last executing test programs: 22.917573016s ago: executing program 3 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14) write$FUSE_BMAP(r2, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x400000001ff}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x38) getdents64(r6, 0x0, 0x0) 22.889244826s ago: executing program 3 (id=330): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000809, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x888430, &(0x7f0000000000)=ANY=[], 0x1, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 21.885648612s ago: executing program 3 (id=333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 21.817800522s ago: executing program 3 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)={[{@shortname_lower}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}, {@utf8no}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000140)) 20.930983637s ago: executing program 3 (id=342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') 20.746906909s ago: executing program 3 (id=345): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "d10f0169ab931023e1fee5e7a4849825943a9128efa224caa8672023b26dcf1ae2cfc5144d605fc61956abaade39a56cab22f3957c5889de6dd54a25b319d5ea", 0x3e}, 0x48, 0xfffffffffffffff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000000001090400050000000006b802000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x220c814, &(0x7f0000000480), 0x2, 0x47c, &(0x7f0000000e80)="$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") ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000240)=0x6) 20.746543839s ago: executing program 32 (id=345): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "d10f0169ab931023e1fee5e7a4849825943a9128efa224caa8672023b26dcf1ae2cfc5144d605fc61956abaade39a56cab22f3957c5889de6dd54a25b319d5ea", 0x3e}, 0x48, 0xfffffffffffffff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000000001090400050000000006b802000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x220c814, &(0x7f0000000480), 0x2, 0x47c, &(0x7f0000000e80)="$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") ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000240)=0x6) 10.637214478s ago: executing program 0 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)={[{@shortname_lower}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}, {@utf8no}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000140)) 9.102454927s ago: executing program 0 (id=383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) write$char_usb(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 9.101447807s ago: executing program 1 (id=384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x11, r7, 0x180000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 9.091864437s ago: executing program 4 (id=386): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x11, r7, 0x180000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 7.496441116s ago: executing program 0 (id=387): gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0xfffffffffffffec5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x60, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000004780)=[{{&(0x7f0000000300)=@x25, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000dc0)=""/216, 0xd8}, {&(0x7f00000048c0)=""/148, 0x94}, {&(0x7f0000000100)=""/41, 0x29}], 0x3, &(0x7f0000000680)=""/82, 0x52}, 0x3ff}, {{&(0x7f0000000740)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000a80)=""/114, 0x72}, {&(0x7f0000000b00)=""/75, 0x4b}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/4109, 0x100d}, {&(0x7f0000002b00)=""/153, 0x99}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000000400)=""/63, 0x3f}, {&(0x7f0000002c40)=""/87, 0x57}, {&(0x7f0000002cc0)=""/223, 0xdf}, {&(0x7f0000000900)=""/75, 0x4b}], 0xa, &(0x7f0000002f00)=""/227, 0xe3}, 0x40}, {{&(0x7f0000000b80)=@alg, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000003140)=""/129, 0x81}], 0x2}, 0x5}, {{&(0x7f0000003200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000000cc0)=""/206, 0xce}, {&(0x7f0000003380)=""/156, 0x9c}, {&(0x7f0000003440)=""/28, 0x1c}, {&(0x7f0000003480)=""/122, 0x7a}, {&(0x7f0000003500)=""/21, 0x15}], 0x5}, 0x9d}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f00000035c0)=""/75, 0x4b}, {&(0x7f0000003640)=""/43, 0x2b}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x3, &(0x7f00000046c0)=""/134, 0x86}, 0x2}], 0x5, 0x10043, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x2006, 0x4, 0xfd, 0x7f7c0002}]}) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000a40)=[{&(0x7f00000007c0)="4eabf26665", 0x5}, {&(0x7f0000000640)="5e1d", 0x2}], 0x2) 7.495744936s ago: executing program 1 (id=388): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r4}, 0x10) getrlimit(0x5, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000001c0000004d564b"]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x7a, {0x7a, 0x1, "4a44c04de5e923d7098a164490b2833adc72459e88e05e26527e4ea312805175d70463de508ac967d32acb8372c380d1e660bc2cea318f27f933b3472a9937e64fd23e2de270e04eecd03c056e152b47b1e3ba3b0fb291f2a8aeeaca42c98d8929fe3a857a5242ad2ffa0af50908b6e58d2fc7a91bd76c99"}}, &(0x7f00000001c0)={0x0, 0x3, 0x73, @string={0x73, 0x3, "3a5b5370d7d02f14ee9a96f52513566a0d4d57f5bc8583b9378eb16a3633ded55863f27304d56c838a4a4694c94208440cc0a4af2843d9c90c756194b80e319e01c4a87c60d16461f16c6da109e7c3ae1121e86211f3c509ae4bf3097efa24f7177e43e15056b521fd97b38e2594cefbeb"}}, &(0x7f0000000240)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f03716238456debefb21739b09f5d55c"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x9, 0x3}, @generic={0x3d, 0x10, 0xb, "d698d3a1db2e05ddbe96384954ebd5b8d8e3654e2ef9e41efbe73b247cc127235098d878663fddc8cdf48628410ce460da39edd56b81880ee50e"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x80, 0x8, "b18bc6eb", "8bdb50d7"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0xff, 0x7, 0x3, 0x8}}}, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x20, 0x16, 0x1e, "1b56075ba5f9f9cfa80fe4239639212c0fd5f28f453858dce5bb8dc7123d"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xd}, 0x0, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "14ac"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000780)={0x40, 0xe, 0x21, "746662ba5945265377d337c39e9922d72b77e75019df4b2e111ec92994b90a5311"}, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)=ANY=[]) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b00010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000740)={0x14, &(0x7f0000000ac0)={0x20, 0x30, 0xb3, {0xb3, 0x7, "a033e1cc2a824f9e7b3d69f5740c98d1b7ef01760ddffe6703b685091a7102f3ba0a40e224a440af1d7ca541d507a50ea5557abf4c3ce00217750870e668d0ea76a7a1d1599d5229f4d99d18edd97bc750f4b9f0cafcde5a193678d1c82366ad78fe99267b8a4a36f355848bfc06a87f5fcd8346db3d0576f6a140401e1e8927b484b2611088520a46d4d9950b628cea10b07535ae38728155998336f19c8fd65f2cd3ad35ce37eb8017bb9a0fcac82546"}}, &(0x7f0000000b80)={0x0, 0x3, 0xea, @string={0xea, 0x3, "8375350b88ad2e6255ad4e13c6dff174d5a2d2586ca31c72637e18aef3c39178a37bfef1f336496b2e4fb3b3db66e2455e181f294650486c966ef174d24576a7ae87c49bcad972d42b2ef97ff664c403b901aace8c398b822b643b366b2b21155707765ea3b7246df0b7cc9f2a25f2ce0721b89b8efe6f594ecbc1af9169233088a189576a7bad578fb3f4b307ad8bcdf34af7b449dd818d05a0eef24759b923eec40f778b29dfd830ad9cdcd009c738cbe198f8b7b2ed6c0b32bf78b25c183fd78ad7c61660e95ac742be0f672e3435a690b424bf1b87df97f5430b8b0d070a8121b255b9fd2b45"}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000c80)={0x20, 0x16, 0x91, "4b482e3dbc4070b9c360769c7a1aa00773eb996e0f25d4387152c30bf2d79fd14444e11304f32c9904eb67f1687423570e8b575ad01a8450b5d47e152ecd96e1cb1da36988befff73d302dbc8f100b27ef310ba1396be77cd1d6e25dbfeb7ab2afeb3ed2e83fb774d386d8b07d9f52ff3f7dedecdc94a817910fabdd32d728512f2778ff31f7298c9b277319c49ae97385"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0x20, 0x81, 0x2, "d454"}, &(0x7f0000000d40)={0x20, 0x82, 0x1, 'J'}, &(0x7f0000000d80)={0x20, 0x83, 0x3, "2a0390"}, &(0x7f0000000dc0)={0x20, 0x84, 0x1, '\n'}, &(0x7f0000000e00)={0x20, 0x85, 0x3, "71db08"}}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 7.495259106s ago: executing program 2 (id=389): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x4000000000003, 0xfffffffffffffffd, 0x300, 0x6}, 0x0, &(0x7f00000004c0)={0x3fc, 0x0, 0x0, 0x3553, 0x80, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x8b51307d3675a20f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000008000000950000000000000076d5030174950f1a688c67406e5ee79d2dcb75cc370c483357716247f417"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) syz_emit_ethernet(0x83, &(0x7f00000005c0)=ANY=[@ANYRES64], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) getegid() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.494334326s ago: executing program 4 (id=390): unlink(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 5.777972096s ago: executing program 0 (id=391): unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (fail_nth: 4) 5.777313246s ago: executing program 1 (id=392): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000fd0000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000, &(0x7f00000009c0)=ANY=[], 0x48) 5.776951046s ago: executing program 2 (id=393): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x21, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e}, 0x28) 5.776497056s ago: executing program 4 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x7, 0x4000) ioctl$USBDEVFS_RESET(r5, 0x5514) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0xa8e, 0x7fff, 0x9, 0x7f}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd002ceb3950466f6ff00000000000000700000000000000000002030000000029000000000000000c00150053073500040000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r8, 0x6, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 5.688033276s ago: executing program 2 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() rt_sigqueueinfo(r4, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r6) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") syz_mount_image$ext4(&(0x7f0000000ac0)='ext2\x00', &(0x7f0000002d00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3810744, &(0x7f0000002080)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'noauto_da_alloc\xf5Xp:\xdf\xb0\xda\x9d\xd5\xf5\xc78?\xf5#|\xbci#V\x95\xf1:\xe1\x8fI\a`\x89\x11l\xe9<\x01\x81\xfe\x87\x92\rm:q|~W\xc8\x7f\r\xfc\xd4\x9b\xcc'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'f2fs\x00'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, '!'}}, {@dont_measure}, {@euid_gt}, {@subj_role={'subj_role', 0x3d, 'scled_{wQt#h\x00'}}, {@euid_gt={'euid>', 0xee01}}]}, 0x9, 0x485, &(0x7f0000002840)="$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") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.932409376s ago: executing program 0 (id=396): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 3.931882506s ago: executing program 1 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x11, r7, 0x180000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 3.931400266s ago: executing program 2 (id=398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x11, r7, 0x180000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.930975216s ago: executing program 4 (id=399): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r4}, 0x10) getrlimit(0x5, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000001c0000004d564b"]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x7a, {0x7a, 0x1, "4a44c04de5e923d7098a164490b2833adc72459e88e05e26527e4ea312805175d70463de508ac967d32acb8372c380d1e660bc2cea318f27f933b3472a9937e64fd23e2de270e04eecd03c056e152b47b1e3ba3b0fb291f2a8aeeaca42c98d8929fe3a857a5242ad2ffa0af50908b6e58d2fc7a91bd76c99"}}, &(0x7f00000001c0)={0x0, 0x3, 0x73, @string={0x73, 0x3, "3a5b5370d7d02f14ee9a96f52513566a0d4d57f5bc8583b9378eb16a3633ded55863f27304d56c838a4a4694c94208440cc0a4af2843d9c90c756194b80e319e01c4a87c60d16461f16c6da109e7c3ae1121e86211f3c509ae4bf3097efa24f7177e43e15056b521fd97b38e2594cefbeb"}}, &(0x7f0000000240)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f03716238456debefb21739b09f5d55c"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x9, 0x3}, @generic={0x3d, 0x10, 0xb, "d698d3a1db2e05ddbe96384954ebd5b8d8e3654e2ef9e41efbe73b247cc127235098d878663fddc8cdf48628410ce460da39edd56b81880ee50e"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x80, 0x8, "b18bc6eb", "8bdb50d7"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0xff, 0x7, 0x3, 0x8}}}, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x20, 0x16, 0x1e, "1b56075ba5f9f9cfa80fe4239639212c0fd5f28f453858dce5bb8dc7123d"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000500)={0x40, 0xb, 0x2, "f508"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "14ac"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000780)={0x40, 0xe, 0x21, "746662ba5945265377d337c39e9922d72b77e75019df4b2e111ec92994b90a5311"}, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 2.008856028s ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b100002"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x24, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000805}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) 2.008333698s ago: executing program 1 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) 2.008015428s ago: executing program 2 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.980176668s ago: executing program 4 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x0, 0x3c, 0x0, @dev, @local}}}}, 0x0) 1.1251ms ago: executing program 1 (id=404): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "d10f0169ab931023e1fee5e7a4849825943a9128efa224caa8672023b26dcf1ae2cfc5144d605fc61956abaade39a56cab22f3957c5889de6dd54a25b319d5ea", 0x3e}, 0x48, 0xfffffffffffffff8) 731.849µs ago: executing program 2 (id=405): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)='0', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='writeback_pages_written\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x100) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e24, @multicast1}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='batadv_slave_1\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) prlimit64(r8, 0x5, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 0s ago: executing program 4 (id=406): sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e01000008240201"], 0x0) r0 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0x7e, &(0x7f00000004c0)=""/126}, {0x80a0000, 0x1000, &(0x7f0000001680)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x11) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): :sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.492336][ T24] audit: type=1400 audit(1762348272.618:185): avc: denied { write } for pid=452 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.512768][ T24] audit: type=1400 audit(1762348272.618:186): avc: denied { read } for pid=452 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.670549][ T24] audit: type=1400 audit(1762348272.838:187): avc: denied { read } for pid=460 comm="syz.2.38" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.695200][ T466] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 39.705088][ T466] EXT4-fs error (device loop4): ext4_get_journal_inode:5243: inode #32: comm syz.4.37: iget: special inode unallocated [ 39.911100][ T470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 39.924292][ T24] audit: type=1400 audit(1762348272.838:188): avc: denied { open } for pid=460 comm="syz.2.38" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.063987][ T466] EXT4-fs (loop4): no journal found [ 40.084304][ T466] EXT4-fs (loop4): can't get journal size [ 40.091596][ T24] audit: type=1400 audit(1762348272.838:189): avc: denied { create } for pid=460 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.238583][ T466] EXT4-fs (loop4): filesystem is read-only [ 40.250822][ T466] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000, [ 40.272000][ T466] syz.4.37 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.290912][ T466] EXT4-fs error (device loop4): ext4_lookup:1822: inode #2: comm syz.4.37: bad inode number: 15 [ 40.539262][ T485] overlayfs: failed to resolve './file1': -2 [ 40.662143][ T492] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 40.809428][ T490] erofs: (device loop1): mounted with root inode @ nid 36. [ 42.563354][ T506] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.818074][ T509] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000, [ 42.898022][ T509] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.499493][ T517] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.596070][ T517] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.161137][ T532] erofs: (device loop4): mounted with root inode @ nid 36. [ 45.323039][ T535] erofs: (device loop1): mounted with root inode @ nid 36. [ 45.877916][ T540] cgroup: syz.2.56 (540) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 45.960953][ T540] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 45.997121][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 45.997133][ T24] audit: type=1400 audit(1762348279.161:210): avc: denied { setattr } for pid=539 comm="syz.2.56" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.085921][ T549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'. [ 46.253961][ T544] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 46.378493][ T544] EXT4-fs error (device loop3): ext4_get_journal_inode:5243: inode #32: comm syz.3.54: iget: special inode unallocated [ 46.410319][ T544] EXT4-fs (loop3): no journal found [ 46.415557][ T544] EXT4-fs (loop3): can't get journal size [ 46.440479][ T544] EXT4-fs (loop3): filesystem is read-only [ 46.456488][ T544] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000, [ 46.491251][ T544] EXT4-fs error (device loop3): ext4_lookup:1822: inode #2: comm syz.3.54: bad inode number: 15 [ 46.502543][ T24] audit: type=1400 audit(1762348279.671:211): avc: denied { read write } for pid=539 comm="syz.2.56" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.526891][ T24] audit: type=1400 audit(1762348279.671:212): avc: denied { open } for pid=539 comm="syz.2.56" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.579713][ T24] audit: type=1400 audit(1762348279.671:213): avc: denied { ioctl } for pid=539 comm="syz.2.56" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.642786][ T553] erofs: (device loop3): mounted with root inode @ nid 36. [ 47.541952][ T393] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 47.731934][ T566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.749125][ T566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.769695][ T566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec098, mo2=0002] [ 47.778281][ T566] System zones: 1-12 [ 47.788721][ T566] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.860730][ T24] audit: type=1400 audit(1762348280.992:214): avc: denied { module_request } for pid=561 comm="syz.1.60" kmod="dlci" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.917225][ T566] EXT4-fs (loop4): 1 truncate cleaned up [ 47.969396][ T566] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,debug,minixdf,quota,,errors=continue [ 48.033656][ T24] audit: type=1400 audit(1762348281.012:215): avc: denied { create } for pid=561 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.053436][ T24] audit: type=1400 audit(1762348281.022:216): avc: denied { read write } for pid=561 comm="syz.1.60" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.076452][ T24] audit: type=1400 audit(1762348281.022:217): avc: denied { open } for pid=561 comm="syz.1.60" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.228896][ T393] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 48.239696][ T393] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 48.307230][ T573] EXT4-fs error (device loop4): __ext4_iget:5008: inode #16: block 100663325: comm syz.4.61: invalid block [ 48.510465][ T24] audit: type=1400 audit(1762348281.502:218): avc: denied { audit_write } for pid=565 comm="syz.4.61" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.790256][ T393] usb 3-1: config 8 has no interface number 0 [ 48.817649][ T24] audit: type=1107 audit(1762348281.512:219): pid=565 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='>' [ 49.272925][ T393] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 9472, setting to 64 [ 49.284117][ T393] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.328322][ T393] usb 3-1: string descriptor 0 read error: -71 [ 49.334541][ T393] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 49.343633][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.378510][ T393] usb 3-1: can't set config #8, error -71 [ 49.385041][ T393] usb 3-1: USB disconnect, device number 2 [ 49.450598][ T584] SELinux: failed to load policy [ 49.453098][ T583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 49.465021][ T583] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.518197][ T589] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 49.861225][ T589] EXT4-fs error (device loop3): ext4_get_journal_inode:5243: inode #32: comm syz.3.68: iget: special inode unallocated [ 49.964632][ T589] EXT4-fs (loop3): no journal found [ 49.970451][ T589] EXT4-fs (loop3): can't get journal size [ 50.589093][ T589] EXT4-fs (loop3): filesystem is read-only [ 50.599936][ T589] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000, [ 50.797441][ T596] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.909907][ T596] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.037550][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 51.037574][ T24] audit: type=1400 audit(1762348284.164:249): avc: denied { read write } for pid=607 comm="syz.1.72" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.181568][ T24] audit: type=1400 audit(1762348284.164:250): avc: denied { open } for pid=607 comm="syz.1.72" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.204925][ T24] audit: type=1400 audit(1762348284.164:251): avc: denied { ioctl } for pid=609 comm="syz.0.70" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.230029][ T24] audit: type=1400 audit(1762348284.354:252): avc: denied { create } for pid=588 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.249670][ T589] EXT4-fs error (device loop3): ext4_lookup:1822: inode #2: comm syz.3.68: bad inode number: 15 [ 51.260483][ T24] audit: type=1400 audit(1762348284.354:253): avc: denied { setopt } for pid=588 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.279906][ T24] audit: type=1400 audit(1762348284.354:254): avc: denied { ioctl } for pid=588 comm="syz.3.68" path="socket:[16445]" dev="sockfs" ino=16445 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.307364][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.314877][ T393] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 51.433093][ T616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 51.442155][ T616] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.468950][ T619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 51.478157][ T619] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.579566][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 51.584908][ T393] usb 2-1: Using ep0 maxpacket: 8 [ 51.822985][ T503] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.076995][ T15] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 52.085147][ T393] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.095260][ T15] usb 1-1: config 0 has no interface number 0 [ 52.101593][ T393] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 52.110691][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.119511][ T393] usb 2-1: config 0 descriptor?? [ 52.157515][ T393] uvcvideo: Found UVC 0.00 device (2833:0201) [ 52.164509][ T393] uvcvideo: No valid video chain found. [ 52.236870][ T503] usb 5-1: Using ep0 maxpacket: 32 [ 52.282119][ T15] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 52.291400][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.299596][ T15] usb 1-1: Product: syz [ 52.303814][ T15] usb 1-1: Manufacturer: syz [ 52.308594][ T15] usb 1-1: SerialNumber: syz [ 52.313971][ T15] usb 1-1: config 0 descriptor?? [ 52.343076][ T24] audit: type=1400 audit(1762348285.514:255): avc: denied { name_bind } for pid=629 comm="syz.3.75" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.367247][ T15] smsc95xx v2.0.0 [ 52.375558][ T24] audit: type=1400 audit(1762348285.514:256): avc: denied { node_bind } for pid=629 comm="syz.3.75" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.375649][ T290] usb 2-1: USB disconnect, device number 2 [ 52.404178][ T503] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 52.409499][ T24] audit: type=1400 audit(1762348285.574:257): avc: denied { ioctl } for pid=613 comm="syz.4.71" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.417915][ T503] usb 5-1: config 0 has no interface number 0 [ 52.437007][ T24] audit: type=1400 audit(1762348285.594:258): avc: denied { read write } for pid=276 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.478710][ T632] 9pnet: Insufficient options for proto=fd [ 52.587787][ T640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.597078][ T640] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.606772][ T503] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 52.616427][ T503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.626165][ T503] usb 5-1: Product: syz [ 52.630460][ T503] usb 5-1: Manufacturer: syz [ 52.635101][ T503] usb 5-1: SerialNumber: syz [ 52.640789][ T503] usb 5-1: config 0 descriptor?? [ 52.677343][ T503] smsc95xx v2.0.0 [ 52.776622][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.078425][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 53.638287][ T611] udc-core: couldn't find an available UDC or it's busy [ 53.646621][ T611] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.837685][ T614] udc-core: couldn't find an available UDC or it's busy [ 53.845048][ T614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.908991][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.919792][ T25] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 53.928903][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.943320][ T25] usb 4-1: config 0 descriptor?? [ 53.986478][ T25] uvcvideo: Found UVC 0.00 device (2833:0201) [ 54.003775][ T25] uvcvideo: No valid video chain found. [ 54.081391][ T15] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 54.092440][ T15] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 54.116018][ T15] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 54.126974][ T15] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 54.136558][ T15] usb 1-1: USB disconnect, device number 2 [ 54.175966][ T503] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 54.188889][ T25] usb 4-1: USB disconnect, device number 2 [ 54.196114][ T503] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 54.218916][ T503] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 54.230086][ T503] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 54.237590][ T660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 54.245607][ T503] usb 5-1: USB disconnect, device number 2 [ 54.253599][ T660] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.797248][ T668] EXT4-fs (loop0): Ignoring removed bh option [ 55.882276][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 55.946218][ T668] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.107547][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 56.107567][ T24] audit: type=1400 audit(1762348289.286:313): avc: denied { write } for pid=666 comm="syz.0.84" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.238101][ T24] audit: type=1400 audit(1762348289.316:314): avc: denied { add_name } for pid=666 comm="syz.0.84" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.334976][ T24] audit: type=1400 audit(1762348289.326:315): avc: denied { write open } for pid=666 comm="syz.0.84" path="/10/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.384760][ T24] audit: type=1400 audit(1762348289.336:316): avc: denied { read write } for pid=666 comm="syz.0.84" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.424734][ T24] audit: type=1400 audit(1762348289.336:317): avc: denied { open } for pid=666 comm="syz.0.84" path="/10/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.505461][ T683] 9pnet: Insufficient options for proto=fd [ 56.584923][ T24] audit: type=1400 audit(1762348289.416:318): avc: denied { ioctl } for pid=666 comm="syz.0.84" path="/10/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.806547][ T24] audit: type=1400 audit(1762348289.986:319): avc: denied { create } for pid=692 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.826514][ T675] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.827847][ T24] audit: type=1400 audit(1762348289.986:320): avc: denied { create } for pid=695 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.853616][ T24] audit: type=1400 audit(1762348290.036:321): avc: denied { connect } for pid=692 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.866147][ T675] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.884301][ T685] F2FS-fs (loop3): invalid crc value [ 56.894034][ T685] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.914805][ T696] ====================================================== [ 56.914805][ T696] WARNING: the mand mount option is being deprecated and [ 56.914805][ T696] will be removed in v5.15! [ 56.914805][ T696] ====================================================== [ 56.928436][ T685] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.976949][ T696] EXT4-fs (loop1): Ignoring removed nobh option [ 56.993027][ T696] EXT4-fs (loop1): Ignoring removed bh option [ 57.011335][ T696] EXT4-fs (loop1): Ignoring removed nobh option [ 57.035701][ T696] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue [ 57.041895][ T24] audit: type=1400 audit(1762348290.217:322): avc: denied { read append } for pid=684 comm="syz.3.91" path="/25/file0/io.stat" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.066033][ T684] attempt to access beyond end of device [ 57.066033][ T684] loop3: rw=10241, want=45104, limit=40427 [ 57.094445][ T393] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 57.113203][ T276] attempt to access beyond end of device [ 57.113203][ T276] loop3: rw=2049, want=45120, limit=40427 [ 57.158791][ T696] syz.1.88[696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.158840][ T696] syz.1.88[696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.340648][ T708] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 57.361124][ T708] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.364310][ T393] usb 3-1: Using ep0 maxpacket: 32 [ 57.534228][ T393] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.542359][ T393] usb 3-1: config 0 has no interface number 0 [ 57.684182][ T486] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.703347][ T716] F2FS-fs (loop3): invalid crc value [ 57.747665][ T716] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.794653][ T716] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 57.829817][ T711] attempt to access beyond end of device [ 57.829817][ T711] loop3: rw=10241, want=45104, limit=40427 [ 57.847864][ T276] attempt to access beyond end of device [ 57.847864][ T276] loop3: rw=2049, want=45120, limit=40427 [ 57.944034][ T393] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.953189][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.961179][ T393] usb 3-1: Product: syz [ 57.963989][ T486] usb 5-1: Using ep0 maxpacket: 32 [ 57.973975][ T393] usb 3-1: Manufacturer: syz [ 57.978719][ T393] usb 3-1: SerialNumber: syz [ 57.987591][ T393] usb 3-1: config 0 descriptor?? [ 58.024476][ T393] smsc95xx v2.0.0 [ 58.117268][ T486] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 58.125434][ T486] usb 5-1: config 0 has no interface number 0 [ 58.273882][ T392] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.295271][ T486] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 58.313785][ T486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.324144][ T486] usb 5-1: Product: syz [ 58.328405][ T486] usb 5-1: Manufacturer: syz [ 58.339368][ T486] usb 5-1: SerialNumber: syz [ 58.347524][ T486] usb 5-1: config 0 descriptor?? [ 58.394070][ T486] smsc95xx v2.0.0 [ 58.436496][ T732] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 58.444290][ T732] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 58.453204][ T732] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 58.460645][ T732] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.486344][ T732] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 58.493522][ T732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.504387][ T730] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 58.512122][ T730] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.523690][ T392] usb 4-1: Using ep0 maxpacket: 8 [ 58.534770][ T730] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 58.543307][ T730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.546084][ T738] attempt to access beyond end of device [ 58.546084][ T738] loop1: rw=2049, want=45104, limit=40427 [ 58.572723][ T732] APIC base relocation is unsupported by KVM [ 58.580035][ T730] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.593154][ T730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.637005][ T742] attempt to access beyond end of device [ 58.637005][ T742] loop0: rw=2049, want=45104, limit=40427 [ 58.643733][ T392] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 58.657291][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.665880][ T392] usb 4-1: config 0 descriptor?? [ 58.704114][ T392] uvcvideo: Found UVC 0.00 device (2833:0201) [ 58.711112][ T392] uvcvideo: No valid video chain found. [ 58.768357][ T750] 9pnet: Insufficient options for proto=fd [ 59.761166][ T5] usb 4-1: USB disconnect, device number 3 [ 59.963305][ T393] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 59.963339][ T393] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.991104][ T393] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 59.991436][ T393] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 59.994994][ T393] usb 3-1: USB disconnect, device number 3 [ 60.044622][ T754] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.139019][ T754] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.415526][ T773] binder: 770:773 unknown command 0 [ 60.440982][ T773] binder: 770:773 ioctl c0306201 200000000080 returned -22 [ 60.453385][ T773] binder: BINDER_SET_CONTEXT_MGR already set [ 60.459525][ T773] binder: 770:773 ioctl 4018620d 200000000040 returned -16 [ 60.514698][ T719] udc-core: couldn't find an available UDC or it's busy [ 60.521693][ T719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.557233][ T776] binder: 770:776 ioctl c0306201 2000000003c0 returned -14 [ 60.762603][ T486] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 60.789059][ T486] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 60.832568][ T486] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 60.859753][ T486] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 60.883903][ T486] usb 5-1: USB disconnect, device number 3 [ 61.245553][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 61.245564][ T24] audit: type=1400 audit(1762348294.429:338): avc: denied { ioctl } for pid=779 comm="syz.3.106" path="socket:[16788]" dev="sockfs" ino=16788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.343384][ T782] device syzkaller0 entered promiscuous mode [ 61.439337][ T24] audit: type=1400 audit(1762348294.619:339): avc: denied { create } for pid=783 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.492438][ T24] audit: type=1400 audit(1762348294.649:340): avc: denied { module_request } for pid=783 comm="syz.3.108" kmod="net-pf-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.495568][ T784] SELinux: failed to load policy [ 61.514040][ T24] audit: type=1400 audit(1762348294.669:341): avc: denied { load_policy } for pid=783 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.764237][ T24] audit: type=1400 audit(1762348294.949:342): avc: denied { read } for pid=799 comm="syz.3.113" dev="nsfs" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.786445][ T24] audit: type=1400 audit(1762348294.949:343): avc: denied { open } for pid=799 comm="syz.3.113" path="net:[4026532367]" dev="nsfs" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.915015][ T24] audit: type=1400 audit(1762348295.069:344): avc: denied { create } for pid=794 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.221036][ T24] audit: type=1400 audit(1762348295.399:345): avc: denied { create } for pid=805 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.259059][ T24] audit: type=1400 audit(1762348295.429:346): avc: denied { listen } for pid=805 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.314646][ T24] audit: type=1400 audit(1762348295.429:347): avc: denied { connect } for pid=805 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.353346][ T806] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 62.362075][ T806] EXT4-fs (loop0): 1 truncate cleaned up [ 62.367760][ T806] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 62.389769][ T806] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.114: Logical block already allocated [ 62.402403][ T806] EXT4-fs (loop0): Remounting filesystem read-only [ 63.485750][ T814] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.562358][ T814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.872639][ T818] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000, [ 63.892470][ T818] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.914125][ T818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 64.143503][ T829] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 64.151335][ T829] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 64.160315][ T829] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 64.168020][ T829] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.194487][ T829] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 64.201569][ T829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.229849][ T834] attempt to access beyond end of device [ 64.229849][ T834] loop2: rw=2049, want=45104, limit=40427 [ 64.260833][ T393] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.141474][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 65.260962][ T841] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.340553][ T393] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 65.350608][ T841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.612317][ T393] usb 2-1: config 0 has no interface number 0 [ 65.625379][ T852] 9pnet: Insufficient options for proto=fd [ 65.799329][ T393] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.819088][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.837320][ T393] usb 2-1: Product: syz [ 65.842104][ T393] usb 2-1: Manufacturer: syz [ 65.846789][ T393] usb 2-1: SerialNumber: syz [ 65.866412][ T393] usb 2-1: config 0 descriptor?? [ 65.910383][ T393] smsc95xx v2.0.0 [ 66.841376][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 66.843929][ T24] audit: type=1400 audit(1762348300.021:366): avc: denied { mounton } for pid=872 comm="syz.3.129" path=2F33342FE91F7189591E9233614B dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.615223][ T871] udc-core: couldn't find an available UDC or it's busy [ 67.670939][ T24] audit: type=1400 audit(1762348300.062:367): avc: denied { mount } for pid=872 comm="syz.3.129" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.696810][ T871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.698952][ T24] audit: type=1400 audit(1762348300.082:368): avc: denied { create } for pid=872 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.731416][ T24] audit: type=1400 audit(1762348300.092:369): avc: denied { write } for pid=872 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.751820][ T24] audit: type=1400 audit(1762348300.092:370): avc: denied { read } for pid=872 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.772345][ T24] audit: type=1400 audit(1762348300.162:371): avc: denied { write } for pid=872 comm="syz.3.129" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.866603][ T884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'. [ 68.052868][ T393] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 68.063590][ T393] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 68.088925][ T24] audit: type=1400 audit(1762348300.162:372): avc: denied { add_name } for pid=872 comm="syz.3.129" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.110775][ T393] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 68.121618][ T393] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 68.129684][ T393] usb 2-1: USB disconnect, device number 3 [ 68.136810][ T24] audit: type=1400 audit(1762348300.162:373): avc: denied { create } for pid=872 comm="syz.3.129" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.160150][ T884] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 68.160150][ T884] [ 68.162056][ T24] audit: type=1400 audit(1762348300.162:374): avc: denied { associate } for pid=872 comm="syz.3.129" name="memory.events.local" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.170993][ T884] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 68.202484][ T24] audit: type=1400 audit(1762348300.162:375): avc: denied { read append open } for pid=872 comm="syz.3.129" path=2F33342FE91F7189591E9233614B2F6D656D6F72792E6576656E74732E6C6F63616C dev="loop3" ino=1048599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.371751][ T887] EXT4-fs (loop4): Ignoring removed oldalloc option [ 68.384088][ T887] ------------[ cut here ]------------ [ 68.389678][ T887] WARNING: CPU: 1 PID: 887 at mm/page_alloc.c:5354 __alloc_pages_nodemask+0x313/0x5f0 [ 68.399271][ T887] Modules linked in: [ 68.403183][ T887] CPU: 1 PID: 887 Comm: syz.4.130 Not tainted syzkaller #0 [ 68.410410][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.420498][ T887] RIP: 0010:__alloc_pages_nodemask+0x313/0x5f0 [ 68.426660][ T887] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 fa fd ff ff <0f> 0b 31 c0 eb 9f 31 c0 e9 c8 fd ff ff 4c 89 ff e8 a8 90 f5 ff 49 [ 68.446305][ T887] RSP: 0018:ffffc90000ee71e0 EFLAGS: 00010246 [ 68.452406][ T887] RAX: ffffc90000ee7270 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.460399][ T887] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000ee7288 [ 68.468375][ T887] RBP: ffffc90000ee7310 R08: dffffc0000000000 R09: ffffc90000ee7270 [ 68.476458][ T887] R10: fffff520001dce51 R11: 1ffff920001dce4e R12: 1ffff920001dce44 [ 68.484527][ T887] R13: dffffc0000000000 R14: 0000000000040c40 R15: 000000000000000c [ 68.492543][ T887] FS: 00007f6dbf2be6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 68.501487][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.508081][ T887] CR2: 0000200000ca0030 CR3: 0000000126ffe000 CR4: 00000000003506b0 [ 68.516062][ T887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.524047][ T887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.532031][ T887] Call Trace: [ 68.535334][ T887] ? ext4_orphan_cleanup+0x96c/0xd30 [ 68.540636][ T887] ? ext4_fill_super+0x845b/0x8b60 [ 68.545748][ T887] ? mount_bdev+0x28b/0x3a0 [ 68.550257][ T887] ? ext4_mount+0x34/0x40 [ 68.554580][ T887] ? legacy_get_tree+0xed/0x190 [ 68.559441][ T887] ? vfs_get_tree+0x89/0x260 [ 68.564025][ T887] ? do_new_mount+0x25a/0xa20 [ 68.568714][ T887] ? path_mount+0x572/0xc80 [ 68.573209][ T887] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 68.578763][ T887] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.584827][ T887] kmalloc_order+0x4c/0x160 [ 68.589345][ T887] kmalloc_order_trace+0x16/0x80 [ 68.594395][ T887] __kmalloc+0x1ee/0x330 [ 68.599363][ T887] kvmalloc_node+0xe8/0x130 [ 68.603876][ T887] ext4_expand_extra_isize_ea+0xdda/0x1a10 [ 68.610358][ T887] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 68.615995][ T887] __ext4_mark_inode_dirty+0x3cf/0x610 [ 68.621477][ T887] ext4_evict_inode+0xe95/0x1760 [ 68.626428][ T887] ? _raw_spin_unlock+0x4d/0x70 [ 68.631299][ T887] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 68.637535][ T887] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 68.643730][ T887] evict+0x478/0x910 [ 68.647672][ T887] ? mode_strip_sgid+0x160/0x160 [ 68.649359][ T883] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 68.652640][ T887] ? __kasan_check_write+0x14/0x20 [ 68.666635][ T887] iput+0x638/0x7c0 [ 68.668885][ T883] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.670467][ T887] ext4_orphan_cleanup+0x96c/0xd30 [ 68.685884][ T887] ext4_fill_super+0x845b/0x8b60 [ 68.690883][ T887] ? ext4_mount+0x40/0x40 [ 68.695219][ T887] ? set_blocksize+0x1fe/0x3c0 [ 68.700017][ T887] ? sb_set_blocksize+0xaa/0xf0 [ 68.704880][ T887] mount_bdev+0x28b/0x3a0 [ 68.709238][ T887] ? ext4_mount+0x40/0x40 [ 68.713579][ T887] ext4_mount+0x34/0x40 [ 68.717755][ T887] legacy_get_tree+0xed/0x190 [ 68.722474][ T887] ? ext4_chksum+0x160/0x160 [ 68.727074][ T887] vfs_get_tree+0x89/0x260 [ 68.732109][ T887] do_new_mount+0x25a/0xa20 [ 68.736827][ T887] path_mount+0x572/0xc80 [ 68.741354][ T887] __se_sys_mount+0x318/0x380 [ 68.746037][ T887] ? __x64_sys_mount+0xd0/0xd0 [ 68.750825][ T887] __x64_sys_mount+0xbf/0xd0 [ 68.755436][ T887] do_syscall_64+0x31/0x40 [ 68.759889][ T887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.765777][ T887] RIP: 0033:0x7f6dc0878e6a [ 68.770196][ T887] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.789926][ T887] RSP: 002b:00007f6dbf2bde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.798330][ T887] RAX: ffffffffffffffda RBX: 00007f6dbf2bdef0 RCX: 00007f6dc0878e6a [ 68.806323][ T887] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007f6dbf2bdeb0 [ 68.814320][ T887] RBP: 00002000000002c0 R08: 00007f6dbf2bdef0 R09: 0000000000800700 [ 68.822405][ T887] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 68.830396][ T887] R13: 00007f6dbf2bdeb0 R14: 000000000000045d R15: 0000200000000200 [ 68.838379][ T887] ---[ end trace 5d9ab69aee219e32 ]--- [ 68.843929][ T887] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.130: Parent and EA inode have the same ino 15 [ 68.856462][ T887] EXT4-fs (loop4): 1 orphan inode deleted [ 68.862244][ T887] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,bsdgroups,debug_want_extra_isize=0x000000000000005c,prjquota,bsdgroups,oldalloc,errors=continue,,errors=continue [ 68.904006][ T887] xt_bpf: check failed: parse error [ 68.916452][ T901] 9pnet: Insufficient options for proto=fd [ 68.938689][ T894] EXT4-fs (loop2): Ignoring removed nobh option [ 68.956636][ T894] EXT4-fs (loop2): Ignoring removed bh option [ 68.979590][ T894] EXT4-fs (loop2): Ignoring removed nobh option [ 68.989552][ T894] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue [ 69.089042][ T904] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 69.103487][ T904] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.184084][ T894] syz.2.133[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.184133][ T894] syz.2.133[894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.344064][ T914] SELinux: failed to load policy [ 70.068295][ T923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.082312][ T923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec098, mo2=0002] [ 70.090442][ T923] System zones: 1-12 [ 70.095272][ T923] EXT4-fs (loop3): 1 truncate cleaned up [ 70.111339][ T923] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,debug,minixdf,quota,,errors=continue [ 70.329583][ T935] EXT4-fs error (device loop3): __ext4_iget:5008: inode #16: block 100663325: comm syz.3.140: invalid block [ 71.272612][ T957] SELinux: failed to load policy [ 71.278141][ T949] EXT4-fs (loop4): Ignoring removed nobh option [ 71.284433][ T949] EXT4-fs (loop4): Ignoring removed bh option [ 71.284443][ T949] EXT4-fs (loop4): Ignoring removed nobh option [ 71.292034][ T941] F2FS-fs (loop2): invalid crc value [ 71.308782][ T941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.376814][ T941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.398282][ T952] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 71.407432][ T952] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.465428][ T949] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue [ 72.591301][ T949] syz.4.149[949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.591360][ T949] syz.4.149[949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.646560][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 72.646575][ T24] audit: type=1400 audit(1762348305.824:407): avc: denied { write open } for pid=940 comm="syz.2.146" path="/31/file0/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.658431][ T940] attempt to access beyond end of device [ 72.658431][ T940] loop2: rw=10241, want=45104, limit=40427 [ 72.698141][ T24] audit: type=1400 audit(1762348305.834:408): avc: denied { create } for pid=940 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.734303][ T24] audit: type=1400 audit(1762348305.844:409): avc: denied { read append } for pid=940 comm="syz.2.146" path="/31/file0/io.stat" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.763026][ T24] audit: type=1400 audit(1762348305.844:410): avc: denied { map } for pid=940 comm="syz.2.146" path="/31/file0/io.stat" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.766873][ T278] attempt to access beyond end of device [ 72.766873][ T278] loop2: rw=2049, want=45120, limit=40427 [ 72.786659][ T24] audit: type=1400 audit(1762348305.844:411): avc: denied { execute } for pid=940 comm="syz.2.146" path="/31/file0/io.stat" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.835691][ T24] audit: type=1400 audit(1762348305.904:412): avc: denied { ioctl } for pid=940 comm="syz.2.146" path="/31/file0/io.stat" dev="loop2" ino=14 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.923782][ T985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.967052][ T985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec098, mo2=0002] [ 72.992058][ T985] System zones: 1-12 [ 73.013031][ T985] EXT4-fs (loop3): 1 truncate cleaned up [ 73.049417][ T985] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,debug,minixdf,quota,,errors=continue [ 73.275402][ T24] audit: type=1400 audit(1762348306.455:413): avc: denied { read } for pid=993 comm="syz.2.158" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.339984][ T24] audit: type=1400 audit(1762348306.455:414): avc: denied { open } for pid=993 comm="syz.2.158" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.373390][ T995] EXT4-fs error (device loop3): __ext4_iget:5008: inode #16: block 100663325: comm syz.3.155: invalid block [ 73.645534][ T24] audit: type=1107 audit(1762348306.575:415): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='>' [ 74.410029][ T1005] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 74.419479][ T1005] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.431652][ T53] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.696820][ T1014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 74.705827][ T1014] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.115508][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 75.382283][ T53] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 75.396916][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.428492][ T53] usb 5-1: config 0 descriptor?? [ 75.601413][ T53] uvcvideo: Found UVC 0.00 device (2833:0201) [ 75.608664][ T53] uvcvideo: No valid video chain found. [ 75.731372][ T434] usb 5-1: USB disconnect, device number 4 [ 76.046766][ T1028] EXT4-fs (loop0): Ignoring removed nobh option [ 76.125027][ T1028] EXT4-fs (loop0): Ignoring removed bh option [ 76.477539][ T1028] EXT4-fs (loop0): Ignoring removed nobh option [ 76.758234][ T1028] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue [ 76.961147][ T1028] syz.0.167[1028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.961194][ T1028] syz.0.167[1028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.966022][ T1050] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 76.994821][ T1050] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.174396][ T807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.669448][ T1064] erofs: (device loop2): mounted with root inode @ nid 36. [ 77.704788][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 77.724761][ T1060] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.758874][ T1060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.814444][ T24] audit: type=1400 audit(1762348311.007:416): avc: denied { ioctl } for pid=1051 comm="syz.3.173" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.856552][ T24] audit: type=1400 audit(1762348311.027:417): avc: denied { read write } for pid=279 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.881016][ T807] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 77.887857][ T24] audit: type=1400 audit(1762348311.027:418): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.889500][ T807] usb 4-1: config 0 has no interface number 0 [ 77.921076][ T24] audit: type=1400 audit(1762348311.027:419): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.947781][ T24] audit: type=1400 audit(1762348311.047:420): avc: denied { map_create } for pid=1075 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.967306][ T24] audit: type=1400 audit(1762348311.047:421): avc: denied { map_read map_write } for pid=1075 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.988043][ T24] audit: type=1400 audit(1762348311.107:422): avc: denied { mounton } for pid=1070 comm="syz.1.176" path="/35/file1" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.005532][ T1071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 78.020263][ T1071] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.031164][ T1076] erofs: (device loop4): mounted with root inode @ nid 36. [ 78.038580][ T24] audit: type=1400 audit(1762348311.207:423): avc: denied { mount } for pid=1070 comm="syz.1.176" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.060605][ T24] audit: type=1400 audit(1762348311.227:424): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.080165][ T24] audit: type=1400 audit(1762348311.247:425): avc: denied { execmem } for pid=1070 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.202804][ T807] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 78.217031][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.395032][ T807] usb 4-1: Product: syz [ 78.399403][ T807] usb 4-1: Manufacturer: syz [ 78.493129][ T807] usb 4-1: SerialNumber: syz [ 79.216833][ T807] usb 4-1: config 0 descriptor?? [ 79.383216][ T486] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.415762][ T807] smsc95xx v2.0.0 [ 79.956917][ T1092] SELinux: failed to load policy [ 80.052938][ T486] usb 5-1: Using ep0 maxpacket: 16 [ 80.422874][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.453398][ T486] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.466141][ T486] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.475914][ T486] usb 5-1: config 1 has no interface number 1 [ 80.482148][ T486] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.533576][ T486] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.692624][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 80.702741][ T486] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.711783][ T486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.719846][ T486] usb 5-1: Product: syz [ 80.724015][ T486] usb 5-1: Manufacturer: syz [ 80.728592][ T486] usb 5-1: SerialNumber: syz [ 80.812586][ T20] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 80.820670][ T20] usb 1-1: config 0 has no interface number 0 [ 80.942665][ T486] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 80.950544][ T486] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 80.959625][ T486] usb 5-1: 2:1 : invalid channels 0 [ 81.013072][ T20] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.022804][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.030781][ T20] usb 1-1: Product: syz [ 81.035179][ T1053] udc-core: couldn't find an available UDC or it's busy [ 81.042128][ T1053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.054535][ T1106] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000, [ 81.058899][ T486] usb 5-1: USB disconnect, device number 5 [ 81.074409][ T1106] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.208018][ T1106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.186'. [ 81.251926][ T20] usb 1-1: Manufacturer: syz [ 81.281003][ T20] usb 1-1: SerialNumber: syz [ 81.353974][ T20] usb 1-1: config 0 descriptor?? [ 81.372335][ T807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 81.383390][ T807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 81.395073][ T20] smsc95xx v2.0.0 [ 81.422282][ T807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 81.433700][ T807] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 81.446985][ T807] usb 4-1: USB disconnect, device number 4 [ 81.572626][ T1118] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.580552][ T1118] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.589766][ T1118] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 81.596588][ T20] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 81.604805][ T1118] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.607464][ T20] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 81.626368][ T20] usb 1-1: USB disconnect, device number 3 [ 81.641711][ T1118] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.649014][ T1118] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.667737][ T1121] attempt to access beyond end of device [ 81.667737][ T1121] loop1: rw=2049, want=45104, limit=40427 [ 81.983002][ T1129] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.062896][ T1137] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 82.073312][ T1127] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.123664][ T1127] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.212109][ T1141] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 82.235848][ T1141] EXT4-fs (loop0): 1 truncate cleaned up [ 82.252145][ T1141] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 82.297890][ T1141] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.192: Logical block already allocated [ 82.315422][ T1141] EXT4-fs (loop0): Remounting filesystem read-only [ 82.850388][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 82.850400][ T24] audit: type=1400 