last executing test programs: 8.648824081s ago: executing program 2 (id=897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000001010101"], 0x50}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0xff, 0x11f3, &(0x7f0000000980)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x1b0002, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x1, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x10, 0x6, 0x3f, 0x40, 0x2c42, 0x1202, 0xa169, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc0, 0x0, 0x0, 0x5b, 0x3b, 0x16}}]}}]}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kvm_set_irq\x00', r4}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x69) dup(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="eee6057eb4b03100"/28], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101a00, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffff01) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 8.125786603s ago: executing program 4 (id=902): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x35) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) 7.254347328s ago: executing program 4 (id=909): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200102505a1a440000000010109023b0001010010800904005d120a060000052406000005240000000d240ffb00000000000000000009ff81020002000000090503020800fe00000000000000"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0xe148, 0x2, 0x1, 0x325}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r6}, 0x2a) (async, rerun: 64) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000380), 0x0) (rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a000000030000000500000f0100000004000000010000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000081000000000100ffff03000000000000000000000000000000032a0800000061305f2e000000549a60f31197c07e"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4803}) (async, rerun: 64) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000280)) (async, rerun: 64) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xe, {"a2e3ad099b0d09f91b5e090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0ac6e70a9b334d959b669a240d5b0af3988f7ef31952010affe8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a0000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f19d684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdc020000002d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) 6.479742503s ago: executing program 3 (id=915): syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.450989353s ago: executing program 3 (id=916): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000080)="66660f3834a30300000066ba4000b072ee65890f09b805000000b9008800000f01d966baf80cb87cfb6d87ef66bafc0cb873000000ef8ee866baa000edb9640001c00f3266baf80cb848724881ef66bafc0c83c4c1792eed0f3accdfa2", 0x5d}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x71, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file2\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") (async) syz_open_procfs$namespace(0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000600000054"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x0, 0x5, 0x4, "2ca6416f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.434704603s ago: executing program 1 (id=917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$UI_GET_VERSION(r4, 0x405c5503, 0x0) 6.363958543s ago: executing program 0 (id=920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0/file0'}, 0x11) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) r2 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000008800000000000000000000000d00ca72dcc087b7d29c99c1a404a5b8cd207c86a3af2d6ffc652d7e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0xfffffffffffffdfd, 0x100000000, 0x3}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002100000e000746f69e41fbaebbc2ce17f0700020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414e8ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000afa09ace00"/656], 0x290) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) socket$inet_udp(0x2, 0x2, 0x0) 6.310857973s ago: executing program 3 (id=921): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112080000000000950b3a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x5) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d000000010d022d00010000000009040000030b08"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xda}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.794929657s ago: executing program 2 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fe80000000000000000000000000000008000a00", @ANYRES32], 0x50}}, 0x4000044) 5.761320357s ago: executing program 2 (id=923): ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xf, 0x29, 0x7, 0x12, 0x4, 0x7, 0x1, 0x99}) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.636697217s ago: executing program 2 (id=924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x217773607882fc6d, 0x6b, 0x95, 0x18, 0x10, 0xace, 0x2011, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0xbe, 0x4, 0x0, 0x7f, 0x88, 0x66, 0xd}}]}}]}}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/dev\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x1040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fe80000000000000000000000000000008000a00", @ANYRES32], 0x50}}, 0x4000044) 5.567176528s ago: executing program 1 (id=925): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x3, 0x8, 0x0, 0x1ff}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000210404000003fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="adffa888d2d700001400e3ff61726964676530000000000000000008000a00660000000000000000c7870000000000186549ee94563502b057", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x3bc3f10274d764c2}, 0xc080) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2007ff3) (async) ftruncate(r2, 0x2007ff3) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(0x0, 0x147842, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) syz_io_uring_setup(0x7962, &(0x7f0000000240)={0x0, 0x7e96, 0x2, 0x2, 0x13d}, &(0x7f0000000100), &(0x7f0000000180)) (async) syz_io_uring_setup(0x7962, &(0x7f0000000240)={0x0, 0x7e96, 0x2, 0x2, 0x13d}, &(0x7f0000000100), &(0x7f0000000180)) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) unshare(0x2a020480) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0xffff, 0x7}, 0x4) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000000)=0xe3a, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000000)=0xe3a, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000000)={0x57, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r7, @ANYBLOB="6474414ba75b054bf43912e1507de29a853be55c230633f2163097d51aabbbf76852d6d0337a37ade33f99", @ANYBLOB="372e38c96ef835a3e02cb5c6e149fc4ea5d501efa81aa3984c2ebbc5f3906965198212feee14a2d1d7da72c236ff84559d44a41d7b941ced78cbc8251375aa204d77bd75ef72c15217c9b083e439", @ANYRES64=r5], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r7, @ANYBLOB="6474414ba75b054bf43912e1507de29a853be55c230633f2163097d51aabbbf76852d6d0337a37ade33f99", @ANYBLOB="372e38c96ef835a3e02cb5c6e149fc4ea5d501efa81aa3984c2ebbc5f3906965198212feee14a2d1d7da72c236ff84559d44a41d7b941ced78cbc8251375aa204d77bd75ef72c15217c9b083e439", @ANYRES64=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.35246801s ago: executing program 1 (id=926): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x35) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) 4.446975885s ago: executing program 1 (id=927): syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.411925764s ago: executing program 1 (id=928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)="94", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x2c, &(0x7f0000000180), 0x5, 0x0, 0xffffffffffffff1f}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="8dd30000", @ANYRES16=r6, @ANYBLOB="10002dbd7000fcdbdf251b00000010002e800c0004000200aaaaaaaaaaaa0c00060000000000010000000c00060003000000000000000c00060003000000000000000c0006002fe555d2e2188a4308000300", @ANYRES32=r7, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="0c0006000000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') setresuid(0x0, 0xee00, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r10, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(r10, &(0x7f0000000100)) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xffffffffffffff9b, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/6, 0x6}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 4.258999606s ago: executing program 1 (id=929): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 4.230409446s ago: executing program 4 (id=930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f350f20d86635080000000f22d8f30fc7b600602e0f0ef30f01e80fc79e0070dbe3f30f090f20e06635000200000f22e082fe5f", 0x34}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 3.60525296s ago: executing program 4 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x38}], 0x1}, 0x0) r1 = io_uring_setup(0x302f, &(0x7f00000002c0)={0x0, 0x8006f3b, 0x80, 0x3, 0x310}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) keyctl$unlink(0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2903b2f800a37103240000000800154000000001151427d17f7bb523f1919f6483e0cda1b34e2155619f2409f0f27b7464213ae5410f6696a46c67dc8935148a0ad6c9421b7d9be32df6abe67a3ae14517e3ec10d6"], 0x24}}, 0x0) 3.332920531s ago: executing program 0 (id=932): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a8bb0b80f8452c95000000080000000000000000"], 0x48) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00C\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="98010000100013070000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x198}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r11, r7, &(0x7f0000000080)=0x7, 0x2) 3.213845232s ago: executing program 3 (id=933): r0 = gettid() (fail_nth: 1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) read(r2, &(0x7f0000000540)=""/57, 0x39) 2.904052244s ago: executing program 2 (id=934): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (fail_nth: 1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) read(r2, &(0x7f0000000540)=""/57, 0x39) 2.903635154s ago: executing program 3 (id=935): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(0x0, 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.701839395s ago: executing program 4 (id=936): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) tkill(r1, 0x35) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) 2.350683377s ago: executing program 0 (id=937): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x51c, &(0x7f0000001500)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0xfffffffd, 0x0, 0x80, 0xfffc}}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.266909677s ago: executing program 3 (id=938): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x35) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) 2.217394577s ago: executing program 0 (id=939): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18799cb61cbe217da50000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x3, &(0x7f0000000340)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.983053469s ago: executing program 0 (id=940): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x35) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) 1.982577719s ago: executing program 2 (id=941): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x28ce80, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) gettid() bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000080)=0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'virt_wifi0\x00', @random="1c241b91fafc"}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000340)=r8) 1.37917ms ago: executing program 0 (id=942): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) (fail_nth: 1) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r0) ptrace(0x10, r1) ptrace(0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=943): r0 = gettid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000000000010000000008001e00000400000c0012"], 0x30}}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000080)={r0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x10, 0x3, 0x0) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x2000, 0x0, 0x1}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3c0e5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x8}, @IFLA_MACSEC_ES={0x5}]}}}]}, 0x44}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r7, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r8 = timerfd_create(0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r9, 0x541c, &(0x7f0000000b80)={0xd, 0x6}) read(r8, &(0x7f0000000540)=""/57, 0x39) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 19.977292][ T28] audit: type=1400 audit(1732136145.407:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.978562][ T281] cgroup: Unknown subsys name 'net' [ 19.981227][ T28] audit: type=1400 audit(1732136145.417:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.985326][ T28] audit: type=1400 audit(1732136145.417:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.985518][ T281] cgroup: Unknown subsys name 'devices' [ 20.109578][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.114999][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.250682][ T28] audit: type=1400 audit(1732136145.687:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.273821][ T28] audit: type=1400 audit(1732136145.687:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.283047][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.299100][ T28] audit: type=1400 audit(1732136145.687:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.329968][ T28] audit: type=1400 audit(1732136145.747:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.355279][ T28] audit: type=1400 audit(1732136145.747:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.385819][ T28] audit: type=1400 audit(1732136145.817:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.411143][ T28] audit: type=1400 audit(1732136145.817:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.411193][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.281040][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.287969][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.295221][ T292] device bridge_slave_0 entered promiscuous mode [ 21.305918][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.312802][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.320248][ T291] device bridge_slave_0 entered promiscuous mode [ 21.326717][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.333673][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.340923][ T292] device