last executing test programs: 24.591980634s ago: executing program 0 (id=2357): mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x820}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x640042, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40345410, &(0x7f0000000340)={0x1}) mkdir(0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x4c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x88500}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)="c221223f742b151f19042c195f7f08d2fb6dcaac3afb25ed849dfee31046d28bd289e1d7060baab68ab3fc428563a857cb9d12c3a9122ffcf4b52c60c8cbd429266d8e7760544c3d9e62b3558b251deb5754232863fa0ddaee2946eeab78cc2bdd64480d6b4e6f08fc12e65d783205b9668697fe617b17f27ebac998d228b56a9d516fa4431c76201cf7681115e7a1a1ad1746da4674cb4c2aa877e1dbf4fed486669be347e6311207536919f9d3376de58d50064f88df6ebc137aff71c8de7a30383c176af03c338f7d66143c0bd75026eeadf7e64e4163a1b633bc1dfe07ecafcb", 0xe2}], 0x1}, 0x2800) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setown(0xffffffffffffffff, 0x8, r0) 23.738085588s ago: executing program 0 (id=2361): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "0400000000000000"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, @prog_id}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000e02a3895"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = dup(0xffffffffffffffff) fgetxattr(r8, &(0x7f0000000180)=@known='system.sockprotoname\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x40000, 0x0}, 0x0) 23.661198763s ago: executing program 0 (id=2362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 23.392887013s ago: executing program 0 (id=2363): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgrp(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)='}($\x00'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/fscaps', 0x149a82, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000380)=0x4022) 21.459838447s ago: executing program 0 (id=2372): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "0400000000000000"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, @prog_id}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000e02a3895"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = dup(0xffffffffffffffff) fgetxattr(r8, &(0x7f0000000180)=@known='system.sockprotoname\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x40000, 0x0}, 0x0) 20.960449944s ago: executing program 0 (id=2377): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x50, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 10.570125185s ago: executing program 1 (id=2404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES8=r1, @ANYBLOB="f4890206287c3266a24e5f494db7b0d46cbf3b7fe0135ab1f9c1991b6e171e390563ed78a5383f5add5331636c1ae9a6054e1bb526ea4417455b6a8679a78b37465fc09a51b1e023794a5f9865f9b6dfbbe3cd4dfc7525e7c3ba167556a9c792", @ANYRESHEX=r2, @ANYRES16=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000980)={0x0, @local, @local}, &(0x7f0000000900)=0x78104986) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, &(0x7f0000000000)) 9.061200137s ago: executing program 1 (id=2408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000002e80)={0x548, r2, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x4f0, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x30c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8}]}, 0x548}}, 0x0) 9.060155178s ago: executing program 2 (id=2409): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ustat(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0x6, 0x9472, {{0x23, 0x4, 0x3, 0x35, 0x8c, 0x66, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, {[@noop, @rr={0x7, 0x1b, 0xcb, [@multicast2, @empty, @empty, @multicast2, @empty, @local]}, @timestamp={0x44, 0x8, 0x1a, 0x0, 0x7, [0x70]}, @end, @timestamp_addr={0x44, 0x44, 0x43, 0x1, 0x8, [{@local, 0x3}, {@multicast2, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8a}, {@local, 0x5b}, {@broadcast}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010101, 0x8}, {@local}]}, @generic={0x82, 0x8, "f01232d4999c"}, @ssrr={0x89, 0x7, 0x5c, [@dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000003c40)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x640100ff, @multicast1}, @redirect={0x12, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.059864978s ago: executing program 3 (id=2410): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @loopback, @initdev}, &(0x7f0000000540)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000580)={0x1, 0x4, 0x7, 0x14, 0x146, &(0x7f0000000a40)}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x14d9c0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, 0x0, r8) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000680)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x2, 0x5, 0xfffffffffffffffa, 0x9, 0xbe, {0x3, 0x100000000, 0x1, 0x0, 0x2, 0x8, 0x5, 0xf, 0xffff, 0x1000, 0x8, 0xee01, r8, 0x1, 0x3}}, {0x0, 0x8}}}, 0xa0) getpid() 9.059123218s ago: executing program 4 (id=2411): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1d, 0x1, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="66660f3834a30300000066ba4000b072ee65890f09b805000000b9008800000f01d966baf80cb87cfb6d87ef66bafc0cb873000000ef8ee866baa000edb9640001c00f3266baf80cb848724881ef66bafc0c83c4c1792eed0f3accdfa2", 0x5d}], 0x1, 0x0, 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00007f6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000480)="66b80d000f00d8f3450f06430f09b9e00a00000f32420f01cbc744240014010000c744240200000000ff1c24c4621547a5d0000000400fc77900c482352ca30900000067457a46", 0x47}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_procfs(r5, &(0x7f0000000180)='autogroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000010", @ANYRES16=r7, @ANYBLOB="00082abd7000fbdbdf256f00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900fdffffff0b00000005001801070000000800a100020000000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x40040d4}, 0x1) sched_setscheduler(r5, 0x3, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5efcb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000440), 0x37, 0x8800) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 7.447626367s ago: executing program 1 (id=2412): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xb, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_context(r2, &(0x7f00000004c0)='system_u:object_r:system_map_t:s0\x00', 0x22) 7.447073457s ago: executing program 2 (id=2413): bpf$MAP_CREATE(0x0, 0x0, 0xfffffc68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getuid() setresuid(0xffffffffffffffff, 0x0, r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.446758217s ago: executing program 3 (id=2414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES8=r1, @ANYBLOB="f4890206287c3266a24e5f494db7b0d46cbf3b7fe0135ab1f9c1991b6e171e390563ed78a5383f5add5331636c1ae9a6054e1bb526ea4417455b6a8679a78b37465fc09a51b1e023794a5f9865f9b6dfbbe3cd4dfc7525", @ANYRESHEX=r2, @ANYRES16=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000980)={0x0, @local, @local}, &(0x7f0000000900)=0x78104986) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, &(0x7f0000000000)) 7.446484298s ago: executing program 4 (id=2415): mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x820}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x640042, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40345410, &(0x7f0000000340)={0x1}) mkdir(0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x4c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x88500}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)="c221223f742b151f19042c195f7f08d2fb6dcaac3afb25ed849dfee31046d28bd289e1d7060baab68ab3fc428563a857cb9d12c3a9122ffcf4b52c60c8cbd429266d8e7760544c3d9e62b3558b251deb5754232863fa0ddaee2946eeab78cc2bdd64480d6b4e6f08fc12e65d783205b9668697fe617b17f27ebac998d228b56a9d516fa4431c76201cf7681115e7a1a1ad1746da4674cb4c2aa877e1dbf4fed486669be347e6311207536919f9d3376de58d50064f88df6ebc137aff71c8de7a30383c176af03c338f7d66143c0bd75026eeadf7e64e4163a1b633bc1dfe07ecafcb", 0xe2}], 0x1}, 0x2800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setown(0xffffffffffffffff, 0x8, r0) 5.734212934s ago: executing program 1 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001d80)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=0x0, @ANYRES8, @ANYRES16, @ANYRESOCT, @ANYRES8, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000780)="b44c34ebd072be5f9e5917394bb75caff8f051c5cc869d698b70a63352b02bf66955dcc041e304e8009b650c13aef1a9c6ab46ac91b0940f9cd4a2414892ec8b0244cc89fb8a9cf39ad0487c12ea9fbf9419d795fc55fb877e5fffdfed8c4e4e723df2295671494936160d3cff7ae21657c640eff086a5988d75408bb9791d7c9d4b4ffa58b24900f629766970", &(0x7f0000000840)=""/232, 0x4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000080)='rX', &(0x7f0000000500)=""/166, 0x4}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x27, &(0x7f0000000300)=0x200000a, 0x4) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close(r4) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 5.733476215s ago: executing program 2 (id=2417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) pwritev2(0xffffffffffffffff, &(0x7f0000003100)=[{&(0x7f0000000440)='\x00', 0x4000}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000000f400040000000000000020"], 0x1c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103200, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x74, r9, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4548, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x9032217390925eb6}, 0x4010) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.732733505s ago: executing program 3 (id=2418): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$eJzs3ctrXFUYAPDvTl5NGk0EQesqIGigdGJrbBUUKi5EsFDQtW1IpqFmkimZSWlCwRYR3AgqLgTddO2j7sSdj63+Fy6kpWpbrLqQkTuPdtLMTDOkM1PI7wc3c869d+ac7577OJNzuRPArjWV/slE7IuID5OIidr8JCKGKqnBiKPV9W5dPz+fTkmUy2/8kVTWuXn9/Hw0vCe1t5Z5PCJ+fC9if2ZrucX1jaW5fD63WsvPlJbPzBTXNw6cXp5bzC3mVg4fnJ09dOS5I4fvX6x//bIxfvWjV5/++ui/7z52+YOfkjga47VljXHcL1MxVdsmQ+km3OSV+11YnyVtlr3Uw3rQmfTQHKge5bEvJmKgkmphtJc1AwC65Z2IKAMAu0zi+g8Au0xETEZt/Ks+9ft/Er107eWI2FONvz6+WV0yWBuz21MZBx27mWwaGUnqG26HpiLi82/f+jKdokvjkADNXLgYEScnp7ae/5Mt9yx06pl2C8sjlZepu2Y7/0HvfJ/2f55v1v/L3O7/RJP+T3r0TpXb3fWzPfc+/jNXdlxIG2n/78WGe9tuNcRfMzlQyz1U6fMNJadO53Ppue3hiJiOoZE0f7CyavPtMX3jvxutym/s//358dtfpOVvvgMnc2VwZPN7FuZKczsKusG1ixFPDDaLP7nd/kmL/u/xbZbx2gvvf9ZqWRp/Gnd9SstPX3cUVAfKlyKeatr+d9oyaXt/4kxld5ip7xRNfPPrp2Otym9s/3RKy69/F+iFtP3H2sc/mTTer1nsvIyfL0380GrZveNvvv8PJ29W0sO1eefmSqXVgxHDyetb5x+68956vr5+Gv/0k82P/3b7f/qd8OQ24x+8+vtXtY9qGn/Fhf61/0JH7d8mUb8e3LXo8q2lgVblb6/9Zyup6dqc7Zz/7lHTHezNAAAAAAAAAAAAAAAAAAAAAAAAANC5TESMR5LJ3k5nMtls9Te8H42xTL5QLO0/VVhbWYjx76rPP83UH3U50fA81PJA9Xn49fyh2Jx/NiIeiYhPRkYr+ex8Ib/Q7+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGZvi9//T/020u/aAQBds6ffFQAAes71HwB2n86u/6NdqwcA0Dsdf/8vJ92pCADQM9u+/p/sbj0AgN4x/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXHT92LJ3Kf18/P5/mF86ury0Vzh5YyBWXsstr89n5wuqZ7GKhsJjPZecLyy0/6EL1JV8onJmNlbVzM6VcsTRTXN84sVxYWymdOL08t5g7kRvqWWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsH3F9Y2luXw+tyrRNjH6YFSjh4nkn3brDEb/a7gbEsN9K73xLDHavxMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPu/wAAAP//wJMmNg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_SUBMITURB(r4, 0xc0105500, &(0x7f0000001080)=@urb_type_iso={0x0, {0x8, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x7fffffff, 0x1000, 0x1, 0xe00d, 0xfd8d, 0x0, [{0x0, 0x7fff, 0x4}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@user_xattr}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5ff, &(0x7f0000000bc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pwritev2(r5, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 5.732443835s ago: executing program 4 (id=2419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES8=r1, @ANYBLOB="f4890206287c3266a24e5f494db7b0d46cbf3b7fe0135ab1f9c1991b6e171e390563ed78a5383f5add5331636c1ae9a6054e1bb526ea4417455b6a8679a78b37465fc09a51b1e023794a5f9865f9b6dfbbe3cd4dfc7525e7c3ba167556a9c792", @ANYRESHEX=r2, @ANYRES16=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000980)={0x0, @local, @local}, &(0x7f0000000900)=0x78104986) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, &(0x7f0000000000)) 