}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xc1, 0xbc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xd}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x3, 0x44, 0x5, [@generic={0x2d, 0x0, "a9163878e3d3caf9241184d46ac317cfe28c24efa7331896b82ca4156a334bb8d672f21df99723f61fe3a7"}]}}, {{0x9, 0x5, 0x86, 0x8, 0x40, 0x2, 0x9, 0x10, [@generic={0x9d, 0x21, "711939c41a28ff1965cb4fbc2d3fe49a24b632c714c7e2586c863aaf2150e3a90203044a5037f74774c063d8e7b30d1703eb7d1cc0931ad88e329c8e61956e6dbd6389ab11ea685c56b2923c983ec87d495646342549788a63ab7a391a17106f00ccaf737c7f95b91e8cd96ae5e3f64cd3ab61b55fd3577080e914ba5f0fec408cca7d89e557430565c1bb4ddae533f7e38de8556340efea4062f4"}, @generic={0xc7, 0x21, "979334572fd14f8630c206d41f212dbc168ca2f0d0836abd73981ae6f6b934390b1cffe1824fb0ff88127aa9ebaad1b6b37c1a9c46e654d986c1298d1122b1a73f354a14074d6dceecc716cf1e266c25bfc397896e484efb44beb6e7a14efb43064241c82792d0f1cbc83f620592d5071137c6a5944035d7e1879d7e7cb46ca01077a8bb6870fe12e6c94f5b213c53376636912a4cfc8c65a39732764c0b8fcdeaf9d1153cc4f409088eb2abd55ecd4207ad8c39c0b0115e042d48f9e065f9f08080affbd2"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x0, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x81, 0x4, 0xd7, [@generic={0x5f, 0xd, "823484110766732280fa49147c12a9498120de92c63090d0b9f0e0a2f767838fa7176ecba9626044a982a8acd6ab3a867581c4eb046e489d089f74cb71e163557c1b4ad774626164046b3940befdd3b971185e8774289281e1c55f7f17"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x95}]}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x2d, &(0x7f0000000280)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0xab, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "58af80b9fd463b4a0c2669d4b70b509d"}]}}) getpid() 32.279079ms ago: executing program 4 (id=1228): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000001000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 0s ago: executing program 40 (id=1228): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000001000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) kernel console output (not intermixed with test programs): 83609087.284:358): avc: denied { create } for pid=2233 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.359881][ T1680] usb 6-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 88.370321][ T1680] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 88.382402][ T1680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.449549][ T1680] usb 6-1: config 0 descriptor?? [ 88.472354][ T2236] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.479965][ T2236] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.487543][ T2236] device bridge_slave_0 entered promiscuous mode [ 88.494801][ T2236] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.495011][ T1680] usb 6-1: bad CDC descriptors [ 88.502566][ T2236] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.507360][ T1680] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 88.515064][ T2236] device bridge_slave_1 entered promiscuous mode [ 88.522425][ T1680] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 88.535389][ T1680] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 88.723193][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 89.396460][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 90.089696][ T1680] usb 6-1: USB disconnect, device number 11 [ 91.401390][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.429557][ T2270] netlink: 68 bytes leftover after parsing attributes in process `syz.6.577'. [ 91.453818][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.473950][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.482502][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.491777][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.498810][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.509405][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.533091][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.544506][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.553386][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.560456][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.588545][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.599277][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.607238][ T2282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.627920][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.640996][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.649344][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.664563][ T2282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 91.678798][ T2236] device veth0_vlan entered promiscuous mode [ 91.689245][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.697711][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.711828][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.722727][ T2281] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 91.734646][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.739344][ T2281] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 91.751721][ T2281] F2FS-fs (loop5): invalid crc value [ 91.751866][ T2236] device veth1_macvtap entered promiscuous mode [ 91.768548][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.768682][ T2249] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.777478][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.793221][ T2281] F2FS-fs (loop5): Found nat_bits in checkpoint [ 91.822577][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.833772][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.836449][ T2281] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 91.903938][ T2281] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 91.944410][ T24] audit: type=1400 audit(1783609090.681:359): avc: denied { setattr } for pid=2280 comm="syz.5.582" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.036039][ T2249] usb 7-1: Using ep0 maxpacket: 8 [ 92.174869][ T2249] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.213922][ T24] audit: type=1400 audit(1783609090.934:360): avc: denied { create } for pid=2299 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.241114][ T2281] attempt to access beyond end of device [ 92.241114][ T2281] loop5: rw=2049, want=45104, limit=40427 [ 92.276166][ T2303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 92.285469][ T24] audit: type=1326 audit(1783609090.990:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.2.585" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f99b70e59 code=0x7ffc0000 [ 92.311711][ T24] audit: type=1326 audit(1783609090.990:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.2.585" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f99b70e59 code=0x7ffc0000 [ 92.345003][ T24] audit: type=1326 audit(1783609090.990:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.2.585" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f99b70e59 code=0x7ffc0000 [ 92.371921][ T24] audit: type=1326 audit(1783609090.990:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.2.585" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f99b70e59 code=0x7ffc0000 [ 92.397442][ T24] audit: type=1326 audit(1783609090.990:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.2.585" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f99b70e59 code=0x7ffc0000 [ 92.422989][ T2249] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 92.439941][ T2249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.445668][ T2307] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 92.448509][ T2249] usb 7-1: Product: syz [ 92.455772][ T2307] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 92.476085][ T2307] netlink: 68 bytes leftover after parsing attributes in process `syz.7.586'. [ 92.488067][ T2249] usb 7-1: Manufacturer: syz [ 92.492699][ T2249] usb 7-1: SerialNumber: syz [ 92.500233][ T2313] overlayfs: failed to clone lowerpath [ 92.509283][ T2249] usb 7-1: config 0 descriptor?? [ 92.549203][ T2249] usb 7-1: bad CDC descriptors [ 92.555057][ T2249] usb 7-1: unsupported MDLM descriptors [ 92.948363][ T2270] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.997054][ T2322] EXT4-fs (loop5): Invalid want_extra_isize 186 [ 93.072389][ T2249] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 93.139925][ T2270] netlink: 24 bytes leftover after parsing attributes in process `syz.6.577'. [ 93.153444][ T1680] usb 7-1: USB disconnect, device number 7 [ 93.291967][ T2326] EXT4-fs (loop5): Ignoring removed bh option [ 93.310314][ T2326] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 93.321250][ T2326] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.339850][ T2249] usb 8-1: Using ep0 maxpacket: 16 [ 93.500886][ T2249] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 93.521184][ T2249] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.542725][ T2249] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 93.551910][ T2249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.590196][ T2249] usb 8-1: config 0 descriptor?? [ 93.708732][ T2349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.802490][ T2354] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 93.901783][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 93.901795][ T24] audit: type=1400 audit(1783609092.506:419): avc: denied { mounton } for pid=2353 comm="syz.0.602" path=2F3132382FE91F7189591E9233614B2F66696C6530 dev="loop0" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.959459][ T24] audit: type=1400 audit(1783609092.553:420): avc: denied { setattr } for pid=2353 comm="syz.0.602" name="file0" dev="loop0" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.185533][ T2249] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x7 [ 94.193347][ T2249] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 94.210459][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 94.212424][ T2249] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x1 [ 94.219249][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.234631][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 94.238420][ T2249] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0xd [ 94.242921][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.259184][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.270284][ T2249] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.77 Device [HID 1fd2:6007] on usb-dummy_hcd.7-1/input0 [ 94.274850][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.298453][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.311999][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.346942][ T2368] FAT-fs (loop0): bogus logical sector size 0 [ 94.360696][ T2368] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 94.370960][ T2368] FAT-fs (loop0): Can't find a valid FAT filesystem [ 94.421959][ T2249] usb 8-1: USB disconnect, device number 2 [ 94.559138][ T2377] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 94.572426][ T24] audit: type=1400 audit(1783609093.142:421): avc: denied { unlink } for pid=2376 comm="syz.5.607" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 94.793451][ T2382] EXT4-fs (loop0): Ignoring removed orlov option [ 94.817763][ T2382] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 95.092710][ T1680] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 95.322657][ T2396] netlink: 104 bytes leftover after parsing attributes in process `syz.5.613'. [ 95.359419][ T1680] usb 7-1: Using ep0 maxpacket: 32 [ 95.407779][ T2391] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 95.414233][ T2391] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 95.422971][ T2391] F2FS-fs (loop7): invalid crc_offset: 1 [ 95.429926][ T2391] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 95.434540][ T2396] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.454375][ T2396] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.474729][ T2391] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 95.482100][ T344] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.482118][ T2391] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 95.540911][ T1680] usb 7-1: unable to get BOS descriptor or descriptor too short [ 95.559102][ T24] audit: type=1400 audit(1783609094.059:422): avc: denied { quotaon } for pid=2390 comm="syz.7.611" name="file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 95.581367][ T2250] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 95.595370][ T2236] attempt to access beyond end of device [ 95.595370][ T2236] loop7: rw=2049, want=45104, limit=40427 [ 95.637607][ T1680] usb 7-1: config 11 has an invalid interface number: 184 but max is 0 [ 95.645980][ T1680] usb 7-1: config 11 has no interface number 0 [ 95.669281][ T1680] usb 7-1: config 11 interface 184 has no altsetting 0 [ 95.710627][ T24] audit: type=1400 audit(1783609094.200:423): avc: denied { ioctl } for pid=2405 comm="syz.2.615" path="socket:[22397]" dev="sockfs" ino=22397 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.807689][ T2404] F2FS-fs (loop5): Mismatch start address, segment0(131584) cp_blkaddr(512) [ 95.827068][ T2404] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 95.850992][ T2404] F2FS-fs (loop5): invalid crc value [ 95.862301][ T2404] F2FS-fs (loop5): Found nat_bits in checkpoint [ 95.871913][ T1680] usb 7-1: New USB device found, idVendor=15a4, idProduct=1003, bcdDevice=6c.66 [ 95.893710][ T1680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.894680][ T2404] F2FS-fs (loop5): Start checkpoint disabled! [ 95.901824][ T1680] usb 7-1: Product: syz [ 95.901839][ T1680] usb 7-1: Manufacturer: syz [ 95.916973][ T1680] usb 7-1: SerialNumber: syz [ 95.917102][ T2404] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 95.928828][ T2404] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 96.128704][ T555] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 96.201352][ T2420] xt_hashlimit: size too large, truncated to 1048576 [ 96.208336][ T2250] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.219236][ T2250] usb 1-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 96.232166][ T2250] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.239424][ T2250] usb 1-1: New USB device found, idVendor=05e6, idProduct=0116, bcdDevice= 0.10 [ 96.248609][ T2250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.268288][ T2250] usb 1-1: config 0 descriptor?? [ 96.282298][ T1680] usb 7-1: USB disconnect, device number 8 [ 96.395729][ T555] usb 8-1: Using ep0 maxpacket: 16 [ 96.433955][ T2424] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.620: iget: bad i_size value: 38620345925642 [ 96.447190][ T2424] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.620: couldn't read orphan inode 15 (err -117) [ 96.459464][ T2424] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 96.473524][ T2424] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 96.482477][ T2424] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.620: bg 0: block 5: invalid block bitmap [ 96.496944][ T24] audit: type=1400 audit(1783609094.939:424): avc: denied { write } for pid=2423 comm="syz.5.620" name="bus" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.498078][ T2424] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 96.519332][ T24] audit: type=1400 audit(1783609094.939:425): avc: denied { add_name } for pid=2423 comm="syz.5.620" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.550208][ T24] audit: type=1400 audit(1783609094.939:426): avc: denied { remove_name } for pid=2423 comm="syz.5.620" name="#1" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.572515][ T24] audit: type=1400 audit(1783609094.939:427): avc: denied { rename } for pid=2423 comm="syz.5.620" name="#1" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.594688][ T24] audit: type=1400 audit(1783609094.939:428): avc: denied { unlink } for pid=2423 comm="syz.5.620" name="#1" dev="loop5" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.648733][ T344] tipc: Left network mode [ 96.695285][ T2433] fuse: Bad value for 'fd' [ 96.705746][ T555] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 96.714899][ T555] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.723227][ T555] usb 8-1: Product: syz [ 96.727498][ T555] usb 8-1: Manufacturer: syz [ 96.732113][ T555] usb 8-1: SerialNumber: syz [ 96.810939][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.818400][ T2443] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.826102][ T2443] device bridge_slave_0 entered promiscuous mode [ 96.839399][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.846569][ T2443] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.853835][ T2443] device bridge_slave_1 entered promiscuous mode [ 96.860229][ T2250] usb 1-1: string descriptor 0 read error: -71 [ 96.866904][ T2250] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 96.875090][ T2250] usb 1-1: USB disconnect, device number 15 [ 96.902867][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.909924][ T2443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.917548][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.924705][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.946813][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.954924][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.962815][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.973539][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.981948][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.989051][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.005922][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.014829][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.021973][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.030005][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.038519][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.061453][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.070451][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.078704][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.087071][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.096124][ T2443] device veth0_vlan entered promiscuous mode [ 97.110623][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.111713][ T681] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 97.120625][ T2443] device veth1_macvtap entered promiscuous mode [ 97.136292][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.147763][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.193463][ T2414] F2FS-fs (loop7): invalid crc value [ 97.209382][ T2414] F2FS-fs (loop7): Found nat_bits in checkpoint [ 97.254486][ T2414] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 97.262070][ T2414] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 97.276225][ T344] device bridge_slave_1 left promiscuous mode [ 97.285845][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.293917][ T344] device bridge_slave_0 left promiscuous mode [ 97.300059][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.317225][ T344] device veth1_macvtap left promiscuous mode [ 97.323589][ T344] device veth0_vlan left promiscuous mode [ 97.342445][ T2414] 9pnet: Insufficient options for proto=fd [ 97.389556][ T681] usb 7-1: Using ep0 maxpacket: 16 [ 97.422327][ T2468] exfat: Deprecated parameter 'utf8' [ 97.427687][ T2468] exfat: Bad value for 'time_offset' [ 97.437132][ T2414] device bridge1 entered promiscuous mode [ 97.518151][ T681] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.529865][ T681] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 97.763645][ T681] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.773186][ T681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.781420][ T681] usb 7-1: Product: syz [ 97.785667][ T681] usb 7-1: Manufacturer: syz [ 97.790264][ T681] usb 7-1: SerialNumber: syz [ 97.891875][ T555] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 97.899641][ T555] usb 8-1: USB disconnect, device number 3 [ 98.052887][ T2441] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.398725][ T2236] attempt to access beyond end of device [ 98.398725][ T2236] loop7: rw=2049, want=45104, limit=40427 [ 98.436942][ T2532] udc-core: couldn't find an available UDC or it's busy [ 98.444191][ T2532] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.704090][ T299] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 99.003237][ T681] cdc_ncm 7-1:1.0: bind() failure [ 99.012463][ T681] cdc_ncm 7-1:1.1: bind() failure [ 99.027055][ T681] usb 7-1: USB disconnect, device number 9 [ 99.057449][ T2545] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 99.064832][ T2545] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 99.073991][ T2545] F2FS-fs (loop8): invalid crc value [ 99.084694][ T2545] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 99.099327][ T299] usb 1-1: config 192 has an invalid interface number: 180 but max is 0 [ 99.107931][ T299] usb 1-1: config 192 contains an unexpected descriptor of type 0x2, skipping [ 99.120689][ T2545] F2FS-fs (loop8): Start checkpoint disabled! [ 99.125363][ T299] usb 1-1: config 192 has no interface number 0 [ 99.127504][ T2545] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 99.133378][ T299] usb 1-1: config 192 interface 180 has no altsetting 0 [ 99.147680][ T2545] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 99.177558][ T2545] attempt to access beyond end of device [ 99.177558][ T2545] loop8: rw=2049, want=45104, limit=40427 [ 99.270287][ T5] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 99.302512][ T299] usb 1-1: New USB device found, idVendor=1d0e, idProduct=9584, bcdDevice=61.ef [ 99.311625][ T299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.319971][ T299] usb 1-1: Product: syz [ 99.324265][ T299] usb 1-1: Manufacturer: syz [ 99.328905][ T299] usb 1-1: SerialNumber: syz [ 99.484022][ T2250] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 99.569716][ T5] usb 8-1: device descriptor read/64, error -71 [ 99.575572][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 99.575583][ T24] audit: type=1400 audit(1783609097.821:437): avc: denied { setopt } for pid=2556 comm="syz.6.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.665981][ T299] usb-storage 1-1:192.180: USB Mass Storage device detected [ 99.684939][ T2570] netlink: 28 bytes leftover after parsing attributes in process `syz.6.659'. [ 99.696986][ T24] audit: type=1400 audit(1783609097.934:438): avc: denied { unlink } for pid=2569 comm="syz.6.659" name="#3" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.740464][ T2250] usb 9-1: Using ep0 maxpacket: 16 [ 99.755609][ T299] usb 1-1: USB disconnect, device number 16 [ 99.778773][ T24] audit: type=1400 audit(1783609098.008:439): avc: denied { read write } for pid=2583 comm="syz.6.662" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.812605][ T24] audit: type=1400 audit(1783609098.027:440): avc: denied { open } for pid=2583 comm="syz.6.662" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.838850][ T24] audit: type=1400 audit(1783609098.027:441): avc: denied { ioctl } for pid=2583 comm="syz.6.662" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.868880][ T2250] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 99.880321][ T2250] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 99.886057][ T2588] device batadv_slave_0 entered promiscuous mode [ 99.891525][ T2250] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 99.901274][ T2588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 99.911261][ T2250] usb 9-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 99.929271][ T2250] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.940359][ T2250] usb 9-1: config 0 descriptor?? [ 100.050359][ T5] usb 8-1: device descriptor read/64, error -71 [ 100.146610][ T20] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 100.339102][ T5] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 100.573985][ T20] usb 7-1: unable to get BOS descriptor or descriptor too short [ 100.604073][ T2545] attempt to access beyond end of device [ 100.604073][ T2545] loop8: rw=0, want=45104, limit=40427 [ 100.648774][ T5] usb 8-1: device descriptor read/64, error -71 [ 100.659653][ T20] usb 7-1: config 0 has no interfaces? [ 100.830563][ T20] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.841222][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.849606][ T20] usb 7-1: Product: syz [ 100.862856][ T20] usb 7-1: Manufacturer: ë§åŸè¶€ê¸µäª‡ç¶¡ìŸ¼é•¶ì‘—êŸî²³é‡—倿酦◇ïµè³¼è€«ã±¿é—¶ç“Œä¹Šã¸ƒé¼®í†™â—¬ê‚°é¸ê‡˜ë»’◡⑛滴ؖ鸡 [ 100.885113][ T20] usb 7-1: SerialNumber: syz [ 100.903910][ T20] usb 7-1: config 0 descriptor?? [ 101.055718][ T2614] F2FS-fs (loop0): Test dummy encryption mode enabled [ 101.066115][ T2614] F2FS-fs (loop0): invalid crc value [ 101.076289][ T5] usb 8-1: device descriptor read/64, error -71 [ 101.096324][ T2614] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.146258][ T2614] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.170892][ T2614] syz.0.673 (pid 2614) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 101.174927][ T20] usb 7-1: USB disconnect, device number 10 [ 101.204600][ T5] usb usb8-port1: attempt power cycle [ 101.213057][ T24] audit: type=1400 audit(1783609099.347:442): avc: denied { create } for pid=2613 comm="syz.0.673" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.664511][ T2630] EXT4-fs (loop0): invalid first ino: 0 [ 101.674413][ T2630] netlink: 'syz.0.677': attribute type 11 has an invalid length. [ 101.685308][ T5] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 101.888397][ T5] usb 8-1: device descriptor read/8, error -71 [ 101.903689][ T2637] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 101.931532][ T2637] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.947042][ T2637] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #3: comm syz.0.679: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 101.976300][ T344] attempt to access beyond end of device [ 101.976300][ T344] loop8: rw=2049, want=45112, limit=40427 [ 101.987908][ T2637] EXT4-fs error (device loop0): ext4_quota_enable:6454: comm syz.0.679: Bad quota inode: 3, type: 0 [ 102.013254][ T2637] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.028225][ T2250] usbhid 9-1:0.0: can't add hid device: -71 [ 102.034278][ T2250] usbhid: probe of 9-1:0.0 failed with error -71 [ 102.048743][ T2637] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 102.073439][ T2637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 102.082821][ T2250] usb 9-1: USB disconnect, device number 2 [ 102.114710][ T2641] IPv6: sit1: Disabled Multicast RS [ 102.190059][ T24] audit: type=1400 audit(1783609100.273:443): avc: denied { lock } for pid=2646 comm="syz.8.683" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.221157][ T5] usb 8-1: device descriptor read/8, error -71 [ 102.390626][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.486793][ T24] audit: type=1400 audit(1783609100.535:444): avc: denied { bind } for pid=2661 comm="syz.7.