last executing test programs: 1m16.41946521s ago: executing program 2 (id=465): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x8, 0x0, 0x6, {{0x3d, 0x4, 0x2, 0x1e, 0xf4, 0x64, 0x0, 0xe0, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0xc, 0x6e, 0x0, 0x2, [0x3, 0x9d]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x7, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}, {@multicast2, 0x9}, {@multicast1, 0x3322}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@loopback, 0x4}, {@multicast2, 0x4}]}, @ssrr={0x89, 0x1f, 0xee, [@local, @broadcast, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0x67, [@remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x4c, 0x5b, 0x3, 0x2, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@private=0xa010101, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1ff}, {@local, 0x8}, {@rand_addr=0x64010100, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0xfc, 0x3, 0x5, [{@local, 0x9}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x8, 0x0, 0x6, {{0x3d, 0x4, 0x2, 0x1e, 0xf4, 0x64, 0x0, 0xe0, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0xc, 0x6e, 0x0, 0x2, [0x3, 0x9d]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x7, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}, {@multicast2, 0x9}, {@multicast1, 0x3322}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@loopback, 0x4}, {@multicast2, 0x4}]}, @ssrr={0x89, 0x1f, 0xee, [@local, @broadcast, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0x67, [@remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x4c, 0x5b, 0x3, 0x2, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}, {@private=0xa010101, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1ff}, {@local, 0x8}, {@rand_addr=0x64010100, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0xfc, 0x3, 0x5, [{@local, 0x9}]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff25e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x15e0, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x47}}}}, [@NL80211_ATTR_CSA_IES={0x15c0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x33d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_b, @initial, {0xd, 0x9}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x5, @random=0x2, 0x100, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0xfb, 0x1ff, 0x6}}, @val={0x6, 0x2, 0x1}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x3, 0x0, {0x3, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x6, 0x9}}, @void, @void, @val={0x76, 0x6, {0x6, 0x2, 0x42, 0x2}}, [{0xdd, 0xd6, "30731333a4a7bca975cb29ed78d7e567da9f6eb33fbf0e026ff1e53c118fe2b9fadd5710390ccad7ac118a11ad88d450a2a2fb6312ae912760fbca502609b9e12e172d266b464847debbfc7a3b22e8b366b706c276b67576c20cfe73efb78edb4d4ed6fdb60cb628417cf7e0858df09c65c0155b77bcbc83c402b7f3f771797e744430d3b5c95f3f689d152e3b1384892eb0b156fa85afc234a658ceaa3b3190dca13ad41df6f5bd2b8cb0a59db0b3840a7c12d49b6da31c09cf0fbc289b3533508cba242fa29b995b24cf3421e1093e743e668bbcb1"}, {0xdd, 0x57, "7b0e79915d5b13a064fa26086b69f9b205723d493b444f4dea31bd84d326d061ad499b3464c63c48accc19a1d30e1f4067bd60f85be816d49f22f08e3a7bd0cfc6d9d46f4901646dc27efbc12e713c259f547b53836bb4"}, {0xdd, 0x9e, "b496038d478a144b80e2230ae978567e98e5326eb0e4eb18f6e1e25f64fa17f414a966737f93ffc607ae71045d4381032c2ed5215038dacec05f345f71c2215414f33e7b3e78f94ee34029d96d4dca3ba67b0238dc78c697e76d5b5b7d6fac2455bd5d48738c19e00c4b474b1432d84ebf6d71874d094f655aaeea1962a77c8cd88ba67850b053e45ed82aded771df548009ea5d6b9b12689c1acc145ec6"}, {0xdd, 0x34, "87d599eb4c3fac875fcc90ebd68c19960978809095003f6bfcffb34b6b48c7ddb66fdef106dea466fab35b8dbe90405225258331"}, {0xdd, 0x55, "37f03c74b8c0b9c9b7a75f2ba0fb9ef93304e372f480802b76b7af95324883cbcaa5073ebfae9abc23f7cbce4a5525b17c76e69045cbadcb3993f5389dc191f9adec23fc2e6eae5cc0bcd73b859b3292a1e77f2f90"}, {0xdd, 0x79, "99bb6510e84bbced3fdf93d9dffcb23443eb3dd890411e17e05042ed5a4f19328d20bd162750030afb6b15797b10482e4d550d2998d84317bef1273d89949dd38f9b06a5272f89941c2f34fab2cb399ac476e2e7495908c355123cc667b17e7a42e542cfb9cda7346aecc9c64497863acc3dc66d226e52065f"}]}}, @NL80211_ATTR_IE={0xfa, 0x2a, [@preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x73, 0xe, 0xfff, @broadcast, 0x7, @void, 0x3, 0x800, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}]}}, @measure_req={0x26, 0x84, {0x2, 0x2, 0x80, "4fc862fab8bb36de2ffd6a4f0db9c6994b0a2d2e12b36044da3bc8fd94cbf77bed58928bfcd096032ffaffd9d43636e0af24915d88e1f747a27badf5725d79fd3096996a63bbf60eda37cec891ad05a13c9b84ec1f75fff1d28fe11380c3bd0e83f039f9a0508b37a189b17cf60e863827f590428d34913d33cf66c99a97331f24"}}, @ssid={0x0, 0xa, @random="ae888905926d81608048"}, @dsss={0x3, 0x1, 0x51}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1e, 0x80, @device_b, 0x0, @value=@broadcast, 0x9, 0x3, @device_a, 0x9}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xbe60, 0x0, 0x800, 0xe, 0x6, 0x3, 0x7, 0xfdea, 0xd, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x7, 0x8, 0x9, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x4, 0x5, 0x1, 0x9, 0x0, 0x3, 0x100, 0x57b5, 0x2d72]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x8, 0x7f, 0x0, 0x186, 0x2, 0x0, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xfa, 0x7f, [@fast_bss_trans={0x37, 0xf4, {0x5, 0x6, "77cdfda1bb93b32a9888d14bbd17f58a", "5c3d2083c4f70e7c2901c42a9bf8f3a5570856e70db794892aaf859ced2a98c4", "be336ded604dc7f25bba9b2741b686bc63ea5a05ca8492cd012534391d2f802b", [{0x2, 0x27, "f370262d84f8fa4ce2f4b7a63559ed173d639480556198cd9c5e94f0ded96926ec6b392b44cf5a"}, {0x1, 0xf, "53c5d34c0e59b61decb416da1543db"}, {0x4, 0x18, "ec01a0a49056f8fd8e449983f67918d660d717377fa5c350"}, {0x1, 0x21, "dccbcb87d331bf26f47e1a856297d060645b2470607fa8682ce468e23636b1d3a2"}, {0x1, 0x15, "a318e7a7f68671bd51ceaeb6089d5d86af7f70590b"}, {0x3, 0x12, "8424612f39c56dd0aa366b89ff13d63d51a1"}]}}]}, @NL80211_ATTR_PROBE_RESP={0x739, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x328, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x206, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@device_b, {0x0, 0x9}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x101, @default, 0x58, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xab, 0xf0}}, @void, @void, @void, @val={0x76, 0x6, {0x36, 0x6, 0x1c, 0x800}}, [{0xdd, 0x3c, "ba864481abeed39130ce904beb8919d73b3d713fef3c9117ad9645f815b4ff05ea46c800664925d38042b017d77c164b5a14268b70687ffe8568da4c"}, {0xdd, 0x74, "c7ca87570e217dbdd68f610784cd54e099aa9c999d33264d22af6b0d6b9d59a737fd754ca356e7340112cec3a4546dbc7b057627c1609f5c587d59108a38d8509cbc42a4ebfb354b2fd974bba5172b6c1b66cf2e8f9b17e67a1796d239ed068eee8e87a930f3ac24ab438f63743b80e4023b70c8"}, {0xdd, 0xf8, "c53881de524aa707b10509decea7f3ba75be49b49d98a83f36b1ca86ca65e96e69f4cf69e1c24956582257976d45bb8f0b49fbab1f9dc4349d6277e1c1b164e40722b641061e88769fb2cf521891d0a92c31f0a2cdfa82845f9b68b1856dc5cd430ab9690422767f8be0fd798da27f7d8b400e84ab4bab8e8b5a9109a59f7f142319080798a1ccd7a34deee3c8f8d7c22e27b43917f5030acd476c5b5c87082a2262091214e2b921c9e62eea87bbc4e635b3baf7b54c5bb23a9b60eb11531b17a19c74160dd6a31924c9ce38af1e753d85390f33321b9617fb3d8c144fa072534e2b707de7cce2e8f15091714b1e99969bb5615c9f3f751f"}, {0xdd, 0x1c, "adab0e199a518770e6407d647625688832a80ac122e867684cfd15db"}]}}, @NL80211_ATTR_BEACON_HEAD={0x3c0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @from_mac, {0x4, 0x80}, @value=@ver_80211n={0x0, 0xb7, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0xffffffffffffff81, @random=0x2, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x8, 0x0, 0xd, 0x7}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xf2, 0x64, 0x9}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0x3ff, 0x1ffc, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x22f9, 0x8b}}, @void, @void, @val={0x76, 0x6, {0x9, 0x2, 0x4082}}, [{0xdd, 0x95, "6356348b95ea21f22bdeaff308aa1e7a66c179d736ed2c10e573e30486b0455b29b3be65a700e7e696d9a87b844d8f2cba758bb9d4b4131bd163e33bf52552008d7f54ba8c0cb3dac7c6e71b891e36bb9c869a8df2695d3715217c724844eda333214664139f28204fe7433e2a91d55d07f67671f068f8903a4d79da972df8e6a6dcd19904c9dc009b0269781bb3c30fa4dfc0f282"}, {0xdd, 0x4a, "892d94835300e706ad2e22c23e043a110d38531ea2d5b9e674bc35bcd47ff7b3f67eb242a9f483960c67f44c9a598cb5492f87c86b8cc05bf32978c6fabcf6075363a6ed9be2b51bf144"}, {0xdd, 0xe4, "6ebdca4c21206b2b9a409232f0a15abad6ebaab18674e6d3657a9a7342d7bb23efd3b8b7f54fcc6c1998ea1079630b2fae0febc1648ece68462f58899af3946d4de9699cfac38477d9ff70cca69a8b4790f237780824c6151be9458e1715ca2ff4c0dd477e0ff2549076da7174c0d21f03311b62f96ff1ddab079d24e883af6866928e762eabf86c75932da6f2b11be0decf339a3bcf7ae8dd34b41687de24f61daad4ca444ff209eb77e8d8ec2e5d68dc54321f454a1ce89ece6b57e729229db4d7d48054821efc38ea53af799982b4ae8a9b8be679768a0b0d477b2363465c4162adbf"}, {0xdd, 0xd6, "2f479fb54809a7898b387ead5c10e55684597a5e14c823ccb81a77d18445e6fda8719f4171b9003abafa124498fdfd28e1075694c2cc4da0c78dcff1ce51afeadf29635de37431a1bb7da7f89ae0e0c769ae04bbca35a6495ee9148ec9b628ae555c823afa731b5684f02daf2d801d33a1a702dcfe44a74fad0a138e24a318a30bfcd43467fddf52634c4cca1bbfcf11e8a22cd930a5ff56bc40f55dfa12ec779bfb266e5e9ebfb99d957777025a3332a9b1d1bce06558591bc8c4660c43b754c87809ef29a240b2d80a387c37ad7f45175bec04682d"}, {0xdd, 0xb7, "1bb61cf90660d33b1e5a6af1f1751b8bfaececf5fdc7cb62eadb1d74f5dead21dccfd982ce24a3076069153df29553af54d29cfa3866f17e282d469219a3ac52683919b0c589000948691f3dd4baa69749ec00fe18c939fd8f784d70947b3f3ef40c1f7deb1ba0fd9bedca51f7882220bf41c66f819359df63c070c5d8c0cbfb4833f12722a94c542a09f8e442fba10555f068f170a4c4910b78747eb453a0c441ba79d04eec48cee23935cda09f622699b4c414988aeb"}]}}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x59f1b7021c9a2ac4}]}]]}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x80d0}, 0x80) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x3, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) 1m16.102485265s ago: executing program 2 (id=469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1m14.362487764s ago: executing program 2 (id=473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000001000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1m14.339096284s ago: executing program 2 (id=475): r0 = syz_clone(0xc890e800, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noquota}, {@debug}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}]}, 0x80, 0x62d, &(0x7f0000000600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0xffff7ff7fffffffc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r0) 1m14.054629079s ago: executing program 2 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x3ce, 0x1, 0x17126, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_opts(r9, 0x0, 0x2, 0x0, &(0x7f0000000080)) 1m13.708150925s ago: executing program 2 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value=0x380}, 0x48) 1m13.693165055s ago: executing program 32 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value=0x380}, 0x48) 23.803330297s ago: executing program 4 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="45f7000000000000000032000000040006"], 0x1c}}, 0x0) 23.434704613s ago: executing program 4 (id=710): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) syslog(0x4, 0xfffffffffffffffc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) close_range(r4, r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x1) 20.783190057s ago: executing program 4 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0x0, 0x0, 0x0, 0x88], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xfd}, [@RTA_IIF={0x8}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf090000000000005509010000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.628055866s ago: executing program 4 (id=720): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") fstat(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) r4 = gettid() r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r5, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r4, 0x7) lstat(&(0x7f0000003b00)='./file2\x00', 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r6, &(0x7f0000000140)="e5e5", 0x2, 0x0, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000900)={0x5d, 0xfffffffffffffffe, r9, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x2, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0x0, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x2000000005, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r10, r11, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80091, &(0x7f0000000a80)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@seclabel}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '{]'}}, {@dont_appraise}]}}, 0x1, 0x0, &(0x7f0000000900)) sendto$inet6(r7, &(0x7f00000000c0)="4ce8714c0dddf0086d86db54c42d942faf554e9e0f5ea4be0ca89057ffcbdf5addc3eb9426342c8ebd5f1a0b5e33fd1d859ac30345d95cd80ebe1f65a4cbd175e8ebe3853c05519a5eddd4ab67dc590229dc3e3105ba5c4dff9f9bb5ee6aa79dd0287d5427d38a9d580581853d5ee126f5a252d1fecb1a391ab417a6", 0x7c, 0x4040000, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1ff}, 0x1c) 18.601996582s ago: executing program 4 (id=727): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000005c0)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@errors_remount}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x7}]}}}]}, 0x3c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x8d00, [{0x0, 0x2}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x28) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x4e24, @multicast2}}) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 15.12086812s ago: executing program 4 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) (fail_nth: 2) 15.034913321s ago: executing program 33 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) (fail_nth: 2) 11.336942592s ago: executing program 1 (id=761): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.363326451s ago: executing program 1 (id=774): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 5.267282263s ago: executing program 1 (id=775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000eaffffffffffffff181100001ce6438b364a006dde5cd3b8cf93dae865b6e0e92146fd266184f79f132a84efeb836593d0f3b649fdf1852cdf0c6acc2b675083ad5d30c6d673c5c83c15ef2c813757488e86f3b427a1bbb7edb972ee0b83bbb69eb9cd44ed31f0d85803b2b277573daddc74463bf916ce77f1322761e1947d4b4288541750c53a161881c30bf6cdd15557d30a847f1389dde25377ece2bfe587b16d378b1e48d532ecf033161ff4038b1a2afa8e9894a769d382112fc3c32d07332d87c5923e67ac813a4adaba90adaeb4379dbf0ad7b614959be42061dcb97c0834c3d52e691ad3ebd1531e2cac1fb5246a0dcc8a8979b3", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x7a, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb37951e188392318, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x67a}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESOCT], 0x40}}], 0x1, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.387568357s ago: executing program 1 (id=779): getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffec4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000a00)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)="89b580b774f7f347a65d160e835baffbfdc9802dea2de93925ff5c163ff18967eeafd9623234c95863a7e12cf0770558a32188136ff1e8c44894b9619b147de7f21f6845f74a8e0e3edeb2fb1880590ab003c885ea91ca7bccdffc80c180cb97324c7d9d774c52b36133227f964ece223359b89bfccb6ee03ff014aa802817441ffa8446046b40aef8235b069a7004bb11fcaff87914ae6e603da82aa4bb73bd6cec66b2db71a3226f47e7ff073105fd8d25e585e20e5e3680", 0xb9}, {&(0x7f00000000c0)="f94e56f0ecf476561d3968fda42af9ce966a", 0x12}, {&(0x7f0000000300)="91c74961db01b2f10c4ebc9bb740c48f317a093f61e2103472f69860ce92ebe44dce416369a84e26e1dd18e96a1e5c3e768366d9ccc74d3c7cbd703dda586a44273801f8447ac3b9676539888dfe5e137732454f508c", 0x56}, {&(0x7f0000000380)="a2a362ac8da858cd6dd11710c3d3656ea450ed66c19f5f5a03452be24358a54f9884fdeb1b64df73399a1734e86ef176c9f54643ea1d1855b4c539cbf704b29b7268079a97801fa29f0dd98b74b86ce3e3dbd4b2f4159afd125fece4e9112f61efd58b2c4086e3c8e9", 0x69}, {&(0x7f0000000140)="49fa5bdb2d6e8b59f8a9bad1b705e4944e09bb4f01", 0x15}, {&(0x7f0000000400)="a212bd0038a1bb1830719ee428f93a5856c87d3f069953e19251427f72d68dbc1d8aa39a6dd9e1b83cfedeb646a19dc75d4a747ef5d5de", 0x37}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000000440)="d0024f898d99f0e3a45a1458b293414fe012a9634f0bbcdcb426c7bc7ca423e545c378c4e2422d05505224e8f20a90ef60b9ce18175df40def40ad6714088d09d1800826a6cfc4c86b9aaea3ac6c8c098556bad2d6eeb48ed3a09c11559498786e5fa4", 0x63}], 