3.925356849s ago: executing program 2 (id=2420): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000500)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@block_mode}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0xb3, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r4, 0xb, 0x1, 0x7, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x11, @val=@netkit={@link_id=r6, r7}}, 0x40) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r8, 0x4b4a, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = socket(0xa, 0x1, 0x0) ioctl(r11, 0x8936, 0x0) close(r0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.923695369s ago: executing program 3 (id=2421): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 3.923345319s ago: executing program 4 (id=2422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000002e80)={0x548, r2, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x4f0, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x30c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8}]}, 0x548}}, 0x0) 2.01645077s ago: executing program 1 (id=2423): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0xfe, 0x236, &(0x7f0000000900)="$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") llistxattr(&(0x7f0000001600)='./file2\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) close(0xffffffffffffffff) write$selinux_access(r3, &(0x7f0000001580)={'system_u:object_r:etc_mail_t:s0', 0x20, '/sbin/dhclient'}, 0x44) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.01621418s ago: executing program 2 (id=2424): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0xfe, 0x236, &(0x7f0000000900)="$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") llistxattr(&(0x7f0000001600)='./file2\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.015865981s ago: executing program 3 (id=2425): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) waitid(0x0, r0, &(0x7f0000000180), 0x0, &(0x7f0000000380)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0xfffffffd}, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x2000000, 0x92, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca7b73908b0e0245bb78fefed08041a1231bdb4729d55fa1e5b413df0c757252630588a43d899a24818d78c9b4b148de20b812fd893157d5046238c9c82df5a649a4781baeac4da0bf1151b932a24f43608a48841f8083e2bf008a0c7a6415d630057bde8c3589ec5aad0876bd342598daa8affb10c0bccb023f824d8e9fdc94ab245a", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x541b, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$inet(0x2, 0x3, 0x5) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000080)=0xfffffffa, 0x4) 2.015484661s ago: executing program 4 (id=2426): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1010000, &(0x7f0000001980)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756e695f786c6174653d302c696f636861727365743d6370313235302c757466383d302c757466383d312c757466383d302c636865636b3d72656c617865642c636865636b3d72656c617865642c757466383d302c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c00eade9911980a28d9e64ac7143b83906e08fdc397c0249fe6c1202ecca94174f756f5b4ee6a1320dffedae492ac088fd52c782b6b1ae1e47771f3a27af913fcdc27815708b923ac65da98fe8d5dec2fc54ca63881d473f3547d482204ef00ac54c27ce9ff730eff12a28a578a27d237c3acc48429d360fc56e15b4df3421d30d7df43c6b3af973eaac4f858f9547b1e9de6575a5a101ccf4255cd30e0ab8c11b5ba2b859009818ee1b149006159e6719bc1b0ffbf3931e0"], 0x1, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1ffffffffffffe3d, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='svcrdma_small_wrch_err\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40a5) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r7 = getpid() r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000380)={0x0, 0x0}) kcmp(r7, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x77, r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r11 = socket(0xa, 0x1, 0x0) ioctl(r11, 0x8916, &(0x7f0000000000)) ioctl(r11, 0x8936, &(0x7f0000000000)) 3.98636ms ago: executing program 1 (id=2427): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xb, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_context(r2, &(0x7f00000004c0)='system_u:object_r:system_map_t:s0\x00', 0x22) 1.30094ms ago: executing program 2 (id=2428): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 920.13µs ago: executing program 3 (id=2429): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x2, 0x3, 0x100000001) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="d7d40ade129dfc9183748109920b1763ebc43eabd17a2f5ed74538802d9af17fd7b045c6e91495ef6573fb588f78b11485b69d56982f03c299b799602517bfb071d0de38105620fed6ae798f9ca939327970802740c5c17107e98f41eccfe177166539884e29664c3614e7aec989cc436261dab9c82e097223637155bc7ef344ea415b20e49759aeca1cccac4da544e3b5af27b0e0eef17f", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000000)=ANY=[@ANYRESOCT=r12], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x8000000000000000}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaf368656e065b0800450000300000000000019078ac1e0001e000000104009078030000004500000000000000000000ac141400ac14140000"], 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 0s ago: executing program 4 (id=2430): mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x820}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x640042, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40345410, &(0x7f0000000340)={0x1}) mkdir(0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x4c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x88500}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setown(0xffffffffffffffff, 0x8, r0) kernel console output (not intermixed with test programs): 8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 507.857490][ T30] audit: type=1326 audit(1725158093.625:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 507.881094][ T30] audit: type=1326 audit(1725158093.625:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 507.904734][ T560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.912290][ T30] audit: type=1326 audit(1725158093.625:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 507.939008][ T8862] FAULT_INJECTION: forcing a failure. [ 507.939008][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.951977][ T560] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 507.952009][ T560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.968969][ T30] audit: type=1326 audit(1725158093.625:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 507.969227][ T560] usb 5-1: config 0 descriptor?? [ 507.992488][ T30] audit: type=1326 audit(1725158093.625:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 507.998634][ T8862] CPU: 0 PID: 8862 Comm: syz.2.2214 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 508.022776][ T2079] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 508.030062][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 508.030090][ T8862] Call Trace: [ 508.030097][ T8862] [ 508.030105][ T8862] dump_stack_lvl+0x151/0x1c0 [ 508.030134][ T8862] ? io_uring_drop_tctx_refs+0x190/0x190 [ 508.063396][ T8862] dump_stack+0x15/0x20 [ 508.067381][ T8862] should_fail+0x3c6/0x510 [ 508.071637][ T8862] should_fail_usercopy+0x1a/0x20 [ 508.076495][ T8862] _copy_from_user+0x20/0xd0 [ 508.080921][ T8862] strndup_user+0xb3/0x150 [ 508.085175][ T8862] __se_sys_mount+0x9b/0x3b0 [ 508.089603][ T8862] ? __x64_sys_mount+0xd0/0xd0 [ 508.094200][ T8862] ? debug_smp_processor_id+0x17/0x20 [ 508.099409][ T8862] __x64_sys_mount+0xbf/0xd0 [ 508.103835][ T8862] x64_sys_call+0x49d/0x9a0 [ 508.108175][ T8862] do_syscall_64+0x3b/0xb0 [ 508.112427][ T8862] ? clear_bhb_loop+0x35/0x90 [ 508.116941][ T8862] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.122669][ T8862] RIP: 0033:0x7fe906403eb9 [ 508.126928][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.146366][ T8862] RSP: 002b:00007fe905060038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.154781][ T8862] RAX: ffffffffffffffda RBX: 00007fe9065a0058 RCX: 00007fe906403eb9 [ 508.162593][ T8862] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 508.170405][ T8862] RBP: 00007fe905060090 R08: 0000000020000100 R09: 0000000000000000 [ 508.178216][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.186028][ T8862] R13: 0000000000000000 R14: 00007fe9065a0058 R15: 00007fffe6547668 [ 508.193845][ T8862] [ 508.196865][ T30] audit: type=1326 audit(1725158093.625:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 508.226321][ T30] audit: type=1326 audit(1725158093.625:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 508.350133][ T8871] loop1: detected capacity change from 0 to 1024 [ 508.371221][ T8871] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,inlinecrypt,nouid32,lazytime,usrquota,data_err=abort,max_batch_time=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 508.638017][ T8872] syz.0.2221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 508.667102][ T2079] usb 4-1: Using ep0 maxpacket: 32 [ 508.672548][ T560] lenovo 0003:17EF:6047.0067: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 508.787136][ T2079] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 508.795984][ T2079] usb 4-1: config 1 has no interface number 1 [ 508.801907][ T2079] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 508.814618][ T2079] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.977146][ T294] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 508.984841][ T2079] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.993834][ T2079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.001778][ T2079] usb 4-1: Product: syz [ 509.005752][ T2079] usb 4-1: Manufacturer: syz [ 509.010263][ T2079] usb 4-1: SerialNumber: syz [ 509.107204][ T560] lenovo 0003:17EF:6047.0067: Failed to switch middle button: -71 [ 509.125079][ T8887] loop2: detected capacity change from 0 to 256 [ 509.137216][ T560] lenovo 0003:17EF:6047.0067: Fn-lock setting failed: -71 [ 509.167206][ T560] lenovo 0003:17EF:6047.0067: Sensitivity setting failed: -71 [ 509.176479][ T560] usb 5-1: USB disconnect, device number 56 [ 509.347198][ T2079] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 509.367330][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.377463][ T294] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 509.386420][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.423970][ T2079] usb 4-1: USB disconnect, device number 70 [ 509.484169][ T294] usb 2-1: config 0 descriptor?? [ 509.848060][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'. [ 510.084712][ T8904] loop2: detected capacity change from 0 to 128 [ 510.338582][ T294] lenovo 0003:17EF:6047.0068: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 510.367236][ T560] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 510.456494][ T8912] FAULT_INJECTION: forcing a failure. [ 510.456494][ T8912] name failslab, interval 1, probability 0, space 0, times 0 [ 510.468990][ T8912] CPU: 1 PID: 8912 Comm: syz.0.2232 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 510.478620][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 510.488515][ T8912] Call Trace: [ 510.491640][ T8912] [ 510.494417][ T8912] dump_stack_lvl+0x151/0x1c0 [ 510.498929][ T8912] ? io_uring_drop_tctx_refs+0x190/0x190 [ 510.504396][ T8912] ? avc_denied+0x1b0/0x1b0 [ 510.508737][ T8912] dump_stack+0x15/0x20 [ 510.512728][ T8912] should_fail+0x3c6/0x510 [ 510.516981][ T8912] __should_failslab+0xa4/0xe0 [ 510.521582][ T8912] ? fuse_get_req+0x3d2/0xae0 [ 510.526095][ T8912] should_failslab+0x9/0x20 [ 510.530449][ T8912] slab_pre_alloc_hook+0x37/0xd0 [ 510.535207][ T8912] ? fuse_get_req+0x3d2/0xae0 [ 510.539721][ T8912] kmem_cache_alloc+0x44/0x200 [ 510.544323][ T8912] fuse_get_req+0x3d2/0xae0 [ 510.548664][ T8912] ? fuse_simple_request+0x1690/0x1690 [ 510.553955][ T8912] ? 