bridge_slave_1 entered promiscuous mode [ 21.360658][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.367709][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.374913][ T291] device bridge_slave_1 entered promiscuous mode [ 21.420236][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.427076][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.434441][ T295] device bridge_slave_0 entered promiscuous mode [ 21.451931][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.458913][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.466170][ T295] device bridge_slave_1 entered promiscuous mode [ 21.496025][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.502931][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.510275][ T293] device bridge_slave_0 entered promiscuous mode [ 21.527235][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.534156][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.541407][ T294] device bridge_slave_0 entered promiscuous mode [ 21.547956][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.554808][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.562352][ T293] device bridge_slave_1 entered promiscuous mode [ 21.572632][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.579501][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.586833][ T294] device bridge_slave_1 entered promiscuous mode [ 21.791115][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.798108][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.805229][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.812010][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.828608][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.835472][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.842620][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.849477][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.865965][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.872832][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.879947][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.886700][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.895756][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.902619][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.909738][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.916596][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.932394][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.939261][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.946363][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.953175][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.999956][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.007041][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.014442][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.021819][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.029109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.036481][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.043554][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.050558][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.057813][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.064829][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.071997][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.092800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.100461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.108576][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.115407][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.123859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.131992][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.138859][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.154900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.162277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.179087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.187071][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.193912][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.201186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.209410][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216253][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.226254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.247642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.255472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.264039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.272283][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.279152][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.286554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.294483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.302600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.310497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.330733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.339216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.347266][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.354144][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.361939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.370496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.378769][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.385632][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.393031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.401151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.409180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.417298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.425430][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.432291][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.451517][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.458955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.466207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.474475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.482640][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.489507][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.496940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.505142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.513223][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.520170][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.527384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.535239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.543070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.550972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.558924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.566754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.574675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.582976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.604608][ T295] device veth0_vlan entered promiscuous mode [ 22.611381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.619382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.626620][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.634199][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.642313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.660196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.668310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.676058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.684547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.693000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.700910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.709012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.716301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.728961][ T292] device veth0_vlan entered promiscuous mode [ 22.743916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.752295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.760807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.769212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.777673][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.791676][ T293] device veth0_vlan entered promiscuous mode [ 22.802828][ T291] device veth0_vlan entered promiscuous mode [ 22.809235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.817559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.824775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.832429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.840414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.848380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.855665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.869313][ T292] device veth1_macvtap entered promiscuous mode [ 22.877924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.886141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.894224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.903102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.911209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.919596][ T295] device veth1_macvtap entered promiscuous mode [ 22.932965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.940342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.947859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.955886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.966612][ T294] device veth0_vlan entered promiscuous mode [ 22.979617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.987833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.995893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.005425][ T293] device veth1_macvtap entered promiscuous mode [ 23.020323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.028524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.036489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.046866][ T294] device veth1_macvtap entered promiscuous mode [ 23.058944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.067227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.075697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.084209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.092598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.100741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.110205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.118687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.136189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.146375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.155156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.163488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.174407][ T291] device veth1_macvtap entered promiscuous mode [ 23.223573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.234520][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.243826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.252300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.303189][ T324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=324 comm=syz.3.4 [ 25.386902][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 25.386954][ T28] audit: type=1400 audit(1732136150.757:106): avc: denied { mount } for pid=327 comm="syz.4.5" name="/" dev="configfs" ino=12714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 25.417836][ T336] device wg2 entered promiscuous mode [ 25.492521][ T339] loop3: detected capacity change from 0 to 256 [ 25.593676][ T339] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 26.069002][ T345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=345 comm=syz.1.7 [ 26.442053][ T349] loop4: detected capacity change from 0 to 256 [ 26.452261][ T350] loop1: detected capacity change from 0 to 256 [ 26.533709][ T350] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 26.754564][ T28] audit: type=1400 audit(1732136150.927:107): avc: denied { write } for pid=322 comm="syz.3.4" name="mcfilter6" dev="proc" ino=4026532606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.785738][ T28] audit: type=1400 audit(1732136151.007:108): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.160071][ T372] device wg2 entered promiscuous mode [ 28.440982][ T28] audit: type=1400 audit(1732136151.307:109): avc: denied { map_create } for pid=331 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.476844][ T28] audit: type=1400 audit(1732136151.307:110): avc: denied { map_read map_write } for pid=331 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.520532][ T379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=379 comm=syz.0.14 [ 28.569738][ T28] audit: type=1400 audit(1732136151.907:111): avc: denied { mount } for pid=344 comm="syz.4.8" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.599705][ T380] fuse: Bad value for 'fd' [ 28.604874][ T28] audit: type=1400 audit(1732136152.097:112): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.632673][ T28] audit: type=1400 audit(1732136152.217:113): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.663980][ T28] audit: type=1400 audit(1732136152.767:114): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.689280][ T28] audit: type=1400 audit(1732136152.787:115): avc: denied { read write } for pid=353 comm="syz.3.9" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.814889][ T387] loop0: detected capacity change from 0 to 256 [ 29.349481][ T387] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 31.329490][ T420] loop1: detected capacity change from 0 to 256 [ 33.409885][ T466] device wg2 entered promiscuous mode [ 35.126721][ T485] loop1: detected capacity change from 0 to 256 [ 35.431920][ T491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=491 comm=syz.2.39 [ 36.811344][ T506] device wg2 entered promiscuous mode [ 36.826007][ T508] loop2: detected capacity change from 0 to 256 [ 36.836510][ T508] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 37.133879][ T510] loop4: detected capacity change from 0 to 256 [ 37.767589][ T533] process 'syz.0.45' launched './file1' with NULL argv: empty string added [ 38.215334][ T531] Zero length message leads to an empty skb [ 40.795862][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 40.795879][ T28] audit: type=1400 audit(1732136166.227:122): avc: denied { read } for pid=560 comm="syz.2.54" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.827793][ T28] audit: type=1400 audit(1732136166.227:123): avc: denied { open } for pid=560 comm="syz.2.54" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.899164][ T28] audit: type=1400 audit(1732136166.247:124): avc: denied { ioctl } for pid=560 comm="syz.2.54" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.948829][ T571] device wg2 left promiscuous mode [ 43.283805][ T572] device wg2 entered promiscuous mode [ 43.314543][ T577] device wg2 left promiscuous mode [ 43.322266][ T577] device wg2 entered promiscuous