last executing test programs: 36m28.512155708s ago: executing program 32 (id=22): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0xa, 0x3, 0x3a) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 30m53.047502426s ago: executing program 33 (id=667): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001900010929bd700080000000021010000000fd000000000008000100ffffff"], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x28, r7, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 21m42.771240492s ago: executing program 6 (id=2224): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x10}}]}}]}, 0x48}}, 0x0) 21m40.506690764s ago: executing program 6 (id=2229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) 21m38.330423273s ago: executing program 34 (id=2209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x40000001}, 0x0, 0x4}, {{@in, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) dup(r4) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") 21m38.206127214s ago: executing program 6 (id=2233): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c3932755946ba8848b0d93caec1f4d89f99dcd2e9cb4d3646bc48d7ece5cbb87cdd67955cf5c813c05411a276d6afe065ac5849c64aebf30294fc59168bcb9a25164a1826a81cf45e576ef4dd94e292cbbf69d0787fa4b596ce132d7e976b136871cebb77ad2e34ffcf52557e6a0403769815ed13ca7b6c9f2fd7d11461997a57b35715cee9809008af9df0690f5d42d2e0f2d967aa4bc96a7d4b343411ef4d962699ffc5c434cf53339430fe9d668405875e14bea5c4aea70b9de7b9fb36561bdc896a0cc666f0d9b498329"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x90, 0x0, &(0x7f0000000440)={0x0, 0x4, [0x7b5, 0x987, 0xce8, 0xa89]}) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0xfffffff8, 0x900}}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 21m36.431287316s ago: executing program 6 (id=2237): openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzLblt62IP0DQKhqJP1pafsjBi0YTDpqY6AHjqbYLqSzU0JoIIVo94NGQeDfe/QOMJ70Y9WTiVe+GhBguoKc1szMDS9ktXbplofv5JLP73syD974z83bezNttAH1rNHtJIrZGxJ8RMZxnby4wmr9du3J++t8r56eTqNff+SdplLt65fx0WbT8d1vyTL1e5De0qPfC+xFTtVr1TJEfXzj10fj82XMvzZ6aOlE9UT09eeTIwQN7hg5PHupKnFlcV3d9Ord759H3Lr41feziB79+l7V3a7G9OY5uGc33bkvPdruyHtvWlE4GetgQOlKJiOxwDTb6/3BUYtP1bcPxxhc9bRywpur1er3V9bmwWAfWsSR63QKgN8oLfXb/Wy53aehxT7j8an4DlMV9rVjyLQOR5oknB5fc33bTaEQcW/zvm2yJNXoOAQDQ7Mds/PNiq/FfGo/kiaHs5YFiDmUkIh6MiO0R8VBE7IiIhyMaZR+NiMc6rH/pDMmt45/00h0HtwLZ+O+VYm7r5vFfWhYZqRS5bY34B5Pjs7Xq/mKf7IvBDcdnk+rEMnX89PofX7Xb1jz+y5as/nIsWLTj0sCSB3QzUwtTq4m52eXPI3YNtIo/iXIaJ4mInRGx6w7rmH2+/YTQ7eNfRhfmmerfRjyXH//FWBJ/KWk7Pznx8uHJQ+Mbo1bdP16eFbf67fcLb7erf1Xxd0F2/De3PP+vxz+SbIyYP3vuZGO+dr7zOi789WXbe5oOz/+j24rzfyh5t7FiqNjwydTCwpmJiKHkzVvXT97438p8WT6Lf9/e1v1/e9zYE49HxO6I2BMRT2Q3hUXbn4qIpyNi7zLx//LaMx92Hv8yT+W7KIt/5nbHP5qPf+eJysmff+g8/lJ2/A82UvuKNSv5/FtpA1ez7wAAAOB+kTa+A5+kY9fTaTo2ln+Hf0dsTmtz8wsvHJ/7+PRM/l35kRhMyyddw03PQyeKZ8NlfnJJ/kDx3PjryqZGfmx6rjbT6+Chz21p0/8zf1d63Tpgzfm9FvQv/R/6l/4P/SnR/6Gv6f/Qv1r1/8/alh77fk0bA9xVrv/Qv1bQ/xfzt/ajAuD+5PoP/Uv/h77U9rfx6ap+8i+x7hOR3hPNWP+JgRX/MYsOEvXhvP9naza0LNPrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+D8AAP//Yz/jTQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 21m33.088052697s ago: executing program 6 (id=2240): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffff00000000}}]}}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) rt_sigqueueinfo(r1, 0x3b, &(0x7f0000000540)={0x0, 0xe, 0xfffffffb}) 21m31.046514182s ago: executing program 6 (id=2243): r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x10) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000980)) syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1c410, &(0x7f0000000e40), 0xde, 0x547, &(0x7f0000000f00)="$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") open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 21m16.789572445s ago: executing program 35 (id=2243): r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x10) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000980)) syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1c410, &(0x7f0000000e40), 0xde, 0x547, &(0x7f0000000f00)="$eJzs3U9vHGcZAPBnxruuk7jYBQ6lUv+IBiUVZB3XtLU4tEUgbpVA5R4se2NZWWcj77qNrQo54gMgIQSVOHHigsSNCxLqR0BIlegdAQIhSOHAARg049nU3s46G7LrTde/nzS777wzO8/zTryz7/zJTABn1nMR8XpEzETECxGxUNan5RAHh0M+34d331nPh7z6zb8lkZR1EUXxngvlx+YO3yp19vZvrLVazZ1yfKm7fWups7d/ZWt7bbO52by5srL88uorqy+tXh1JO/N2vfr1P/3o+z/7xqu//tLbv7/2l8vfzZP+Wjm9167RKdZefFC81vN1cU8tInZGG2xiZsr21CedCAAAQ8l7qZ+OiM8X/f+FmCl6c4X+Lt3c6WcHAAAAjEL22nz8O4nIAAAAgKn1WkTMR5I2ymsB5iNNG43Da3g/G+fTVrvT/eL19u7NjXxaxGLU0+tbrebV8praxagn+fhyUf5o/MW+8ZWIeCIifrhwrhhvrLdbG5M++AEAAABnxIW+/f9/Lhzu/wMAAABTZnHSCQAAAABjN2j/PznlPAAAAIDxcf4fAAAApto333gjH7Le86833trbvdF+68pGs3Ojsb273lhv79xqbLbbm8U9+7ZPWlY9Ilrt9q0vR+zeXuo2O92lzt7+te327s3utS3PDwQAAIBJeeLZ9z5IIuLgK+eKITebv8wM+IBrBWBqpA8y8x/Hlwdw+gb9zA9hdpR5AKevNukEgMk5mHQCwKQdu9VHRafg6MU7x44Z/GZ8OQEAAKN16XPV5/9r5fX8wPR6oPP/wFR5iPP/wCec8/9wdtUfqAdwZ4yZAJNyv0d9DLx5R9X5/8org7PsvssCAADGar4Ynk0b5bnA+UjTRiPi8eK/+teT61ut5tWI+FRE/G6h/lg+vlx8MvF4QAAAAAAAAAAAAAAAAAAAAAAAAAAYUpYlkQEAAABTLSL9c1I+/+vSwsX5/uMDs8m/FqJ8pNfbP3nzx7fXut2d5bz+7/fqu++W9S9O4ggGAAAAnEW1E6f29tN7+/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEof3n1nvTecZty/fjUiFqvi12KueJ+LetTi/D+SqB35XBIRMyOIf3AnIp6sip/kacVimUV//DQizp1O/KezLKuMf2EE8eEsey/f/rxe9f1L47nivfr7XyuHh3Vs+zf7yyNT0nvbv5mK+Pn27/EhYzz1/i+WBsa/E/FUrXr704ufxzr/WHws/vNVC6xYKd/59v7+xyoPFx7ZTyMuVf7+JMdiLXW3by119vavbG2vbTY3mzdXVpZfXn1l9aXVq0vXt1rN8rWyjT94+lf/7av6T3aoaH8MiL9Y5Fm2v2L9X8wL9SOVWX+YMtj7t+9+5rBY71tEEf/y89V/f0+WK6oqfv438YXydyCffqlXPjgsH/XMz3/7TGViZfyNAe2fOyF+Xnd50EL7vPCt7/1hyFkBgFPQ2du/sdZqNXeOFHqdlIpJD1F4N8uykS5wJIVIh5256C4OWGPTUOj17sYWYu5Raenxwrlx/5tefFRaOnxhFEe2AACAR81Hnf5JZwIAAAAAAAAAAAAAAAAAAABnV2cv0v/3VmGzQ87cH/NgMk0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjR/wIAAP//4M3S0Q==") open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 18m50.863873986s ago: executing program 0 (id=2498): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) listen(r0, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x80000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0xe22, 0x7ffe, @local, 0x4}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x28}}], 0x1, 0x2000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc0000001100010025bd7000fbdbdf2500000000", @ANYRES32=r9], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20044800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) 18m48.87181997s ago: executing program 0 (id=2501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rt_sigaction(0x8, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 18m47.026032803s ago: executing program 0 (id=2505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rt_sigaction(0x8, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r5, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 18m45.514671831s ago: executing program 0 (id=2508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8e00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x0, 0x11e2, &(0x7f0000002480)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x2) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x3000003, 0x20010, r3, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x410}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f000086fff4)={0x1}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0xfc, 0x6, @random="5c93cdfb69ef"}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18m45.106991206s ago: executing program 0 (id=2511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000580)="f7790066baa00066b86b4276ef66ba420266b813018ee066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a7d3fd", 0x4b}], 0x1, 0xbc989613abadf744, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005f2ab420720c0d009b270102030109021223010000000009e9ffffffdaa292"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7f, 0x8, 0x10, '\x00', 0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000b40)=""/131, 0x83}, {&(0x7f0000000dc0)=""/239, 0xfffffc1f}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x4, &(0x7f0000000480)=""/40, 0x28}, 0xc3) socket$inet_udplite(0x2, 0x2, 0x88) 18m44.250711407s ago: executing program 0 (id=2513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000580)="f7790066baa00066b86b4276ef66ba420266b813018ee066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a7d3fd", 0x4b}], 0x1, 0xbc989613abadf744, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005f2ab420720c0d009b270102030109021223010000000009e9ffffffdaa292"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7f, 0x8, 0x10, '\x00', 0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket(0x11, 0x10000000000003, 0x0) recvmsg(r7, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000b40)=""/131, 0x83}, {&(0x7f0000000dc0)=""/239, 0xfffffc1f}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x4, &(0x7f0000000480)=""/40, 0x28}, 0xc3) socket$inet_udplite(0x2, 0x2, 0x88) 18m44.110735898s ago: executing program 36 (id=2513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000580)="f7790066baa00066b86b4276ef66ba420266b813018ee066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a7d3fd", 0x4b}], 0x1, 0xbc989613abadf744, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005f2ab420720c0d009b270102030109021223010000000009e9ffffffdaa292"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7f, 0x8, 0x10, '\x00', 0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket(0x11, 0x10000000000003, 0x0) recvmsg(r7, &(0x7f0000000340)={&(0x7f0000000000)=@in6, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000b40)=""/131, 0x83}, {&(0x7f0000000dc0)=""/239, 0xfffffc1f}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x4, &(0x7f0000000480)=""/40, 0x28}, 0xc3) socket$inet_udplite(0x2, 0x2, 0x88) 7m5.68311848s ago: executing program 2 (id=4059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 7m0.144100457s ago: executing program 2 (id=4068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 6m58.33471071s ago: executing program 2 (id=4071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 6m56.408548533s ago: executing program 2 (id=4075): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000000), &(0x7f0000000200)=r0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x1, 0x0, 0x0, 0x16, 0x1c, "aca7bd64c6a4b4e00d96100000001ea89de2b7fb0a0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d00", "90be8b1c55000000000000000000000200000000000000000a00", [0x6]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000880)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) ftruncate(r6, 0x5) 6m55.801656891s ago: executing program 2 (id=4078): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'batadv0\x00', {}, 0x105}) unlink(&(0x7f0000000040)='./file0\x00') syz_clone(0x1008200, &(0x7f0000000080)="de825e0806507ffbb702bc26a892c2b7258850c3654ab2ee9120dec8b450def24aabddae7354d4b19baf9d5627ba5c79c89db874397f9e206b115121284ba9fe342cf3ea5003159b7b9f2636fa39df7ad823f4255a3d3415c3159333718807ab6bbd39b5b5543b74dadb3edb4c7619f0a1ee530593c9bf91d07e8e5f6c5d656e64d77f159a3250ca8a86ef83a270b07f7aa504ed7b130ac177a1465986367856be24265e7615", 0xa6, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="22fbc3dc79b0a3c446db53be50116b2cafed9422efcf5013039be3cdaa28608ab892f9db") socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) 6m50.812618781s ago: executing program 2 (id=4087): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r2, &(0x7f00000001c0), 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x44}, 0x1, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}]}, 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6m35.160065012s ago: executing program 37 (id=4087): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(r2, &(0x7f00000001c0), 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x44}, 0x1, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}]}, 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 37.582839485s ago: executing program 3 (id=5350): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a01"]) 37.493626676s ago: executing program 3 (id=5352): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000bc0)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@numtail}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@obj_role}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) chdir(0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 37.492945006s ago: executing program 3 (id=5355): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d0000002300000004000000020000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 36.570498428s ago: executing program 3 (id=5358): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) 36.556216708s ago: executing program 3 (id=5359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 36.476216189s ago: executing program 3 (id=5363): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x81, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0}) 36.273731992s ago: executing program 38 (id=5363): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x81, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0}) 13.172532116s ago: executing program 9 (id=5647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.017886438s ago: executing program 9 (id=5651): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file\x00', 0x800810, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 12.949285339s ago: executing program 9 (id=5652): r0 = socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) 12.86995063s ago: executing program 9 (id=5653): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1ffffff, 0x0, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {}, {0x0, 0x7, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x53}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x2, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe}]}}) syz_mount_image$fuse(0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@abort}, {@norecovery}, {@nobarrier}]}, 0x3, 0x4cf, &(0x7f0000000680)="$eJzs3c9rXFsdAPDvvUnapE1Nqi5qwVq0khbtTNLYNrioEURXBWvdx5hMQsgkEzKTtglFUvwDBPEXunLlRnAtgvRPEKGgexFRiq/tW7zFe28eM7nTpnkz+UEzmTbz+cDJPefeO/l+zwxzZs69l7kBdK2LETEZET0RcSUihrL1aVZic6vU9nv+7OFMrSRRrd79fxJJtq7xv5JseTp7WH9E/OB7ET9OPh23vL6xOF0sFlazdr6ytJIvr29cXViani/MF5Ynx8duTNycuD4xemh9vfWd//zqZ3/47q2/fv3+v6b+d/kntbQGs23b+9Fc+lprc58xt7reV38uGnojYvUgib/FerL+9HU6EQAA9qX2rfazEfHliHjx205nAwAAALRD9VuD8WESUQUAAACOrTQiBnu2jgXU65GmudzWNbyfj1NpsVSufG2utLY8u3Wt7HD0pXMLxcJodq3wcPQltfZYvf6qfW1HezwizkbEL4YG6u3cTKk42+mDHwAAANAlTtfn/Emay+b/7w9tzf8BAACAY2a40wkAAAAAbWf+DwAAAMdfy/l/0nu0iQAAAADt8P3bt2ul2rj/9ey99bXF0r2rs4XyYm5pbSY3U1pdyc2XSvP13+xb2uv/FUullW/E8tqDfKVQruTL6xtTS6W15cpU/b7eUwX3iQYAAICjd/ZLj/+ZRMTmNwfqpeZEtm0fc/XJ9mYHtFN6sN2TduUBHL2eiHja0+ksgE5wgS90L+fjgT0m9r/c0T7gYQMAAOBtMPKFNzr/73wgvMNM5KF7OfUP3cv5f+hezv9Dlzu59y79rTb87ZBzAQAA2mawXpI01zjpH2may0Wcqd8WoC+ZWygWRiPiMxHxj6G+k7X2WGdTBgAAAAAAAAAAAAAAAAAAAAAAAIB3TrWaRBUAAAA41iLS/ybZjfxHhi4N7jw+cCL5YKi+jIj7v7v76wfTlcrqWG39ey/XV36Trb/WiSMYAAAAwE6NeXpjHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh+n5s4czjXKUcZ9+OyKGm8Xvjf76sv/PQxFx6kUSvdsel0REzyHE33wUEeeaxU9qacVwlsXO+GlEDHQ4/ulDiA/d7HFt/Jls9v5L42J92fz915uVN/X0YqvxL22Mf/Vxrtn4d2afMc4/+VO+ZfxHEed7m48/jfjJG46/P/rhxkarbdXfR4w0/fxJXouVryyt5MvrG1cXlqbnC/OF5fHxsRsTNyeuT4zm5xaKhexv0xg//+JfPt6t/6daxB/eo/+X9tn/j548ePa5XeJf/krz1//cLvFrz/1Xs8+B2vaRRn1zq77dhT/+/cJu/Z9t0f+Xr/9A8/5f3mf/r9z56b/3uSsAcATK6xuL08ViYVVFReX4Ve5kb/QDP7zDAxMAAHDoXn3p73QmAAAAAAAAAAAAAAAAAAAA0L3a/iNkJ1//ZYH+7Y0TR95dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICWPgkAAP//KRzTyw==") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, 0x0, 0x0) 12.745473002s ago: executing program 9 (id=5654): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="638bbf0e863faaaaaaaaaaaa86dd608a37f200072c00fe800000000000000000000000000000aa3a000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000ffff9078"], 0x0) 12.644787593s ago: executing program 9 (id=5655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setresgid(0xee00, 0xee01, 0x0) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000080)='./file1\x00') fsmount(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) unshare(0xc040400) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @none, 0x805}, 0xe) sendmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1094409, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@nodioread_nolock}, {@sysvgroups}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@nodiscard}, {@nolazytime}, {@test_dummy_encryption}]}, 0x0, 0x642, &(0x7f0000001200)="$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") 12.595819544s ago: executing program 39 (id=5655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setresgid(0xee00, 0xee01, 0x0) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000080)='./file1\x00') fsmount(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) unshare(0xc040400) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @none, 0x805}, 0xe) sendmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1094409, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@nodioread_nolock}, {@sysvgroups}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@nodiscard}, {@nolazytime}, {@test_dummy_encryption}]}, 0x0, 0x642, &(0x7f0000001200)="$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") 4.330539692s ago: executing program 7 (id=5792): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 4.309476483s ago: executing program 7 (id=5793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x37a}) 4.254199423s ago: executing program 7 (id=5794): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000100)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_lower}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@fat=@umask={'umask', 0x3d, 0x80000000008}}]}, 0x6, 0x2d3, &(0x7f0000000200)="$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") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 4.168593565s ago: executing program 7 (id=5796): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xf, 0xef, 