0xffffffffa0010cd8 [ 510.557948][ T8912] ? is_bpf_text_address+0x172/0x190 [ 510.563075][ T8912] ? stack_trace_save+0x1c0/0x1c0 [ 510.567928][ T8912] ? __kernel_text_address+0x9b/0x110 [ 510.573139][ T8912] fuse_simple_request+0x118/0x1690 [ 510.578173][ T8912] ? fuse_put_request+0x2d0/0x2d0 [ 510.583035][ T8912] ? stack_trace_save+0x113/0x1c0 [ 510.587893][ T8912] ? rwsem_write_trylock+0x153/0x340 [ 510.593012][ T8912] ? __stack_depot_save+0x34/0x470 [ 510.597959][ T8912] ? rwsem_mark_wake+0x770/0x770 [ 510.602735][ T8912] ? kmem_cache_free+0x116/0x2e0 [ 510.607507][ T8912] ? kasan_set_track+0x5d/0x70 [ 510.612109][ T8912] fuse_file_llseek+0x9d4/0x2e50 [ 510.616968][ T8912] ? kstrtouint_from_user+0x20a/0x2a0 [ 510.622180][ T8912] ? fuse_writepage_free+0x280/0x280 [ 510.627298][ T8912] ? __kasan_check_write+0x14/0x20 [ 510.632249][ T8912] ? proc_fail_nth_write+0x20b/0x290 [ 510.637365][ T8912] ? selinux_file_permission+0x2c4/0x570 [ 510.642832][ T8912] ? proc_fail_nth_read+0x210/0x210 [ 510.647873][ T8912] ? fsnotify_perm+0x6a/0x5d0 [ 510.652398][ T8912] ? mutex_unlock+0xb2/0x260 [ 510.656810][ T8912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 510.663243][ T8912] ? __mutex_lock_slowpath+0x10/0x10 [ 510.668357][ T8912] ? __kasan_check_write+0x14/0x20 [ 510.673299][ T8912] ? mutex_lock+0xb6/0x1e0 [ 510.677679][ T8912] ? wait_for_completion_killable_timeout+0x10/0x10 [ 510.684099][ T8912] ? __fdget_pos+0x2e7/0x3a0 [ 510.688522][ T8912] __x64_sys_lseek+0x160/0x1f0 [ 510.693133][ T8912] x64_sys_call+0x60/0x9a0 [ 510.697374][ T8912] do_syscall_64+0x3b/0xb0 [ 510.701629][ T8912] ? clear_bhb_loop+0x35/0x90 [ 510.706144][ T8912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 510.711876][ T8912] RIP: 0033:0x7f970db70eb9 [ 510.716124][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.718313][ T560] usb 4-1: Using ep0 maxpacket: 16 [ 510.735571][ T8912] RSP: 002b:00007f970c7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 510.735605][ T8912] RAX: ffffffffffffffda RBX: 00007f970dd0cf80 RCX: 00007f970db70eb9 [ 510.735620][ T8912] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000008 [ 510.735633][ T8912] RBP: 00007f970c7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 510.772202][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.780004][ T8912] R13: 0000000000000000 R14: 00007f970dd0cf80 R15: 00007ffcce5545c8 [ 510.787822][ T8912] [ 510.802717][ T294] lenovo 0003:17EF:6047.0068: Failed to switch middle button: -71 [ 510.857170][ T294] lenovo 0003:17EF:6047.0068: Fn-lock setting failed: -71 [ 510.877136][ T294] lenovo 0003:17EF:6047.0068: Sensitivity setting failed: -71 [ 510.877151][ T560] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.877182][ T560] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.901706][ T294] usb 2-1: USB disconnect, device number 52 [ 510.905338][ T560] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 510.923973][ T560] usb 4-1: config 0 interface 0 has no altsetting 0 [ 510.930645][ T560] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 510.939915][ T560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.950642][ T560] usb 4-1: config 0 descriptor?? [ 511.025033][ T8918] loop2: detected capacity change from 0 to 16 [ 511.054451][ T8916] loop4: detected capacity change from 0 to 40427 [ 511.097968][ T8918] erofs: (device loop2): mounted with root inode @ nid 36. [ 511.102246][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 511.105136][ T8916] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 511.126559][ T8916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 511.138667][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 511.153042][ T8916] F2FS-fs (loop4): invalid crc value [ 511.167769][ T314] udevd[314]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 511.182374][ T8916] F2FS-fs (loop4): Found nat_bits in checkpoint [ 511.200976][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 511.213610][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 511.213626][ T30] audit: type=1326 audit(1725158097.035:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.245117][ T30] audit: type=1400 audit(1725158097.035:2213): avc: denied { mounton } for pid=8917 comm="syz.2.2234" path="/70/file2/file0" dev="loop2" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 511.268817][ T30] audit: type=1326 audit(1725158097.045:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.292706][ T30] audit: type=1326 audit(1725158097.075:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f970db67e67 code=0x7ffc0000 [ 511.316188][ T30] audit: type=1326 audit(1725158097.075:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f970db0c839 code=0x7ffc0000 [ 511.344560][ T30] audit: type=1326 audit(1725158097.075:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.357807][ T8916] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 511.368119][ T30] audit: type=1326 audit(1725158097.075:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.397976][ T8916] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 511.398734][ T30] audit: type=1326 audit(1725158097.075:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.409421][ T560] hid-generic 0003:045E:05DA.0069: unbalanced collection at end of report description [ 511.443250][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 511.458213][ T30] audit: type=1326 audit(1725158097.075:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.468085][ T560] hid-generic: probe of 0003:045E:05DA.0069 failed with error -22 [ 511.483993][ T30] audit: type=1326 audit(1725158097.075:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.0.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 511.517109][ T2294] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 511.541952][ T8916] overlayfs: invalid redirect ((null)) [ 511.555249][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 511.564821][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 511.687230][ T8934] loop2: detected capacity change from 0 to 2048 [ 511.832528][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 511.910828][ T8934] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 511.962146][ T8933] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 511.976930][ T8933] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 511.978742][ T8905] UDC core: couldn't find an available UDC or it's busy: -16 [ 511.989267][ T8933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 511.989267][ T8933] [ 511.996478][ T8905] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 512.005916][ T8933] EXT4-fs (loop2): Total free blocks count 0 [ 512.019121][ T8933] EXT4-fs (loop2): Free/Dirty block details [ 512.024838][ T8933] EXT4-fs (loop2): free_blocks=2415919104 [ 512.030408][ T8933] EXT4-fs (loop2): dirty_blocks=16 [ 512.035335][ T8933] EXT4-fs (loop2): Block reservation details [ 512.041186][ T8933] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 512.068289][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 512.597164][ T325] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 513.167219][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 513.187521][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 513.205599][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 513.219659][ T325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.232872][ T325] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.241924][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.253691][ T325] usb 5-1: config 0 descriptor?? [ 513.260538][ T1234] usb 4-1: USB disconnect, device number 71 [ 513.277215][ T8944] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 513.617081][ T1234] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 513.857084][ T1234] usb 4-1: Using ep0 maxpacket: 32 [ 513.940324][ T8944] loop4: detected capacity change from 0 to 512 [ 513.959752][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 513.977325][ T1234] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.987450][ T1234] usb 4-1: config 1 has no interface number 1 [ 513.993355][ T1234] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 513.997102][ T2294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.008711][ T8944] EXT4-fs (loop4): 1 truncate cleaned up [ 514.016811][ T2294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.024255][ T8944] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 514.031784][ T2294] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.031839][ T2294] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 514.031865][ T2294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.042914][ T1234] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.093710][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 514.121221][ T2294] usb 2-1: config 0 descriptor?? [ 514.157219][ T325] usbhid 5-1:0.0: can't add hid device: -71 [ 514.163741][ T325] usbhid: probe of 5-1:0.0 failed with error -71 [ 514.175238][ T325] usb 5-1: USB disconnect, device number 57 [ 514.247149][ T1234] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.256131][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.264877][ T1234] usb 4-1: Product: syz [ 514.269310][ T1234] usb 4-1: Manufacturer: syz [ 514.273956][ T1234] usb 4-1: SerialNumber: syz [ 514.287104][ T2294] usbhid 2-1:0.0: can't add hid device: -71 [ 514.293463][ T2294] usbhid: probe of 2-1:0.0 failed with error -71 [ 514.308045][ T2294] usb 2-1: USB disconnect, device number 53 [ 514.597238][ T1234] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 514.622589][ T1234] usb 4-1: USB disconnect, device number 72 [ 515.944335][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 515.967280][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 516.847574][ T2294] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 517.071281][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 517.184824][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.191776][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.199472][ T8993] device bridge0 left promiscuous mode [ 517.255641][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.262537][ T8993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.269680][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.276557][ T8993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.283754][ T8993] device bridge0 entered promiscuous mode [ 517.302862][ T8993] loop4: detected capacity change from 0 to 2048 [ 517.314606][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 517.374358][ T8997] loop1: detected capacity change from 0 to 2048 [ 517.384543][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 517.396367][ T8993] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.410000][ T8993] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 517.424893][ T8993] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 517.437123][ T8993] EXT4-fs (loop4): This should not happen!! Data will be lost [ 517.437123][ T8993] [ 517.446569][ T8993] EXT4-fs (loop4): Total free blocks count 0 [ 517.452413][ T8993] EXT4-fs (loop4): Free/Dirty block details [ 517.458122][ T8993] EXT4-fs (loop4): free_blocks=2415919104 [ 517.463640][ T8993] EXT4-fs (loop4): dirty_blocks=16 [ 517.468648][ T8993] EXT4-fs (loop4): Block reservation details [ 517.469013][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 517.469031][ T30] audit: type=1400 audit(1725158103.265:2353): avc: denied { read } for pid=9004 comm="syz.2.2255" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 517.474385][ T8993] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 517.511167][ T30] audit: type=1400 audit(1725158103.265:2354): avc: denied { open } for pid=9004 comm="syz.2.2255" path="/76/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 517.536482][ T30] audit: type=1400 audit(1725158103.265:2355): avc: denied { ioctl } for pid=9004 comm="syz.2.2255" path="/76/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 517.577181][ T2294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.601348][ T2294] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 517.610719][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 517.622385][ T2294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.636856][ T2294] usb 1-1: config 0 descriptor?? [ 517.690284][ T9009] loop1: detected capacity change from 0 to 512 [ 517.767578][ T9009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 517.775934][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 517.779065][ T9009] EXT4-fs (loop1): 1 truncate cleaned up [ 517.788723][ T6] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 517.794384][ T9009] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.811922][ T1234] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 517.851309][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 517.861408][ T9012] loop4: detected capacity change from 0 to 512 [ 517.874377][ T314] udevd[314]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 517.892600][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 517.907458][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 517.910559][ T9012] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.929522][ T9012] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038 (0x7fffffff) [ 517.942287][ T30] audit: type=1400 audit(1725158103.765:2356): avc: denied { getopt } for pid=9011 comm="syz.4.