0x8}}, {{&(0x7f0000000540)=@isdn={0x22, 0x1, 0x5, 0xff, 0x96}, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)="9fc1382bf164ac7fa93691f96b15d904178d86e427f54fecb78ea0f3f56e57397b28c354a53b3cb99ada575c01ac7451147467", 0x33}, {&(0x7f0000000600)="5a71a44e6a53f25a42f068b73f83929bcca471115c62876d37fbffb0d5f5e1a59a41c52c47247bd6a7a56bbc64b20708f8439295b4e2d9a4550d96cbcb283e0d9065e3e87669becb9bdfae0519bddbfe722a872cbedd95f7a699f20eda9e960f8fa14320cd34bb20c3726963f36fe23862d6e9da47f7ba58474baa379277b55f340819511d523e4e0020e90c6508f356d13a38b0cd4a2986ba0c9f9cef27a8939e3c3009dd1b801ddfa7e2e328df8d15fb4fc3a7aaf285bf1be38230b0049853e5a7d0217a58d380eebc613bb933d254342ab9df94a90d4174f5b5cf73b4fb9216af514fab0c379c", 0xe8}, {&(0x7f0000000700)="bbcee8b6cce78f04151b828cb7bd6058baf693ee8978fd1792c9c7c8b4c298761726626aebbfb629383de06c0ffc073608e9c9144251", 0x36}, {&(0x7f0000000740)="e903d70c58d21dce831b4cfd0a14a9ca8f9a6ebfdd46a0de4e33a2c4ff5feea458a6d64974a780eaa87ccb56ae22446e931295ab77d5c27dd9c03e5dbe59d518b3677de3023fd27aecab49ff09cfa0ffbbef437d49576878386d8a2f450aaa58f7329167eb7e8cbbe94899ade9a14b5bcfd3f0d57544cabd97253683ac160ad94e76adfa890a962d36df0b4ceeb395e39c1e6b6130890a32efe4bc423bc20c3f4bcdd7", 0xa3}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000800)="713bceace5a3c6f9ca19d499ccea9fbb123aa5e3ff47e9636adef306662db07b6a6ab04f191dfbcb5ef239ae7bb55a2d2ec6ff835e793ecb3829234258d556b94edf7d4cc7639169ef61c16e50b8a590a8d7e254a0d76ce5da2361fd417eafb6712612eb5bdc1603d06c", 0x6a}, {&(0x7f0000000880)="bebbfc5c9965d3bd269370bd43a5930f705163fe100ab69973b0a13bbc5859271c79c5330b4e62a2d1a40944e392f473207ccd0605d1bb8ee1d0caa79418abcdf36e5f626e92cb1b0a4b463a0a5bb7ebe9f2544265d6274e6a27430f1442c37a0710aec8d4141bafd33df68f39ebdd7a104d6e8b0f21c943b79e9259e83d22b1e2fb82782c48b19bf266824eba22452aae44fdbd1e7fcef5e4c181efd186ad437d29d8ec398099d5959f3cc3b7fdcb9bed6052e31d0843b3650add7bd0bc688cb10ec149246bf6d508894158e06855514fc9c146aac02a8235984e1bfdb65b1eae9deed4", 0xe4}], 0x7}}], 0x2, 0x6000) 4.342255778s ago: executing program 1 (id=780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000830000c0"]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) writev(r8, &(0x7f0000001540), 0x0) setsockopt(r8, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x8a}) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x1, 0x1, 0x5}) inotify_init1(0x100800) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_register(r9, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000001, 0x3a, 'syzkaller\x00', 0x3a, '\\&/!', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x46, 0x4f, 0x43]}, 0x3a) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4.1873062s ago: executing program 1 (id=783): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000034fdeba50100b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$key(0xf, 0x3, 0x2) 888.866085ms ago: executing program 6 (id=785): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5529, &(0x7f0000000600)="$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") 552.09995ms ago: executing program 6 (id=788): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4000001, 0x3, 0xfd, "07000000000000000001001f820dac4eb71eed"}) r1 = syz_open_pts(r0, 0x800) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 452.129782ms ago: executing program 6 (id=792): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x8, @mcast2, 0xca0}, 0x1c) 426.585842ms ago: executing program 6 (id=793): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0xb207065) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 408.032563ms ago: executing program 5 (id=794): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) 312.685484ms ago: executing program 6 (id=798): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 276.818135ms ago: executing program 5 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000300)) 234.427095ms ago: executing program 5 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 234.226635ms ago: executing program 3 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x0) 172.254856ms ago: executing program 3 (id=809): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='$cpu'], 0x5) 171.967147ms ago: executing program 5 (id=810): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1) 171.795867ms ago: executing program 3 (id=811): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="54000000130003042cbd7000ffdbdf2518da05064e214e22e38a000005000000000000020600000082210000f4ffffffff0300008f120000", @ANYRES32=0x0, @ANYBLOB="ffffffff7f00000008040000000200000400f40004000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x5], 0x8000000, 0x28340}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10001) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/45, 0x2d, 0x10100, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480600001000ab", 0x7}], 0x1) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 94.380708ms ago: executing program 5 (id=814): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001e0021002bbd7000000000000a00000005000000200000"], 0x34}}, 0x0) 94.070838ms ago: executing program 0 (id=815): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x581, 0x0, 0x8000000000000001}]}) 93.904258ms ago: executing program 5 (id=816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x4}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 93.754428ms ago: executing program 0 (id=817): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x800000, 0x0) 85.942708ms ago: executing program 0 (id=818): clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700}) 85.459538ms ago: executing program 6 (id=819): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) bind$bt_hci(r2, &(0x7f0000000040), 0x6) write$bt_hci(r2, &(0x7f0000000100)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x14, 0x0, 0x21, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4050) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c089}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 79.838518ms ago: executing program 3 (id=820): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) 13.412469ms ago: executing program 3 (id=821): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) write$tcp_mem(r1, &(0x7f00000010c0), 0x3fffff) 13.218909ms ago: executing program 0 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="4d01000000000000000100e5", 0xc, 0x81, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0xaaaabc6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.903079ms ago: executing program 3 (id=823): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x28, 0x5, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 12.695279ms ago: executing program 0 (id=824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x76016, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV@\xad\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xd3\xfb\bv\x9e7\vd\nEe\x8bV4\xb8\xea\xff\x04\x11\xff\t\xd7E\x94\xe42\xa7\xa4\'A\xee\xcfy\x84\xf4\t\xc4o\xe4R\x11\xd4\xda\x8a\xba\xb4\x11N\xb8*\xe3\t\xdf\x12\xb9$(-\xdcn\x91v\xf4Wk\xa8\vU\x8e\xef\x15\x11u\xe3L\xc1\xa6\b{\xea8z\xed\xd35\xe4i\x19\xc6kp}]X\x8d\xcf[T') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=825): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(r0, 0x9) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.235711][ T1293] FAULT_INJECTION: forcing a failure. [ 71.235711][ T1293] name failslab, interval 1, probability 0, space 0, times 1 [ 71.285641][ T1293] CPU: 1 PID: 1293 Comm: syz.0.282 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 71.295512][ T1293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.305585][ T1293] Call Trace: [ 71.308879][ T1293] [ 71.311833][ T1293] __dump_stack+0x21/0x30 [ 71.316195][ T1293] dump_stack_lvl+0xee/0x150 [ 71.320799][ T1293] ? show_regs_print_info+0x20/0x20 [ 71.326017][ T1293] dump_stack+0x15/0x20 [ 71.330187][ T1293] should_fail+0x3c1/0x510 [ 71.334711][ T1293] __should_failslab+0xa4/0xe0 [ 71.339501][ T1293] should_failslab+0x9/0x20 [ 71.344023][ T1293] slab_pre_alloc_hook+0x3b/0xe0 [ 71.348980][ T1293] ? vfs_parse_fs_string+0xc8/0x160 [ 71.354196][ T1293] __kmalloc_track_caller+0x6c/0x2c0 [ 71.359541][ T1293] ? vfs_parse_fs_string+0xc8/0x160 [ 71.364858][ T1293] kmemdup_nul+0x2c/0xa0 [ 71.369106][ T1293] vfs_parse_fs_string+0xc8/0x160 [ 71.374231][ T1293] ? vfs_parse_fs_param+0x450/0x450 [ 71.379438][ T1293] do_new_mount+0x1d1/0xa20 [ 71.383948][ T1293] path_mount+0x675/0x1020 [ 71.388374][ T1293] ? user_path_at_empty+0x161/0x1c0 [ 71.393584][ T1293] __se_sys_mount+0x318/0x380 [ 71.398358][ T1293] ? __x64_sys_mount+0xd0/0xd0 [ 71.403473][ T1293] ? __ia32_sys_read+0x90/0x90 [ 71.408253][ T1293] __x64_sys_mount+0xbf/0xd0 [ 71.412852][ T1293] x64_sys_call+0x6bf/0x9a0 [ 71.417623][ T1293] do_syscall_64+0x4c/0xa0 [ 71.422041][ T1293] ? clear_bhb_loop+0x50/0xa0 [ 71.426718][ T1293] ? clear_bhb_loop+0x50/0xa0 [ 71.431399][ T1293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.437295][ T1293] RIP: 0033:0x7f9a5f14b9a9 [ 71.441717][ T1293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.461349][ T1293] RSP: 002b:00007f9a5d7b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.469768][ T1293] RAX: ffffffffffffffda RBX: 00007f9a5f372fa0 RCX: 00007f9a5f14b9a9 [ 71.477752][ T1293] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000200000000140 [ 71.485728][ T1293] RBP: 00007f9a5d7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.493703][ T1293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.501690][ T1293] R13: 0000000000000000 R14: 00007f9a5f372fa0 R15: 00007ffd8dadaa08 [ 71.509666][ T1293] [ 71.555317][ T1297] loop3: detected capacity change from 0 to 128 [ 71.756488][ T1297] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.037838][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 72.112760][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 72.181856][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 72.250344][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 72.321916][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 72.376278][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 72.383810][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 72.395369][ T1301] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 73.773988][ T1318] loop1: detected capacity change from 0 to 1024 [ 73.786143][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.883939][ T1318] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nombcache,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,user_xattr,delalloc,,errors=continue. Quota mode: none. [ 73.936405][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 73.936421][ T30] audit: type=1400 audit(1753568144.018:2098): avc: denied { setattr } for pid=1317 comm="syz.1.290" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.197064][ T1326] SELinux: Context : is not valid (left unmapped). [ 74.286417][ T30] audit: type=1400 audit(1753568144.288:2099): avc: denied { relabelto } for pid=1323 comm="syz.2.291" name="rdma.current" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 74.373249][ T6] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.383216][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.390169][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 74.406465][ T30] audit: type=1400 audit(1753568144.288:2100): avc: denied { associate } for pid=1323 comm="syz.2.291" name="rdma.current" dev="tmpfs" ino=211 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 74.431740][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.440533][ T6] usb 5-1: config 0 descriptor?? [ 74.773693][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 74.785928][ T1336] loop3: detected capacity change from 0 to 512 [ 74.796919][ T1336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.808507][ T1336] EXT4-fs (loop3): 1 truncate cleaned up [ 74.814245][ T1336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.879744][ T30] audit: type=1400 audit(1753568144.968:2101): avc: denied { unlink } for pid=287 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 74.932720][ T30] audit: type=1400 audit(1753568145.018:2102): avc: denied { bind } for pid=1344 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.011698][ T30] audit: type=1400 audit(1753568145.088:2103): avc: denied { ioctl } for pid=1344 comm="syz.2.299" path="socket:[18385]" dev="sockfs" ino=18385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.013891][ T6] magicmouse 0003:05AC:0269.0003: item fetching failed at offset 0/7 [ 75.067533][ T6] magicmouse 0003:05AC:0269.0003: magicmouse hid parse failed [ 75.075118][ T6] magicmouse: probe of 0003:05AC:0269.0003 failed with error -22 [ 75.404015][ T1360] loop2: detected capacity change from 0 to 512 [ 75.551059][ T422] usb 5-1: USB disconnect, device number 6 [ 75.696532][ T1360] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 75.705161][ T1360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.713081][ T1360] EXT4-fs (loop2): 1 orphan inode deleted [ 75.719666][ T1360] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.111539][ T568] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.220274][ T1374] serio: Serial port ptm0 [ 76.319541][ T1383] loop4: detected capacity change from 0 to 2048 [ 76.405639][ T1385] netlink: 'syz.3.307': attribute type 4 has an invalid length. [ 76.513955][ T1383] loop4: p1 < > p3 [ 76.599992][ T1383] loop4: p3 size 134217728 extends beyond EOD, truncated [ 76.607759][ T568] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 76.642325][ T568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 27648, setting to 64 [ 76.668888][ T568] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.20 [ 76.687958][ T568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.722729][ T568] usb 2-1: config 0 descriptor?? [ 76.746143][ T1358] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.794125][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 76.796557][ T403] udevd[403]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.819320][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 76.819678][ T403] udevd[403]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.927802][ T1398] netlink: 'syz.4.313': attribute type 3 has an invalid length. [ 77.304578][ T382] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 77.342872][ T1408] loop3: detected capacity change from 0 to 512 [ 77.406148][ T568] usbhid 2-1:0.0: can't add hid device: -71 [ 77.412198][ T568] usbhid: probe of 2-1:0.0 failed with error -71 [ 77.425588][ T568] usb 2-1: USB disconnect, device number 2 [ 77.433663][ T1408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.476097][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.556177][ T382] usb 3-1: Using ep0 maxpacket: 16 [ 79.582662][ T1425] loop3: detected capacity change from 0 to 256 [ 79.617939][ T1425] exfat: Bad value for 'gid' [ 80.502269][ T1437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 80.584247][ T1441] loop2: detected capacity change from 0 to 256 [ 80.613158][ T30] audit: type=1400 audit(1753568150.698:2104): avc: denied { map } for pid=1446 comm="syz.4.328" path="socket:[19605]" dev="sockfs" ino=19605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.630403][ T1451] loop4: detected capacity change from 0 to 512 [ 80.642950][ T30] audit: type=1400 audit(1753568150.698:2105): avc: denied { read accept } for pid=1446 comm="syz.4.328" path="socket:[19605]" dev="sockfs" ino=19605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.669200][ T382] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 80.683915][ T1441] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 80.686091][ T382] usb 3-1: can't read configurations, error -71 [ 80.723704][ T1451] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 80.796237][ T1451] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.031067][ T1463] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 81.038837][ T1463] netlink: 17 bytes leftover after parsing attributes in process `syz.2.326'. [ 81.249330][ T20] usb 1-1: device not accepting address 4, error -71 [ 81.319769][ T1444] loop3: detected capacity change from 0 to 40427 [ 81.346339][ T1444] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 81.360305][ T1444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 81.370253][ T1444] F2FS-fs (loop3): invalid crc value [ 81.377256][ T1444] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.424548][ T1444] F2FS-fs (loop3): Start checkpoint disabled! [ 81.479608][ T1444] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 81.486871][ T1444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 81.599318][ T1444] attempt to access beyond end of device [ 81.599318][ T1444] loop3: rw=2049, want=45104, limit=40427 [ 81.626279][ T20] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.697584][ T1444] attempt to access beyond end of device [ 81.697584][ T1444] loop3: rw=0, want=45104, limit=40427 [ 82.077018][ T332] attempt to access beyond end of device [ 82.077018][ T332] loop3: rw=2049, want=40984, limit=40427 [ 82.788109][ T1487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.337'. [ 82.902799][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 83.026105][ T20] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.046070][ T20] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.055932][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.076069][ T20] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 83.085151][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.113512][ T20] usb 1-1: config 0 descriptor?? [ 83.214254][ T1492] loop4: detected capacity change from 0 to 40427 [ 83.240095][ T1506] loop3: detected capacity change from 0 to 512 [ 83.269601][ T1492] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.277508][ T1492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.287852][ T1506] EXT4-fs (loop3): inodes count not valid: 32 vs 27 [ 83.295999][ T1492] F2FS-fs (loop4): invalid crc value [ 83.303235][ T1492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.344287][ T1492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.351544][ T1492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.597656][ T20] steelseries_srws1 0003:1038:1410.0004: missing HID_OUTPUT_REPORT 0 [ 83.694785][ T1522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.348'. [ 83.798545][ T382] usb 1-1: USB disconnect, device number 5 [ 84.198349][ T1527] loop4: detected capacity change from 0 to 512 [ 84.316367][ T1527] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 84.325037][ T1527] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.333393][ T1527] EXT4-fs (loop4): 1 orphan inode deleted [ 84.340061][ T1527] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.841854][ T1553] FAULT_INJECTION: forcing a failure. [ 84.841854][ T1553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.855072][ T1553] CPU: 0 PID: 1553 Comm: syz.4.357 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 84.864910][ T1553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.874993][ T1553] Call Trace: [ 84.878292][ T1553] [ 84.881239][ T1553] __dump_stack+0x21/0x30 [ 84.885597][ T1553] dump_stack_lvl+0xee/0x150 [ 84.890209][ T1553] ? show_regs_print_info+0x20/0x20 [ 84.895436][ T1553] ? __activate_page+0xd40/0xd40 [ 84.900404][ T1553] dump_stack+0x15/0x20 [ 84.904565][ T1553] should_fail+0x3c1/0x510 [ 84.908980][ T1553] should_fail_usercopy+0x1a/0x20 [ 84.914004][ T1553] copy_page_from_iter_atomic+0x3fb/0x1350 [ 84.919825][ T1553] ? pipe_zero+0x370/0x370 [ 84.924256][ T1553] generic_perform_write+0x307/0x670 [ 84.929545][ T1553] ? grab_cache_page_write_begin+0xb0/0xb0 [ 84.935349][ T1553] ? file_remove_privs+0x590/0x590 [ 84.940482][ T1553] ? rwsem_write_trylock+0x130/0x300 [ 84.945929][ T1553] ? clear_nonspinnable+0x60/0x60 [ 84.951173][ T1553] ? avc_policy_seqno+0x1b/0x70 [ 84.956061][ T1553] __generic_file_write_iter+0x268/0x480 [ 84.962041][ T1553] generic_file_write_iter+0xa9/0x1d0 [ 84.967446][ T1553] vfs_write+0x802/0xf70 [ 84.971706][ T1553] ? file_end_write+0x1b0/0x1b0 [ 84.976568][ T1553] ? wait_for_completion_killable_timeout+0x10/0x10 [ 84.983173][ T1553] ? __fget_files+0x2c4/0x320 [ 84.987867][ T1553] ? __fdget_pos+0x2d2/0x380 [ 84.992456][ T1553] ? ksys_write+0x71/0x240 [ 84.996869][ T1553] ksys_write+0x140/0x240 [ 85.001287][ T1553] ? __ia32_sys_read+0x90/0x90 [ 85.006076][ T1553] ? debug_smp_processor_id+0x17/0x20 [ 85.011477][ T1553] __x64_sys_write+0x7b/0x90 [ 85.016208][ T1553] x64_sys_call+0x8ef/0x9a0 [ 85.020754][ T1553] do_syscall_64+0x4c/0xa0 [ 85.025188][ T1553] ? clear_bhb_loop+0x50/0xa0 [ 85.029987][ T1553] ? clear_bhb_loop+0x50/0xa0 [ 85.034742][ T1553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.040659][ T1553] RIP: 0033:0x7f5b8554a9a9 [ 85.045092][ T1553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.064895][ T1553] RSP: 002b:00007f5b83bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.073327][ T1553] RAX: ffffffffffffffda RBX: 00007f5b85771fa0 RCX: 00007f5b8554a9a9 [ 85.081312][ T1553] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 85.089338][ T1553] RBP: 00007f5b83bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 85.097409][ T1553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.105608][ T1553] R13: 0000000000000000 R14: 00007f5b85771fa0 R15: 00007fff07181bb8 [ 85.113686][ T1553] [ 85.396710][ T30] audit: type=1400 audit(1753568155.488:2106): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.455109][ T1572] loop2: detected capacity change from 0 to 2048 [ 85.516849][ T403] Alternate GPT is invalid, using primary GPT. [ 85.528086][ T403] loop2: p1 p2 p3 [ 85.554637][ T1572] Alternate GPT is invalid, using primary GPT. [ 85.566195][ T1572] loop2: p1 p2 p3 [ 85.589084][ T1583] overlayfs: unrecognized mount option "verity=on" or missing value [ 85.614719][ T1583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 85.631039][ T1583] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 85.666263][ T30] audit: type=1400 audit(1753568155.718:2107): avc: denied { getopt } for pid=1582 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.707201][ T403] udevd[403]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 85.707501][ T334] udevd[334]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 85.728135][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 86.527567][ T30] audit: type=1400 audit(1753568156.608:2108): avc: denied { listen } for pid=1584 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.527605][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 86.549501][ T334] udevd[334]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 86.569379][ T403] udevd[403]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 86.673474][ T30] audit: type=1400 audit(1753568156.608:2109): avc: denied { accept } for pid=1584 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.781889][ T1601] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 87.124526][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 87.174067][ T1591] loop4: detected capacity change from 0 to 40427 [ 87.211043][ T1625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'. [ 87.232364][ T1591] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 87.240186][ T1591] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.250882][ T1591] F2FS-fs (loop4): invalid crc value [ 87.290459][ T1591] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 87.308274][ T1591] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.359054][ T1631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 87.431986][ T1591] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.439695][ T1591] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.525504][ T30] audit: type=1400 audit(1753568157.608:2110): avc: denied { setopt } for pid=1632 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.736156][ T58] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 88.960367][ T30] audit: type=1326 audit(1753568159.048:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 88.984864][ T30] audit: type=1326 audit(1753568159.078:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 89.008479][ T30] audit: type=1326 audit(1753568159.078:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 89.031882][ T30] audit: type=1326 audit(1753568159.078:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 89.050625][ T1665] loop3: detected capacity change from 0 to 1024 [ 89.061897][ T30] audit: type=1326 audit(1753568159.078:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 89.146172][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.175560][ T30] audit: type=1326 audit(1753568159.078:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 89.206586][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.218536][ T58] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 89.250006][ T1665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.259797][ T1673] loop1: detected capacity change from 0 to 512 [ 89.338855][ T1673] EXT4-fs (loop1): Ignoring removed nobh option [ 89.345408][ T1673] EXT4-fs (loop1): Test dummy encryption mode enabled [ 89.646488][ T1669] loop4: detected capacity change from 0 to 8192 [ 90.284644][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.295844][ T58] usb 3-1: config 0 descriptor?? [ 90.301594][ T1673] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 90.310193][ T1673] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.384: invalid indirect mapped block 2683928664 (level 1) [ 90.325345][ T1673] EXT4-fs (loop1): 1 truncate cleaned up [ 90.331041][ T1673] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,barrier,jqfmt=vfsv0,init_itable=0x0000000000000002,inode_readahead_blks=0x0000000000000080,test_dummy_encryption,,,errors=continue. Quota mode: writeback. [ 90.536133][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 90.542215][ T58] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.579296][ T58] usb 3-1: USB disconnect, device number 9 [ 90.693712][ T1685] loop2: detected capacity change from 0 to 256 [ 90.777678][ T1685] exfat: Bad value for 'gid' [ 92.244487][ T1706] FAULT_INJECTION: forcing a failure. [ 92.244487][ T1706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.281714][ T1708] loop1: detected capacity change from 0 to 16 [ 92.326071][ T1706] CPU: 0 PID: 1706 Comm: syz.0.400 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 92.335932][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.345997][ T1706] Call Trace: [ 92.349279][ T1706] [ 92.352215][ T1706] __dump_stack+0x21/0x30 [ 92.356639][ T1706] dump_stack_lvl+0xee/0x150 [ 92.361230][ T1706] ? show_regs_print_info+0x20/0x20 [ 92.366433][ T1706] dump_stack+0x15/0x20 [ 92.370589][ T1706] should_fail+0x3c1/0x510 [ 92.375017][ T1706] should_fail_alloc_page+0x55/0x80 [ 92.380218][ T1706] prepare_alloc_pages+0x156/0x600 [ 92.385337][ T1706] ? __alloc_pages_bulk+0xab0/0xab0 [ 92.390539][ T1706] ? cgroup_rstat_updated+0xf5/0x370 [ 92.395839][ T1706] __alloc_pages+0x10a/0x440 [ 92.400433][ T1706] ? prep_new_page+0x110/0x110 [ 92.405205][ T1706] handle_pte_fault+0xe89/0x2680 [ 92.410146][ T1706] ? fault_around_bytes_set+0xc0/0xc0 [ 92.415538][ T1706] ? memcpy+0x56/0x70 [ 92.419521][ T1706] do_handle_mm_fault+0x1a6d/0x1d50 [ 92.424725][ T1706] ? numa_migrate_prep+0xd0/0xd0 [ 92.429666][ T1706] ? userfaultfd_unmap_complete+0x275/0x2d0 [ 92.435560][ T1706] ? find_vma_from_tree+0xfd/0x110 [ 92.440670][ T1706] ? access_error+0x152/0x260 [ 92.445350][ T1706] do_user_addr_fault+0x554/0x1180 [ 92.450469][ T1706] ? do_kern_addr_fault+0x80/0x80 [ 92.455500][ T1706] ? vm_mmap_pgoff+0x25a/0x410 [ 92.460273][ T1706] ? debug_smp_processor_id+0x17/0x20 [ 92.465650][ T1706] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 92.471731][ T1706] ? exit_to_user_mode_prepare+0x39/0xa0 [ 92.477371][ T1706] exc_page_fault+0x51/0xb0 [ 92.481896][ T1706] asm_exc_page_fault+0x27/0x30 [ 92.486753][ T1706] RIP: 0033:0x7f9a5f00dd50 [ 92.491173][ T1706] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 92.511397][ T1706] RSP: 002b:00007f9a5d7b34a0 EFLAGS: 00010206 [ 92.517482][ T1706] RAX: 0000000000031000 RBX: 00007f9a5d7b3540 RCX: 0000000000000101 [ 92.525459][ T1706] RDX: 00000000000003e3 RSI: 0000000000000fe4 RDI: 00007f9a5d7b35e0 [ 92.533432][ T1706] RBP: 0000000000000102 R08: 00007f9a55394000 R09: 0000000000000005 [ 92.541403][ T1706] R10: 0000200000002f02 R11: 0000000000000bad R12: 0000000000000c01 [ 92.549374][ T1706] R13: 00007f9a5f1e9880 R14: 0000000000000017 R15: 00007f9a5d7b35e0 [ 92.557349][ T1706] [ 92.561778][ T1708] erofs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 92.593277][ T1706] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 92.637151][ T1712] loop2: detected capacity change from 0 to 256 [ 92.669245][ T1714] xt_bpf: check failed: parse error [ 92.679695][ T1716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 92.689787][ T1714] loop1: detected capacity change from 0 to 512 [ 92.797254][ T1712] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.906048][ T1724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 92.973870][ T1725] loop1: detected capacity change from 0 to 512 [ 93.137024][ T1729] loop4: detected capacity change from 0 to 256 [ 93.158034][ T1725] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.170352][ T1725] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.218966][ T1729] exfat: Deprecated parameter 'utf8' [ 93.376596][ T1729] exfat: Deprecated parameter 'namecase' [ 93.468908][ T1729] exfat: Deprecated parameter 'utf8' [ 93.488597][ T1729] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 93.604275][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 93.604291][ T30] audit: type=1400 audit(1753568676.692:2124): avc: denied { append } for pid=1728 comm="syz.4.409" path="/91/file0/cpu.stat" dev="loop4" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.659930][ T1738] binder_alloc: 1737: binder_alloc_buf, no vma [ 93.687264][ T30] audit: type=1400 audit(1753568676.692:2125): avc: denied { map } for pid=1728 comm="syz.4.409" path="/91/file0/cpu.stat" dev="loop4" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.210429][ T1756] loop1: detected capacity change from 0 to 512 [ 94.253555][ T1756] EXT4-fs (loop1): Unrecognized mount option "posixacl" or missing value [ 94.404743][ T1756] loop1: detected capacity change from 0 to 512 [ 94.434143][ T1756] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8 [ 94.509354][ T1763] loop3: detected capacity change from 0 to 16 [ 94.657392][ T1763] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 94.785570][ T1765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 95.861136][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 96.098128][ T1774] loop2: detected capacity change from 0 to 256 [ 96.150635][ T1774] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 96.196067][ T382] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.216213][ T1778] xt_hashlimit: max too large, truncated to 1048576 [ 96.252834][ T1780] loop4: detected capacity change from 0 to 1024 [ 96.276183][ T1770] loop3: detected capacity change from 0 to 40427 [ 96.289516][ T30] audit: type=1400 audit(1753568679.382:2126): avc: denied { remove_name } for pid=1766 comm="syz.2.420" name="file1" dev="loop2" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.316209][ T30] audit: type=1400 audit(1753568679.412:2127): avc: denied { rename } for pid=1766 comm="syz.2.420" name="file1" dev="loop2" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.339661][ T30] audit: type=1400 audit(1753568679.412:2128): avc: denied { unlink } for pid=1766 comm="syz.2.420" name="file2" dev="loop2" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.340186][ T1780] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 96.383003][ T1770] F2FS-fs (loop3): fault_injection options not supported [ 96.401500][ T30] audit: type=1400 audit(1753568679.492:2129): avc: denied { remove_name } for pid=1779 comm="syz.4.424" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.426633][ T1770] F2FS-fs (loop3): fault_type options not supported [ 96.446084][ T382] usb 2-1: Using ep0 maxpacket: 32 [ 96.446134][ T30] audit: type=1400 audit(1753568679.522:2130): avc: denied { rmdir } for pid=1779 comm="syz.4.424" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.465816][ T1770] F2FS-fs (loop3): invalid crc value [ 96.495322][ T1770] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.549488][ T1770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.566227][ T382] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 96.593028][ T382] usb 2-1: config 0 has no interface number 0 [ 96.599609][ T1792] loop4: detected capacity change from 0 to 512 [ 96.616162][ T382] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 96.629511][ T1770] attempt to access beyond end of device [ 96.629511][ T1770] loop3: rw=2049, want=77960, limit=40427 [ 96.643605][ T382] usb 2-1: config 0 interface 196 has no altsetting 0 [ 96.660575][ T1792] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.677619][ T1792] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.764333][ T30] audit: type=1400 audit(1753568679.852:2131): avc: denied { map } for pid=1769 comm="syz.3.422" path="/88/file0/memory.stat" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.788926][ T30] audit: type=1400 audit(1753568679.882:2132): avc: denied { read } for pid=1793 comm="syz.2.426" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.802660][ T1799] attempt to access beyond end of device [ 96.802660][ T1799] loop3: rw=2049, want=80032, limit=40427 [ 96.809534][ T382] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 96.830497][ T382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.838602][ T382] usb 2-1: Product: syz [ 96.839642][ T1799] attempt to access beyond end of device [ 96.839642][ T1799] loop3: rw=2049, want=81920, limit=40427 [ 96.842866][ T382] usb 2-1: Manufacturer: syz [ 96.858783][ T382] usb 2-1: SerialNumber: syz [ 96.869606][ T1799] attempt to access beyond end of device [ 96.869606][ T1799] loop3: rw=2049, want=51456, limit=40427 [ 96.886610][ T382] usb 2-1: config 0 descriptor?? [ 96.897131][ T1799] attempt to access beyond end of device [ 96.897131][ T1799] loop3: rw=2049, want=53248, limit=40427 [ 96.908485][ T1768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.932542][ T1799] attempt to access beyond end of device [ 96.932542][ T1799] loop3: rw=2049, want=60544, limit=40427 [ 96.982512][ T30] audit: type=1326 audit(1753568680.072:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5f14b9a9 code=0x7ffc0000 [ 97.033660][ T1808] xt_bpf: check failed: parse error [ 97.074371][ T282] attempt to access beyond end of device [ 97.074371][ T282] loop3: rw=2049, want=45112, limit=40427 [ 98.627842][ T1828] fuse: Bad value for 'fd' [ 98.637443][ T1830] syz.1.439[1830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.637536][ T1830] syz.1.439[1830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.759042][ T1833] overlayfs: missing 'lowerdir' [ 98.836157][ T382] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 98.856064][ T382] ipheth: probe of 2-1:0.196 failed with error -71 [ 98.879192][ T382] usb 2-1: USB disconnect, device number 3 [ 98.937489][ T1841] device bridge_slave_1 left promiscuous mode [ 98.943833][ T1841] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.963614][ T1841] device bridge_slave_0 left promiscuous mode [ 98.963647][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 98.970235][ T1841] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.259274][ T1847] loop2: detected capacity change from 0 to 512 [ 99.331869][ T1851] loop3: detected capacity change from 0 to 512 [ 99.368172][ T1847] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.407823][ T1847] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.439704][ T1851] EXT4-fs (loop3): Ignoring removed bh option [ 99.461640][ T1858] loop1: detected capacity change from 0 to 1024 [ 99.474524][ T1851] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 99.505684][ T1858] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 99.515601][ T1858] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 99.529165][ T1858] EXT4-fs error (device loop1): ext4_get_journal_inode:5149: inode #5: comm syz.1.442: unexpected bad inode w/o EXT4_IGET_BAD [ 99.543699][ T1858] EXT4-fs (loop1): no journal found [ 99.549207][ T1858] EXT4-fs (loop1): can't get journal size [ 99.575848][ T1858] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 100.268518][ T1863] loop4: detected capacity change from 0 to 4096 [ 100.390110][ T1863] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.399016][ T1863] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 102.172691][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 102.172946][ T30] audit: type=1326 audit(1753568684.993:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.439553][ T30] audit: type=1326 audit(1753568684.993:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.467918][ T30] audit: type=1326 audit(1753568685.003:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.495554][ T30] audit: type=1326 audit(1753568685.003:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.496844][ T1885] fuse: Bad value for 'fd' [ 102.527105][ T30] audit: type=1326 audit(1753568685.003:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.552116][ T30] audit: type=1326 audit(1753568685.013:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.948790][ T1888] tipc: Started in network mode [ 102.959398][ T1888] tipc: Node identity ac14140f, cluster identity 4711 [ 102.969560][ T30] audit: type=1326 audit(1753568685.013:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 102.997549][ T1888] tipc: New replicast peer: 255.255.255.255 [ 103.010470][ T1888] tipc: Enabled bearer , priority 10 [ 103.050424][ T30] audit: type=1326 audit(1753568685.023:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 103.092599][ T1890] loop2: detected capacity change from 0 to 512 [ 103.121116][ T1890] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.133103][ T30] audit: type=1326 audit(1753568685.023:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 103.158633][ T1890] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.165239][ T1890] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.455: bad orphan inode 15 [ 103.175740][ T1890] ext4_test_bit(bit=14, block=18) = 1 [ 103.181397][ T30] audit: type=1326 audit(1753568685.023:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1874 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 103.205309][ T1890] is_bad_inode(inode)=0 [ 103.209636][ T1890] NEXT_ORPHAN(inode)=1023 [ 103.214108][ T1890] max_ino=32 [ 103.217665][ T1890] i_nlink=0 [ 103.220997][ T1890] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2941: inode #15: comm syz.2.455: corrupted xattr block 19 [ 103.233578][ T1890] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 103.242895][ T1890] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.373818][ T1894] loop3: detected capacity change from 0 to 1024 [ 103.429754][ T1894] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 103.465622][ T1897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.695551][ T1894] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.715446][ T1894] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.733348][ T1894] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 103.740291][ T1894] EXT4-fs (loop3): mount failed [ 103.787184][ T1907] loop4: detected capacity change from 0 to 512 [ 104.136350][ T627] tipc: Node number set to 2886997007 [ 104.204030][ T1907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.286552][ T1907] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.116498][ T58] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 105.207063][ T1937] fuse: Bad value for 'fd' [ 105.237346][ T1931] loop1: detected capacity change from 0 to 40427 [ 106.972317][ T1958] loop2: detected capacity change from 0 to 1024 [ 107.041168][ T1958] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 107.049701][ T1958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e028, mo2=0000] [ 107.058348][ T1958] System zones: 0-1, 3-12 [ 107.063338][ T1958] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.070608][ T1958] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.475: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.084160][ T1958] EXT4-fs (loop2): Remounting filesystem read-only [ 107.091221][ T1958] EXT4-fs (loop2): 1 orphan inode deleted [ 107.097069][ T1958] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,journal_dev=0x0000000000000009,noquota,debug,errors=remount-ro,auto_da_alloc=0x0000000000000001,. Quota mode: writeback. [ 107.126160][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.150247][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 107.173768][ T1961] xt_hashlimit: max too large, truncated to 1048576 [ 107.205386][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /79/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 107.225701][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.248196][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 18: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.269491][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 19: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.290646][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 107.300309][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 20: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.321950][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.330303][ T58] usb 4-1: SerialNumber: syz [ 107.336747][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 21: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.357674][ T1923] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.373413][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 22: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.395074][ T58] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 107.405060][ T287] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 23: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 107.406796][ T58] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 107.432235][ T287] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz-executor: '. ' linked to parent dir [ 107.444317][ T287] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz-executor: '. ' linked to parent dir [ 107.630482][ T1923] UDC core: couldn't find an available UDC or it's busy: -16 [ 107.648204][ T1923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.660121][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 107.660137][ T30] audit: type=1400 audit(1753568690.753:2222): avc: denied { mounton } for pid=1972 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 107.664522][ T58] usb 4-1: USB disconnect, device number 3 [ 107.721044][ T1972] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.728267][ T1972] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.740880][ T1972] device bridge_slave_0 entered promiscuous mode [ 107.749321][ T1972] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.756575][ T1972] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.764442][ T1972] device bridge_slave_1 entered promiscuous mode [ 107.852398][ T1972] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.859514][ T1972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.867223][ T1972] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.874263][ T1972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.914154][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.922298][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.930249][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.940820][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.949281][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.956367][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.965409][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.974198][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.981307][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.998176][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.006502][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.017697][ T344] tipc: Disabling bearer [ 108.023251][ T344] tipc: Left network mode [ 108.030914][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.045207][ T1972] device veth0_vlan entered promiscuous mode [ 108.051677][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.060950][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.069115][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.084419][ T1972] device veth1_macvtap entered promiscuous mode [ 108.092110][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.109765][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.132463][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.142741][ T30] audit: type=1400 audit(1753568691.233:2223): avc: denied { mounton } for pid=1972 comm="syz-executor" path="/root/syzkaller.9M7pJt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 108.350451][ T1983] loop5: detected capacity change from 0 to 512 [ 108.461490][ T1983] EXT4-fs (loop5): Ignoring removed nobh option [ 108.496211][ T790] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.625993][ T1983] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.806216][ T790] usb 4-1: Using ep0 maxpacket: 8 [ 108.860623][ T1983] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.884961][ T1983] EXT4-fs warning (device loop5): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.936529][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.969241][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.988814][ T344] device bridge_slave_1 left promiscuous mode [ 108.999705][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.024167][ T1983] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 109.039510][ T1983] EXT4-fs (loop5): 1 truncate cleaned up [ 109.047199][ T790] usb 4-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.00 [ 109.057030][ T1983] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 109.081513][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.095715][ T344] device bridge_slave_0 left promiscuous mode [ 109.192817][ T790] usb 4-1: config 0 descriptor?? [ 109.197995][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.206721][ T344] device veth0_vlan left promiscuous mode [ 109.274843][ T30] audit: type=1326 audit(1753568692.363:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.357372][ T30] audit: type=1326 audit(1753568692.393:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.393572][ T30] audit: type=1326 audit(1753568692.393:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.420124][ T30] audit: type=1326 audit(1753568692.393:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.446627][ T2004] loop4: detected capacity change from 0 to 512 [ 109.474153][ T30] audit: type=1326 audit(1753568692.393:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.505944][ T30] audit: type=1326 audit(1753568692.393:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.530127][ T30] audit: type=1326 audit(1753568692.393:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.556343][ T30] audit: type=1326 audit(1753568692.393:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.1.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa48f1009a9 code=0x7ffc0000 [ 109.983425][ T2012] xt_hashlimit: max too large, truncated to 1048576 [ 109.993566][ T2012] loop1: detected capacity change from 0 to 128 [ 110.157388][ T2012] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: none. [ 110.169167][ T2012] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.495031][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.502069][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.509281][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.516231][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.523349][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.530311][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.574863][ T790] ntrig 0003:1B96:000B.0005: unknown main item tag 0x0 [ 110.611329][ T790] ntrig 0003:1B96:000B.