0x6, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0xb, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x4}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x200, 0x4, 0x8, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4.144465455s ago: executing program 7 (id=5797): syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) 2.527184156s ago: executing program 1 (id=5820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x12011, r0, 0xcc09c000) 2.527105316s ago: executing program 1 (id=5821): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x153) 2.526935476s ago: executing program 1 (id=5822): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000700), 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 1.785794876s ago: executing program 1 (id=5823): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/139, 0xfdef) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x2) getdents64(r3, 0x0, 0x22) 1.779959796s ago: executing program 1 (id=5829): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe2, 0x4, 0x17, 0x10, 0xb95, 0x172a, 0x95b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x66, 0x2, 0x2, 0x62, 0x89, 0x67, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa, 0xfd}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x20, 0x17, 0x6, "5d8a17d60c7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1.48971811s ago: executing program 5 (id=5849): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0xffffffff, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) 631.945601ms ago: executing program 5 (id=5852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000010805"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 573.706992ms ago: executing program 5 (id=5855): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0xfffffffd, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 573.449502ms ago: executing program 8 (id=5856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 573.229852ms ago: executing program 5 (id=5857): setitimer(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='afs_protocol_error\x00', r0, 0x0, 0x8}, 0x18) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 573.136972ms ago: executing program 8 (id=5858): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4f27, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000005}, 0x1c) 545.470122ms ago: executing program 5 (id=5860): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000400)={[{@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_abort}]}, 0x2, 0x535, &(0x7f0000000b40)="$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") ioctl$PTP_EXTTS_REQUEST2(r0, 0x40603d07, &(0x7f00000003c0)) 545.397112ms ago: executing program 8 (id=5861): close(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000400)={0xffffffffffffffff, 0x200, "000002", 0xe, 0xff}) 504.346083ms ago: executing program 8 (id=5862): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$key(0xf, 0x3, 0x2) 484.238063ms ago: executing program 5 (id=5863): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 436.935484ms ago: executing program 8 (id=5864): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 384.481734ms ago: executing program 8 (id=5866): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x0, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpaprt54bC33Nv3X13NUxJZ9vJfk0jKaf1t5eXZiLjRWyXmIuJrX474ZnI8bmf/YGul2WzsluV6t7VT7+wf3N5srWw0NhrbS0uLzy+/sPzc8p2s9J7audDP/PhLn//5p7/1u7t/vvXtvFqf+0hUYqAd56nX9EqxL/ryfbT7MIJNwEzZnsqkKwIAwJnkx/gfjIhPFMf/1ZgpjuYGzEyiZgAAAMB5yb4wH/9OIjIAAADg0kojYj6StFaOBZiPNL1SXhv4cFxPm+1O91Pr7b3ttXxexEJU0vXNZuNOOVZ4ISpJXl4sx9j2y88OlJci4tGI+F71WlGurbabaxO+9gEAAADT4sbA+f8/qmmRP92Q/xMAAAAALq6FkQUAAADgsnDKDwAAAJff4Pm/+/0DAADApfKVl17KU9Z//vXaK/t7W+1Xbq81Olu11t5qbbW9u1PbaLc3inv2tU7bXrPd3vlMbO/dq3cbnW69s39wt9Xe2+7e3XzgEdgAAADAGD368Td+nUTE4WevFSnK+wACPOAPk64AcJ4M9YPp5S7eML0qk64AMHHJKfMN3gEAgPe/mx89/vt///n/rg3A5WasDwBMH7//w/SqGAEIU2u2vAbwgV7x6qjlRv7+/8uzRsqyiDerR6e4vggAAOM1X6QkrZXnAfORprVaxCMR6UJUkvXNZuNOeX7wq2rlal5eLNZMTh0zDAAAAAAAAAAAAAAAAAAAAAAAAAD0ZFkSGQAAAHCpRaR/Soq7+UfcrD49P3h94Eryz2r8sSz88OXv31vpdncX8+l/K57ldSUiuj8opz878vFhAAAAwHlLDkfO6p2nl6+LY60VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFPg7fuvrvbTOOP+5YsRsTAs/mzMFa9zUYmI639PYvbIeklEzJxD/MPXI+KxYfGTeCfLXouyFsPiX3vI8ReKXTM8fhoRN84hPkyzN/L+58Vhn780nixeh3/+Zsv0Xo3u/9Iy8mNFPzes/3nk2NZaQ2M8/tZP671c5Xj81yMenx3e//T732RE/KeObe1fWZYdj/+Nrx8cjGp/9qOIm0O/f5IHYtW7rZ16Z//g9mZrZaOx0dheWlp8fvmF5eeW79TXN5uN8u/QGN/92M/eGRU/b//1IfF/+5te/3tS+58etdEB/3nr3v0P9bLH3oA8/q2nhn7/zsWI+Gn53ffJMp/Pv9nPH/byRz3xkzefOKn9ayP2/2nv/60ztv+Zr37n92dcFAAYg87+wdZKs9nYPSEzd4Zl3o+ZX8xdiGr8j5nstd47d1Hq8/9m8qPVd6f0W3UBKnYkk40l1tXieP6sa10ZU9sn2i0BAAAPwbsH/ZOuCQAAAAAAAAAAAAAAAAAAAEyvcdxKbTDm4WSaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8GAAD//3QT3Gw=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(0x0, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 384.256694ms ago: executing program 4 (id=5868): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4008044}, 0x4004000) 376.373244ms ago: executing program 4 (id=5869): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 324.111965ms ago: executing program 4 (id=5870): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 285.879275ms ago: executing program 4 (id=5871): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000500)='./file2\x00', 0x300001a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$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") fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)=']\\*^#{\x00', 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) 285.692606ms ago: executing program 4 (id=5872): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(0x0) mkdir(0x0, 0x81) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@fat=@flush}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) 285.199715ms ago: executing program 4 (id=5873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) 4.69104ms ago: executing program 1 (id=5874): r0 = socket$packet(0x11, 0xa, 0x300) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 0s ago: executing program 7 (id=5875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xe6ef0001, 0x1000, &(0x7f0000000000/0x1000)=nil}) kernel console output (not intermixed with test programs): 2016.681494][ T452] usb 8-1: device descriptor read/64, error -71 [ 2016.881513][T13960] usb 10-1: device descriptor read/64, error -71 [ 2016.951547][ T452] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 2017.001592][T13960] usb usb10-port1: attempt power cycle [ 2017.101517][ T452] usb 8-1: device descriptor read/64, error -71 [ 2017.391537][ T452] usb 8-1: device descriptor read/64, error -71 [ 2017.411557][T13960] usb 10-1: new full-speed USB device number 63 using dummy_hcd [ 2017.442962][T13960] usb 10-1: device descriptor read/8, error -71 [ 2017.806890][ T452] usb usb8-port1: attempt power cycle [ 2017.874265][T13960] usb 10-1: device descriptor read/8, error -71 [ 2019.121511][ T452] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 2019.636650][ T452] usb 8-1: device not accepting address 53, error -71 [ 2020.609749][T18627] overlayfs: failed to clone upperpath [ 2023.063179][T18651] overlayfs: failed to clone upperpath [ 2023.487801][T18461] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2023.661568][T18461] usb 4-1: device descriptor read/64, error -71 [ 2023.820775][ T452] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 2023.971653][ T452] usb 8-1: device descriptor read/64, error -71 [ 2023.978120][T18461] usb 4-1: device descriptor read/64, error -71 [ 2024.255235][T18461] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 2024.262967][ T452] usb 8-1: device descriptor read/64, error -71 [ 2024.411484][T18461] usb 4-1: device descriptor read/64, error -71 [ 2024.531531][ T452] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 2024.741548][ T452] usb 8-1: device descriptor read/64, error -71 [ 2024.747887][T18461] usb 4-1: device descriptor read/64, error -71 [ 2024.871631][T18461] usb usb4-port1: attempt power cycle [ 2025.021542][ T452] usb 8-1: device descriptor read/64, error -71 [ 2025.141727][ T452] usb usb8-port1: attempt power cycle [ 2025.331668][T18461] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 2025.400133][T18461] usb 4-1: device descriptor read/8, error -71 [ 2025.563278][T18461] usb 4-1: device descriptor read/8, error -71 [ 2025.651476][ T452] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 2025.750587][ T452] usb 8-1: device descriptor read/8, error -71 [ 2025.891792][T18461] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 2025.903112][ T452] usb 8-1: device descriptor read/8, error -71 [ 2025.943390][T18461] usb 4-1: device descriptor read/8, error -71 [ 2026.118782][T18461] usb 4-1: device descriptor read/8, error -71 [ 2026.181681][ T452] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 2026.255777][T18461] usb usb4-port1: unable to enumerate USB device [ 2026.934056][ T452] usb 8-1: device not accepting address 58, error -71 [ 2026.964369][ T452] usb usb8-port1: unable to enumerate USB device [ 2029.097646][ T9967] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2029.531468][ T9967] usb 4-1: Using ep0 maxpacket: 32 [ 2029.538017][ T9967] usb 4-1: config index 0 descriptor too short (expected 8978, got 18) [ 2029.546692][ T9967] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2029.557959][ T9967] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2029.567255][ T9967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.575488][ T9967] usb 4-1: Product: syz [ 2029.579719][ T9967] usb 4-1: Manufacturer: syz [ 2029.584376][ T9967] usb 4-1: SerialNumber: syz [ 2029.589589][ T9967] usb 4-1: config 0 descriptor?? [ 2031.775750][ T9967] usb 4-1: USB disconnect, device number 24 [ 2034.134517][T18844] loop9: detected capacity change from 0 to 256 [ 2035.315069][T18874] loop9: detected capacity change from 0 to 256 [ 2037.524541][T18915] loop7: detected capacity change from 0 to 256 [ 2041.873022][ T290] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 2043.492323][ T290] usb 10-1: device descriptor read/64, error -71 [ 2043.761468][ T290] usb 10-1: device descriptor read/64, error -71 [ 2043.931501][T16810] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 2044.031448][ T290] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 2044.081447][T16810] usb 9-1: device descriptor read/64, error -71 [ 2044.181455][ T290] usb 10-1: device descriptor read/64, error -71 [ 2044.351485][T16810] usb 9-1: device descriptor read/64, error -71 [ 2044.458164][ T290] usb 10-1: device descriptor read/64, error -71 [ 2044.581527][ T290] usb usb10-port1: attempt power cycle [ 2044.621511][T16810] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 2044.791473][T16810] usb 9-1: device descriptor read/64, error -71 [ 2045.117803][T16810] usb 9-1: device descriptor read/64, error -71 [ 2045.612891][T16810] usb usb9-port1: attempt power cycle [ 2045.910687][T19026] loop7: detected capacity change from 0 to 256 [ 2046.061457][T16810] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 2046.102512][T16810] usb 9-1: device descriptor read/8, error -71 [ 2046.252569][T16810] usb 9-1: device descriptor read/8, error -71 [ 2046.548495][T16810] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 2047.052700][T16810] usb 9-1: device not accepting address 54, error -71 [ 2047.061719][T16810] usb usb9-port1: unable to enumerate USB device [ 2050.951568][ T452] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 2051.141463][ T452] usb 10-1: Using ep0 maxpacket: 32 [ 2051.152390][ T452] usb 10-1: config index 0 descriptor too short (expected 8978, got 18) [ 2051.160754][ T452] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2051.171461][T18461] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 2051.198562][ T452] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2051.215028][ T452] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.232493][ T452] usb 10-1: Product: syz [ 2051.240089][ T452] usb 10-1: Manufacturer: syz [ 2051.244979][ T452] usb 10-1: SerialNumber: syz [ 2051.361495][T18461] usb 8-1: Using ep0 maxpacket: 32 [ 2051.372156][ T452] usb 10-1: config 0 descriptor?? [ 2051.379013][T18461] usb 8-1: config index 0 descriptor too short (expected 8978, got 18) [ 2051.426203][T18461] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2051.438808][T18461] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2051.451987][T18461] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.460487][T18461] usb 8-1: Product: syz [ 2051.466139][T18461] usb 8-1: Manufacturer: syz [ 2051.474707][T18461] usb 8-1: SerialNumber: syz [ 2051.512612][T18461] usb 8-1: config 0 descriptor?? [ 2052.134164][T19126] kvm: vcpu 0: requested 104 ns lapic timer period limited to 200000 ns [ 2053.649774][T18461] usb 10-1: USB disconnect, device number 68 [ 2054.685989][T16810] usb 8-1: USB disconnect, device number 59 [ 2057.838602][T19212] overlayfs: failed to resolve './file2': -2 [ 2060.661471][T16810] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 2060.861452][T16810] usb 8-1: Using ep0 maxpacket: 32 [ 2060.868650][T16810] usb 8-1: config index 0 descriptor too short (expected 8978, got 18) [ 2060.895716][T16810] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2060.918439][T16810] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2060.928755][T16810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.946142][T16810] usb 8-1: Product: syz [ 2060.955652][T16810] usb 8-1: Manufacturer: syz [ 2060.965492][T16810] usb 8-1: SerialNumber: syz [ 2060.980610][T16810] usb 8-1: config 0 descriptor?? [ 2064.890754][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4928'. [ 2064.904173][T19307] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2066.042350][ T290] usb 8-1: USB disconnect, device number 60 [ 2068.721469][ T290] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 2068.931437][ T290] usb 8-1: Using ep0 maxpacket: 32 [ 2068.937740][ T290] usb 8-1: config index 0 descriptor too short (expected 8978, got 18) [ 2068.955541][ T290] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2070.315284][ T290] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2070.356536][ T290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.375099][ T290] usb 8-1: Product: syz [ 2070.385186][ T290] usb 8-1: Manufacturer: syz [ 2070.395415][ T290] usb 8-1: SerialNumber: syz [ 2070.405610][ T290] usb 8-1: config 0 descriptor?? [ 2072.250047][ T290] usb 8-1: USB disconnect, device number 61 [ 2081.688385][T19516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4990'. [ 2081.699662][T19516] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2083.456586][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5000'. [ 2083.511282][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5002'. [ 2083.522300][T19561] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2083.930244][T19573] overlayfs: failed to clone upperpath [ 2085.438346][T19601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19601 comm=syz.8.5013 [ 2089.155182][T19645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19645 comm=syz.5.5025 [ 2094.283910][T19702] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5040'. [ 2094.295552][T19702] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2102.421421][T16810] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 2102.611415][T16810] usb 8-1: Using ep0 maxpacket: 32 [ 2102.620822][T16810] usb 8-1: config index 0 descriptor too short (expected 8978, got 18) [ 2102.699687][T16810] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2102.735920][T16810] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2102.766710][T16810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.790588][T16810] usb 8-1: Product: syz [ 2102.803925][T16810] usb 8-1: Manufacturer: syz [ 2102.808557][T16810] usb 8-1: SerialNumber: syz [ 2102.834050][T16810] usb 8-1: config 0 descriptor?? [ 2105.177352][T18461] usb 8-1: USB disconnect, device number 62 [ 2109.436440][ T28] audit: type=1400 audit(1747334151.489:1201): avc: denied { bind } for pid=19869 comm="syz.3.