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 517.945990][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 517.985247][ T30] audit: type=1400 audit(1725158103.805:2357): avc: denied { write } for pid=9011 comm="syz.4.2257" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 518.000453][ T9012] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.2257: corrupted inode contents [ 518.019768][ T9012] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz.4.2257: mark_inode_dirty error [ 518.031161][ T9012] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.2257: corrupted inode contents [ 518.043133][ T9012] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.2257: mark_inode_dirty error [ 518.056415][ T30] audit: type=1400 audit(1725158103.885:2358): avc: denied { read } for pid=9011 comm="syz.4.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 518.128783][ T2294] lenovo 0003:17EF:6047.006A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 518.187227][ T1234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.205009][ T1234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.210167][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 518.225138][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 518.236071][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 518.248934][ T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 518.258104][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.266596][ T6] usb 3-1: config 0 descriptor?? [ 518.327183][ T1234] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 518.336063][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.343974][ T1234] usb 4-1: SerialNumber: syz [ 518.597157][ T2294] lenovo 0003:17EF:6047.006A: Failed to switch middle button: -71 [ 518.607892][ T1234] usb 4-1: 0:2 : does not exist [ 518.627204][ T2294] lenovo 0003:17EF:6047.006A: Fn-lock setting failed: -71 [ 518.647162][ T2294] lenovo 0003:17EF:6047.006A: Sensitivity setting failed: -71 [ 518.656702][ T2294] usb 1-1: USB disconnect, device number 57 [ 518.731909][ T9026] loop4: detected capacity change from 0 to 256 [ 518.777381][ T9026] exfat: Bad value for 'gid' [ 518.849573][ T9026] loop4: detected capacity change from 0 to 2048 [ 518.887141][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 518.892993][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 518.900599][ T6] usb 3-1: USB disconnect, device number 53 [ 518.918797][ T9026] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 519.030228][ T1234] usb 4-1: USB disconnect, device number 73 [ 519.293497][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 519.303113][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 519.353047][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 520.543942][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 520.579803][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2263'. [ 521.112112][ T30] audit: type=1400 audit(1725158106.935:2359): avc: denied { relabelfrom } for pid=9049 comm="syz.3.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 521.173215][ T30] audit: type=1400 audit(1725158106.975:2360): avc: denied { relabelto } for pid=9049 comm="syz.3.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 521.193594][ T6024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 521.212175][ T30] audit: type=1400 audit(1725158107.015:2361): avc: denied { rmdir } for pid=6024 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 521.227339][ T6024] EXT4-fs (loop4): Remounting filesystem read-only [ 521.241694][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.248686][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.255984][ T9061] device bridge0 left promiscuous mode [ 521.291703][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.298585][ T9061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.305706][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.312477][ T9061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.320455][ T9061] device bridge0 entered promiscuous mode [ 521.360810][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2266'. [ 521.518933][ T9061] loop2: detected capacity change from 0 to 2048 [ 521.645344][ T9061] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.659606][ T9061] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 521.674304][ T9061] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 521.686485][ T9061] EXT4-fs (loop2): This should not happen!! Data will be lost [ 521.686485][ T9061] [ 521.695994][ T9061] EXT4-fs (loop2): Total free blocks count 0 [ 521.702065][ T9061] EXT4-fs (loop2): Free/Dirty block details [ 521.708092][ T9061] EXT4-fs (loop2): free_blocks=2415919104 [ 521.714080][ T9061] EXT4-fs (loop2): dirty_blocks=16 [ 521.719363][ T9061] EXT4-fs (loop2): Block reservation details [ 521.725530][ T9061] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 521.767105][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 522.049522][ T30] audit: type=1326 audit(1725158107.875:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62dcaaeb9 code=0x7ffc0000 [ 522.100626][ T9078] loop2: detected capacity change from 0 to 2048 [ 522.171171][ T9078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.413977][ T9085] usb usb8: usbfs: process 9085 (syz.2.2272) did not claim interface 0 before use [ 522.478872][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 522.478890][ T30] audit: type=1326 audit(1725158108.305:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa62dca1e67 code=0x7ffc0000 [ 522.524038][ T30] audit: type=1326 audit(1725158108.345:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa62dc46839 code=0x7ffc0000 [ 522.551801][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 522.565840][ T30] audit: type=1326 audit(1725158108.345:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa62dca1e67 code=0x7ffc0000 [ 522.590118][ T30] audit: type=1326 audit(1725158108.345:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa62dc46839 code=0x7ffc0000 [ 522.614138][ T30] audit: type=1326 audit(1725158108.345:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa62dcaaeb9 code=0x7ffc0000 [ 522.643405][ T9087] loop4: detected capacity change from 0 to 256 [ 522.650678][ T30] audit: type=1326 audit(1725158108.385:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa62dca1e67 code=0x7ffc0000 [ 522.674673][ T30] audit: type=1326 audit(1725158108.385:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa62dc46839 code=0x7ffc0000 [ 522.698057][ T30] audit: type=1326 audit(1725158108.385:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa62dcaaeb9 code=0x7ffc0000 [ 522.723891][ T30] audit: type=1326 audit(1725158108.415:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa62dca1e67 code=0x7ffc0000 [ 522.740228][ T314] udevd[314]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 522.747978][ T2294] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 522.967587][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2275'. [ 522.979679][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2275'. [ 523.033932][ T30] audit: type=1326 audit(1725158108.415:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.1.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa62dc46839 code=0x7ffc0000 [ 523.071266][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 523.216160][ T9101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871936 (1073743872 ns) > initial count (1073742080 ns). Using initial count to start timer. [ 523.427876][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 523.467156][ T2294] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 523.483820][ T2294] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 523.492771][ T2294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 523.501954][ T2294] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 523.521255][ T2294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 523.585231][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.592390][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.630178][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.637073][ T9113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.644272][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.651129][ T9113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.658542][ T9113] device bridge0 entered promiscuous mode [ 523.885936][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 523.887842][ T2294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 523.921964][ T2294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 523.986759][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 523.998479][ T600] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 524.222642][ T2294] usb 3-1: string descriptor 0 read error: -22 [ 524.233823][ T2294] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 524.243754][ T2294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.267103][ T804] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 524.377328][ T600] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 524.426978][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 524.447360][ T600] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 524.449419][ T2294] usb 3-1: config 0 descriptor?? [ 524.471876][ T600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.478725][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 524.507616][ T2294] hub 3-1:0.0: bad descriptor, ignoring hub [ 524.513440][ T2294] hub: probe of 3-1:0.0 failed with error -5 [ 524.520986][ T2294] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input82 [ 524.527917][ T600] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 524.557097][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 524.677197][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.687973][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.697519][ T804] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 524.706339][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.726538][ T804] usb 1-1: config 0 descriptor?? [ 524.735718][ T9111] UDC core: couldn't find an available UDC or it's busy: -16 [ 524.742950][ T9111] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 524.747103][ T320] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 524.758052][ T600] usb 5-1: USB disconnect, device number 58 [ 525.037119][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 525.125132][ T9135] loop4: detected capacity change from 0 to 16 [ 525.187155][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.198436][ T9135] erofs: (device loop4): mounted with root inode @ nid 36. [ 525.206604][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7d06.tmp-b7:4' failed: Read-only file system [ 525.221313][ T804] hid-multitouch 0003:1FD2:6007.006B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 525.222245][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.250499][ T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 525.263320][ T320] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 525.272306][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.277143][ T600] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 525.284453][ T320] usb 4-1: config 0 