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.507443][ T2662] netlink: 132 bytes leftover after parsing attributes in process `syz.7.689'. [ 102.651250][ T2668] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 102.685118][ T2668] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 102.692618][ T2668] EXT4-fs (loop7): Test dummy encryption mode enabled [ 102.708468][ T2668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 102.732962][ T2668] System zones: 0-5 [ 102.753239][ T2668] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,mblk_io_submit,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue [ 106.494300][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 106.502028][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 106.724641][ T2684] netlink: 'syz.8.695': attribute type 8 has an invalid length. [ 106.760075][ T2687] overlayfs: failed to clone upperpath [ 106.793085][ T2684] sch_fq: defrate 0 ignored. [ 106.818284][ T2688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.695'. [ 106.839692][ T2684] netlink: 'syz.8.695': attribute type 4 has an invalid length. [ 106.897919][ T2688] netlink: 56 bytes leftover after parsing attributes in process `syz.8.695'. [ 106.919267][ T2688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.695'. [ 106.929546][ T2688] netlink: 19 bytes leftover after parsing attributes in process `syz.8.695'. [ 106.939577][ T2688] netlink: 'syz.8.695': attribute type 2 has an invalid length. [ 106.948433][ T2688] netlink: 'syz.8.695': attribute type 3 has an invalid length. [ 106.956868][ T2688] netlink: 19 bytes leftover after parsing attributes in process `syz.8.695'. [ 107.285102][ T2707] loop8: p2 < > p3 < p5 > p4 [ 107.289927][ T2707] loop8: partition table partially beyond EOD, truncated [ 107.320177][ T2707] loop8: p2 start 4278190080 is beyond EOD, truncated [ 107.491746][ T2707] loop8: p4 size 8192 extends beyond EOD, truncated [ 107.546771][ T2707] loop8: p5 size 8192 extends beyond EOD, truncated [ 107.922902][ T304] udevd[304]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 107.979987][ T326] udevd[326]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 107.992104][ T339] udevd[339]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 108.093463][ T24] audit: type=1400 audit(103.891:445): avc: denied { map } for pid=2716 comm="syz.8.705" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.143513][ T2727] overlayfs: failed to clone upperpath [ 108.172984][ T24] audit: type=1400 audit(103.975:446): avc: denied { mount } for pid=2726 comm="syz.0.709" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 108.220571][ T24] audit: type=1326 audit(104.012:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2723 comm="syz.7.706" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3cf583e59 code=0x0 [ 108.257482][ T24] audit: type=1400 audit(104.050:448): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 108.393435][ T24] audit: type=1400 audit(104.172:449): avc: denied { accept } for pid=2747 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.414519][ T2750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2750 comm=syz.8.716 [ 108.455647][ T2750] EXT4-fs (loop8): Test dummy encryption mode enabled [ 108.455693][ T2750] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 108.455731][ T2750] EXT4-fs (loop8): Unrecognized mount option "smackfshat=" or missing value [ 108.551643][ T2761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=2761 comm=syz.6.721 [ 108.576706][ T24] audit: type=1400 audit(104.340:450): avc: denied { create } for pid=2755 comm="syz.8.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.813908][ T399] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.822094][ T399] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.845013][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 108.941604][ T2762] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 108.951333][ T2762] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 108.960894][ T2762] F2FS-fs (loop6): invalid crc value [ 108.967819][ T2762] F2FS-fs (loop6): Found nat_bits in checkpoint [ 108.996783][ T2762] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 109.003927][ T2762] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 109.012237][ T2760] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.025229][ T2761] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.039502][ T2760] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.041259][ T2771] fuse: Bad value for 'fd' [ 109.050664][ T2761] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.060666][ T24] audit: type=1400 audit(104.799:451): avc: denied { execute } for pid=2770 comm="syz.7.722" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 109.065951][ T2760] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.102109][ T2760] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.113492][ T2773] xt_hashlimit: size too large, truncated to 1048576 [ 109.122041][ T2761] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.133700][ T2762] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.146534][ T2760] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.160490][ T2760] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 109.518217][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.529878][ T2788] IPv6: sit2: Disabled Multicast RS [ 109.657138][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.004456][ T24] audit: type=1400 audit(106.623:452): avc: denied { read write } for pid=2805 comm="syz.7.736" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.056985][ T24] audit: type=1400 audit(106.623:453): avc: denied { open } for pid=2805 comm="syz.7.736" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.137830][ T2811] EXT4-fs (loop8): Ignoring removed orlov option [ 111.144803][ T2811] EXT4-fs (loop8): Ignoring removed oldalloc option [ 111.151595][ T2811] EXT4-fs (loop8): Ignoring removed orlov option [ 111.185743][ T2811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 111.193908][ T2811] System zones: 0-1, 3-12 [ 111.198906][ T2811] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,debug,max_dir_size_kb=0x0000000000000003,orlov,oldalloc,orlov,nogrpid,resuid=0x0000000000000000,grpjquota=,,errors=continue [ 111.238701][ T24] audit: type=1400 audit(106.829:454): avc: denied { nlmsg_write } for pid=2814 comm="syz.7.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 111.674187][ T2833] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 112.948565][ T2250] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 113.333199][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.440036][ T2250] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 113.513304][ T2250] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 113.522368][ T2862] IPv6: sit1: Disabled Multicast RS [ 113.543844][ T2250] usb 8-1: config 0 has no interface number 0 [ 113.570957][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 113.570970][ T24] audit: type=1326 audit(109.019:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 113.611666][ T2864] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.632425][ T2249] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 113.640395][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 113.658283][ T24] audit: type=1326 audit(109.019:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 113.675269][ T2864] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.700548][ T24] audit: type=1326 audit(109.056:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc55607c2ac code=0x7ffc0000 [ 113.738424][ T2865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 113.760599][ T2250] usb 8-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 113.769053][ T24] audit: type=1326 audit(109.056:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc55607c30e code=0x7ffc0000 [ 113.771353][ T2865] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.816397][ T2250] usb 8-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 113.831240][ T24] audit: type=1326 audit(109.056:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 113.835483][ T2250] usb 8-1: Product: syz [ 113.870115][ T2869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 113.899584][ T2249] usb 9-1: Using ep0 maxpacket: 16 [ 113.899797][ T2250] usb 8-1: Manufacturer: syz [ 113.910253][ T24] audit: type=1326 audit(109.056:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 113.920257][ T2250] usb 8-1: SerialNumber: syz [ 113.960500][ T2250] usb 8-1: config 0 descriptor?? [ 113.980768][ T2873] xt_hashlimit: size too large, truncated to 1048576 [ 113.992248][ T24] audit: type=1326 audit(109.056:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 114.006855][ T2250] uvcvideo: Found UVC 0.00 device syz (046c:14e8) [ 114.036623][ T2875] EXT4-fs (loop0): #blocks per group too big: 65535 [ 114.049130][ T2249] usb 9-1: config index 0 descriptor too short (expected 19, got 10) [ 114.059689][ T2249] usb 9-1: config 0 descriptor has 1 excess byte, ignoring [ 114.067046][ T2249] usb 9-1: config 0 has no interfaces? [ 114.073732][ T24] audit: type=1326 audit(109.056:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 114.099542][ T24] audit: type=1326 audit(109.056:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 114.100567][ T2250] uvcvideo 8-1:0.105: Entity type for entity Output 1 was not initialized! [ 114.123985][ T24] audit: type=1326 audit(109.056:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.0.749" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc5560bfe59 code=0x7ffc0000 [ 114.221093][ T2250] uvcvideo: Failed to create links for entity 1 [ 114.227368][ T2250] uvcvideo: Failed to register entities (-22). [ 114.305616][ T2249] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 114.321238][ T2249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.347876][ T2885] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #15: comm syz.0.756: corrupted in-inode xattr [ 114.348015][ T2249] usb 9-1: Product: syz [ 114.364311][ T2249] usb 9-1: Manufacturer: syz [ 114.368951][ T2249] usb 9-1: SerialNumber: syz [ 114.374523][ T2249] usb 9-1: config 0 descriptor?? [ 114.468114][ T2885] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.756: couldn't read orphan inode 15 (err -117) [ 114.497313][ T2885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 114.637309][ T670] usb 9-1: USB disconnect, device number 3 [ 114.874363][ T2891] EXT4-fs (loop6): Test dummy encryption mode enabled [ 114.912857][ T2891] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 114.951874][ T2891] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 114.951874][ T2891] [ 115.053862][ T2891] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue [ 115.163286][ T2891] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 115.193539][ T2891] EXT4-fs error (device loop6): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 115.274492][ T2900] EXT4-fs error (device loop0): empty_inline_dir:1876: inode #12: block 7: comm syz.0.756: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 115.317086][ T2900] EXT4-fs warning (device loop0): empty_inline_dir:1883: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 115.706060][ T2888] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.756: bg 0: block 5: invalid block bitmap [ 115.810155][ T301] usb 8-1: USB disconnect, device number 8 [ 115.858230][ T2905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2905 comm=syz.6.761 [ 116.158286][ T2906] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 116.200015][ T2906] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 116.229416][ T2914] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 116.240681][ T2906] F2FS-fs (loop6): Unrecognized mount option "" or missing value [ 116.395700][ T2921] netlink: 24 bytes leftover after parsing attributes in process `syz.7.763'. [ 116.421949][ T2920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.444206][ T2920] EXT4-fs (loop0): 1 truncate cleaned up [ 116.456523][ T2920] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,noquota,user_xattr,noload,noquota,,errors=continue [ 116.531716][ T2920] EXT4-fs (loop0): dax option not supported [ 116.815274][ T2930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 117.046119][ T2930] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 117.229578][ T2930] attempt to access beyond end of device [ 117.229578][ T2930] loop0: rw=2051, want=1041, limit=128 [ 117.564784][ T20] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 117.682383][ T301] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 117.709568][ T2977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=2977 comm=syz.2.780 [ 117.842703][ T20] usb 8-1: Using ep0 maxpacket: 8 [ 117.949478][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 117.970929][ T20] usb 8-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.984424][ T20] usb 8-1: config 0 interface 0 has no altsetting 0 [ 117.991016][ T20] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 118.000163][ T20] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.008955][ T20] usb 8-1: config 0 descriptor?? [ 118.120931][ T670] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 118.152589][ T301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.238048][ T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.248268][ T301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.257259][ T301] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 118.329627][ T2996] netlink: 'syz.2.787': attribute type 27 has an invalid length. [ 118.398323][ T670] usb 9-1: Using ep0 