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2111.340315][T19907] overlayfs: failed to clone upperpath [ 2112.231431][T16810] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 2113.351440][T16810] usb 8-1: Using ep0 maxpacket: 32 [ 2113.357736][T16810] usb 8-1: config index 0 descriptor too short (expected 8978, got 18) [ 2113.381508][T16810] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2113.399303][T16810] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2113.449590][T16810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.457981][T16810] usb 8-1: Product: syz [ 2113.471450][T16810] usb 8-1: Manufacturer: syz [ 2113.476189][T16810] usb 8-1: SerialNumber: syz [ 2113.489902][T16810] usb 8-1: config 0 descriptor?? [ 2114.506521][T16810] usb 8-1: can't set config #0, error -71 [ 2114.520279][T16810] usb 8-1: USB disconnect, device number 63 [ 2120.331475][T13960] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2120.531449][T13960] usb 10-1: Using ep0 maxpacket: 32 [ 2120.538180][T13960] usb 10-1: config index 0 descriptor too short (expected 8978, got 18) [ 2120.572838][T13960] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2120.639468][T13960] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2120.648752][T13960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.657165][T13960] usb 10-1: Product: syz [ 2120.661669][T13960] usb 10-1: Manufacturer: syz [ 2120.666432][T13960] usb 10-1: SerialNumber: syz [ 2120.675465][T13960] usb 10-1: config 0 descriptor?? [ 2121.818249][T20072] loop7: detected capacity change from 0 to 256 [ 2122.781708][T16810] usb 10-1: USB disconnect, device number 69 [ 2123.447178][T20099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.454491][T20099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.462286][T20099] device bridge_slave_0 entered promiscuous mode [ 2123.469524][T20099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.477864][T20099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.485716][T20099] device bridge_slave_1 entered promiscuous mode [ 2123.551267][T20099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.558511][T20099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2123.565831][T20099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.572892][T20099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2123.602578][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.610322][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.619006][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2123.629188][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2123.640837][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2123.649408][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.656492][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2123.666171][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2123.674724][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.681805][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2123.698829][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2123.708367][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2123.724446][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2123.737514][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2123.746596][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2123.754846][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2123.811589][T20099] device veth0_vlan entered promiscuous mode [ 2123.827021][T20099] device veth1_macvtap entered promiscuous mode [ 2123.864821][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2123.874234][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2123.883308][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2126.096211][ T290] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2129.581554][ T290] usb 8-1: Using ep0 maxpacket: 32 [ 2129.596287][ T290] usb 8-1: device descriptor read/all, error -71 [ 2130.534580][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5158'. [ 2130.545002][T20164] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2154.661448][ T328] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2157.821959][ T328] usb 8-1: Using ep0 maxpacket: 32 [ 2157.875336][ T328] usb 8-1: device descriptor read/all, error -71 [ 2158.241404][ T9967] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2158.431380][ T9967] usb 9-1: Using ep0 maxpacket: 32 [ 2158.440620][ T9967] usb 9-1: config index 0 descriptor too short (expected 8978, got 18) [ 2158.451495][ T9967] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2158.474021][ T9967] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2158.483476][ T9967] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.493471][ T9967] usb 9-1: Product: syz [ 2158.499529][ T9967] usb 9-1: Manufacturer: syz [ 2158.511394][ T9967] usb 9-1: SerialNumber: syz [ 2158.526568][ T9967] usb 9-1: config 0 descriptor?? [ 2158.681475][T20227] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5171'. [ 2158.699933][T20227] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2160.387111][ T452] usb 9-1: USB disconnect, device number 55 [ 2161.956863][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5186'. [ 2161.982134][T20280] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2172.254848][ T28] audit: type=1400 audit(1747334214.849:1202): avc: denied { bind } for pid=20386 comm="syz.7.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2172.751536][ T28] audit: type=1400 audit(1747334215.349:1203): avc: denied { append } for pid=20394 comm="syz.7.5221" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2172.819792][T20408] device bridge_slave_0 left promiscuous mode [ 2172.826067][T20408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.833924][T20408] device bridge_slave_1 left promiscuous mode [ 2172.840133][T20408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.862508][ T28] audit: type=1400 audit(1747334215.459:1204): avc: denied { read write } for pid=20409 comm="syz.9.5226" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2172.865394][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2172.887262][ T28] audit: type=1400 audit(1747334215.459:1205): avc: denied { open } for pid=20409 comm="syz.9.5226" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2172.894307][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2172.925422][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2172.933369][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2172.941166][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2172.984328][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2172.992288][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.000116][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.010287][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.018133][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.028677][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.039078][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.047320][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.055326][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.063534][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.071558][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.081095][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.089762][T20423] 9pnet_virtio: no channels available for device syz [ 2173.090017][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.104487][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.113221][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.122799][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.130638][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.132594][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.138521][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.146823][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.154212][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.162356][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.169679][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.177665][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.185316][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.193963][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.200774][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.208533][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.216361][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.224003][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.231898][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.239594][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.247397][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.255308][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.262962][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.270688][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.278437][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.287470][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.293957][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.301643][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.309509][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.317203][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.324888][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.333926][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.340626][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.356045][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.360070][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.370134][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.372141][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.381373][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.387398][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.396256][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.403336][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.411956][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.426398][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.432809][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.434312][T16287] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 2173.442303][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.454552][T16287] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2173.458758][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.497110][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.500983][T20432] fido_id[20432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2173.505193][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.526671][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.534986][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.543139][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.550938][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.558878][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.566693][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.574491][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.582290][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.590044][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.597819][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.605603][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.613383][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.621129][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.628968][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.636739][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.644561][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.652353][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.660093][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.667892][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.675653][T16810] hid-generic 0000:007F:FFFFFFFE.0008: unknown main item tag 0x0 [ 2173.685400][T16810] hid-generic 0000:007F:FFFFFFFE.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2173.711410][ T452] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2173.725719][T20440] fido_id[20440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2173.852061][ T28] audit: type=1400 audit(1747334216.449:1206): avc: denied { relabelfrom } for pid=20456 comm="syz.9.5242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2173.872474][ T28] audit: type=1400 audit(1747334216.449:1207): avc: denied { relabelto } for pid=20456 comm="syz.9.5242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2173.923279][ T452] usb 8-1: config 0 has no interfaces? [ 2173.932274][ T452] usb 8-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 2173.941953][ T452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.950171][ T452] usb 8-1: Product: syz [ 2173.954469][ T452] usb 8-1: Manufacturer: syz [ 2173.959085][ T452] usb 8-1: SerialNumber: syz [ 2173.970182][ T452] usb 8-1: config 0 descriptor?? [ 2174.036473][ T28] audit: type=1400 audit(1747334216.629:1208): avc: denied { unlink } for pid=20461 comm="syz.3.5244" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2174.123506][T20476] tmpfs: Unknown parameter 'usrquota' [ 2174.177443][ T452] usb 8-1: USB disconnect, device number 68 [ 2174.191259][ T28] audit: type=1400 audit(1747334216.779:1209): avc: denied { ioctl } for pid=20479 comm="syz.3.5251" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2174.221745][ T28] audit: type=1400 audit(1747334216.809:1210): avc: denied { set_context_mgr } for pid=20479 comm="syz.3.5251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2174.270017][ T28] audit: type=1400 audit(1747334216.809:1211): avc: denied { write } for pid=20479 comm="syz.3.5251" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2174.781135][T20528] kvm: pic: non byte read [ 2174.786258][T20528] kvm: pic: level sensitive irq not supported [ 2174.786341][T20528] kvm: pic: non byte read [ 2174.797288][T20528] kvm: pic: level sensitive irq not supported [ 2174.797344][T20528] kvm: pic: non byte read [ 2174.808269][T20528] kvm: pic: level sensitive irq not supported [ 2174.808330][T20528] kvm: pic: non byte read [ 2174.822069][T20528] kvm: pic: level sensitive irq not supported [ 2174.831130][T20528] kvm: pic: non byte read [ 2174.842322][T20528] kvm: pic: level sensitive irq not supported [ 2174.842376][T20528] kvm: pic: non byte read [ 2174.870591][T20539] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2174.879434][T20539] overlayfs: missing 'lowerdir' [ 2174.887417][T20528] kvm: pic: level sensitive irq not supported [ 2174.887480][T20528] kvm: pic: non byte read [ 2174.901138][T20528] kvm: pic: level sensitive irq not supported [ 2174.901194][T20528] kvm: pic: non byte read [ 2174.981152][T20528] kvm: pic: level sensitive irq not supported [ 2174.981204][T20528] kvm: pic: non byte read [ 2178.656502][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5306'. [ 2178.700732][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5308'. [ 2178.940814][T20643] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2178.967793][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2178.967887][ T28] audit: type=1400 audit(1747334221.529:1220): avc: denied { mounton } for pid=20629 comm="syz.8.5307" path="/570/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2179.050480][T20645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2180.363355][T20654] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5317'. [ 2180.430199][ T28] audit: type=1400 audit(1747334222.999:1221): avc: denied { unmount } for pid=8942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2180.518107][T20666] input: syz1 as /devices/virtual/input/input18 [ 2180.544102][ T28] audit: type=1400 audit(1747334223.109:1222): avc: denied { create } for pid=20649 comm="syz.7.5316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2181.392175][ T9967] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2181.611396][ T9967] usb 10-1: Using ep0 maxpacket: 16 [ 2181.629519][ T9967] usb 10-1: too many configurations: 60, using maximum allowed: 8 [ 2181.801194][ T9967] usb 10-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 2181.811425][ T9967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 2181.819842][ T9967] usb 10-1: Product: syz [ 2181.831759][ T9967] usb 10-1: Manufacturer: syz [ 2181.836652][ T9967] usb 10-1: SerialNumber: syz [ 2182.944883][ T9967] usb 10-1: config 0 descriptor?? [ 2185.378693][T20157] usb 10-1: USB disconnect, device number 70 [ 2186.556738][T20714] loop9: detected capacity change from 0 to 1024 [ 2186.581833][T20714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2186.683521][T20714] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2186.866901][ T28] audit: type=1400 audit(1747334229.459:1223): avc: denied { mounton } for pid=20710 comm="syz.9.5334" path="/565/file1/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2186.931510][ T9967] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 2186.968091][ T9999] EXT4-fs (loop9): unmounting filesystem. [ 2187.010936][ T28] audit: type=1400 audit(1747334229.549:1224): avc: denied { rmdir } for pid=9999 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2187.054648][ T28] audit: type=1400 audit(1747334229.549:1225): avc: denied { unlink } for pid=9999 comm="syz-executor" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2187.081766][ T28] audit: type=1400 audit(1747334229.559:1226): avc: denied { unlink } for pid=9999 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2187.151944][ T9967] usb 8-1: Using ep0 maxpacket: 8 [ 2187.195202][ T9967] usb 8-1: config 0 has no interfaces? [ 2187.228359][ T9967] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2187.295565][ T28] audit: type=1400 audit(1747334229.889:1227): avc: denied { getopt } for pid=20733 comm="syz.9.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2187.305606][ T9967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.345045][T20738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2187.357383][ T9967] usb 8-1: config 0 descriptor?? [ 2187.430942][ T28] audit: type=1400 audit(1747334230.019:1228): avc: denied { ioctl } for pid=20747 comm="syz.8.5349" path="socket:[85382]" dev="sockfs" ino=85382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2187.491514][ T28] audit: type=1400 audit(1747334230.079:1229): avc: denied { read } for pid=20758 comm="syz.5.