descriptor?? [ 525.549291][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 525.573943][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 525.637176][ T320] usbhid 4-1:0.0: can't add hid device: -71 [ 525.643021][ T320] usbhid: probe of 4-1:0.0 failed with error -71 [ 525.647134][ T600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.654098][ T320] usb 4-1: USB disconnect, device number 74 [ 525.667097][ T600] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.679864][ T600] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 525.688823][ T600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.700359][ T600] usb 2-1: config 0 descriptor?? [ 525.794619][ T804] usb 3-1: USB disconnect, device number 54 [ 525.801311][ T600] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 525.903710][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 525.914995][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 526.347077][ T804] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 526.631700][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 527.487228][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2292'. [ 527.521567][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 527.841077][ T804] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 527.860042][ T9163] loop4: detected capacity change from 0 to 512 [ 527.874406][ T6] usb 1-1: USB disconnect, device number 58 [ 527.882957][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 527.894896][ T804] usb 3-1: config 0 has no interface number 0 [ 527.901151][ T804] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.912353][ T804] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.922172][ T804] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 527.931072][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.940251][ T804] usb 3-1: config 0 descriptor?? [ 527.947102][ T9163] ------------[ cut here ]------------ [ 527.952381][ T9163] WARNING: CPU: 0 PID: 9163 at mm/page_alloc.c:5754 __alloc_pages+0x770/0x8f0 [ 527.961618][ T9163] Modules linked in: [ 527.964918][ T314] udevd[314]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 527.965540][ T9163] CPU: 1 PID: 9163 Comm: syz.4.2294 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 527.995642][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 528.009765][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 528.046556][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 528.058425][ T9163] RIP: 0010:__alloc_pages+0x770/0x8f0 [ 528.063777][ T9163] Code: df e9 aa fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fb ff ff e8 0f 13 05 00 48 ba 00 00 00 00 00 fc ff df e9 a6 fb ff ff <0f> 0b 45 31 e4 e9 73 fc ff ff 48 8d 4c 24 40 80 e1 07 80 c1 03 38 [ 528.069443][ T320] usb 2-1: USB disconnect, device number 54 [ 528.083674][ T9163] RSP: 0018:ffffc900010deee0 EFLAGS: 00010246 [ 528.094948][ T9163] RAX: 0000000000000004 RBX: 0000000000040c40 RCX: ffffc900010def03 [ 528.103120][ T9163] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc900010def78 [ 528.112469][ T9163] RBP: ffffc900010defe8 R08: dffffc0000000000 R09: ffffc900010def50 [ 528.115948][ T9173] loop1: detected capacity change from 0 to 16 [ 528.120329][ T9163] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 528.134151][ T9163] R13: 1ffff9200021bde4 R14: 1ffff9200021bde6 R15: 1ffff9200021bde0 [ 528.142559][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 528.142577][ T30] audit: type=1326 audit(1725158113.965:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.152192][ T9163] FS: 00007f02a24156c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 528.172405][ T30] audit: type=1326 audit(1725158113.965:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.270226][ T9149] UDC core: couldn't find an available UDC or it's busy: -16 [ 528.280311][ T9149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 528.317227][ T9163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.326503][ T9163] CR2: 0000001b33117ff8 CR3: 00000001197bf000 CR4: 00000000003506b0 [ 528.348750][ T9173] erofs: (device loop1): mounted with root inode @ nid 36. [ 528.393430][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 528.407959][ T30] audit: type=1326 audit(1725158113.965:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f970db67e67 code=0x7ffc0000 [ 528.421809][ T9163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 528.433616][ T30] audit: type=1326 audit(1725158113.965:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f970db0c839 code=0x7ffc0000 [ 528.446114][ T9173] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2298'. [ 528.468900][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 528.484328][ T9163] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 528.493220][ T9149] 9pnet: Insufficient options for proto=fd [ 528.494899][ T30] audit: type=1326 audit(1725158113.965:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.522286][ T9163] Call Trace: [ 528.525548][ T9163] [ 528.528371][ T9163] ? show_regs+0x58/0x60 [ 528.532457][ T30] audit: type=1326 audit(1725158113.965:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.538509][ T9163] ? __warn+0x160/0x2f0 [ 528.559830][ T30] audit: type=1326 audit(1725158113.965:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.559914][ T9163] ? __alloc_pages+0x770/0x8f0 [ 528.583906][ T30] audit: type=1326 audit(1725158113.965:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.588041][ T9163] ? report_bug+0x3d9/0x5b0 [ 528.611218][ T30] audit: type=1326 audit(1725158113.975:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.615979][ T9163] ? __alloc_pages+0x770/0x8f0 [ 528.639348][ T30] audit: type=1326 audit(1725158113.975:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.0.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970db70eb9 code=0x7ffc0000 [ 528.644093][ T9163] ? handle_bug+0x41/0x70 [ 528.671387][ T9163] ? exc_invalid_op+0x1b/0x50 [ 528.676230][ T9163] ? asm_exc_invalid_op+0x1b/0x20 [ 528.681578][ T9163] ? __alloc_pages+0x770/0x8f0 [ 528.686534][ T9163] ? prep_new_page+0x110/0x110 [ 528.691193][ T9163] ? ext4_expand_extra_isize_ea+0xd41/0x1bb0 [ 528.697062][ T9163] ? __ext4_mark_inode_dirty+0x4af/0x7a0 [ 528.702527][ T9163] ? evict+0x2a3/0x630 [ 528.706430][ T9163] ? iput+0x63b/0x7e0 [ 528.710328][ T9163] ? ext4_process_orphan+0x290/0x2f0 [ 528.715376][ T9163] ? vfs_get_tree+0x88/0x290 [ 528.719858][ T9163] ? do_new_mount+0x2ba/0xb30 [ 528.724330][ T9163] ? path_mount+0x671/0x1070 [ 528.728771][ T9163] ? __se_sys_mount+0x2c4/0x3b0 [ 528.733426][ T9163] ? __x64_sys_mount+0xbf/0xd0 [ 528.738310][ T9163] ? do_syscall_64+0x3b/0xb0 [ 528.742742][ T9163] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 528.748707][ T9163] kmalloc_order+0x4a/0x160 [ 528.753117][ T9163] kmalloc_order_trace+0x1a/0xb0 [ 528.768872][ T9163] __kmalloc+0x19c/0x270 [ 528.773029][ T9163] kvmalloc_node+0x121/0x4d0 [ 528.778084][ T9163] ? vm_mmap+0xb0/0xb0 [ 528.782126][ T9163] ? __kasan_kmalloc+0x9/0x10 [ 528.787371][ T9163] ? __kmalloc+0x13a/0x270 [ 528.791679][ T9163] ? ext4_expand_extra_isize_ea+0xd41/0x1bb0 [ 528.794590][ T804] greenasia 0003:0E8F:0012.006C: item fetching failed at offset 0/3 [ 528.798517][ T9163] ext4_expand_extra_isize_ea+0xe4f/0x1bb0 [ 528.812180][ T9163] ? __kasan_check_read+0x11/0x20 [ 528.819048][ T804] greenasia 0003:0E8F:0012.006C: parse failed [ 528.820491][ T314] udevd[314]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 528.824964][ T804] greenasia: probe of 0003:0E8F:0012.006C failed with error -22 [ 528.830546][ T9163] ? ext4_xattr_set+0x3d0/0x3d0 [ 528.848918][ T9163] ? rwsem_write_trylock+0x153/0x340 [ 528.854159][ T9163] ? dquot_initialize_needed+0x13d/0x370 [ 528.861818][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 528.861968][ T9163] __ext4_expand_extra_isize+0x303/0x3f0 [ 528.879709][ T9163] __ext4_mark_inode_dirty+0x4af/0x7a0 [ 528.885435][ T9163] ? sb_end_intwrite+0x120/0x120 [ 528.890620][ T9163] ? ext4_journal_check_start+0x16c/0x230 [ 528.896573][ T9163] ? __kasan_check_read+0x11/0x20 [ 528.901877][ T9163] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 528.908235][ T9163] ? ext4_evict_inode+0xb8d/0x14e0 [ 528.913329][ T9163] ext4_evict_inode+0xc30/0x14e0 [ 528.918759][ T9163] ? _raw_spin_unlock+0x4d/0x70 [ 528.923619][ T9163] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 528.929995][ T9163] ? __kasan_check_write+0x14/0x20 [ 528.935955][ T9163] ? _raw_spin_lock+0xa4/0x1b0 [ 528.940863][ T9163] ? _raw_spin_trylock_bh+0x190/0x190 [ 528.961783][ T9163] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 528.971402][ T9163] evict+0x2a3/0x630 [ 528.975886][ T9163] iput+0x63b/0x7e0 [ 528.979843][ T9163] ext4_process_orphan+0x290/0x2f0 [ 528.984842][ T9163] ext4_orphan_cleanup+0x909/0x1060 [ 528.990186][ T9163] ? ext4_orphan_del+0xc50/0xc50 [ 528.996953][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 529.007082][ T9163] ? errseq_check_and_advance+0x64/0x130 [ 529.034282][ T9163] ext4_fill_super+0x8dc8/0x96e0 [ 529.047119][ T9163] ? ext4_mount+0x40/0x40 [ 529.056614][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 529.067088][ T9163] ? vscnprintf+0x80/0x80 [ 529.083934][ T9188] loop1: detected capacity change from 0 to 512 [ 529.090106][ T9163] ? set_blocksize+0x1f0/0x380 [ 529.095876][ T9163] ? sb_set_blocksize+0xa8/0xf0 [ 529.101368][ T9163] mount_bdev+0x282/0x3b0 [ 529.105602][ T9163] ? ext4_mount+0x40/0x40 [ 529.109990][ T9163] ext4_mount+0x34/0x40 [ 529.114171][ T9163] legacy_get_tree+0xf1/0x190 [ 529.119399][ T9163] ? ext4_errno_to_code+0x140/0x140 [ 529.124520][ T9163] vfs_get_tree+0x88/0x290 [ 529.129195][ T9163] do_new_mount+0x2ba/0xb30 [ 529.133587][ T9163] ? do_move_mount_old+0x160/0x160 [ 529.140143][ T9163] ? security_capable+0x87/0xb0 [ 529.144836][ T9163] ? ns_capable+0x89/0xe0 [ 529.149532][ T9163] path_mount+0x671/0x1070 [ 529.153914][ T9163] __se_sys_mount+0x2c4/0x3b0 [ 529.158495][ T9163] ? __x64_sys_mount+0xd0/0xd0 [ 529.163336][ T9163] ? debug_smp_processor_id+0x17/0x20 [ 529.168655][ T9163] __x64_sys_mount+0xbf/0xd0 [ 529.173074][ T9163] x64_sys_call+0x49d/0x9a0 [ 529.177436][ T9163] do_syscall_64+0x3b/0xb0 [ 529.182050][ T9163] ? clear_bhb_loop+0x35/0x90 [ 529.186556][ T9163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.192483][ T9163] RIP: 0033:0x7f02a379965a [ 529.196733][ T9163] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.203394][ T9188] EXT4-fs (loop1): 1 orphan inode deleted [ 529.222944][ T9188] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 529.243637][ T9163] RSP: 002b:00007f02a2414e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 529.277540][ T9163] RAX: ffffffffffffffda RBX: 00007f02a2414ef0 RCX: 00007f02a379965a [ 529.285397][ T9163] RDX: 00000000200002c0 RSI: 00000000200001c0 RDI: 00007f02a2414eb0 [ 529.312200][ T9188] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038 (0x7fffffff) [ 529.472604][ T9163] RBP: 00000000200002c0 R08: 00007f02a2414ef0 R09: 0000000000800700 [ 529.543949][ T9163] R10: 0000000000800700 R11: 0000000000000246 R12: 00000000200001c0 [ 529.559105][ T9163] R13: 00007f02a2414eb0 R14: 000000000000044b R15: 0000000020000300 [ 529.566932][ T9163] [ 529.570127][ T9163] ---[ end trace 90200134323152bd ]--- [ 529.575608][ T9163] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 529.576136][ T804] usb 3-1: USB disconnect, device number 55 [ 529.588533][ T9163] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.2294: Parent and EA inode have the same ino 15 [ 529.607461][ T9163] EXT4-fs (loop4): 1 orphan inode deleted [ 529.613084][ T9163] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,grpjquota=,usrjquota=,,errors=continue. Quota mode: none. [ 530.708031][ T9211] 9pnet: Insufficient options for proto=fd [ 530.826574][ T9220] FAULT_INJECTION: forcing a failure. [ 530.826574][ T9220] name failslab, interval 1, probability 0, space 0, times 0 [ 530.841539][ T9220] CPU: 1 PID: 9220 Comm: syz.2.2312 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 530.852743][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 530.862637][ T9220] Call Trace: [ 530.865782][ T9220] [ 530.868539][ T9220] dump_stack_lvl+0x151/0x1c0 [ 530.873054][ T9220] ? io_uring_drop_tctx_refs+0x190/0x190 [ 530.878520][ T9220] dump_stack+0x15/0x20 [ 530.882509][ T9220] should_fail+0x3c6/0x510 [ 530.886861][ T9220] __should_failslab+0xa4/0xe0 [ 530.891454][ T9220] ? alloc_vmap_area+0x19e/0x1a80 [ 530.896309][ T9220] should_failslab+0x9/0x20 [ 530.900654][ T9220] slab_pre_alloc_hook+0x37/0xd0 [ 530.905424][ T9220] ? alloc_vmap_area+0x19e/0x1a80 [ 530.910283][ T9220] kmem_cache_alloc+0x44/0x200 [ 530.914892][ T9220] alloc_vmap_area+0x19e/0x1a80 [ 530.919575][ T9220] ? vm_map_ram+0xa90/0xa90 [ 530.923911][ T9220] ? __kasan_kmalloc+0x9/0x10 [ 530.928424][ T9220] ? __get_vm_area_node+0x117/0x360 [ 530.933458][ T9220] __get_vm_area_node+0x158/0x360 [ 530.938320][ T9220] __vmalloc_node_range+0xe2/0x8d0 [ 530.943264][ T9220] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 530.948652][ T9220] ? selinux_capset+0xf0/0xf0 [ 530.953163][ T9220] ? kstrtouint_from_user+0x20a/0x2a0 [ 530.958374][ T9220] ? kstrtol_from_user+0x310/0x310 [ 530.963316][ T9220] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 530.968697][ T9220] __vmalloc+0x7a/0x90 [ 530.972603][ T9220] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 530.977983][ T9220] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 530.983193][ T9220] ? bpf_prog_alloc+0x15/0x1e0 [ 530.987794][ T9220] bpf_prog_alloc+0x1f/0x1e0 [ 530.992221][ T9220] bpf_prog_load+0x800/0x1b50 [ 530.996735][ T9220] ? map_freeze+0x370/0x370 [ 531.001074][ T9220] ? selinux_bpf+0xcb/0x100 [ 531.005410][ T9220] ? security_bpf+0x82/0xb0 [ 531.009750][ T9220] __sys_bpf+0x4bc/0x760 [ 531.013831][ T9220] ? fput_many+0x160/0x1b0 [ 531.018086][ T9220] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 531.023294][ T9220] ? debug_smp_processor_id+0x17/0x20 [ 531.028498][ T9220] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 531.034398][ T9220] __x64_sys_bpf+0x7c/0x90 [ 531.038653][ T9220] x64_sys_call+0x87f/0x9a0 [ 531.042994][ T9220] do_syscall_64+0x3b/0xb0 [ 531.047248][ T9220] ? clear_bhb_loop+0x35/0x90 [ 531.051757][ T9220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.057491][ T9220] RIP: 0033:0x7fe906403eb9 [ 531.061750][ T9220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.081268][ T9220] RSP: 002b:00007fe905081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.089513][ T9220] RAX: ffffffffffffffda RBX: 00007fe90659ff80 RCX: 00007fe906403eb9 [ 531.097325][ T9220] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 531.105221][ T9220] RBP: 00007fe905081090 R08: 0000000000000000 R09: 0000000000000000 [ 531.113177][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.120969][ T9220] R13: 0000000000000000 R14: 00007fe90659ff80 R15: 00007fffe6547668 [ 531.128798][ T9220] [ 531.133529][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 531.146426][ T9220] syz.2.2312: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 531.163050][ T9220] CPU: 0 PID: 9220 Comm: syz.2.2312 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 531.174164][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 531.184058][ T9220] Call Trace: [ 531.187179][ T9220] [ 531.189953][ T9220] dump_stack_lvl+0x151/0x1c0 [ 531.194470][ T9220] ? io_uring_drop_tctx_refs+0x190/0x190 [ 531.199935][ T9220] ? pr_cont_kernfs_name+0xf0/0x100 [ 531.204970][ T9220] dump_stack+0x15/0x20 [ 531.208965][ T9220] warn_alloc+0x21a/0x390 [ 531.213131][ T9220] ? slab_free_freelist_hook+0xbd/0x190 [ 531.218514][ T9220] ? zone_watermark_ok_safe+0x270/0x270 [ 531.223891][ T9220] ? __get_vm_area_node+0x16e/0x360 [ 531.228928][ T9220] ? __get_vm_area_node+0x16e/0x360 [ 531.233964][ T9220] __vmalloc_node_range+0x2c1/0x8d0 [ 531.238993][ T9220] ? selinux_capset+0xf0/0xf0 [ 531.243508][ T9220] ? kstrtouint_from_user+0x20a/0x2a0 [ 531.248714][ T9220] ? kstrtol_from_user+0x310/0x310 [ 531.253660][ T9220] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 531.259041][ T9220] __vmalloc+0x7a/0x90 [ 531.262945][ T9220] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 531.268328][ T9220] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 531.273540][ T9220] ? bpf_prog_alloc+0x15/0x1e0 [ 531.278137][ T9220] bpf_prog_alloc+0x1f/0x1e0 [ 531.282568][ T9220] bpf_prog_load+0x800/0x1b50 [ 531.287084][ T9220] ? map_freeze+0x370/0x370 [ 531.291419][ T9220] ? selinux_bpf+0xcb/0x100 [ 531.295760][ T9220] ? security_bpf+0x82/0xb0 [ 531.300094][ T9220] __sys_bpf+0x4bc/0x760 [ 531.304171][ T9220] ? fput_many+0x160/0x1b0 [ 531.308422][ T9220] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 531.313634][ T9220] ? debug_smp_processor_id+0x17/0x20 [ 531.318899][ T9220] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 531.324754][ T9220] __x64_sys_bpf+0x7c/0x90 [ 531.328994][ T9220] x64_sys_call+0x87f/0x9a0 [ 531.333332][ T9220] do_syscall_64+0x3b/0xb0 [ 531.337587][ T9220] ? clear_bhb_loop+0x35/0x90 [ 531.342098][ T9220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.347834][ T9220] RIP: 0033:0x7fe906403eb9 [ 531.352081][ T9220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.371524][ T9220] RSP: 002b:00007fe905081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.379768][ T9220] RAX: ffffffffffffffda RBX: 00007fe90659ff80 RCX: 00007fe906403eb9 [ 531.387587][ T9220] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 531.395389][ T9220] RBP: 00007fe905081090 R08: 0000000000000000 R09: 0000000000000000 [ 531.403203][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.411023][ T9220] R13: 0000000000000000 R14: 00007fe90659ff80 R15: 00007fffe6547668 [ 531.418829][ T9220] [ 531.428436][ T9220] Mem-Info: [ 531.431412][ T9220] active_anon:174 inactive_anon:16065 isolated_anon:0 [ 531.431412][ T9220] active_file:13379 inactive_file:3662 isolated_file:0 [ 531.431412][ T9220] unevictable:0 dirty:304 writeback:0 [ 531.431412][ T9220] slab_reclaimable:8126 slab_unreclaimable:75788 [ 531.431412][ T9220] mapped:28043 shmem:6059 pagetables:581 bounce:0 [ 531.431412][ T9220] kernel_misc_reclaimable:0 [ 531.431412][ T9220] free:1540957 free_pcp:19621 free_cma:0 [ 531.472891][ T9220] Node 0 active_anon:696kB inactive_anon:64260kB active_file:53516kB inactive_file:14648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112172kB dirty:1216kB writeback:0kB shmem:24236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4832kB pagetables:2324kB all_unreclaimable? no [ 531.505331][ T6] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 531.513055][ T9220] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978988kB mlocked:0kB bounce:0kB free_pcp:4312kB local_pcp:4312kB free_cma:0kB [ 531.540929][ T9220] lowmem_reserve[]: 0 3941 3941 [ 531.545635][ T9220] Normal free:3189408kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:5196kB inactive_anon:59760kB active_file:53516kB inactive_file:14648kB unevictable:0kB writepending:1168kB present:5242880kB managed:4035584kB mlocked:0kB bounce:0kB free_pcp:74228kB local_pcp:52856kB free_cma:0kB [ 531.575884][ T9220] lowmem_reserve[]: 0 0 0 [ 531.580403][ T9220] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 531.627081][ T9220] Normal: 1435*4kB (ME) 1055*8kB (UME) 334*16kB (UME) 221*32kB (UME) 147*64kB (UME) 55*128kB (UME) 12*256kB (UM) 17*512kB (UM) 11*1024kB (UME) 7*2048kB (UM) 760*4096kB (UM) = 3193380kB [ 531.667379][ T9220] 20082 total pagecache pages [ 531.689896][ T9220] 3 pages in swap cache [ 531.693880][ T9220] Swap cache stats: add 1592, delete 1589, find 5/5 [ 531.701428][ T9220] Free swap = 124436kB [ 531.705475][ T9220] Total swap = 124996kB [ 531.709502][ T9220] 2097051 pages RAM [ 531.713186][ T9220] 0 pages HighMem/MovableOnly [ 531.718568][ T9220] 343408 pages reserved [ 531.722546][ T9220] 0 pages cma reserved [ 531.786322][ T9238] FAULT_INJECTION: forcing a failure. [ 531.786322][ T9238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.799796][ T9238] CPU: 0 PID: 9238 Comm: syz.2.2316 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 531.810902][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 531.820802][ T9238] Call Trace: [ 531.823919][ T9238] [ 531.826698][ T9238] dump_stack_lvl+0x151/0x1c0 [ 531.831212][ T9238] ? io_uring_drop_tctx_refs+0x190/0x190 [ 531.836680][ T9238] dump_stack+0x15/0x20 [ 531.840671][ T9238] should_fail+0x3c6/0x510 [ 531.844930][ T9238] should_fail_usercopy+0x1a/0x20 [ 531.849784][ T9238] _copy_from_user+0x20/0xd0 [ 531.854214][ T9238] strndup_user+0xb3/0x150 [ 531.858464][ T9238] __se_sys_mount+0x9b/0x3b0 [ 531.862895][ T9238] ? __x64_sys_mount+0xd0/0xd0 [ 531.867757][ T9238] ? debug_smp_processor_id+0x17/0x20 [ 531.873133][ T9238] __x64_sys_mount+0xbf/0xd0 [ 531.877562][ T9238] x64_sys_call+0x49d/0x9a0 [ 531.881904][ T9238] do_syscall_64+0x3b/0xb0 [ 531.886150][ T9238] ? clear_bhb_loop+0x35/0x90 [ 531.890666][ T9238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.896395][ T9238] RIP: 0033:0x7fe906403eb9 [ 531.900650][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.920091][ T9238] RSP: 002b:00007fe905081038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.928334][ T9238] RAX: ffffffffffffffda RBX: 00007fe90659ff80 RCX: 00007fe906403eb9 [ 531.936366][ T9238] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 531.944177][ T9238] RBP: 00007fe905081090 R08: 0000000020000100 R09: 0000000000000000 [ 531.952071][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.959883][ T9238] R13: 0000000000000000 R14: 00007fe90659ff80 R15: 00007fffe6547668 [ 531.967703][ T9238] [ 532.387144][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.398148][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.407819][ T6] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 532.416851][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.427798][ T6] usb 5-1: config 0 descriptor?? [ 532.600545][ T9253] FAULT_INJECTION: forcing a failure. [ 532.600545][ T9253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.613513][ T9253] CPU: 1 PID: 9253 Comm: syz.0.2321 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 532.624611][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 532.634512][ T9253] Call Trace: [ 532.637630][ T9253] [ 532.640407][ T9253] dump_stack_lvl+0x151/0x1c0 [ 532.644918][ T9253] ? io_uring_drop_tctx_refs+0x190/0x190 [ 532.650392][ T9253] ? kasan_set_track+0x5d/0x70 [ 532.654991][ T9253] ? __kasan_slab_free+0x11/0x20 [ 532.659763][ T9253] ? kmem_cache_free+0x116/0x2e0 [ 532.664533][ T9253] ? putname+0xfa/0x150 [ 532.668528][ T9253] ? do_sys_openat2+0x71c/0x830 [ 532.673214][ T9253] ? x64_sys_call+0x6bf/0x9a0 [ 532.677731][ T9253] dump_stack+0x15/0x20 [ 532.681720][ T9253] should_fail+0x3c6/0x510 [ 532.685977][ T9253] should_fail_usercopy+0x1a/0x20 [ 532.690832][ T9253] _copy_from_user+0x20/0xd0 [ 532.695260][ T9253] iovec_from_user+0xc7/0x330 [ 532.699785][ T9253] __import_iovec+0x6d/0x420 [ 532.704202][ T9253] import_iovec+0xe5/0x120 [ 532.708456][ T9253] ___sys_recvmsg+0x56b/0x690 [ 532.712968][ T9253] ? __sys_recvmsg+0x260/0x260 [ 532.717581][ T9253] ? __fdget+0x1bc/0x240 [ 532.721644][ T9253] __x64_sys_recvmsg+0x1dc/0x2b0 [ 532.726417][ T9253] ? exc_page_fault+0x47a/0x830 [ 532.731104][ T9253] ? ___sys_recvmsg+0x690/0x690 [ 532.735792][ T9253] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 532.741694][ T9253] ? exit_to_user_mode_prepare+0x39/0xa0 [ 532.747161][ T9253] x64_sys_call+0x171/0x9a0 [ 532.751504][ T9253] do_syscall_64+0x3b/0xb0 [ 532.755754][ T9253] ? clear_bhb_loop+0x35/0x90 [ 532.760267][ T9253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.765995][ T9253] RIP: 0033:0x7f970db70eb9 [ 532.770250][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.789690][ T9253] RSP: 002b:00007f970c7cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 532.797934][ T9253] RAX: ffffffffffffffda RBX: 00007f970dd0d058 RCX: 00007f970db70eb9 [ 532.805754][ T9253] RDX: 0000000000000104 RSI: 0000000020001500 RDI: 0000000000000003 [ 532.813557][ T9253] RBP: 00007f970c7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 532.821456][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.829365][ T9253] R13: 0000000000000001 R14: 00007f970dd0d058 R15: 00007ffcce5545c8 [ 532.837183][ T9253] [ 532.840383][ T2294] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 