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000b] on usb-dummy_hcd.3-1/input0 [ 110.884244][ T2025] loop4: detected capacity change from 0 to 1024 [ 111.933207][ T790] ntrig 0003:1B96:000B.0005: Firmware version: 5.1.24.7.5 (c7ba e508) [ 111.953003][ T790] usb 4-1: USB disconnect, device number 4 [ 112.018472][ T2029] loop3: detected capacity change from 0 to 512 [ 112.037697][ T2029] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 112.047314][ T2029] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.053936][ T2029] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.492: bad orphan inode 15 [ 112.073809][ T2025] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 112.079811][ T2029] ext4_test_bit(bit=14, block=18) = 1 [ 112.083685][ T2025] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 112.102580][ T2025] EXT4-fs error (device loop4): ext4_get_journal_inode:5149: inode #5: comm syz.4.491: unexpected bad inode w/o EXT4_IGET_BAD [ 112.112455][ T2029] is_bad_inode(inode)=0 [ 112.120527][ T2029] NEXT_ORPHAN(inode)=1023 [ 112.120543][ T2025] EXT4-fs (loop4): no journal found [ 112.125025][ T2029] max_ino=32 [ 112.130272][ T2025] EXT4-fs (loop4): can't get journal size [ 112.134000][ T2029] i_nlink=0 [ 112.143660][ T2025] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 112.164552][ T2032] netlink: 'syz.1.494': attribute type 3 has an invalid length. [ 112.173364][ T2029] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2941: inode #15: comm syz.3.492: corrupted xattr block 19 [ 112.193803][ T2029] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 112.212364][ T2029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.230810][ T2035] fido_id[2035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 112.463811][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.479250][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 112.488691][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 112.497282][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 112.506777][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 112.516154][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 112.526448][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 112.911509][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 113.379201][ T2057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'. [ 113.744236][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 113.744252][ T30] audit: type=1400 audit(1753568696.833:2277): avc: denied { mount } for pid=2059 comm="syz.4.499" name="/" dev="configfs" ino=13658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 113.829342][ T2060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.499'. [ 113.960767][ T30] audit: type=1400 audit(1753568697.053:2278): avc: denied { read } for pid=2064 comm="syz.4.501" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.056338][ T2067] fuse: Bad value for 'fd' [ 114.065159][ T30] audit: type=1400 audit(1753568697.083:2279): avc: denied { open } for pid=2064 comm="syz.4.501" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.166292][ T30] audit: type=1400 audit(1753568697.083:2280): avc: denied { ioctl } for pid=2064 comm="syz.4.501" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.206047][ T382] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.356839][ T2074] loop1: detected capacity change from 0 to 128 [ 114.620886][ T2074] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.687749][ T2074] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.742693][ T2074] EXT4-fs warning (device loop1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 114.796382][ T2079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.507'. [ 114.856593][ T382] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 114.865813][ T382] usb 4-1: config 0 has no interface number 0 [ 115.026123][ T382] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 115.035632][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.043963][ T382] usb 4-1: Product: syz [ 115.048564][ T382] usb 4-1: Manufacturer: syz [ 115.053240][ T382] usb 4-1: SerialNumber: syz [ 115.076774][ T382] usb 4-1: config 0 descriptor?? [ 115.121907][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.137087][ T382] ftdi_sio 4-1:0.117: FTDI USB Serial Device converter detected [ 115.150560][ T382] usb 4-1: Detected FT232H [ 115.156537][ T2092] fuse: Bad value for 'fd' [ 115.164339][ T30] audit: type=1326 audit(1753568698.253:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2089 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 115.220845][ T30] audit: type=1326 audit(1753568698.253:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2089 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 115.247061][ T30] audit: type=1326 audit(1753568698.253:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2089 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 115.270888][ T30] audit: type=1326 audit(1753568698.253:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2089 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b85549310 code=0x7ffc0000 [ 115.299486][ T30] audit: type=1326 audit(1753568698.253:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2089 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 115.323542][ T30] audit: type=1326 audit(1753568698.253:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2089 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 115.366155][ T382] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 115.386138][ T382] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 115.406142][ T382] ftdi_sio 4-1:0.117: GPIO initialisation failed: -71 [ 115.416347][ T382] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.435552][ T382] usb 4-1: USB disconnect, device number 5 [ 115.466240][ T382] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.476844][ T382] ftdi_sio 4-1:0.117: device disconnected [ 115.496313][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.514965][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 115.524310][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.546089][ T6] usb 2-1: config 0 descriptor?? [ 115.563913][ T2099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.514'. [ 115.842389][ T2108] loop5: detected capacity change from 0 to 40427 [ 115.893803][ T2108] F2FS-fs (loop5): Invalid log sectorsize (32) [ 115.899479][ T2111] loop3: detected capacity change from 0 to 256 [ 115.908478][ T2108] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 115.920504][ T2108] F2FS-fs (loop5): invalid crc value [ 115.927572][ T2108] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 115.953337][ T2108] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 115.960827][ T2108] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.992044][ T2119] loop3: detected capacity change from 0 to 16 [ 116.000106][ T2119] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.029389][ T6] wacom 0003:056A:00C6.0006: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.1-1/input0 [ 116.389727][ T790] usb 2-1: USB disconnect, device number 4 [ 116.945971][ T2151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 118.231195][ T2161] loop3: detected capacity change from 0 to 512 [ 119.236333][ T2161] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 119.244999][ T2161] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.253334][ T2161] EXT4-fs (loop3): 1 orphan inode deleted [ 119.259457][ T2161] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.274053][ T2170] loop5: detected capacity change from 0 to 512 [ 119.321330][ T2174] netlink: 'syz.4.537': attribute type 7 has an invalid length. [ 119.330243][ T2174] netlink: 'syz.4.537': attribute type 5 has an invalid length. [ 119.338027][ T2174] netlink: 17 bytes leftover after parsing attributes in process `syz.4.537'. [ 119.366998][ T2170] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.404041][ T2170] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.424778][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 119.424794][ T30] audit: type=1400 audit(1753568702.513:2305): avc: denied { mount } for pid=2181 comm="syz.4.539" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.533297][ T2184] tipc: Started in network mode [ 119.538432][ T2184] tipc: Node identity 32c8a313797f, cluster identity 4711 [ 119.546038][ T2184] tipc: Enabled bearer , priority 0 [ 119.557207][ T2184] device syzkaller0 entered promiscuous mode [ 119.954041][ T2187] overlayfs: workdir and upperdir must reside under the same mount [ 119.962605][ T30] audit: type=1400 audit(1753568703.043:2306): avc: denied { mounton } for pid=2181 comm="syz.4.539" path="/116/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 119.978241][ T2187] SELinux: security_context_str_to_sid(uncon©ineF_u) failed for (dev ?, type ?) errno=-22 [ 120.013310][ T2187] incfs: Can't find or create .index dir in ./file0 [ 120.020337][ T2187] incfs: mount failed -1 [ 120.151281][ T2171] tipc: Resetting bearer [ 120.160446][ T2171] tipc: Disabling bearer [ 120.169637][ T30] audit: type=1400 audit(1753568703.113:2307): avc: denied { search } for pid=2181 comm="syz.4.539" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 120.756677][ T30] audit: type=1400 audit(1753568703.113:2308): avc: denied { write } for pid=2181 comm="syz.4.539" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 120.790919][ T2191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 121.032712][ T2193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 121.281999][ T30] audit: type=1400 audit(1753568704.373:2309): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.330100][ T2196] loop4: detected capacity change from 0 to 512 [ 121.429016][ T30] audit: type=1400 audit(1753568704.523:2310): avc: denied { connect } for pid=2188 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.457332][ T2196] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.469227][ T2196] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.546593][ T2204] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.163854][ T2216] loop3: detected capacity change from 0 to 16 [ 122.356831][ T2216] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 122.607077][ T2219] loop5: detected capacity change from 0 to 512 [ 122.786976][ T2219] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 122.786976][ T2219] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 122.786976][ T2219] [ 123.058663][ T2219] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 123.076146][ T2219] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 123.170501][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 123.411047][ T2226] incfs: iterate_incfs_dir / -22 [ 123.419536][ T2229] syz.1.552[2229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.419618][ T2229] syz.1.552[2229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.433200][ T2219] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.549: iget: bad extended attribute block 1 [ 123.458096][ T2219] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.549: couldn't read orphan inode 15 (err -117) [ 123.470620][ T2219] EXT4-fs (loop5): mounted filesystem without journal. Opts: noacl,norecovery,mblk_io_submit,jqfmt=vfsv1,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: none. [ 123.491917][ T2219] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #2: block 13: comm syz.5.549: lblock 0 mapped to illegal pblock 13 (length 1) [ 123.511422][ T2231] loop3: detected capacity change from 0 to 256 [ 123.549999][ T30] audit: type=1400 audit(1753568706.643:2311): avc: denied { create } for pid=2228 comm="syz.1.552" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 123.619100][ T2236] loop1: detected capacity change from 0 to 512 [ 123.645865][ T30] audit: type=1400 audit(1753568706.733:2312): avc: denied { write } for pid=2230 comm="syz.3.553" name="route" dev="proc" ino=4026532400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.695713][ T2238] xt_l2tp: unknown flags: 10 [ 123.706597][ T30] audit: type=1400 audit(1753568706.733:2313): avc: denied { read } for pid=2221 comm="syz.0.551" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.801750][ T30] audit: type=1400 audit(1753568706.733:2314): avc: denied { open } for pid=2221 comm="syz.0.551" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.012960][ T2246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'. [ 124.836496][ T2250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 125.526158][ T2247] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 125.535693][ T2247] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 125.688172][ T2259] netlink: 'syz.4.559': attribute type 27 has an invalid length. [ 125.740203][ T2261] loop3: detected capacity change from 0 to 512 [ 125.773708][ T2259] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.781012][ T2259] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.824195][ T2261] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 125.837309][ T2259] device veth0_to_batadv left promiscuous mode [ 126.167955][ T2259] device bridge1 left promiscuous mode [ 126.235053][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.242196][ T2264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.269151][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.276359][ T2264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.294364][ T2264] device veth0_vlan left promiscuous mode [ 126.310662][ T2264] device veth0_vlan entered promiscuous mode [ 126.316938][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.340240][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.357217][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.387657][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.796869][ T2284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 128.806560][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.815083][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.842964][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 128.868429][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.960082][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.976501][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.994795][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.312497][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.323803][ T2292] loop1: detected capacity change from 0 to 512 [ 129.331078][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 129.371255][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.400708][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 129.430441][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.480970][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.492825][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.501612][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.510182][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.520895][ T2292] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.528753][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 129.539979][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 129.546699][ T2292] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.558162][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 129.569962][ T2295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.573'. [ 129.579026][ T2295] netlink: 164 bytes leftover after parsing attributes in process `syz.0.573'. [ 129.666075][ T2309] loop5: detected capacity change from 0 to 512 [ 129.736988][ T30] audit: type=1400 audit(1753568712.833:2315): avc: denied { create } for pid=2308 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.912692][ T2318] loop3: detected capacity change from 0 to 256 [ 129.919113][ T2309] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.575: inode #1: comm syz.5.575: iget: illegal inode # [ 130.129622][ T2318] FAT-fs (loop3): bogus number of FAT sectors [ 130.207943][ T2318] FAT-fs (loop3): Can't find a valid FAT filesystem [ 130.976084][ T2309] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.575: error while reading EA inode 1 err=-117 [ 131.049138][ T2309] EXT4-fs (loop5): 1 orphan inode deleted [ 131.054961][ T2309] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 131.231291][ T2336] fuse: Bad value for 'fd' [ 131.290676][ T2340] loop4: detected capacity change from 0 to 2048 [ 131.340996][ T2344] tipc: Started in network mode [ 131.348114][ T2344] tipc: Node identity ac14140f, cluster identity 4711 [ 131.357951][ T2344] tipc: New replicast peer: 255.255.255.255 [ 131.361838][ T2340] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 133.580039][ T2344] tipc: Enabled bearer , priority 10 [ 133.693881][ T2355] loop5: detected capacity change from 0 to 256 [ 133.748194][ T2355] FAT-fs (loop5): Directory bread(block 64) failed [ 133.754824][ T2355] FAT-fs (loop5): Directory bread(block 65) failed [ 133.761615][ T2355] FAT-fs (loop5): Directory bread(block 66) failed [ 133.768215][ T2355] FAT-fs (loop5): Directory bread(block 67) failed [ 133.774769][ T2355] FAT-fs (loop5): Directory bread(block 68) failed [ 133.781348][ T2355] FAT-fs (loop5): Directory bread(block 69) failed [ 133.788492][ T2355] FAT-fs (loop5): Directory bread(block 70) failed [ 133.795032][ T2355] FAT-fs (loop5): Directory bread(block 71) failed [ 133.801729][ T2355] FAT-fs (loop5): Directory bread(block 72) failed [ 133.808337][ T2355] FAT-fs (loop5): Directory bread(block 73) failed [ 134.101983][ T2355] attempt to access beyond end of