audit(1762348316.019:496): avc: denied { ioctl } for pid=1146 comm="syz.3.194" path="socket:[17277]" dev="sockfs" ino=17277 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.112079][ T1164] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000, [ 83.158577][ T1164] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.206634][ T1164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 83.309468][ T24] audit: type=1400 audit(1762348316.500:497): avc: denied { relabelfrom } for pid=1161 comm="syz.4.197" name="" dev="pipefs" ino=17837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 83.381265][ T24] audit: type=1400 audit(1762348316.530:498): avc: denied { mac_admin } for pid=1161 comm="syz.4.197" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.452719][ T24] audit: type=1400 audit(1762348316.540:499): avc: denied { read } for pid=1172 comm="syz.2.199" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.525701][ T24] audit: type=1400 audit(1762348316.540:500): avc: denied { open } for pid=1172 comm="syz.2.199" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.631626][ T24] audit: type=1400 audit(1762348316.540:501): avc: denied { ioctl } for pid=1172 comm="syz.2.199" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.018675][ T24] audit: type=1400 audit(1762348317.200:502): avc: denied { mount } for pid=1177 comm="syz.3.200" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.717177][ T24] audit: type=1400 audit(1762348317.910:503): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.858185][ T1173] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 84.870879][ T24] audit: type=1400 audit(1762348317.910:504): avc: denied { open } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.889737][ T1173] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.904135][ T1173] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 84.931246][ T1173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.978159][ T24] audit: type=1400 audit(1762348317.910:505): avc: denied { ioctl } for pid=277 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.030626][ T1173] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.040427][ T1173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.145709][ T1190] attempt to access beyond end of device [ 85.145709][ T1190] loop2: rw=2049, want=45104, limit=40427 [ 85.463224][ T1202] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.510236][ T1202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.612353][ T1189] F2FS-fs (loop3): invalid crc value [ 85.668430][ T1189] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.727733][ T1189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.768253][ T1217] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 85.787586][ T1217] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.797504][ T1188] attempt to access beyond end of device [ 85.797504][ T1188] loop3: rw=10241, want=45104, limit=40427 [ 85.880612][ T276] attempt to access beyond end of device [ 85.880612][ T276] loop3: rw=2049, want=45120, limit=40427 [ 87.293950][ T1227] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.352289][ T1227] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.958754][ T1234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 87.991604][ T1234] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.018924][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 88.018935][ T24] audit: type=1400 audit(1762348321.202:540): avc: denied { write } for pid=1239 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.055561][ T24] audit: type=1400 audit(1762348321.202:541): avc: denied { create } for pid=1239 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.075026][ T24] audit: type=1400 audit(1762348321.202:542): avc: denied { connect } for pid=1239 comm="syz.4.215" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.428284][ T24] audit: type=1400 audit(1762348321.612:543): avc: denied { name_bind } for pid=1236 comm="syz.0.214" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.581594][ T24] audit: type=1400 audit(1762348321.642:544): avc: denied { node_bind } for pid=1236 comm="syz.0.214" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.871768][ T24] audit: type=1404 audit(1762348322.063:545): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 88.907622][ T24] audit: type=1404 audit(1762348322.083:546): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 88.954381][ T24] audit: type=1400 audit(1762348322.093:547): avc: denied { prog_load } for pid=1264 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.990189][ T24] audit: type=1400 audit(1762348322.093:548): avc: denied { bpf } for pid=1264 comm="syz.4.220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.010934][ T24] audit: type=1400 audit(1762348322.093:549): avc: denied { perfmon } for pid=1264 comm="syz.4.220" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.042106][ T1265] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 89.069032][ T1262] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 89.076514][ T1262] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 89.091396][ T1265] EXT4-fs (loop4): 1 truncate cleaned up [ 89.097053][ T1265] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 89.225711][ T1265] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.220: Logical block already allocated [ 89.245999][ T1265] EXT4-fs (loop4): Remounting filesystem read-only [ 89.428238][ T1251] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.508816][ T1272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 89.538333][ T1272] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.671571][ T290] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.688168][ T1251] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.258916][ T290] usb 5-1: Using ep0 maxpacket: 32 [ 90.301116][ T1288] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 90.374269][ T1298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 90.438263][ T1288] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.564581][ T1300] 9pnet: Could not find request transport: fd0x0000000000000003 [ 90.589769][ T1288] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 90.600536][ T290] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.611600][ T290] usb 5-1: config 0 has no interface number 0 [ 90.658346][ T1288] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.701794][ T1288] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 90.708960][ T1288] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.999671][ T1303] attempt to access beyond end of device [ 90.999671][ T1303] loop0: rw=2049, want=45104, limit=40427 [ 91.063313][ T290] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.072562][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.080787][ T290] usb 5-1: Product: syz [ 91.084987][ T290] usb 5-1: Manufacturer: syz [ 91.089711][ T290] usb 5-1: SerialNumber: syz [ 91.101876][ T290] usb 5-1: config 0 descriptor?? [ 91.147821][ T290] smsc95xx v2.0.0 [ 91.334350][ T1318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 92.390685][ T1326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 92.407268][ T1326] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.607761][ T1335] EXT4-fs (loop2): Ignoring removed nobh option [ 92.614045][ T1335] EXT4-fs (loop2): Ignoring removed bh option [ 92.620417][ T1335] EXT4-fs (loop2): Ignoring removed nobh option [ 92.840225][ T1335] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue [ 92.936470][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.982996][ T1335] syz.2.234[1335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.983033][ T1335] syz.2.234[1335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.053398][ T24] kauditd_printk_skb: 65 callbacks suppressed [ 93.053409][ T24] audit: type=1400 audit(1762348326.245:615): avc: denied { create } for pid=1342 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.197299][ T1278] udc-core: couldn't find an available UDC or it's busy [ 93.204284][ T1278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.299038][ T1349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 93.468285][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 93.506346][ T290] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 93.517461][ T290] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 93.556210][ T290] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 93.567252][ T290] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 93.574887][ T290] usb 5-1: USB disconnect, device number 6 [ 93.606260][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.616676][ T5] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 93.625746][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.645116][ T5] usb 4-1: config 0 descriptor?? [ 93.686838][ T5] uvcvideo: Found UVC 0.00 device (2833:0201) [ 93.693875][ T5] uvcvideo: No valid video chain found. [ 93.706542][ T1351] EXT4-fs (loop1): Ignoring removed oldalloc option [ 93.722062][ T1351] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.238: Parent and EA inode have the same ino 15 [ 93.734781][ T1351] EXT4-fs (loop1): 1 orphan inode deleted [ 93.740558][ T1351] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,bsdgroups,debug_want_extra_isize=0x000000000000005c,prjquota,bsdgroups,oldalloc,errors=continue,,errors=continue [ 93.764442][ T1351] xt_bpf: check failed: parse error [ 93.888670][ T290] usb 4-1: USB disconnect, device number 5 [ 94.022551][ T1357] 9pnet: Could not find request transport: fd0x0000000000000003 [ 96.979242][ T24] audit: type=1400 audit(1762348330.177:616): avc: denied { read write } for pid=1378 comm="syz.3.245" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 97.244935][ T24] audit: type=1400 audit(1762348330.197:617): avc: denied { open } for pid=1378 comm="syz.3.245" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 97.279255][ T24] audit: type=1400 audit(1762348330.477:618): avc: denied { ioctl } for pid=1378 comm="syz.3.245" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 97.424759][ T24] audit: type=1400 audit(1762348330.577:619): avc: denied { connect } for pid=1383 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.175227][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.433297][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 100.702810][ T5] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 100.718397][ T5] usb 1-1: config 0 has no interface number 0 [ 101.252513][ T5] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 101.261596][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.269624][ T5] usb 1-1: Product: syz [ 101.273866][ T5] usb 1-1: Manufacturer: syz [ 101.278445][ T5] usb 1-1: SerialNumber: syz [ 101.283631][ T5] usb 1-1: config 0 descriptor?? [ 101.293410][ T1418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 101.302398][ T1418] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.315522][ T1402] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 101.322916][ T5] smsc95xx v2.0.0 [ 101.323635][ T1406] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.334094][ T1402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.338061][ T24] audit: type=1400 audit(1762348334.539:620): avc: denied { mount } for pid=1423 comm="syz.3.255" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.344007][ T1402] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 101.387627][ T1406] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.396632][ T1406] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 101.423014][ T1402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.453203][ T1406] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.472502][ T1402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.487047][ T1402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.505453][ T1406] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.511692][ T1425] attempt to access beyond end of device [ 101.511692][ T1425] loop1: rw=2049, want=45104, limit=40427 [ 101.512569][ T1406] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.591467][ T24] audit: type=1400 audit(1762348335.789:621): avc: denied { read write } for pid=275 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.686655][ T24] audit: type=1400 audit(1762348335.819:622): avc: denied { open } for pid=275 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.713330][ T24] audit: type=1400 audit(1762348335.819:623): avc: denied { ioctl } for pid=275 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.713340][ T1445] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 102.714122][ T1445] EXT4-fs (loop1): 1 truncate cleaned up [ 102.738929][ T24] audit: type=1400 audit(1762348335.829:624): avc: denied { ioctl } for pid=1407 comm="syz.0.251" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.749418][ T1445] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 102.761617][ T24] audit: type=1400 audit(1762348335.839:625): avc: denied { prog_load } for pid=1444 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.814669][ T24] audit: type=1400 audit(1762348335.839:626): avc: denied { bpf } for pid=1444 comm="syz.1.260" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.835540][ T1408] udc-core: couldn't find an available UDC or it's busy [ 102.843403][ T24] audit: type=1400 audit(1762348335.839:627): avc: denied { perfmon } for pid=1444 comm="syz.1.260" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.869971][ T24] audit: type=1400 audit(1762348335.849:628): avc: denied { prog_run } for pid=1444 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.879897][ T1408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.889038][ T24] audit: type=1400 audit(1762348335.849:629): avc: denied { create } for pid=1444 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.955361][ T1445] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.260: Logical block already allocated [ 102.967330][ T1445] EXT4-fs (loop1): Remounting filesystem read-only [ 103.290879][ T1453] EXT4-fs (loop2): Ignoring removed oldalloc option [ 103.314941][ T1453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.259: Parent and EA inode have the same ino 15 [ 103.327867][ T1453] EXT4-fs (loop2): 1 orphan inode deleted [ 103.333696][ T1453] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,bsdgroups,debug_want_extra_isize=0x000000000000005c,prjquota,bsdgroups,oldalloc,errors=continue,,errors=continue [ 103.356275][ T5] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 103.368683][ T1453] xt_bpf: check failed: parse error [ 103.370664][ T5] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 103.406636][ T1452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 103.415789][ T5] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 103.426847][ T1452] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.437488][ T5] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 103.451900][ T5] usb 1-1: USB disconnect, device number 4 [ 103.952473][ T1471] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 103.961464][ T1471] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.017575][ T1476] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 104.026726][ T1476] EXT4-fs (loop2): 1 truncate cleaned up [ 104.032696][ T1476] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 104.052694][ T1476] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.265: Logical block already allocated [ 104.067864][ T1476] EXT4-fs (loop2): Remounting filesystem read-only [ 104.263739][ T1493] overlayfs: failed to resolve './file0/file0': -2 [ 105.553888][ T1512] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.840573][ T1510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 106.436888][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 106.437331][ T24] audit: type=1400 audit(1762348339.231:680): avc: denied { module_request } for pid=1508 comm="syz.2.276" kmod="dlci" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 106.669411][ T24] audit: type=1400 audit(1762348339.631:681): avc: denied { create } for pid=1508 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.690593][ T24] audit: type=1400 audit(1762348339.631:682): avc: denied { read write } for pid=1508 comm="syz.2.276" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.714362][ T24] audit: type=1400 audit(1762348339.631:683): avc: denied { open } for pid=1508 comm="syz.2.276" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.739271][ T24] audit: type=1400 audit(1762348339.881:684): avc: denied { read } for pid=1520 comm="syz.4.279" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.761825][ T24] audit: type=1400 audit(1762348339.881:685): avc: denied { open } for pid=1520 comm="syz.4.279" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.784911][ T24] audit: type=1400 audit(1762348339.881:686): avc: denied { ioctl } for pid=1520 comm="syz.4.279" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.829562][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.930716][ T1525] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 106.938635][ T1525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 106.947939][ T1525] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 106.956460][ T1525] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.959608][ T807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.970394][ T434] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.989696][ T1525] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 106.996736][ T1525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.014778][ T24] audit: type=1400 audit(1762348340.212:687): avc: denied { write } for pid=1520 comm="syz.4.279" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.022408][ T1527] attempt to access beyond end of device [ 107.022408][ T1527] loop4: rw=2049, want=45104, limit=40427 [ 107.036737][ T24] audit: type=1400 audit(1762348340.212:688): avc: denied { add_name } for pid=1520 comm="syz.4.279" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.089844][ T24] audit: type=1400 audit(1762348340.212:689): avc: denied { create } for pid=1520 comm="syz.4.279" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.159367][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 107.278025][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 107.283216][ T434] usb 2-1: Using ep0 maxpacket: 8 [ 107.289367][ T5] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.297534][ T5] usb 1-1: config 0 has no interface number 0 [ 107.399295][ T434] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 107.408424][ T434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.416534][ T807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.426627][ T807] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.435877][ T807] usb 4-1: config 1 has no interface number 1 [ 107.442163][ T434] usb 2-1: config 0 descriptor?? [ 107.447156][ T807] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.460094][ T807] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.479764][ T434] uvcvideo: Found UVC 0.00 device (2833:0201) [ 107.486698][ T434] uvcvideo: No valid video chain found. [ 107.492395][ T5] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.501549][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.509698][ T5] usb 1-1: Product: syz [ 107.513874][ T5] usb 1-1: Manufacturer: syz [ 107.518463][ T5] usb 1-1: SerialNumber: syz [ 107.523566][ T5] usb 1-1: config 0 descriptor?? [ 107.559507][ T5] smsc95xx v2.0.0 [ 107.639187][ T807] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.648299][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.656313][ T807] usb 4-1: Product: syz [ 107.660531][ T807] usb 4-1: Manufacturer: syz [ 107.665138][ T807] usb 4-1: SerialNumber: syz [ 107.684502][ T486] usb 2-1: USB disconnect, device number 4 [ 108.102887][ T1538] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.131785][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 108.140052][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.148259][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 108.157478][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.165879][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.174115][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.182436][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.190608][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.139899][ T1544] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.235744][ T1544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.605753][ T1543] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 109.608223][ T807] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 109.614180][ T5] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 109.632639][ T5] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 110.280572][ T807] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 110.531497][ T5] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 110.918783][ T5] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 110.928526][ T5] usb 1-1: USB disconnect, device number 5 [ 111.001128][ T1543] EXT4-fs (loop4): 1 truncate cleaned up [ 111.006851][ T1543] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 111.230813][ T1562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.237321][ T807] usb 4-1: 2:1 : invalid channels 0 [ 111.247201][ T1573] FAULT_INJECTION: forcing a failure. [ 111.247201][ T1573] name failslab, interval 1, probability 0, space 0, times 0 [ 111.260468][ T1573] CPU: 1 PID: 1573 Comm: syz.1.288 Tainted: G W syzkaller #0 [ 111.269138][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.270003][ T1565] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.279187][ T1573] Call Trace: [ 111.279205][ T1573] __dump_stack+0x21/0x24 [ 111.279222][ T1573] dump_stack_lvl+0x169/0x1d8 [ 111.297695][ T1573] ? thaw_kernel_threads+0x220/0x220 [ 111.302992][ T1573] ? rw_verify_area+0x1c0/0x360 [ 111.307845][ T1573] ? show_regs_print_info+0x18/0x18 [ 111.313045][ T1573] ? vfs_write+0xac8/0xd60 [ 111.317463][ T1573] dump_stack+0x15/0x1c [ 111.321623][ T1573] should_fail+0x3c1/0x510 [ 111.326037][ T1573] ? __se_sys_mount+0x9c/0x380 [ 111.330804][ T1573] __should_failslab+0xa4/0xe0 [ 111.335581][ T1573] should_failslab+0x9/0x20 [ 111.340093][ T1573] __kmalloc_track_caller+0x5f/0x320 [ 111.345378][ T1573] ? strnlen_user+0xe8/0x1c0 [ 111.347296][ T1562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.349967][ T1573] strndup_user+0x74/0x150 [ 111.361833][ T1573] __se_sys_mount+0x9c/0x380 [ 111.366508][ T1573] ? fput+0x1a/0x20 [ 111.370508][ T1573] ? __x64_sys_mount+0xd0/0xd0 [ 111.375469][ T1573] __x64_sys_mount+0xbf/0xd0 [ 111.378146][ T1565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.380058][ T1573] do_syscall_64+0x31/0x40 [ 111.391935][ T1573] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 111.397838][ T1573] RIP: 0033:0x7f1a3d4836c9 [ 111.402269][ T1573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.421871][ T1573] RSP: 002b:00007f1a3beeb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.430327][ T1573] RAX: ffffffffffffffda RBX: 00007f1a3d6d9fa0 RCX: 00007f1a3d4836c9 [ 111.438297][ T1573] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 111.446262][ T1573] RBP: 00007f1a3beeb090 R08: 0000200000000000 R09: 0000000000000000 [ 111.454229][ T1573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.462199][ T1573] R13: 00007f1a3d6da038 R14: 00007f1a3d6d9fa0 R15: 00007ffebefcfb98 [ 112.140146][ T807] usb 4-1: USB disconnect, device number 6 [ 112.312167][ T1581] FAULT_INJECTION: forcing a failure. [ 112.312167][ T1581] name failslab, interval 1, probability 0, space 0, times 0 [ 112.312697][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 112.312727][ T24] audit: type=1400 audit(1762348345.514:705): avc: denied { create } for pid=1579 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.325065][ T1581] CPU: 1 PID: 1581 Comm: syz.4.290 Tainted: G W syzkaller #0 [ 112.334345][ T24] audit: type=1400 audit(1762348345.514:706): avc: denied { ioctl } for pid=1579 comm="syz.4.290" path="socket:[18310]" dev="sockfs" ino=18310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.350255][ T1581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.350259][ T1581] Call Trace: [ 112.350276][ T1581] __dump_stack+0x21/0x24 [ 112.350287][ T1581] dump_stack_lvl+0x169/0x1d8 [ 112.350298][ T1581] ? show_regs_print_info+0x18/0x18 [ 112.350308][ T1581] ? skb_put+0x10e/0x1f0 [ 112.350318][ T1581] dump_stack+0x15/0x1c [ 112.350334][ T1581] should_fail+0x3c1/0x510 [ 112.359360][ T24] audit: type=1400 audit(1762348345.514:707): avc: denied { setopt } for pid=1579 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.383626][ T1581] ? sidtab_sid2str_get+0x120/0x2c0 [ 112.383640][ T1581] __should_failslab+0xa4/0xe0 [ 112.383651][ T1581] should_failslab+0x9/0x20 [ 112.383664][ T1581] __kmalloc_track_caller+0x5f/0x320 [ 112.383672][ T1581] ? sidtab_sid2str_put+0x2fb/0x690 [ 112.383692][ T1581] kmemdup+0x26/0x60 [ 112.472329][ T1581] sidtab_sid2str_get+0x120/0x2c0 [ 112.477353][ T1581] security_sid_to_context_core+0x2ac/0x480 [ 112.483238][ T1581] security_sid_to_context+0x33/0x40 [ 112.488521][ T1581] avc_audit_post_callback+0x1cc/0x820 [ 112.493975][ T1581] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 112.499514][ T1581] ? audit_log_untrustedstring+0xe6/0x100 [ 112.505221][ T1581] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 112.510762][ T1581] common_lsm_audit+0x1439/0x17f0 [ 112.515775][ T1581] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 112.521308][ T1581] ? ipv6_skb_to_auditdata+0xca0/0xca0 [ 112.526768][ T1581] ? __kasan_check_write+0x14/0x20 [ 112.531868][ T1581] ? avc_alloc_node+0x28f/0x320 [ 112.536721][ T1581] ? __kasan_check_write+0x14/0x20 [ 112.541840][ T1581] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 112.547290][ T1581] ? _raw_spin_lock+0xe0/0xe0 [ 112.551955][ T1581] slow_avc_audit+0x1ac/0x220 [ 112.556615][ T1581] ? avc_get_hash_stats+0x180/0x180 [ 112.561805][ T1581] ? avc_denied+0x132/0x1b0 [ 112.566299][ T1581] avc_has_perm+0x1ca/0x360 [ 112.570793][ T1581] ? __x64_sys_openat+0x136/0x160 [ 112.575804][ T1581] ? do_syscall_64+0x31/0x40 [ 112.580379][ T1581] ? avc_has_perm_noaudit+0x240/0x240 [ 112.585736][ T1581] ? kstrtouint_from_user+0x1a0/0x200 [ 112.591093][ T1581] ? memset+0x35/0x40 [ 112.595058][ T1581] selinux_socket_sendmsg+0x208/0x2e0 [ 112.600413][ T1581] ? selinux_socket_accept+0x500/0x500 [ 112.605863][ T1581] ? proc_fail_nth_read+0x210/0x210 [ 112.611064][ T1581] ? __fget_files+0x2c4/0x320 [ 112.615728][ T1581] ? check_stack_object+0x106/0x140 [ 112.620908][ T1581] security_socket_sendmsg+0x72/0xa0 [ 112.626180][ T1581] __sys_sendto+0x3b7/0x580 [ 112.630679][ T1581] ? __ia32_sys_getpeername+0x90/0x90 [ 112.636031][ T1581] ? mutex_lock+0x8c/0xe0 [ 112.640343][ T1581] ? __kasan_check_write+0x14/0x20 [ 112.645441][ T1581] ? fput_many+0x15a/0x1a0 [ 112.649843][ T1581] ? __ia32_sys_read+0x90/0x90 [ 112.654591][ T1581] __x64_sys_sendto+0xe5/0x100 [ 112.659339][ T1581] do_syscall_64+0x31/0x40 [ 112.663766][ T1581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 112.669644][ T1581] RIP: 0033:0x7f6dc08776c9 [ 112.674065][ T1581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.693652][ T1581] RSP: 002b:00007f6dbf2df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.702050][ T1581] RAX: ffffffffffffffda RBX: 00007f6dc0acdfa0 RCX: 00007f6dc08776c9 [ 112.710096][ T1581] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000009 [ 112.718050][ T1581] RBP: 00007f6dbf2df090 R08: 0000200000000540 R09: 0000000000000014 [ 112.726029][ T1581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.733990][ T1581] R13: 00007f6dc0ace038 R14: 00007f6dc0acdfa0 R15: 00007ffcd634b8e8 [ 112.750022][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.757277][ T24] audit: type=1400 audit(1762348345.514:708): avc: denied { write } for pid=1579 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tsid=134 tclass=packet_socket permissive=1 [ 112.788464][ T1578] F2FS-fs (loop3): invalid crc value [ 112.826401][ T1578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.837672][ T24] audit: type=1400 audit(1762348346.044:709): avc: denied { load_policy } for pid=1591 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.858458][ T1592] SELinux: failed to load policy [ 112.896481][ T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.904667][ T1578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.009365][ T1577] attempt to access beyond end of device [ 113.009365][ T1577] loop3: rw=10241, want=45104, limit=40427 [ 113.043061][ T276] attempt to access beyond end of device [ 113.043061][ T276] loop3: rw=2049, want=45120, limit=40427 [ 113.060951][ T24] audit: type=1400 audit(1762348346.215:710): avc: denied { read append } for pid=1577 comm="syz.3.289" path="/58/file0/io.stat" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.123864][ T1599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 113.323412][ T24] audit: type=1400 audit(1762348346.215:711): avc: denied { map } for pid=1577 comm="syz.3.289" path="/58/file0/io.stat" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.366270][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 113.372320][ T24] audit: type=1400 audit(1762348346.215:712): avc: denied { execute } for pid=1577 