last executing test programs: 26.464571135s ago: executing program 2 (id=1301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000240)=ANY=[], 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000280)={0x6, 0xffff}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) epoll_create1(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) umount2(&(0x7f0000000180)='./file0\x00', 0x500) 25.058290644s ago: executing program 2 (id=1306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2020) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x58, @private2, 0x6}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800090300000000000000e9340000000000000008000a7e305c3ead6c9cf8b6d5c7039805870000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16, @ANYRES32], 0x44}}, 0x0) 23.787345302s ago: executing program 2 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)='}($\x00'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4022) 22.833734693s ago: executing program 2 (id=1319): open(0x0, 0xa182, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x6d, 0x2}, 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000e2f2ce8418bb0c1324924f628a7c49a92c6d917c96ca3f43352c7372dfd0b04335ec4ad70398043556c4733ae4415d1b867454ce532dd7b83be8985e8ab900844ffa2e2511f7bcb92e5a5b3456beaf3124f56caff11005b4", @ANYBLOB="b7ac8d259af324de7883e2a714c9098048fab757c929e74a08b4cc076990acb3526c27e24a93236c8f1f1b99bf48c4ff16fb200132bd9fd01d334366", @ANYBLOB="0000000000000000000000000000000000000000ac10557f1811acaae11fec4a8073a51b251a25b2d498f7cd23e4f78ed1b1253c86390ae2500039deeba33db08d45e7fbb7c2f93f1269e80be897844b2f9815899fe97019050a769a94f920935b0e9f1de4fe76e9f2655e82b86955dfd6d4184839c358d154c0541eae337583fc9505892e004f5fc8c7acdd64481eb6f3465721c75b644582252116062f2bb4200e4dd68f28", @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b00c881acd0b4439f90eed2fa2cc00d2dbffbdeec7c26e0c6c4200000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r4 = getpid() (async) sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r4, 0x6, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000952b41c24466ae5bca5b2116aed03c0dd9d343066a460023ceafe6f24e1952746e527ed3f6e1a310ed69dea4521b0be9e764be6477a2d359b4da91d7491dab23badc73a2638360000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 21.642560194s ago: executing program 2 (id=1322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x67, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000000000600000000005e002200850000006d00180095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000180)) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x5537, &(0x7f0000000300)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2, 0x8, 0x1, 0x9}]}) 21.626797975s ago: executing program 2 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x91002000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 10.552077985s ago: executing program 1 (id=1353): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4333, &(0x7f0000000000), &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 10.550664845s ago: executing program 4 (id=1355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) 9.046520342s ago: executing program 0 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8) write$P9_RLINK(r2, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x57f) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.045998872s ago: executing program 1 (id=1357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000380)={0x0, 0x3000000, 0xa, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="3201000093af0120cc1710107240018100010902120001000000000904000000"], 0x0) 9.045562583s ago: executing program 3 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) finit_module(r5, &(0x7f0000000000)='/dev/loop-control\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000280)=0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, r7, 0x4, r7}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 9.045164812s ago: executing program 4 (id=1359): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0xc00, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x100, 0x148) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000040000000004000e3ffffffffff09ecd5e866", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = dup3(r5, r4, 0x0) sendmsg$key(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020700f2070000000000000000000000050008"], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x0, 0x2}) 7.437760839s ago: executing program 0 (id=1360): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000014001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f0000000080), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020}, 0x2020) getegid() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="180000deffffff00e5f0e643248f483b9bd2204d75db000000633f5f3d8afbaea1f316ff949c1050c1e4ecde230071", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) accept4(r6, 0x0, 0x0, 0x0) 7.437205309s ago: executing program 3 (id=1361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000e554b2a2e38db7d8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028004000500080000003e257215921e3d6a0ee918714dcfd6990ffa8e0a66ac89824adb6ad05f5b1ed89c2b016c67"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0/../file0/file0\x00', 0x0) 7.436813959s ago: executing program 4 (id=1362): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000006000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 5.727324354s ago: executing program 0 (id=1363): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000000000000, 0x6, 0x7fff}) 5.726267084s ago: executing program 1 (id=1364): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x48041) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000002140)={0x0, 0x3ff, 0x0, [0x10000, 0x0, 0x1ff, 0x5, 0x4], [0x40, 0xffff, 0x2, 0x3, 0x6, 0x0, 0x10, 0x200000c, 0x5, 0xffffffffffffffdb, 0x2, 0x5, 0x8, 0x4, 0x1, 0x7ff, 0x9d1, 0x7, 0x2, 0x0, 0x38, 0xf6, 0xcb09, 0x1, 0x2, 0x1, 0xc2, 0x4, 0x3, 0x7, 0x5, 0x10, 0x100000000, 0xfffffffffffff001, 0xc, 0x6, 0x8000, 0x1, 0x80000000, 0x1, 0x53, 0x58f1, 0x0, 0x5, 0x10001, 0x7, 0x1, 0x6, 0x801, 0x1, 0x4, 0x8, 0x4, 0x1, 0xfffffffffffffffb, 0x8, 0x10001, 0x401, 0xa, 0x6, 0x2, 0x7, 0x4, 0x3, 0x10, 0x4e, 0x7fffffff, 0x2, 0x3, 0x2000000000000002, 0x4, 0x7ff, 0x7, 0x4, 0x2, 0x1, 0xf, 0x4, 0x3, 0x105, 0x1, 0x7, 0x400, 0xf, 0x4, 0x8, 0x3, 0x3, 0xffffffffffffc0ba, 0x400, 0x10001, 0x3, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x7, 0x6, 0x4, 0x100000001, 0xfc20, 0x4, 0x7d8, 0x7, 0x3, 0x5, 0x7439f65c, 0x4, 0x100, 0xfb, 0xffff, 0x8, 0x3, 0x8, 0x5, 0xffffffffffffffff, 0x7fff, 0x40, 0x6]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001140)={{r3}, r4, 0x0, @inherit={0x80, &(0x7f0000000280)={0x0, 0x7, 0x2, 0xbd5, {0x10, 0x8, 0x2, 0x400, 0x44e}, [0x7, 0x2, 0x4c3, 0x4c679af4, 0xfff, 0x0, 0x3]}}, @devid=r5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000031c0), 0x12) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a40)={{}, r4, 0x1e, @inherit={0x48, &(0x7f0000000600)={0x1, 0x0, 0x7, 0x8, {0x21, 0x5, 0x0, 0x9, 0x200}}}, @name="864c86819b8f6667fc73f0da575e62b84c67be29c484829851961ad6f4fe7d94e6078d25e6f6c79403648d598b7a1d27465e9b359064d616c5af65398855f12bd753f07c61fef88c999f77e3982f6ddb6436ac4425ca2459290a833eb758025c9fc5761e8056ba3c8cad6515d46ead1fd28738806b5918244a620209310e6d7d8a420cb07c41ee5007537f303a184be985e72516ffeef0986d84dede254e2defae866b62b3da93f93a45986993f035c9c9bfae6b4f54f9d72f4a1564993da63e433599ee25be2819a2f9de0952819e32adcdc0e66631dd795dfe1329557a0ed0af9cb507e1cd7ca3b9f394dd8a231faa1b52cfde31a1d39f2cf046d435d5d0099c057b86a7b2ee66ee1b0bc7bdc5ea14605acd6e357e5bc56bc5b41153e32f96d560b2dac7964ff81a024e95bf5030bc6b35ac70341b5a6c0232f3ad8040408311f861ea8007760f6f4ef6447f74ac0a6cf278dd7f86773d7de9b6e9589291900d9402fa90aac4f57bdb229e256f98a4fde53f09a688385ad33daadf6032ad07a3d93d75696cedd53da273beb2c8db69aa1714274bacbba5472569ec5a54ec7fa98e7f85b9650076a016a150be3dfceaeb87ba4b993cca6bd028fc7821ed92173d3a6506afbcbe4b7d4bea00fd55fe1306e126958555b890f4e2263e6f8ec57e91cb51fbd7f65d957fff0a047d2d8a25d1d588c20df7fbd5aa5a90657ef68476f009689698ab6366a9e4d56d184cce043ee5dfa09ce056b864917f0923fec5b21e1cd3ed16503febb7ae8274590e78e0546090e90131c85ea295b0b95ef44e334c19c1bca6d8278babae505aee30b8e900466d04fc0591fe3e3ede4ef0cfb43256f274146de5ed73b16dc40d47bb4bdef7cbbdc77f1242168b95b1179da2047eac8a0a26ff6e1d3cbe6097365a7e5af3663f0ecdd94082b284a3dcfc14a3f4b3bd9a94752543395544bf08011bc73050b556d3a54fddbf2980245558a8c09a9bb062a53ba153795719363dd1e6cf0c659e76bbd060c7e009ae80551b0e6bd389551392a2d774a6c0e473126157bb774a65b6e151e9c78eca195ddd3053aa1d39ac3c373c9da0f1351b43c42356b4c04e369f74b8ea928292b0bf496faabf8b113ad7d4045ec5faf9b2439bd28bc1307380de033a1ff3ca9ceacad7d8ee68df277c0a6771b67ed4815136723bdd7d9e6a861bf8f25e7978547cf2838630bf3955ee7bcc15b6eb6c7f1a4a069c14dae4148c2461aa92c8ab5939667f17f07751203fa9a6855ece0a5d19da2b7068ce5f6fb459fb3f425adb206fb20e17769b026cebc7298fd55050f1007be75b71c0ae61a6367813fb9d80b63ffaa86194ad573de5b850634f14d33a04a3c37ac840659781f06c4bc4daad4d94c4159e0494d7b03edceb243c4d9c1eab213f07e4ead57ea0693bdd4f931aeee54e606cb5443a20d9e53b9ab6e93d2fe1baae9c6d4f9508c16687d079670cc15d17bbe511e8cbfe889ba52374a8dd00de9ac047c4a8d292f3606d5a5a1656efdbd9820a605040c13ed1dada317c89499cf4cf5405798eb1fd05cc7569b2547fdce29cf03161f48e73efb1919dc1e02138525f9bd3fec4783bcd1c69f60ca4d0119953299ada8d0231601177fbd2b46308bcdad8266858a681cf93a8b6262cacf2ca938964b601ab897515a11869e586cfc00dfd482f8402b259cb2595664f8e30dfcad82b26f305531a4ae5f9e91132230308f01cdf8b4f09a280cf75912a5ed0b6ba601dcdbf12228c166bbae2166cad2bfa701c5e873def4daac564bf0021c2871e53abd89d921934df602188e85fadee4f7b34e695f076ac8b8a787613be533613565c08eb456b66a22924f2be25f89be9a2b41d4e6a74436c05eb55b28b8133b6cfb2973127a6850344cf00d63a62ed3ad9c6d79ba6782022c3a2bf47a2a77a2422ff22b33aed34416a165be76fc2a006f2a4f2b02a2de8a79c23205491e181c1095a5f0ffe4f10d27a2ff1065714ac6bdfebcb4e0de1349b306bc56f9e2edf94c8410690d4b0e9414a268ba87ee364057007032188c78168741b90bd617852473dbc8285727e7e6e821101e669d8367bdeb20f3b8029b5c5dcaea5434b98a21bf9676d00caf9af28de9e7fee4439fb27232e7c3c736b1dcb59c59502861fbc43710b1fca730418dc8016b5b0019da9e39014593a43c99148dafea23e285a564fe4298c237aa8c710da9f4cb1186116b1dc97c29f6c36d7b26603d23f53e90d39ed368bce8c466068a95388735dadc03b9ab98715d291e16353d7e9efbc89c25af01d00f8748cb3bad9ace0ef285d56169271952b74a17505bbd1221d45867e8517db70f038c6d30b1c450121322ba2c885b22cf1025fbd6a2c9185e0e13096b7cb2f2c8c8cdfbb0fccadf40f0b93fd349a42cfb78dda7d5eabfc7a0b84607f5436d2fb91947879130635fbb2f6b4d7ed1a3c81fac1409ae8658eb5d1f8022c6015b940126ce03b2cc0af63084b07727b4161bf14819a8d57df05ca2ce00ecc858cd93028c6e881bfe3c2ab1bd1462cb98ba08f217cccd03e71e76543e1e067810eb6085e8e5e137742c40fd4622b62476bc3b5db2d1d2897866ccaab81cf1c77cea956d4c2f84d436c481a3fed7fe47d564bbec8bdd9f125cd6853aa35e5cc14e773571a2e07704284dcc0489caad83e8ed6b2f06e21173e3350c09e425f71ac739a5ddb96da449e2aad904815e170213a3529da657c32d9f771f78da266e2717b1ce454978863013a2d68c042cf6a707da3cbd204ac017eb28cf497b786b81f34bdf50aa4c21ce77407e3e9cd246772f9288226bf7d1f153626898c947875e1487a4c7f4ad112141756950ce6a46e0b4be0074df3a17c6b97861e02362b9c3bbc47f294c46adcd77d6bad490f44133c8c8ffbb9ef4751f5da74800d94248e6a760e2602a0fb3b524f73cecf1c185b46341df188884324f026e7075a6d04475bafd9c480d5dc450735055b0ee47df63fa54be6c93fdfc4a608014aa15ea9c25589751631cdd6b6723c82195547dfc85c2940ad9be3c0504b40261be8a3f3fabd681bfa2d993632f2dd8001d90059114d43353ac9116e8daaa2fcede432231b5d57c604b621c5e4db2d7fe5543b63a27c2b0332b6e578ebb6d9231c244905295b8e7d9b405fb867db2b927b1df40d9c4b91c9e86aac19c8d7b9972529704baa7f4d6919baec93893c5a3847bcb83641fa94746b4fdf073c3fa59d36763d7d5c3a3b786d942dafb148198c952a95345f377e8bff7f6f42c988d3f87631a98f994a0f88218f31685a572ad62677c16c12a9a7f708e8423ae4a0e10545c6d2487871ff752f5e69c36fe49f89f05262e07f88bd6fed451a6234240c00323c1cb0028319d673acb2c09ea869b41d1ce78b634ef6189792fe9d152859a2c6fa35ae61d613319f3bfaf738920f4ffa7d14053b66811df6274ac2cdb85fa72b82a81cd0dff79a0afcc25eb1f9f2bc3cda6316a171a9168ec28f12ebb24381291b39087889f0821e61be56ba6f939a6cb9cf2244b831416e0a6276f69b2bec31be7d66ba0fe5eea57f45f0b8f28449e03a0ae06ce5b477437e361e6d80ad51c6ea239ba7bc1778c903d84209776d0e5d7945a8edd9dd074a72402e2e63d50e234cb04e5494f47495a3428b293d8fb6e143561101927391aee00d507d917db463baef364d5a23f37753ba554ffcf676112b6a4054c45206c223ffe52f076abd8c277dff1b3bd0af03b2b0f739b190ba4942802fed8e12148f62f403b6791ce9c2b14075f5da5c1c1b378e39ef649b2771e21291f496f404b9277e1ee75e7917aa68815b61ea3f459dcc0390c903bebab60fff9e5c762ade634adc8605bafb3d5d9a84266b2ae7bf485c98468527355cd670fb0264a1ca9d1e01210ea2fb96ae8210adc9dfacd32b6e08409469d41b2cc531178eb4fe4520b8b7edd29a5aef712d125e253dc4abb92d65431bf99b0093a6014dc618d2c04a2faf7cc3f9e39b8932a67e6f037b577847a92ba80a59f6502b18594c99e55edcde42bd0a62e2d5b4e0518f01904ffc8c4c9b74968cd7cac5711bf13031e1cf8e43565af694f5992cec4fa8c67a8f3cbf9aefd2b02e489400e8215bdd369ac6d02f73f4797f0caa06ecf3d11a79fc1733a4c0ca4f5ae1504360831d521e9cd165045d7273d9d16ae0ed432a8a02f30b236223eaee0387e86a690c4800e41e592d8ab82f37b5d603f0f6d2c00221754c9e8b150a7b2f6e6e185a4526e77461437f5246f9ad6edec9fb560c1f5cd878d36ad918f959a0b14a912b9715e82f60caca52b9ca0d4dc87c47af6d4ee86eab984f1d7b159ecc8d162c4c9129ff97e6db3a7bbd782fce3d1c29aee009c5500855deabed0536338d7d074301c9c32835bdc682a92021443546270ea97e145c7fd4035c233275fde72cb5efea32fce644c7400b83b9e2163a2990b095b798ed495a98911b99646e0103f7a532f796a058978732db1e00140356b74c986faf712b0e5c7372fe1eb70fc38b494204d3aded8ec514b11148e1d895b3fe50ba6bad429048b8beb2c16fd0477c0c58847f4f54face47620919f66e457491e70c633cb5ce5ddf3bb068e945904c327702ae90348adb008019c1f54b5830ca9bbb1bc1d17e5eb7e17fe9120a063bdd699d13f2cc7c8d925737e1b81ac8f4f9adf377d26fa56897564a94100b833256af0caa5f998afb9af9021a58c7cb74c6d0b795297ea623961303fd56039af39aa9e26e671ba574e0cdfca731c93b0018f0cba86ffc602bcec23e8af65f620b5926373212a29f8cba49f5cdcfed585ac84d0f6fc091fef4a54f9eb37d16cdd092fe5ccf6bad9389470edf9347098b359e24a2fa12f7d0de305d84285a0a5382cfa6e50895d007ec9f317c60018dc4a3ddd9439423aa79da6189479e20ac9e07cfef81eb4d7cd0d49f13b547b608fc34cbb41fff0f8b1495be191237628a6e2d96ecc543fd0385fed0d4b52f75944c7c4004927caba8682e9ccbd073a2458fb9b4e8eedab8933783bc295459ba7cebf47f08f49f07fef0dfb07c463a68a184320141add7952b9c3021c68e006b14fc7a0517b12e20ac371611a4743189c6e025baedb82cf76cfef86990c172dc20fef1ffb906bbe63a857f8cd9279d597c5a67972dd9fb093ac7b3e599d08b5373a71179a70fa5deaaf2bc08d0e7c25ae619a4ecf14ca6569ccc79b11d7e6df099407cb09cc3acd7c18b3e774d441220c511ce3767e7ca2fcfbd5388517fc85ea031622b4dba428869d3640fd1a67a472d42b38e0fd52ad9eaea845d1a6b5ed8493c4e9d86886e35a71462ef38772349ba00a266c24bbf57a6124671dc1a273ab941bbc5069c366e0c5ff970cef26c3f391f95bf44d83f69396e7de0ad13b24c38f88d096e549b1c49dcef426eebc32901f8f74c038743f402cc3741b9963ca8ad15161a0ea5ea8d64887c6cd12f7845fb602ef107c54262aa8837962a66697ce1f7abc175087afe75cbb5d9e979d47de25cdc5a9ccdf98763c717d6c4badfb8227153148aa4ab6aafa25e0a2f2de097d6a5fec185526e3e68a68cb60aeb408a255ae075a3877625fdbf628cb51bd5708b8ddb26930b2bc77d356b0c73f476db5bc529bf031057c690fa8c16c7db7628c0ac8a89637fcce427f68ead059e7667a0880a019d7f95bcd7df90d3fccee874a619cf4cf955"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") 5.725379294s ago: executing program 3 (id=1365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 5.724603094s ago: executing program 4 (id=1366): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000800001fff0000000000e3c3d6050399d4ce", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0xffdffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffff85bfff25e4d4a69214d1a70a06776285c1a6ffff7f7f26d9688e750fb845d6c7b363e1ff7c60054952e1dc00001000000000005e3fea5352755c19d54e9d0c7d882ec541ac47b71761995d6c08578808c672f76996db93f1307f27a477ec5d0a7b0a6d95f741"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x40818) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x10, &(0x7f0000000880)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "84e84e", 0x0, 0x0, 0x0, @local, @local, {[@dstopts={0x5c, 0x0, '\x00', [@pad1, @generic={0x1, 0x0, "613c8ca8d455480862e444de4be65a59bb422662779f5a790c1438ed78"}]}, @routing={0x3b, 0x0, 0x2, 0xf7, 0x0, [@local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x0, 0x0, 0xe, 0x0, 0x0, 0x5, 0x64}, @fragment={0x5c, 0x0, 0x4, 0x0, 0x0, 0x10, 0x66}, @srh={0x2b, 0x0, 0x4, 0x0, 0x9, 0x20, 0x9, [@empty, @mcast2, @mcast1, @remote, @remote, @mcast2]}]}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000600)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@fat=@check_strict}, {@utf8no}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {}, {@shortname_winnt}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_normal}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@fat=@check_strict}, {@shortname_lower}]}, 0x1, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.918613937s ago: executing program 0 (id=1367): connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 3.917409957s ago: executing program 1 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000002010100000000000000000a0000000600074000000000180002801400018008000100002e24f27a0002000000000004000180040003"], 0x3c}}, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3.914330228s ago: executing program 3 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4333, &(0x7f0000000000), &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 3.913429448s ago: executing program 4 (id=1370): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r5}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) 2.00916668s ago: executing program 0 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x22008800}, 0x24004880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) truncate(&(0x7f00000002c0)='./file0\x00', 0xb1af) 2.00838161s ago: executing program 1 (id=1372): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000014001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f0000000080), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020}, 0x2020) getegid() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="180000deffffff00e5f0e643248f483b9bd2204d75db000000633f5f3d8afbaea1f316ff949c1050c1e4ecde230071", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r6, 0x0, 0x0, 0x0) 2.007880819s ago: executing program 3 (id=1373): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x18, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x48041) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b00)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f00000031c0), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") 2.7682ms ago: executing program 0 (id=1374): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x22}, 0x28) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x4, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="240000011e02995e00000000000000000c00003a00000000000000000500000000000000"], 0x24}], 0x1}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 1.58567ms ago: executing program 1 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000380)={0x0, 0x3000000, 0xa, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="3201000093af0120cc1710107240018100010902120001000000000904000000"], 0x0) 844.459µs ago: executing program 3 (id=1376): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x22}, 0x28) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x4, 0x6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0x100801703) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="240000011e02995e00000000000000000c00003a00000000000000000500000000000000"], 0x24}], 0x1}, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) 0s ago: executing program 4 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)='}($\x00'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', r3}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x40001, 0x0, 0x0, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r7, 0x0) kernel console output (not intermixed with test programs): ing state [ 209.606449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.614363][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.621702][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.643841][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.652931][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.659802][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.667992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.676147][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.683001][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.718157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.768486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.776821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.784295][ T30] audit: type=1404 audit(1728672121.169:2689): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 209.799669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.808001][ T30] audit: type=1404 audit(1728672121.169:2690): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 209.823128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.831715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.839518][ T30] audit: type=1400 audit(1728672121.169:2691): avc: denied { prog_load } for pid=3781 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.868837][ T3773] device veth0_vlan entered promiscuous mode [ 209.976822][ T30] audit: type=1400 audit(1728672121.169:2692): avc: denied { bpf } for pid=3781 comm="syz.1.937" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.999002][ T657] usb 1-1: device descriptor read/64, error -71 [ 210.018395][ T30] audit: type=1400 audit(1728672121.169:2693): avc: denied { perfmon } for pid=3781 comm="syz.1.937" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.028623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.048153][ T30] audit: type=1400 audit(1728672121.199:2694): avc: denied { prog_run } for pid=3781 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 210.067111][ T30] audit: type=1400 audit(1728672121.289:2695): avc: denied { create } for pid=3784 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.087637][ T30] audit: type=1400 audit(1728672121.289:2696): avc: denied { write } for pid=3784 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.111849][ T3773] device veth1_macvtap entered promiscuous mode [ 210.123753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.134754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.257760][ T311] device bridge_slave_1 left promiscuous mode [ 210.476743][ T657] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.482317][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.504346][ T311] device bridge_slave_0 left promiscuous mode [ 210.513618][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.517761][ T3795] loop2: detected capacity change from 0 to 1024 [ 210.532181][ T3795] EXT4-fs (loop2): Unrecognized mount option "obj_user=resuid" or missing value [ 210.542022][ T311] device veth1_macvtap left promiscuous mode [ 210.548288][ T311] device veth0_vlan left promiscuous mode [ 210.688200][ T3804] 9pnet: Insufficient options for proto=fd [ 210.746769][ T657] usb 1-1: device descriptor read/64, error -71 [ 211.058931][ T3814] loop4: detected capacity change from 0 to 512 [ 211.093562][ T3814] EXT4-fs (loop4): 1 truncate cleaned up [ 211.099670][ T3814] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.119462][ T3817] loop3: detected capacity change from 0 to 2048 [ 211.196738][ T657] usb 1-1: device descriptor read/64, error -71 [ 211.217999][ T3817] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.316848][ T657] usb usb1-port1: attempt power cycle [ 211.462604][ T1936] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.474096][ T3827] loop2: detected capacity change from 0 to 2048 [ 211.507348][ T3827] loop2: p3 < > p4 < > [ 211.511434][ T3827] loop2: partition table partially beyond EOD, truncated [ 211.518771][ T3827] loop2: p3 start 4284289 is beyond EOD, truncated [ 211.836772][ T657] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 212.006832][ T1936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.016801][ T657] usb 1-1: device descriptor read/8, error -71 [ 212.022763][ T1936] usb 5-1: config 0 has no interfaces? [ 212.028310][ T1936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.037557][ T1936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.047923][ T1936] usb 5-1: config 0 descriptor?? [ 212.460214][ T3844] 9pnet: Insufficient options for proto=fd [ 212.477365][ T296] usb 5-1: USB disconnect, device number 12 [ 212.506795][ T657] usb 1-1: device descriptor read/8, error -71 [ 212.906719][ T657] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 213.746750][ T657] usb 1-1: device descriptor read/8, error -71 [ 214.317665][ T3868] loop2: detected capacity change from 0 to 2048 [ 214.339117][ T3868] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.379120][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 214.379134][ T30] audit: type=1400 audit(1728672125.769:2748): avc: denied { write } for pid=3865 comm="syz.4.957" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.466798][ T657] usb 1-1: device descriptor read/8, error -71 [ 214.651808][ T657] usb usb1-port1: unable to enumerate USB device [ 214.757846][ T3887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.764897][ T3887] IPv6: NLM_F_CREATE should be set when creating new route [ 214.881528][ T868] udevd[868]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 214.899753][ T30] audit: type=1400 audit(1728672126.219:2749): avc: denied { read } for pid=3879 comm="syz.1.961" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.936792][ T446] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.956135][ T30] audit: type=1400 audit(1728672126.219:2750): avc: denied { open } for pid=3879 comm="syz.1.961" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.983361][ T30] audit: type=1400 audit(1728672126.229:2751): avc: denied { sys_module } for pid=3879 comm="syz.1.961" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 215.005640][ T30] audit: type=1400 audit(1728672126.229:2752): avc: denied { ioctl } for pid=3879 comm="syz.1.961" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 215.787401][ T446] usb 4-1: Using ep0 maxpacket: 32 [ 215.789023][ T30] audit: type=1400 audit(1728672126.729:2753): avc: denied { read } for pid=3891 comm="syz.4.965" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.813828][ T30] audit: type=1400 audit(1728672126.729:2754): avc: denied { open } for pid=3891 comm="syz.4.965" path="net:[4026532376]" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.982317][ T3906] loop4: detected capacity change from 0 to 512 [ 216.026003][ T3906] EXT4-fs (loop4): 1 truncate cleaned up [ 216.031802][ T3906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.046974][ T446] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 216.055823][ T446] usb 4-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 216.068693][ T446] usb 4-1: Product: syz [ 216.072705][ T446] usb 4-1: Manufacturer: syz [ 216.081790][ T446] usb 4-1: config 0 descriptor?? [ 216.325956][ T30] audit: type=1400 audit(1728672127.709:2755): avc: denied { bind } for pid=3917 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.345852][ T446] snd-usb-audio: probe of 4-1:0.0 failed with error -71 [ 216.356623][ T446] usb 4-1: USB disconnect, device number 10 [ 216.366728][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 216.602375][ T3921] loop2: detected capacity change from 0 to 2048 [ 216.656981][ T3921] loop2: p3 < > p4 < > [ 216.660986][ T3921] loop2: partition table partially beyond EOD, truncated [ 216.668145][ T3921] loop2: p3 start 4284289 is beyond EOD, truncated [ 216.726802][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.736786][ T60] usb 5-1: config 0 has no interfaces? [ 216.742024][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.750905][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.759290][ T60] usb 5-1: config 0 descriptor?? [ 216.969204][ T3924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.976227][ T3924] IPv6: NLM_F_CREATE should be set when creating new route [ 217.008888][ T3928] loop3: detected capacity change from 0 to 2048 [ 217.042269][ T60] usb 5-1: USB disconnect, device number 13 [ 217.077995][ T3928] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.320270][ T346] udevd[346]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 218.536727][ T30] audit: type=1400 audit(1728672129.919:2756): avc: denied { integrity } for pid=3954 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 218.576433][ T30] audit: type=1400 audit(1728672129.959:2757): avc: denied { mounton } for pid=3957 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 218.991505][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.097295][ T3969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.104555][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.112216][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.148707][ T3957] device bridge_slave_0 entered promiscuous mode [ 219.229774][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.271405][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.285378][ T3957] device bridge_slave_1 entered promiscuous mode [ 219.389068][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 219.451746][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 219.451760][ T30] audit: type=1400 audit(1728672130.839:2762): avc: denied { create } for pid=3986 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.476792][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.484043][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.497028][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.506267][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.556804][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.563678][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.572889][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.596358][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.616915][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.623753][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.635501][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.656763][ T60] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 219.666658][ T60] usb 5-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 219.675496][ T60] usb 5-1: Product: syz [ 219.679618][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.696726][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.706844][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.720671][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.728983][ T60] usb 5-1: Manufacturer: syz [ 219.734375][ T60] usb 5-1: config 0 descriptor?? [ 219.736731][ T3949] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.752348][ T3957] device veth0_vlan entered promiscuous mode [ 219.765767][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.774878][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.786142][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.794105][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.816034][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.823547][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.831138][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.839397][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.852861][ T3957] device veth1_macvtap entered promiscuous mode [ 219.865326][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.872994][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.881729][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.894088][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.902361][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.937987][ T30] audit: type=1400 audit(1728672131.329:2763): avc: denied { execute } for pid=3993 comm="syz.0.981" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.959076][ T30] audit: type=1400 audit(1728672131.329:2764): avc: denied { execute_no_trans } for pid=3993 comm="syz.0.981" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.996762][ T60] snd-usb-audio: probe of 5-1:0.0 failed with error -71 [ 220.011640][ T60] usb 5-1: USB disconnect, device number 14 [ 220.027269][ T3949] usb 4-1: device descriptor read/64, error -71 [ 220.077551][ T311] device bridge_slave_1 left promiscuous mode [ 220.083481][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.108362][ T311] device bridge_slave_0 left promiscuous mode [ 220.115038][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.125187][ T311] device veth1_macvtap left promiscuous mode [ 220.145143][ T311] device veth0_vlan left promiscuous mode [ 220.576282][ T3949] usb 4-1: device descriptor read/64, error -71 [ 220.580013][ T4007] loop2: detected capacity change from 0 to 2048 [ 220.598528][ T4009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.605581][ T4009] IPv6: NLM_F_CREATE should be set when creating new route [ 220.647697][ T4007] loop2: p3 < > p4 < > [ 220.651944][ T4007] loop2: partition table partially beyond EOD, truncated [ 220.666859][ T4007] loop2: p3 start 4284289 is beyond EOD, truncated [ 220.857038][ T3949] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.819953][ T4036] loop2: detected capacity change from 0 to 2048 [ 221.867791][ T3949] usb 4-1: device descriptor read/64, error -71 [ 221.887304][ T4036] loop2: p3 < > p4 < > [ 221.891323][ T4036] loop2: partition table partially beyond EOD, truncated [ 221.898397][ T4036] loop2: p3 start 4284289 is beyond EOD, truncated [ 222.436855][ T3949] usb 4-1: device descriptor read/64, error -71 [ 222.479405][ T4051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.494261][ T4053] 9pnet: Insufficient options for proto=fd [ 222.766271][ T3949] usb usb4-port1: attempt power cycle [ 223.186706][ T3949] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.266888][ T310] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.312544][ T30] audit: type=1326 audit(1728672134.699:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de97fff9 code=0x7ffc0000 [ 223.356284][ T30] audit: type=1326 audit(1728672134.699:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de97fff9 code=0x7ffc0000 [ 223.381530][ T30] audit: type=1326 audit(1728672134.729:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa3de97fff9 code=0x7ffc0000 [ 223.405039][ T3949] usb 4-1: device descriptor read/8, error -71 [ 223.412043][ T30] audit: type=1326 audit(1728672134.729:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de97fff9 code=0x7ffc0000 [ 223.435969][ T30] audit: type=1326 audit(1728672134.729:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de97fff9 code=0x7ffc0000 [ 225.076796][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 225.421244][ T3949] usb 4-1: device descriptor read/8, error -71 [ 225.656724][ T296] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.706802][ T310] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 225.715889][ T310] usb 1-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 225.723854][ T310] usb 1-1: Product: syz [ 225.727950][ T310] usb 1-1: Manufacturer: syz [ 225.733095][ T310] usb 1-1: config 0 descriptor?? [ 225.737913][ T3949] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.796781][ T310] usb 1-1: can't set config #0, error -71 [ 225.802978][ T310] usb 1-1: USB disconnect, device number 19 [ 225.822799][ T4093] 9pnet: Insufficient options for proto=fd [ 225.866941][ T3949] usb 4-1: device descriptor read/8, error -71 [ 226.170067][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 226.256756][ T3949] usb 4-1: device descriptor read/8, error -71 [ 226.309529][ T4105] loop2: detected capacity change from 0 to 2048 [ 226.327675][ T4105] loop2: p3 < > p4 < > [ 226.331664][ T4105] loop2: partition table partially beyond EOD, truncated [ 226.338678][ T4105] loop2: p3 start 4284289 is beyond EOD, truncated [ 226.386808][ T3949] usb usb4-port1: unable to enumerate USB device [ 226.406758][ T296] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 226.415656][ T296] usb 5-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 226.425230][ T296] usb 5-1: Product: syz [ 226.432566][ T296] usb 5-1: Manufacturer: syz [ 226.441581][ T296] usb 5-1: config 0 descriptor?? [ 226.559348][ T30] audit: type=1326 audit(1728672137.949:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 226.582760][ T30] audit: type=1326 audit(1728672137.949:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 226.606269][ T30] audit: type=1326 audit(1728672137.949:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 226.629659][ T30] audit: type=1326 audit(1728672137.949:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 226.653693][ T30] audit: type=1326 audit(1728672137.949:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4110 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 226.696982][ T296] snd-usb-audio: probe of 5-1:0.0 failed with error -71 [ 226.707776][ T296] usb 5-1: USB disconnect, device number 15 [ 227.459337][ T30] audit: type=1326 audit(1728672138.849:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 227.483565][ T30] audit: type=1326 audit(1728672138.849:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 227.507011][ T30] audit: type=1326 audit(1728672138.849:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 227.534801][ T4130] 9pnet: Insufficient options for proto=fd [ 227.686039][ T4138] loop4: detected capacity change from 0 to 2048 [ 227.924967][ T4142] fuse: Bad value for 'fd' [ 227.932395][ T30] audit: type=1400 audit(1728672139.099:2778): avc: denied { create } for pid=4135 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.088210][ T4138] loop4: p3 < > p4 < > [ 228.099401][ T4138] loop4: partition table partially beyond EOD, truncated [ 228.195793][ T4138] loop4: p3 start 4284289 is beyond EOD, truncated [ 228.752179][ T30] audit: type=1326 audit(1728672140.139:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4153 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 228.824716][ T4160] loop2: detected capacity change from 0 to 4096 [ 228.836554][ T346] udevd[346]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 228.840146][ T4156] loop4: detected capacity change from 0 to 512 [ 228.887049][ T4160] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.175039][ T4166] 9pnet: Insufficient options for proto=fd [ 231.318753][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.327427][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.340844][ T4190] device bridge_slave_0 entered promiscuous mode [ 231.369945][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.383665][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.392307][ T4190] device bridge_slave_1 entered promiscuous mode [ 231.401318][ T4174] loop4: detected capacity change from 0 to 512 [ 231.492206][ T4217] 9pnet: Insufficient options for proto=fd [ 231.518283][ T4174] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.620057][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 231.620095][ T30] audit: type=1400 audit(1728672142.969:2841): avc: denied { read write } for pid=4213 comm="syz.1.1053" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.739147][ T30] audit: type=1400 audit(1728672142.969:2842): avc: denied { open } for pid=4213 comm="syz.1.1053" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.812481][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.840370][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.843391][ T4174] EXT4-fs (loop4): 1 orphan inode deleted [ 231.856838][ T4174] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,lazytime,barrier=0x0000000000000003,errors=remount-ro,resgid=0x000000000000ee01,errors=remount-ro,resgid=0x000000000000ee01,resgid=0x000000000000ee002. Quota mode: writeback. [ 231.860965][ T311] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 231.890540][ T311] EXT4-fs error (device loop4): ext4_release_dquot:6210: comm kworker/u4:3: Failed to release dquot type 1 [ 231.934350][ T311] EXT4-fs (loop4): Remounting filesystem read-only [ 232.044148][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.102839][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.123128][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.131830][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.139722][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.148015][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.155996][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.162846][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.170937][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.179465][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.188707][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.195573][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.202860][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.211107][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.233775][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.243217][ T30] audit: type=1326 audit(1728672143.629:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b2a09c990 code=0x7ffc0000 [ 232.269604][ T30] audit: type=1326 audit(1728672143.629:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b2a09dbfb code=0x7ffc0000 [ 232.696761][ T4190] device veth0_vlan entered promiscuous mode [ 232.723621][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.727044][ T30] audit: type=1326 audit(1728672143.689:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7b2a09cc8a code=0x7ffc0000 [ 232.731847][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.764049][ T30] audit: type=1326 audit(1728672143.689:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 232.787937][ T30] audit: type=1326 audit(1728672144.109:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 232.799069][ T4190] device veth1_macvtap entered promiscuous mode [ 232.825711][ T30] audit: type=1326 audit(1728672144.109:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 232.869784][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.872827][ T30] audit: type=1326 audit(1728672144.109:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2a09dff9 code=0x7ffc0000 [ 232.881265][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.920180][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.953534][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.964783][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.188699][ T4251] syz.1.1063[4251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.188767][ T4251] syz.1.1063[4251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.688839][ T10] device bridge_slave_1 left promiscuous mode [ 233.718862][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.733853][ T10] device bridge_slave_0 left promiscuous mode [ 233.746334][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.764262][ T10] device veth1_macvtap left promiscuous mode [ 233.776321][ T10] device veth0_vlan left promiscuous mode [ 233.899374][ T4263] loop2: detected capacity change from 0 to 40427 [ 233.914243][ T4278] FAULT_INJECTION: forcing a failure. [ 233.914243][ T4278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.927286][ T4278] CPU: 1 PID: 4278 Comm: syz.1.1069 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 233.936994][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.946886][ T4278] Call Trace: [ 233.950020][ T4278] [ 233.952786][ T4278] dump_stack_lvl+0x151/0x1c0 [ 233.957300][ T4278] ? io_uring_drop_tctx_refs+0x190/0x190 [ 233.962773][ T4278] dump_stack+0x15/0x20 [ 233.966759][ T4278] should_fail+0x3c6/0x510 [ 233.971017][ T4278] should_fail_usercopy+0x1a/0x20 [ 233.975873][ T4278] _copy_from_user+0x20/0xd0 [ 233.980301][ T4278] __sys_bpf+0x1e9/0x760 [ 233.984380][ T4278] ? fput_many+0x160/0x1b0 [ 233.988633][ T4278] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 233.993845][ T4278] ? debug_smp_processor_id+0x17/0x20 [ 233.999045][ T4278] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 234.004949][ T4278] __x64_sys_bpf+0x7c/0x90 [ 234.009202][ T4278] x64_sys_call+0x87f/0x9a0 [ 234.011483][ T4263] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 234.013536][ T4278] do_syscall_64+0x3b/0xb0 [ 234.013555][ T4278] ? clear_bhb_loop+0x35/0x90 [ 234.021202][ T4263] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 234.025343][ T4278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.031906][ T4263] F2FS-fs (loop2): invalid crc value [ 234.037839][ T4278] RIP: 0033:0x7f6cc0f1eff9 [ 234.037858][ T4278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.037870][ T4278] RSP: 002b:00007f6cbfb56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.045110][ T4263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.048686][ T4278] RAX: ffffffffffffffda RBX: 00007f6cc10d7130 RCX: 00007f6cc0f1eff9 [ 234.048701][ T4278] RDX: 0000000000000026 RSI: 0000000020000280 RDI: 0000000000000005 [ 234.048712][ T4278] RBP: 00007f6cbfb56090 R08: 0000000000000000 R09: 0000000000000000 [ 234.048722][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.048731][ T4278] R13: 0000000000000001 R14: 00007f6cc10d7130 R15: 00007ffddec7e4d8 [ 234.048746][ T4278] [ 234.158791][ T4263] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.198698][ T4263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.231463][ T26] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 235.134008][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 235.297734][ T26] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.426080][ T26] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.476859][ T4296] fuse: Unknown parameter 'gpoup_id' [ 235.566768][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.575627][ T26] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 235.583943][ T26] usb 1-1: Product: syz [ 235.596715][ T26] usb 1-1: Manufacturer: syz [ 235.799262][ T26] hub 1-1:4.0: USB hub found [ 236.216776][ T26] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 236.267495][ T26] usb 1-1: USB disconnect, device number 20 [ 236.278903][ T10] device bridge_slave_1 left promiscuous mode [ 236.286102][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.295978][ T10] device bridge_slave_0 left promiscuous mode [ 236.303283][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.311786][ T10] device veth1_macvtap left promiscuous mode [ 236.318068][ T10] device veth0_vlan left promiscuous mode [ 236.957315][ T4339] FAULT_INJECTION: forcing a failure. [ 236.957315][ T4339] name failslab, interval 1, probability 0, space 0, times 0 [ 237.010653][ T4339] CPU: 0 PID: 4339 Comm: syz.4.1084 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 237.020372][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.030271][ T4339] Call Trace: [ 237.033390][ T4339] [ 237.036170][ T4339] dump_stack_lvl+0x151/0x1c0 [ 237.040681][ T4339] ? io_uring_drop_tctx_refs+0x190/0x190 [ 237.046151][ T4339] ? stack_trace_save+0x113/0x1c0 [ 237.051019][ T4339] dump_stack+0x15/0x20 [ 237.055001][ T4339] should_fail+0x3c6/0x510 [ 237.059260][ T4339] __should_failslab+0xa4/0xe0 [ 237.063860][ T4339] should_failslab+0x9/0x20 [ 237.068199][ T4339] slab_pre_alloc_hook+0x37/0xd0 [ 237.072967][ T4339] kmem_cache_alloc_trace+0x48/0x210 [ 237.078088][ T4339] ? alloc_pipe_info+0xe7/0x4b0 [ 237.082779][ T4339] alloc_pipe_info+0xe7/0x4b0 [ 237.087288][ T4339] splice_direct_to_actor+0xa15/0xbe0 [ 237.092492][ T4339] ? kstrtol_from_user+0x310/0x310 [ 237.097442][ T4339] ? avc_policy_seqno+0x1b/0x70 [ 237.102129][ T4339] ? selinux_file_permission+0x2c4/0x570 [ 237.107595][ T4339] ? do_splice_direct+0x3c0/0x3c0 [ 237.112453][ T4339] ? fsnotify_perm+0x6a/0x5b0 [ 237.116968][ T4339] ? pipe_to_sendpage+0x340/0x340 [ 237.121828][ T4339] ? security_file_permission+0x86/0xb0 [ 237.127210][ T4339] ? rw_verify_area+0xa7/0x1c0 [ 237.131809][ T4339] do_splice_direct+0x27f/0x3c0 [ 237.136496][ T4339] ? splice_direct_to_actor+0xbe0/0xbe0 [ 237.142049][ T4339] ? fsnotify_perm+0x6a/0x5b0 [ 237.146564][ T4339] ? security_file_permission+0x86/0xb0 [ 237.151948][ T4339] do_sendfile+0x613/0xfe0 [ 237.156199][ T4339] ? __kasan_check_write+0x14/0x20 [ 237.161148][ T4339] ? do_preadv+0x350/0x350 [ 237.165396][ T4339] ? ksys_write+0x260/0x2c0 [ 237.169738][ T4339] __x64_sys_sendfile64+0x1ce/0x230 [ 237.174776][ T4339] ? __ia32_sys_sendfile+0x240/0x240 [ 237.179891][ T4339] ? debug_smp_processor_id+0x17/0x20 [ 237.185099][ T4339] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 237.191003][ T4339] ? exit_to_user_mode_prepare+0x39/0xa0 [ 237.196627][ T4339] x64_sys_call+0x140/0x9a0 [ 237.200963][ T4339] do_syscall_64+0x3b/0xb0 [ 237.205215][ T4339] ? clear_bhb_loop+0x35/0x90 [ 237.209728][ T4339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.215456][ T4339] RIP: 0033:0x7f7b2a09dff9 [ 237.219708][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.239151][ T4339] RSP: 002b:00007f7b28cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 237.247392][ T4339] RAX: ffffffffffffffda RBX: 00007f7b2a256130 RCX: 00007f7b2a09dff9 [ 237.255203][ T4339] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 237.263018][ T4339] RBP: 00007f7b28cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 237.270825][ T4339] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 237.278636][ T4339] R13: 0000000000000000 R14: 00007f7b2a256130 R15: 00007ffe048a24f8 [ 237.286452][ T4339] [ 237.515725][ T4346] loop2: detected capacity change from 0 to 2048 [ 237.563287][ T4346] loop2: p3 < > p4 < > [ 237.569763][ T4346] loop2: partition table partially beyond EOD, truncated [ 237.576833][ T4346] loop2: p3 start 4284289 is beyond EOD, truncated [ 237.737469][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 237.737485][ T30] audit: type=1400 audit(1728672149.129:2881): avc: denied { ioctl } for pid=4350 comm="syz.0.1091" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.829166][ T4357] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4357 comm=syz.1.1092 [ 237.842597][ T4352] input: syz0 as /devices/virtual/input/input9 [ 237.856810][ T30] audit: type=1400 audit(1728672149.249:2882): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=684 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.885653][ T30] audit: type=1400 audit(1728672149.249:2883): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=684 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.128359][ T30] audit: type=1400 audit(1728672149.249:2884): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=684 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.246855][ T4365] loop2: detected capacity change from 0 to 512 [ 238.342008][ T4365] EXT4-fs (loop2): Ignoring removed nobh option [ 238.459740][ T4365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.471534][ T4365] EXT4-fs (loop2): 1 truncate cleaned up [ 238.478947][ T4365] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 238.500017][ T30] audit: type=1400 audit(1728672149.889:2885): avc: denied { append } for pid=4364 comm="syz.2.1095" path="/150/bus/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 238.963204][ T30] audit: type=1400 audit(1728672150.349:2886): avc: denied { ioctl } for pid=4395 comm="syz.1.1104" path="socket:[36479]" dev="sockfs" ino=36479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 239.225950][ T4399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.232994][ T4399] IPv6: NLM_F_CREATE should be set when creating new route [ 239.292933][ T30] audit: type=1400 audit(1728672150.679:2887): avc: denied { create } for pid=4407 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.293630][ T4408] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1109'. [ 239.335423][ T30] audit: type=1400 audit(1728672150.679:2888): avc: denied { write } for pid=4407 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.357740][ T30] audit: type=1400 audit(1728672150.679:2889): avc: denied { nlmsg_write } for pid=4407 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.386837][ T2459] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 239.886751][ T2459] usb 4-1: Using ep0 maxpacket: 8 [ 240.006755][ T2459] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 240.150931][ T4430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.157975][ T4430] IPv6: NLM_F_CREATE should be set when creating new route [ 240.180806][ T4426] loop2: detected capacity change from 0 to 40427 [ 240.206113][ T4426] F2FS-fs (loop2): invalid crc value [ 240.212958][ T4426] F2FS-fs (loop2): Found nat_bits in checkpoint [ 240.240474][ T4426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 240.248768][ T4426] FAULT_INJECTION: forcing a failure. [ 240.248768][ T4426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.262010][ T4426] CPU: 1 PID: 4426 Comm: syz.2.1114 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 240.271708][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.281603][ T4426] Call Trace: [ 240.284729][ T4426] [ 240.287506][ T4426] dump_stack_lvl+0x151/0x1c0 [ 240.292019][ T4426] ? io_uring_drop_tctx_refs+0x190/0x190 [ 240.297485][ T4426] ? arch_stack_walk+0xf3/0x140 [ 240.302178][ T4426] dump_stack+0x15/0x20 [ 240.306164][ T4426] should_fail+0x3c6/0x510 [ 240.310416][ T4426] should_fail_alloc_page+0x5a/0x80 [ 240.315450][ T4426] prepare_alloc_pages+0x15c/0x700 [ 240.320407][ T4426] ? __alloc_pages_bulk+0xe40/0xe40 [ 240.325433][ T4426] __alloc_pages+0x18c/0x8f0 [ 240.329867][ T4426] ? prep_new_page+0x110/0x110 [ 240.334460][ T4426] ? down_read_trylock+0x3d6/0x7d0 [ 240.339407][ T4426] new_slab+0x9a/0x4e0 [ 240.343311][ T4426] ___slab_alloc+0x39e/0x830 [ 240.347737][ T4426] ? f2fs_getxattr+0x338/0x11a0 [ 240.352427][ T4426] ? f2fs_getxattr+0x338/0x11a0 [ 240.357115][ T4426] __slab_alloc+0x4a/0x90 [ 240.361276][ T4426] ? f2fs_getxattr+0x338/0x11a0 [ 240.365962][ T4426] kmem_cache_alloc+0x134/0x200 [ 240.370650][ T4426] f2fs_getxattr+0x338/0x11a0 [ 240.375162][ T4426] ? __kasan_slab_alloc+0xc3/0xe0 [ 240.380024][ T4426] ? security_inode_alloc+0x29/0x120 [ 240.385231][ T4426] ? new_inode+0x28/0x1c0 [ 240.389400][ T4426] ? proc_pident_instantiate+0x7a/0x2e0 [ 240.394777][ T4426] ? x64_sys_call+0x6bf/0x9a0 [ 240.399467][ T4426] f2fs_xattr_generic_get+0x132/0x180 [ 240.404671][ T4426] ? f2fs_xattr_user_list+0xa0/0xa0 [ 240.409706][ T4426] __vfs_getxattr+0x3c3/0x3f0 [ 240.414219][ T4426] cap_inode_need_killpriv+0x45/0x60 [ 240.419341][ T4426] security_inode_need_killpriv+0x62/0x90 [ 240.424896][ T4426] file_remove_privs+0x243/0x610 [ 240.429761][ T4426] ? dentry_needs_remove_privs+0x100/0x100 [ 240.435396][ T4426] ? rwsem_write_trylock+0x153/0x340 [ 240.440523][ T4426] ? rwsem_mark_wake+0x770/0x770 [ 240.445292][ T4426] ? generic_write_checks+0x3b9/0x470 [ 240.450500][ T4426] file_modified+0x1b/0xb0 [ 240.454752][ T4426] f2fs_file_write_iter+0x385/0x2920 [ 240.459872][ T4426] ? unwind_get_return_address+0x4d/0x90 [ 240.465339][ T4426] ? arch_stack_walk+0xf3/0x140 [ 240.470038][ T4426] ? f2fs_file_read_iter+0x1050/0x1050 [ 240.475319][ T4426] ? stack_trace_save+0x113/0x1c0 [ 240.480181][ T4426] ? stack_trace_snprint+0xf0/0xf0 [ 240.485126][ T4426] ? __stack_depot_save+0x34/0x470 [ 240.490074][ T4426] ? kmem_cache_free+0x116/0x2e0 [ 240.494849][ T4426] ? kmem_cache_free+0x116/0x2e0 [ 240.499627][ T4426] ? kasan_set_track+0x5d/0x70 [ 240.504221][ T4426] ? kasan_set_track+0x4b/0x70 [ 240.508821][ T4426] ? kasan_set_free_info+0x23/0x40 [ 240.513773][ T4426] ? ____kasan_slab_free+0x126/0x160 [ 240.518890][ T4426] ? __kasan_slab_free+0x11/0x20 [ 240.523664][ T4426] ? slab_free_freelist_hook+0xbd/0x190 [ 240.529048][ T4426] ? kmem_cache_free+0x116/0x2e0 [ 240.533817][ T4426] ? putname+0xfa/0x150 [ 240.537811][ T4426] ? do_sys_openat2+0x1fc/0x820 [ 240.542494][ T4426] ? __x64_sys_openat+0x243/0x290 [ 240.547359][ T4426] ? x64_sys_call+0x6bf/0x9a0 [ 240.551871][ T4426] ? _kstrtoull+0x3a0/0x4a0 [ 240.556210][ T4426] do_iter_readv_writev+0x58e/0x790 [ 240.561244][ T4426] ? generic_file_rw_checks+0x270/0x270 [ 240.566623][ T4426] ? fsnotify_perm+0x6a/0x5b0 [ 240.571138][ T4426] ? security_file_permission+0x86/0xb0 [ 240.576517][ T4426] do_iter_write+0x1f1/0x760 [ 240.580947][ T4426] vfs_writev+0x2ac/0x560 [ 240.585112][ T4426] ? putname+0xfa/0x150 [ 240.589103][ T4426] ? do_writev+0x340/0x340 [ 240.593359][ T4426] ? __fget_files+0x31e/0x380 [ 240.597870][ T4426] ? __fdget+0x1bc/0x240 [ 240.601954][ T4426] __se_sys_pwritev2+0x1c6/0x2c0 [ 240.606724][ T4426] ? __x64_sys_pwritev2+0x100/0x100 [ 240.611756][ T4426] ? debug_smp_processor_id+0x17/0x20 [ 240.616965][ T4426] __x64_sys_pwritev2+0xe5/0x100 [ 240.621739][ T4426] x64_sys_call+0x8b0/0x9a0 [ 240.626076][ T4426] do_syscall_64+0x3b/0xb0 [ 240.630330][ T4426] ? clear_bhb_loop+0x35/0x90 [ 240.634859][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.640575][ T4426] RIP: 0033:0x7fa3de97fff9 [ 240.644828][ T4426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.664265][ T4426] RSP: 002b:00007fa3dd5f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 240.672509][ T4426] RAX: ffffffffffffffda RBX: 00007fa3deb37f80 RCX: 00007fa3de97fff9 [ 240.680320][ T4426] RDX: 0000000000000003 RSI: 0000000020000740 RDI: 0000000000000004 [ 240.688133][ T4426] RBP: 00007fa3dd5f9090 R08: 0000000000000000 R09: 0000000000000010 [ 240.695948][ T4426] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000001 [ 240.703755][ T4426] R13: 0000000000000000 R14: 00007fa3deb37f80 R15: 00007ffd143708d8 [ 240.711574][ T4426] [ 241.139443][ T2459] usb 4-1: string descriptor 0 read error: -22 [ 241.145538][ T2459] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 241.158517][ T2459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.167652][ T2459] usb 4-1: config 0 descriptor?? [ 241.174027][ T1938] attempt to access beyond end of device [ 241.174027][ T1938] loop2: rw=2049, want=45104, limit=40427 [ 241.197023][ T4445] FAULT_INJECTION: forcing a failure. [ 241.197023][ T4445] name failslab, interval 1, probability 0, space 0, times 0 [ 241.207069][ T2459] hub 4-1:0.0: bad descriptor, ignoring hub [ 241.210705][ T4445] CPU: 0 PID: 4445 Comm: syz.1.1121 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 241.218244][ T2459] hub: probe of 4-1:0.0 failed with error -5 [ 241.224873][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.224885][ T4445] Call Trace: [ 241.224890][ T4445] [ 241.224897][ T4445] dump_stack_lvl+0x151/0x1c0 [ 241.237894][ T2459] usb 4-1: Found UVC 0.00 device (17dc:0202) [ 241.240582][ T4445] ? io_uring_drop_tctx_refs+0x190/0x190 [ 241.243764][ T2459] usb 4-1: No valid video chain found. [ 241.246484][ T4445] dump_stack+0x15/0x20 [ 241.272447][ T4445] should_fail+0x3c6/0x510 [ 241.276689][ T4445] __should_failslab+0xa4/0xe0 [ 241.281295][ T4445] ? getname_flags+0xba/0x520 [ 241.285803][ T4445] should_failslab+0x9/0x20 [ 241.290138][ T4445] slab_pre_alloc_hook+0x37/0xd0 [ 241.294928][ T4445] ? getname_flags+0xba/0x520 [ 241.299425][ T4445] kmem_cache_alloc+0x44/0x200 [ 241.304034][ T4445] getname_flags+0xba/0x520 [ 241.308366][ T4445] user_path_at_empty+0x2d/0x1a0 [ 241.313136][ T4445] do_faccessat+0x39f/0x860 [ 241.317480][ T4445] ? bpf_trace_run1+0x1c0/0x1c0 [ 241.322164][ T4445] ? stream_open+0x60/0x60 [ 241.326419][ T4445] __x64_sys_faccessat2+0x9a/0xb0 [ 241.331277][ T4445] x64_sys_call+0x951/0x9a0 [ 241.335617][ T4445] do_syscall_64+0x3b/0xb0 [ 241.339869][ T4445] ? clear_bhb_loop+0x35/0x90 [ 241.344384][ T4445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.350110][ T4445] RIP: 0033:0x7f6cc0f1eff9 [ 241.354368][ T4445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.373806][ T4445] RSP: 002b:00007f6cbfb98038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 241.382050][ T4445] RAX: ffffffffffffffda RBX: 00007f6cc10d6f80 RCX: 00007f6cc0f1eff9 [ 241.389860][ T4445] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 241.397672][ T4445] RBP: 00007f6cbfb98090 R08: 0000000000000000 R09: 0000000000000000 [ 241.405570][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.413380][ T4445] R13: 0000000000000000 R14: 00007f6cc10d6f80 R15: 00007ffddec7e4d8 [ 241.421199][ T4445] [ 241.431407][ T2459] usb 4-1: USB disconnect, device number 15 [ 241.575099][ T4454] loop4: detected capacity change from 0 to 2048 [ 241.693003][ T4454] loop4: p3 < > p4 < > [ 241.702710][ T4454] loop4: partition table partially beyond EOD, truncated [ 241.710112][ T4454] loop4: p3 start 4284289 is beyond EOD, truncated [ 242.015559][ T30] audit: type=1400 audit(1728672153.399:2890): avc: denied { getopt } for pid=4456 comm="syz.2.1120" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.042728][ T4449] overlayfs: invalid origin (000000790000000000000068655f66726565000000000000000000000000000000000000000000000000000000000000) [ 242.072197][ T4463] loop3: detected capacity change from 0 to 128 [ 242.131083][ T4463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.141749][ T4463] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 244.255988][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 244.256002][ T30] audit: type=1400 audit(1728672155.639:2893): avc: denied { name_bind } for pid=4495 comm="syz.4.1138" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 244.349495][ T30] audit: type=1400 audit(1728672155.639:2894): avc: denied { node_bind } for pid=4495 comm="syz.4.1138" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 244.447749][ T4507] futex_wake_op: syz.2.1137 tries to shift op by -1; fix this program [ 244.462765][ T4507] FAULT_INJECTION: forcing a failure. [ 244.462765][ T4507] name failslab, interval 1, probability 0, space 0, times 0 [ 244.475217][ T4507] CPU: 1 PID: 4507 Comm: syz.2.1137 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 244.484896][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.494796][ T4507] Call Trace: [ 244.497915][ T4507] [ 244.500693][ T4507] dump_stack_lvl+0x151/0x1c0 [ 244.505209][ T4507] ? io_uring_drop_tctx_refs+0x190/0x190 [ 244.510676][ T4507] ? preempt_schedule_thunk+0x16/0x18 [ 244.515884][ T4507] dump_stack+0x15/0x20 [ 244.519874][ T4507] should_fail+0x3c6/0x510 [ 244.524125][ T4507] __should_failslab+0xa4/0xe0 [ 244.528725][ T4507] ? ext4_init_io_end+0x29/0x120 [ 244.533498][ T4507] should_failslab+0x9/0x20 [ 244.537838][ T4507] slab_pre_alloc_hook+0x37/0xd0 [ 244.542611][ T4507] ? ext4_init_io_end+0x29/0x120 [ 244.547383][ T4507] kmem_cache_alloc+0x44/0x200 [ 244.551982][ T4507] ext4_init_io_end+0x29/0x120 [ 244.556583][ T4507] ext4_writepages+0xda1/0x4000 [ 244.561272][ T4507] ? push_rt_task+0x46e/0x5c0 [ 244.565788][ T4507] ? ext4_readpage+0x230/0x230 [ 244.570381][ T4507] ? find_lock_lowest_rq+0x75/0x480 [ 244.575417][ T4507] ? __kasan_check_read+0x11/0x20 [ 244.580276][ T4507] ? preempt_schedule_irq+0xe7/0x140 [ 244.585397][ T4507] ? __cond_resched+0x20/0x20 [ 244.589912][ T4507] ? sysvec_reschedule_ipi+0x7d/0x150 [ 244.595120][ T4507] ? ext4_readpage+0x230/0x230 [ 244.599717][ T4507] do_writepages+0x40e/0x670 [ 244.604145][ T4507] ? __writepage+0x130/0x130 [ 244.608569][ T4507] ? preempt_schedule_irq+0xe7/0x140 [ 244.613690][ T4507] ? __cond_resched+0x20/0x20 [ 244.618205][ T4507] ? finish_task_switch+0x167/0x7b0 [ 244.623242][ T4507] ? __kasan_check_write+0x14/0x20 [ 244.628185][ T4507] ? _raw_spin_lock+0xa4/0x1b0 [ 244.632786][ T4507] ? _raw_spin_unlock+0x4d/0x70 [ 244.637472][ T4507] filemap_fdatawrite_wbc+0x248/0x2a0 [ 244.642681][ T4507] file_write_and_wait_range+0x1cb/0x2b0 [ 244.648148][ T4507] ? __filemap_set_wb_err+0x120/0x120 [ 244.653354][ T4507] ? irqentry_exit+0x30/0x40 [ 244.657780][ T4507] ? sysvec_reschedule_ipi+0x7d/0x150 [ 244.662989][ T4507] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 244.668463][ T4507] ext4_sync_file+0x1a2/0xa50 [ 244.672971][ T4507] vfs_fsync_range+0x17b/0x190 [ 244.677571][ T4507] __se_sys_msync+0x3c1/0x550 [ 244.682086][ T4507] __x64_sys_msync+0x7b/0x90 [ 244.686519][ T4507] x64_sys_call+0xde/0x9a0 [ 244.690762][ T4507] do_syscall_64+0x3b/0xb0 [ 244.695103][ T4507] ? clear_bhb_loop+0x35/0x90 [ 244.699616][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.705345][ T4507] RIP: 0033:0x7fa3de97fff9 [ 244.709598][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.729038][ T4507] RSP: 002b:00007fa3dd5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 244.737284][ T4507] RAX: ffffffffffffffda RBX: 00007fa3deb38130 RCX: 00007fa3de97fff9 [ 244.745091][ T4507] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000 [ 244.752903][ T4507] RBP: 00007fa3dd5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.760717][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.768526][ T4507] R13: 0000000000000000 R14: 00007fa3deb38130 R15: 00007ffd143708d8 [ 244.776342][ T4507] [ 245.536774][ T20] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 245.556759][ T4504] futex_wake_op: syz.4.1138 tries to shift op by -1; fix this program [ 245.586050][ T4517] capability: warning: `syz.2.1142' uses 32-bit capabilities (legacy support in use) [ 245.845576][ T4523] device pim6reg1 entered promiscuous mode [ 245.851375][ T20] usb 4-1: device descriptor read/64, error -71 [ 245.866847][ T1936] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 246.516716][ T1936] usb 3-1: Using ep0 maxpacket: 32 [ 246.546719][ T20] usb 4-1: device descriptor read/64, error -71 [ 246.660633][ T1936] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 246.669730][ T1936] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 246.678588][ T1936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 246.688084][ T1936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.697807][ T1936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.708675][ T1936] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.721628][ T1936] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.730646][ T1936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.741714][ T1936] usb 3-1: config 0 descriptor?? [ 246.816746][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 247.086723][ T20] usb 4-1: device descriptor read/64, error -71 [ 247.488131][ T4551] input: syz0 as /devices/virtual/input/input10 [ 247.726305][ T1936] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.759915][ T1936] usb 3-1: USB disconnect, device number 14 [ 247.771810][ T1936] usblp0: removed [ 248.201456][ T4565] FAULT_INJECTION: forcing a failure. [ 248.201456][ T4565] name failslab, interval 1, probability 0, space 0, times 0 [ 248.213934][ T4565] CPU: 1 PID: 4565 Comm: syz.1.1154 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 248.223574][ T4565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.233464][ T4565] Call Trace: [ 248.236588][ T4565] [ 248.239369][ T4565] dump_stack_lvl+0x151/0x1c0 [ 248.243878][ T4565] ? io_uring_drop_tctx_refs+0x190/0x190 [ 248.249347][ T4565] ? stack_trace_save+0x113/0x1c0 [ 248.254205][ T4565] ? security_inode_permission+0xb0/0xf0 [ 248.259675][ T4565] ? stack_trace_snprint+0xf0/0xf0 [ 248.264621][ T4565] dump_stack+0x15/0x20 [ 248.268615][ T4565] should_fail+0x3c6/0x510 [ 248.272867][ T4565] __should_failslab+0xa4/0xe0 [ 248.277467][ T4565] should_failslab+0x9/0x20 [ 248.281806][ T4565] slab_pre_alloc_hook+0x37/0xd0 [ 248.286580][ T4565] __kmalloc+0x6d/0x270 [ 248.290569][ T4565] ? kvmalloc_node+0x1f0/0x4d0 [ 248.295173][ T4565] kvmalloc_node+0x1f0/0x4d0 [ 248.299598][ T4565] ? check_stack_object+0x114/0x130 [ 248.304636][ T4565] ? vm_mmap+0xb0/0xb0 [ 248.308540][ T4565] vmemdup_user+0x26/0xe0 [ 248.312704][ T4565] setxattr+0x185/0x2e0 [ 248.316696][ T4565] ? path_setxattr+0x2a0/0x2a0 [ 248.321295][ T4565] ? debug_smp_processor_id+0x17/0x20 [ 248.326507][ T4565] ? mnt_want_write+0x1ff/0x2d0 [ 248.331192][ T4565] path_setxattr+0x1bc/0x2a0 [ 248.335617][ T4565] ? simple_xattr_list_add+0x120/0x120 [ 248.340911][ T4565] ? debug_smp_processor_id+0x17/0x20 [ 248.346117][ T4565] __x64_sys_setxattr+0xc5/0xe0 [ 248.350808][ T4565] x64_sys_call+0x4ff/0x9a0 [ 248.355149][ T4565] do_syscall_64+0x3b/0xb0 [ 248.359402][ T4565] ? clear_bhb_loop+0x35/0x90 [ 248.363911][ T4565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.369637][ T4565] RIP: 0033:0x7f6cc0f1eff9 [ 248.373895][ T4565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.393331][ T4565] RSP: 002b:00007f6cbfb77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 248.401575][ T4565] RAX: ffffffffffffffda RBX: 00007f6cc10d7058 RCX: 00007f6cc0f1eff9 [ 248.409388][ T4565] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000280 [ 248.417200][ T4565] RBP: 00007f6cbfb77090 R08: 0000000000000000 R09: 0000000000000000 [ 248.425009][ T4565] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 248.432821][ T4565] R13: 0000000000000000 R14: 00007f6cc10d7058 R15: 00007ffddec7e4d8 [ 248.440638][ T4565] [ 248.443656][ T1936] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 248.447255][ T30] audit: type=1400 audit(1728672159.829:2895): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.472153][ T2186] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 248.479871][ T30] audit: type=1400 audit(1728672159.829:2896): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.502715][ T30] audit: type=1400 audit(1728672159.829:2897): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.525090][ T30] audit: type=1400 audit(1728672159.829:2898): avc: denied { add_name } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.547530][ T20] usb 4-1: device descriptor read/64, error -71 [ 248.547585][ T30] audit: type=1400 audit(1728672159.829:2899): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.576059][ T30] audit: type=1400 audit(1728672159.839:2900): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.676862][ T20] usb usb4-port1: attempt power cycle [ 248.716708][ T2186] usb 5-1: Using ep0 maxpacket: 32 [ 248.823510][ T30] audit: type=1400 audit(1728672160.209:2901): avc: denied { mounton } for pid=4574 comm="syz.0.1158" path="/proc/130/task" dev="proc" ino=37965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 248.827218][ T1936] usb 3-1: device descriptor read/64, error -71 [ 249.557127][ T2186] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 249.575249][ T2186] usb 5-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 249.583477][ T2186] usb 5-1: Product: syz [ 249.595080][ T2186] usb 5-1: Manufacturer: syz [ 249.615632][ T2186] usb 5-1: config 0 descriptor?? [ 249.646705][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 250.336983][ T2186] snd-usb-audio: probe of 5-1:0.0 failed with error -71 [ 250.716621][ T2186] usb 5-1: USB disconnect, device number 16 [ 250.779217][ T20] usb 4-1: device descriptor read/8, error -71 [ 250.936185][ T4614] FAULT_INJECTION: forcing a failure. [ 250.936185][ T4614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.950759][ T4614] CPU: 1 PID: 4614 Comm: syz.0.1165 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 250.960464][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.970361][ T4614] Call Trace: [ 250.973482][ T4614] [ 250.976260][ T4614] dump_stack_lvl+0x151/0x1c0 [ 250.980775][ T4614] ? io_uring_drop_tctx_refs+0x190/0x190 [ 250.986245][ T4614] ? kasan_check_range+0x1b/0x2a0 [ 250.991106][ T4614] dump_stack+0x15/0x20 [ 250.995095][ T4614] should_fail+0x3c6/0x510 [ 250.999349][ T4614] should_fail_usercopy+0x1a/0x20 [ 251.004210][ T4614] _copy_from_user+0x20/0xd0 [ 251.008638][ T4614] __sys_bpf+0x1e9/0x760 [ 251.012714][ T4614] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 251.017925][ T4614] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 251.023389][ T4614] __x64_sys_bpf+0x7c/0x90 [ 251.027643][ T4614] x64_sys_call+0x87f/0x9a0 [ 251.031978][ T4614] do_syscall_64+0x3b/0xb0 [ 251.036230][ T4614] ? clear_bhb_loop+0x35/0x90 [ 251.040745][ T4614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.046472][ T4614] RIP: 0033:0x7f2a5a370ff9 [ 251.050726][ T4614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.070166][ T4614] RSP: 002b:00007f2a58fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.078410][ T4614] RAX: ffffffffffffffda RBX: 00007f2a5a529130 RCX: 00007f2a5a370ff9 [ 251.086221][ T4614] RDX: 0000000000000026 RSI: 0000000020000280 RDI: 0000000000000005 [ 251.094036][ T4614] RBP: 00007f2a58fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 251.101843][ T4614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.109656][ T4614] R13: 0000000000000000 R14: 00007f2a5a529130 R15: 00007ffcee814348 [ 251.117473][ T4614] [ 251.126874][ T20] usb 4-1: device descriptor read/8, error -71 [ 251.226724][ T1936] usb 3-1: device descriptor read/64, error -71 [ 251.749113][ T30] audit: type=1326 audit(1728672163.139:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 251.806057][ T30] audit: type=1326 audit(1728672163.139:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 251.979238][ T346] udevd[346]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 251.989015][ T30] audit: type=1326 audit(1728672163.139:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 252.029272][ T30] audit: type=1326 audit(1728672163.139:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 252.053104][ T30] audit: type=1326 audit(1728672163.139:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 252.076574][ T30] audit: type=1326 audit(1728672163.139:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 252.076740][ T1936] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 252.100347][ T30] audit: type=1326 audit(1728672163.139:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 252.132864][ T30] audit: type=1326 audit(1728672163.139:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5a370ff9 code=0x7ffc0000 [ 252.157250][ T30] audit: type=1326 audit(1728672163.139:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2a5a372e8c code=0x7ffc0000 [ 252.183900][ T30] audit: type=1326 audit(1728672163.139:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2a5a372dc4 code=0x7ffc0000 [ 252.533421][ T4641] loop4: detected capacity change from 0 to 2048 [ 252.576862][ T1936] usb 3-1: Using ep0 maxpacket: 32 [ 252.577137][ T4641] loop4: p3 < > p4 < > [ 252.585930][ T4641] loop4: partition table partially beyond EOD, truncated [ 252.593105][ T4641] loop4: p3 start 4284289 is beyond EOD, truncated [ 252.856821][ T1936] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 252.865731][ T1936] usb 3-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 252.873666][ T1936] usb 3-1: Product: syz [ 252.877683][ T1936] usb 3-1: Manufacturer: syz [ 252.882718][ T1936] usb 3-1: config 0 descriptor?? [ 253.050210][ T4645] raw_sendmsg: syz.1.1177 forgot to set AF_INET. Fix it! [ 253.061297][ T4645] device pim6reg1 entered promiscuous mode [ 253.146782][ T1936] snd-usb-audio: probe of 3-1:0.0 failed with error -71 [ 254.101168][ T1936] usb 3-1: USB disconnect, device number 16 [ 254.560720][ T4665] loop2: detected capacity change from 0 to 2048 [ 254.607514][ T4665] loop2: p3 < > p4 < > [ 254.612603][ T4665] loop2: partition table partially beyond EOD, truncated [ 254.638500][ T4665] loop2: p3 start 4284289 is beyond EOD, truncated [ 254.704270][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.715505][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.724263][ T4669] device bridge_slave_0 entered promiscuous mode [ 254.732036][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.743971][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.751726][ T4669] device bridge_slave_1 entered promiscuous mode [ 254.816438][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.823297][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.830397][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.837170][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.853443][ T4678] device sit0 entered promiscuous mode [ 254.859974][ T4678] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 254.867824][ T4678] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1186'. [ 254.883445][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.890905][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.898162][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.908809][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.917038][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.923883][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.932549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.940547][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.947402][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.964891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.974308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.987088][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.994811][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.007749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.016085][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.023591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.038309][ T4669] device veth0_vlan entered promiscuous mode [ 255.051488][ T4669] device veth1_macvtap entered promiscuous mode [ 255.087372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.095979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.119170][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.127338][ T4686] loop3: detected capacity change from 0 to 512 [ 255.134565][ T4686] EXT4-fs (loop3): Test dummy encryption mode enabled [ 255.143456][ T4686] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1188: inline data xattr refers to an external xattr inode [ 255.159104][ T4686] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1188: couldn't read orphan inode 12 (err -117) [ 255.171541][ T4686] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 255.496758][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.506990][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.730099][ T4690] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1188: Directory hole found for htree leaf block 0 [ 255.730366][ T548] device bridge_slave_1 left promiscuous mode [ 255.756392][ T4690] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1188: Directory hole found for htree leaf block 0 [ 255.759009][ T548] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.779254][ T4690] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1188: Directory hole found for htree leaf block 0 [ 255.792449][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.795851][ T548] device bridge_slave_0 left promiscuous mode [ 255.804441][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.815778][ T548] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.822863][ T26] usb 2-1: SerialNumber: syz [ 255.843474][ T548] device veth1_macvtap left promiscuous mode [ 255.876756][ T548] device veth0_vlan left promiscuous mode [ 256.068223][ T4675] UDC core: couldn't find an available UDC or it's busy: -16 [ 256.075441][ T4675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 256.132726][ T26] usb 2-1: 0:2 : does not exist [ 256.160557][ T26] usb 2-1: USB disconnect, device number 14 [ 256.809306][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 256.840621][ T4710] loop3: detected capacity change from 0 to 2048 [ 256.904651][ T4712] loop2: detected capacity change from 0 to 40427 [ 256.918779][ T4710] loop3: p3 < > p4 < > [ 256.922803][ T4710] loop3: partition table partially beyond EOD, truncated [ 256.947258][ T4712] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 256.955678][ T4712] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 256.963748][ T4712] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 256.989516][ T4710] loop3: p3 start 4284289 is beyond EOD, truncated [ 256.996559][ T4719] netlink: 'syz.1.1196': attribute type 27 has an invalid length. [ 257.015535][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 257.015549][ T30] audit: type=1400 audit(1728672168.399:2920): avc: denied { create } for pid=4718 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 257.047246][ T4719] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1196'. [ 257.548584][ T101] loop3: p3 < > p4 < > [ 257.553221][ T101] loop3: partition table partially beyond EOD, truncated [ 257.562360][ T101] loop3: p3 start 4284289 is beyond EOD, truncated [ 257.613357][ T30] audit: type=1400 audit(1728672168.999:2921): avc: denied { bind } for pid=4723 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.658565][ T346] udevd[346]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 257.681637][ T30] audit: type=1400 audit(1728672168.999:2922): avc: denied { connect } for pid=4723 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.710321][ T452] udevd[452]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 258.114213][ T30] audit: type=1400 audit(1728672169.489:2923): avc: denied { ioctl } for pid=4734 comm="syz.1.1201" path="socket:[38547]" dev="sockfs" ino=38547 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.378666][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.603411][ T4755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.610453][ T4755] IPv6: NLM_F_CREATE should be set when creating new route [ 258.669025][ T4761] FAULT_INJECTION: forcing a failure. [ 258.669025][ T4761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.712100][ T4761] CPU: 0 PID: 4761 Comm: syz.0.1205 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 258.721904][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.731831][ T4761] Call Trace: [ 258.734921][ T4761] [ 258.737700][ T4761] dump_stack_lvl+0x151/0x1c0 [ 258.742212][ T4761] ? io_uring_drop_tctx_refs+0x190/0x190 [ 258.747682][ T4761] dump_stack+0x15/0x20 [ 258.751672][ T4761] should_fail+0x3c6/0x510 [ 258.755924][ T4761] should_fail_usercopy+0x1a/0x20 [ 258.760791][ T4761] _copy_to_user+0x20/0x90 [ 258.765038][ T4761] simple_read_from_buffer+0xc7/0x150 [ 258.770247][ T4761] proc_fail_nth_read+0x1a3/0x210 [ 258.775107][ T4761] ? proc_fault_inject_write+0x390/0x390 [ 258.780572][ T4761] ? fsnotify_perm+0x269/0x5b0 [ 258.785176][ T4761] ? security_file_permission+0x86/0xb0 [ 258.790553][ T4761] ? proc_fault_inject_write+0x390/0x390 [ 258.796025][ T4761] vfs_read+0x27d/0xd40 [ 258.800015][ T4761] ? kernel_read+0x1f0/0x1f0 [ 258.804442][ T4761] ? __kasan_check_write+0x14/0x20 [ 258.809391][ T4761] ? mutex_lock+0xb6/0x1e0 [ 258.813644][ T4761] ? wait_for_completion_killable_timeout+0x10/0x10 [ 258.820070][ T4761] ? __fdget_pos+0x2e7/0x3a0 [ 258.824488][ T4761] ? ksys_read+0x77/0x2c0 [ 258.828659][ T4761] ksys_read+0x199/0x2c0 [ 258.832739][ T4761] ? vfs_write+0x1110/0x1110 [ 258.837164][ T4761] ? debug_smp_processor_id+0x17/0x20 [ 258.842369][ T4761] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 258.848273][ T4761] __x64_sys_read+0x7b/0x90 [ 258.852611][ T4761] x64_sys_call+0x28/0x9a0 [ 258.856863][ T4761] do_syscall_64+0x3b/0xb0 [ 258.861116][ T4761] ? clear_bhb_loop+0x35/0x90 [ 258.865628][ T4761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.871363][ T4761] RIP: 0033:0x7f2a5a36fa3c [ 258.875614][ T4761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 258.895053][ T4761] RSP: 002b:00007f2a58fa8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.903296][ T4761] RAX: ffffffffffffffda RBX: 00007f2a5a529130 RCX: 00007f2a5a36fa3c [ 258.911111][ T4761] RDX: 000000000000000f RSI: 00007f2a58fa80a0 RDI: 0000000000000009 [ 258.918917][ T4761] RBP: 00007f2a58fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 258.926728][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.934540][ T4761] R13: 0000000000000000 R14: 00007f2a5a529130 R15: 00007ffcee814348 [ 258.942360][ T4761] [ 261.139582][ T4769] loop3: detected capacity change from 0 to 40427 [ 261.206990][ T4794] FAULT_INJECTION: forcing a failure. [ 261.206990][ T4794] name failslab, interval 1, probability 0, space 0, times 0 [ 261.233260][ T4794] CPU: 1 PID: 4794 Comm: syz.2.1217 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 261.242975][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.252864][ T4794] Call Trace: [ 261.255986][ T4794] [ 261.258764][ T4794] dump_stack_lvl+0x151/0x1c0 [ 261.263277][ T4794] ? io_uring_drop_tctx_refs+0x190/0x190 [ 261.268744][ T4794] ? release_sock+0x163/0x1b0 [ 261.273258][ T4794] dump_stack+0x15/0x20 [ 261.277249][ T4794] should_fail+0x3c6/0x510 [ 261.281504][ T4794] __should_failslab+0xa4/0xe0 [ 261.286105][ T4794] ? __alloc_skb+0xbe/0x550 [ 261.290443][ T4794] should_failslab+0x9/0x20 [ 261.294781][ T4794] slab_pre_alloc_hook+0x37/0xd0 [ 261.299554][ T4794] ? __alloc_skb+0xbe/0x550 [ 261.303895][ T4794] kmem_cache_alloc+0x44/0x200 [ 261.308501][ T4794] __alloc_skb+0xbe/0x550 [ 261.312660][ T4794] netlink_sendmsg+0x797/0xd20 [ 261.317261][ T4794] ? netlink_getsockopt+0x560/0x560 [ 261.322292][ T4794] ? kmem_cache_free+0x116/0x2e0 [ 261.327068][ T4794] ? security_socket_sendmsg+0x82/0xb0 [ 261.332360][ T4794] ? netlink_getsockopt+0x560/0x560 [ 261.337395][ T4794] ____sys_sendmsg+0x59e/0x8f0 [ 261.341997][ T4794] ? __sys_sendmsg_sock+0x40/0x40 [ 261.346857][ T4794] ? import_iovec+0xe5/0x120 [ 261.351282][ T4794] ___sys_sendmsg+0x252/0x2e0 [ 261.355796][ T4794] ? __sys_sendmsg+0x260/0x260 [ 261.360401][ T4794] ? __fdget+0x1bc/0x240 [ 261.364476][ T4794] __se_sys_sendmsg+0x19a/0x260 [ 261.369161][ T4794] ? __x64_sys_sendmsg+0x90/0x90 [ 261.373933][ T4794] ? ksys_write+0x260/0x2c0 [ 261.378284][ T4794] ? debug_smp_processor_id+0x17/0x20 [ 261.383482][ T4794] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 261.389385][ T4794] __x64_sys_sendmsg+0x7b/0x90 [ 261.393983][ T4794] x64_sys_call+0x16a/0x9a0 [ 261.398322][ T4794] do_syscall_64+0x3b/0xb0 [ 261.402577][ T4794] ? clear_bhb_loop+0x35/0x90 [ 261.407091][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.412816][ T4794] RIP: 0033:0x7fa3de97fff9 [ 261.417073][ T4794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.436515][ T4794] RSP: 002b:00007fa3dd5f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.444756][ T4794] RAX: ffffffffffffffda RBX: 00007fa3deb37f80 RCX: 00007fa3de97fff9 [ 261.452567][ T4794] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 261.460385][ T4794] RBP: 00007fa3dd5f9090 R08: 0000000000000000 R09: 0000000000000000 [ 261.468189][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.476000][ T4794] R13: 0000000000000000 R14: 00007fa3deb37f80 R15: 00007ffd143708d8 [ 261.483816][ T4794] [ 261.574009][ T4769] F2FS-fs (loop3): invalid crc value [ 261.583165][ T4769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.871921][ T4769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 262.508931][ T4808] netlink: 'syz.3.1210': attribute type 27 has an invalid length. [ 262.676224][ T4813] loop2: detected capacity change from 0 to 1024 [ 262.705182][ T4669] attempt to access beyond end of device [ 262.705182][ T4669] loop3: rw=2049, want=45104, limit=40427 [ 262.717918][ T4813] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 262.727487][ T4813] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 262.746185][ T4813] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.782370][ T4813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 262.790449][ T4813] System zones: 0-1, 3-36 [ 262.803011][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 262.882404][ T30] audit: type=1400 audit(1728672174.269:2924): avc: denied { relabelfrom } for pid=4812 comm="syz.2.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 262.900664][ T4820] loop4: detected capacity change from 0 to 512 [ 262.902916][ T30] audit: type=1400 audit(1728672174.289:2925): avc: denied { relabelto } for pid=4812 comm="syz.2.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 262.941453][ T30] audit: type=1400 audit(1728672174.329:2926): avc: denied { mounton } for pid=4812 comm="syz.2.1221" path="/172/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.978329][ T30] audit: type=1400 audit(1728672174.329:2927): avc: denied { mounton } for pid=4812 comm="syz.2.1221" path="/172/bus/file0" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.020210][ T30] audit: type=1326 audit(1728672174.359:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 263.047650][ T30] audit: type=1326 audit(1728672174.359:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 263.081061][ T30] audit: type=1326 audit(1728672174.359:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 263.351814][ T30] audit: type=1326 audit(1728672174.359:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 263.448835][ T30] audit: type=1326 audit(1728672174.359:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 263.473917][ T30] audit: type=1326 audit(1728672174.359:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 263.582649][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 263.591648][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 263.602494][ T4833] FAULT_INJECTION: forcing a failure. [ 263.602494][ T4833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.615656][ T4833] CPU: 1 PID: 4833 Comm: syz.0.1223 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 263.625320][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.635226][ T4833] Call Trace: [ 263.638339][ T4833] [ 263.641116][ T4833] dump_stack_lvl+0x151/0x1c0 [ 263.645632][ T4833] ? io_uring_drop_tctx_refs+0x190/0x190 [ 263.651105][ T4833] dump_stack+0x15/0x20 [ 263.655092][ T4833] should_fail+0x3c6/0x510 [ 263.659344][ T4833] should_fail_usercopy+0x1a/0x20 [ 263.664201][ T4833] _copy_from_user+0x20/0xd0 [ 263.668631][ T4833] __copy_msghdr_from_user+0xaf/0x7c0 [ 263.673838][ T4833] ? __ia32_sys_shutdown+0x70/0x70 [ 263.678793][ T4833] ___sys_sendmsg+0x166/0x2e0 [ 263.683319][ T4833] ? __sys_sendmsg+0x260/0x260 [ 263.687899][ T4833] ? __fdget+0x1bc/0x240 [ 263.691976][ T4833] __se_sys_sendmsg+0x19a/0x260 [ 263.696662][ T4833] ? __x64_sys_sendmsg+0x90/0x90 [ 263.701437][ T4833] ? ksys_write+0x260/0x2c0 [ 263.705778][ T4833] ? debug_smp_processor_id+0x17/0x20 [ 263.710984][ T4833] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 263.716885][ T4833] __x64_sys_sendmsg+0x7b/0x90 [ 263.721484][ T4833] x64_sys_call+0x16a/0x9a0 [ 263.725827][ T4833] do_syscall_64+0x3b/0xb0 [ 263.730077][ T4833] ? clear_bhb_loop+0x35/0x90 [ 263.734589][ T4833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.740324][ T4833] RIP: 0033:0x7f2a5a370ff9 [ 263.744572][ T4833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.764150][ T4833] RSP: 002b:00007f2a58fc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.772394][ T4833] RAX: ffffffffffffffda RBX: 00007f2a5a529058 RCX: 00007f2a5a370ff9 [ 263.780199][ T4833] RDX: 0000000000000000 RSI: 0000000020005840 RDI: 0000000000000006 [ 263.788011][ T4833] RBP: 00007f2a58fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 263.795823][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.803636][ T4833] R13: 0000000000000000 R14: 00007f2a5a529058 R15: 00007ffcee814348 [ 263.811449][ T4833] [ 263.822866][ T1938] EXT4-fs warning (device loop2): ext4_rmdir:3241: inode #12: comm syz-executor: empty directory 'file0' has too many links (2562) [ 263.901417][ T4842] FAULT_INJECTION: forcing a failure. [ 263.901417][ T4842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.925299][ T4842] CPU: 0 PID: 4842 Comm: syz.3.1230 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 263.935019][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.944916][ T4842] Call Trace: [ 263.948136][ T4842] [ 263.951003][ T4842] dump_stack_lvl+0x151/0x1c0 [ 263.955519][ T4842] ? io_uring_drop_tctx_refs+0x190/0x190 [ 263.961071][ T4842] ? kstrtouint_from_user+0x20a/0x2a0 [ 263.966277][ T4842] dump_stack+0x15/0x20 [ 263.970269][ T4842] should_fail+0x3c6/0x510 [ 263.974522][ T4842] should_fail_usercopy+0x1a/0x20 [ 263.979382][ T4842] _copy_to_user+0x20/0x90 [ 263.983636][ T4842] simple_read_from_buffer+0xc7/0x150 [ 263.988843][ T4842] proc_fail_nth_read+0x1a3/0x210 [ 263.993702][ T4842] ? proc_fault_inject_write+0x390/0x390 [ 263.999170][ T4842] ? fsnotify_perm+0x269/0x5b0 [ 264.003774][ T4842] ? security_file_permission+0x86/0xb0 [ 264.009155][ T4842] ? proc_fault_inject_write+0x390/0x390 [ 264.014620][ T4842] vfs_read+0x27d/0xd40 [ 264.018612][ T4842] ? kernel_read+0x1f0/0x1f0 [ 264.023034][ T4842] ? __kasan_check_write+0x14/0x20 [ 264.027982][ T4842] ? mutex_lock+0xb6/0x1e0 [ 264.032235][ T4842] ? wait_for_completion_killable_timeout+0x10/0x10 [ 264.038659][ T4842] ? __fdget_pos+0x2e7/0x3a0 [ 264.043082][ T4842] ? ksys_read+0x77/0x2c0 [ 264.047251][ T4842] ksys_read+0x199/0x2c0 [ 264.051330][ T4842] ? vfs_write+0x1110/0x1110 [ 264.055758][ T4842] ? debug_smp_processor_id+0x17/0x20 [ 264.060962][ T4842] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 264.066953][ T4842] __x64_sys_read+0x7b/0x90 [ 264.071290][ T4842] x64_sys_call+0x28/0x9a0 [ 264.075543][ T4842] do_syscall_64+0x3b/0xb0 [ 264.079882][ T4842] ? clear_bhb_loop+0x35/0x90 [ 264.084395][ T4842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.090126][ T4842] RIP: 0033:0x7f1386adea3c [ 264.094382][ T4842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 264.113906][ T4842] RSP: 002b:00007f1385759030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.122150][ T4842] RAX: ffffffffffffffda RBX: 00007f1386c97f80 RCX: 00007f1386adea3c [ 264.129963][ T4842] RDX: 000000000000000f RSI: 00007f13857590a0 RDI: 0000000000000005 [ 264.137772][ T4842] RBP: 00007f1385759090 R08: 0000000000000000 R09: 0000000000000000 [ 264.145584][ T4842] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 264.153398][ T4842] R13: 0000000000000000 R14: 00007f1386c97f80 R15: 00007ffdec92b178 [ 264.161213][ T4842] [ 264.188332][ T4848] loop3: detected capacity change from 0 to 128 [ 264.202901][ T4848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.213468][ T4848] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 264.905817][ T4848] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 265.196210][ T4864] 9pnet: Insufficient options for proto=fd [ 265.442051][ T4875] loop4: detected capacity change from 0 to 2048 [ 265.730029][ T4875] loop4: p3 < > p4 < > [ 265.736740][ T4875] loop4: partition table partially beyond EOD, truncated [ 265.744270][ T4875] loop4: p3 start 4284289 is beyond EOD, truncated [ 265.764308][ T101] loop4: p3 < > p4 < > [ 265.772288][ T101] loop4: partition table partially beyond EOD, truncated [ 265.779372][ T101] loop4: p3 start 4284289 is beyond EOD, truncated [ 265.789027][ T4878] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 265.812911][ T4878] netlink: 'syz.2.1233': attribute type 4 has an invalid length. [ 265.952856][ T4883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1239'. [ 265.968287][ T4883] overlayfs: failed to resolve './file0': -2 [ 266.068984][ T4887] loop2: detected capacity change from 0 to 512 [ 266.339687][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.356476][ T4887] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038 (0x7fffffff) [ 266.886047][ T4908] request_module fs-ecryptfs succeeded, but still no fs? [ 266.921487][ T4913] 9pnet: Insufficient options for proto=fd [ 267.001818][ T4922] loop4: detected capacity change from 0 to 2048 [ 267.013710][ T4920] FAULT_INJECTION: forcing a failure. [ 267.013710][ T4920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.027021][ T4920] CPU: 0 PID: 4920 Comm: syz.1.1248 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 267.036726][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.046619][ T4920] Call Trace: [ 267.049741][ T4920] [ 267.052516][ T4920] dump_stack_lvl+0x151/0x1c0 [ 267.057032][ T4920] ? io_uring_drop_tctx_refs+0x190/0x190 [ 267.062498][ T4920] ? mutex_unlock+0xb2/0x260 [ 267.066925][ T4920] ? __mutex_lock_slowpath+0x10/0x10 [ 267.072227][ T4920] dump_stack+0x15/0x20 [ 267.076211][ T4920] should_fail+0x3c6/0x510 [ 267.080470][ T4920] should_fail_usercopy+0x1a/0x20 [ 267.085324][ T4920] _copy_from_user+0x20/0xd0 [ 267.089758][ T4920] __x64_sys_signalfd4+0x12d/0x1b0 [ 267.094706][ T4920] ? signalfd_cleanup+0x60/0x60 [ 267.099389][ T4920] ? debug_smp_processor_id+0x17/0x20 [ 267.104596][ T4920] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 267.110497][ T4920] ? exit_to_user_mode_prepare+0x39/0xa0 [ 267.115967][ T4920] x64_sys_call+0x79f/0x9a0 [ 267.120304][ T4920] do_syscall_64+0x3b/0xb0 [ 267.124669][ T4920] ? clear_bhb_loop+0x35/0x90 [ 267.129183][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.134913][ T4920] RIP: 0033:0x7f6cc0f1eff9 [ 267.139167][ T4920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.158605][ T4920] RSP: 002b:00007f6cbfb77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 267.166848][ T4920] RAX: ffffffffffffffda RBX: 00007f6cc10d7058 RCX: 00007f6cc0f1eff9 [ 267.174660][ T4920] RDX: 0000000000000008 RSI: 0000000020000040 RDI: 0000000000000003 [ 267.182477][ T4920] RBP: 00007f6cbfb77090 R08: 0000000000000000 R09: 0000000000000000 [ 267.190282][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.198094][ T4920] R13: 0000000000000001 R14: 00007f6cc10d7058 R15: 00007ffddec7e4d8 [ 267.205911][ T4920] [ 267.224329][ T4922] loop4: p3 < > p4 < > [ 267.229316][ T4922] loop4: partition table partially beyond EOD, truncated [ 267.237123][ T4922] loop4: p3 start 4284289 is beyond EOD, truncated [ 267.245628][ T101] loop4: p3 < > p4 < > [ 267.249945][ T101] loop4: partition table partially beyond EOD, truncated [ 267.257150][ T101] loop4: p3 start 4284289 is beyond EOD, truncated [ 268.086275][ T4944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.147060][ T4946] SELinux: policydb string length 16 does not match expected length 8 [ 268.155281][ T4946] SELinux: failed to load policy [ 268.165864][ T4946] FAULT_INJECTION: forcing a failure. [ 268.165864][ T4946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.178746][ T4946] CPU: 1 PID: 4946 Comm: syz.1.1253 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 268.188426][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.198499][ T4946] Call Trace: [ 268.201620][ T4946] [ 268.204397][ T4946] dump_stack_lvl+0x151/0x1c0 [ 268.208909][ T4946] ? io_uring_drop_tctx_refs+0x190/0x190 [ 268.214379][ T4946] dump_stack+0x15/0x20 [ 268.218369][ T4946] should_fail+0x3c6/0x510 [ 268.222625][ T4946] should_fail_usercopy+0x1a/0x20 [ 268.225633][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 268.225647][ T30] audit: type=1400 audit(1728672179.529:3009): avc: denied { load_policy } for pid=4936 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 268.227480][ T4946] _copy_from_user+0x20/0xd0 [ 268.227501][ T4946] __se_sys_mount+0x179/0x3b0 [ 268.262290][ T4946] ? irqentry_exit+0x30/0x40 [ 268.266713][ T4946] ? __x64_sys_mount+0xd0/0xd0 [ 268.271316][ T4946] ? __kasan_check_write+0x14/0x20 [ 268.276259][ T4946] ? switch_fpu_return+0x15f/0x2e0 [ 268.281206][ T4946] __x64_sys_mount+0xbf/0xd0 [ 268.285632][ T4946] x64_sys_call+0x49d/0x9a0 [ 268.289973][ T4946] do_syscall_64+0x3b/0xb0 [ 268.294221][ T4946] ? clear_bhb_loop+0x35/0x90 [ 268.298735][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.304464][ T4946] RIP: 0033:0x7f6cc0f1eff9 [ 268.308726][ T4946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.328245][ T4946] RSP: 002b:00007f6cbfb56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 268.336490][ T4946] RAX: ffffffffffffffda RBX: 00007f6cc10d7130 RCX: 00007f6cc0f1eff9 [ 268.344301][ T4946] RDX: 0000000020002100 RSI: 00000000200020c0 RDI: 0000000000000000 [ 268.352112][ T4946] RBP: 00007f6cbfb56090 R08: 0000000020002140 R09: 0000000000000000 [ 268.359923][ T4946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.367735][ T4946] R13: 0000000000000000 R14: 00007f6cc10d7130 R15: 00007ffddec7e4d8 [ 268.375548][ T4946] [ 268.410581][ T4956] 9pnet: Insufficient options for proto=fd [ 269.388975][ T30] audit: type=1326 audit(1728672180.779:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.442750][ T30] audit: type=1326 audit(1728672180.809:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.474138][ T30] audit: type=1326 audit(1728672180.809:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.511993][ T30] audit: type=1326 audit(1728672180.809:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.535948][ T4978] loop2: detected capacity change from 0 to 2048 [ 269.576297][ T30] audit: type=1326 audit(1728672180.809:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.610867][ T30] audit: type=1326 audit(1728672180.809:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.611283][ T4978] loop2: p3 < > p4 < > [ 269.637945][ T30] audit: type=1326 audit(1728672180.809:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.667404][ T30] audit: type=1326 audit(1728672180.809:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.686721][ T4978] loop2: partition table partially beyond EOD, [ 269.692184][ T30] audit: type=1326 audit(1728672180.809:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.1.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 269.694038][ T4978] truncated [ 269.726456][ T4978] loop2: p3 start 4284289 is beyond EOD, truncated [ 269.726915][ T4990] 9pnet: Insufficient options for proto=fd [ 269.779369][ T101] loop2: p3 < > p4 < > [ 269.783431][ T101] loop2: partition table partially beyond EOD, truncated [ 269.805599][ T101] loop2: p3 start 4284289 is beyond EOD, truncated [ 270.236722][ T20] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 271.195896][ T5006] loop4: detected capacity change from 0 to 40427 [ 271.473903][ T5006] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 271.482961][ T5006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 271.490989][ T5006] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 271.536772][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 271.914935][ T5015] FAULT_INJECTION: forcing a failure. [ 271.914935][ T5015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.947340][ T5015] CPU: 0 PID: 5015 Comm: syz.2.1277 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 271.957072][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.967225][ T5015] Call Trace: [ 271.970346][ T5015] [ 271.973126][ T5015] dump_stack_lvl+0x151/0x1c0 [ 271.977649][ T5015] ? io_uring_drop_tctx_refs+0x190/0x190 [ 271.983246][ T5015] ? avc_has_perm+0x16f/0x260 [ 271.987755][ T5015] ? avc_has_perm_noaudit+0x430/0x430 [ 271.992962][ T5015] dump_stack+0x15/0x20 [ 271.996956][ T5015] should_fail+0x3c6/0x510 [ 272.001206][ T5015] should_fail_usercopy+0x1a/0x20 [ 272.006064][ T5015] _copy_from_user+0x20/0xd0 [ 272.010496][ T5015] do_fcntl+0x578/0x1420 [ 272.014574][ T5015] ? match_file+0x140/0x140 [ 272.018910][ T5015] ? kill_fasync+0x250/0x250 [ 272.023336][ T5015] ? __fget_files+0x31e/0x380 [ 272.028014][ T5015] ? security_file_fcntl+0x84/0xb0 [ 272.032955][ T5015] __se_sys_fcntl+0xe0/0x1c0 [ 272.037384][ T5015] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 272.043281][ T5015] __x64_sys_fcntl+0x7b/0x90 [ 272.047708][ T5015] x64_sys_call+0x220/0x9a0 [ 272.052047][ T5015] do_syscall_64+0x3b/0xb0 [ 272.056298][ T5015] ? clear_bhb_loop+0x35/0x90 [ 272.060812][ T5015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.066539][ T5015] RIP: 0033:0x7fa3de97fff9 [ 272.070792][ T5015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.090233][ T5015] RSP: 002b:00007fa3dd5f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 272.098478][ T5015] RAX: ffffffffffffffda RBX: 00007fa3deb37f80 RCX: 00007fa3de97fff9 [ 272.106289][ T5015] RDX: 0000000020000040 RSI: 0000000000000026 RDI: 0000000000000005 [ 272.114099][ T5015] RBP: 00007fa3dd5f9090 R08: 0000000000000000 R09: 0000000000000000 [ 272.121917][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.129722][ T5015] R13: 0000000000000000 R14: 00007fa3deb37f80 R15: 00007ffd143708d8 [ 272.137547][ T5015] [ 272.216825][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 272.229883][ T20] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 272.239981][ T20] usb 4-1: Product: syz [ 272.255631][ T5017] loop4: detected capacity change from 0 to 40427 [ 272.264628][ T20] usb 4-1: config 0 descriptor?? [ 272.297718][ T5017] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 272.310385][ T20] usb 4-1: Found UVC 0.00 device syz (046d:08f6) [ 272.315411][ T5017] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 272.316913][ T20] usb 4-1: No valid video chain found. [ 272.676114][ T5017] F2FS-fs (loop4): Found nat_bits in checkpoint [ 272.686058][ T20] usb 4-1: USB disconnect, device number 20 [ 272.713447][ T5034] 9pnet: Insufficient options for proto=fd [ 272.740056][ T5017] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 272.747572][ T5017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 272.792801][ T5017] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 273.307916][ T346] udevd[346]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 273.353198][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 273.353213][ T30] audit: type=1400 audit(1728672184.739:3063): avc: denied { write } for pid=5050 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.408794][ T30] audit: type=1400 audit(1728672184.769:3064): avc: denied { ioctl } for pid=5050 comm="syz.3.1287" path="socket:[39891]" dev="sockfs" ino=39891 ioctlcmd=0x480c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.945369][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 274.945390][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 274.956015][ T5062] netlink: 'syz.0.1290': attribute type 153 has an invalid length. [ 274.959668][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 274.975905][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 274.983784][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 274.991350][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 274.999142][ T3773] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 275.181358][ T5072] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 275.198413][ T5072] SELinux: failed to load policy [ 275.677042][ T5072] FAULT_INJECTION: forcing a failure. [ 275.677042][ T5072] name failslab, interval 1, probability 0, space 0, times 0 [ 275.689630][ T5072] CPU: 0 PID: 5072 Comm: syz.1.1294 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 275.699331][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.709402][ T5072] Call Trace: [ 275.712523][ T5072] [ 275.715300][ T5072] dump_stack_lvl+0x151/0x1c0 [ 275.719815][ T5072] ? io_uring_drop_tctx_refs+0x190/0x190 [ 275.725279][ T5072] ? exit_to_user_mode_loop+0xc4/0xe0 [ 275.730485][ T5072] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.736390][ T5072] dump_stack+0x15/0x20 [ 275.740381][ T5072] should_fail+0x3c6/0x510 [ 275.744633][ T5072] __should_failslab+0xa4/0xe0 [ 275.749240][ T5072] should_failslab+0x9/0x20 [ 275.753571][ T5072] slab_pre_alloc_hook+0x37/0xd0 [ 275.758348][ T5072] __kmalloc+0x6d/0x270 [ 275.762433][ T5072] ? kobject_get_path+0xbc/0x1f0 [ 275.767200][ T5072] kobject_get_path+0xbc/0x1f0 [ 275.771798][ T5072] kobject_uevent_env+0x27f/0x700 [ 275.776657][ T5072] ? dev_fwnode+0x50/0x80 [ 275.780823][ T5072] kobject_uevent+0x1f/0x30 [ 275.785168][ T5072] device_del+0xcbd/0xe90 [ 275.789337][ T5072] ? kill_device+0xd0/0xd0 [ 275.793582][ T5072] ? mntput+0x5d/0xc0 [ 275.797400][ T5072] ? simple_release_fs+0xaf/0xe0 [ 275.802173][ T5072] device_unregister+0x15/0x40 [ 275.806773][ T5072] bdi_unregister+0x4cc/0x5c0 [ 275.811285][ T5072] ? bdi_set_owner+0x80/0x80 [ 275.815711][ T5072] ? _raw_spin_trylock_bh+0x190/0x190 [ 275.820918][ T5072] bdi_put+0xab/0x110 [ 275.824736][ T5072] generic_shutdown_super+0x28d/0x2e0 [ 275.829947][ T5072] kill_anon_super+0x3d/0x70 [ 275.834382][ T5072] fuse_kill_sb_anon+0x1f3/0x240 [ 275.839148][ T5072] deactivate_locked_super+0xad/0x110 [ 275.844355][ T5072] deactivate_super+0xbe/0xf0 [ 275.848868][ T5072] cleanup_mnt+0x45c/0x510 [ 275.853126][ T5072] __cleanup_mnt+0x19/0x20 [ 275.857372][ T5072] task_work_run+0x129/0x190 [ 275.861800][ T5072] exit_to_user_mode_loop+0xc4/0xe0 [ 275.866831][ T5072] exit_to_user_mode_prepare+0x5a/0xa0 [ 275.872128][ T5072] syscall_exit_to_user_mode+0x26/0x160 [ 275.877507][ T5072] do_syscall_64+0x47/0xb0 [ 275.881758][ T5072] ? clear_bhb_loop+0x35/0x90 [ 275.886273][ T5072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.892002][ T5072] RIP: 0033:0x7f6cc0f1eff9 [ 275.896255][ T5072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.915692][ T5072] RSP: 002b:00007f6cbfb56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 275.923938][ T5072] RAX: 0000000000000000 RBX: 00007f6cc10d7130 RCX: 00007f6cc0f1eff9 [ 275.931752][ T5072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 275.939563][ T5072] RBP: 00007f6cbfb56090 R08: 0000000000000000 R09: 0000000000000000 [ 275.947372][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.955184][ T5072] R13: 0000000000000000 R14: 00007f6cc10d7130 R15: 00007ffddec7e4d8 [ 275.963001][ T5072] [ 276.119300][ T20] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 276.150809][ T5083] 9pnet: Insufficient options for proto=fd [ 276.177880][ T5086] loop4: detected capacity change from 0 to 512 [ 276.248479][ T5090] FAULT_INJECTION: forcing a failure. [ 276.248479][ T5090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.250178][ T5086] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.261730][ T5090] CPU: 0 PID: 5090 Comm: syz.3.1299 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 276.272448][ T5086] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 276.281903][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.281915][ T5090] Call Trace: [ 276.281920][ T5090] [ 276.281927][ T5090] dump_stack_lvl+0x151/0x1c0 [ 276.311852][ T5090] ? io_uring_drop_tctx_refs+0x190/0x190 [ 276.317317][ T5090] ? kstrtouint_from_user+0x20a/0x2a0 [ 276.322524][ T5090] ? kstrtol_from_user+0x310/0x310 [ 276.327478][ T5090] ? __kasan_check_read+0x11/0x20 [ 276.332332][ T5090] dump_stack+0x15/0x20 [ 276.336323][ T5090] should_fail+0x3c6/0x510 [ 276.340577][ T5090] should_fail_usercopy+0x1a/0x20 [ 276.345436][ T5090] _copy_from_user+0x20/0xd0 [ 276.349864][ T5090] iovec_from_user+0xc7/0x330 [ 276.354375][ T5090] ? proc_fail_nth_read+0x210/0x210 [ 276.359410][ T5090] __import_iovec+0x6d/0x420 [ 276.363833][ T5090] ? __fget_files+0x31e/0x380 [ 276.368347][ T5090] import_iovec+0xe5/0x120 [ 276.372600][ T5090] do_readv+0x237/0x460 [ 276.376594][ T5090] ? do_iter_readv_writev+0x790/0x790 [ 276.381801][ T5090] ? ksys_write+0x260/0x2c0 [ 276.386139][ T5090] ? __kasan_check_write+0x14/0x20 [ 276.391086][ T5090] ? switch_fpu_return+0x15f/0x2e0 [ 276.396032][ T5090] __x64_sys_readv+0x7d/0x90 [ 276.400459][ T5090] x64_sys_call+0xad/0x9a0 [ 276.404711][ T5090] do_syscall_64+0x3b/0xb0 [ 276.408965][ T5090] ? clear_bhb_loop+0x35/0x90 [ 276.413477][ T5090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.419206][ T5090] RIP: 0033:0x7f1386adfff9 [ 276.423459][ T5090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.442898][ T5090] RSP: 002b:00007f1385759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 276.451144][ T5090] RAX: ffffffffffffffda RBX: 00007f1386c97f80 RCX: 00007f1386adfff9 [ 276.458955][ T5090] RDX: 0000000000000002 RSI: 0000000020000380 RDI: 0000000000000003 [ 276.466766][ T5090] RBP: 00007f1385759090 R08: 0000000000000000 R09: 0000000000000000 [ 276.474577][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.482388][ T5090] R13: 0000000000000000 R14: 00007f1386c97f80 R15: 00007ffdec92b178 [ 276.490204][ T5090] [ 276.508787][ T5099] loop3: detected capacity change from 0 to 16 [ 276.536712][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 276.607571][ T5099] erofs: (device loop3): mounted with root inode @ nid 36. [ 276.671668][ T5105] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 276.684279][ T5105] SELinux: failed to load policy [ 276.793679][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 276.804674][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 276.815634][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.824749][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.833182][ T20] usb 1-1: config 0 descriptor?? [ 276.856950][ T5062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.877416][ T20] hub 1-1:0.0: USB hub found [ 276.993578][ T5107] loop3: detected capacity change from 0 to 40427 [ 277.067275][ T5107] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 277.073601][ T5107] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 277.088881][ T5107] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 277.099901][ T20] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 277.127776][ T5107] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 277.134802][ T5107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.182625][ T4669] attempt to access beyond end of device [ 278.182625][ T4669] loop3: rw=2049, want=45104, limit=40427 [ 278.226819][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 278.232578][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 278.276982][ T20] usb 1-1: USB disconnect, device number 21 [ 279.143886][ T5141] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 279.219120][ T5147] loop2: detected capacity change from 0 to 1024 [ 279.309301][ T5152] loop3: detected capacity change from 0 to 2048 [ 279.329903][ T5147] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext2 [ 279.374043][ T5152] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.385253][ T5152] ext4 filesystem being mounted at /21/bus supports timestamps until 2038 (0x7fffffff) [ 279.610435][ T30] audit: type=1400 audit(1728672190.939:3065): avc: denied { ioctl } for pid=5151 comm="syz.3.1315" path="/21/bus/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.622954][ T5152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1315'. [ 279.722140][ T5152] syz.3.1315 (5152) used greatest stack depth: 18904 bytes left [ 279.807282][ T5165] syz.2.1314[5165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.807600][ T5165] syz.2.1314[5165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.076775][ T446] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.116743][ T20] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 281.137166][ T30] audit: type=1400 audit(1728672192.529:3066): avc: denied { connect } for pid=5171 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.309448][ T2287] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 281.336757][ T446] usb 4-1: Using ep0 maxpacket: 32 [ 281.376752][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 281.616798][ T20] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 281.616808][ T446] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 281.616831][ T446] usb 4-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 281.625806][ T20] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 281.646703][ T446] usb 4-1: Product: syz [ 281.651090][ T20] usb 2-1: Product: syz [ 281.658675][ T20] usb 2-1: Manufacturer: syz [ 281.659470][ T446] usb 4-1: Manufacturer: syz [ 281.667198][ T20] usb 2-1: config 0 descriptor?? [ 281.686819][ T2287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.697143][ T446] usb 4-1: config 0 descriptor?? [ 281.702359][ T2287] usb 5-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 281.713283][ T2287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.734484][ T2287] usb 5-1: config 0 descriptor?? [ 281.926765][ T20] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 281.935132][ T20] usb 2-1: USB disconnect, device number 15 [ 281.966751][ T446] snd-usb-audio: probe of 4-1:0.0 failed with error -71 [ 281.975266][ T446] usb 4-1: USB disconnect, device number 21 [ 282.097680][ T311] device bridge_slave_1 left promiscuous mode [ 282.103604][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.110999][ T311] device bridge_slave_0 left promiscuous mode [ 282.117193][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.124823][ T311] device veth1_macvtap left promiscuous mode [ 282.130663][ T311] device veth0_vlan left promiscuous mode [ 282.219418][ T2287] wacom 0003:056A:0093.000A: hidraw0: USB HID v0.00 Device [HID 056a:0093] on usb-dummy_hcd.4-1/input0 [ 282.420153][ T2287] usb 5-1: USB disconnect, device number 17 [ 282.987561][ T30] audit: type=1400 audit(1728672194.379:3067): avc: denied { setattr } for pid=5207 comm="syz.4.1328" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.052819][ T5208] 9pnet: bogus RWRITE count (2 > 1) [ 283.691036][ T5217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.698092][ T5217] IPv6: NLM_F_CREATE should be set when creating new route [ 285.344978][ T5227] loop4: detected capacity change from 0 to 40427 [ 285.420283][ T5227] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 285.428763][ T5227] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 285.436912][ T5227] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 287.646747][ T446] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.886744][ T446] usb 2-1: Using ep0 maxpacket: 32 [ 288.126775][ T446] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 288.135608][ T446] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 288.143618][ T446] usb 2-1: Product: syz [ 288.147597][ T446] usb 2-1: Manufacturer: syz [ 288.152822][ T446] usb 2-1: config 0 descriptor?? [ 288.426754][ T446] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 288.434037][ T446] usb 2-1: USB disconnect, device number 16 [ 288.491634][ T5270] ªªªªªª: renamed from vlan0 [ 288.780717][ T5274] loop4: detected capacity change from 0 to 2048 [ 288.827033][ T5274] loop4: p3 < > p4 < > [ 288.831022][ T5274] loop4: partition table partially beyond EOD, truncated [ 288.838302][ T5274] loop4: p3 start 4284289 is beyond EOD, truncated [ 289.707932][ T5280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.714978][ T5280] IPv6: NLM_F_CREATE should be set when creating new route [ 290.505420][ T452] udevd[452]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 291.032556][ T30] audit: type=1400 audit(1728672202.419:3068): avc: denied { create } for pid=5291 comm="syz.4.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 291.065055][ T5292] loop4: detected capacity change from 0 to 2048 [ 291.149369][ T5292] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 291.436718][ T5292] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 292.455153][ T5319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.203040][ T452] udevd[452]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 294.386721][ T2287] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 294.626765][ T2287] usb 2-1: Using ep0 maxpacket: 32 [ 294.866788][ T2287] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 294.875648][ T2287] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 294.883645][ T2287] usb 2-1: Product: syz [ 294.887627][ T2287] usb 2-1: Manufacturer: syz [ 294.892920][ T2287] usb 2-1: config 0 descriptor?? [ 295.156799][ T2287] snd-usb-audio: probe of 2-1:0.0 failed with error -71 [ 295.164284][ T2287] usb 2-1: USB disconnect, device number 17 [ 295.557683][ T30] audit: type=1326 audit(1728672206.949:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.587451][ T30] audit: type=1326 audit(1728672206.949:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.615307][ T30] audit: type=1326 audit(1728672206.949:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.638524][ T30] audit: type=1326 audit(1728672206.949:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.662477][ T30] audit: type=1326 audit(1728672206.949:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.689590][ T30] audit: type=1326 audit(1728672206.949:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.713075][ T30] audit: type=1326 audit(1728672206.949:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.736481][ T30] audit: type=1326 audit(1728672206.949:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 295.760119][ T30] audit: type=1326 audit(1728672206.949:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5341 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1386adfff9 code=0x7ffc0000 [ 297.274366][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 297.274383][ T30] audit: type=1400 audit(1728672208.659:3171): avc: denied { create } for pid=5357 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.579445][ T5362] bridge0: port 3(gretap0) entered blocking state [ 297.585693][ T5362] bridge0: port 3(gretap0) entered disabled state [ 297.592435][ T5362] device gretap0 entered promiscuous mode [ 297.598109][ T5362] bridge0: port 3(gretap0) entered blocking state [ 297.604332][ T5362] bridge0: port 3(gretap0) entered forwarding state [ 297.614251][ T5362] loop4: detected capacity change from 0 to 256 [ 297.668881][ T5362] FAT-fs (loop4): Unrecognized mount option "shortna" or missing value [ 297.970754][ T30] audit: type=1400 audit(1728672209.359:3172): avc: denied { setopt } for pid=5357 comm="syz.3.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 299.546722][ T310] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 299.906838][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.920766][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.948328][ T310] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.957779][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.988086][ T310] usb 5-1: config 0 descriptor?? [ 300.466986][ T310] hid (null): bogus close delimiter [ 300.984151][ T30] audit: type=1326 audit(1728672212.369:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.013053][ T30] audit: type=1326 audit(1728672212.369:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.045095][ T30] audit: type=1326 audit(1728672212.369:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.072962][ T30] audit: type=1326 audit(1728672212.369:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.096478][ T30] audit: type=1326 audit(1728672212.369:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.120589][ T30] audit: type=1326 audit(1728672212.399:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.144072][ T30] audit: type=1326 audit(1728672212.399:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.167745][ T30] audit: type=1326 audit(1728672212.399:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.1.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0f1eff9 code=0x7ffc0000 [ 301.191262][ T5393] loop3: detected capacity change from 0 to 2048 [ 301.247012][ T5393] loop3: p3 < > p4 < > [ 301.250983][ T5393] loop3: partition table partially beyond EOD, truncated [ 301.258187][ T5393] loop3: p3 start 4284289 is beyond EOD, truncated [ 302.246792][ T310] usb 5-1: string descriptor 0 read error: -71 [ 302.266764][ T310] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 302.275393][ T310] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 302.283301][ T310] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 302.291157][ T310] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 302.298482][ T310] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 302.308690][ T310] usb 5-1: USB disconnect, device number 18 SYZFAIL: mmap of output file failed want 0x1b2ff20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33320000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2bc20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2cc20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2fb20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=2 req=1323 state=1 status=67 (errno 9: Bad file descriptor) [ 302.989423][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 302.989437][ T30] audit: type=1400 audit(1728672214.379:3236): avc: denied { write } for pid=263 comm="syz-executor" path="pipe:[13573]" dev="pipefs" ino=13573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 303.887693][ T311] bridge0: port 3(gretap0) entered disabled state [ 303.894458][ T311] device gretap0 left promiscuous mode [ 303.899753][ T311] bridge0: port 3(gretap0) entered disabled state [ 304.127976][ T311] device bridge_slave_1 left promiscuous mode [ 304.133906][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.141168][ T311] device bridge_slave_0 left promiscuous mode [ 304.147169][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.154715][ T311] device veth1_macvtap left promiscuous mode [ 304.160556][ T311] device veth0_vlan left promiscuous mode [ 305.647623][ T311] device bridge_slave_1 left promiscuous mode [ 305.653565][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.661004][ T311] device bridge_slave_0 left promiscuous mode [ 305.667019][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.674930][ T311] device bridge_slave_1 left promiscuous mode [ 305.680958][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.688432][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.695828][ T311] device bridge_slave_1 left promiscuous mode [ 305.701799][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.709038][ T311] device bridge_slave_0 left promiscuous mode [ 305.714950][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.722832][ T311] device veth1_macvtap left promiscuous mode [ 305.728651][ T311] device veth0_vlan left promiscuous mode [ 305.734326][ T311] device veth1_macvtap left promiscuous mode [ 305.740145][ T311] device veth0_vlan left promiscuous mode [ 305.745760][ T311] device veth1_macvtap left promiscuous mode