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2187.639933][T20767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2187.751439][ T9967] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2187.798380][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.807569][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.823044][ T290] usb 8-1: USB disconnect, device number 69 [ 2187.932960][ T9967] usb 9-1: config index 0 descriptor too short (expected 3133, got 61) [ 2187.942020][ T9967] usb 9-1: config 0 has an invalid interface number: 156 but max is 1 [ 2187.950300][ T9967] usb 9-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 2187.960639][ T9967] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2187.969646][ T9967] usb 9-1: config 0 has no interface number 0 [ 2187.975894][ T9967] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2187.986282][ T9967] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 126, changing to 10 [ 2187.997640][ T9967] usb 9-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 17792, setting to 1024 [ 2188.009014][ T9967] usb 9-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2188.022261][ T9967] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2188.032066][ T9967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.045136][ T9967] usb 9-1: config 0 descriptor?? [ 2188.050874][T20757] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2188.062810][ T9967] usb 9-1: MIDIStreaming interface descriptor not found [ 2188.315878][ T452] usb 9-1: USB disconnect, device number 56 [ 2189.131380][T16810] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2189.169090][T20800] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.176650][T20800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.184491][T20800] device bridge_slave_0 entered promiscuous mode [ 2189.191844][T20800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2189.198912][T20800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.206645][T20800] device bridge_slave_1 entered promiscuous mode [ 2189.213330][T20810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2189.255459][T15153] device bridge_slave_1 left promiscuous mode [ 2189.262129][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.270255][T15153] device bridge_slave_0 left promiscuous mode [ 2189.277079][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.285622][T15153] device veth1_macvtap left promiscuous mode [ 2189.291815][T15153] device veth0_vlan left promiscuous mode [ 2189.322865][T16810] usb 10-1: config 0 has no interfaces? [ 2189.330473][T16810] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2189.361490][T16810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.377818][T16810] usb 10-1: Product: syz [ 2189.383632][T16810] usb 10-1: Manufacturer: syz [ 2189.388536][T16810] usb 10-1: SerialNumber: syz [ 2189.396431][T16810] usb 10-1: config 0 descriptor?? [ 2189.669985][T16810] usb 10-1: USB disconnect, device number 71 [ 2190.114324][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2190.123984][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2190.144506][ T28] audit: type=1400 audit(1747334232.739:1230): avc: denied { mounton } for pid=20822 comm="syz.5.5376" path="/51/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 2190.178286][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2190.196566][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2190.205129][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.212204][ T9001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2190.222922][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2190.231645][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2190.239930][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.247032][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.909300][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2190.922034][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2191.284939][T20830] binder: 20826:20830 ioctl 4018620d 0 returned -22 [ 2191.634890][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2191.643281][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2191.651651][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2191.660093][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2191.693295][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2191.705163][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2191.837822][T20800] device veth0_vlan entered promiscuous mode [ 2191.845426][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2191.853149][ T28] audit: type=1400 audit(1747334234.459:1231): avc: denied { shutdown } for pid=20837 comm="syz.7.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2191.853944][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2191.881706][T20848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2191.949506][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2191.960056][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2191.976421][T20800] device veth1_macvtap entered promiscuous mode [ 2192.000698][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2192.009632][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2192.024107][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2192.033648][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2192.242539][T20157] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2192.670427][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5389'. [ 2192.676137][ T28] audit: type=1400 audit(1747334235.259:1232): avc: denied { setattr } for pid=20862 comm="syz.9.5388" name="file0" dev="tmpfs" ino=3267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2192.704632][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5389'. [ 2192.831567][T20157] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2192.927827][T20157] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.936277][T20157] usb 9-1: Product: syz [ 2192.940461][T20157] usb 9-1: Manufacturer: syz [ 2192.945240][T20157] usb 9-1: SerialNumber: syz [ 2192.967531][T20157] usb 9-1: config 0 descriptor?? [ 2192.997419][T20873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2193.023118][T20873] overlayfs: missing 'lowerdir' [ 2194.037409][ T28] audit: type=1326 audit(1747334236.629:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2b8e969 code=0x7ffc0000 [ 2194.097399][ T28] audit: type=1326 audit(1747334236.659:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2b8e969 code=0x7ffc0000 [ 2194.123577][ T28] audit: type=1326 audit(1747334236.659:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc1f2b8e969 code=0x7ffc0000 [ 2194.157734][ T28] audit: type=1326 audit(1747334236.659:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2b8e969 code=0x7ffc0000 [ 2194.211174][ T28] audit: type=1326 audit(1747334236.659:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f2b8e969 code=0x7ffc0000 [ 2194.235759][ T28] audit: type=1326 audit(1747334236.659:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1f2b8d2d0 code=0x7ffc0000 [ 2194.259571][ T28] audit: type=1326 audit(1747334236.659:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc1f2b90197 code=0x7ffc0000 [ 2194.283350][ T28] audit: type=1326 audit(1747334236.659:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1f2b8e969 code=0x7ffc0000 [ 2194.307218][ T28] audit: type=1326 audit(1747334236.659:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20893 comm="syz.9.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc1f2b90197 code=0x7ffc0000 [ 2194.401448][T20157] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2194.481421][T20859] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 2194.491409][T16333] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2194.581464][T20157] usb 10-1: Using ep0 maxpacket: 16 [ 2194.587976][T20157] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.599306][T20157] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.609439][T20157] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2194.622640][T20157] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2194.631876][T20157] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.640640][T20157] usb 10-1: config 0 descriptor?? [ 2194.662656][T20859] usb 6-1: config 0 has an invalid interface number: 233 but max is 0 [ 2194.670911][T20859] usb 6-1: config 0 has no interface number 0 [ 2194.671623][T16333] usb 5-1: Using ep0 maxpacket: 16 [ 2194.677107][T20859] usb 6-1: config 0 interface 233 altsetting 2 has an invalid endpoint with address 0xC7, skipping [ 2194.683824][T16333] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.695079][T20859] usb 6-1: config 0 interface 233 has no altsetting 0 [ 2194.704275][T16333] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 2194.712513][T20859] usb 6-1: New USB device found, idVendor=12d1, idProduct=7386, bcdDevice=5e.33 [ 2194.722445][T16333] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 2194.731695][T20859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.741470][T16333] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2194.749913][T20859] usb 6-1: Product: syz [ 2194.766773][T20859] usb 6-1: Manufacturer: syz [ 2194.771638][T20859] usb 6-1: SerialNumber: syz [ 2194.780379][T20859] usb 6-1: config 0 descriptor?? [ 2194.791375][T16333] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2194.801282][T16333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2194.810681][T16333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2194.819038][T16333] usb 5-1: SerialNumber: syz [ 2194.826696][T20913] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2194.834148][T20913] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2194.928900][ T290] usb 9-1: USB disconnect, device number 57 [ 2195.007571][T20859] usb 6-1: USB disconnect, device number 11 [ 2195.044681][T20913] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2195.052403][T20913] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2195.067171][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.074673][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.082073][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.089425][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.096872][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.104242][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.111932][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.119277][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.126661][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.134039][T20157] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 2195.154265][T20157] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0009/input/input19 [ 2195.237911][T20157] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 2195.264891][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.274974][T20157] usb 10-1: USB disconnect, device number 72 [ 2195.275135][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.301431][ T290] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2195.471451][T16287] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 2195.509053][ T290] usb 9-1: New USB device found, idVendor=13d3, idProduct=3206, bcdDevice=69.02 [ 2195.518447][ T290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.520529][T16333] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 2195.540115][ T290] usb 9-1: Product: syz [ 2195.544568][ T290] usb 9-1: Manufacturer: syz [ 2195.549159][ T290] usb 9-1: SerialNumber: syz [ 2195.652605][T16287] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2195.661858][T16287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.670590][T16287] usb 8-1: config 0 descriptor?? [ 2195.724695][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 68! [ 2195.733716][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 01! [ 2195.744497][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 07! [ 2195.751905][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 09! [ 2195.759611][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 13! [ 2195.769450][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 01! [ 2195.777014][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 06! [ 2195.784414][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 0f! [ 2195.791807][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 1d! [ 2195.799202][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 03! [ 2195.806619][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 03! [ 2195.814271][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification dc! [ 2195.822042][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 3d! [ 2195.829479][ C1] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 03! [ 2195.837092][T20157] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2196.031005][T16287] usb 5-1: USB disconnect, device number 3 [ 2196.037560][T16287] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 2196.047741][T20157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2196.061930][T20157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2196.073419][T20157] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2196.082730][T20157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.090746][T20157] usb 6-1: Product: syz [ 2196.100913][T20157] usb 6-1: Manufacturer: syz [ 2196.105761][T20157] usb 6-1: SerialNumber: syz [ 2196.114679][T20157] usb 6-1: config 0 descriptor?? [ 2196.122319][T20157] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 2196.311402][ T290] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2196.333200][T20157] usb 6-1: USB disconnect, device number 12 [ 2196.491473][ T290] usb 10-1: Using ep0 maxpacket: 16 [ 2196.497736][ T290] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 2196.506049][ T290] usb 10-1: config 0 has no interface number 0 [ 2196.512273][ T290] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2196.522316][ T290] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2196.534026][ T290] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2196.543405][ T290] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.551774][ T290] usb 10-1: Product: syz [ 2196.556069][ T290] usb 10-1: Manufacturer: syz [ 2196.560748][ T290] usb 10-1: SerialNumber: syz [ 2196.566353][ T290] usb 10-1: config 0 descriptor?? [ 2196.572117][T20960] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2196.579431][T20960] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2196.789130][ T290] asix: probe of 10-1:0.251 failed with error -71 [ 2196.798164][ T290] usb 10-1: USB disconnect, device number 73 [ 2196.835307][T21011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.844277][T21011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.951920][T21013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2197.351460][ T290] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 2197.542774][ T290] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 2197.551200][ T290] usb 10-1: config 0 has no interface number 0 [ 2197.559488][ T290] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2197.568757][ T290] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.576959][ T290] usb 10-1: Product: syz [ 2197.581299][ T290] usb 10-1: Manufacturer: syz [ 2197.586173][ T290] usb 10-1: SerialNumber: syz [ 2197.595054][ T290] usb 10-1: config 0 descriptor?? [ 2197.804474][T20960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.817664][T20960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.828217][ T290] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2197.838629][ T290] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2197.848744][ T290] asix: probe of 10-1:0.251 failed with error -5 [ 2197.858910][ T290] usb 10-1: USB disconnect, device number 74 [ 2198.087634][T20859] usb 9-1: USB disconnect, device number 58 [ 2198.217742][T20157] usb 8-1: USB disconnect, device number 70 [ 2198.229885][T16333] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2198.346141][T21029] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 2198.511442][T20859] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2198.654881][T21030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.662187][T21030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.669886][T21030] device bridge_slave_0 entered promiscuous mode [ 2198.677185][T21030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2198.684328][T21030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.691587][T16333] usb 6-1: Using ep0 maxpacket: 32 [ 2198.697948][T21030] device bridge_slave_1 entered promiscuous mode [ 2198.704535][T16333] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 2198.712718][T16333] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 2198.721059][T16333] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2198.730231][T16333] usb 6-1: config 0 has no interface number 0 [ 2198.736486][T16333] usb 6-1: config 0 has no interface number 1 [ 2198.742660][T16333] usb 6-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 2198.753986][T16333] usb 6-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 2198.767550][T16333] usb 6-1: config 0 interface 50 has no altsetting 0 [ 2198.773774][T20859] usb 9-1: Using ep0 maxpacket: 16 [ 2198.774322][T16333] usb 6-1: config 0 interface 164 has no altsetting 0 [ 2198.785656][T20859] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2198.787825][T16333] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 2198.797368][T20859] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2198.806130][T16333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.816574][T20859] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2198.833686][T16333] usb 6-1: Product: syz [ 2198.833708][T16333] usb 6-1: Manufacturer: syz [ 2198.860083][T16333] usb 6-1: SerialNumber: syz [ 2198.862667][T20859] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2198.867189][T16333] usb 6-1: config 0 descriptor?? [ 2198.967586][T20859] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2199.169373][T20859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2199.243758][T20859] usb 9-1: SerialNumber: syz [ 2199.298202][T21030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.305404][T21030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.312722][T21030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.319762][T21030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.328237][T21024] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2199.336624][T21024] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2199.344496][ T1261] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.352384][ T1261] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.376350][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2199.384354][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2199.401939][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2199.410915][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2199.420493][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.427580][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.436009][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2199.445143][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2199.453779][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.460834][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2199.474757][T16333] usb 6-1: USB disconnect, device number 13 [ 2199.493589][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2199.502536][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2199.510658][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2199.519250][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2199.531850][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2199.551642][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2199.574736][T21030] device veth0_vlan entered promiscuous mode [ 2199.584107][T20859] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 2199.584147][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2199.604458][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 2199.604476][ T28] audit: type=1400 audit(1747334242.199:1259): avc: denied { write } for pid=21040 comm="syz.9.5422" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2199.620998][T20859] usb 9-1: USB disconnect, device number 59 [ 2199.641928][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2199.644091][ T28] audit: type=1400 audit(1747334242.239:1260): avc: denied { ioctl } for pid=21040 comm="syz.9.5422" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2199.669555][T21030] device veth1_macvtap entered promiscuous mode [ 2199.702933][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2199.710593][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2199.725651][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2199.734722][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2199.743600][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2199.760327][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2199.769412][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2199.779664][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2199.788804][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2199.845460][T21053] device syzkaller0 entered promiscuous mode [ 2199.961435][T16333] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2200.051392][T20157] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 2200.090036][T21062] overlayfs: failed to resolve './file1': -2 [ 2200.096267][T16810] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 2200.141530][T16333] usb 6-1: Using ep0 maxpacket: 32 [ 2200.150783][T16333] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 2200.160695][T16333] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 2200.168991][T16333] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2200.179884][T16333] usb 6-1: config 0 has no interface number 0 [ 2200.187598][T16333] usb 6-1: config 0 has no interface number 1 [ 2200.194119][T16333] usb 6-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 2200.205747][T16333] usb 6-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 2200.219530][T16333] usb 6-1: config 0 interface 50 has no altsetting 0 [ 2200.226441][T16333] usb 6-1: config 0 interface 164 has no altsetting 0 [ 2200.232527][T20157] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2200.234890][T16333] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 2200.253334][T16333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.261451][T16333] usb 6-1: Product: syz [ 2200.261630][T20157] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2200.265801][T16333] usb 6-1: Manufacturer: syz [ 2200.283037][T16333] usb 6-1: SerialNumber: syz [ 2200.288250][T21068] device syzkaller0 entered promiscuous mode [ 2200.288422][T16333] usb 6-1: config 0 descriptor?? [ 2200.303235][T16810] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2200.307739][T20157] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2200.331402][T16810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.346695][T20157] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2200.350596][T16810] usb 8-1: config 0 descriptor?? [ 2200.366304][T20157] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2200.386534][T20157] usb 10-1: SerialNumber: syz [ 2200.398654][T20157] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 2200.541543][T16333] usb 6-1: USB disconnect, device number 14 [ 2200.607787][T20157] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 2200.682839][T20157] usb 10-1: USB disconnect, device number 75 [ 2200.776734][T16810] usb 8-1: Cannot read MAC address [ 2200.782174][T16810] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 2200.801431][T16810] usb 8-1: USB disconnect, device number 71 [ 2200.863049][T21086] device syzkaller0 entered promiscuous mode [ 2200.957321][T21088] overlayfs: failed to resolve './file1': -2 [ 2201.031384][T16287] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2201.073843][T21093] input: syz0 as /devices/virtual/input/input20 [ 2201.131562][T16333] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2201.231406][T16287] usb 9-1: Using ep0 maxpacket: 16 [ 2201.237799][T16287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.248999][T16287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.259036][T16287] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2201.268292][T16287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.282119][T16287] usb 9-1: config 0 descriptor?? [ 2201.311384][T16333] usb 6-1: Using ep0 maxpacket: 32 [ 2201.317708][T16333] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 2201.336061][T16333] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 2201.354534][T16333] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2201.371379][T16333] usb 6-1: config 0 has no interface number 0 [ 2201.381538][T16333] usb 6-1: config 0 has no interface number 1 [ 2201.397840][T16333] usb 6-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 2201.419422][T16333] usb 6-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 2201.451372][T16333] usb 6-1: config 0 interface 50 has no altsetting 0 [ 2201.451408][T20157] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2201.458230][T16333] usb 6-1: config 0 interface 164 has no altsetting 0 [ 2201.496954][T16333] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 2201.516597][T16333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.526683][T16333] usb 6-1: Product: syz [ 2201.530882][T16333] usb 6-1: Manufacturer: syz [ 2201.546872][T16333] usb 6-1: SerialNumber: syz [ 2201.552495][T16333] usb 6-1: config 0 descriptor?? [ 2201.582460][T21105] loop7: detected capacity change from 0 to 40427 [ 2201.599230][T21105] F2FS-fs (loop7): LFS is not compatible with checkpoint=disable [ 2201.652489][T20157] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2201.662584][T20157] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2201.679832][T20157] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2201.694970][T20157] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2201.705772][T20157] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.714601][T20157] usb 10-1: Product: syz [ 2201.715643][T16287] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 2201.733944][T20157] usb 10-1: Manufacturer: syz [ 2201.738760][T20157] usb 10-1: SerialNumber: syz [ 2201.744240][T16287] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 2201.751865][T16287] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 2201.759096][T16287] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 2201.763106][T16333] usb 6-1: USB disconnect, device number 15 [ 2201.779938][T16287] appleir 0003:05AC:8241.000A: unknown main item tag 0x0 [ 2201.787688][T16287] appleir 0003:05AC:8241.000A: No inputs registered, leaving [ 2201.801837][T16287] appleir 0003:05AC:8241.000A: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 2201.817342][T21116] loop7: detected capacity change from 0 to 256 [ 2201.851154][T21118] loop7: detected capacity change from 0 to 256 [ 2201.873238][T21118] FAT-fs (loop7): Directory bread(block 64) failed [ 2201.881057][T21118] FAT-fs (loop7): Directory bread(block 65) failed [ 2201.888435][T21118] FAT-fs (loop7): Directory bread(block 66) failed [ 2201.895392][T21118] FAT-fs (loop7): Directory bread(block 67) failed [ 2201.902213][T21118] FAT-fs (loop7): Directory bread(block 68) failed [ 2201.910266][T21118] FAT-fs (loop7): Directory bread(block 69) failed [ 2201.917129][T21118] FAT-fs (loop7): Directory bread(block 70) failed [ 2201.924099][T21118] FAT-fs (loop7): Directory bread(block 71) failed [ 2201.930695][T21118] FAT-fs (loop7): Directory bread(block 72) failed [ 2201.941369][T21118] FAT-fs (loop7): Directory bread(block 73) failed [ 2201.980646][T20157] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2202.070296][T21136] loop7: detected capacity change from 0 to 256 [ 2202.081091][T21136] exfat: Deprecated parameter 'utf8' [ 2202.087202][T21136] exfat: Deprecated parameter 'namecase' [ 2202.094413][T21136] exfat: Deprecated parameter 'namecase' [ 2202.101110][T21136] exfat: Deprecated parameter 'utf8' [ 2202.112463][T20157] usb 9-1: USB disconnect, device number 60 [ 2202.113676][T21136] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 2202.139019][ T28] audit: type=1400 audit(1747334244.729:1261): avc: denied { write } for pid=21140 comm="syz.4.5467" name="bus" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2202.169410][ T28] audit: type=1400 audit(1747334244.729:1262): avc: denied { open } for pid=21140 comm="syz.4.5467" path="/40/bus" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2202.204716][ T28] audit: type=1400 audit(1747334244.799:1263): avc: denied { read write } for pid=21102 comm="syz.9.5449" name="lp0" dev="devtmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2202.214765][T16333] usb 10-1: USB disconnect, device number 76 [ 2202.237934][ T28] audit: type=1400 audit(1747334244.799:1264): avc: denied { open } for pid=21102 comm="syz.9.5449" path="/dev/usb/lp0" dev="devtmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2202.413863][ T28] audit: type=1400 audit(1747334245.009:1265): avc: denied { ioctl } for pid=21102 comm="syz.9.5449" path=2F6465762F7573622F6C7030202864656C6574656429 dev="devtmpfs" ino=1818 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2202.414021][T21102] usblp0: removed [ 2202.731449][ T290] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 2202.921392][ T290] usb 8-1: Using ep0 maxpacket: 16 [ 2202.927996][ T290] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2202.936644][ T290] usb 8-1: config 0 has no interface number 0 [ 2202.943075][ T290] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2202.953791][ T290] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2202.966072][ T290] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2202.982508][ T290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.010843][ T290] usb 8-1: Product: syz [ 2203.015586][ T290] usb 8-1: Manufacturer: syz [ 2203.015903][T21173] loop9: detected capacity change from 0 to 512 [ 2203.020254][ T290] usb 8-1: SerialNumber: syz [ 2203.032194][ T290] usb 8-1: config 0 descriptor?? [ 2203.037497][T21146] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2203.045499][T21173] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2203.055538][T21146] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2203.068929][T21173] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5481: bg 0: block 384: padding at end of block bitmap is not set [ 2203.083560][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.090177][T21173] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 2203.099217][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.105799][T21173] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.5481: attempt to clear invalid blocks 983260 len 1 [ 2203.119266][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.125891][T21173] EXT4-fs error (device loop9): __ext4_get_inode_loc:4508: comm syz.9.5481: Invalid inode table block 0 in block_group 0 [ 2203.138975][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.145793][T21173] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 2203.155725][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.162632][T21173] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 2203.171972][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.178607][T21173] EXT4-fs error (device loop9): __ext4_get_inode_loc:4508: comm syz.9.5481: Invalid inode table block 0 in block_group 0 [ 2203.192091][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.198691][T21173] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 2203.208587][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.215310][T21173] EXT4-fs error (device loop9): ext4_truncate:4313: inode #11: comm syz.9.5481: mark_inode_dirty error [ 2203.226830][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.233525][T21173] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 2203.243029][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.249722][T21173] EXT4-fs (loop9): 1 truncate cleaned up [ 2203.255636][T21173] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2203.266110][ T290] asix: probe of 8-1:0.251 failed with error -71 [ 2203.274112][ T290] usb 8-1: USB disconnect, device number 72 [ 2203.289211][ T28] audit: type=1400 audit(1747334245.879:1266): avc: denied { create } for pid=21172 comm="syz.9.5481" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2203.290635][T21173] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.5481: Invalid inode bitmap blk 0 in block_group 0 [ 2203.349532][T21173] EXT4-fs (loop9): Remounting filesystem read-only [ 2203.399947][T21186] overlayfs: failed to resolve './file0': -2 [ 2203.407543][ T9999] EXT4-fs (loop9): unmounting filesystem. [ 2203.481391][T20157] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2203.612079][T21191] loop9: detected capacity change from 0 to 40427 [ 2203.631854][T21200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2203.655707][T21191] F2FS-fs (loop9): fault_injection options not supported [ 2203.667608][T21191] F2FS-fs (loop9): invalid crc value [ 2203.674748][T21191] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2203.708183][T21191] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2203.729882][T20157] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2203.745735][T20157] usb 5-1: config 0 has no interface number 0 [ 2203.752079][T20157] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2203.763199][T20157] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2203.764462][T21191] bio_check_eod: 13087 callbacks suppressed [ 2203.764480][T21191] syz.9.5488: attempt to access beyond end of device [ 2203.764480][T21191] loop9: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2203.774810][T20157] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2203.803762][T20157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.809928][ T9999] syz-executor: attempt to access beyond end of device [ 2203.809928][ T9999] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 2203.836415][T20157] usb 5-1: config 0 descriptor?? [ 2203.861520][ T290] usb 8-1: new full-speed USB device number 73 using dummy_hcd [ 2203.981470][T17198] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2204.030435][T21214] loop9: detected capacity change from 0 to 1024 [ 2204.052593][ T290] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2204.062951][T21214] EXT4-fs: dax option not supported [ 2204.068346][ T290] usb 8-1: config 0 has no interface number 0 [ 2204.076398][ T290] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2204.102749][ T290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.112498][ T290] usb 8-1: Product: syz [ 2204.116732][ T290] usb 8-1: Manufacturer: syz [ 2204.121405][ T290] usb 8-1: SerialNumber: syz [ 2204.125626][T21218] loop9: detected capacity change from 0 to 512 [ 2204.130559][ T290] usb 8-1: config 0 descriptor?? [ 2204.159982][T21218] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2204.161571][T17198] usb 9-1: Using ep0 maxpacket: 8 [ 2204.172414][T21218] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 2204.175420][T17198] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.183201][T21218] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 2204.192194][T17198] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2204.200222][T21218] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2204.209989][T17198] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2204.236901][T17198] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.261398][T17198] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2204.271263][T17198] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2204.275730][T21218] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 2204.285516][T20157] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.000B/input/input21 [ 2204.291575][ T28] audit: type=1400 audit(1747334246.859:1267): avc: denied { remount } for pid=21217 comm="syz.9.5499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2204.322356][T17198] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.334282][T17198] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2204.340646][ T290] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2204.344252][T17198] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2204.373534][ T28] audit: type=1400 audit(1747334246.969:1268): avc: denied { search } for pid=21225 comm="syz.5.5502" name="/" dev="configfs" ino=12981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2204.386429][ T290] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2204.400909][T17198] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2204.407934][ T290] asix: probe of 8-1:0.251 failed with error -5 [ 2204.415614][T17198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.424104][ T290] usb 8-1: USB disconnect, device number 73 [ 2204.429592][ T9999] EXT4-fs (loop9): unmounting filesystem. [ 2204.441140][T20157] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 2204.468480][T17198] usb 9-1: Product: syz [ 2204.473351][T20157] usb 5-1: USB disconnect, device number 4 [ 2204.481758][T17198] usb 9-1: Manufacturer: syz [ 2204.486392][T17198] usb 9-1: SerialNumber: syz [ 2204.532959][T21230] fido_id[21230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2204.607002][T21233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2204.729483][T17198] usb 9-1: USB disconnect, device number 61 [ 2204.803760][T21240] loop9: detected capacity change from 0 to 40427 [ 2204.815125][T21240] F2FS-fs (loop9): Unrecognized mount option "errors=continue" or missing value [ 2204.832407][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2204.832424][ T28] audit: type=1400 audit(1747334247.429:1271): avc: denied { mounton } for pid=21239 comm="syz.9.5508" path="/syzcgroup/unified/syz9/cgroup.procs" dev="cgroup2" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 2205.166558][T21262] loop7: detected capacity change from 0 to 40427 [ 2205.198736][T21262] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 2205.214453][T21262] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2205.222732][ T28] audit: type=1400 audit(1747334247.809:1272): avc: denied { mounton } for pid=21268 comm="syz.4.5521" path="/proc/110/cgroup" dev="proc" ino=87308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2205.249545][T21262] F2FS-fs (loop7): fault_injection options not supported [ 2205.257013][T21262] F2FS-fs (loop7): fault_type options not supported [ 2205.258652][T21257] loop9: detected capacity change from 0 to 40427 [ 2205.263906][ T28] audit: type=1400 audit(1747334247.809:1273): avc: denied { remount } for pid=21268 comm="syz.4.5521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 2205.291172][T21262] F2FS-fs (loop7): invalid crc value [ 2205.298107][T21257] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 2205.312130][T21257] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2205.333285][T21262] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2205.361831][T21257] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2205.420269][T21262] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 2205.429720][T21262] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2205.437419][ T290] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2205.482063][T21257] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2205.498041][T21257] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2205.505744][T21030] syz-executor: attempt to access beyond end of device [ 2205.505744][T21030] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2205.624052][ T290] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 2205.635711][ T290] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.663738][ T290] usb 9-1: config 220 has no interface number 2 [ 2205.691399][ T290] usb 9-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2205.711383][ T290] usb 9-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 2205.741379][ T290] usb 9-1: config 220 interface 0 has no altsetting 0 [ 2205.768436][ T290] usb 9-1: config 220 interface 76 has no altsetting 0 [ 2205.778530][ T290] usb 9-1: config 220 interface 1 has no altsetting 0 [ 2205.813065][T21290] loop9: detected capacity change from 0 to 256 [ 2205.821460][ T290] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2205.851058][T21290] exfat: Deprecated parameter 'namecase' [ 2205.857070][ T290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.872841][T21290] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xc473957f, utbl_chksum : 0xe619d30d) [ 2205.884936][ T290] usb 9-1: Product: syz [ 2205.889116][ T290] usb 9-1: Manufacturer: syz [ 2205.897403][ T290] usb 9-1: SerialNumber: syz [ 2206.028789][T21291] loop7: detected capacity change from 0 to 40427 [ 2206.051642][T21291] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 2206.092942][T21291] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2206.099276][ T28] audit: type=1400 audit(1747334248.689:1274): avc: denied { lock } for pid=21302 comm="syz.4.5532" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2206.126481][ T290] usb 9-1: selecting invalid altsetting 0 [ 2206.141746][ T290] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 2206.148633][ T290] usb 9-1: No valid video chain found. [ 2206.169898][ T290] usb 9-1: USB disconnect, device number 62 [ 2206.209365][T21291] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2206.270961][T21314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2206.376880][T21328] loop7: detected capacity change from 0 to 256 [ 2206.399873][T21328] FAT-fs (loop7): Directory bread(block 64) failed [ 2206.406518][T21328] FAT-fs (loop7): Directory bread(block 65) failed [ 2206.413438][T21328] FAT-fs (loop7): Directory bread(block 66) failed [ 2206.420033][T21328] FAT-fs (loop7): Directory bread(block 67) failed [ 2206.426961][T21328] FAT-fs (loop7): Directory bread(block 68) failed [ 2206.433741][T21328] FAT-fs (loop7): Directory bread(block 69) failed [ 2206.440403][T21328] FAT-fs (loop7): Directory bread(block 70) failed [ 2206.447213][T21328] FAT-fs (loop7): Directory bread(block 71) failed [ 2206.454017][T21328] FAT-fs (loop7): Directory bread(block 72) failed [ 2206.460608][T21328] FAT-fs (loop7): Directory bread(block 73) failed [ 2206.521976][T21339] loop7: detected capacity change from 0 to 128 [ 2206.704450][T21349] loop7: detected capacity change from 0 to 40427 [ 2206.715310][T21349] F2FS-fs (loop7): fault_injection options not supported [ 2206.731724][T21349] F2FS-fs (loop7): invalid crc value [ 2206.738424][T21349] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2206.780096][T21349] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2206.825024][T21349] syz.7.5554: attempt to access beyond end of device [ 2206.825024][T21349] loop7: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 2206.895860][T21349] syz.7.5554: attempt to access beyond end of device [ 2206.895860][T21349] loop7: rw=0, sector=77824, nr_sectors = 128 limit=40427 [ 2206.917429][T21030] syz-executor: attempt to access beyond end of device [ 2206.917429][T21030] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2207.423487][T21377] loop7: detected capacity change from 0 to 1024 [ 2207.444903][T21377] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2207.475406][T21377] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2207.478701][ T28] audit: type=1400 audit(1747334250.069:1275): avc: denied { read } for pid=21375 comm="syz.7.5565" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2207.513909][T21030] EXT4-fs (loop7): unmounting filesystem. [ 2207.541084][T21376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.550325][T21376] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.563699][T21376] device bridge_slave_0 entered promiscuous mode [ 2207.571901][T21376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.578956][T21376] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.586870][T21376] device bridge_slave_1 entered promiscuous mode [ 2207.611371][T16333] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2207.650531][T21376] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.657604][T21376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.664901][T21376] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.671953][T21376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.706494][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.714294][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.726683][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2207.733679][T21395] loop9: detected capacity change from 0 to 16 [ 2207.734565][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2207.751971][T21395] erofs: (device loop9): mounted with root inode @ nid 36. [ 2207.772602][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2207.773831][T21397] loop7: detected capacity change from 0 to 1024 [ 2207.787825][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.794971][ T9001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.802572][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2207.817972][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.818528][T21397] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2207.825087][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.835161][T21401] loop9: detected capacity change from 0 to 256 [ 2207.841830][T16333] usb 6-1: Using ep0 maxpacket: 32 [ 2207.854796][T16333] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 2207.864277][T15153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2207.877734][T16333] usb 6-1: config 0 has no interface number 0 [ 2207.882281][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2207.893115][T16333] usb 6-1: config 0 interface 230 has no altsetting 0 [ 2207.909247][T20117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2207.918228][T21030] EXT4-fs (loop7): unmounting filesystem. [ 2207.927787][T16333] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 2207.942084][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2207.958494][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2207.968284][T16333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.979153][T21404] loop9: detected capacity change from 0 to 256 [ 2207.985883][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2207.993392][T16333] usb 6-1: Product: syz [ 2207.997965][T21404] exfat: Deprecated parameter 'utf8' [ 2208.003630][T16333] usb 6-1: Manufacturer: syz [ 2208.010926][T16333] usb 6-1: SerialNumber: syz [ 2208.017858][T21376] device veth0_vlan entered promiscuous mode [ 2208.020793][T21404] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 2208.026016][T16333] usb 6-1: config 0 descriptor?? [ 2208.052197][T21376] device veth1_macvtap entered promiscuous mode [ 2208.059369][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2208.081543][T16333] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 2208.092240][T16333] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 2208.104642][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2208.130477][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2208.321038][T21433] input: syz0 as /devices/virtual/input/input22 [ 2208.333087][ T8] device bridge_slave_0 left promiscuous mode [ 2208.352610][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.446567][T21424] loop7: detected capacity change from 0 to 40427 [ 2208.470243][T21424] F2FS-fs (loop7): fault_injection options not supported [ 2208.478666][T21424] F2FS-fs (loop7): invalid crc value [ 2208.495454][T21424] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2208.531580][T21424] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2208.672450][T21424] syz.7.5581: attempt to access beyond end of device [ 2208.672450][T21424] loop7: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 2208.693937][T21424] syz.7.5581: attempt to access beyond end of device [ 2208.693937][T21424] loop7: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 2208.724613][T21424] syz.7.5581: attempt to access beyond end of device [ 2208.724613][T21424] loop7: rw=2049, sector=57344, nr_sectors = 9544 limit=40427 [ 2208.761762][T21424] syz.7.5581: attempt to access beyond end of device [ 2208.761762][T21424] loop7: rw=2049, sector=66888, nr_sectors = 10936 limit=40427 [ 2208.786424][T21424] syz.7.5581: attempt to access beyond end of device [ 2208.786424][T21424] loop7: rw=2049, sector=81920, nr_sectors = 3816 limit=40427 [ 2208.859294][T21030] syz-executor: attempt to access beyond end of device [ 2208.859294][T21030] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 2209.041525][T21476] loop7: detected capacity change from 0 to 512 [ 2209.048476][T21476] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2209.060040][T21476] EXT4-fs (loop7): 1 truncate cleaned up [ 2209.066331][T21476] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2209.080326][ T28] audit: type=1400 audit(1747334251.669:1276): avc: denied { map } for pid=21475 comm="syz.7.5604" path="/35/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2209.104235][T21030] EXT4-fs (loop7): unmounting filesystem. [ 2209.214064][T21481] loop7: detected capacity change from 0 to 40427 [ 2209.222714][T21481] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 2209.232280][T21481] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2209.263561][T21481] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2209.294170][T21481] F2FS-fs (loop7): Unrecognized mount option "index=on" or missing value [ 2209.380966][ T28] audit: type=1400 audit(1747334251.969:1277): avc: denied { ioctl } for pid=21487 comm="syz.8.5608" path="/14/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2209.486145][T21441] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.493287][T21441] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.500762][T21441] device bridge_slave_0 entered promiscuous mode [ 2209.508503][T21441] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.515683][T21441] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.523352][T21441] device bridge_slave_1 entered promiscuous mode [ 2209.636731][T21441] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.643825][T21441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.651139][T21441] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.658215][T21441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.687133][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2209.694988][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.703160][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.724096][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2209.733204][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.740261][ T9001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.747964][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2209.757622][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.764724][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.772158][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2209.788099][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2209.801244][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2209.815201][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2209.823850][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2209.831462][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2209.839654][T21441] device veth0_vlan entered promiscuous mode [ 2209.851660][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2209.860935][T21441] device veth1_macvtap entered promiscuous mode [ 2209.871231][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2209.885147][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2209.925037][T21528] loop9: detected capacity change from 0 to 256 [ 2209.943874][T21528] FAT-fs (loop9): Directory bread(block 64) failed [ 2209.950495][T21528] FAT-fs (loop9): Directory bread(block 65) failed [ 2209.957440][T21528] FAT-fs (loop9): Directory bread(block 66) failed [ 2209.964083][T21528] FAT-fs (loop9): Directory bread(block 67) failed [ 2209.970750][T21528] FAT-fs (loop9): Directory bread(block 68) failed [ 2209.977656][T21528] FAT-fs (loop9): Directory bread(block 69) failed [ 2209.984476][T21528] FAT-fs (loop9): Directory bread(block 70) failed [ 2209.991094][T21528] FAT-fs (loop9): Directory bread(block 71) failed [ 2209.997731][T21528] FAT-fs (loop9): Directory bread(block 72) failed [ 2210.004405][T21528] FAT-fs (loop9): Directory bread(block 73) failed [ 2210.203693][ T9967] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2210.261396][T20157] usb 8-1: new full-speed USB device number 74 using dummy_hcd [ 2210.391389][ T9967] usb 9-1: Using ep0 maxpacket: 16 [ 2210.397615][ T9967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2210.408650][ T9967] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2210.418437][ T9967] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2210.427685][ T9967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.434040][T21561] loop9: detected capacity change from 0 to 128 [ 2210.440800][ T9967] usb 9-1: config 0 descriptor?? [ 2210.444016][T20157] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2210.462240][T21561] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2210.469900][T20157] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2210.471164][T21561] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2210.481572][T20157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.499910][T20157] usb 8-1: Product: syz [ 2210.506170][T20157] usb 8-1: Manufacturer: syz [ 2210.510865][T20157] usb 8-1: SerialNumber: syz [ 2210.542088][T16333] ums-usbat: probe of 6-1:0.230 failed with error -5 [ 2210.550528][T16333] usb 6-1: USB disconnect, device number 16 [ 2210.919788][T20157] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2211.038626][ T9967] usbhid 9-1:0.0: can't add hid device: -71 [ 2211.044843][ T9967] usbhid: probe of 9-1:0.0 failed with error -71 [ 2211.056839][ T9967] usb 9-1: USB disconnect, device number 63 [ 2211.278976][T21576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.287642][T21576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.351711][T16333] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2211.552583][T16333] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.571504][T16333] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2211.591525][T16333] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2211.615804][T16333] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2211.633567][T16333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.642518][T16333] usb 6-1: Product: syz [ 2211.646775][T16333] usb 6-1: Manufacturer: syz [ 2211.652595][T16333] usb 6-1: SerialNumber: syz [ 2211.701207][T21441] EXT4-fs (loop9): unmounting filesystem. [ 2211.773640][T21592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5643'. [ 2211.803133][T21592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21592 comm=syz.4.5643 [ 2211.863864][T21575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2211.884107][T21575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2211.993831][T21607] loop9: detected capacity change from 0 to 128 [ 2212.013715][T21607] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2212.022543][T21607] ext4 filesystem being mounted at /17/file supports timestamps until 2038-01-19 (0x7fffffff) [ 2212.054560][T21441] EXT4-fs (loop9): unmounting filesystem. [ 2212.073137][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.101096][T21613] loop9: detected capacity change from 0 to 512 [ 2212.123605][T21613] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2212.133056][T21613] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2212.156529][ T28] audit: type=1400 audit(1747334254.749:1278): avc: denied { mounton } for pid=21612 comm="syz.9.5653" path="/19/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2212.179789][ T28] audit: type=1400 audit(1747334254.749:1279): avc: denied { map } for pid=21612 comm="syz.9.5653" path="/19/file0/bus" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2212.182416][T21613] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Out of memory [ 2212.214638][T21613] EXT4-fs error (device loop9): ext4_dirty_inode:6091: inode #2: comm syz.9.5653: mark_inode_dirty error [ 2212.304167][T21441] EXT4-fs (loop9): unmounting filesystem. [ 2212.310488][T21441] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Out of memory [ 2212.319811][T21441] EXT4-fs error (device loop9): ext4_quota_off:7078: inode #3: comm syz-executor: mark_inode_dirty error [ 2212.331977][T21441] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5887: Out of memory [ 2212.341162][T21441] EXT4-fs error (device loop9): ext4_quota_off:7078: inode #4: comm syz-executor: mark_inode_dirty error [ 2212.515833][T21617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.522986][T21617] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.530533][T21617] device bridge_slave_0 entered promiscuous mode [ 2212.537768][T21617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.544845][T21617] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.552688][T21617] device bridge_slave_1 entered promiscuous mode [ 2212.579883][T21575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2212.587281][T21575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2212.627304][T21617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.634379][T21617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2212.641686][T21617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.648735][T21617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2212.715679][T21617] device veth0_vlan entered promiscuous mode [ 2212.736553][T21617] device veth1_macvtap entered promiscuous mode [ 2212.755426][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2212.763235][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2212.771970][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2212.781279][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2212.789908][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2212.798976][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2212.799299][T16333] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2212.807816][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2212.821003][T16333] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2212.822125][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2212.828695][T16333] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 2212.837809][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2212.851634][ C0] usblp0: nonzero write bulk status received: -71 [ 2212.856760][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2212.859230][T16810] usb 8-1: USB disconnect, device number 74 [ 2212.872506][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2212.875892][T21507] usblp0: removed [ 2212.887100][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2212.972691][ T8] device bridge_slave_1 left promiscuous mode [ 2212.979015][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.987271][ T8] device bridge_slave_0 left promiscuous mode [ 2212.993665][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.001169][T16333] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 2213.007576][ T8] device veth1_macvtap left promiscuous mode [ 2213.019875][ T8] device veth0_vlan left promiscuous mode [ 2213.156065][T16333] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2213.169162][T16333] usb 6-1: USB disconnect, device number 17 [ 2213.177935][T16333] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 2213.416478][T21666] loop7: detected capacity change from 0 to 256 [ 2213.641463][T20157] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2213.711527][T16810] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 2213.831429][T20157] usb 2-1: Using ep0 maxpacket: 8 [ 2213.837611][T20157] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2213.845914][T20157] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.856084][T20157] usb 2-1: config 0 has no interface number 0 [ 2213.862424][T20157] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2213.873428][T20157] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2213.886356][T20157] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2213.893922][T20157] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2213.903044][T20157] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2213.904163][T16810] usb 8-1: Using ep0 maxpacket: 16 [ 2213.911129][T20157] usb 2-1: Manufacturer: syz [ 2213.929398][T16810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.930081][T20157] usb 2-1: config 0 descriptor?? [ 2213.951482][T16810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.963738][T16810] usb 8-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 2213.973576][T16810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.984470][T16810] usb 8-1: config 0 descriptor?? [ 2214.395290][T16810] wacom 0003:056A:00ED.000C: unknown main item tag 0x0 [ 2214.402338][T16810] wacom 0003:056A:00ED.000C: unknown main item tag 0x0 [ 2214.409275][T16810] wacom 0003:056A:00ED.000C: unknown main item tag 0x0 [ 2214.416940][T16810] wacom 0003:056A:00ED.000C: unknown main item tag 0x0 [ 2214.426953][T16810] wacom 0003:056A:00ED.000C: unknown main item tag 0x0 [ 2214.435989][T16810] wacom 0003:056A:00ED.000C: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.7-1/input0 [ 2214.620307][T16810] usb 8-1: USB disconnect, device number 75 [ 2214.851470][T16287] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2215.031404][T16287] usb 9-1: Using ep0 maxpacket: 8 [ 2215.040061][T16287] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 2215.049494][T16287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.057743][T16287] usb 9-1: Product: syz [ 2215.062200][T16287] usb 9-1: Manufacturer: syz [ 2215.067001][T16287] usb 9-1: SerialNumber: syz [ 2215.075692][T16287] usb 9-1: config 0 descriptor?? [ 2215.233856][T21769] loop7: detected capacity change from 0 to 512 [ 2215.286301][T21769] EXT4-fs (loop7): orphan cleanup on readonly fs [ 2215.297677][T21769] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #3: comm syz.7.5717: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 2215.318197][T21769] EXT4-fs error (device loop7): ext4_quota_enable:6983: comm syz.7.5717: Bad quota inode: 3, type: 0 [ 2215.323659][T16287] usb 9-1: USB disconnect, device number 64 [ 2215.362070][T21769] EXT4-fs warning (device loop7): ext4_enable_quotas:7024: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2215.419408][T21769] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 2215.426553][T21769] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 2215.456447][T21769] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 2215.544165][T21769] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #3: comm syz.7.5717: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 2215.562436][T21769] EXT4-fs error (device loop7): ext4_quota_enable:6983: comm syz.7.5717: Bad quota inode: 3, type: 0 [ 2215.574176][T21769] EXT4-fs warning (device loop7): ext4_enable_quotas:7024: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2215.599385][T21030] EXT4-fs (loop7): unmounting filesystem. [ 2215.615985][T21779] loop7: detected capacity change from 0 to 1024 [ 2215.623026][T21779] EXT4-fs: Ignoring removed nobh option [ 2215.628814][T21779] EXT4-fs: Ignoring removed bh option [ 2215.639951][T21779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2215.663183][T21779] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 2215.690354][T21779] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.5720: Allocating blocks 481-513 which overlap fs metadata [ 2215.706193][T21779] EXT4-fs (loop7): pa ffff88811494f1f8: logic 128, phys. 257, len 16 [ 2215.714435][T21779] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 2 [ 2215.738269][T21030] EXT4-fs (loop7): unmounting filesystem. [ 2215.802403][T21797] loop7: detected capacity change from 0 to 512 [ 2215.813366][T21797] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 2215.822692][T21797] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2215.852252][T21030] EXT4-fs (loop7): unmounting filesystem. [ 2215.879921][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5728'. [ 2215.888992][T21802] device lo entered promiscuous mode [ 2215.936813][ T28] audit: type=1400 audit(1747334258.529:1280): avc: denied { load_policy } for pid=21804 comm="syz.7.5729" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2215.937250][T21807] SELinux: failed to load policy [ 2217.637885][T21815] loop7: detected capacity change from 0 to 128 [ 2217.742722][T21834] overlayfs: missing 'lowerdir' [ 2217.800889][T21840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21840 comm=syz.8.5742 [ 2217.813807][T21840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21840 comm=syz.8.5742 [ 2217.961489][T16810] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2218.057152][T21869] overlayfs: missing 'lowerdir' [ 2218.152491][T16810] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.165909][T16810] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.183351][T16810] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2218.196234][T16810] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2218.210002][T21879] netlink: 'syz.1.5757': attribute type 13 has an invalid length. [ 2218.210327][T16157] usb 2-1: USB disconnect, device number 3 [ 2218.227366][T21879] gretap0: refused to change device tx_queue_len [ 2218.231757][T16810] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2218.241757][T21879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2218.250527][T16810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.286608][T16810] usb 8-1: Product: syz [ 2218.291040][T16810] usb 8-1: Manufacturer: syz [ 2218.295880][T16810] usb 8-1: SerialNumber: syz [ 2218.424208][ T28] audit: type=1400 audit(1747334261.019:1281): avc: denied { accept } for pid=21888 comm="syz.5.5762" path="socket:[91437]" dev="sockfs" ino=91437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.487467][T21893] overlayfs: missing 'lowerdir' [ 2218.841665][T21909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2219.553272][T21916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5771'. [ 2219.634317][T21929] overlayfs: missing 'lowerdir' [ 2219.851386][T16287] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 2219.870434][ T28] audit: type=1400 audit(1747334262.459:1282): avc: denied { getopt } for pid=21941 comm="syz.8.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2219.910620][ T28] audit: type=1400 audit(1747334262.499:1283): avc: denied { accept } for pid=21945 comm="syz.8.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2219.930742][T16157] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2219.938659][ T9967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2219.998573][T21954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2220.007424][T21954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2220.042615][T16287] usb 5-1: config 0 has no interfaces? [ 2220.049166][T16287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2220.058528][T16287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2220.066589][T16287] usb 5-1: SerialNumber: syz [ 2220.072000][T16287] usb 5-1: config 0 descriptor?? [ 2220.121400][T16157] usb 6-1: Using ep0 maxpacket: 8 [ 2220.126569][ T9967] usb 2-1: Using ep0 maxpacket: 32 [ 2220.132656][T16157] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2220.141286][T16810] cdc_ncm 8-1:1.0: bind() failure [ 2220.147245][T16157] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.157442][T16810] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 2220.163949][ T9967] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 2220.172185][T16157] usb 6-1: config 0 has no interface number 0 [ 2220.178380][ T9967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 2220.189482][T16810] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 2220.196135][ T9967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 2220.208115][T16157] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2220.218063][T16810] usb 8-1: USB disconnect, device number 76 [ 2220.224044][T16157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.233055][T16157] usb 6-1: Product: syz [ 2220.237837][T16157] usb 6-1: Manufacturer: syz [ 2220.242540][T16157] usb 6-1: SerialNumber: syz [ 2220.247931][ T9967] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2220.257297][T16157] usb 6-1: config 0 descriptor?? [ 2220.262386][ T9967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.270440][ T9967] usb 2-1: Product: syz [ 2220.275261][ T9967] usb 2-1: Manufacturer: syz [ 2220.279889][ T9967] usb 2-1: SerialNumber: syz [ 2220.286076][ T9967] usb 2-1: config 0 descriptor?? [ 2220.292129][ T9967] hub 2-1:0.0: bad descriptor, ignoring hub [ 2220.298068][ T9967] hub: probe of 2-1:0.0 failed with error -5 [ 2220.301766][T16287] usb 5-1: USB disconnect, device number 5 [ 2220.311493][T17198] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2220.475491][T16157] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 2220.481943][T16157] usb 6-1: No valid video chain found. [ 2220.501399][T17198] usb 9-1: Using ep0 maxpacket: 16 [ 2220.507808][T17198] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.518245][T17198] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2220.528696][T17198] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2220.537896][T17198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.546069][T17198] usb 9-1: Product: syz [ 2220.550245][T17198] usb 9-1: Manufacturer: syz [ 2220.554902][T17198] usb 9-1: SerialNumber: syz [ 2220.611458][T20157] usb 2-1: USB disconnect, device number 4 [ 2220.759255][T21965] loop7: detected capacity change from 0 to 256 [ 2220.769689][T17198] usb 9-1: 0:2 : does not exist [ 2220.776629][T17198] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2220.798290][T17198] usb 9-1: USB disconnect, device number 65 [ 2220.815101][T20924] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2221.026029][T21979] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2221.034829][T21979] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2221.181490][T16157] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2221.189814][T17198] usb 6-1: USB disconnect, device number 18 [ 2221.238206][T22002] usb usb8: usbfs: process 22002 (syz.5.5810) did not claim interface 7 before use [ 2221.382513][T16157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2221.393536][T16157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2221.403309][T16157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2221.416251][T16157] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2221.425362][T16157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.434552][T16157] usb 5-1: config 0 descriptor?? [ 2221.551449][T20859] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2221.582328][ T9967] usb 8-1: new full-speed USB device number 77 using dummy_hcd [ 2221.732501][T20859] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2221.743547][T20859] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 38365, setting to 1024 [ 2221.754712][T20859] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2221.764769][T20859] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2221.772600][ T9967] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2221.773843][T20859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.782545][ T9967] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2221.790266][T22010] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2221.797696][ T9967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.812903][ T9967] usb 8-1: Product: syz [ 2221.821497][ T9967] usb 8-1: Manufacturer: syz [ 2221.826255][ T9967] usb 8-1: SerialNumber: syz [ 2221.842861][T16157] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 2221.857540][T16157] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2222.032275][T20859] usb 9-1: USB disconnect, device number 66 [ 2222.260387][T20157] usb 5-1: USB disconnect, device number 6 [ 2222.360537][ T9967] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2222.569174][T22036] SELinux: policydb version 0 does not match my version range 15-33 [ 2222.577574][T22036] SELinux: failed to load policy [ 2222.877208][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.890251][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.227617][ T28] audit: type=1400 audit(1747334265.819:1284): avc: denied { mounton } for pid=22064 comm="syz.4.5833" path="/120/file0/file0" dev="ramfs" ino=91951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 2223.331399][T22038] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2223.354550][ T28] audit: type=1400 audit(1747334521.957:1285): avc: denied { watch watch_reads } for pid=22085 comm="syz.4.5843" path="/123/file0" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2223.424776][ T28] audit: type=1400 audit(1747334522.027:1286): avc: denied { transfer } for pid=22095 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2223.601396][T22038] usb 2-1: Using ep0 maxpacket: 16 [ 2223.608389][T22038] usb 2-1: config 1 has an invalid interface number: 102 but max is 0 [ 2223.679892][T22038] usb 2-1: config 1 has no interface number 0 [ 2223.689274][T22038] usb 2-1: config 1 interface 102 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2223.699953][T22038] usb 2-1: config 1 interface 102 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2223.710860][T22038] usb 2-1: config 1 interface 102 has no altsetting 0 [ 2223.720738][T22038] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=95.b5 [ 2223.730569][T22038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.739524][T22038] usb 2-1: Product: syz [ 2223.744382][T22038] usb 2-1: Manufacturer: syz [ 2223.749192][T22038] usb 2-1: SerialNumber: syz [ 2223.764847][T22056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2223.772857][T22056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2224.002933][T22056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2224.018573][T22056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2224.307755][ T28] audit: type=1400 audit(1747334522.907:1287): avc: denied { remount } for pid=22105 comm="syz.8.5850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2224.339504][ T28] audit: type=1400 audit(1747334522.937:1288): avc: denied { unmount } for pid=21376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2224.406395][T22116] input: syz1 as /devices/virtual/input/input26 [ 2224.444916][T22038] asix 2-1:1.102 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2224.458948][ C1] usblp0: nonzero write bulk status received: -71 [ 2224.461704][ T9967] usb 8-1: USB disconnect, device number 77 [ 2224.465582][T22038] asix 2-1:1.102 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2224.477559][ T9967] usblp0: removed [ 2224.487016][T22038] asix: probe of 2-1:1.102 failed with error -71 [ 2224.500146][T22038] usb 2-1: USB disconnect, device number 5 [ 2224.519137][ T28] audit: type=1400 audit(1747334523.117:1289): avc: denied { create } for pid=22129 comm="syz.8.5862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 2224.540353][ T28] audit: type=1400 audit(1747334523.127:1290): avc: denied { write } for pid=22131 comm="syz.5.5863" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2224.602944][ T28] audit: type=1400 audit(1747334523.207:1291): avc: denied { nlmsg_write } for pid=22141 comm="syz.4.