device [ 134.101983][ T2355] loop5: rw=2049, want=1228, limit=256 [ 134.114036][ T2355] attempt to access beyond end of device [ 134.114036][ T2355] loop5: rw=2049, want=1228, limit=256 [ 135.300900][ T58] tipc: Node number set to 2886997007 [ 135.427259][ T2379] loop5: detected capacity change from 0 to 2048 [ 136.501029][ T2384] overlayfs: failed to resolve './file0': -2 [ 137.041103][ T2379] loop5: p1 < > p4 [ 137.056195][ T30] audit: type=1400 audit(1753568720.123:2316): avc: denied { name_bind } for pid=2376 comm="syz.5.596" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.156597][ T2379] loop5: p4 size 8388608 extends beyond EOD, truncated [ 137.574515][ T403] udevd[403]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 137.615368][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 138.374177][ T30] audit: type=1400 audit(1753568721.463:2317): avc: denied { create } for pid=2404 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 138.435783][ T30] audit: type=1326 audit(1753568721.523:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5f14b9a9 code=0x7ffc0000 [ 138.486146][ T30] audit: type=1326 audit(1753568721.553:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5f14b9a9 code=0x7ffc0000 [ 138.527915][ T2421] loop1: detected capacity change from 0 to 512 [ 138.548239][ T30] audit: type=1326 audit(1753568721.553:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5f14b9a9 code=0x7ffc0000 [ 138.575390][ T30] audit: type=1326 audit(1753568721.553:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5f14b9a9 code=0x7ffc0000 [ 138.600368][ T30] audit: type=1326 audit(1753568721.553:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a5f14a310 code=0x7ffc0000 [ 138.626650][ T30] audit: type=1326 audit(1753568721.553:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9a5f14a3bc code=0x7ffc0000 [ 138.636133][ T2421] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 138.650303][ T30] audit: type=1326 audit(1753568721.553:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9a5f14a3bc code=0x7ffc0000 [ 138.712707][ T2421] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.721432][ T2421] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.611: bad orphan inode 15 [ 138.748818][ T2421] ext4_test_bit(bit=14, block=18) = 1 [ 138.754827][ T2421] is_bad_inode(inode)=0 [ 138.776098][ T2421] NEXT_ORPHAN(inode)=1023 [ 138.780507][ T2421] max_ino=32 [ 138.783730][ T2421] i_nlink=0 [ 138.787857][ T30] audit: type=1326 audit(1753568721.553:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9a5f14a3bc code=0x7ffc0000 [ 138.817992][ T2421] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2941: inode #15: comm syz.1.611: corrupted xattr block 19 [ 138.836304][ T2421] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 138.869241][ T2421] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.042119][ T2442] loop4: detected capacity change from 0 to 512 [ 139.298994][ T2442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.381151][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 139.390244][ T2442] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.691831][ T2458] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 139.737587][ T2459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.622'. [ 139.918206][ T58] usb 6-1: device descriptor read/64, error -71 [ 139.946548][ T2469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.625'. [ 139.955632][ T2469] netlink: 140 bytes leftover after parsing attributes in process `syz.0.625'. [ 140.677969][ T58] usb 6-1: device descriptor read/64, error -71 [ 141.704055][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.056204][ T2506] loop1: detected capacity change from 0 to 512 [ 142.065869][ T1194] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.127943][ T2506] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 142.136576][ T2506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.144362][ T2506] EXT4-fs (loop1): 1 orphan inode deleted [ 142.150724][ T2506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.351148][ T2520] loop5: detected capacity change from 0 to 256 [ 142.387875][ T2521] loop3: detected capacity change from 0 to 2048 [ 142.406175][ T1194] usb 5-1: Using ep0 maxpacket: 16 [ 142.446833][ T2521] loop3: p1 < > p3 [ 142.451312][ T2521] loop3: p3 size 134217728 extends beyond EOD, truncated [ 142.488382][ T30] kauditd_printk_skb: 752 callbacks suppressed [ 142.488398][ T30] audit: type=1400 audit(1753568726.581:3078): avc: denied { read write } for pid=2518 comm="syz.5.643" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.546127][ T1194] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.606119][ T1194] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.616231][ T1194] usb 5-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.631505][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.656166][ T1194] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.676054][ T30] audit: type=1400 audit(1753568726.621:3079): avc: denied { open } for pid=2518 comm="syz.5.643" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.686299][ T1194] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00 [ 142.713236][ T2529] loop1: detected capacity change from 0 to 1024 [ 142.721515][ T1194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.737576][ T2532] loop5: detected capacity change from 0 to 512 [ 142.748300][ T1194] usb 5-1: config 0 descriptor?? [ 142.761568][ T2529] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 142.777543][ T2529] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 142.786886][ T2532] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 142.801380][ T2532] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.810642][ T2529] EXT4-fs error (device loop1): ext4_get_journal_inode:5149: inode #5: comm syz.1.646: unexpected bad inode w/o EXT4_IGET_BAD [ 142.824049][ T2532] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 142.833253][ T2529] EXT4-fs (loop1): no journal found [ 142.839560][ T2529] EXT4-fs (loop1): can't get journal size [ 142.845686][ T2532] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 142.855326][ T2532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 142.864040][ T2529] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 142.883805][ T2532] System zones: 0-2, 18-18, 34-34 [ 142.916716][ T2532] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.647: iget: bad i_size value: 360287970189639680 [ 142.932828][ T2532] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.647: couldn't read orphan inode 15 (err -117) [ 142.945272][ T2532] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 142.970541][ T30] audit: type=1400 audit(1753568727.061:3080): avc: denied { lock } for pid=2531 comm="syz.5.647" path="socket:[23365]" dev="sockfs" ino=23365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 143.146343][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.386342][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 143.566566][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 143.766144][ T26] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 143.776208][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.784331][ T26] usb 4-1: Product: syz [ 143.789018][ T26] usb 4-1: Manufacturer: syz [ 143.793779][ T26] usb 4-1: SerialNumber: syz [ 143.820690][ T26] usb 4-1: config 0 descriptor?? [ 143.891028][ T26] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 143.986268][ T30] audit: type=1400 audit(1753568984.059:3081): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1026 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.060489][ T30] audit: type=1400 audit(1753568984.059:3082): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1026 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.094320][ T30] audit: type=1400 audit(1753568984.059:3083): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1026 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.175291][ T26] usb 4-1: USB disconnect, device number 6 [ 144.233525][ T2553] loop1: detected capacity change from 0 to 256 [ 144.257849][ T2553] FAT-fs (loop1): Unrecognized mount option "sQortname=lower" or missing value [ 144.332542][ T2562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.655'. [ 144.909605][ T58] usb 5-1: USB disconnect, device number 8 [ 145.576072][ T30] audit: type=1326 audit(1753568985.649:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2573 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 145.653529][ T2574] loop4: detected capacity change from 0 to 16 [ 145.703941][ T30] audit: type=1326 audit(1753568985.649:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2573 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 145.737330][ T30] audit: type=1326 audit(1753568985.659:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2573 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 145.761159][ T30] audit: type=1326 audit(1753568985.659:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2573 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8554a9a9 code=0x7ffc0000 [ 145.824007][ T2582] loop5: detected capacity change from 0 to 1024 [ 145.826084][ T2574] erofs: (device loop4): erofs_read_superblock: invalid sb_extslots 4160 (more than a fs block) [ 145.892720][ T2582] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.942149][ T2584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 146.043781][ T2596] loop5: detected capacity change from 0 to 4096 [ 146.097000][ T2598] loop3: detected capacity change from 0 to 256 [ 146.124135][ T2596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.294461][ T2594] loop4: detected capacity change from 0 to 40427 [ 146.332123][ T2594] F2FS-fs (loop4): invalid crc value [ 146.349630][ T2594] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.433191][ T2594] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.569747][ T2620] loop5: detected capacity change from 0 to 512 [ 147.244384][ T2620] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.430333][ T2620] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.473222][ T2629] loop3: detected capacity change from 0 to 512 [ 147.893467][ T2638] device erspan0 entered promiscuous mode [ 148.264682][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 148.470575][ T2647] netlink: 96 bytes leftover after parsing attributes in process `syz.5.678'. [ 148.481435][ T2647] kernel profiling enabled (shift: 8) [ 148.524600][ T2654] netlink: 68 bytes leftover after parsing attributes in process `syz.5.684'. [ 148.640359][ T2655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.513577][ T2667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 149.735170][ T2669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 150.191788][ T2665] loop1: detected capacity change from 0 to 40427 [ 150.214818][ T2665] F2FS-fs (loop1): invalid crc value [ 150.254817][ T2665] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.303052][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 150.303069][ T30] audit: type=1326 audit(1753568991.392:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99d78a9a9 code=0x7ffc0000 [ 150.516090][ T2683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 150.659561][ T2665] F2FS-fs (loop1): Start checkpoint disabled! [ 150.707873][ T30] audit: type=1326 audit(1753568991.432:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb99d781967 code=0x7ffc0000 [ 150.716301][ T2665] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 150.751349][ T30] audit: type=1326 audit(1753568991.432:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb99d726b89 code=0x7ffc0000 [ 150.785785][ T30] audit: type=1326 audit(1753568991.432:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99d78a9a9 code=0x7ffc0000 [ 150.846525][ T30] audit: type=1326 audit(1753568991.432:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb99d781967 code=0x7ffc0000 [ 150.895822][ T30] audit: type=1326 audit(1753568991.432:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb99d726b89 code=0x7ffc0000 [ 151.031757][ T30] audit: type=1326 audit(1753568991.432:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb99d78a9a9 code=0x7ffc0000 [ 151.084791][ T30] audit: type=1326 audit(1753568991.432:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99d78a9a9 code=0x7ffc0000 [ 151.336062][ T30] audit: type=1326 audit(1753568991.442:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99d78a9a9 code=0x7ffc0000 [ 151.493667][ T2690] loop4: detected capacity change from 0 to 256 [ 151.500756][ T30] audit: type=1326 audit(1753568991.492:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb99d781967 code=0x7ffc0000 [ 151.613949][ T2690] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 151.656130][ T2690] exfat: Unknown parameter 'fsmagic' [ 152.375473][ T2703] loop4: detected capacity change from 0 to 2048 [ 154.071390][ T2708] loop5: detected capacity change from 0 to 512 [ 154.737796][ T2703] Alternate GPT is invalid, using primary GPT. [ 154.752546][ T2703] loop4: p1 p2 p3 [ 154.758648][ T2708] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.787027][ T2711] loop3: detected capacity change from 0 to 512 [ 154.803348][ T2708] EXT4-fs (loop5): 1 truncate cleaned up [ 154.809119][ T2708] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 154.837833][ T2706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.884517][ T2711] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.974531][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 155.017424][ T334] udevd[334]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 155.041527][ T403] udevd[403]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 155.391770][ T2731] loop4: detected capacity change from 0 to 512 [ 155.416124][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 155.416149][ T30] audit: type=1400 audit(1753568996.502:3207): avc: denied { ioctl } for pid=2733 comm="syz.5.704" path="socket:[24773]" dev="sockfs" ino=24773 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.477159][ T2731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.702: inode #1: comm syz.4.702: iget: illegal inode # [ 155.501648][ T2731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.702: error while reading EA inode 1 err=-117 [ 155.544383][ T30] audit: type=1400 audit(1753568996.502:3208): avc: denied { write } for pid=2733 comm="syz.5.704" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.576350][ T2731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.702: inode #1: comm syz.4.702: iget: illegal inode # [ 155.608417][ T30] audit: type=1400 audit(1753568996.502:3209): avc: denied { open } for pid=2733 comm="syz.5.704" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.626551][ T2731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.702: error while reading EA inode 1 err=-117 [ 155.696290][ T2731] EXT4-fs (loop4): 1 orphan inode deleted [ 155.716038][ T2731] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 155.784660][ T2742] loop3: detected capacity change from 0 to 512 [ 155.820841][ T2742] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 155.860513][ T2742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 155.890049][ T30] audit: type=1400 audit(1753568996.982:3210): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 155.896643][ T2742] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.956299][ T2742] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.706: bg 0: block 361: padding at end of block bitmap is not set [ 155.976112][ T2742] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 155.984373][ T2734] loop5: detected capacity change from 0 to 40427 [ 155.984938][ T30] audit: type=1400 audit(1753568997.072:3211): avc: denied { read write } for pid=2733 comm="syz.5.704" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.026312][ T2742] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.706: attempt to clear invalid blocks 33619980 len 1 [ 156.041562][ T30] audit: type=1400 audit(1753568997.072:3212): avc: denied { open } for pid=2733 comm="syz.5.704" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.066791][ T2742] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.706: invalid indirect mapped block 1811939328 (level 0) [ 156.090084][ T2734] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 156.163533][ T2742] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.706: invalid indirect