comm="syz.3.289" path="/58/file0/io.stat" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.437087][ T24] audit: type=1400 audit(1762348346.235:713): avc: denied { ioctl } for pid=1577 comm="syz.3.289" path="/58/file0/io.stat" dev="loop3" ino=14 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.496413][ T5] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.525702][ T5] usb 2-1: config 0 has no interface number 0 [ 113.536471][ T1586] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.571210][ T1586] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.632236][ T1586] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 113.684956][ T1586] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.759551][ T1586] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.767235][ T1586] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.812738][ T1603] attempt to access beyond end of device [ 113.812738][ T1603] loop2: rw=2049, want=45104, limit=40427 [ 113.827299][ T5] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.978124][ T24] audit: type=1400 audit(1762348347.185:714): avc: denied { execute } for pid=1611 comm="syz.0.297" path="/51/cpuacct.usage_percpu" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.076661][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.084706][ T5] usb 2-1: Product: syz [ 114.088913][ T5] usb 2-1: Manufacturer: syz [ 114.093508][ T5] usb 2-1: SerialNumber: syz [ 114.098726][ T5] usb 2-1: config 0 descriptor?? [ 114.136350][ T5] smsc95xx v2.0.0 [ 115.215340][ T15] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.227361][ T1630] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 115.236402][ T1630] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.454589][ T1582] udc-core: couldn't find an available UDC or it's busy [ 115.461904][ T1582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.476707][ T15] usb 5-1: Using ep0 maxpacket: 32 [ 115.595188][ T15] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 115.603308][ T15] usb 5-1: config 0 has no interface number 0 [ 115.695136][ T5] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 115.705913][ T5] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 115.736277][ T5] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 115.747756][ T5] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 115.755502][ T5] usb 2-1: USB disconnect, device number 5 [ 115.785161][ T15] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 115.798464][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.806693][ T15] usb 5-1: Product: syz [ 115.811039][ T15] usb 5-1: Manufacturer: syz [ 115.815891][ T15] usb 5-1: SerialNumber: syz [ 115.822769][ T15] usb 5-1: config 0 descriptor?? [ 115.905407][ T15] smsc95xx v2.0.0 [ 115.980726][ T1638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.012616][ T1638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.255964][ T1651] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.826247][ T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.074499][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 117.135749][ T1625] udc-core: couldn't find an available UDC or it's busy [ 117.155761][ T1625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.194461][ T807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.224341][ T807] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.253566][ T807] usb 2-1: config 1 has no interface number 1 [ 117.263662][ T807] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 117.276615][ T807] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.366670][ T1660] F2FS-fs (loop2): invalid crc value [ 117.381887][ T1660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.432449][ T1660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.444282][ T807] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.454321][ T15] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 117.471262][ T15] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 117.474237][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.503172][ T1659] attempt to access beyond end of device [ 117.503172][ T1659] loop2: rw=10241, want=45104, limit=40427 [ 117.508656][ T807] usb 2-1: Product: syz [ 117.514750][ T15] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 117.518632][ T807] usb 2-1: Manufacturer: syz [ 117.518645][ T807] usb 2-1: SerialNumber: syz [ 117.530805][ T15] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 117.561804][ T15] usb 5-1: USB disconnect, device number 7 [ 117.569283][ T278] attempt to access beyond end of device [ 117.569283][ T278] loop2: rw=2049, want=45120, limit=40427 [ 117.720315][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 117.720325][ T24] audit: type=1400 audit(1762348350.927:777): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.107037][ T24] audit: type=1400 audit(1762348351.307:778): avc: denied { remount } for pid=1672 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.345355][ T1679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.361516][ T1670] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 118.373303][ T1670] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.382187][ T1679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec098, mo2=0002] [ 118.390322][ T1679] System zones: 1-12 [ 118.394790][ T1670] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 118.402286][ T1679] EXT4-fs (loop4): 1 truncate cleaned up [ 118.408230][ T1679] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,debug,minixdf,quota,,errors=continue [ 118.440931][ T1670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.478529][ T1670] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.485703][ T1670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.563004][ T1690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 118.792289][ T1685] attempt to access beyond end of device [ 118.792289][ T1685] loop3: rw=2049, want=45104, limit=40427 [ 118.878831][ T1695] EXT4-fs error (device loop4): __ext4_iget:5008: inode #16: block 100663325: comm syz.4.312: invalid block [ 118.930132][ T24] audit: type=1400 audit(1762348352.128:779): avc: denied { audit_write } for pid=1678 comm="syz.4.312" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.997203][ T1692] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 119.013249][ T24] audit: type=1107 audit(1762348352.128:780): pid=1678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='>' [ 119.413946][ T24] audit: type=1400 audit(1762348352.138:781): avc: denied { mounton } for pid=1678 comm="syz.4.312" path="/59/file2/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.440695][ T1692] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.677458][ T807] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 119.688367][ T807] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 119.696058][ T807] usb 2-1: 2:1 : invalid channels 0 [ 119.928490][ T807] usb 2-1: USB disconnect, device number 6 [ 120.295995][ T1705] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 120.295995][ T1705] [ 120.306744][ T1705] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 120.325959][ T1712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'. [ 120.345639][ T24] audit: type=1400 audit(1762348353.538:782): avc: denied { create } for pid=1711 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.366071][ T24] audit: type=1400 audit(1762348353.538:783): avc: denied { write } for pid=1711 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.386391][ T1712] overlayfs: failed to resolve './file1': -2 [ 120.393323][ T24] audit: type=1400 audit(1762348353.538:784): avc: denied { nlmsg_write } for pid=1711 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.443644][ T1703] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000, [ 120.463275][ T1703] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.755929][ T1703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 120.883612][ T1724] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 120.893378][ T24] audit: type=1400 audit(1762348354.109:785): avc: denied { unlink } for pid=1722 comm="syz.2.320" name="#9" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.916043][ T1724] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 120.923598][ T1724] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 120.939230][ T24] audit: type=1400 audit(1762348354.149:786): avc: denied { remount } for pid=1722 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.338165][ T1735] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.345602][ T1735] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.358089][ T1735] device bridge_slave_1 left promiscuous mode [ 121.364403][ T1735] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.475400][ T1735] device bridge_slave_0 left promiscuous mode [ 121.481743][ T1735] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.008738][ T1740] FAULT_INJECTION: forcing a failure. [ 122.008738][ T1740] name failslab, interval 1, probability 0, space 0, times 0 [ 122.055376][ T1740] CPU: 1 PID: 1740 Comm: syz.1.326 Tainted: G W syzkaller #0 [ 122.064145][ T1740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.074186][ T1740] Call Trace: [ 122.077479][ T1740] __dump_stack+0x21/0x24 [ 122.081804][ T1740] dump_stack_lvl+0x169/0x1d8 [ 122.086474][ T1740] ? show_regs_print_info+0x18/0x18 [ 122.091665][ T1740] dump_stack+0x15/0x1c [ 122.095826][ T1740] should_fail+0x3c1/0x510 [ 122.100230][ T1740] ? p9_client_prepare_req+0x1d0/0xb60 [ 122.105678][ T1740] __should_failslab+0xa4/0xe0 [ 122.110430][ T1740] should_failslab+0x9/0x20 [ 122.114922][ T1740] kmem_cache_alloc+0x3d/0x2e0 [ 122.119675][ T1740] ? p9_client_prepare_req+0xba/0xb60 [ 122.125060][ T1740] p9_client_prepare_req+0x1d0/0xb60 [ 122.130331][ T1740] ? __kasan_kmalloc+0xec/0x110 [ 122.135168][ T1740] ? __kasan_kmalloc+0xda/0x110 [ 122.140008][ T1740] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 122.145540][ T1740] ? do_dentry_open+0x793/0x1090 [ 122.150473][ T1740] p9_client_rpc+0x155/0x1070 [ 122.155142][ T1740] ? __kasan_check_write+0x14/0x20 [ 122.160241][ T1740] ? node_tag_clear+0x1ea/0x2a0 [ 122.165084][ T1740] ? p9_fid_create+0x240/0x240 [ 122.169835][ T1740] ? idr_alloc_u32+0x1b6/0x2d0 [ 122.174605][ T1740] ? _raw_spin_lock_irq+0x8f/0xe0 [ 122.179628][ T1740] ? debug_smp_processor_id+0x17/0x20 [ 122.185003][ T1740] p9_client_walk+0x1a5/0x6a0 [ 122.189681][ T1740] ? p9_client_rpc+0x1070/0x1070 [ 122.194621][ T1740] v9fs_file_open+0x2f1/0x6e0 [ 122.199292][ T1740] ? v9fs_fid_readpage+0x370/0x370 [ 122.204405][ T1740] do_dentry_open+0x793/0x1090 [ 122.209174][ T1740] vfs_open+0x73/0x80 [ 122.213149][ T1740] path_openat+0x27ad/0x3160 [ 122.217736][ T1740] ? __kasan_slab_alloc+0xcf/0xf0 [ 122.222759][ T1740] ? kmem_cache_alloc+0x165/0x2e0 [ 122.227776][ T1740] ? getname+0x19/0x20 [ 122.231845][ T1740] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.237915][ T1740] ? do_filp_open+0x3e0/0x3e0 [ 122.242600][ T1740] ? expand_files+0xde/0x8e0 [ 122.247196][ T1740] do_filp_open+0x1b3/0x3e0 [ 122.251703][ T1740] ? vfs_tmpfile+0x2c0/0x2c0 [ 122.256296][ T1740] ? get_unused_fd_flags+0x92/0xa0 [ 122.261400][ T1740] do_sys_openat2+0x14c/0x6d0 [ 122.266068][ T1740] ? __kasan_check_write+0x14/0x20 [ 122.271176][ T1740] ? fput_many+0x15a/0x1a0 [ 122.275594][ T1740] ? do_sys_open+0xe0/0xe0 [ 122.280005][ T1740] ? fput+0x1a/0x20 [ 122.283834][ T1740] ? ksys_write+0x1eb/0x240 [ 122.288335][ T1740] ? __ia32_sys_read+0x90/0x90 [ 122.293090][ T1740] ? mntput+0x5f/0xc0 [ 122.297075][ T1740] __x64_sys_open+0x11c/0x140 [ 122.301748][ T1740] do_syscall_64+0x31/0x40 [ 122.306156][ T1740] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 122.312034][ T1740] RIP: 0033:0x7f1a3d4836c9 [ 122.316449][ T1740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.336035][ T1740] RSP: 002b:00007f1a3beeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 122.344426][ T1740] RAX: ffffffffffffffda RBX: 00007f1a3d6d9fa0 RCX: 00007f1a3d4836c9 [ 122.352393][ T1740] RDX: 0000000000000040 RSI: 0000000000000500 RDI: 0000200000000140 [ 122.360350][ T1740] RBP: 00007f1a3beeb090 R08: 0000000000000000 R09: 0000000000000000 [ 122.368305][ T1740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.376260][ T1740] R13: 00007f1a3d6da038 R14: 00007f1a3d6d9fa0 R15: 00007ffebefcfb98 [ 123.041406][ T15] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.494004][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 123.494015][ T24] audit: type=1400 audit(1762348356.710:794): avc: denied { connect } for pid=1758 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.551165][ T15] usb 2-1: Using ep0 maxpacket: 32 [ 123.900054][ T15] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.908165][ T15] usb 2-1: config 0 has no interface number 0 [ 123.990570][ T1764] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 123.990570][ T1764] [ 124.001322][ T1764] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 124.110920][ T15] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 124.503496][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.511544][ T15] usb 2-1: Product: syz [ 124.515786][ T15] usb 2-1: Manufacturer: syz [ 124.520169][ T24] audit: type=1400 audit(1762348357.730:795): avc: denied { mount } for pid=1773 comm="syz.4.335" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 124.520382][ T15] usb 2-1: SerialNumber: syz [ 124.547867][ T15] usb 2-1: config 0 descriptor?? [ 124.594899][ T15] smsc95xx v2.0.0 [ 124.626787][ T24] audit: type=1404 audit(1762348357.840:796): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 124.642528][ T24] audit: type=1400 audit(1762348357.860:797): avc: denied { prog_load } for pid=1780 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.662941][ T24] audit: type=1400 audit(1762348357.860:798): avc: denied { prog_load } for pid=1780 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.682892][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 124.691837][ T24] audit: type=1400 audit(1762348357.870:799): avc: denied { prog_load } for pid=1780 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.713557][ T24] audit: type=1400 audit(1762348357.870:800): avc: denied { create } for pid=1780 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 124.732982][ T24] audit: type=1400 audit(1762348357.870:801): avc: denied { create } for pid=1780 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 124.752805][ T24] audit: type=1400 audit(1762348357.880:802): avc: denied { read write } for pid=1780 comm="syz.2.338" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.777450][ T24] audit: type=1400 audit(1762348357.900:803): avc: denied { mounton } for pid=1777 comm="syz.4.337" path="/64/file0" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 