533.098399][ T6] hid-multitouch 0003:1FD2:6007.006D: item fetching failed at offset 3/5 [ 533.106864][ T6] hid-multitouch: probe of 0003:1FD2:6007.006D failed with error -22 [ 533.115755][ T2294] usb 3-1: Using ep0 maxpacket: 8 [ 533.196021][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 533.247196][ T2294] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 533.295095][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 533.300557][ T9216] UDC core: couldn't find an available UDC or it's busy: -16 [ 533.313806][ T9216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 533.324862][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 533.326441][ T9216] UDC core: couldn't find an available UDC or it's busy: -16 [ 533.344236][ T9216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 533.353554][ T9216] UDC core: couldn't find an available UDC or it's busy: -16 [ 533.361224][ T9216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 533.427132][ T2294] usb 3-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 533.436227][ T2294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.444397][ T2294] usb 3-1: Product: syz [ 533.448626][ T2294] usb 3-1: Manufacturer: syz [ 533.453035][ T2294] usb 3-1: SerialNumber: syz [ 533.458375][ T2294] usb 3-1: config 0 descriptor?? [ 533.532402][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 533.738660][ T2294] usb 3-1: bad CDC descriptors [ 533.751508][ T314] udevd[314]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 534.135123][ T1722] usb 5-1: USB disconnect, device number 59 [ 534.208872][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 534.221051][ T9278] loop4: detected capacity change from 0 to 1024 [ 534.226178][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 534.226197][ T30] audit: type=1400 audit(1725158120.045:2778): avc: denied { remount } for pid=9281 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 534.269241][ T9278] EXT4-fs (loop4): Unrecognized mount option "obj_user=resuid" or missing value [ 534.281369][ T314] udevd[314]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 534.372131][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 534.413147][ T9283] loop4: detected capacity change from 0 to 16 [ 534.540649][ T9283] erofs: (device loop4): mounted with root inode @ nid 36. [ 534.550890][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 534.660748][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 534.753477][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 534.971776][ T30] audit: type=1400 audit(1725158120.685:2779): avc: denied { read } for pid=9284 comm="syz.0.2329" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 535.022899][ T30] audit: type=1400 audit(1725158120.695:2780): avc: denied { write } for pid=9284 comm="syz.0.2329" name="nf_conntrack" dev="proc" ino=4026532601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 535.118093][ T30] audit: type=1326 audit(1725158120.945:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 535.143670][ T30] audit: type=1326 audit(1725158120.945:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 535.177377][ T30] audit: type=1326 audit(1725158120.945:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 535.201412][ T30] audit: type=1326 audit(1725158120.945:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 535.229844][ T30] audit: type=1326 audit(1725158120.945:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 535.258932][ T2294] usb 3-1: USB disconnect, device number 56 [ 535.269297][ T30] audit: type=1326 audit(1725158120.945:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 535.293249][ T30] audit: type=1326 audit(1725158120.945:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a3797eb9 code=0x7ffc0000 [ 536.737089][ T9308] loop4: detected capacity change from 0 to 40427 [ 536.757219][ T2294] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 536.821320][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'. [ 536.897073][ T600] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 536.989170][ T9308] F2FS-fs (loop4): invalid crc value [ 537.002050][ T9308] F2FS-fs (loop4): Found nat_bits in checkpoint [ 537.033630][ T9308] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 537.247115][ T2294] usb 3-1: Using ep0 maxpacket: 32 [ 537.287604][ T600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.297271][ T600] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 537.306315][ T600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.315333][ T600] usb 1-1: config 0 descriptor?? [ 537.620364][ T2294] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 537.628262][ T2294] usb 3-1: config 0 has no interface number 0 [ 537.634238][ T2294] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.646197][ T2294] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.657161][ T2294] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 537.666079][ T2294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.674696][ T2294] usb 3-1: config 0 descriptor?? [ 538.056396][ T600] lenovo 0003:17EF:6047.006E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 538.156120][ T9300] UDC core: couldn't find an available UDC or it's busy: -16 [ 538.163604][ T9300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 538.173520][ T9300] 9pnet: Insufficient options for proto=fd [ 538.251737][ T9334] loop4: detected capacity change from 0 to 16 [ 538.277429][ T9334] erofs: Unknown parameter 'mountinfo' [ 538.418518][ T2294] greenasia 0003:0E8F:0012.006F: item fetching failed at offset 0/3 [ 538.426549][ T2294] greenasia 0003:0E8F:0012.006F: parse failed [ 538.432531][ T2294] greenasia: probe of 0003:0E8F:0012.006F failed with error -22 [ 538.437147][ T600] lenovo 0003:17EF:6047.006E: Failed to switch middle button: -71 [ 538.467132][ T600] lenovo 0003:17EF:6047.006E: Fn-lock setting failed: -71 [ 538.487122][ T600] lenovo 0003:17EF:6047.006E: Sensitivity setting failed: -71 [ 538.495881][ T600] usb 1-1: USB disconnect, device number 59 [ 538.546815][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 538.966006][ T9338] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 538.974241][ T9338] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 539.069299][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 539.197119][ T314] udevd[314]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 539.328402][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 539.347985][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 539.348003][ T30] audit: type=1404 audit(1725158125.175:2811): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 539.369430][ T30] audit: type=1400 audit(1725158125.175:2812): avc: denied { read } for pid=9332 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 539.388725][ T30] audit: type=1404 audit(1725158125.195:2813): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 539.422834][ T6337] udevd[6337]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 539.458424][ T9350] FAULT_INJECTION: forcing a failure. [ 539.458424][ T9350] name failslab, interval 1, probability 0, space 0, times 0 [ 539.459983][ T314] udevd[314]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 539.472695][ T9350] CPU: 0 PID: 9350 Comm: syz.0.2346 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 539.493173][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 539.503067][ T9350] Call Trace: [ 539.506189][ T9350] [ 539.508967][ T9350] dump_stack_lvl+0x151/0x1c0 [ 539.513479][ T9350] ? io_uring_drop_tctx_refs+0x190/0x190 [ 539.518949][ T9350] ? release_firmware_map_entry+0x190/0x190 [ 539.524676][ T9350] dump_stack+0x15/0x20 [ 539.528668][ T9350] should_fail+0x3c6/0x510 [ 539.532940][ T9350] __should_failslab+0xa4/0xe0 [ 539.537523][ T9350] should_failslab+0x9/0x20 [ 539.541862][ T9350] slab_pre_alloc_hook+0x37/0xd0 [ 539.546632][ T9350] ? kvasprintf_const+0x13b/0x190 [ 539.551496][ T9350] __kmalloc_track_caller+0x6c/0x260 [ 539.556615][ T9350] ? kvasprintf_const+0x13b/0x190 [ 539.561479][ T9350] kstrdup_const+0x55/0x90 [ 539.565730][ T9350] kvasprintf_const+0x13b/0x190 [ 539.570429][ T9350] kobject_set_name_vargs+0x61/0x120 [ 539.575538][ T9350] dev_set_name+0xd1/0x120 [ 539.579790][ T9350] ? __hrtimer_init+0x17c/0x260 [ 539.584477][ T9350] ? __hrtimer_init+0x16d/0x260 [ 539.589163][ T9350] ? get_device+0x30/0x30 [ 539.593337][ T9350] ? hrtimer_init+0x30/0x160 [ 539.597759][ T9350] ? pm_runtime_init+0x275/0x350 [ 539.602537][ T9350] ? device_initialize+0x1e1/0x420 [ 539.607566][ T9350] netdev_register_kobject+0xb2/0x320 [ 539.612772][ T9350] ? raw_notifier_call_chain+0xdf/0xf0 [ 539.618074][ T9350] register_netdevice+0xde9/0x1390 [ 539.623026][ T9350] ? netif_stacked_transfer_operstate+0x240/0x240 [ 539.629273][ T9350] ? ip6gre_tunnel_locate+0x230/0x880 [ 539.634470][ T9350] ? memcpy+0x56/0x70 [ 539.638292][ T9350] ip6gre_tunnel_locate+0x2b5/0x880 [ 539.643323][ T9350] ? cap_capable+0x1d2/0x270 [ 539.647752][ T9350] ? ip6gre_tnl_change+0xa80/0xa80 [ 539.652699][ T9350] ? ip6gre_tunnel_siocdevprivate+0xffd/0x19f0 [ 539.658688][ T9350] ? memcpy+0x56/0x70 [ 539.662504][ T9350] ip6gre_tunnel_siocdevprivate+0x1023/0x19f0 [ 539.668408][ T9350] ? ip6gre_tunnel_init+0x170/0x170 [ 539.673581][ T9350] ? strncpy_from_user_nofault+0xed/0x150 [ 539.679134][ T9350] ? __kasan_check_write+0x14/0x20 [ 539.684072][ T9350] ? full_name_hash+0xa0/0xf0 [ 539.688586][ T9350] dev_ifsioc+0xc75/0x10c0 [ 539.692837][ T9350] ? dev_ioctl+0xe70/0xe70 [ 539.697091][ T9350] ? mutex_lock+0xb6/0x1e0 [ 539.701341][ T9350] ? wait_for_completion_killable_timeout+0x10/0x10 [ 539.707767][ T9350] dev_ioctl+0x5f3/0xe70 [ 539.711846][ T9350] sock_ioctl+0x665/0x740 [ 539.716011][ T9350] ? sock_poll+0x400/0x400 [ 539.720353][ T9350] ? security_file_ioctl+0x84/0xb0 [ 539.725296][ T9350] ? sock_poll+0x400/0x400 [ 539.729548][ T9350] __se_sys_ioctl+0x114/0x190 [ 539.734066][ T9350] __x64_sys_ioctl+0x7b/0x90 [ 539.738488][ T9350] x64_sys_call+0x98/0x9a0 [ 539.742742][ T9350] do_syscall_64+0x3b/0xb0 [ 539.746995][ T9350] ? clear_bhb_loop+0x35/0x90 [ 539.751507][ T9350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.757236][ T9350] RIP: 0033:0x7f970db70eb9 [ 539.761490][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.780933][ T9350] RSP: 002b:00007f970c7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.789177][ T9350] RAX: ffffffffffffffda RBX: 00007f970dd0cf80 RCX: 00007f970db70eb9 [ 539.796989][ T9350] RDX: 0000000020000900 RSI: 00000000000089f1 RDI: 0000000000000007 [ 539.804798][ T9350] RBP: 00007f970c7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 539.812611][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.820422][ T9350] R13: 0000000000000000 R14: 00007f970dd0cf80 R15: 00007ffcce5545c8 [ 539.828238][ T9350] [ 539.843622][ T1722] usb 3-1: USB disconnect, device number 57 [ 539.852131][ T30] audit: type=1400 audit(1725158125.235:2814): avc: denied { read write } for pid=7152 comm="syz-executor" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.880953][ T30] audit: type=1400 audit(1725158125.235:2815): avc: denied { open } for pid=7152 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.905887][ T30] audit: type=1400 audit(1725158125.235:2816): avc: denied { ioctl } for pid=7152 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.927613][ T9355] loop2: detected capacity change from 0 to 2048 [ 539.936038][ T30] audit: type=1400 audit(1725158125.275:2817): avc: denied { prog_load } for pid=9349 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 539.956776][ T30] audit: type=1400 audit(1725158125.275:2818): avc: denied { bpf } for pid=9349 comm="syz.0.2346" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.978541][ T30] audit: type=1400 audit(1725158125.275:2819): avc: denied { perfmon } for pid=9349 comm="syz.0.2346" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.999899][ T30] audit: type=1400 audit(1725158125.275:2820): avc: denied { map_create } for pid=9349 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 540.286472][ T314] udevd[314]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 540.524232][ T9363] loop2: detected