maxpacket: 32 [ 118.441174][ T301] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 118.450722][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.458746][ T301] usb 1-1: Product: syz [ 118.462999][ T301] usb 1-1: Manufacturer: syz [ 118.467577][ T301] usb 1-1: SerialNumber: syz [ 118.737885][ T2956] tipc: Started in network mode [ 118.743534][ T2956] tipc: Own node identity 5e2bb7a28b0d, cluster identity 4711 [ 118.751608][ T2956] tipc: Enabled bearer , priority 0 [ 118.773085][ T2956] device syzkaller0 entered promiscuous mode [ 118.793764][ T670] usb 9-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 118.807327][ T670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.823027][ T670] usb 9-1: Product: â  [ 118.831836][ T670] usb 9-1: Manufacturer: â  [ 118.841927][ T670] usb 9-1: SerialNumber: à ‰ [ 119.041535][ T3010] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 119.050231][ T3010] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 119.058505][ T3010] F2FS-fs (loop6): fault_injection options not supported [ 119.065792][ T3010] F2FS-fs (loop6): fault_type options not supported [ 119.073008][ T3010] F2FS-fs (loop6): invalid crc value [ 119.079291][ T3010] F2FS-fs (loop6): Found nat_bits in checkpoint [ 119.101410][ T3010] F2FS-fs (loop6): recover fsync data on readonly fs [ 119.108426][ T3010] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 119.115994][ T3010] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 119.139604][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 119.139618][ T24] audit: type=1400 audit(114.231:517): avc: denied { unmount } for pid=1614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.244680][ T24] audit: type=1400 audit(114.334:518): avc: denied { wake_alarm } for pid=3014 comm="syz.6.791" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.333194][ T2956] tipc: Resetting bearer [ 119.344007][ T2956] tipc: Disabling bearer [ 119.387023][ T3021] 9pnet: p9_errstr2errno: server reported unknown error @cD†üB€|˜ ÿÿÿÿpan1 [ 119.403130][ T301] hub 1-1:1.0: bad descriptor, ignoring hub [ 119.409250][ T670] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 119.418459][ T301] hub: probe of 1-1:1.0 failed with error -5 [ 119.424946][ T670] usb 9-1: found format II with max.bitrate = 53356, frame size=6 [ 119.433935][ T670] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 119.456276][ T670] usb 9-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 119.464782][ T670] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 119.473761][ T3026] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 119.509462][ T670] usb 9-1: USB disconnect, device number 4 [ 119.723349][ T301] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 119.766164][ T301] usb 1-1: device reset changed ep0 maxpacket size! [ 119.773099][ T301] usb 1-1: USB disconnect, device number 17 [ 119.796145][ T24] audit: type=1400 audit(114.840:519): avc: denied { search } for pid=3028 comm="syz.6.795" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.817633][ T24] audit: type=1400 audit(114.840:520): avc: denied { read } for pid=3028 comm="syz.6.795" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.839307][ T24] audit: type=1400 audit(114.840:521): avc: denied { open } for pid=3028 comm="syz.6.795" path="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.860709][ T24] audit: type=1326 audit(114.840:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3028 comm="syz.6.795" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13d4811e59 code=0x0 [ 119.948396][ T3031] EXT4-fs (loop8): invalid first ino: 0 [ 120.161490][ T301] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 120.311141][ T670] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 120.417974][ T301] usb 1-1: Using ep0 maxpacket: 16 [ 120.546320][ T301] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 120.554584][ T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.565188][ T301] usb 1-1: config 1 has no interface number 0 [ 120.571402][ T670] usb 9-1: Using ep0 maxpacket: 32 [ 120.576781][ T301] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 120.578457][ T3044] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 120.587596][ T301] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.596484][ T20] usbhid 8-1:0.0: can't add hid device: -71 [ 120.609218][ T301] usb 1-1: config 1 interface 105 has no altsetting 0 [ 120.615214][ T20] usbhid: probe of 8-1:0.0 failed with error -71 [ 120.633949][ T20] usb 8-1: USB disconnect, device number 9 [ 120.635263][ T3044] xt_hashlimit: size too large, truncated to 1048576 [ 120.706602][ T670] usb 9-1: unable to get BOS descriptor or descriptor too short [ 120.770669][ T670] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 120.778477][ T670] usb 9-1: can't read configurations, error -71 [ 120.792151][ T301] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 120.801341][ T301] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 120.809734][ T301] usb 1-1: Product: syz [ 120.814053][ T301] usb 1-1: Manufacturer: syz [ 120.818651][ T301] usb 1-1: SerialNumber: syz [ 120.831074][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.845428][ T3026] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 121.102112][ T301] aqc111: probe of 1-1:1.105 failed with error -22 [ 121.240841][ T20] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 121.244276][ T3060] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 121.518630][ T20] usb 8-1: Using ep0 maxpacket: 32 [ 121.689787][ T20] usb 8-1: unable to get BOS descriptor or descriptor too short [ 121.719118][ T24] audit: type=1400 audit(116.646:523): avc: denied { create } for pid=3072 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 121.796634][ T20] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.816055][ T20] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.843803][ T20] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.021108][ T20] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 122.030711][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.039627][ T20] usb 8-1: Product: syz [ 122.044755][ T20] usb 8-1: Manufacturer: syz [ 122.049526][ T20] usb 8-1: SerialNumber: syz [ 122.382949][ T3088] tipc: Started in network mode [ 122.388210][ T3088] tipc: Own node identity a22bbca6a317, cluster identity 4711 [ 122.395940][ T3088] tipc: Enabled bearer , priority 0 [ 122.411611][ T3088] device syzkaller0 entered promiscuous mode [ 122.418947][ T3086] FAT-fs (loop8): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 122.441083][ T3090] overlayfs: failed to clone upperpath [ 122.475864][ T3097] overlayfs: unrecognized mount option "verity=off" or missing value [ 122.577998][ T3098] FAT-fs (loop8): Unrecognized mount option "184467440737095516150x000000000000ee00" or missing value [ 122.789011][ T670] usb 1-1: USB disconnect, device number 18 [ 122.907899][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 122.929517][ T3107] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 123.004369][ T670] Bluetooth: hci0: command 0x1003 tx timeout [ 123.010647][ T3054] Bluetooth: hci0: sending frame failed (-49) [ 123.030118][ T3057] tipc: Resetting bearer [ 123.042320][ T3057] tipc: Disabling bearer [ 123.055470][ T3111] F2FS-fs (loop0): invalid crc value [ 123.081026][ T3111] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.121865][ T20] hub 8-1:1.0: bad descriptor, ignoring hub [ 123.129687][ T20] hub: probe of 8-1:1.0 failed with error -5 [ 123.136128][ T3136] overlayfs: failed to clone upperpath [ 123.138879][ T3111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.164957][ T20] usb 8-1: USB disconnect, device number 10 [ 123.172674][ T3136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'. [ 123.196828][ T3119] attempt to access beyond end of device [ 123.196828][ T3119] loop0: rw=2049, want=45104, limit=40427 [ 123.306365][ T24] audit: type=1400 audit(118.134:524): avc: denied { setopt } for pid=3154 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.325946][ T24] audit: type=1400 audit(118.134:525): avc: denied { bind } for pid=3154 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.348002][ T24] audit: type=1400 audit(118.171:526): avc: denied { map } for pid=3110 comm="syz.0.824" path="/179/file0/memory.events.local" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.378450][ T3128] loop7: p1 p3 < p5 p6 > [ 123.457907][ T3170] tipc: Enabling of bearer rejected, failed to enable media [ 123.478535][ T304] udevd[304]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 123.479752][ T339] udevd[339]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 123.489311][ T326] udevd[326]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 123.538970][ T3173] EXT4-fs (loop8): test_dummy_encryption requires encrypt feature [ 123.773372][ T670] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 124.051215][ T670] usb 8-1: Using ep0 maxpacket: 32 [ 124.158247][ T301] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 124.222221][ T670] usb 8-1: unable to get BOS descriptor or descriptor too short [ 124.307707][ T670] usb 8-1: config index 0 descriptor too short (expected 1056, got 55) [ 124.316003][ T670] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 124.324926][ T670] usb 8-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 124.335198][ T670] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 124.414700][ T301] usb 1-1: Using ep0 maxpacket: 16 [ 124.649704][ T24] audit: type=1400 audit(119.229:527): avc: denied { map } for pid=3189 comm="syz.8.850" path="socket:[26729]" dev="sockfs" ino=26729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 124.672783][ T24] audit: type=1400 audit(119.229:528): avc: denied { accept } for pid=3189 comm="syz.8.850" path="socket:[26729]" dev="sockfs" ino=26729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 124.713867][ T670] usb 8-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=23.50 [ 124.723064][ T670] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.731074][ T670] usb 8-1: Product: syz [ 124.735304][ T670] usb 8-1: Manufacturer: syz [ 124.739924][ T670] usb 8-1: SerialNumber: syz [ 124.799268][ T301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.884775][ T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.894958][ T301] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 124.905794][ T301] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.987859][ T24] audit: type=1400 audit(119.706:529): avc: denied { ioctl } for pid=3193 comm="syz.2.851" path="socket:[26738]" dev="sockfs" ino=26738 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.994312][ T3172] FAULT_INJECTION: forcing a failure. [ 124.994312][ T3172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.026455][ T3172] CPU: 1 PID: 3172 Comm: syz.7.843 Not tainted syzkaller #0 [ 125.033836][ T3172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.043898][ T3172] Call Trace: [ 125.047192][ T3172] __dump_stack+0x21/0x24 [ 125.051498][ T3172] dump_stack_lvl+0x1a7/0x208 [ 125.056358][ T3172] ? show_regs_print_info+0x18/0x18 [ 125.061551][ T3172] dump_stack+0x15/0x1c [ 125.065707][ T3172] should_fail+0x3ab/0x500 [ 125.070120][ T3172] should_fail_usercopy+0x1a/0x20 [ 125.075116][ T3172] _copy_from_user+0x20/0xd0 [ 125.079682][ T3172] ipv6_setsockopt+0x3cb/0x36f0 [ 125.084507][ T3172] ? ipv6_update_options+0x390/0x390 [ 125.089871][ T3172] ? 0xffffffffa002a000 [ 125.094003][ T3172] ? is_bpf_text_address+0x177/0x190 [ 125.098531][ T301] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 125.099291][ T3172] ? __kernel_text_address+0xa0/0x100 [ 125.099308][ T3172] ? unwind_get_return_address+0x4d/0x90 [ 125.108484][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.113746][ T3172] ? stack_trace_save+0xf0/0xf0 [ 125.113755][ T3172] ? arch_stack_walk+0xee/0x140 [ 125.113763][ T3172] ? stack_trace_save+0xa6/0xf0 [ 125.113770][ T3172] ? stack_trace_snprint+0xe0/0xe0 [ 125.113781][ T3172] ? kasan_set_track+0x5b/0x70 [ 125.113787][ T3172] ? kasan_set_track+0x4a/0x70 [ 125.113804][ T3172] ? kasan_set_free_info+0x23/0x40 [ 125.119595][ T301] usb 1-1: Product: syz [ 125.127467][ T3172] ? ____kasan_slab_free+0x125/0x160 [ 125.127475][ T3172] ? __kasan_slab_free+0x11/0x20 [ 125.127482][ T3172] ? slab_free_freelist_hook+0xc5/0x190 [ 125.127490][ T3172] ? kmem_cache_free+0x100/0x2d0 [ 125.127498][ T3172] ? putname+0xfe/0x150 [ 125.127506][ T3172] ? do_sys_openat2+0x68e/0x750 [ 125.127522][ T3172] ? __x64_sys_openat+0x136/0x160 [ 125.132496][ T301] usb 1-1: Manufacturer: syz [ 125.137331][ T3172] ? do_syscall_64+0x31/0x40 [ 125.137340][ T3172] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.137356][ T3172] ? _kstrtoull+0x3bb/0x4c0 [ 125.142348][ T301] usb 1-1: SerialNumber: syz [ 125.147464][ T3172] ? avc_has_perm+0x168/0x3d0 [ 125.147474][ T3172] ? memcpy+0x56/0x70 [ 125.147482][ T3172] ? avc_has_perm+0x27f/0x3d0 [ 125.147498][ T3172] ? avc_has_perm_noaudit+0x260/0x260 [ 125.244797][ T3172] tcp_setsockopt+0x22b/0x1d80 [ 125.249560][ T3172] ? tcp_sock_set_keepcnt+0xa0/0xa0 [ 125.254740][ T3172] ? __fget_files+0x2e1/0x340 [ 125.259398][ T3172] sock_common_setsockopt+0xa0/0xb0 [ 125.264636][ T3172] ? sock_common_recvmsg+0x1c0/0x1c0 [ 125.269987][ T3172] __sys_setsockopt+0x2fa/0x480 [ 125.275069][ T3172] ? __ia32_sys_recv+0xb0/0xb0 [ 125.279820][ T3172] ? ksys_write+0x1fa/0x260 [ 125.284418][ T3172] ? __fdget+0x1b3/0x230 [ 125.288650][ T3172] __x64_sys_setsockopt+0xbf/0xd0 [ 125.293687][ T3172] do_syscall_64+0x31/0x40 [ 125.298085][ T3172] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 125.303961][ T3172] RIP: 0033:0x7fd3cf583e59 [ 125.308356][ T3172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.327938][ T3172] RSP: 002b:00007fd3cdfdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.336367][ T3172] RAX: ffffffffffffffda RBX: 00007fd3cf80bfa0 RCX: 00007fd3cf583e59 [ 125.344318][ T3172] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000007 [ 125.352376][ T3172] RBP: 00007fd3cdfdd090 R08: 0000000000000028 R09: 0000000000000000 [ 125.360321][ T3172] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 125.368276][ T3172] R13: 00007fd3cf80c038 R14: 00007fd3cf80bfa0 R15: 00007fff725f5f38 [ 125.376398][ T555] Bluetooth: hci0: command 0x1001 tx timeout [ 125.382476][ T3054] Bluetooth: hci0: sending frame failed (-49) [ 125.420390][ T670] usb 8-1: USB disconnect, device number 11 [ 125.451522][ T301] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 125.459813][ T301] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 125.487957][ T301] usb 1-1: USB disconnect, device number 19 [ 125.488745][ T3209] EXT4-fs (loop0): Ignoring removed oldalloc option [ 125.503534][ T3209] EXT4-fs (loop0): Ignoring removed oldalloc option [ 125.511655][ T3209] EXT4-fs (loop0): Ignoring removed oldalloc option [ 125.518424][ T3209] EXT4-fs (loop0): filesystem is read-only [ 125.524576][ T3209] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 125.536463][ T3209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=9816c018, mo2=0002] [ 125.545471][ T3209] EXT4-fs (loop0): filesystem is read-only [ 125.547841][ T3220] netlink: 288 bytes leftover after parsing attributes in process `syz.8.857'. [ 125.551990][ T3209] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.567104][ T3209] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.854: bg 0: block 64: padding at end of block bitmap is not set [ 125.581874][ T3209] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 125.591357][ T3209] EXT4-fs (loop0): 1 orphan inode deleted [ 125.597220][ T3209] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,data_err=abort,debug,stripe=0x0000000000000002,stripe=0x0000000000000009,noblock_validity,grpquota,journal_ioprio=0x0000000000000002,dioread_lock,oldalloc,oldalloc,max_dir_size_kb=0x0000000000000008,,errors=continue [ 126.213071][ T3246] netlink: 72 bytes leftover after parsing attributes in process `syz.7.867'. [ 126.302935][ T301] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 126.553537][ T3257] Unknown ioctl -2126991741 [ 126.562409][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 126.699368][ T3263] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #11: comm syz.8.872: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 126.717429][ T3263] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.872: couldn't read orphan inode 11 (err -117) [ 126.729478][ T3263] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue [ 126.749971][ T301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.761564][ T3263] EXT4-fs (loop8): Ignoring removed bh option [ 126.767808][ T3263] System zones: 0-1, 3-12 [ 126.772317][ T3263] EXT4-fs (loop8): re-mounted. Opts: stripe=0x0000000000000008,init_itable,block_validity,debug,bh,nojournal_checksum, [ 126.840628][ T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.851375][ T301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.860326][ T301] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 127.043493][ T301] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 127.052665][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.060941][ T301] usb 1-1: Product: syz [ 127.065319][ T301] usb 1-1: Manufacturer: syz [ 127.070171][ T301] usb 1-1: SerialNumber: syz [ 127.086107][ T3285] loop8: p1 p3 < p5 p6 > [ 127.214315][ T399] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 127.324872][ T326] udevd[326]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 127.324929][ T1361] udevd[1361]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 127.335659][ T417] udevd[417]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 127.346334][ T304] udevd[304]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 127.458049][ T3296] tipc: Enabled bearer , priority 0 [ 127.561404][ T3296] device syzkaller0 entered promiscuous mode [ 127.609650][ T2249] Bluetooth: hci0: command 0x1009 tx timeout [ 127.706383][ T399] usb 8-1: unable to get BOS descriptor or descriptor too short [ 127.823672][ T399] usb 8-1: config 63 has an invalid interface number: 66 but max is 0 [ 127.841152][ T399] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 127.876619][ T399] usb 8-1: config 63 has no interface number 0 [ 127.896073][ T399] usb 8-1: config 63 interface 66 has no altsetting 0 [ 127.942219][ T3300] 9pnet: Insufficient options for proto=fd [ 128.009703][ T3302] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.064535][ T3310] netlink: 'syz.2.886': attribute type 4 has an invalid length. [ 128.072655][ T3310] netlink: 60 bytes leftover after parsing attributes in process `syz.2.886'. [ 128.090657][ T399] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 128.101298][ T399] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.109484][ T399] usb 8-1: Product: syz [ 128.114293][ T399] usb 8-1: Manufacturer: syz [ 128.119378][ T399] usb 8-1: SerialNumber: syz [ 128.156353][ T3223] tipc: Resetting bearer [ 128.169933][ T3223] tipc: Disabling bearer [ 128.240511][ T301] hub 1-1:1.0: bad descriptor, ignoring hub [ 128.247410][ T301] hub: probe of 1-1:1.0 failed with error -5 [ 128.332147][ T2249] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 128.367277][ T3330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'. [ 128.523552][ T301] usb 1-1: USB disconnect, device number 20 [ 128.541686][ T3327] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 128.560122][ T3327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 128.564144][ T3281] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 128.584924][ T3281] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 128.731776][ T399] uvcvideo: Found UVC 0.07 device syz (174f:8acf) [ 128.738368][ T399] uvcvideo: No valid video chain found. [ 128.742862][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 128.745386][ T399] usb 8-1: USB disconnect, device number 12 [ 128.773735][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 129.073708][ T2249] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.083359][ T2249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.091588][ T2249] usb 9-1: Product: syz [ 129.095836][ T301] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 129.103422][ T2249] usb 9-1: Manufacturer: syz [ 129.108115][ T2249] usb 9-1: SerialNumber: syz [ 129.175556][ T24] audit: type=1326 audit(123.627:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.2.897" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f99b70e59 code=0x0 [ 129.333709][ T3360] tipc: Enabling of bearer rejected, failed to enable media [ 129.479816][ T301] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 129.488197][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.499507][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.513721][ T301] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.527385][ T301] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.536680][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.548180][ T301] usb 1-1: config 0 descriptor?? [ 129.883658][ T3369] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 129.891451][ T3369] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 129.910322][ T3369] F2FS-fs (loop7): Found nat_bits in checkpoint [ 129.931728][ T24] audit: type=1400 audit(124.329:531): avc: denied { lock } for pid=3379 comm="syz.2.904" path="socket:[26381]" dev="sockfs" ino=26381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 129.957212][ T3369] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 129.964719][ T3369] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 130.068932][ T24] audit: type=1400 audit(124.460:532): avc: denied { create } for pid=3303 comm="syz.8.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 130.091281][ T3369] attempt to access beyond end of device [ 130.091281][ T3369] loop7: rw=2049, want=78704, limit=40427 [ 130.109046][ T3385] attempt to access beyond end of device [ 130.109046][ T3385] loop7: rw=2049, want=81920, limit=40427 [ 130.128766][ T3385] attempt to access beyond end of device [ 130.128766][ T3385] loop7: rw=2049, want=53248, limit=40427 [ 130.144172][ T3385] attempt to access beyond end of device [ 130.144172][ T3385] loop7: rw=2049, want=58432, limit=40427 [ 130.171335][ T24] audit: type=1400 audit(124.553:533): avc: denied { setopt } for pid=3368 comm="syz.7.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.174408][ T301] usbhid 1-1:0.0: can't add hid device: -71 [ 130.206008][ T301] usbhid: probe of 1-1:0.0 failed with error -71 [ 130.218257][ T301] usb 1-1: USB disconnect, device number 21 [ 130.242392][ T344] attempt to access beyond end of device [ 130.242392][ T344] loop7: rw=1, want=45136, limit=40427 [ 130.257402][ T2236] attempt to access beyond end of device [ 130.257402][ T2236] loop7: rw=2051, want=53248, limit=40427 [ 130.270357][ T2236] attempt to access beyond end of device [ 130.270357][ T2236] loop7: rw=2051, want=81920, limit=40427 [ 130.282177][ T2236] attempt to access beyond end of device [ 130.282177][ T2236] loop7: rw=2051, want=57352, limit=40427 [ 130.294075][ T2236] F2FS-fs (loop7): Issue discard(6144, 6144, 512) failed, ret: -5 [ 130.294093][ T2236] F2FS-fs (loop7): Issue discard(9728, 9728, 512) failed, ret: -5 [ 130.302009][ T2236] F2FS-fs (loop7): Issue discard(7168, 7168, 1) failed, ret: -5 [ 130.521662][ T3395] F2FS-fs (loop0): invalid crc value [ 130.573325][ T3410] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 130.602764][ T3395] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.605527][ T3410] netlink: 172 bytes leftover after parsing attributes in process `syz.7.911'. [ 130.651815][ T3395] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 130.666022][ T3395] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 130.728765][ T24] audit: type=1400 audit(125.068:534): avc: denied { ioctl } for pid=3394 comm="syz.0.908" path="socket:[26403]" dev="sockfs" ino=26403 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.768584][ T3417] device vlan2 entered promiscuous mode [ 130.774222][ T3417] device syz_tun entered promiscuous mode [ 130.805232][ T3421] tipc: Enabling of bearer rejected, failed to enable media [ 130.874501][ T3429] bridge_slave_0: FDB only supports static addresses [ 130.975746][ T299] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 131.179918][ T2249] cdc_ncm 9-1:1.0: bind() failure [ 131.200250][ T2249] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 131.221605][ T2249] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 131.239605][ T2249] usb 9-1: USB disconnect, device number 7 [ 131.253600][ T299] usb 8-1: Using ep0 maxpacket: 16 [ 131.595583][ T299] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 131.605788][ T299] usb 8-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 131.674595][ T3435] F2FS-fs (loop0): Test dummy encryption mode enabled [ 131.675688][ T3456] netlink: 20 bytes leftover after parsing attributes in process `syz.8.926'. [ 131.690384][ T3435] F2FS-fs (loop0): invalid crc value [ 131.724646][ T3435] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.760921][ T3435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.852088][ T299] usb 8-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 131.866532][ T299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.874946][ T299] usb 8-1: Product: syz [ 131.879164][ T299] usb 8-1: Manufacturer: syz [ 131.883774][ T299] usb 8-1: SerialNumber: syz [ 131.939813][ T3466] FAT-fs (loop8): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 131.949445][ T3466] FAT-fs (loop8): Filesystem has been set read-only [ 132.153353][ T3415] mip6: mip6_rthdr_init_state: spi is not 0: 3573809152 [ 132.173291][ T3415] netlink: 'syz.7.913': attribute type 27 has an invalid length. [ 132.226235][ T3415] exfat: Deprecated parameter 'namecase' [ 132.246311][ T3415] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 132.510798][ T3486] loop8: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 132.767997][ T3493] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.945445][ T3494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64016 sclass=netlink_route_socket pid=3494 comm=syz.2.936 [ 132.996438][ T3496] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 133.045706][ T3496] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.937: bg 0: bad block bitmap checksum [ 133.166440][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.010779][ T299] snd-usb-audio: probe of 8-1:9.0 failed with error -22 [ 134.028904][ T299] usb 8-1: USB disconnect, device number 13 [ 134.186296][ T326] udevd[326]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 134.198002][ T417] udevd[417]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 134.208772][ T339] udevd[339]: inotify_add_watch(7, /dev/loop8p14, 10) failed: No such file or directory [ 134.208791][ T3512] udevd[3512]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 134.219932][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop8p8, 10) failed: No such file or directory [ 134.228570][ T304] udevd[304]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 