124.810784][ T15] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 124.824915][ T15] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 124.832938][ T15] usb 2-1: USB disconnect, device number 7 [ 124.922161][ T276] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 124.929833][ T276] FAT-fs (loop3): Filesystem has been set read-only [ 124.937027][ T276] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 125.800623][ T429] device bridge_slave_1 left promiscuous mode [ 125.806794][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.820436][ T429] device bridge_slave_0 left promiscuous mode [ 125.826552][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.850851][ T429] device veth1_macvtap left promiscuous mode [ 125.856874][ T429] device veth0_vlan left promiscuous mode [ 126.360526][ T1816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 126.379723][ T1816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 129.130723][ T24] kauditd_printk_skb: 182 callbacks suppressed [ 129.130733][ T24] audit: type=1400 audit(1762348362.343:986): avc: denied { execmem } for pid=1841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 129.157835][ T24] audit: type=1400 audit(1762348362.343:987): avc: denied { map_create } for pid=1842 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.177360][ T24] audit: type=1400 audit(1762348362.353:988): avc: denied { prog_load } for pid=1842 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.196285][ T24] audit: type=1400 audit(1762348362.353:989): avc: denied { prog_load } for pid=1848 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.215296][ T24] audit: type=1400 audit(1762348362.363:990): avc: denied { read write } for pid=1848 comm="syz.1.360" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.239226][ T24] audit: type=1400 audit(1762348362.363:991): avc: denied { map_create } for pid=1845 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.258251][ T24] audit: type=1400 audit(1762348362.363:992): avc: denied { prog_load } for pid=1845 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.277198][ T24] audit: type=1400 audit(1762348362.363:993): avc: denied { prog_load } for pid=1845 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.296153][ T24] audit: type=1400 audit(1762348362.363:994): avc: denied { read write } for pid=1845 comm="syz.4.362" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.320002][ T24] audit: type=1400 audit(1762348362.363:995): avc: denied { map_create } for pid=1844 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.218224][ T1857] binfmt_misc: register: failed to install interpreter file ./file2 [ 133.807328][ T1899] FAULT_INJECTION: forcing a failure. [ 133.807328][ T1899] name failslab, interval 1, probability 0, space 0, times 0 [ 133.820035][ T1899] CPU: 1 PID: 1899 Comm: syz.0.375 Tainted: G W syzkaller #0 [ 133.828700][ T1899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.838740][ T1899] Call Trace: [ 133.842015][ T1899] __dump_stack+0x21/0x24 [ 133.846335][ T1899] dump_stack_lvl+0x169/0x1d8 [ 133.850996][ T1899] ? show_regs_print_info+0x18/0x18 [ 133.856176][ T1899] dump_stack+0x15/0x1c [ 133.860339][ T1899] should_fail+0x3c1/0x510 [ 133.864743][ T1899] ? sidtab_sid2str_get+0x120/0x2c0 [ 133.869926][ T1899] __should_failslab+0xa4/0xe0 [ 133.874675][ T1899] should_failslab+0x9/0x20 [ 133.879162][ T1899] __kmalloc_track_caller+0x5f/0x320 [ 133.884430][ T1899] kmemdup+0x26/0x60 [ 133.888307][ T1899] sidtab_sid2str_get+0x120/0x2c0 [ 133.893328][ T1899] security_sid_to_context_core+0x2ac/0x480 [ 133.899202][ T1899] security_sid_to_context+0x33/0x40 [ 133.904468][ T1899] selinux_secid_to_secctx+0x2c/0x40 [ 133.909732][ T1899] security_secid_to_secctx+0x74/0xb0 [ 133.915083][ T1899] audit_log_task_context+0xc6/0x1e0 [ 133.920346][ T1899] ? audit_log_key+0x130/0x130 [ 133.925091][ T1899] ? audit_log_start+0x76b/0x860 [ 133.930018][ T1899] audit_log_task+0x185/0x2e0 [ 133.934679][ T1899] ? audit_core_dumps+0x110/0x110 [ 133.939686][ T1899] ? memset+0x35/0x40 [ 133.943652][ T1899] audit_seccomp+0x7f/0x160 [ 133.948143][ T1899] __seccomp_filter+0xb4c/0x1990 [ 133.953061][ T1899] ? proc_fail_nth_read+0x210/0x210 [ 133.958259][ T1899] ? rw_verify_area+0x1c0/0x360 [ 133.963091][ T1899] ? preempt_count_add+0x90/0x1b0 [ 133.968092][ T1899] ? __secure_computing+0x290/0x290 [ 133.973275][ T1899] ? vfs_write+0xac8/0xd60 [ 133.977682][ T1899] ? __kasan_slab_free+0x11/0x20 [ 133.982599][ T1899] ? kernel_write+0x3c0/0x3c0 [ 133.987259][ T1899] ? __kasan_check_write+0x14/0x20 [ 133.992352][ T1899] ? mutex_lock+0x8c/0xe0 [ 133.996664][ T1899] ? mutex_trylock+0xa0/0xa0 [ 134.001232][ T1899] ? __fget_files+0x2c4/0x320 [ 134.005896][ T1899] ? __kasan_check_write+0x14/0x20 [ 134.010986][ T1899] ? fput_many+0x15a/0x1a0 [ 134.015471][ T1899] ? fput+0x1a/0x20 [ 134.019262][ T1899] ? ksys_write+0x1eb/0x240 [ 134.023754][ T1899] __secure_computing+0xea/0x290 [ 134.028673][ T1899] syscall_trace_enter+0xb5/0x170 [ 134.033683][ T1899] syscall_enter_from_user_mode+0x20/0x30 [ 134.039385][ T1899] do_syscall_64+0x13/0x40 [ 134.043785][ T1899] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 134.049657][ T1899] RIP: 0033:0x7f570cdfe6c9 [ 134.054058][ T1899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.073643][ T1899] RSP: 002b:00007f570b866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.082038][ T1899] RAX: ffffffffffffffda RBX: 00007f570d054fa0 RCX: 00007f570cdfe6c9 [ 134.089995][ T1899] RDX: 0000200000000180 RSI: 0000000040047438 RDI: ffffffffffffffff [ 134.097947][ T1899] RBP: 00007f570b866090 R08: 0000000000000000 R09: 0000000000000000 [ 134.105899][ T1899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.113881][ T1899] R13: 00007f570d055038 R14: 00007f570d054fa0 R15: 00007fff5bc03188 [ 134.142783][ T24] kauditd_printk_skb: 162 callbacks suppressed [ 134.142794][ T24] audit: type=1400 audit(1762348367.355:1157): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.188036][ T24] audit: type=1400 audit(1762348367.395:1158): avc: denied { prog_load } for pid=1900 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.208187][ T24] audit: type=1400 audit(1762348367.405:1159): avc: denied { read write } for pid=1900 comm="syz.1.376" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.232462][ T24] audit: type=1400 audit(1762348367.405:1160): avc: denied { read write } for pid=278 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.256669][ T24] audit: type=1400 audit(1762348367.405:1161): avc: denied { map_create } for pid=1900 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.275711][ T24] audit: type=1400 audit(1762348367.405:1162): avc: denied { prog_load } for pid=1900 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.642342][ T24] audit: type=1400 audit(1762348367.855:1163): avc: denied { read write } for pid=275 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.216152][ T24] audit: type=1400 audit(1762348368.436:1164): avc: denied { execmem } for pid=1908 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 135.237488][ T24] audit: type=1400 audit(1762348368.456:1165): avc: denied { prog_load } for pid=1909 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.256531][ T24] audit: type=1400 audit(1762348368.456:1166): avc: denied { prog_load } for pid=1909 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.258762][ T1911] device wg2 entered promiscuous mode [ 139.186608][ T24] kauditd_printk_skb: 136 callbacks suppressed [ 139.186619][ T24] audit: type=1400 audit(1762348372.408:1303): avc: denied { read write } for pid=277 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.071132][ T24] audit: type=1400 audit(1762348373.288:1304): avc: denied { execmem } for pid=1946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 140.092741][ T1954] FAULT_INJECTION: forcing a failure. [ 140.092741][ T1954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.098911][ T24] audit: type=1400 audit(1762348373.308:1305): avc: denied { bpf } for pid=1947 comm="syz.2.393" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 140.108680][ T1954] CPU: 1 PID: 1954 Comm: syz.0.391 Tainted: G W syzkaller #0 [ 140.128766][ T24] audit: type=1400 audit(1762348373.308:1306): avc: denied { prog_load } for pid=1951 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.134814][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.134818][ T1954] Call Trace: [ 140.134833][ T1954] __dump_stack+0x21/0x24 [ 140.134849][ T1954] dump_stack_lvl+0x169/0x1d8 [ 140.154255][ T24] audit: type=1400 audit(1762348373.308:1307): avc: denied { prog_load } for pid=1951 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.163777][ T1954] ? thaw_kernel_threads+0x220/0x220 [ 140.163788][ T1954] ? vsnprintf+0x1871/0x1960 [ 140.163799][ T1954] ? show_regs_print_info+0x18/0x18 [ 140.163811][ T1954] dump_stack+0x15/0x1c [ 140.163819][ T1954] should_fail+0x3c1/0x510 [ 140.163835][ T1954] should_fail_usercopy+0x1a/0x20 [ 140.167457][ T24] audit: type=1400 audit(1762348373.308:1308): avc: denied { mounton } for pid=1951 comm="syz.0.391" path="/73/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 140.171502][ T1954] _copy_to_user+0x20/0x90 [ 140.176288][ T24] audit: type=1400 audit(1762348373.308:1309): avc: denied { mounton } for pid=1951 comm="syz.0.391" path="/73/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 140.195054][ T1954] simple_read_from_buffer+0xe9/0x160 [ 140.195065][ T1954] proc_fail_nth_read+0x19a/0x210 [ 140.195075][ T1954] ? proc_fault_inject_write+0x2f0/0x2f0 [ 140.195086][ T1954] ? rw_verify_area+0x1c0/0x360 [ 140.195095][ T1954] ? proc_fault_inject_write+0x2f0/0x2f0 [ 140.195103][ T1954] vfs_read+0x1fe/0xa10 [ 140.195113][ T1954] ? kernel_read+0x70/0x70 [ 140.195124][ T1954] ? __kasan_check_write+0x14/0x20 [ 140.195133][ T1954] ? mutex_lock+0x8c/0xe0 [ 140.195142][ T1954] ? mutex_trylock+0xa0/0xa0 [ 140.195150][ T1954] ? __fget_files+0x2c4/0x320 [ 140.195165][ T1954] ? __fdget_pos+0x2d2/0x380 [ 140.209610][ T24] audit: type=1400 audit(1762348373.308:1310): avc: denied { map_create } for pid=1951 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.210206][ T1954] ? ksys_read+0x71/0x240 [ 140.214620][ T24] audit: type=1400 audit(1762348373.308:1311): avc: denied { prog_load } for pid=1951 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.218752][ T1954] ksys_read+0x140/0x240 [ 140.223926][ T24] audit: type=1400 audit(1762348373.308:1312): avc: denied { read write } for pid=278 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.246039][ T1954] ? vfs_write+0xd60/0xd60 [ 140.246048][ T1954] ? __se_sys_chdir+0x178/0x210 [ 140.246060][ T1954] ? debug_smp_processor_id+0x17/0x20 [ 140.246076][ T1954] __x64_sys_read+0x7b/0x90 [ 140.420509][ T1954] do_syscall_64+0x31/0x40 [ 140.420533][ T1954] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 140.430815][ T1954] RIP: 0033:0x7f570cdfd0dc [ 140.435239][ T1954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.454845][ T1954] RSP: 002b:00007f570b866030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.463349][ T1954] RAX: ffffffffffffffda RBX: 00007f570d054fa0 RCX: 00007f570cdfd0dc [ 140.471320][ T1954] RDX: 000000000000000f RSI: 00007f570b8660a0 RDI: 0000000000000006 [ 140.479291][ T1954] RBP: 00007f570b866090 R08: 0000000000000000 R09: 0000000000000000 [ 140.487258][ T1954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.495229][ T1954] R13: 00007f570d055038 R14: 00007f570d054fa0 R15: 00007fff5bc03188 SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of data segment failed want 0x200000000000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=5 req=346 state=1 status=67 (errno 9: Bad file descriptor) [ 145.845428][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 145.845441][ T24] audit: type=1400 audit(1762348379.061:1384): avc: denied { read write } for pid=1985 comm="syz.4.406" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 145.913726][ T24] audit: type=1400 audit(1762348379.061:1385): avc: denied { prog_load } for pid=1985 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.944756][ T24] audit: type=1400 audit(1762348379.061:1386): avc: denied { prog_load } for pid=1985 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.970308][ T24] audit: type=1400 audit(1762348379.061:1387): avc: denied { prog_load } for pid=1985 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.989881][ T24] audit: type=1400 audit(1762348379.061:1388): avc: denied { prog_load } for pid=1985 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.020337][ T24] audit: type=1400 audit(1762348379.101:1389): avc: denied { execmem } for pid=1983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 146.040019][ T24] audit: type=1404 audit(1762348379.101:1390): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 146.056176][ T24] audit: type=1400 audit(1762348379.101:1392): avc: denied { prog_load } for pid=1987 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.080183][ T24] audit: type=1400 audit(1762348379.101:1391): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[1497]" dev="pipefs" ino=1497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 146.103449][ T24] audit: type=1400 audit(1762348379.101:1393): avc: denied { bpf } for pid=1987 comm="syz.2.405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.123986][ T1988] EXT4-fs: failed to create workqueue [ 146.129419][ T1988] EXT4-fs (loop2): mount failed [ 147.089814][ T429] device bridge_slave_1 left promiscuous mode [ 147.095920][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.103296][ T429] device bridge_slave_0 left promiscuous mode [ 147.109428][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.117026][ T429] device veth1_macvtap left promiscuous mode [ 147.123053][ T429] device veth0_vlan left promiscuous mode [ 148.489213][ T429] device bridge_slave_1 left promiscuous mode [ 148.495305][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.502706][ T429] device bridge_slave_0 left promiscuous mode [ 148.508875][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.516579][ T429] device bridge_slave_1 left promiscuous mode [ 148.522712][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.530062][ T429] device bridge_slave_0 left promiscuous mode [ 148.536158][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.544294][ T429] device veth1_macvtap left promiscuous mode [ 148.550289][ T429] device veth0_vlan left promiscuous mode [ 148.556080][ T429] device veth1_macvtap left promiscuous mode [ 148.562101][ T429] device veth0_vlan left promiscuous mode [ 148.567919][ T429] device veth1_macvtap left promiscuous mode [ 148.573920][ T429] device veth0_vlan left promiscuous mode