mapped block 2185560079 (level 1) [ 156.180387][ T2734] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 156.188933][ T30] audit: type=1400 audit(1753568997.072:3213): avc: denied { ioctl } for pid=2733 comm="syz.5.704" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.197797][ T2734] F2FS-fs (loop5): invalid crc value [ 156.321962][ T2742] EXT4-fs (loop3): 1 truncate cleaned up [ 156.337734][ T2742] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,noblock_validity,dioread_lock,resuid=0x0000000000000000,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 156.435728][ T30] audit: type=1400 audit(1753568997.112:3214): avc: denied { map_create } for pid=2745 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.669733][ T2734] F2FS-fs (loop5): Found nat_bits in checkpoint [ 157.339209][ T30] audit: type=1400 audit(1753568997.122:3215): avc: denied { prog_load } for pid=2745 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.471325][ T30] audit: type=1400 audit(1753568997.122:3216): avc: denied { bpf } for pid=2745 comm="syz.4.707" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.508036][ T2734] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 157.567407][ T2734] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 158.364962][ T2734] attempt to access beyond end of device [ 158.364962][ T2734] loop5: rw=2049, want=53264, limit=40427 [ 160.402677][ T1972] attempt to access beyond end of device [ 160.402677][ T1972] loop5: rw=2049, want=45104, limit=40427 [ 160.444783][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 160.471211][ T2774] loop3: detected capacity change from 0 to 512 [ 160.510842][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 160.510861][ T30] audit: type=1400 audit(1753569001.582:3236): avc: denied { read } for pid=2771 comm="syz.0.714" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.543370][ T30] audit: type=1400 audit(1753569001.582:3237): avc: denied { open } for pid=2771 comm="syz.0.714" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.543406][ T30] audit: type=1400 audit(1753569001.582:3238): avc: denied { ioctl } for pid=2771 comm="syz.0.714" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.594172][ T2774] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.630714][ T30] audit: type=1400 audit(1753569001.722:3239): avc: denied { create } for pid=2777 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.697299][ T30] audit: type=1400 audit(1753569001.752:3240): avc: denied { setopt } for pid=2777 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.720545][ T30] audit: type=1400 audit(1753569001.752:3241): avc: denied { ioctl } for pid=2777 comm="syz.0.715" path="socket:[24828]" dev="sockfs" ino=24828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.020234][ T2784] xt_CT: No such helper "netbios-ns" [ 161.301220][ T2786] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 161.645292][ T30] audit: type=1400 audit(1753569001.752:3242): avc: denied { write } for pid=2777 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.673459][ T2788] loop4: detected capacity change from 0 to 512 [ 161.696246][ T2792] netlink: 68 bytes leftover after parsing attributes in process `syz.3.718'. [ 161.759897][ T30] audit: type=1400 audit(1753569001.762:3243): avc: denied { mount } for pid=2773 comm="syz.3.711" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 161.783355][ T30] audit: type=1400 audit(1753569001.852:3244): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 161.803677][ T30] audit: type=1400 audit(1753569002.112:3245): avc: denied { module_request } for pid=2775 comm="syz.4.716" kmod="nfct-helper-netbios-ns" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 161.838231][ T2798] loop3: detected capacity change from 0 to 512 [ 161.856434][ T2788] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 161.868010][ T2798] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 161.896102][ T2788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 161.904178][ T2788] System zones: 0-1, 15-15, 18-18, 34-34 [ 161.912428][ T2788] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.919046][ T2788] EXT4-fs warning (device loop4): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 161.930576][ T2798] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.933996][ T2788] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 162.028509][ T2805] loop5: detected capacity change from 0 to 128 [ 162.043584][ T2798] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 162.051300][ T2788] EXT4-fs (loop4): 1 truncate cleaned up [ 162.057981][ T2798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.066209][ T2788] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 162.128159][ T2798] EXT4-fs (loop3): 1 truncate cleaned up [ 162.149824][ T2809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.222282][ T2798] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 162.246998][ T2805] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.258572][ T2805] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.395323][ T2805] FAULT_INJECTION: forcing a failure. [ 162.395323][ T2805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.408618][ T2805] CPU: 1 PID: 2805 Comm: syz.5.725 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 162.418460][ T2805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.428543][ T2805] Call Trace: [ 162.431951][ T2805] [ 162.434907][ T2805] __dump_stack+0x21/0x30 [ 162.439286][ T2805] dump_stack_lvl+0xee/0x150 [ 162.443909][ T2805] ? show_regs_print_info+0x20/0x20 [ 162.449147][ T2805] dump_stack+0x15/0x20 [ 162.451552][ T2798] EXT4-fs (loop3): shut down requested (1) [ 162.453330][ T2805] should_fail+0x3c1/0x510 [ 162.463574][ T2805] should_fail_usercopy+0x1a/0x20 [ 162.465515][ T2788] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 162.468635][ T2805] _copy_from_user+0x20/0xd0 [ 162.468665][ T2805] fscrypt_ioctl_get_key_status+0xd1/0x3d0 [ 162.468688][ T2805] ? fscrypt_ioctl_remove_key_all_users+0x50/0x50 [ 162.486697][ T2798] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 162.487004][ T2805] ? avc_flush+0x2b0/0x2b0 [ 162.487030][ T2805] ext4_ioctl+0x1663/0x33c0 [ 162.511143][ T2805] ? ext4_fileattr_set+0x1640/0x1640 [ 162.516551][ T2805] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 162.522247][ T2805] ? kstrtouint_from_user+0x1a0/0x200 [ 162.527739][ T2805] ? kstrtol_from_user+0x260/0x260 [ 162.532886][ T2805] ? ioctl_has_perm+0x394/0x4d0 [ 162.536525][ T2813] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 162.537764][ T2805] ? has_cap_mac_admin+0x330/0x330 [ 162.550869][ T2805] ? vfs_write+0xc17/0xf70 [ 162.555321][ T2805] ? selinux_file_ioctl+0x377/0x480 [ 162.560718][ T2805] ? selinux_file_alloc_security+0x120/0x120 [ 162.566729][ T2805] ? mutex_unlock+0x89/0x220 [ 162.571345][ T2805] ? __mutex_lock_slowpath+0x10/0x10 [ 162.576657][ T2805] ? __fget_files+0x2c4/0x320 [ 162.581367][ T2805] ? security_file_ioctl+0x84/0xa0 [ 162.586498][ T2805] ? ext4_fileattr_set+0x1640/0x1640 [ 162.591900][ T2805] __se_sys_ioctl+0x121/0x1a0 [ 162.596609][ T2805] __x64_sys_ioctl+0x7b/0x90 [ 162.601208][ T2805] x64_sys_call+0x2f/0x9a0 [ 162.605628][ T2805] do_syscall_64+0x4c/0xa0 [ 162.610045][ T2805] ? clear_bhb_loop+0x50/0xa0 [ 162.614746][ T2805] ? clear_bhb_loop+0x50/0xa0 [ 162.619439][ T2805] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.625331][ T2805] RIP: 0033:0x7f12366fe9a9 [ 162.629746][ T2805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.649976][ T2805] RSP: 002b:00007f1234d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.658419][ T2805] RAX: ffffffffffffffda RBX: 00007f1236925fa0 RCX: 00007f12366fe9a9 [ 162.666427][ T2805] RDX: 0000200000000100 RSI: 00000000c080661a RDI: 0000000000000003 [ 162.674514][ T2805] RBP: 00007f1234d67090 R08: 0000000000000000 R09: 0000000000000000 [ 162.682577][ T2805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.690581][ T2805] R13: 0000000000000000 R14: 00007f1236925fa0 R15: 00007ffc362a73e8 [ 162.698586][ T2805] [ 162.909950][ T2822] loop3: detected capacity change from 0 to 256 [ 162.944415][ T2822] exfat: Bad value for 'time_offset' [ 163.108005][ T2830] loop1: detected capacity change from 0 to 4096 [ 163.304612][ T2830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.826886][ T2834] loop5: detected capacity change from 0 to 128 [ 163.872654][ T2834] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: none. [ 163.916732][ T2834] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.777287][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 165.777303][ T30] audit: type=1400 audit(1753569006.872:3279): avc: denied { create } for pid=2863 comm="syz.1.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.030377][ T30] audit: type=1400 audit(1753569007.122:3280): avc: denied { create } for pid=2864 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.059184][ T30] audit: type=1400 audit(1753569007.122:3281): avc: denied { write } for pid=2864 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.093217][ T30] audit: type=1400 audit(1753569007.122:3282): avc: denied { append } for pid=2864 comm="syz.0.742" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.139800][ T30] audit: type=1400 audit(1753569007.122:3283): avc: denied { open } for pid=2864 comm="syz.0.742" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.196790][ T2874] binder: 2873:2874 unknown command 0 [ 166.211192][ T2874] binder: 2873:2874 ioctl c0306201 2000000001c0 returned -22 [ 166.232413][ T30] audit: type=1400 audit(1753569007.162:3284): avc: denied { ioctl } for pid=2864 comm="syz.0.742" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.288445][ T30] audit: type=1400 audit(1753569007.282:3285): avc: denied { name_bind } for pid=2873 comm="syz.0.744" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 166.333873][ T30] audit: type=1400 audit(1753569007.282:3286): avc: denied { read } for pid=2873 comm="syz.0.744" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.362057][ T30] audit: type=1400 audit(1753569007.282:3287): avc: denied { open } for pid=2873 comm="syz.0.744" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.389553][ T30] audit: type=1400 audit(1753569007.282:3288): avc: denied { ioctl } for pid=2873 comm="syz.0.744" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.596801][ T332] device bridge_slave_1 left promiscuous mode [ 166.604413][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.615762][ T332] device bridge_slave_0 left promiscuous mode [ 166.641389][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.737996][ T332] device veth0_vlan left promiscuous mode [ 167.830028][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.842677][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.857601][ T2880] device bridge_slave_0 entered promiscuous mode [ 167.877203][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.884281][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.896526][ T2880] device bridge_slave_1 entered promiscuous mode [ 168.037691][ T2900] loop3: detected capacity change from 0 to 1024 [ 168.067196][ T2900] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,noblock_validity,inlinecrypt,stripe=0x0000000000000003,errors=continue,,errors=continue. Quota mode: none. [ 168.094012][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.103514][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.114237][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.123296][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.131932][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.140054][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.148319][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.164305][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.173144][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.182060][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.189150][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.214746][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.229550][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.253389][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.268519][ T2880] device veth0_vlan entered promiscuous mode [ 168.275092][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.283968][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.292456][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.308562][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.317430][ T2880] device veth1_macvtap entered promiscuous mode [ 168.329733][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.345105][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.950488][ T2932] loop6: detected capacity change from 0 to 512 [ 169.960439][ T2900] syz.3.753[2900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.961020][ T2900] syz.3.753[2900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.183655][ T2932] EXT4-fs warning (device loop6): ext4_enable_quotas:6450: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 171.212440][ T2932] EXT4-fs (loop6): mount failed [ 171.587365][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 171.587382][ T30] audit: type=1326 audit(1753569012.682:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12366fe9a9 code=0x7ffc0000 [ 171.628535][ T30] audit: type=1326 audit(1753569012.682:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f12366fe9a9 code=0x7ffc0000 [ 171.672620][ T30] audit: type=1326 audit(1753569012.762:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12366fe9a9 code=0x7ffc0000 [ 172.049404][ T30] audit: type=1326 audit(1753569012.762:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.5.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12366fe9a9 code=0x7ffc0000 [ 173.982065][ T2953] loop5: detected capacity change from 0 to 256 [ 174.029506][ T2953] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.040541][ T2953] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 174.054335][ T2953] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 174.067990][ T30] audit: type=1400 audit(1753569015.162:3321): avc: denied { write } for pid=2951 comm="syz.5.765" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.093056][ T2953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.765'. [ 174.108941][ T30] audit: type=1400 audit(1753569015.162:3322): avc: denied { add_name } for pid=2951 comm="syz.5.765" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.177861][ T30] audit: type=1400 audit(1753569015.162:3323): avc: denied { associate } for pid=2951 comm="syz.5.765" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.222793][ T30] audit: type=1400 audit(1753569015.182:3324): avc: denied { write open } for pid=2951 comm="syz.5.765" path="/63/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.496050][ T30] audit: type=1400 audit(1753569015.182:3325): avc: denied { mounton } for pid=2951 comm="syz.5.765" path="/63/file0/file0" dev="loop5" ino=1048622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.592032][ T30] audit: type=1400 audit(1753569016.312:3326): avc: denied { unmount } for pid=1972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.643101][ T2976] loop6: detected capacity change from 0 to 8192 [ 175.892014][ T2974] loop5: detected capacity change from 0 to 512 [ 175.909065][ T2979] netlink: 'syz.0.773': attribute type 27 has an invalid length. [ 175.914601][ T2971] loop3: detected capacity change from 0 to 40427 [ 175.981253][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.988525][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.025027][ T2971] F2FS-fs (loop3): invalid crc value [ 176.046981][ T2974] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.063063][ T2971] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.068501][ T2974] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.216115][ T2971] F2FS-fs (loop3): Start checkpoint disabled! [ 176.286247][ T2990] device erspan0 left promiscuous mode [ 176.312153][ T2971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 176.403089][ T2990] device veth0_vlan left promiscuous mode [ 176.434049][ T2990] device veth0_vlan entered promiscuous mode [ 176.441737][ T2990] device erspan0 entered promiscuous mode [ 176.450486][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 176.466401][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.483577][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.503326][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.521286][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.528434][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.536362][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.545036][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.553736][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.560840][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.568643][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.577315][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 176.585638][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.594231][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 176.602719][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.611198][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.619807][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.628345][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.639525][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 176.639540][ T30] audit: type=1400 audit(2000000000.440:3352): avc: denied { map } for pid=3003 comm="syz.6.777" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.670733][ T3004] binder_alloc: 3003: binder_alloc_buf size 4144 failed, no address space [ 176.679842][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.688277][ T3004] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 176.696226][ T30] audit: type=1400 audit(2000000000.480:3353): avc: denied { call } for pid=3003 comm="syz.6.