134.239065][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop8p10, 10) failed: No such file or directory [ 134.248004][ T1361] udevd[1361]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 134.258812][ T3514] udevd[3514]: inotify_add_watch(7, /dev/loop8p9, 10) failed: No such file or directory [ 134.278848][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop8p12, 10) failed: No such file or directory [ 135.068267][ T3511] F2FS-fs (loop7): invalid crc value [ 135.269287][ T3511] F2FS-fs (loop7): Found nat_bits in checkpoint [ 135.401568][ T3511] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 135.462754][ T3533] attempt to access beyond end of device [ 135.462754][ T3533] loop7: rw=2049, want=45104, limit=40427 [ 135.891349][ T299] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 135.936784][ T24] audit: type=1400 audit(129.953:535): avc: denied { append } for pid=3584 comm="syz.7.968" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.133959][ T3590] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 136.147900][ T299] usb 1-1: Using ep0 maxpacket: 32 [ 136.426260][ T299] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.543425][ T299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.560869][ T299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.599388][ T299] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.821339][ T299] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 136.840688][ T299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.872926][ T299] usb 1-1: Product: syz [ 136.889734][ T299] usb 1-1: Manufacturer: syz [ 136.946268][ T299] usb 1-1: SerialNumber: syz [ 136.981021][ T3607] fuse: Unknown parameter 'poNtI' [ 137.237785][ T623] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 137.310272][ T3621] tipc: Enabled bearer , priority 0 [ 137.313612][ T3619] 9pnet: Insufficient options for proto=fd [ 137.328760][ T3622] xt_hashlimit: size too large, truncated to 1048576 [ 137.351525][ T3627] 9pnet: Insufficient options for proto=fd [ 137.373929][ T3621] device syzkaller0 entered promiscuous mode [ 137.392230][ T3629] tipc: Invalid UDP bearer configuration [ 137.392251][ T3629] tipc: Enabling of bearer rejected, failed to enable media [ 137.420688][ T24] audit: type=1400 audit(131.347:536): avc: denied { accept } for pid=3630 comm="syz.6.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.466440][ T3633] netlink: 'syz.6.984': attribute type 3 has an invalid length. [ 137.474617][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.6.984'. [ 137.622864][ T623] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.629650][ T623] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 137.638820][ T623] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.647518][ T623] usb 8-1: config 0 descriptor?? [ 139.283591][ T3568] tipc: Resetting bearer [ 139.298571][ T3568] tipc: Disabling bearer [ 139.309243][ T25] tipc: 32-bit node address hash set to a2b726d5 [ 139.380631][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 139.398456][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 139.427824][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.439528][ T299] hub 1-1:1.0: bad descriptor, ignoring hub [ 139.445481][ T299] hub: probe of 1-1:1.0 failed with error -5 [ 139.470611][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 139.506649][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.517530][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.526053][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.534345][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.543770][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.589049][ T299] usb 1-1: USB disconnect, device number 22 [ 139.605749][ T3670] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 139.620248][ T3670] FAT-fs (loop0): Filesystem has been set read-only [ 139.686344][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.693428][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.702904][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.710039][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.717106][ T2249] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 139.724740][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.731830][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.739026][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.746070][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.753173][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.761733][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.768800][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.776090][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.783411][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.790644][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.799555][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.807496][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.814667][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.822235][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.829330][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.836398][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.843558][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.852655][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.859935][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.867662][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.874885][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.881988][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.889103][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.896169][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.903271][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.908066][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.911288][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.926757][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.926895][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.940979][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.941834][ T3673] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.948142][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.971278][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.978369][ T2249] usb 7-1: Using ep0 maxpacket: 16 [ 139.983763][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 139.991016][ T623] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 140.019753][ T3600] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 140.019753][ T3600] [ 140.035066][ T3600] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 140.690377][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 140.927145][ T2249] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.945504][ T2249] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 140.976473][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 140.978048][ T623] hid-led: probe of 0003:0FC5:B080.0007 failed with error -71 [ 140.984792][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.007154][ T623] usb 8-1: USB disconnect, device number 14 [ 141.042206][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 141.049797][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 141.057685][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.088651][ T24] audit: type=1400 audit(134.772:537): avc: denied { bind } for pid=3720 comm="syz.8.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.112501][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1011'. [ 141.127597][ T2249] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.130398][ T3723] FAT-fs (loop0): Unrecognized mount option "184467440737095516150x000000000000ee00" or missing value [ 141.139146][ T2249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.158331][ T2249] usb 7-1: Product: syz [ 141.163247][ T2249] usb 7-1: Manufacturer: syz [ 141.168172][ T2249] usb 7-1: SerialNumber: syz [ 141.362619][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 141.373297][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.605943][ T3732] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1015: invalid indirect mapped block 10 (level 1) [ 141.620283][ T3732] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1015: invalid indirect mapped block 8 (level 1) [ 141.633552][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 141.643090][ T3732] EXT4-fs (loop0): 1 truncate cleaned up [ 141.648762][ T3732] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 141.800981][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.561506][ T2249] cdc_ncm 7-1:1.0: bind() failure [ 142.567181][ T2249] cdc_ncm 7-1:1.1: bind() failure [ 142.577455][ T281] EXT4-fs error (device loop0): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 142.585577][ T2249] usb 7-1: USB disconnect, device number 11 [ 142.599775][ T281] EXT4-fs error (device loop0): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 142.629742][ T3754] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 142.644997][ T3754] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 142.644997][ T3754] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 142.644997][ T3754] [ 142.665569][ T3754] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 142.673403][ T3754] EXT4-fs (loop7): dax option not supported [ 142.720694][ T300] tipc: Left network mode [ 142.741181][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 142.844045][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.851785][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.862042][ T3773] device bridge_slave_0 entered promiscuous mode [ 142.872075][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.902104][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.914392][ T3773] device bridge_slave_1 entered promiscuous mode [ 143.114135][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.121229][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.128636][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.135660][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.176983][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.186248][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.197964][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.225046][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.233488][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.240717][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.248817][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.257793][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.264876][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.283149][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.297829][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.327920][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.350035][ T3773] device veth0_vlan entered promiscuous mode [ 143.545195][ T3798] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.1036: invalid indirect mapped block 10 (level 1) [ 143.597016][ T3798] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #13: comm syz.7.1036: invalid indirect mapped block 8 (level 1) [ 143.612531][ T3798] EXT4-fs (loop7): 1 truncate cleaned up [ 143.618371][ T3798] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 144.207022][ T3796] device sit0 entered promiscuous mode [ 144.213967][ T3796] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 144.228760][ T3796] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1038'. [ 144.232035][ T3814] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.249289][ T3814] FAT-fs (loop17): unable to read boot sector [ 144.256195][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.268715][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.281201][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.295209][ T3773] device veth1_macvtap entered promiscuous mode [ 144.315931][ T2236] EXT4-fs error (device loop7): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 144.328444][ T2236] EXT4-fs error (device loop7): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 144.433444][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.441784][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.450070][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.458251][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.467235][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.475834][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.484500][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.721763][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.841857][ T3820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 144.851182][ T3820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 144.902718][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'. [ 144.985171][ T670] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 145.065201][ T300] device bridge_slave_1 left promiscuous mode [ 145.071711][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.079287][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.087782][ T300] device veth1_macvtap left promiscuous mode [ 145.093899][ T300] device veth0_vlan left promiscuous mode [ 145.811112][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.862825][ T3843] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.870289][ T3843] device bridge_slave_0 entered promiscuous mode [ 145.877729][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.884967][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.892502][ T3843] device