mode [ 43.574051][ T593] loop3: detected capacity change from 0 to 256 [ 43.717792][ T601] device wg2 left promiscuous mode [ 43.749472][ T601] device wg2 entered promiscuous mode [ 44.196969][ T613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=613 comm=syz.4.64 [ 44.408518][ T616] loop4: detected capacity change from 0 to 256 [ 44.427304][ T616] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 46.905177][ T622] device wg2 left promiscuous mode [ 46.911119][ T623] device wg2 entered promiscuous mode [ 48.582410][ T654] loop2: detected capacity change from 0 to 256 [ 51.899019][ T706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=706 comm=syz.0.82 [ 53.031331][ T711] device wg2 left promiscuous mode [ 53.037635][ T712] device wg2 entered promiscuous mode [ 53.150645][ T28] audit: type=1400 audit(1732136178.257:125): avc: denied { create } for pid=697 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.854603][ T28] audit: type=1400 audit(1732136179.137:126): avc: denied { watch } for pid=718 comm="syz.1.86" path="/21/file1" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.027329][ C0] sched: RT throttling activated [ 54.317400][ T28] audit: type=1400 audit(1732136179.387:127): avc: denied { name_bind } for pid=718 comm="syz.1.86" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 54.678740][ T735] loop4: detected capacity change from 0 to 256 [ 54.687683][ T738] loop2: detected capacity change from 0 to 256 [ 54.750163][ T28] audit: type=1400 audit(1732136180.187:128): avc: denied { name_bind } for pid=731 comm="syz.0.90" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 54.847592][ T28] audit: type=1400 audit(1732136180.187:129): avc: denied { node_bind } for pid=731 comm="syz.0.90" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.951541][ T745] device wg2 left promiscuous mode [ 55.002295][ T745] device wg2 entered promiscuous mode [ 55.236306][ T748] fuse: Unknown parameter 'grou00000000000000000000' [ 55.299058][ T751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=751 comm=syz.2.94 [ 55.538553][ T756] loop2: detected capacity change from 0 to 256 [ 55.668866][ T757] loop4: detected capacity change from 0 to 256 [ 56.010621][ T757] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 56.064654][ T756] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 56.330213][ T28] audit: type=1400 audit(1732136181.767:130): avc: denied { create } for pid=759 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.820376][ T28] audit: type=1400 audit(1732136183.997:131): avc: denied { unlink } for pid=769 comm="syz.4.100" name="#1" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.908816][ T28] audit: type=1400 audit(1732136183.997:132): avc: denied { mount } for pid=769 comm="syz.4.100" name="/" dev="overlay" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.291871][ T28] audit: type=1400 audit(1732136184.727:133): avc: denied { setopt } for pid=790 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.028373][ T28] audit: type=1400 audit(1732136184.727:134): avc: denied { read } for pid=790 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.501225][ T28] audit: type=1400 audit(1732136185.487:135): avc: denied { write } for pid=790 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.578109][ T798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=132 sclass=netlink_route_socket pid=798 comm=syz.1.105 [ 60.581295][ T800] fuse: Bad value for 'user_id' [ 60.862914][ T808] loop1: detected capacity change from 0 to 256 [ 61.577213][ T808] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 63.146621][ T820] loop1: detected capacity change from 0 to 256 [ 63.177160][ T820] ======================================================= [ 63.177160][ T820] WARNING: The mand mount option has been deprecated and [ 63.177160][ T820] and is ignored by this kernel. Remove the mand [ 63.177160][ T820] option from the mount to silence this warning. [ 63.177160][ T820] ======================================================= [ 63.292057][ T820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x528b6cdd, utbl_chksum : 0xe619d30d) [ 64.274604][ T839] fuse: Invalid rootmode [ 64.837719][ T844] device wg2 left promiscuous mode [ 65.921823][ T870] device wg2 entered promiscuous mode [ 68.270582][ T903] fuse: Unknown parameter 'user_id00000000000000000000' [ 71.370522][ T928] loop1: detected capacity change from 0 to 256 [ 71.401147][ T928] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 71.681497][ T28] audit: type=1400 audit(1732136197.117:136): avc: denied { read } for pid=934 comm="syz.4.143" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.708821][ T935] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.765851][ T28] audit: type=1400 audit(1732136197.137:137): avc: denied { open } for pid=934 comm="syz.4.143" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.788878][ T28] audit: type=1400 audit(1732136197.147:138): avc: denied { ioctl } for pid=934 comm="syz.4.143" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.034690][ T28] audit: type=1400 audit(1732136200.467:139): avc: denied { create } for pid=992 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.341988][ T1006] loop2: detected capacity change from 0 to 256 [ 76.757279][ T1006] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 76.886808][ T28] audit: type=1400 audit(1732136200.467:140): avc: denied { create } for pid=992 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.962349][ T28] audit: type=1400 audit(1732136200.467:141): avc: denied { read } for pid=992 comm="syz.0.154" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.995873][ T28] audit: type=1400 audit(1732136200.467:142): avc: denied { open } for pid=992 comm="syz.0.154" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.020147][ T28] audit: type=1400 audit(1732136200.467:143): avc: denied { read } for pid=992 comm="syz.0.154" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.045193][ T28] audit: type=1400 audit(1732136200.467:144): avc: denied { open } for pid=992 comm="syz.0.154" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.104284][ T28] audit: type=1400 audit(1732136201.187:145): avc: denied { name_bind } for pid=1000 comm="syz.4.158" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.125778][ T28] audit: type=1400 audit(1732136202.137:146): avc: denied { ioctl } for pid=992 comm="syz.0.154" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.583134][ T1032] fuse: Unknown parameter '0x0000000000000004' [ 78.875325][ T1045] device wg2 entered promiscuous mode [ 79.158022][ T28] audit: type=1400 audit(1732136204.597:147): avc: denied { write } for pid=1042 comm="syz.1.166" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.207590][ T1043] kvm: emulating exchange as write [ 80.534673][ T1063] device wg2 left promiscuous mode [ 80.542843][ T1064] device wg2 entered promiscuous mode [ 81.870052][ T1085] device wg2 left promiscuous mode [ 81.876138][ T1086] device wg2 entered promiscuous mode [ 82.939715][ T1114] loop2: detected capacity change from 0 to 256 [ 83.214594][ T1114] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 83.441969][ T1124] device wg2 left promiscuous mode [ 83.458230][ T1124] device wg2 entered promiscuous mode [ 84.598931][ T1134] device wg2 left promiscuous mode [ 84.605059][ T1135] device wg2 entered promiscuous mode [ 84.639377][ T28] audit: type=1400 audit(1732136210.077:148): avc: denied { setopt } for pid=1139 comm="syz.3.186" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.459058][ T1162] loop2: detected capacity change from 0 to 16 [ 89.498163][ T1162] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.560090][ T1163] loop3: detected capacity change from 0 to 256 [ 89.569660][ T1163] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.337510][ T1169] syz.2.191: attempt to access beyond end of device [ 90.337510][ T1169] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 91.830620][ T1184] 9pnet_fd: Insufficient options for proto=fd [ 92.042635][ T1187] device wg2 left promiscuous mode [ 92.052738][ T1188] device wg2 entered promiscuous mode [ 92.509477][ T28] audit: type=1400 audit(1732136217.917:149): avc: denied { read write } for pid=1189 comm="syz.2.200" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.732645][ T28] audit: type=1400 audit(1732136217.917:150): avc: denied { open } for pid=1189 comm="syz.2.200" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.782006][ T28] audit: type=1400 audit(1732136217.927:151): avc: denied { ioctl } for pid=1189 comm="syz.2.200" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.836754][ T28] audit: type=1400 audit(1732136217.927:152): avc: denied { set_context_mgr } for pid=1189 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.293357][ T1185] syz.4.199 (1185) used greatest stack depth: 21064 bytes left [ 93.918565][ T1213] 9pnet_fd: Insufficient options for proto=fd [ 95.709196][ T1247] device wg2 left promiscuous mode [ 95.721536][ T1247] device wg2 entered promiscuous mode [ 97.687073][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 98.477116][ T361] udevd[361]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 100.661406][ T1299] device wg2 left promiscuous mode [ 100.667825][ T1301] device wg2 entered promiscuous mode [ 101.478011][ T1320] device wg2 left promiscuous mode [ 101.494617][ T1320] device wg2 entered promiscuous mode [ 101.972927][ T361] udevd[361]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 102.291148][ T1339] binder: 1334:1339 ioctl c0306201 0 returned -14 [ 104.995943][ T1373] binder: 1362:1373 ioctl c0306201 0 returned -14 [ 105.073182][ T1374] device wg2 left promiscuous mode [ 105.105806][ T1376] device wg2 entered promiscuous mode [ 105.703164][ T1392] binder: 1381:1392 ioctl c0306201 0 returned -14 [ 106.286207][ T1402] 9pnet_fd: Insufficient options for proto=fd [ 108.253830][ T1435] 9pnet_fd: Insufficient options for proto=fd [ 108.946321][ T1454] overlayfs: failed to resolve './file0': -2 [ 113.559587][ T1543] loop4: detected capacity change from 0 to 256 [ 113.636328][ T1543] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.958833][ T28] audit: type=1400 audit(1732136239.397:153): avc: denied { create } for pid=1542 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.842818][ T1555] device wg2 left promiscuous mode [ 114.849692][ T1556] device wg2 entered promiscuous mode [ 117.150590][ T1597] fuse: Unknown parameter 'use00000000000000000000' [ 117.301040][ T1601] binder: 1588:1601 ioctl c0306201 0 returned -14 [ 117.351898][ T1606] binder: 1590:1606 ioctl c0306201 0 returned -14 [ 118.325608][ T1629] fuse: Unknown parameter 'use00000000000000000000' [ 120.592990][ T1655] loop2: detected capacity change from 0 to 128 [ 120.673154][ T1655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.682605][ T1655] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038 (0x7fffffff) [ 120.792823][ T28] audit: type=1400 audit(1732136246.197:154): avc: denied { map } for pid=1653 comm="syz.2.306" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.816998][ T294] EXT4-fs (loop2): unmounting filesystem. [ 120.999395][ T1667] device wg2 left promiscuous mode [ 121.005826][ T1667] device wg2 entered promiscuous mode [ 121.258091][ T1676] Restarting kernel threads ... done. [ 121.263675][ T28] audit: type=1400 audit(1732136246.697:155): avc: denied { ioctl } for pid=1671 comm="syz.0.319" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.877497][ T1752] Restarting kernel threads ... done. [ 130.380138][ T1758] loop4: detected capacity change from 0 to 128 [ 130.406506][ T1758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.421060][ T1762] fuse: Unknown parameter 'use00000000000000000000' [ 130.445651][ T1758] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038 (0x7fffffff) [ 130.468847][ T1758] binder: BINDER_SET_CONTEXT_MGR already set [ 130.474745][ T1758] binder: 1757:1758 ioctl 4018620d 20000040 returned -16 [ 130.495972][ T291] EXT4-fs (loop4): unmounting filesystem. [ 131.358797][ T28] audit: type=1400 audit(1732136256.797:156): avc: denied { call } for pid=1796 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.399630][ T28] audit: type=1400 audit(1732136256.837:157): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.466387][ T28] audit: type=1400 audit(1732136256.837:158): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.494042][ T28] audit: type=1400 audit(1732136256.837:159): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.086660][ T1806] device wg2 left promiscuous mode [ 132.362429][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 132.607440][ T1823] binder: 1815:1823 ioctl c0306201 0 returned -14 [ 135.759562][ T1852] cgroup: noprefix used incorrectly [ 136.205996][ T1863] device wg2 left promiscuous mode [ 136.985057][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 137.540552][ T1888] fuse: Unknown parameter 'use00000000000000000000' [ 138.269167][ T1913] binder: 1892:1913 ioctl c0306201 0 returned -14 [ 139.373522][ T1921] device wg2 left promiscuous mode [ 139.379941][ T1921] device wg2 entered promiscuous mode [ 140.869166][ T361] udevd[361]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 141.378336][ T1956] binder: 1945:1956 ioctl 4018620d 0 returned -22 [ 141.415535][ T1956] binder: 1945:1956 ioctl c0306201 0 returned -14 [ 142.394661][ T1967] device wg2 left promiscuous mode [ 142.401793][ T1967] device wg2 entered promiscuous mode [ 146.162788][ T2021] binder: 2016:2021 ioctl c0306201 0 returned -14 [ 146.175510][ T2021] binder: 2016:2021 ioctl c0306201 0 returned -14 [ 147.229524][ T2032] binder: 2023:2032 ioctl c0306201 0 returned -14 [ 151.432126][ T2076] loop4: detected capacity change from 0 to 16 [ 151.446257][ T2076] erofs: (device loop4): mounted with root inode @ nid 36. [ 151.638213][ T2082] loop1: detected capacity change from 0 to 1024 [ 151.644671][ T2082] EXT4-fs: Ignoring removed orlov option [ 151.650172][ T2082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.978417][ T2089] syz.4.407: attempt to access beyond end of device [ 151.978417][ T2089] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 153.112316][ T2082] EXT4-fs: error -4 creating inode table initialization thread [ 153.119861][ T2082] EXT4-fs (loop1): mount failed [ 153.139673][ T28] audit: type=1400 audit(1732136278.577:160): avc: denied { write } for pid=2092 comm="syz.3.412" name="vsock" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.226463][ T28] audit: type=1400 audit(1732136278.607:161): avc: denied { open } for pid=2092 comm="syz.3.412" path="/dev/vsock" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.928861][ T2121] loop3: detected capacity change from 0 to 16 [ 154.982549][ T2121] erofs: (device loop3): mounted with root inode @ nid 36. [ 155.020733][ T2130] loop2: detected capacity change from 0 to 16 [ 155.116080][ T2130] erofs: (device loop2): mounted with root inode @ nid 36. [ 156.811363][ T2137] syz.2.421: attempt to access beyond end of device [ 156.811363][ T2137] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 156.829113][ T2140] syz.3.419: attempt to access beyond end of device [ 156.829113][ T2140] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 157.312767][ T2157] cgroup: noprefix used incorrectly [ 157.320792][ T28] audit: type=1400 audit(1732136282.757:162): avc: denied { map } for pid=2146 comm="syz.1.425" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.366509][ T28] audit: type=1400 audit(1732136282.757:163): avc: denied { execute } for pid=2146 comm="syz.1.425" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.445866][ T28] audit: type=1400 audit(1732136282.757:164): avc: denied { create } for pid=2146 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.679307][ T2191] cgroup: noprefix used incorrectly [ 160.970322][ T2214] loop2: detected capacity change from 0 to 16 [ 161.374209][ T2214] erofs: (device loop2): mounted with root inode @ nid 36. [ 161.824135][ T2227] syz.2.446: attempt to access beyond end of device [ 161.824135][ T2227] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 163.206647][ T2238] loop2: detected capacity change from 0 to 16 [ 163.247532][ T2238] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.364210][ T2243] cgroup: noprefix used incorrectly [ 163.461582][ T2245] syz.2.450: attempt to access beyond end of device [ 163.461582][ T2245] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 164.904401][ T2269] loop4: detected capacity change from 0 to 16 [ 164.933693][ T2269] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.112130][ T2274] syz.4.457: attempt to access beyond end of device [ 165.112130][ T2274] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 166.218607][ T2299] loop2: detected capacity change from 0 to 256 [ 166.271258][ T2299] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 169.523984][ T2333] loop2: detected capacity change from 0 to 256 [ 169.549237][ T2333] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 171.127364][ T28] audit: type=1400 audit(1732136296.527:165): avc: denied { create } for pid=2350 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.287550][ T2358] cgroup: noprefix used incorrectly [ 171.312990][ T28] audit: type=1400 audit(1732136296.747:166): avc: denied { setopt } for pid=2350 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.334186][ T2360] cgroup: noprefix used incorrectly [ 171.860114][ T2363] loop1: detected capacity change from 0 to 256 [ 171.879378][ T2363] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 173.184454][ T2374] loop3: detected capacity change from 0 to 16 [ 173.233226][ T2374] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.331044][ T2381] loop4: detected capacity change from 0 to 16 [ 173.337711][ T2381] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.565480][ T2385] syz.3.485: attempt to access beyond end of device [ 173.565480][ T2385] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 173.971076][ T2386] syz.4.488: attempt to access beyond end of device [ 173.971076][ T2386] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 175.502311][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 176.311915][ T2416] loop3: detected capacity change from 0 to 1024 [ 176.318456][ T2416] EXT4-fs: Ignoring removed orlov option [ 176.324194][ T2416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.343345][ T28] audit: type=1400 audit(1732136301.777:167): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.464744][ T2416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.487007][ T2433] loop4: detected capacity change from 0 to 16 [ 176.515394][ T2434] cgroup: noprefix used incorrectly [ 176.529174][ T2433] erofs: (device loop4): mounted with root inode @ nid 36. [ 176.559254][ T28] audit: type=1400 audit(1732136301.777:168): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.718063][ T28] audit: type=1400 audit(1732136301.777:169): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.739291][ T28] audit: type=1400 audit(1732136301.907:170): avc: denied { write } for pid=2410 comm="syz.3.495" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.761444][ T28] audit: type=1400 audit(1732136301.907:171): avc: denied { add_name } for pid=2410 comm="syz.3.495" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.787311][ T28] audit: type=1400 audit(1732136301.907:172): avc: denied { create } for pid=2410 comm="syz.3.495" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.809173][ T1289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.855389][ T2439] syz.4.500: attempt to access beyond end of device [ 176.855389][ T2439] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 177.724560][ T28] audit: type=1400 audit(1732136301.907:173): avc: denied { read write } for pid=2410 comm="syz.3.495" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.785685][ T28] audit: type=1400 audit(1732136301.907:174): avc: denied { open } for pid=2410 comm="syz.3.495" path="/97/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.874721][ T28] audit: type=1400 audit(1732136301.917:175): avc: denied { read } for pid=2410 comm="syz.3.495" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.897745][ T28] audit: type=1400 audit(1732136301.917:176): avc: denied { ioctl } for pid=2410 comm="syz.3.495" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.805770][ T2456] loop1: detected capacity change from 0 to 256 [ 179.897418][ T1289] usb 4-1: Using ep0 maxpacket: 16 [ 180.133991][ T2456] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 181.279857][ T1289] usb 4-1: device descriptor read/all, error -71 [ 182.189972][ T295] EXT4-fs (loop3): unmounting filesystem. [ 185.679053][ T2519] loop3: detected capacity change from 0 to 256 [ 186.813227][ T2519] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.199457][ T2573] loop3: detected capacity change from 0 to 256 [ 190.260956][ T2573] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.479613][ T2585] Restarting kernel threads ... done. [ 191.573787][ T2594] loop1: detected capacity change from 0 to 16 [ 191.780595][ T2597] loop4: detected capacity change from 0 to 1024 [ 191.790925][ T2597] EXT4-fs: Ignoring removed orlov option [ 191.796722][ T2597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.977774][ T2594] erofs: (device loop1): mounted with root inode @ nid 36. [ 192.039093][ T2597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.345388][ T2611] syz.1.538: attempt to access beyond end of device [ 192.345388][ T2611] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 192.357330][ T1558] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.534706][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 192.908668][ T2617] Restarting kernel threads ... done. [ 192.918718][ T1558] usb 5-1: Using ep0 maxpacket: 16 [ 193.255180][ T1558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.265175][ T1558] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.507494][ T1558] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 193.516476][ T1558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.528465][ T1558] usb 5-1: Product: syz [ 193.532460][ T1558] usb 5-1: Manufacturer: syz [ 193.548344][ T1558] usb 5-1: SerialNumber: syz [ 193.568052][ T1558] usb 5-1: config 0 descriptor?? [ 194.701238][ T2647] Restarting kernel threads ... done. [ 195.299711][ T2657] Restarting kernel threads ... done. [ 195.629514][ T1558] usb 5-1: USB disconnect, device number 2 [ 195.636153][ T291] EXT4-fs (loop4): unmounting filesystem. [ 197.677545][ T2697] loop3: detected capacity change from 0 to 16 [ 197.709551][ T2697] erofs: (device loop3): mounted with root inode @ nid 36. [ 198.129756][ T2708] Restarting kernel threads ... done. [ 198.521338][ T2709] syz.3.562: attempt to access beyond end of device [ 198.521338][ T2709] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 199.362220][ T2743] loop3: detected capacity change from 0 to 256 [ 199.393606][ T2743] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 200.279727][ T2745] device wg2 left promiscuous mode [ 200.285739][ T2746] device wg2 entered promiscuous mode [ 200.687699][ T2752] loop2: detected capacity change from 0 to 16 [ 200.704329][ T2752] erofs: (device loop2): mounted with root inode @ nid 36. [ 200.937718][ T2759] syz.2.576: attempt to access beyond end of device [ 200.937718][ T2759] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 202.152686][ T2774] device wg2 left promiscuous mode [ 202.158827][ T2775] device wg2 entered promiscuous mode [ 202.300231][ T2780] loop1: detected capacity change from 0 to 16 [ 202.396485][ T2780] erofs: (device loop1): mounted with root inode @ nid 36. [ 203.254359][ T2799] syz.1.581: attempt to access beyond end of device [ 203.254359][ T2799] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 203.997424][ T352] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 204.277306][ T352] usb 3-1: Using ep0 maxpacket: 16 [ 204.531716][ T2820] device wg2 left promiscuous mode [ 204.563720][ T2821] device wg2 entered promiscuous mode [ 204.707554][ T352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.739817][ T2824] loop1: detected capacity change from 0 to 256 [ 204.757343][ T352] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.786831][ T2824] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 205.051260][ T352] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 205.065314][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.117301][ T352] usb 3-1: Product: syz [ 205.121292][ T352] usb 3-1: Manufacturer: syz [ 205.125714][ T352] usb 3-1: SerialNumber: syz [ 205.157684][ T352] usb 3-1: config 0 descriptor?? [ 205.354393][ T2845] device wg2 left promiscuous mode [ 205.361206][ T2845] device wg2 entered promiscuous mode [ 206.633889][ T352] usb 3-1: USB disconnect, device number 2 [ 207.557019][ T2873] device wg2 entered promiscuous mode [ 210.248737][ T2921] loop1: detected capacity change from 0 to 16 [ 210.260731][ T2921] erofs: (device loop1): mounted with root inode @ nid 36. [ 210.398555][ T2924] loop3: detected capacity change from 0 to 16 [ 210.461900][ T2925] syz.1.618: attempt to access beyond end of device [ 210.461900][ T2925] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 210.509421][ T2924] erofs: (device loop3): mounted with root inode @ nid 36. [ 211.186274][ T2935] syz.3.619: attempt to access beyond end of device [ 211.186274][ T2935] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 211.775195][ T2955] loop2: detected capacity change from 0 to 16 [ 212.486451][ T2957] device wg2 left promiscuous mode [ 212.492519][ T2958] device wg2 entered promiscuous mode [ 212.502315][ T2955] erofs: (device loop2): mounted with root inode @ nid 36. [ 212.604677][ T2938] device wg2 left promiscuous mode [ 212.614987][ T2938] device wg2 entered promiscuous mode [ 212.687700][ T2965] syz.2.629: attempt to access beyond end of device [ 212.687700][ T2965] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 215.062102][ T2996] loop1: detected capacity change from 0 to 16 [ 215.148057][ T2996] erofs: (device loop1): mounted with root inode @ nid 36. [ 215.162196][ T3000] loop3: detected capacity change from 0 to 16 [ 215.182528][ T3000] erofs: (device loop3): mounted with root inode @ nid 36. [ 216.261498][ T3008] syz.1.638: attempt to access beyond end of device [ 216.261498][ T3008] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 216.320603][ T3004] device wg2 left promiscuous mode [ 216.328759][ T3005] device wg2 entered promiscuous mode [ 217.157454][ T3010] syz.3.640: attempt to access beyond end of device [ 217.157454][ T3010] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 217.588537][ T3016] loop2: detected capacity change from 0 to 1024 [ 217.595089][ T3016] EXT4-fs: Ignoring removed orlov option [ 217.632618][ T3016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.671731][ T3016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 218.147349][ T1288] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 218.609287][ T3037] loop1: detected capacity change from 0 to 256 [ 218.629665][ T3037] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 218.717338][ T1288] usb 3-1: Using ep0 maxpacket: 16 [ 218.837364][ T1288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.854632][ T1288] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.047388][ T1288] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 219.061736][ T1288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.089963][ T1288] usb 3-1: Product: syz [ 219.093975][ T1288] usb 3-1: Manufacturer: syz [ 219.117296][ T1288] usb 3-1: SerialNumber: syz [ 219.131652][ T1288] usb 3-1: config 0 descriptor?? [ 219.680816][ T3061] loop4: detected capacity change from 0 to 16 [ 219.688931][ T3061] erofs: (device loop4): mounted with root inode @ nid 36. [ 220.873841][ T3065] syz.4.654: attempt to access beyond end of device [ 220.873841][ T3065] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 220.922587][ T1289] usb 3-1: USB disconnect, device number 3 [ 220.929906][ T294] EXT4-fs (loop2): unmounting filesystem. [ 221.861169][ T3085] loop3: detected capacity change from 0 to 256 [ 221.882771][ T3085] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 221.901248][ T3087] loop2: detected capacity change from 0 to 256 [ 221.932260][ T3087] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 222.300281][ T3093] Restarting kernel threads ... done. [ 222.938050][ T1288] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 223.207309][ T1288] usb 1-1: Using ep0 maxpacket: 16 [ 223.385582][ T1288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.406589][ T1288] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.567369][ T1288] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 223.738729][ T3120] loop3: detected capacity change from 0 to 1024 [ 223.746719][ T3120] EXT4-fs: Ignoring removed orlov option [ 223.752309][ T3120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.861699][ T1288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.869641][ T1288] usb 1-1: Product: syz [ 223.873552][ T1288] usb 1-1: Manufacturer: syz [ 223.889369][ T1288] usb 1-1: SerialNumber: syz [ 223.900539][ T1288] usb 1-1: config 0 descriptor?? [ 223.917219][ T3120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.235995][ T2495] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 225.427501][ T2495] usb 4-1: Using ep0 maxpacket: 16 [ 225.597462][ T2495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.611679][ T2495] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.777397][ T2495] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 225.789501][ T2495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.802704][ T2495] usb 4-1: Product: syz [ 225.809112][ T2495] usb 4-1: Manufacturer: syz [ 225.820864][ T2495] usb 4-1: SerialNumber: syz [ 225.844570][ T2495] usb 4-1: config 0 descriptor?? [ 226.182628][ T847] usb 1-1: USB disconnect, device number 2 [ 226.213961][ T24] usb 4-1: USB disconnect, device number 4 [ 226.231899][ T3159] loop2: detected capacity change from 0 to 256 [ 226.244838][ T3159] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 226.258656][ T3161] 9pnet_fd: Insufficient options for proto=fd [ 226.484958][ T3167] device wg2 entered promiscuous mode [ 227.217796][ T295] EXT4-fs (loop3): unmounting filesystem. [ 227.750959][ T1289] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 228.027340][ T1289] usb 1-1: Using ep0 maxpacket: 16 [ 228.167398][ T1289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.237229][ T1289] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.487417][ T1289] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 228.501860][ T1289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.530284][ T1289] usb 1-1: Product: syz [ 228.537949][ T1289] usb 1-1: Manufacturer: syz [ 228.569139][ T1289] usb 1-1: SerialNumber: syz [ 228.618938][ T1289] usb 1-1: config 0 descriptor?? [ 229.696994][ T3232] loop2: detected capacity change from 0 to 256 [ 229.716744][ T3232] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 230.577732][ T1289] usb 1-1: USB disconnect, device number 3 [ 231.871341][ T361] udevd[361]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 232.093089][ T3287] loop3: detected capacity change from 0 to 256 [ 232.135363][ T3289] 9pnet_fd: Insufficient options for proto=fd [ 232.168199][ T3287] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 233.625102][ T3320] loop1: detected capacity change from 0 to 16 [ 233.631591][ T3320] erofs: (device loop1): mounted with root inode @ nid 36. [ 233.818111][ T3323] syz.1.718: attempt to access beyond end of device [ 233.818111][ T3323] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 234.106205][ T3338] device wg2 left promiscuous mode [ 234.134323][ T3338] device wg2 entered promiscuous mode [ 234.328907][ T1579] udevd[1579]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 234.384944][ T3344] 9pnet_fd: Insufficient options for proto=fd [ 235.371162][ T3367] device wg2 left promiscuous mode [ 235.398059][ T3367] device wg2 entered promiscuous mode [ 236.272236][ T3375] loop1: detected capacity change from 0 to 16 [ 236.279006][ T3375] erofs: (device loop1): mounted with root inode @ nid 36. [ 236.483649][ T3386] syz.1.733: attempt to access beyond end of device [ 236.483649][ T3386] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 238.026074][ T3413] loop4: detected capacity change from 0 to 1024 [ 238.032657][ T3413] EXT4-fs: Ignoring removed orlov option [ 238.038479][ T3413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.080603][ T3413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 238.551110][ T3426] device wg2 left promiscuous mode [ 238.570670][ T3426] device wg2 entered promiscuous mode [ 238.657464][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 238.967301][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 239.187662][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.198596][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.407550][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 239.434639][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.472374][ T24] usb 5-1: Product: syz [ 239.488904][ T24] usb 5-1: Manufacturer: syz [ 239.497299][ T24] usb 5-1: SerialNumber: syz [ 239.506333][ T24] usb 5-1: config 0 descriptor?? [ 239.568569][ T3444] loop3: detected capacity change from 0 to 16 [ 239.604088][ T3444] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.171429][ T3449] syz.3.751: attempt to access beyond end of device [ 240.171429][ T3449] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 241.386628][ T3460] device wg2 left promiscuous mode [ 241.418273][ T3457] device wg2 entered promiscuous mode [ 241.808179][ T3388] udevd[3388]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 241.873986][ T1288] usb 5-1: USB disconnect, device number 3 [ 242.862435][ T3477] device wg2 left promiscuous mode [ 242.868628][ T3478] device wg2 entered promiscuous mode [ 242.924003][ T291] EXT4-fs (loop4): unmounting filesystem. [ 243.019823][ T3489] loop4: detected capacity change from 0 to 256 [ 243.075364][ T3489] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 243.557624][ T3501] loop2: detected capacity change from 0 to 16 [ 243.564295][ T3501] erofs: (device loop2): mounted with root inode @ nid 36. [ 243.753519][ T3504] syz.2.764: attempt to access beyond end of device [ 243.753519][ T3504] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 244.149846][ T3513] loop1: detected capacity change from 0 to 16 [ 244.178966][ T3513] erofs: (device loop1): mounted with root inode @ nid 36. [ 244.766997][ T3524] syz.1.767: attempt to access beyond end of device [ 244.766997][ T3524] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 245.078431][ T3525] device wg2 left promiscuous mode [ 245.273875][ T3525] device wg2 entered promiscuous mode [ 246.095056][ T3537] device wg2 left promiscuous mode [ 246.101243][ T3538] device wg2 entered promiscuous mode [ 247.337353][ T847] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 248.247323][ T847] usb 1-1: Using ep0 maxpacket: 16 [ 248.344438][ T3565] loop1: detected capacity change from 0 to 16 [ 248.374125][ T3565] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.884564][ T3576] syz.1.778: attempt to access beyond end of device [ 248.884564][ T3576] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 249.144821][ T847] usb 1-1: device descriptor read/all, error -71 [ 249.159325][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 250.462259][ T3594] device wg2 left promiscuous mode [ 250.468656][ T3595] device wg2 entered promiscuous mode [ 252.033560][ T3630] loop1: detected capacity change from 0 to 16 [ 252.138880][ T3630] erofs: (device loop1): mounted with root inode @ nid 36. [ 252.161499][ T3635] 9pnet_fd: Insufficient options for proto=fd [ 252.300554][ T3640] 9pnet_fd: Insufficient options for proto=fd [ 252.394867][ T3643] syz.1.793: attempt to access beyond end of device [ 252.394867][ T3643] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 252.789368][ T3388] udevd[3388]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 252.805062][ T302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.047305][ T302] usb 1-1: Using ep0 maxpacket: 16 [ 253.167752][ T302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.629840][ T302] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.937303][ T302] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 253.946261][ T302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.997555][ T302] usb 1-1: Product: syz [ 254.007462][ T302] usb 1-1: Manufacturer: syz [ 254.017428][ T302] usb 1-1: SerialNumber: syz [ 254.037922][ T302] usb 1-1: config 0 descriptor?? [ 254.077351][ T302] usb 1-1: can't set config #0, error -71 [ 254.094609][ T302] usb 1-1: USB disconnect, device number 6 [ 254.118255][ T3666] Restarting kernel threads ... done. [ 254.173583][ T3679] 9pnet_fd: Insufficient options for proto=fd [ 254.425828][ T3682] loop1: detected capacity change from 0 to 16 [ 254.540965][ T3682] erofs: (device loop1): mounted with root inode @ nid 36. [ 254.958031][ T3691] syz.1.809: attempt to access beyond end of device [ 254.958031][ T3691] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 255.676624][ T3702] FAULT_INJECTION: forcing a failure. [ 255.676624][ T3702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.707329][ T3702] CPU: 1 PID: 3702 Comm: syz.0.815 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 255.716895][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 255.726929][ T3702] Call Trace: [ 255.730033][ T3702] [ 255.732812][ T3702] dump_stack_lvl+0x151/0x1b7 [ 255.737334][ T3702] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 255.742615][ T3702] ? futex_wait_requeue_pi+0xba4/0xd90 [ 255.747915][ T3702] dump_stack+0x15/0x1e [ 255.751910][ T3702] should_fail_ex+0x3d0/0x520 [ 255.756428][ T3702] should_fail+0xb/0x10 [ 255.760408][ T3702] should_fail_usercopy+0x1a/0x20 [ 255.765268][ T3702] _copy_to_user+0x1e/0x90 [ 255.769539][ T3702] simple_read_from_buffer+0xc7/0x150 [ 255.774728][ T3702] proc_fail_nth_read+0x1a3/0x210 [ 255.779588][ T3702] ? proc_fault_inject_write+0x390/0x390 [ 255.785054][ T3702] ? fsnotify_perm+0x269/0x5b0 [ 255.789657][ T3702] ? security_file_permission+0x86/0xb0 [ 255.795036][ T3702] ? proc_fault_inject_write+0x390/0x390 [ 255.800512][ T3702] vfs_read+0x26c/0xae0 [ 255.804506][ T3702] ? kernel_read+0x1f0/0x1f0 [ 255.808929][ T3702] ? mutex_lock+0xb1/0x1e0 [ 255.813175][ T3702] ? bit_wait_io_timeout+0x120/0x120 [ 255.818299][ T3702] ? __fdget_pos+0x2e2/0x390 [ 255.822811][ T3702] ? ksys_read+0x77/0x2c0 [ 255.826977][ T3702] ksys_read+0x199/0x2c0 [ 255.831059][ T3702] ? vfs_write+0xed0/0xed0 [ 255.835309][ T3702] ? debug_smp_processor_id+0x17/0x20 [ 255.840519][ T3702] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 255.846416][ T3702] __x64_sys_read+0x7b/0x90 [ 255.850757][ T3702] x64_sys_call+0x28/0x9a0 [ 255.855007][ T3702] do_syscall_64+0x3b/0xb0 [ 255.859268][ T3702] ? clear_bhb_loop+0x55/0xb0 [ 255.863778][ T3702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.869504][ T3702] RIP: 0033:0x7f18ddb7d25c [ 255.873759][ T3702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 255.893204][ T3702] RSP: 002b:00007f18dd9ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.901446][ T3702] RAX: ffffffffffffffda RBX: 00007f18ddd35fa0 RCX: 00007f18ddb7d25c [ 255.909257][ T3702] RDX: 000000000000000f RSI: 00007f18dd9ff0a0 RDI: 0000000000000003 [ 255.917066][ T3702] RBP: 00007f18dd9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 255.924880][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.932862][ T3702] R13: 0000000000000001 R14: 00007f18ddd35fa0 R15: 00007ffe57c23098 [ 255.940692][ T3702] [ 256.006761][ T3708] device wg2 left promiscuous mode [ 256.090476][ T3708] device wg2 entered promiscuous mode [ 256.221953][ T3715] loop4: detected capacity change from 0 to 1024 [ 256.788519][ T3715] EXT4-fs: Ignoring removed orlov option [ 256.794115][ T3715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.908599][ T3723] 9pnet_fd: Insufficient options for proto=fd [ 257.067428][ T3715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.144651][ T3741] loop3: detected capacity change from 0 to 16 [ 257.155103][ T3741] erofs: (device loop3): mounted with root inode @ nid 36. [ 257.162743][ T3733] Restarting kernel threads ... done. [ 257.385322][ T3746] syz.3.826: attempt to access beyond end of device [ 257.385322][ T3746] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 257.417486][ T696] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 257.677322][ T696] usb 5-1: Using ep0 maxpacket: 16 [ 257.797536][ T696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.807592][ T696] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.626706][ T3751] device wg2 left promiscuous mode [ 258.632658][ T3752] device wg2 entered promiscuous mode [ 258.742458][ T696] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 258.751677][ T696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.759820][ T696] usb 5-1: Product: syz [ 258.764356][ T696] usb 5-1: Manufacturer: syz [ 258.768795][ T696] usb 5-1: SerialNumber: syz [ 258.773831][ T696] usb 5-1: config 0 descriptor?? [ 258.896783][ T3767] 9pnet_fd: Insufficient options for proto=fd [ 259.413562][ T696] usb 5-1: USB disconnect, device number 4 [ 259.771666][ T3778] 9pnet_fd: Insufficient options for proto=fd [ 259.812258][ T291] EXT4-fs (loop4): unmounting filesystem. [ 259.834119][ T3783] FAULT_INJECTION: forcing a failure. [ 259.834119][ T3783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.885819][ T3783] CPU: 0 PID: 3783 Comm: syz.1.838 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 259.895508][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 259.905398][ T3783] Call Trace: [ 259.908517][ T3783] [ 259.911303][ T3783] dump_stack_lvl+0x151/0x1b7 [ 259.915949][ T3783] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 259.921241][ T3783] ? vfs_write+0x952/0xed0 [ 259.925492][ T3783] ? __kasan_slab_free+0x11/0x20 [ 259.930369][ T3783] dump_stack+0x15/0x1e [ 259.934348][ T3783] should_fail_ex+0x3d0/0x520 [ 259.938865][ T3783] should_fail+0xb/0x10 [ 259.942857][ T3783] should_fail_usercopy+0x1a/0x20 [ 259.947716][ T3783] _copy_from_user+0x1e/0xc0 [ 259.952139][ T3783] __sys_bpf+0x23b/0x7f0 [ 259.956221][ T3783] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 259.961530][ T3783] ? __ia32_sys_read+0x90/0x90 [ 259.966127][ T3783] ? debug_smp_processor_id+0x17/0x20 [ 259.971329][ T3783] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 259.977233][ T3783] __x64_sys_bpf+0x7c/0x90 [ 259.981491][ T3783] x64_sys_call+0x87f/0x9a0 [ 259.985913][ T3783] do_syscall_64+0x3b/0xb0 [ 259.990166][ T3783] ? clear_bhb_loop+0x55/0xb0 [ 259.994682][ T3783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.000419][ T3783] RIP: 0033:0x7fd91d37e819 [ 260.004662][ T3783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.024305][ T3783] RSP: 002b:00007fd91e25c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.032678][ T3783] RAX: ffffffffffffffda RBX: 00007fd91d535fa0 RCX: 00007fd91d37e819 [ 260.040501][ T3783] RDX: 0000000000000021 RSI: 000000002000e000 RDI: 0000000000000005 [ 260.048301][ T3783] RBP: 00007fd91e25c090 R08: 0000000000000000 R09: 0000000000000000 [ 260.056111][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.063924][ T3783] R13: 0000000000000001 R14: 00007fd91d535fa0 R15: 00007fffe00a0828 [ 260.071741][ T3783] [ 260.072570][ T3790] loop2: detected capacity change from 0 to 16 [ 260.103354][ T3790] erofs: (device loop2): mounted with root inode @ nid 36. [ 261.948697][ T3801] device wg2 left promiscuous mode [ 261.954969][ T3802] device wg2 entered promiscuous mode [ 262.090300][ T3814] 9pnet_fd: Insufficient options for proto=fd [ 262.229049][ T3817] syz.2.840: attempt to access beyond