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.698731][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.726102][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.741250][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.751561][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.763309][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.772619][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.781380][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.790051][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.798446][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.807299][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.816504][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.826928][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.835140][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.844192][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.844974][ T3007] loop6: detected capacity change from 0 to 4096 [ 176.853300][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.868989][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 176.876902][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 176.884815][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.920928][ T3007] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.932446][ T30] audit: type=1400 audit(2000000000.730:3354): avc: denied { getopt } for pid=3009 comm="syz.1.779" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.970202][ T30] audit: type=1400 audit(2000000000.760:3355): avc: denied { read } for pid=3011 comm="syz.1.780" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 176.994091][ T30] audit: type=1400 audit(2000000000.760:3356): avc: denied { ioctl } for pid=3011 comm="syz.1.780" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.046855][ T344] attempt to access beyond end of device [ 177.046855][ T344] loop3: rw=2049, want=40976, limit=40427 [ 177.131033][ T30] audit: type=1400 audit(2000000000.930:3357): avc: denied { read } for pid=3018 comm="syz.1.783" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.156046][ T30] audit: type=1400 audit(2000000000.930:3358): avc: denied { open } for pid=3018 comm="syz.1.783" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.358051][ T30] audit: type=1400 audit(2000000001.160:3359): avc: denied { write } for pid=3018 comm="syz.1.783" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.452412][ T3029] loop3: detected capacity change from 0 to 1024 [ 177.792064][ T3030] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.358731][ T3029] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 180.368543][ T3029] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 180.379865][ T3029] EXT4-fs error (device loop3): ext4_get_journal_inode:5149: inode #5: comm syz.3.781: unexpected bad inode w/o EXT4_IGET_BAD [ 180.393282][ T3029] EXT4-fs (loop3): no journal found [ 180.398958][ T3029] EXT4-fs (loop3): can't get journal size [ 180.442988][ T3029] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 180.482471][ T30] audit: type=1400 audit(2000000001.160:3360): avc: denied { ioctl } for pid=3018 comm="syz.1.783" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.517447][ T30] audit: type=1326 audit(2000000004.310:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12366fe9a9 code=0x7ffc0000 [ 180.546778][ T3033] loop5: detected capacity change from 0 to 512 [ 180.771355][ T3033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.786191][ T3033] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.031594][ T3075] fuse: Bad value for 'fd' [ 181.053013][ T3079] tipc: Enabled bearer , priority 10 [ 181.102378][ T3089] netlink: 'syz.5.810': attribute type 4 has an invalid length. [ 181.129422][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 181.161727][ T3091] netlink: 1603 bytes leftover after parsing attributes in process `syz.3.811'. [ 181.192858][ T20] kernel read not supported for file /usbmon0 (pid: 20 comm: kworker/0:1) [ 181.254703][ T2162] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.258769][ T3118] ================================================================== [ 181.269177][ T3118] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 181.278415][ T3118] Read of size 1 at addr ffff888118fa2bf8 by task syz.3.823/3118 [ 181.286164][ T3118] [ 181.288513][ T3118] CPU: 0 PID: 3118 Comm: syz.3.823 Not tainted 5.15.189-syzkaller-00079-ga71626bd56a5 #0 [ 181.298344][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.308788][ T3118] Call Trace: [ 181.312102][ T3118] [ 181.315076][ T3118] __dump_stack+0x21/0x30 [ 181.317478][ T3126] netlink: 1619 bytes leftover after parsing attributes in process `syz.0.827'. [ 181.319433][ T3118] dump_stack_lvl+0xee/0x150 [ 181.333131][ T3118] ? show_regs_print_info+0x20/0x20 [ 181.338365][ T3118] ? load_image+0x3a0/0x3a0 [ 181.342907][ T3118] ? unwind_get_return_address+0x4d/0x90 [ 181.348582][ T3118] print_address_description+0x7f/0x2c0 [ 181.354158][ T3118] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 181.360734][ T3118] kasan_report+0xf1/0x140 [ 181.365192][ T3118] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 181.371759][ T3118] __asan_report_load1_noabort+0x14/0x20 [ 181.377433][ T3118] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 181.383791][ T3118] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 181.389961][ T3118] ? netlink_unicast+0x876/0xa40 [ 181.395119][ T3118] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 181.401290][ T3118] xfrm_policy_inexact_insert+0x70/0x1130 [ 181.407149][ T3118] ? __get_hash_thresh+0x10c/0x420 [ 181.412269][ T3118] ? policy_hash_bysel+0x110/0x4f0 [ 181.417384][ T3118] xfrm_policy_insert+0x126/0x9a0 [ 181.422434][ T3118] ? xfrm_policy_construct+0x54f/0x1f00 [ 181.428032][ T3118] xfrm_add_policy+0x4d1/0x830 [ 181.432816][ T3118] ? xfrm_dump_sa_done+0xc0/0xc0 [ 181.437762][ T3118] xfrm_user_rcv_msg+0x45c/0x6e0 [ 181.442702][ T3118] ? xfrm_netlink_rcv+0x90/0x90 [ 181.447566][ T3118] ? avc_has_perm_noaudit+0x460/0x460 [ 181.452938][ T3118] ? x64_sys_call+0x4b/0x9a0 [ 181.457753][ T3118] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 181.463251][ T3118] netlink_rcv_skb+0x1e0/0x430 [ 181.468030][ T3118] ? xfrm_netlink_rcv+0x90/0x90 [ 181.472884][ T3118] ? netlink_ack+0xb60/0xb60 [ 181.477478][ T3118] ? wait_for_completion_killable_timeout+0x10/0x10 [ 181.484075][ T3118] ? __netlink_lookup+0x387/0x3b0 [ 181.489108][ T3118] xfrm_netlink_rcv+0x72/0x90 [ 181.493918][ T3118] netlink_unicast+0x876/0xa40 [ 181.498868][ T3118] netlink_sendmsg+0x86a/0xb70 [ 181.503635][ T3118] ? netlink_getsockopt+0x530/0x530 [ 181.508849][ T3118] ? sock_alloc_file+0xba/0x260 [ 181.513705][ T3118] ? security_socket_sendmsg+0x82/0xa0 [ 181.519167][ T3118] ? netlink_getsockopt+0x530/0x530 [ 181.524482][ T3118] ____sys_sendmsg+0x5a2/0x8c0 [ 181.529350][ T3118] ? __sys_sendmsg_sock+0x40/0x40 [ 181.534417][ T3118] ? import_iovec+0x7c/0xb0 [ 181.539008][ T3118] ___sys_sendmsg+0x1f0/0x260 [ 181.543684][ T3118] ? __sys_sendmsg+0x250/0x250 [ 181.548454][ T3118] ? __fdget+0x1a1/0x230 [ 181.552698][ T3118] __x64_sys_sendmsg+0x1e2/0x2a0 [ 181.557650][ T3118] ? ___sys_sendmsg+0x260/0x260 [ 181.562499][ T3118] ? __kasan_check_write+0x14/0x20 [ 181.567718][ T3118] ? switch_fpu_return+0x15d/0x2c0 [ 181.572854][ T3118] x64_sys_call+0x4b/0x9a0 [ 181.577274][ T3118] do_syscall_64+0x4c/0xa0 [ 181.581692][ T3118] ? clear_bhb_loop+0x50/0xa0 [ 181.586543][ T3118] ? clear_bhb_loop+0x50/0xa0 [ 181.591471][ T3118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.597417][ T3118] RIP: 0033:0x7fb99d78a9a9 [ 181.601880][ T3118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.621503][ T3118] RSP: 002b:00007fb99bdf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.629919][ T3118] RAX: ffffffffffffffda RBX: 00007fb99d9b1fa0 RCX: 00007fb99d78a9a9 [ 181.637990][ T3118] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 181.645976][ T3118] RBP: 00007fb99d80cd69 R08: 0000000000000000 R09: 0000000000000000 [ 181.654140][ T3118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.662110][ T3118] R13: 0000000000000000 R14: 00007fb99d9b1fa0 R15: 00007fff505a7458 [ 181.670090][ T3118] [ 181.673109][ T3118] [ 181.675425][ T3118] Allocated by task 3118: [ 181.679741][ T3118] __kasan_kmalloc+0xda/0x110 [ 181.684415][ T3118] __kmalloc+0x13d/0x2c0 [ 181.688655][ T3118] sk_prot_alloc+0xed/0x320 [ 181.693157][ T3118] sk_alloc+0x38/0x430 [ 181.697253][ T3118] pfkey_create+0x12a/0x660 [ 181.701753][ T3118] __sock_create+0x38d/0x7a0 [ 181.706335][ T3118] __sys_socket+0xec/0x190 [ 181.710743][ T3118] __x64_sys_socket+0x7a/0x90 [ 181.715447][ T3118] x64_sys_call+0x8c5/0x9a0 [ 181.719946][ T3118] do_syscall_64+0x4c/0xa0 [ 181.724357][ T3118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.730248][ T3118] [ 181.732562][ T3118] Last potentially related work creation: [ 181.738265][ T3118] kasan_save_stack+0x3a/0x60 [ 181.742946][ T3118] __kasan_record_aux_stack+0xd2/0x100 [ 181.748399][ T3118] kasan_record_aux_stack_noalloc+0xb/0x10 [ 181.754286][ T3118] kvfree_call_rcu+0xae/0x7e0 [ 181.758962][ T3118] drop_sysctl_table+0x2ef/0x410 [ 181.763892][ T3118] unregister_sysctl_table+0x7a/0x120 [ 181.769264][ T3118] unregister_net_sysctl_table+0x15/0x20 [ 181.774932][ T3118] neigh_sysctl_unregister+0x78/0x90 [ 181.780226][ T3118] addrconf_ifdown+0x15c0/0x1880 [ 181.785198][ T3118] addrconf_notify+0x3bd/0xde0 [ 181.789966][ T3118] raw_notifier_call_chain+0x90/0x100 [ 181.795333][ T3118] unregister_netdevice_many+0xfb8/0x1990 [ 181.801047][ T3118] vti6_exit_batch_net+0x26a/0x2b0 [ 181.806158][ T3118] cleanup_net+0x602/0xad0 [ 181.810702][ T3118] process_one_work+0x6be/0xba0 [ 181.815598][ T3118] worker_thread+0xa59/0x1200 [ 181.820313][ T3118] kthread+0x411/0x500 [ 181.824392][ T3118] ret_from_fork+0x1f/0x30 [ 181.828809][ T3118] [ 181.831133][ T3118] The buggy address belongs to the object at ffff888118fa2800 [ 181.831133][ T3118] which belongs to the cache kmalloc-1k of size 1024 [ 181.845275][ T3118] The buggy address is located 1016 bytes inside of [ 181.845275][ T3118] 1024-byte region [ffff888118fa2800, ffff888118fa2c00) [ 181.858737][ T3118] The buggy address belongs to the page: [ 181.864370][ T3118] page:ffffea000463e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118fa0 [ 181.874623][ T3118] head:ffffea000463e800 order:3 compound_mapcount:0 compound_pincount:0 [ 181.883067][ T3118] flags: 0x4000000000010200(slab|head|zone=1) [ 181.889145][ T3118] raw: 4000000000010200 0000000000000000 0000000c00000001 ffff888100043080 [ 181.897726][ T3118] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 181.906302][ T3118] page dumped because: kasan: bad access detected [ 181.912722][ T3118] page_owner tracks the page as allocated [ 181.918428][ T3118] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 90, ts 35703087196, free_ts 34311068091 [ 181.938740][ T3118] post_alloc_hook+0x192/0x1b0 [ 181.943535][ T3118] prep_new_page+0x1c/0x110 [ 181.948048][ T3118] get_page_from_freelist+0x2cc5/0x2d50 [ 181.953609][ T3118] __alloc_pages+0x18f/0x440 [ 181.958234][ T3118] new_slab+0xa1/0x4d0 [ 181.962305][ T3118] ___slab_alloc+0x381/0x810 [ 181.966892][ T3118] __slab_alloc+0x49/0x90 [ 181.971227][ T3118] kmem_cache_alloc_trace+0x146/0x270 [ 181.976606][ T3118] syslog_print+0xf9/0x820 [ 181.981047][ T3118] do_syslog+0x6ae/0x780 [ 181.985295][ T3118] __x64_sys_syslog+0x7c/0x90 [ 181.990069][ T3118] x64_sys_call+0x728/0x9a0 [ 181.994599][ T3118] do_syscall_64+0x4c/0xa0 [ 181.999144][ T3118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.005049][ T3118] page last free stack trace: [ 182.009717][ T3118] free_unref_page_prepare+0x542/0x550 [ 182.015179][ T3118] free_unref_page+0xa2/0x550 [ 182.019856][ T3118] __free_pages+0x6c/0x100 [ 182.024273][ T3118] __free_slab+0xe8/0x1e0 [ 182.028603][ T3118] __unfreeze_partials+0x160/0x190 [ 182.033736][ T3118] put_cpu_partial+0xc6/0x120 [ 182.038425][ T3118] __slab_free+0x1d4/0x290 [ 182.042852][ T3118] ___cache_free+0x104/0x120 [ 182.047439][ T3118] qlink_free+0x4d/0x90 [ 182.051605][ T3118] qlist_free_all+0x5f/0xb0 [ 182.056123][ T3118] kasan_quarantine_reduce+0x14a/0x170 [ 182.061686][ T3118] __kasan_slab_alloc+0x2f/0xf0 [ 182.066102][ T1291] tipc: Node number set to 3360344186 [ 182.066544][ T3118] slab_post_alloc_hook+0x4f/0x2b0 [ 182.077117][ T3118] __kmalloc+0x120/0x2c0 [ 182.081389][ T3118] kvmalloc_node+0x242/0x330 [ 182.085998][ T3118] vmemdup_user+0x26/0xe0 [ 182.090333][ T3118] [ 182.092651][ T3118] Memory state around the buggy address: [ 182.099126][ T3118] ffff888118fa2a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.107703][ T3118] ffff888118fa2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.115763][ T3118] >ffff888118fa2b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 182.123818][ T3118] ^ [ 182.131871][ T3118] ffff888118fa2c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.140013][ T3118] ffff888118fa2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.148078][ T3118] ================================================================== SYZFAIL: failed to send rpc fd=3 want=64 sent=0 n=-1 (errno 104: Connection reset by peer) [ 182.156201][ T3118] Disabling lock debugging due to kernel taint [ 182.176102][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 182.176121][ T30] audit: type=1400 audit(2000000005.970:3433): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14646]" dev="pipefs" ino=14646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 182.294499][ T415] tipc: Left network mode [ 182.366137][ T1456] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.306591][ T58] Bluetooth: hci0: command 0x1003 tx timeout [ 183.312726][ T3115] Bluetooth: hci0: sending frame failed (-49) [ 183.320295][ T415] device veth0_vlan left promiscuous mode [ 183.867238][ T415] tipc: Disabling bearer [ 183.872590][ T415] tipc: Left network mode [ 183.877235][ T415] tipc: Disabling bearer [ 183.882527][ T415] tipc: Left network mode [ 184.866895][ T415] device bridge_slave_1 left promiscuous mode [ 184.873173][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.880784][ T415] device bridge_slave_0 left promiscuous mode [ 184.887121][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.895167][ T415] device bridge_slave_1 left promiscuous mode [ 184.901414][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.909332][ T415] device bridge_slave_0 left promiscuous mode [ 184.916254][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.924691][ T415] device veth0_vlan left promiscuous mode [ 184.930725][ T415] device veth0_vlan left promiscuous mode [ 185.386340][ T289] Bluetooth: hci0: command 0x1001 tx timeout [ 185.392388][ T3115] Bluetooth: hci0: sending frame failed (-49) [ 187.466128][ T289] Bluetooth: hci0: command 0x1009 tx timeout [ 189.107772][ T415] device veth1_macvtap left promiscuous mode [ 189.114192][ T415] device veth0_vlan left promiscuous mode