bridge_slave_1 entered promiscuous mode [ 145.943708][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.950822][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.958126][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.965145][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.006662][ T3843] device veth0_vlan entered promiscuous mode [ 146.019120][ T3843] device veth1_macvtap entered promiscuous mode [ 146.209401][ T623] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 146.242434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.252618][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.256791][ T670] usb 10-1: Using ep0 maxpacket: 16 [ 146.261467][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.277387][ T24] audit: type=1400 audit(139.629:538): avc: denied { ioctl } for pid=3864 comm="syz.2.1057" path="socket:[29159]" dev="sockfs" ino=29159 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.304641][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.313133][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.321977][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.330058][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.338780][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.347629][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.356277][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.364064][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.372002][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.406452][ T670] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.427775][ T1680] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 146.427785][ T670] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.427806][ T670] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.486001][ T670] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.494360][ T623] usb 7-1: Using ep0 maxpacket: 16 [ 146.504466][ T3888] netem: unknown loss type 0 [ 146.512082][ T670] usb 10-1: config 0 descriptor?? [ 146.517185][ T3888] netem: change failed [ 146.738362][ T623] usb 7-1: unable to get BOS descriptor or descriptor too short [ 146.834123][ T623] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 146.846747][ T623] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 146.880116][ T1680] usb 5-1: device descriptor read/64, error -71 [ 146.887090][ T300] tipc: Left network mode [ 147.065736][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 147.101139][ T623] usb 7-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 147.114682][ T623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.130370][ T623] usb 7-1: Product: syz [ 147.138999][ T623] usb 7-1: Manufacturer: syz [ 147.149108][ T623] usb 7-1: SerialNumber: syz [ 147.175831][ T3840] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 147.293393][ T1680] usb 5-1: device descriptor read/64, error -71 [ 147.349827][ T3894] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1069'. [ 147.422298][ T24] audit: type=1400 audit(140.705:539): avc: denied { ioctl } for pid=3839 comm="syz.6.1052" path="/dev/usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 147.512501][ T300] device bridge_slave_1 left promiscuous mode [ 147.519452][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.527055][ T300] device bridge_slave_0 left promiscuous mode [ 147.533700][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.541917][ T300] device veth1_macvtap left promiscuous mode [ 147.548200][ T300] device veth0_vlan left promiscuous mode [ 147.581862][ T1680] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 148.020011][ T1680] usb 5-1: device descriptor read/64, error -71 [ 148.479526][ T1680] usb 5-1: device descriptor read/64, error -71 [ 148.584685][ T3919] device bridge1 entered promiscuous mode [ 148.607975][ T1680] usb usb5-port1: attempt power cycle [ 148.834736][ T623] usb 7-1: USB disconnect, device number 12 [ 149.024511][ T670] usbhid 10-1:0.0: can't add hid device: -71 [ 149.031731][ T670] usbhid: probe of 10-1:0.0 failed with error -71 [ 149.065763][ T670] usb 10-1: USB disconnect, device number 2 [ 149.120700][ T1680] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 149.526815][ T1680] usb 5-1: device descriptor read/8, error -71 [ 149.634680][ T3940] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #13: comm syz.9.1081: invalid indirect mapped block 10 (level 1) [ 149.648703][ T3940] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #13: comm syz.9.1081: invalid indirect mapped block 8 (level 1) [ 149.663914][ T3940] EXT4-fs (loop9): 1 truncate cleaned up [ 149.669616][ T3940] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 149.815349][ T1680] usb 5-1: device descriptor read/8, error -71 [ 150.188568][ T3773] EXT4-fs error (device loop9): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 150.232841][ T3773] EXT4-fs error (device loop9): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 150.276046][ T24] audit: type=1400 audit(143.372:540): avc: denied { create } for pid=3950 comm="syz.2.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 152.167923][ T3966] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 152.282165][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.289397][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.297091][ T3968] device bridge_slave_0 entered promiscuous mode [ 152.304170][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.312035][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.319772][ T3968] device bridge_slave_1 entered promiscuous mode [ 152.414251][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.421315][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.428614][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.435661][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.476949][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.484970][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.493509][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.506051][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.515096][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.522170][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.542493][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.550895][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.557940][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.565337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.573593][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.586447][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.713891][ T344] device bridge_slave_1 left promiscuous mode [ 152.720729][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.730760][ T344] device bridge_slave_0 left promiscuous mode [ 152.742323][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.754887][ T344] device veth1_macvtap left promiscuous mode [ 152.761388][ T344] device veth0_vlan left promiscuous mode [ 152.853244][ T3985] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #13: comm syz.6.1095: invalid indirect mapped block 10 (level 1) [ 152.867687][ T3985] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #13: comm syz.6.1095: invalid indirect mapped block 8 (level 1) [ 152.883251][ T3985] EXT4-fs (loop6): 1 truncate cleaned up [ 152.888937][ T3985] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 153.069920][ T3991] binder: 3990:3991 ioctl c0306201 200000000480 returned -14 [ 153.125526][ T24] audit: type=1400 audit(145.983:541): avc: denied { ioctl } for pid=3990 comm="syz.4.1096" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.150612][ T24] audit: type=1400 audit(145.983:542): avc: denied { set_context_mgr } for pid=3990 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.173000][ T24] audit: type=1400 audit(146.011:543): avc: denied { ioctl } for pid=3990 comm="syz.4.1096" path="socket:[29360]" dev="sockfs" ino=29360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.203775][ T3968] device veth0_vlan entered promiscuous mode [ 153.216832][ T3968] device veth1_macvtap entered promiscuous mode [ 153.223756][ T1614] EXT4-fs error (device loop6): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 153.236436][ T1614] EXT4-fs error (device loop6): ext4_lookup:1830: inode #16: comm syz-executor: iget: bogus i_mode (6355) [ 153.236557][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.255886][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.263913][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.271925][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.294892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.303454][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.313510][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.323147][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.425942][ T3999] kvm [3997]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 153.443537][ T3999] kvm [3997]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 153.461244][ T3999] kvm [3997]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 153.588515][ T4015] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.595672][ T4015] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.603446][ T4015] device bridge_slave_0 entered promiscuous mode [ 153.610559][ T4015] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.617791][ T4015] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.627077][ T4015] device bridge_slave_1 entered promiscuous mode [ 153.790492][ T1680] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.057696][ T1680] usb 2-1: Using ep0 maxpacket: 16 [ 154.186145][ T1680] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.236124][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1108'. [ 154.251208][ T1680] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 154.498966][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.506689][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.518438][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.526843][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.535585][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.542639][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.556710][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.564280][ T1680] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.564594][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.574079][ T1680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.582268][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.590229][ T1680] usb 2-1: Product: syz [ 154.598723][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.609060][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.614700][ T1680] usb 2-1: Manufacturer: syz [ 154.624812][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.624917][ T24] audit: type=1400 audit(147.443:544): avc: denied { accept } for pid=4038 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.633203][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.651866][ T1680] usb 2-1: SerialNumber: syz [ 154.659617][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.672986][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.685369][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.693920][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.706885][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.715522][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.724114][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.731832][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.740507][ T4015] device veth0_vlan entered promiscuous mode [ 154.755776][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.764486][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.774295][ T4015] device veth1_macvtap entered promiscuous mode [ 154.788332][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.796484][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.804664][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.814656][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.823407][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.928680][ T4009] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 155.030965][ T4045] F2FS-fs (loop3): Encrypt feature is off [ 155.084342][ T344] device bridge_slave_1 left promiscuous mode [ 155.091684][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.107354][ T344] device bridge_slave_0 left promiscuous mode [ 155.114332][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.122688][ T344] device veth1_macvtap left promiscuous mode [ 155.129025][ T344] device veth0_vlan left promiscuous mode [ 155.191425][ T4048] F2FS-fs (loop3): Encrypt feature is off [ 155.413114][ T24] audit: type=1400 audit(148.173:545): avc: denied { getopt } for pid=4058 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.437735][ T4059] input: syz1 as /devices/virtual/input/input4 [ 155.463030][ T24] audit: type=1400 audit(148.201:546): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=1246 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.512444][ T24] audit: type=1400 audit(148.201:547): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1246 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.564427][ T24] audit: type=1400 audit(148.201:548): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1246 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.613772][ T24] audit: type=1400 audit(148.229:549): avc: denied { setopt } for pid=4058 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.694606][ T4059] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (262145, 