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2224.724486][T22148] ------------[ cut here ]------------ [ 2224.730022][T22148] WARNING: CPU: 0 PID: 22148 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 2224.738257][T22148] Modules linked in: [ 2224.742256][T22148] CPU: 0 PID: 22148 Comm: syz.4.5870 Not tainted 6.1.134-syzkaller-00014-g3cd01bb5bd37 #0 [ 2224.752248][T22148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2224.762397][T22148] RIP: 0010:drop_nlink+0xc5/0x110 [ 2224.767576][T22148] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 73 ee f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6b 99 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 2224.787307][T22148] RSP: 0018:ffffc9000314f758 EFLAGS: 00010293 [ 2224.793546][T22148] RAX: ffffffff81c34d65 RBX: ffff8881380bede0 RCX: ffff88812492a880 [ 2224.801635][T22148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2224.809617][T22148] RBP: ffffc9000314f780 R08: 0000000000000004 R09: 0000000000000003 [ 2224.817685][T22148] R10: fffff52000629edc R11: 1ffff92000629edc R12: dffffc0000000000 [ 2224.825691][T22148] R13: 1ffff11027017dc5 R14: ffff8881380bee28 R15: 0000000000000000 [ 2224.833699][T22148] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2224.842663][T22148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2224.849279][T22148] CR2: 0000001b2f214ff8 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 2224.857276][T22148] DR0: 0000000010000007 DR1: 400000000000000c DR2: 000000000000000d [ 2224.865271][T22148] DR3: 00000000000000ff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2224.873266][T22148] Call Trace: [ 2224.876555][T22148] [ 2224.879494][T22148] shmem_rmdir+0x5b/0x90 [ 2224.883766][T22148] vfs_rmdir+0x393/0x500 [ 2224.888020][T22148] incfs_kill_sb+0x105/0x220 [ 2224.892632][T22148] deactivate_locked_super+0xb5/0x120 [ 2224.898017][T22148] deactivate_super+0xaf/0xe0 [ 2224.902723][T22148] cleanup_mnt+0x45f/0x4e0 [ 2224.907156][T22148] ? __kasan_slab_free+0x11/0x20 [ 2224.912126][T22148] __cleanup_mnt+0x19/0x20 [ 2224.916562][T22148] task_work_run+0x1db/0x240 [ 2224.921166][T22148] ? __cfi_task_work_run+0x10/0x10 [ 2224.926304][T22148] ? free_nsproxy+0x21f/0x270 [ 2224.931005][T22148] do_exit+0xa1d/0x2650 [ 2224.935277][T22148] ? finish_task_switch+0x209/0x7b0 [ 2224.940500][T22148] ? __cfi_do_exit+0x10/0x10 [ 2224.945123][T22148] ? timerqueue_del+0xd3/0x120 [ 2224.949906][T22148] ? __remove_hrtimer+0x76/0x3e0 [ 2224.954953][T22148] ? __remove_hrtimer+0x14d/0x3e0 [ 2224.960024][T22148] ? __kasan_check_write+0x14/0x20 [ 2224.965182][T22148] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2224.970227][T22148] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2224.975843][T22148] do_group_exit+0x210/0x2d0 [ 2224.980466][T22148] ? __kasan_check_write+0x14/0x20 [ 2224.985648][T22148] get_signal+0x13b5/0x1520 [ 2224.990185][T22148] arch_do_signal_or_restart+0xb0/0x1030 [ 2224.996123][T22148] ? hrtimer_nanosleep+0x172/0x310 [ 2225.001530][T22148] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 2225.007138][T22148] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 2225.012402][T22148] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2225.018628][T22148] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 2225.024316][T22148] ? do_user_addr_fault+0x9ac/0x1050 [ 2225.029624][T22148] exit_to_user_mode_loop+0x7a/0xb0 [ 2225.034860][T22148] exit_to_user_mode_prepare+0x5a/0xa0 [ 2225.040330][T22148] syscall_exit_to_user_mode+0x1a/0x30 [ 2225.045816][T22148] do_syscall_64+0x58/0xa0 [ 2225.050246][T22148] ? clear_bhb_loop+0x15/0x70 [ 2225.054949][T22148] ? clear_bhb_loop+0x15/0x70 [ 2225.059645][T22148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2225.065587][T22148] RIP: 0033:0x7f6e6afc1225 [ 2225.070047][T22148] Code: Unable to access opcode bytes at 0x7f6e6afc11fb. [ 2225.077097][T22148] RSP: 002b:00007f6e6adfef80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2225.085544][T22148] RAX: fffffffffffffdfc RBX: 00007f6e6b1b5fa0 RCX: 00007f6e6afc1225 [ 2225.093539][T22148] RDX: 00007f6e6adfefc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.101547][T22148] RBP: 00007f6e6b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2225.109538][T22148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2225.117564][T22148] R13: 0000000000000001 R14: 00007f6e6b1b5fa0 R15: 00007ffd05543728 [ 2225.125701][T22148] [ 2225.128736][T22148] ---[ end trace 0000000000000000 ]--- [ 2225.134981][T22148] ================================================================== [ 2225.143069][T22148] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 2225.149345][T22148] Write of size 4 at addr 0000000000000170 by task syz.4.5870/22148 [ 2225.157325][T22148] [ 2225.159647][T22148] CPU: 0 PID: 22148 Comm: syz.4.5870 Tainted: G W 6.1.134-syzkaller-00014-g3cd01bb5bd37 #0 [ 2225.171111][T22148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2225.181166][T22148] Call Trace: [ 2225.184440][T22148] [ 2225.187376][T22148] __dump_stack+0x21/0x24 [ 2225.191727][T22148] dump_stack_lvl+0xee/0x150 [ 2225.196330][T22148] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2225.201361][T22148] ? ihold+0x20/0x60 [ 2225.205278][T22148] ? ihold+0x20/0x60 [ 2225.209172][T22148] print_report+0x3d/0x60 [ 2225.213500][T22148] kasan_report+0x122/0x150 [ 2225.217998][T22148] ? ihold+0x20/0x60 [ 2225.221898][T22148] kasan_check_range+0x280/0x290 [ 2225.226831][T22148] __kasan_check_write+0x14/0x20 [ 2225.231816][T22148] ihold+0x20/0x60 [ 2225.235557][T22148] vfs_rmdir+0x25f/0x500 [ 2225.239796][T22148] incfs_kill_sb+0x105/0x220 [ 2225.244380][T22148] deactivate_locked_super+0xb5/0x120 [ 2225.249772][T22148] deactivate_super+0xaf/0xe0 [ 2225.254447][T22148] cleanup_mnt+0x45f/0x4e0 [ 2225.258878][T22148] ? __kasan_slab_free+0x11/0x20 [ 2225.263817][T22148] __cleanup_mnt+0x19/0x20 [ 2225.268236][T22148] task_work_run+0x1db/0x240 [ 2225.272824][T22148] ? __cfi_task_work_run+0x10/0x10 [ 2225.277931][T22148] ? free_nsproxy+0x21f/0x270 [ 2225.282611][T22148] do_exit+0xa1d/0x2650 [ 2225.286780][T22148] ? finish_task_switch+0x209/0x7b0 [ 2225.292003][T22148] ? __cfi_do_exit+0x10/0x10 [ 2225.296600][T22148] ? timerqueue_del+0xd3/0x120 [ 2225.301371][T22148] ? __remove_hrtimer+0x76/0x3e0 [ 2225.306322][T22148] ? __remove_hrtimer+0x14d/0x3e0 [ 2225.311352][T22148] ? __kasan_check_write+0x14/0x20 [ 2225.316487][T22148] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2225.321515][T22148] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2225.327106][T22148] do_group_exit+0x210/0x2d0 [ 2225.331707][T22148] ? __kasan_check_write+0x14/0x20 [ 2225.336832][T22148] get_signal+0x13b5/0x1520 [ 2225.341345][T22148] arch_do_signal_or_restart+0xb0/0x1030 [ 2225.346989][T22148] ? hrtimer_nanosleep+0x172/0x310 [ 2225.352139][T22148] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 2225.357610][T22148] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 2225.362840][T22148] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2225.369034][T22148] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 2225.374693][T22148] ? do_user_addr_fault+0x9ac/0x1050 [ 2225.380009][T22148] exit_to_user_mode_loop+0x7a/0xb0 [ 2225.385228][T22148] exit_to_user_mode_prepare+0x5a/0xa0 [ 2225.390715][T22148] syscall_exit_to_user_mode+0x1a/0x30 [ 2225.391390][T22104] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2225.396210][T22148] do_syscall_64+0x58/0xa0 [ 2225.396245][T22148] ? clear_bhb_loop+0x15/0x70 [ 2225.412871][T22148] ? clear_bhb_loop+0x15/0x70 [ 2225.417571][T22148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2225.423504][T22148] RIP: 0033:0x7f6e6afc1225 [ 2225.427939][T22148] Code: Unable to access opcode bytes at 0x7f6e6afc11fb. [ 2225.434962][T22148] RSP: 002b:00007f6e6adfef80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2225.443394][T22148] RAX: fffffffffffffdfc RBX: 00007f6e6b1b5fa0 RCX: 00007f6e6afc1225 [ 2225.451389][T22148] RDX: 00007f6e6adfefc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.459382][T22148] RBP: 00007f6e6b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2225.467465][T22148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2225.475459][T22148] R13: 0000000000000001 R14: 00007f6e6b1b5fa0 R15: 00007ffd05543728 [ 2225.480468][T22171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5881'. [ 2225.483451][T22148] [ 2225.483462][T22148] ================================================================== [ 2225.511825][T22148] Disabling lock debugging due to kernel taint [ 2225.518058][T22148] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 2225.525867][T22148] #PF: supervisor write access in kernel mode [ 2225.531919][T22148] #PF: error_code(0x0002) - not-present page [ 2225.537898][T22148] PGD 0 P4D 0 [ 2225.541269][T22148] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2225.546457][T22148] CPU: 0 PID: 22148 Comm: syz.4.5870 Tainted: G B W 6.1.134-syzkaller-00014-g3cd01bb5bd37 #0 [ 2225.557851][T22148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 2225.567900][T22148] RIP: 0010:ihold+0x26/0x60 [ 2225.572414][T22148] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 d1 90 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 c1 [ 2225.592019][T22148] RSP: 0018:ffffc9000314f798 EFLAGS: 00010246 [ 2225.598083][T22148] RAX: ffff88812492a800 RBX: 0000000000000000 RCX: ffff88812492a880 [ 2225.601399][T22104] usb 9-1: Using ep0 maxpacket: 8 [ 2225.606048][T22148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.606066][T22148] RBP: ffffc9000314f7a8 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 2225.606083][T22148] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff8881380bedec [ 2225.613426][ T28] audit: type=1400 audit(1747334524.217:1292): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2225.619145][T22148] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2225.627758][ T28] audit: type=1400 audit(1747334524.217:1293): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2225.635170][T22148] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2225.635193][T22148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2225.635208][T22148] CR2: 0000000000000170 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 2225.635225][T22148] DR0: 0000000010000007 DR1: 400000000000000c DR2: 000000000000000d [ 2225.635239][T22148] DR3: 00000000000000ff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2225.635253][T22148] Call Trace: [ 2225.657801][ T28] audit: type=1400 audit(1747334524.217:1294): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2225.665004][T22148] [ 2225.665016][T22148] vfs_rmdir+0x25f/0x500 [ 2225.665044][T22148] incfs_kill_sb+0x105/0x220 [ 2225.665066][T22148] deactivate_locked_super+0xb5/0x120 [ 2225.687029][T22104] usb 9-1: config 0 has no interfaces? [ 2225.695340][T22148] deactivate_super+0xaf/0xe0 [ 2225.695373][T22148] cleanup_mnt+0x45f/0x4e0 [ 2225.695401][T22148] ? __kasan_slab_free+0x11/0x20 [ 2225.702191][T22104] usb 9-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 2225.709947][T22148] __cleanup_mnt+0x19/0x20 [ 2225.718500][ T28] audit: type=1400 audit(1747334524.217:1295): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2225.725940][T22148] task_work_run+0x1db/0x240 [ 2225.725972][T22148] ? __cfi_task_work_run+0x10/0x10 [ 2225.725995][T22148] ? free_nsproxy+0x21f/0x270 [ 2225.729618][T22104] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.750520][T22148] do_exit+0xa1d/0x2650 [ 2225.750590][T22148] ? finish_task_switch+0x209/0x7b0 [ 2225.750617][T22148] ? __cfi_do_exit+0x10/0x10 [ 2225.750642][T22148] ? timerqueue_del+0xd3/0x120 [ 2225.750668][T22148] ? __remove_hrtimer+0x76/0x3e0 [ 2225.754132][ T28] audit: type=1400 audit(1747334524.217:1296): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2225.757837][T22148] ? __remove_hrtimer+0x14d/0x3e0 [ 2225.767903][T22104] usb 9-1: config 0 descriptor?? [ 2225.773234][T22148] ? __kasan_check_write+0x14/0x20 [ 2225.773272][T22148] ? _raw_spin_lock_irq+0x8f/0xe0 [ 2225.773297][T22148] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2225.773324][T22148] do_group_exit+0x210/0x2d0 [ 2225.917589][T22148] ? __kasan_check_write+0x14/0x20 [ 2225.922706][T22148] get_signal+0x13b5/0x1520 [ 2225.927213][T22148] arch_do_signal_or_restart+0xb0/0x1030 [ 2225.932840][T22148] ? hrtimer_nanosleep+0x172/0x310 [ 2225.937950][T22148] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 2225.943409][T22148] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 2225.948610][T22148] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2225.954799][T22148] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 2225.960427][T22148] ? do_user_addr_fault+0x9ac/0x1050 [ 2225.965708][T22148] exit_to_user_mode_loop+0x7a/0xb0 [ 2225.970921][T22148] exit_to_user_mode_prepare+0x5a/0xa0 [ 2225.976372][T22148] syscall_exit_to_user_mode+0x1a/0x30 [ 2225.981833][T22148] do_syscall_64+0x58/0xa0 [ 2225.986277][T22148] ? clear_bhb_loop+0x15/0x70 [ 2225.990414][T22104] usb 9-1: USB disconnect, device number 67 [ 2225.990968][T22148] ? clear_bhb_loop+0x15/0x70 [ 2226.001544][T22148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2226.007480][T22148] RIP: 0033:0x7f6e6afc1225 [ 2226.011907][T22148] Code: Unable to access opcode bytes at 0x7f6e6afc11fb. [ 2226.018923][T22148] RSP: 002b:00007f6e6adfef80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2226.027342][T22148] RAX: fffffffffffffdfc RBX: 00007f6e6b1b5fa0 RCX: 00007f6e6afc1225 [ 2226.035327][T22148] RDX: 00007f6e6adfefc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2226.043413][T22148] RBP: 00007f6e6b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2226.051474][T22148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2226.059489][T22148] R13: 0000000000000001 R14: 00007f6e6b1b5fa0 R15: 00007ffd05543728 [ 2226.067465][T22148] [ 2226.070513][T22148] Modules linked in: [ 2226.074408][T22148] CR2: 0000000000000170 [ 2226.078558][T22148] ---[ end trace 0000000000000000 ]--- [ 2226.084020][T22148] RIP: 0010:ihold+0x26/0x60 [ 2226.088531][T22148] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 d1 90 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 b0 e5 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 c1 [ 2226.108130][T22148] RSP: 0018:ffffc9000314f798 EFLAGS: 00010246 [ 2226.114193][T22148] RAX: ffff88812492a800 RBX: 0000000000000000 RCX: ffff88812492a880 [ 2226.122191][T22148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2226.130178][T22148] RBP: ffffc9000314f7a8 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 2226.138143][T22148] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff8881380bedec [ 2226.146155][T22148] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2226.154163][T22148] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2226.163091][T22148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2226.169681][T22148] CR2: 0000000000000170 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 2226.177679][T22148] DR0: 0000000010000007 DR1: 400000000000000c DR2: 000000000000000d [ 2226.185648][T22148] DR3: 00000000000000ff DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2226.193615][T22148] Kernel panic - not syncing: Fatal exception [ 2226.199993][T22148] Kernel Offset: disabled [ 2226.204324][T22148] Rebooting in 86400 seconds..