end of device [ 262.229049][ T3817] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 262.443040][ T3820] loop1: detected capacity change from 0 to 1024 [ 262.668242][ T3820] EXT4-fs: Ignoring removed orlov option [ 262.675742][ T3820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.886132][ T3820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.028444][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 263.028460][ T28] audit: type=1400 audit(1732136388.467:180): avc: denied { mount } for pid=3836 comm="syz.3.852" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 263.197411][ T3818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 263.486453][ T3853] device wg2 left promiscuous mode [ 263.502867][ T3853] device wg2 entered promiscuous mode [ 263.567337][ T3818] usb 2-1: Using ep0 maxpacket: 16 [ 263.734096][ T28] audit: type=1400 audit(1732136389.167:181): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 263.847310][ T1288] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 263.857348][ T3818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.867334][ T3818] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.027384][ T3818] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 265.036361][ T3818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.044308][ T3818] usb 2-1: Product: syz [ 265.048360][ T3818] usb 2-1: Manufacturer: syz [ 265.053002][ T3818] usb 2-1: SerialNumber: syz [ 265.083962][ T3818] usb 2-1: config 0 descriptor?? [ 265.167358][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 265.337387][ T1288] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 265.346207][ T1288] usb 3-1: config 1 has no interface number 1 [ 265.352205][ T1288] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 4 [ 265.402342][ T1558] usb 2-1: USB disconnect, device number 2 [ 265.517358][ T1288] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.526447][ T1288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.534387][ T1288] usb 3-1: Product: syz [ 265.538553][ T1288] usb 3-1: Manufacturer: syz [ 265.542942][ T1288] usb 3-1: SerialNumber: syz [ 265.617420][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.628224][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.637938][ T39] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 265.646847][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.679983][ T39] usb 5-1: config 0 descriptor?? [ 265.788794][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.798110][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.807823][ T3878] FAULT_INJECTION: forcing a failure. [ 265.807823][ T3878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.820796][ T3878] CPU: 0 PID: 3878 Comm: syz.0.863 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 265.830482][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 265.840380][ T3878] Call Trace: [ 265.843500][ T3878] [ 265.846279][ T3878] dump_stack_lvl+0x151/0x1b7 [ 265.850802][ T3878] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 265.856111][ T3878] ? __kasan_check_write+0x14/0x20 [ 265.861045][ T3878] dump_stack+0x15/0x1e [ 265.865035][ T3878] should_fail_ex+0x3d0/0x520 [ 265.869539][ T3878] should_fail+0xb/0x10 [ 265.873565][ T3878] should_fail_usercopy+0x1a/0x20 [ 265.878390][ T3878] _copy_to_user+0x1e/0x90 [ 265.882647][ T3878] simple_read_from_buffer+0xc7/0x150 [ 265.887853][ T3878] proc_fail_nth_read+0x1a3/0x210 [ 265.892713][ T3878] ? proc_fault_inject_write+0x390/0x390 [ 265.898179][ T3878] ? fsnotify_perm+0x269/0x5b0 [ 265.902779][ T3878] ? security_file_permission+0x86/0xb0 [ 265.908157][ T3878] ? proc_fault_inject_write+0x390/0x390 [ 265.913640][ T3878] vfs_read+0x26c/0xae0 [ 265.917625][ T3878] ? kernel_read+0x1f0/0x1f0 [ 265.922046][ T3878] ? mutex_lock+0xb1/0x1e0 [ 265.926303][ T3878] ? bit_wait_io_timeout+0x120/0x120 [ 265.931424][ T3878] ? __fdget_pos+0x2e2/0x390 [ 265.935845][ T3878] ? ksys_read+0x77/0x2c0 [ 265.940014][ T3878] ksys_read+0x199/0x2c0 [ 265.944092][ T3878] ? _raw_spin_trylock_bh+0x190/0x190 [ 265.949303][ T3878] ? vfs_write+0xed0/0xed0 [ 265.953564][ T3878] ? debug_smp_processor_id+0x17/0x20 [ 265.958967][ T3878] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 265.964870][ T3878] __x64_sys_read+0x7b/0x90 [ 265.969208][ T3878] x64_sys_call+0x28/0x9a0 [ 265.973459][ T3878] do_syscall_64+0x3b/0xb0 [ 265.977713][ T3878] ? clear_bhb_loop+0x55/0xb0 [ 265.982227][ T3878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.987953][ T3878] RIP: 0033:0x7f18ddb7d25c [ 265.992208][ T3878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 266.011649][ T3878] RSP: 002b:00007f18dd9ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.019897][ T3878] RAX: ffffffffffffffda RBX: 00007f18ddd35fa0 RCX: 00007f18ddb7d25c [ 266.027705][ T3878] RDX: 000000000000000f RSI: 00007f18dd9ff0a0 RDI: 0000000000000003 [ 266.036039][ T3878] RBP: 00007f18dd9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 266.043851][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.051662][ T3878] R13: 0000000000000001 R14: 00007f18ddd35fa0 R15: 00007ffe57c23098 [ 266.059565][ T3878] [ 266.100133][ T28] audit: type=1400 audit(1732136391.537:182): avc: denied { create } for pid=3884 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.123287][ T28] audit: type=1400 audit(1732136391.567:183): avc: denied { create } for pid=3884 comm="syz.4.864" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 266.146096][ T293] EXT4-fs (loop1): unmounting filesystem. [ 266.151971][ T28] audit: type=1400 audit(1732136391.567:184): avc: denied { write } for pid=3884 comm="syz.4.864" path="socket:[30248]" dev="sockfs" ino=30248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.175808][ T1288] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 266.187416][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 266.189540][ T3887] loop4: detected capacity change from 0 to 512 [ 266.193306][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 266.205528][ T1288] usb 3-1: 2:1 : sample bitwidth 46 in over sample bytes 4 [ 266.221467][ T1288] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 266.227910][ T3887] EXT4-fs (loop4): unsupported inode size: 143 [ 266.233657][ T39] usb 5-1: USB disconnect, device number 5 [ 266.233904][ T3887] EXT4-fs (loop4): blocksize: 1024 [ 266.244671][ T1288] usb 3-1: 2:1 : invalid channels 0 [ 266.273239][ T1288] usb 3-1: USB disconnect, device number 4 [ 266.342826][ T3896] FAULT_INJECTION: forcing a failure. [ 266.342826][ T3896] name failslab, interval 1, probability 0, space 0, times 1 [ 266.370713][ T3896] CPU: 0 PID: 3896 Comm: syz.1.867 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 266.380297][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 266.390271][ T3896] Call Trace: [ 266.393384][ T3896] [ 266.396160][ T3896] dump_stack_lvl+0x151/0x1b7 [ 266.400671][ T3896] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 266.406094][ T3896] dump_stack+0x15/0x1e [ 266.410071][ T3896] should_fail_ex+0x3d0/0x520 [ 266.414668][ T3896] ? create_new_namespaces+0x34/0x670 [ 266.419883][ T3896] __should_failslab+0xaf/0xf0 [ 266.424480][ T3896] should_failslab+0x9/0x20 [ 266.428820][ T3896] kmem_cache_alloc+0x3b/0x320 [ 266.433417][ T3896] ? cap_capable+0x1d2/0x270 [ 266.437846][ T3896] create_new_namespaces+0x34/0x670 [ 266.442881][ T3896] ? security_capable+0x87/0xb0 [ 266.447568][ T3896] ? ns_capable+0x89/0xe0 [ 266.451732][ T3896] unshare_nsproxy_namespaces+0x126/0x180 [ 266.457288][ T3896] ksys_unshare+0x542/0xa00 [ 266.461623][ T3896] ? fput+0x15b/0x1b0 [ 266.465548][ T3896] ? unshare_fd+0x240/0x240 [ 266.469880][ T3896] ? debug_smp_processor_id+0x17/0x20 [ 266.475088][ T3896] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 266.480990][ T3896] __x64_sys_unshare+0x38/0x40 [ 266.485595][ T3896] x64_sys_call+0x728/0x9a0 [ 266.489928][ T3896] do_syscall_64+0x3b/0xb0 [ 266.494187][ T3896] ? clear_bhb_loop+0x55/0xb0 [ 266.498692][ T3896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.504421][ T3896] RIP: 0033:0x7fd91d37e819 [ 266.508681][ T3896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.528115][ T3896] RSP: 002b:00007fd91e25c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.536362][ T3896] RAX: ffffffffffffffda RBX: 00007fd91d535fa0 RCX: 00007fd91d37e819 [ 266.544176][ T3896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 266.551993][ T3896] RBP: 00007fd91e25c090 R08: 0000000000000000 R09: 0000000000000000 [ 266.559803][ T3896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.567604][ T3896] R13: 0000000000000001 R14: 00007fd91d535fa0 R15: 00007fffe00a0828 [ 266.575424][ T3896] [ 266.656970][ T3902] FAULT_INJECTION: forcing a failure. [ 266.656970][ T3902] name failslab, interval 1, probability 0, space 0, times 0 [ 266.669762][ T3902] CPU: 1 PID: 3902 Comm: syz.4.868 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 266.679310][ T3902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 266.689207][ T3902] Call Trace: [ 266.692326][ T3902] [ 266.695107][ T3902] dump_stack_lvl+0x151/0x1b7 [ 266.699617][ T3902] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 266.704912][ T3902] ? vfs_write+0x952/0xed0 [ 266.709163][ T3902] ? __kasan_slab_free+0x11/0x20 [ 266.713938][ T3902] dump_stack+0x15/0x1e [ 266.717928][ T3902] should_fail_ex+0x3d0/0x520 [ 266.722443][ T3902] ? getname_flags+0xba/0x520 [ 266.726956][ T3902] __should_failslab+0xaf/0xf0 [ 266.731757][ T3902] should_failslab+0x9/0x20 [ 266.736069][ T3902] kmem_cache_alloc+0x3b/0x320 [ 266.740670][ T3902] getname_flags+0xba/0x520 [ 266.745111][ T3902] user_path_at_empty+0x2d/0x1a0 [ 266.749881][ T3902] __x64_sys_fchmodat+0xfd/0x1a0 [ 266.754715][ T3902] ? __ia32_sys_fchmod+0x160/0x160 [ 266.759603][ T3902] ? debug_smp_processor_id+0x17/0x20 [ 266.764813][ T3902] ? exit_to_user_mode_prepare+0x39/0xa0 [ 266.770278][ T3902] x64_sys_call+0x70c/0x9a0 [ 266.774619][ T3902] do_syscall_64+0x3b/0xb0 [ 266.778870][ T3902] ? clear_bhb_loop+0x55/0xb0 [ 266.783385][ T3902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.789113][ T3902] RIP: 0033:0x7f7092f7e819 [ 266.793368][ T3902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.812822][ T3902] RSP: 002b:00007f7092dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 266.821070][ T3902] RAX: ffffffffffffffda RBX: 00007f7093136080 RCX: 00007f7092f7e819 [ 266.828862][ T3902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 266.836675][ T3902] RBP: 00007f7092dff090 R08: 0000000000000000 R09: 0000000000000000 [ 266.844484][ T3902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.852327][ T3902] R13: 0000000000000001 R14: 00007f7093136080 R15: 00007ffefa0e9048 [ 266.860118][ T3902] [ 266.893670][ T28] audit: type=1400 audit(1732136392.327:185): avc: denied { create } for pid=3907 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.914940][ T28] audit: type=1400 audit(1732136392.357:186): avc: denied { setopt } for pid=3907 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.934469][ T28] audit: type=1400 audit(1732136392.357:187): avc: denied { ioctl } for pid=3907 comm="syz.2.872" path="socket:[30289]" dev="sockfs" ino=30289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.965560][ T28] audit: type=1400 audit(1732136392.357:188): avc: denied { write } for pid=3907 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.239963][ T3915] loop2: detected capacity change from 0 to 256 [ 267.903153][ T3912] device wg2 left promiscuous mode [ 267.904100][ T3914] device wg2 entered promiscuous mode [ 267.950735][ T3913] loop2: detected capacity change from 0 to 128 [ 267.951553][ T28] audit: type=1400 audit(1732136392.357:189): avc: denied { ioctl } for pid=3907 comm="syz.2.872" path="socket:[30288]" dev="sockfs" ino=30288 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.962278][ T3918] loop1: detected capacity change from 0 to 16 [ 267.989387][ T3918] erofs: (device loop1): mounted with root inode @ nid 36. [ 268.007522][ T3913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 268.016028][ T3913] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038 (0x7fffffff) [ 268.151439][ T3913] EXT4-fs (loop2): unmounting filesystem. [ 268.227832][ T3931] syz.1.873: attempt to access beyond end of device [ 268.227832][ T3931] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 268.577812][ T3944] netlink: 'syz.3.880': attribute type 15 has an invalid length. [ 268.979223][ T28] audit: type=1326 audit(1732136394.417:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.015682][ T3957] loop1: detected capacity change from 0 to 256 [ 269.023957][ T28] audit: type=1326 audit(1732136394.447:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.028225][ T3961] can0: slcan on ptm0. [ 269.100119][ T28] audit: type=1326 audit(1732136394.447:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.155692][ T28] audit: type=1326 audit(1732136394.447:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.179479][ T28] audit: type=1326 audit(1732136394.447:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.243525][ T28] audit: type=1326 audit(1732136394.447:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.440934][ T3950] can0 (unregistered): slcan off ptm0. [ 269.453317][ T28] audit: type=1326 audit(1732136394.447:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.484204][ T28] audit: type=1326 audit(1732136394.447:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd91d37e819 code=0x7ffc0000 [ 269.547838][ T3974] Restarting kernel threads ... done. [ 269.566750][ T28] audit: type=1326 audit(1732136394.447:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd91d37e853 code=0x7ffc0000 [ 269.634658][ T28] audit: type=1326 audit(1732136394.447:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd91d37d2ff code=0x7ffc0000 [ 269.643941][ T3960] loop3: detected capacity change from 0 to 40427 [ 269.697307][ T3960] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 269.719825][ T3960] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 269.755840][ T3960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.853209][ T3960] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 269.861457][ T3960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.170466][ T3992] loop4: detected capacity change from 0 to 40427 [ 270.213055][ T3992] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 270.287368][ T3992] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 270.302468][ T314] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 270.318360][ T3992] F2FS-fs (loop4): Found nat_bits in checkpoint [ 270.364759][ T3992] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 270.365312][ T4021] FAULT_INJECTION: forcing a failure. [ 270.365312][ T4021] name failslab, interval 1, probability 0, space 0, times 0 [ 270.371740][ T3992] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 270.455665][ T4021] CPU: 1 PID: 4021 Comm: syz.1.892 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 270.465232][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 270.475132][ T4021] Call Trace: [ 270.478248][ T4021] [ 270.481029][ T4021] dump_stack_lvl+0x151/0x1b7 [ 270.485540][ T4021] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 270.490835][ T4021] ? mutex_unlock+0xb2/0x260 [ 270.495260][ T4021] ? bit_wait_io_timeout+0x120/0x120 [ 270.500390][ T4021] ? __mutex_lock_slowpath+0x10/0x10 [ 270.505504][ T4021] dump_stack+0x15/0x1e [ 270.509495][ T4021] should_fail_ex+0x3d0/0x520 [ 270.514028][ T4021] ? getname_flags+0xba/0x520 [ 270.518521][ T4021] __should_failslab+0xaf/0xf0 [ 270.523119][ T4021] should_failslab+0x9/0x20 [ 270.527459][ T4021] kmem_cache_alloc+0x3b/0x320 [ 270.532062][ T4021] ? __ia32_sys_read+0x90/0x90 [ 270.536661][ T4021] getname_flags+0xba/0x520 [ 270.541033][ T4021] __x64_sys_mkdirat+0x7c/0xa0 [ 270.545603][ T4021] x64_sys_call+0x6c6/0x9a0 [ 270.549941][ T4021] do_syscall_64+0x3b/0xb0 [ 270.554209][ T4021] ? clear_bhb_loop+0x55/0xb0 [ 270.558704][ T4021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.564432][ T4021] RIP: 0033:0x7fd91d37d0b7 [ 270.568687][ T4021] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.589172][ T4021] RSP: 002b:00007fd91e25be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 270.597414][ T4021] RAX: ffffffffffffffda RBX: 00007fd91e25bef0 RCX: 00007fd91d37d0b7 [ 270.605226][ T4021] RDX: 00000000000001ff RSI: 0000000020002080 RDI: 00000000ffffff9c [ 270.613039][ T4021] RBP: 0000000020002040 R08: 0000000000000000 R09: 0000000000000000 [ 270.620847][ T4021] R10: 0000000020002040 R11: 0000000000000246 R12: 0000000020002080 [ 270.628658][ T4021] R13: 00007fd91e25beb0 R14: 0000000000000000 R15: 00000000200020c0 [ 270.636478][ T4021] [ 270.648370][ T4025] loop3: detected capacity change from 0 to 16 [ 270.655209][ T4025] erofs: (device loop3): mounted with root inode @ nid 36. [ 270.664520][ T3992] FAULT_INJECTION: forcing a failure. [ 270.664520][ T3992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.685734][ T3992] CPU: 0 PID: 3992 Comm: syz.4.888 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 270.695390][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 270.705286][ T3992] Call Trace: [ 270.708410][ T3992] [ 270.711205][ T3992] dump_stack_lvl+0x151/0x1b7 [ 270.715703][ T3992] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 270.720994][ T3992] ? __kasan_check_write+0x14/0x20 [ 270.725943][ T3992] dump_stack+0x15/0x1e [ 270.729935][ T3992] should_fail_ex+0x3d0/0x520 [ 270.734455][ T3992] should_fail+0xb/0x10 [ 270.738444][ T3992] should_fail_usercopy+0x1a/0x20 [ 270.743302][ T3992] _copy_to_user+0x1e/0x90 [ 270.747558][ T3992] simple_read_from_buffer+0xc7/0x150 [ 270.752761][ T3992] proc_fail_nth_read+0x1a3/0x210 [ 270.757622][ T3992] ? proc_fault_inject_write+0x390/0x390 [ 270.763095][ T3992] ? fsnotify_perm+0x269/0x5b0 [ 270.767693][ T3992] ? security_file_permission+0x86/0xb0 [ 270.773074][ T3992] ? proc_fault_inject_write+0x390/0x390 [ 270.778540][ T3992] vfs_read+0x26c/0xae0 [ 270.782530][ T3992] ? kernel_read+0x1f0/0x1f0 [ 270.786954][ T3992] ? mutex_lock+0xb1/0x1e0 [ 270.791219][ T3992] ? bit_wait_io_timeout+0x120/0x120 [ 270.796330][ T3992] ? __fdget_pos+0x2e2/0x390 [ 270.800753][ T3992] ? ksys_read+0x77/0x2c0 [ 270.804921][ T3992] ksys_read+0x199/0x2c0 [ 270.809003][ T3992] ? __this_cpu_preempt_check+0x13/0x20 [ 270.814380][ T3992] ? xfd_validate_state+0x6f/0x170 [ 270.819328][ T3992] ? vfs_write+0xed0/0xed0 [ 270.823582][ T3992] ? fpregs_restore_userregs+0x130/0x290 [ 270.829053][ T3992] __x64_sys_read+0x7b/0x90 [ 270.833389][ T3992] x64_sys_call+0x28/0x9a0 [ 270.837642][ T3992] do_syscall_64+0x3b/0xb0 [ 270.841893][ T3992] ? clear_bhb_loop+0x55/0xb0 [ 270.846411][ T3992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.852136][ T3992] RIP: 0033:0x7f7092f7d25c [ 270.856394][ T3992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 270.875833][ T3992] RSP: 002b:00007f7093ca0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.884074][ T3992] RAX: ffffffffffffffda RBX: 00007f7093135fa0 RCX: 00007f7092f7d25c [ 270.891891][ T3992] RDX: 000000000000000f RSI: 00007f7093ca00a0 RDI: 0000000000000005 [ 270.899700][ T3992] RBP: 00007f7093ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 270.907605][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.915417][ T3992] R13: 0000000000000000 R14: 00007f7093135fa0 R15: 00007ffefa0e9048 [ 270.923232][ T3992] [ 270.967380][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.979286][ T314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.044289][ T4030] syz.3.893: attempt to access beyond end of device [ 271.044289][ T4030] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 271.296111][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 271.353465][ T4037] loop2: detected capacity change from 0 to 8192 [ 271.360855][ T4037] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.387373][ T314] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.396263][ T314] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 271.404247][ T314] usb 1-1: Product: syz [ 271.408368][ T314] usb 1-1: Manufacturer: syz [ 271.412766][ T314] usb 1-1: SerialNumber: syz [ 271.537152][ T4046] FAULT_INJECTION: forcing a failure. [ 271.537152][ T4046] name failslab, interval 1, probability 0, space 0, times 0 [ 271.549789][ T4046] CPU: 0 PID: 4046 Comm: syz.3.900 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 271.559332][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 271.569330][ T4046] Call Trace: [ 271.572453][ T4046] [ 271.575230][ T4046] dump_stack_lvl+0x151/0x1b7 [ 271.579747][ T4046] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 271.585039][ T4046] ? copy_from_kernel_nofault_allowed+0xb6/0x120 [ 271.591200][ T4046] dump_stack+0x15/0x1e [ 271.595190][ T4046] should_fail_ex+0x3d0/0x520 [ 271.599705][ T4046] __should_failslab+0xaf/0xf0 [ 271.604458][ T4046] ? do_eventfd+0x7d/0x2e0 [ 271.607385][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 271.608703][ T4046] should_failslab+0x9/0x20 [ 271.617993][ T4046] __kmem_cache_alloc_node+0x3d/0x2a0 [ 271.623201][ T4046] ? do_eventfd+0x7d/0x2e0 [ 271.627462][ T4046] kmalloc_trace+0x2a/0xa0 [ 271.631704][ T4046] do_eventfd+0x7d/0x2e0 [ 271.635782][ T4046] __x64_sys_eventfd2+0x5a/0x70 [ 271.640468][ T4046] x64_sys_call+0x7a6/0x9a0 [ 271.644806][ T4046] do_syscall_64+0x3b/0xb0 [ 271.649064][ T4046] ? clear_bhb_loop+0x55/0xb0 [ 271.653574][ T4046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.659315][ T4046] RIP: 0033:0x7f0bd3d7e819 [ 271.663556][ T4046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.683171][ T4046] RSP: 002b:00007f0bd4c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 271.691416][ T4046] RAX: ffffffffffffffda RBX: 00007f0bd3f35fa0 RCX: 00007f0bd3d7e819 [ 271.699243][ T4046] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000004 [ 271.707040][ T4046] RBP: 00007f0bd4c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 271.714852][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.722665][ T4046] R13: 0000000000000000 R14: 00007f0bd3f35fa0 R15: 00007fff053814b8 [ 271.730479][ T4046] [ 271.736281][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.745927][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.819533][ T847] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 271.859268][ T314] usb 1-1: USB disconnect, device number 7 [ 271.917834][ T4051] Restarting kernel threads ... done. [ 271.987326][ T39] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 271.996224][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.004310][ T39] usb 2-1: Product: syz [ 272.008587][ T39] usb 2-1: Manufacturer: syz [ 272.013062][ T39] usb 2-1: SerialNumber: syz [ 272.022539][ T39] usb 2-1: config 0 descriptor?? [ 272.118550][ T3388] udevd[3388]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 272.181344][ T39] usb 2-1: bad CDC descriptors [ 272.381301][ T39] usb 2-1: USB disconnect, device number 3 [ 272.407388][ T847] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 272.415492][ T847] usb 3-1: config 0 has no interface number 0 [ 272.417813][ T4066] FAULT_INJECTION: forcing a failure. [ 272.417813][ T4066] name failslab, interval 1, probability 0, space 0, times 0 [ 272.433904][ T4066] CPU: 0 PID: 4066 Comm: syz.0.906 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 272.443446][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 272.453338][ T4066] Call Trace: [ 272.456463][ T4066] [ 272.459256][ T4066] dump_stack_lvl+0x151/0x1b7 [ 272.463753][ T4066] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 272.469050][ T4066] dump_stack+0x15/0x1e [ 272.473042][ T4066] should_fail_ex+0x3d0/0x520 [ 272.477559][ T4066] ? getname_flags+0xba/0x520 [ 272.482067][ T4066] __should_failslab+0xaf/0xf0 [ 272.486668][ T4066] should_failslab+0x9/0x20 [ 272.491008][ T4066] kmem_cache_alloc+0x3b/0x320 [ 272.495620][ T4066] ? vfs_write+0x952/0xed0 [ 272.499878][ T4066] ? __kasan_slab_free+0x11/0x20 [ 272.504638][ T4066] getname_flags+0xba/0x520 [ 272.508987][ T4066] getname+0x19/0x20 [ 272.512704][ T4066] do_sys_openat2+0xe0/0x870 [ 272.517134][ T4066] ? do_sys_open+0x220/0x220 [ 272.521556][ T4066] ? memset+0x35/0x40 [ 272.525376][ T4066] ? bpf_trace_run2+0x138/0x290 [ 272.530071][ T4066] __x64_sys_openat+0x243/0x290 [ 272.534749][ T4066] ? __ia32_sys_open+0x270/0x270 [ 272.539535][ T4066] ? __bpf_trace_sys_enter+0x62/0x70 [ 272.544643][ T4066] x64_sys_call+0x6bf/0x9a0 [ 272.548985][ T4066] do_syscall_64+0x3b/0xb0 [ 272.553235][ T4066] ? clear_bhb_loop+0x55/0xb0 [ 272.557751][ T4066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.563587][ T4066] RIP: 0033:0x7f18ddb7e819 [ 272.567848][ T4066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.587369][ T4066] RSP: 002b:00007f18dd9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.595614][ T4066] RAX: ffffffffffffffda RBX: 00007f18ddd36080 RCX: 00007f18ddb7e819 [ 272.603425][ T4066] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 272.611234][ T4066] RBP: 00007f18dd9de090 R08: 0000000000000000 R09: 0000000000000000 [ 272.619047][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.626856][ T4066] R13: 0000000000000001 R14: 00007f18ddd36080 R15: 00007ffe57c23098 [ 272.634675][ T4066] [ 272.951644][ T361] udevd[361]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 273.007693][ T847] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=a1.69 [ 273.016570][ T847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.024562][ T847] usb 3-1: Product: syz [ 273.028521][ T847] usb 3-1: Manufacturer: syz [ 273.032927][ T847] usb 3-1: SerialNumber: syz [ 273.038125][ T847] usb 3-1: config 0 descriptor?? [ 273.057331][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 273.198112][ T4089] FAULT_INJECTION: forcing a failure. [ 273.198112][ T4089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.211158][ T4089] CPU: 1 PID: 4089 Comm: syz.1.913 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 273.220875][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 273.230787][ T4089] Call Trace: [ 273.233899][ T4089] [ 273.236676][ T4089] dump_stack_lvl+0x151/0x1b7 [ 273.241187][ T4089] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 273.246479][ T4089] ? do_vfs_ioctl+0xba7/0x29a0 [ 273.251083][ T4089] dump_stack+0x15/0x1e [ 273.255187][ T4089] should_fail_ex+0x3d0/0x520 [ 273.259701][ T4089] should_fail+0xb/0x10 [ 273.263693][ T4089] should_fail_usercopy+0x1a/0x20 [ 273.268553][ T4089] _copy_to_user+0x1e/0x90 [ 273.272807][ T4089] simple_read_from_buffer+0xc7/0x150 [ 273.278016][ T4089] proc_fail_nth_read+0x1a3/0x210 [ 273.282874][ T4089] ? proc_fault_inject_write+0x390/0x390 [ 273.288340][ T4089] ? fsnotify_perm+0x269/0x5b0 [ 273.292948][ T4089] ? security_file_permission+0x86/0xb0 [ 273.298323][ T4089] ? proc_fault_inject_write+0x390/0x390 [ 273.303792][ T4089] vfs_read+0x26c/0xae0 [ 273.307787][ T4089] ? kernel_read+0x1f0/0x1f0 [ 273.312210][ T4089] ? mutex_lock+0xb1/0x1e0 [ 273.316463][ T4089] ? bit_wait_io_timeout+0x120/0x120 [ 273.321586][ T4089] ? __fdget_pos+0x2e2/0x390 [ 273.326009][ T4089] ? ksys_read+0x77/0x2c0 [ 273.330185][ T4089] ksys_read+0x199/0x2c0 [ 273.334261][ T4089] ? vfs_write+0xed0/0xed0 [ 273.338516][ T4089] __x64_sys_read+0x7b/0x90 [ 273.342850][ T4089] x64_sys_call+0x28/0x9a0 [ 273.347107][ T4089] do_syscall_64+0x3b/0xb0 [ 273.351356][ T4089] ? clear_bhb_loop+0x55/0xb0 [ 273.355879][ T4089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.361597][ T4089] RIP: 0033:0x7fd91d37d25c [ 273.365852][ T4089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 273.385296][ T4089] RSP: 002b:00007fd91e25c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.393566][ T4089] RAX: ffffffffffffffda RBX: 00007fd91d535fa0 RCX: 00007fd91d37d25c [ 273.401349][ T4089] RDX: 000000000000000f RSI: 00007fd91e25c0a0 RDI: 0000000000000006 [ 273.409177][ T4089] RBP: 00007fd91e25c090 R08: 0000000000000000 R09: 0000000000000000 [ 273.416970][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.424781][ T4089] R13: 0000000000000000 R14: 00007fd91d535fa0 R15: 00007fffe00a0828 [ 273.432602][ T4089] [ 273.442287][ T4037] Driver unsupported XDP return value 0 on prog (id 329) dev N/A, expect packet loss! [ 273.454255][ T4037] futex_wake_op: syz.2.897 tries to shift op by -1; fix this program [ 273.468822][ T847] usb 3-1: USB disconnect, device number 5 [ 273.517422][ T39] usb 5-1: device descriptor read/64, error -71 [ 273.798342][ T4112] Restarting kernel threads ... done. [ 274.040890][ T39] usb 5-1: device descriptor read/64, error -71 [ 274.207307][ T847] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 274.307453][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 274.447311][ T847] usb 4-1: Using ep0 maxpacket: 16 [ 274.458560][ T4128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 274.467417][ T4128] device gre0 entered promiscuous mode [ 274.475346][ T4128] loop1: detected capacity change from 0 to 512 [ 274.489505][ T4128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.498395][ T4128] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038 (0x7fffffff) [ 274.510455][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 274.510472][ T28] audit: type=1400 audit(1732136399.947:259): avc: denied { read write open } for pid=4127 comm="syz.1.925" path="/190/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.539972][ T28] audit: type=1400 audit(1732136399.947:260): avc: denied { append } for pid=4127 comm="syz.1.925" path="/190/file1/cpuacct.usage_percpu" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 274.564440][ T28] audit: type=1400 audit(1732136399.947:261): avc: denied { read } for pid=4127 comm="syz.1.925" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 274.577396][ T847] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 274.587817][ T28] audit: type=1400 audit(1732136399.947:262): avc: denied { open } for pid=4127 comm="syz.1.925" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 274.619097][ T28] audit: type=1400 audit(1732136400.037:263): avc: denied { sqpoll } for pid=4127 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 274.622085][ T293] EXT4-fs (loop1): unmounting filesystem. [ 274.638362][ T28] audit: type=1400 audit(1732136400.037:264): avc: denied { map } for pid=4127 comm="syz.1.925" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.667490][ T28] audit: type=1400 audit(1732136400.037:265): avc: denied { read write } for pid=4127 comm="syz.1.925" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.667510][ T39] usb 5-1: device descriptor read/64, error -71 [ 274.697309][ T314] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 274.777356][ T847] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 274.786306][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.794099][ T847] usb 4-1: Product: syz [ 274.798091][ T847] usb 4-1: Manufacturer: syz [ 274.802466][ T847] usb 4-1: SerialNumber: syz [ 274.807809][ T847] usb 4-1: config 0 descriptor?? [ 274.867632][ T315] udevd[315]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 274.987284][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 275.038059][ T847] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 275.045722][ T847] usb 4-1: Detected FT232R [ 275.107325][ T39] usb 5-1: device descriptor read/64, error -71 [ 275.187336][ T314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 275.237410][ T39] usb usb5-port1: attempt power cycle [ 275.247369][ T847] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 275.277435][ T314] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 275.285601][ T314] usb 3-1: config 2 has no interface number 0 [ 275.291560][ T314] usb 3-1: config 2 interface 190 has no altsetting 0 [ 275.487415][ T314] usb 3-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 275.488055][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.497729][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.512512][ T314] usb 3-1: Product: syz [ 275.512671][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.517892][ T314] usb 3-1: Manufacturer: syz [ 275.547348][ T847] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 275.547354][ T314] usb 3-1: SerialNumber: syz [ 275.548066][ T847] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.615946][ T4145] loop1: detected capacity change from 0 to 512 [ 275.639065][ T4145] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 275.647887][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.648304][ T4145] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038 (0x7fffffff) [ 275.669130][ T28] audit: type=1400 audit(1732136401.107:266): avc: denied { mounton } for pid=4144 comm="syz.1.928" path="/193/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.693923][ T28] audit: type=1400 audit(1732136401.127:267): avc: denied { remove_name } for pid=293 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.717649][ T28] audit: type=1400 audit(1732136401.127:268): avc: denied { rmdir } for pid=293 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.717841][ T293] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 275.761557][ T847] usb 4-1: USB disconnect, device number 5 [ 275.777326][ T847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.789713][ T847] ftdi_sio 4-1:0.0: device disconnected [ 275.797411][ T39] usb 5-1: device descriptor read/8, error -71 [ 275.852477][ T4149] FAULT_INJECTION: forcing a failure. [ 275.852477][ T4149] name failslab, interval 1, probability 0, space 0, times 0 [ 275.865029][ T4149] CPU: 0 PID: 4149 Comm: syz.4.930 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 275.874565][ T4149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 275.884642][ T4149] Call Trace: [ 275.887757][ T4149] [ 275.890538][ T4149] dump_stack_lvl+0x151/0x1b7 [ 275.895048][ T4149] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 275.900357][ T4149] ? __kernel_text_address+0xd/0x40 [ 275.905465][ T4149] ? arch_stack_walk+0xf3/0x140 [ 275.910153][ T4149] dump_stack+0x15/0x1e [ 275.914142][ T4149] should_fail_ex+0x3d0/0x520 [ 275.918658][ T4149] __should_failslab+0xaf/0xf0 [ 275.923258][ T4149] ? kvmalloc_node+0x221/0x640 [ 275.927855][ T4149] should_failslab+0x9/0x20 [ 275.932194][ T4149] __kmem_cache_alloc_node+0x3d/0x2a0 [ 275.937404][ T4149] ? kvmalloc_node+0x221/0x640 [ 275.942001][ T4149] __kmalloc_node+0xa3/0x1e0 [ 275.946431][ T4149] kvmalloc_node+0x221/0x640 [ 275.950873][ T4149] ? vm_mmap+0xb0/0xb0 [ 275.954764][ T4149] ? timer_migration_handler+0x100/0x100 [ 275.960229][ T4149] ? debug_smp_processor_id+0x17/0x20 [ 275.965440][ T4149] __kvm_mmu_topup_memory_cache+0x317/0x4a0 [ 275.971181][ T4149] ? __kasan_check_write+0x14/0x20 [ 275.976115][ T4149] kvm_mmu_topup_memory_cache+0x22/0x30 [ 275.981500][ T4149] kvm_mmu_load+0x111/0x2970 [ 275.985926][ T4149] ? __kasan_check_write+0x14/0x20 [ 275.990867][ T4149] ? mutex_unlock+0xb2/0x260 [ 275.995299][ T4149] ? kvm_mmu_unload+0x120/0x120 [ 275.999980][ T4149] ? xa_find+0x2e0/0x2e0 [ 276.004064][ T4149] ? memset+0x35/0x40 [ 276.007882][ T4149] ? vmx_flush_tlb_all+0xc2/0x380 [ 276.012740][ T4149] ? vmx_get_if_flag+0x40/0x40 [ 276.017344][ T4149] ? queue_delayed_work_on+0x13f/0x180 [ 276.022633][ T4149] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 276.028012][ T4149] ? kvm_hv_activate_synic+0x100/0x100 [ 276.033307][ T4149] vcpu_enter_guest+0x6c7d/0x9490 [ 276.038176][ T4149] ? avc_has_perm+0x16f/0x260 [ 276.042685][ T4149] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 276.048082][ T4149] ? 0xffffffffa00007ec [ 276.052056][ T4149] ? is_bpf_text_address+0x172/0x190 [ 276.057177][ T4149] ? stack_trace_save+0x1c0/0x1c0 [ 276.062035][ T4149] ? kernel_text_address+0xa9/0xe0 [ 276.066984][ T4149] ? __kernel_text_address+0xd/0x40 [ 276.072020][ T4149] ? unwind_get_return_address+0x4d/0x90 [ 276.077487][ T4149] ? arch_stack_walk+0xf3/0x140 [ 276.082173][ T4149] ? _parse_integer_limit+0x19b/0x1e0 [ 276.087381][ T4149] ? memset+0x35/0x40 [ 276.091198][ T4149] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 276.096067][ T4149] ? _parse_integer+0x40/0x40 [ 276.100578][ T4149] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 276.106997][ T4149] ? __stack_depot_save+0x36/0x480 [ 276.111944][ T4149] ? kasan_save_free_info+0x2b/0x40 [ 276.116978][ T4149] ? read_msr+0x50/0x50 [ 276.120969][ T4149] ? do_vfs_ioctl+0xba7/0x29a0 [ 276.125574][ T4149] ? __this_cpu_preempt_check+0x13/0x20 [ 276.130948][ T4149] ? xfd_validate_state+0x6f/0x170 [ 276.135900][ T4149] ? __local_bh_enable_ip+0x58/0x80 [ 276.140932][ T4149] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 276.146138][ T4149] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 276.151264][ T4149] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 276.156734][ T4149] ? __kvm_request_immediate_exit+0x70/0x70 [ 276.162455][ T4149] ? vfs_write+0x952/0xed0 [ 276.166724][ T4149] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 276.171226][ T4149] ? xa_release+0x40/0x40 [ 276.175387][ T4149] ? selinux_file_ioctl+0x3cc/0x540 [ 276.180424][ T4149] ? __mutex_lock_slowpath+0x10/0x10 [ 276.185551][ T4149] ? selinux_file_alloc_security+0x120/0x120 [ 276.191363][ T4149] ? __fget_files+0x2cb/0x330 [ 276.195874][ T4149] ? security_file_ioctl+0x84/0xb0 [ 276.200823][ T4149] ? xa_release+0x40/0x40 [ 276.204988][ T4149] __se_sys_ioctl+0x114/0x190 [ 276.209502][ T4149] __x64_sys_ioctl+0x7b/0x90 [ 276.213936][ T4149] x64_sys_call+0x98/0x9a0 [ 276.218180][ T4149] do_syscall_64+0x3b/0xb0 [ 276.222435][ T4149] ? clear_bhb_loop+0x55/0xb0 [ 276.226946][ T4149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.232676][ T4149] RIP: 0033:0x7f7092f7e819 [ 276.236928][ T4149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.256369][ T4149] RSP: 002b:00007f7093ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.264614][ T4149] RAX: ffffffffffffffda RBX: 00007f7093135fa0 RCX: 00007f7092f7e819 [ 276.272424][ T4149] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 276.280237][ T4149] RBP: 00007f7093ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 276.288044][ T4149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.295859][ T4149] R13: 0000000000000000 R14: 00007f7093135fa0 R15: 00007ffefa0e9048 [ 276.303683][ T4149] [ 276.317342][ T39] usb 5-1: device descriptor read/8, error -71 [ 276.417750][ T314] usb-storage 3-1:2.190: USB Mass Storage device detected [ 276.434529][ T314] usb-storage 3-1:2.190: device ignored [ 276.459415][ T314] usb 3-1: USB disconnect, device number 6 [ 276.805512][ T4161] FAULT_INJECTION: forcing a failure. [ 276.805512][ T4161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.819484][ T4161] CPU: 1 PID: 4161 Comm: syz.3.933 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 276.829120][ T4161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 276.839107][ T4161] Call Trace: [ 276.842230][ T4161] [ 276.845009][ T4161] dump_stack_lvl+0x151/0x1b7 [ 276.849642][ T4161] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 276.854940][ T4161] ? __kasan_check_write+0x14/0x20 [ 276.859883][ T4161] dump_stack+0x15/0x1e [ 276.863867][ T4161] should_fail_ex+0x3d0/0x520 [ 276.868382][ T4161] should_fail+0xb/0x10 [ 276.872377][ T4161] should_fail_usercopy+0x1a/0x20 [ 276.877240][ T4161] _copy_to_user+0x1e/0x90 [ 276.881642][ T4161] simple_read_from_buffer+0xc7/0x150 [ 276.886846][ T4161] proc_fail_nth_read+0x1a3/0x210 [ 276.891705][ T4161] ? proc_fault_inject_write+0x390/0x390 [ 276.897174][ T4161] ? fsnotify_perm+0x269/0x5b0 [ 276.901776][ T4161] ? security_file_permission+0x86/0xb0 [ 276.907153][ T4161] ? proc_fault_inject_write+0x390/0x390 [ 276.912623][ T4161] vfs_read+0x26c/0xae0 [ 276.916619][ T4161] ? kernel_read+0x1f0/0x1f0 [ 276.921040][ T4161] ? mutex_lock+0xb1/0x1e0 [ 276.925291][ T4161] ? bit_wait_io_timeout+0x120/0x120 [ 276.930414][ T4161] ? __fdget_pos+0x2e2/0x390 [ 276.934837][ T4161] ? ksys_read+0x77/0x2c0 [ 276.939005][ T4161] ksys_read+0x199/0x2c0 [ 276.943087][ T4161] ? vfs_write+0xed0/0xed0 [ 276.947338][ T4161] ? debug_smp_processor_id+0x17/0x20 [ 276.952551][ T4161] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 276.958446][ T4161] __x64_sys_read+0x7b/0x90 [ 276.962790][ T4161] x64_sys_call+0x28/0x9a0 [ 276.967049][ T4161] do_syscall_64+0x3b/0xb0 [ 276.971299][ T4161] ? clear_bhb_loop+0x55/0xb0 [ 276.975811][ T4161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.981536][ T4161] RIP: 0033:0x7f0bd3d7d25c [ 276.985791][ T4161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 277.005233][ T4161] RSP: 002b:00007f0bd4c2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.013476][ T4161] RAX: ffffffffffffffda RBX: 00007f0bd3f35fa0 RCX: 00007f0bd3d7d25c [ 277.021282][ T4161] RDX: 000000000000000f RSI: 00007f0bd4c2f0a0 RDI: 0000000000000003 [ 277.029098][ T4161] RBP: 00007f0bd4c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.036906][ T4161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.044721][ T4161] R13: 0000000000000001 R14: 00007f0bd3f35fa0 R15: 00007fff053814b8 [ 277.052535][ T4161] [ 277.102820][ T4165] FAULT_INJECTION: forcing a failure. [ 277.102820][ T4165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.136219][ T4165] CPU: 1 PID: 4165 Comm: syz.2.934 Not tainted 6.1.112-syzkaller-00022-g5b095ade1229 #0 [ 277.145784][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 277.155679][ T4165] Call Trace: [ 277.158804][ T4165] [ 277.161588][ T4165] dump_stack_lvl+0x151/0x1b7 [ 277.166098][ T4165] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 277.171391][ T4165] ? __kasan_check_write+0x14/0x20 [ 277.176333][ T4165] ? mutex_unlock+0xb2/0x260 [ 277.180763][ T4165] dump_stack+0x15/0x1e [ 277.184755][ T4165] should_fail_ex+0x3d0/0x520 [ 277.189268][ T4165] should_fail+0xb/0x10 [ 277.193260][ T4165] should_fail_usercopy+0x1a/0x20 [ 277.198122][ T4165] _copy_from_user+0x1e/0xc0 [ 277.202550][ T4165] __x64_sys_timer_create+0xfb/0x190 [ 277.207668][ T4165] ? posix_timer_event+0x140/0x140 [ 277.212616][ T4165] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 277.218527][ T4165] ? exit_to_user_mode_prepare+0x39/0xa0 [ 277.223986][ T4165] x64_sys_call+0x5d1/0x9a0 [ 277.228324][ T4165] do_syscall_64+0x3b/0xb0 [ 277.232579][ T4165] ? clear_bhb_loop+0x55/0xb0 [ 277.237091][ T4165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.242825][ T4165] RIP: 0033:0x7f433eb7e819 [ 277.247073][ T4165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.266514][ T4165] RSP: 002b:00007f433fa42038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 277.274760][ T4165] RAX: ffffffffffffffda RBX: 00007f433ed35fa0 RCX: 00007f433eb7e819 [ 277.282576][ T4165] RDX: 0000000020bbdffc RSI: 0000000020533fa0 RDI: 0000000000000000 [ 277.290382][ T4165] RBP: 00007f433fa42090 R08: 0000000000000000 R09: 0000000000000000 [ 277.298192][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.306005][ T4165] R13: 0000000000000000 R14: 00007f433ed35fa0 R15: 00007ffefa345ba8 [ 277.313826][ T4165] [ 277.710884][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 278.634038][ T4191] loop2: detected capacity change from 0 to 512 [ 279.125403][ T4191] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.941: Failed to acquire dquot type 0 [ 279.138073][ T4191] EXT4-fs (loop2): Remounting filesystem read-only [ 279.144693][ T4191] EXT4-fs (loop2): 1 orphan inode deleted [ 279.150362][ T4191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.159539][ T4191] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038 (0x7fffffff) [ 279.375850][ T4191] device syzkaller0 entered promiscuous mode [ 279.767354][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 279.767534][ T28] audit: type=1400 audit(1732136405.087:273): avc: denied { relabelfrom } for pid=4184 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.175720][ T28] audit: type=1400 audit(1732136405.087:274): avc: denied { relabelto } for pid=4184 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.192203][ T4201] FAULT_INJECTION: forcing a failure. [ 280.192203][ T4201] name fail_usercopy, interval 1, probability 0, space 0, times 0