24) [ 155.715833][ T4059] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.733897][ T4059] F2FS-fs (loop3): invalid crc value [ 155.751504][ T4059] F2FS-fs (loop3): invalid crc value [ 155.762104][ T4059] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 155.895668][ T1680] cdc_ncm 2-1:1.0: bind() failure [ 155.903178][ T1680] cdc_ncm 2-1:1.1: bind() failure [ 155.926790][ T1680] usb 2-1: USB disconnect, device number 9 [ 155.961512][ T4059] kvm [4058]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0xf800 [ 155.971679][ T4059] kvm [4058]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0xf800 [ 156.020663][ T4073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.057007][ T301] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 156.213301][ T4078] overlayfs: failed to clone upperpath [ 156.323350][ T301] usb 5-1: Using ep0 maxpacket: 8 [ 156.483581][ T301] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 156.492016][ T301] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 156.501864][ T301] usb 5-1: config 3 has no interface number 0 [ 156.509013][ T301] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.587400][ T301] usb 5-1: config 3 interface 45 has no altsetting 0 [ 156.627841][ T24] audit: type=1400 audit(149.315:550): avc: denied { getopt } for pid=4106 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.793288][ T301] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 156.802504][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.810659][ T301] usb 5-1: Product: syz [ 156.815025][ T301] usb 5-1: Manufacturer: syz [ 156.819747][ T301] usb 5-1: SerialNumber: syz [ 157.192862][ T4128] xt_hashlimit: size too large, truncated to 1048576 [ 157.256111][ T301] usb 5-1: USB disconnect, device number 9 [ 157.572247][ T4130] F2FS-fs (loop3): Test dummy encryption mode enabled [ 157.590711][ T4130] F2FS-fs (loop3): invalid crc value [ 157.612826][ T4130] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.669575][ T4130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.812149][ T4135] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 157.820384][ T4135] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 157.832136][ T4135] F2FS-fs (loop1): invalid crc value [ 157.974475][ T4135] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.267553][ T4135] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 158.287591][ T4170] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1156: iget: bad i_size value: 38620345925642 [ 158.300725][ T4135] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.341462][ T4170] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1156: couldn't read orphan inode 15 (err -117) [ 158.367682][ T4135] attempt to access beyond end of device [ 158.367682][ T4135] loop1: rw=10241, want=45104, limit=40427 [ 158.379314][ T4170] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 158.555717][ T4170] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1156: bg 0: block 5: invalid block bitmap [ 158.568545][ T4170] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1212 with error 28 [ 158.581600][ T4170] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.581600][ T4170] [ 158.591442][ T4170] EXT4-fs (loop4): Total free blocks count 0 [ 158.597506][ T4170] EXT4-fs (loop4): Free/Dirty block details [ 158.608760][ T4181] EXT4-fs (loop4): shut down requested (1) [ 158.614757][ T4170] EXT4-fs (loop4): free_blocks=0 [ 158.620957][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 158.620967][ T24] audit: type=1400 audit(151.186:556): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.652720][ T4170] EXT4-fs (loop4): dirty_blocks=1212 [ 158.660452][ T4170] EXT4-fs (loop4): Block reservation details [ 158.706225][ T4170] EXT4-fs (loop4): i_reserved_data_blocks=1212 [ 158.891928][ T4173] fuse: Bad value for 'fd' [ 159.154022][ T4191] udc-core: couldn't find an available UDC or it's busy [ 159.162124][ T24] audit: type=1400 audit(151.673:557): avc: denied { read write } for pid=4190 comm="syz.3.1160" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.167137][ T4191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.196381][ T24] audit: type=1400 audit(151.673:558): avc: denied { open } for pid=4190 comm="syz.3.1160" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.275364][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 159.298840][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 159.327536][ T4203] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.334566][ T4203] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 159.345324][ T4203] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 159.353662][ T4203] System zones: 0-5 [ 159.358355][ T4203] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,sysvgroups,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 159.667781][ T1680] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 159.682120][ T4227] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 159.695659][ T4227] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 159.706961][ T4227] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 159.829316][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 159.842302][ T24] audit: type=1400 audit(152.318:559): avc: denied { load_policy } for pid=4240 comm="syz.1.1181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 159.842337][ T4241] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 159.887725][ T4237] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 159.889809][ T4241] SELinux: failed to load policy [ 159.947777][ T4245] EXT4-fs (loop3): invalid first ino: 0 [ 159.996322][ T1680] usb 5-1: device descriptor read/64, error -71 [ 160.221342][ T4260] bridge0: port 3(erspan0) entered blocking state [ 160.227865][ T4260] bridge0: port 3(erspan0) entered disabled state [ 160.255536][ T4260] device erspan0 entered promiscuous mode [ 160.265599][ T4260] bridge0: port 3(erspan0) entered blocking state [ 160.272055][ T4260] bridge0: port 3(erspan0) entered forwarding state [ 160.313120][ T4260] device erspan0 left promiscuous mode [ 160.322695][ T4260] bridge0: port 3(erspan0) entered disabled state [ 160.437264][ T24] audit: type=1400 audit(152.852:560): avc: denied { ioctl } for pid=4256 comm="syz.3.1186" path="/13/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.565541][ T4262] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 160.640312][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.698387][ T4265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 160.821979][ T1680] usb 5-1: device descriptor read/64, error -71 [ 161.176061][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 161.399276][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 161.432238][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.484664][ T1680] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 161.531336][ T25] usb 2-1: config 0 descriptor?? [ 161.799324][ T24] audit: type=1400 audit(154.153:561): avc: denied { mounton } for pid=4272 comm="syz.3.1191" path="/dev/sda1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.826443][ T1680] usb 5-1: device descriptor read/64, error -71 [ 162.084531][ T4251] netlink: 'syz.1.1183': attribute type 5 has an invalid length. [ 162.105314][ T4307] EXT4-fs error (device sda1): __ext4_get_inode_loc:4451: comm syz.8.1201: Invalid inode table block 0 in block_group 0 [ 162.119034][ T25] wacom 0003:056A:032C.0008: unknown main item tag 0x4 [ 162.126069][ T25] wacom 0003:056A:032C.0008: unknown main item tag 0xd [ 162.133647][ T25] wacom 0003:056A:032C.0008: hidraw0: USB HID v0.81 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 162.145535][ T4307] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 162.159082][ T4308] EXT4-fs error (device sda1): __ext4_get_inode_loc:4451: comm udevd: Invalid inode table block 0 in block_group 0 [ 162.169157][ T4307] EXT4-fs error (device sda1): ext4_dirty_inode:6181: inode #2038: comm syz.8.1201: mark_inode_dirty error [ 162.172293][ T4309] EXT4-fs error (device sda1): __ext4_get_inode_loc:4451: comm syz.3.1202: Invalid inode table block 0 in block_group 0 [ 162.185095][ T4308] udevd[4308]: failed to execute '/lib/udev/fido_id' 'fido_id': Structure needs cleaning [ 162.205858][ T4309] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 162.216580][ T4307] EXT4-fs error (device sda1): __ext4_get_inode_loc:4451: comm syz.8.1201: Invalid inode table block 0 in block_group 0 [ 162.230692][ T4309] EXT4-fs error (device sda1): ext4_dirty_inode:6181: inode #2030: comm syz.3.1202: mark_inode_dirty error [ 162.242392][ T4307] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 162.253207][ T4307] EXT4-fs error (device sda1): ext4_dirty_inode:6181: inode #2038: comm syz.8.1201: mark_inode_dirty error [ 162.330051][ T4311] EXT4-fs (loop3): invalid first ino: 0 [ 162.340279][ T25] usb 2-1: USB disconnect, device number 10 [ 162.382077][ T1680] usb 5-1: device descriptor read/64, error -71 [ 162.432845][ T4319] IPv6: sit1: Disabled Multicast RS [ 162.574005][ T1680] usb usb5-port1: attempt power cycle [ 163.375825][ T20] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.415026][ T4331] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1209: iget: bad i_size value: 38620345925642 [ 163.433344][ T4331] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1209: couldn't read orphan inode 15 (err -117) [ 163.445510][ T4331] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 163.589830][ T24] audit: type=1400 audit(155.837:562): avc: denied { write } for pid=4355 comm="syz.3.1216" name="ipv6_route" dev="proc" ino=4026533022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.670652][ T4361] udc-core: couldn't find an available UDC or it's busy [ 163.696426][ T4361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.799245][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 163.931533][ T20] usb 2-1: config 254 has an invalid interface number: 52 but max is 0 [ 163.939910][ T20] usb 2-1: config 254 has no interface number 0 [ 163.946790][ T20] usb 2-1: config 254 interface 52 has no altsetting 0 [ 164.123953][ T20] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 164.134149][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.142453][ T20] usb 2-1: Product: syz [ 164.146743][ T20] usb 2-1: Manufacturer: syz [ 164.151337][ T20] usb 2-1: SerialNumber: syz [ 164.455610][ T20] usb-storage 2-1:254.52: USB Mass Storage device detected [ 164.489041][ T20] usb-storage 2-1:254.52: This device (04e6,000a,0200 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 164.489041][ T20] Please send a copy of this message to and [ 164.521339][ T4383] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 164.528903][ T4383] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 164.536849][ T4383] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE SYZFAIL: posix_spawnp failed (errno 117: Structure needs cleaning) [ 164.554135][ T4383] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noblock_validity,nomblk_io_submit,inlinecrypt,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock, [ 164.577562][ T4389] fuse: Bad value for 'user_id' [ 164.583951][ T24] audit: type=1400 audit(156.754:563): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[1503]" dev="pipefs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 164.720035][ T20] usb 2-1: USB disconnect, device number 11 [ 164.838827][ T4386] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.858115][ T4386] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.894539][ T4015] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.909469][ T4389] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.910280][ T4325] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.946198][ T4015] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.956552][ T4325] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 164.969821][ T4389] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 165.395965][ T344] device bridge_slave_1 left promiscuous mode [ 165.402126][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.409572][ T344] device bridge_slave_0 left promiscuous mode [ 165.415666][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.423397][ T344] device veth1_macvtap left promiscuous mode [ 165.429426][ T344] device veth0_vlan left promiscuous mode [ 166.433522][ T344] device bridge_slave_1 left promiscuous mode [ 166.439761][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.447282][ T344] device bridge_slave_0 left promiscuous mode [ 166.453795][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.461528][ T344] device bridge_slave_1 left promiscuous mode [ 166.467714][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.475094][ T344] device bridge_slave_0 left promiscuous mode [ 166.481181][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.489091][ T344] device veth1_macvtap left promiscuous mode [ 166.495082][ T344] device veth0_vlan left promiscuous mode [ 166.501015][ T344] device veth1_macvtap left promiscuous mode [ 166.507037][ T344] device veth0_vlan left promiscuous mode [ 171.722255][ T300] EXT4-fs error: 192 callbacks suppressed [ 171.722265][ T300] EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:476: comm kworker/u4:3: Invalid block bitmap block 0 in block_group 4 [ 171.743279][ T300] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 3583 with max blocks 1 with error 117 [ 171.756047][ T300] EXT4-fs (sda1): This should not happen!! Data will be lost [ 171.756047][ T300]