capacity change from 0 to 512 [ 540.603222][ T9363] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 540.659049][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 540.755742][ T314] udevd[314]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 540.783094][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 540.838393][ T557] tipc: Disabling bearer [ 540.843673][ T557] tipc: Left network mode [ 540.924251][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.931251][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.939231][ T9369] device bridge_slave_0 entered promiscuous mode [ 540.946426][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.954095][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.962636][ T9369] device bridge_slave_1 entered promiscuous mode [ 541.023295][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.030196][ T9369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.037305][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.044271][ T9369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.273134][ T9382] loop2: detected capacity change from 0 to 16 [ 541.290588][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.301757][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.323280][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.331654][ T1722] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 541.335603][ T9382] erofs: (device loop2): mounted with root inode @ nid 36. [ 541.354245][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.366645][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.373556][ T600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.380991][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.389496][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.391254][ T9382] fuse: Bad value for 'fd' [ 541.396368][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.421177][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.430624][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.461786][ T9369] device veth0_vlan entered promiscuous mode [ 541.475881][ T9369] device veth1_macvtap entered promiscuous mode [ 541.531737][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.543032][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.551839][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.560706][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.569225][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.576718][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.588403][ T2294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 541.713067][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 541.918840][ T557] device bridge_slave_1 left promiscuous mode [ 541.924857][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.939026][ T557] device bridge_slave_0 left promiscuous mode [ 541.945118][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.952476][ T1722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.964500][ T557] device veth1_macvtap left promiscuous mode [ 541.970423][ T1722] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 541.980316][ T557] device veth0_vlan left promiscuous mode [ 541.986239][ T1722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.010980][ T1722] usb 4-1: config 0 descriptor?? [ 542.408346][ T9396] FAULT_INJECTION: forcing a failure. [ 542.408346][ T9396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.421337][ T9396] CPU: 0 PID: 9396 Comm: syz.2.2358 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 542.432453][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 542.442355][ T9396] Call Trace: [ 542.445470][ T9396] [ 542.448249][ T9396] dump_stack_lvl+0x151/0x1c0 [ 542.452765][ T9396] ? io_uring_drop_tctx_refs+0x190/0x190 [ 542.458324][ T9396] ? audit_log_end+0x1c8/0x230 [ 542.462926][ T9396] dump_stack+0x15/0x20 [ 542.466915][ T9396] should_fail+0x3c6/0x510 [ 542.471778][ T9396] should_fail_usercopy+0x1a/0x20 [ 542.476641][ T9396] _copy_from_user+0x20/0xd0 [ 542.481188][ T9396] get_itimerspec64+0xa6/0x450 [ 542.485785][ T9396] ? __kasan_check_write+0x14/0x20 [ 542.490734][ T9396] ? __secure_computing+0x300/0x300 [ 542.495767][ T9396] ? put_old_timespec32+0x230/0x230 [ 542.500808][ T9396] ? __kasan_check_write+0x14/0x20 [ 542.505760][ T9396] __x64_sys_timerfd_settime+0x129/0x220 [ 542.511227][ T9396] ? __ia32_sys_timerfd_create+0x70/0x70 [ 542.516689][ T9396] ? __secure_computing+0xf0/0x300 [ 542.521634][ T9396] x64_sys_call+0x78a/0x9a0 [ 542.525973][ T9396] do_syscall_64+0x3b/0xb0 [ 542.530224][ T9396] ? clear_bhb_loop+0x35/0x90 [ 542.534737][ T9396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.540466][ T9396] RIP: 0033:0x7fe906403eb9 [ 542.544722][ T9396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.564247][ T9396] RSP: 002b:00007fe905081038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 542.572489][ T9396] RAX: ffffffffffffffda RBX: 00007fe90659ff80 RCX: 00007fe906403eb9 [ 542.580300][ T9396] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: ffffffffffffffff [ 542.588123][ T9396] RBP: 00007fe905081090 R08: 0000000000000000 R09: 0000000000000000 [ 542.595924][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.603737][ T9396] R13: 0000000000000000 R14: 00007fe90659ff80 R15: 00007fffe6547668 [ 542.611553][ T9396] [ 542.621854][ T1722] lenovo 0003:17EF:6047.0070: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 542.877849][ T9401] loop2: detected capacity change from 0 to 512 [ 542.962495][ T9401] EXT4-fs (loop2): orphan cleanup on readonly fs [ 542.980174][ T9401] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.2360: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 543.005545][ T9401] EXT4-fs error (device loop2): ext4_quota_enable:6381: comm syz.2.2360: Bad quota inode: 4, type: 1 [ 543.051790][ T9401] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 543.057147][ T1722] lenovo 0003:17EF:6047.0070: Failed to switch middle button: -71 [ 543.066747][ T9401] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 543.080561][ T9401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 543.097142][ T1722] lenovo 0003:17EF:6047.0070: Fn-lock setting failed: -71 [ 543.117128][ T1722] lenovo 0003:17EF:6047.0070: Sensitivity setting failed: -71 [ 543.132385][ T1722] usb 4-1: USB disconnect, device number 75 [ 543.326013][ T9414] syz.0.2363[9414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.326434][ T9414] syz.0.2363[9414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.587219][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 543.789863][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.796888][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.803979][ T9422] device bridge0 left promiscuous mode [ 543.818645][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 543.924087][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 543.977673][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 545.035727][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 545.035751][ T30] audit: type=1400 audit(1725158129.975:3046): avc: denied { read } for pid=9427 comm="syz.2.2367" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 545.089775][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 545.110300][ T30] audit: type=1400 audit(1725158129.985:3047): avc: denied { open } for pid=9427 comm="syz.2.2367" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 545.116310][ T314] udevd[314]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 545.145465][ T9438] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 545.176758][ T9443] fuse: Bad value for 'fd' [ 545.190741][ T30] audit: type=1400 audit(1725158130.995:3048): avc: denied { mounton } for pid=9442 comm="syz.2.2373" path="/98/file0" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 545.238774][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 545.332713][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 545.637251][ T312] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 545.897091][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 545.978977][ T557] device bridge_slave_1 left promiscuous mode [ 545.984955][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.992259][ T557] device bridge_slave_0 left promiscuous mode [ 545.998228][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.006296][ T557] device veth1_macvtap left promiscuous mode [ 546.012164][ T557] device veth0_vlan left promiscuous mode [ 546.017229][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 546.028691][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 546.042845][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 546.084949][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.094010][ T312] usb 4-1: config 0 descriptor?? [ 546.118483][ T9451] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 546.133930][ T9463] loop1: detected capacity change from 0 to 128 [ 546.141288][ T312] hub 4-1:0.0: USB hub found [ 546.238178][ T30] audit: type=1400 audit(1725158132.065:3049): avc: denied { mount } for pid=9461 comm="syz.1.2378" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 546.263078][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 546.275777][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:1' failed: Read-only file system [ 546.417686][ T30] audit: type=1400 audit(1725158132.245:3050): avc: denied { create } for pid=9448 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.437121][ T312] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 546.442927][ T30] audit: type=1400 audit(1725158132.245:3051): avc: denied { write } for pid=9448 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.647299][ T30] audit: type=1400 audit(1725158132.475:3052): avc: denied { create } for pid=9467 comm="syz.2.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 546.823828][ T9470] FAULT_INJECTION: forcing a failure. [ 546.823828][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 546.836334][ T9470] CPU: 1 PID: 9470 Comm: syz.2.2380 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 546.847374][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 546.857351][ T9470] Call Trace: [ 546.860477][ T9470] [ 546.863345][ T9470] dump_stack_lvl+0x151/0x1c0 [ 546.867860][ T9470] ? io_uring_drop_tctx_refs+0x190/0x190 [ 546.873341][ T9470] ? release_firmware_map_entry+0x190/0x190 [ 546.879050][ T9470] ? preempt_schedule_irq+0xe7/0x140 [ 546.884168][ T9470] ? __cond_resched+0x20/0x20 [ 546.888680][ T9470] ? preempt_schedule_irq+0xe7/0x140 [ 546.893890][ T9470] dump_stack+0x15/0x20 [ 546.897886][ T9470] should_fail+0x3c6/0x510 [ 546.902148][ T9470] __should_failslab+0xa4/0xe0 [ 546.906742][ T9470] ? __alloc_skb+0xbe/0x550 [ 546.911074][ T9470] should_failslab+0x9/0x20 [ 546.915414][ T9470] slab_pre_alloc_hook+0x37/0xd0 [ 546.920188][ T9470] ? __alloc_skb+0xbe/0x550 [ 546.924527][ T9470] kmem_cache_alloc+0x44/0x200 [ 546.929130][ T9470] __alloc_skb+0xbe/0x550 [ 546.933292][ T9470] ethnl_reply_init+0x52/0x1f0 [ 546.937895][ T9470] ethnl_default_doit+0x519/0xbc0 [ 546.942764][ T9470] ? ethnl_default_notify+0x610/0x610 [ 546.947964][ T9470] ? genl_family_rcv_msg_attrs_parse+0x213/0x290 [ 546.954124][ T9470] genl_rcv_msg+0xfb0/0x1490 [ 546.958551][ T9470] ? genl_bind+0x370/0x370 [ 546.962807][ T9470] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 546.969317][ T9470] ? finish_task_switch+0x167/0x7b0 [ 546.974345][ T9470] ? __schedule+0xcd4/0x1590 [ 546.978772][ T9470] ? release_firmware_map_entry+0x190/0x190 [ 546.984499][ T9470] ? down_read+0xd50/0x1900 [ 546.988839][ T9470] ? ethnl_default_notify+0x610/0x610 [ 546.994045][ T9470] ? ethnl_default_doit+0xbc0/0xbc0 [ 546.999081][ T9470] ? ethnl_default_start+0x5d0/0x5d0 [ 547.004199][ T9470] ? ethnl_default_dumpit+0xe20/0xe20 [ 547.009409][ T9470] ? __kasan_check_read+0x11/0x20 [ 547.014287][ T9470] ? preempt_schedule_irq+0xe7/0x140 [ 547.019395][ T9470] netlink_rcv_skb+0x1cf/0x410 [ 547.023990][ T9470] ? genl_bind+0x370/0x370 [ 547.028249][ T9470] ? netlink_ack+0xb10/0xb10 [ 547.032674][ T9470] ? genl_bind+0x370/0x370 [ 547.036922][ T9470] genl_rcv+0x28/0x40 [ 547.040743][ T9470] netlink_unicast+0x8df/0xac0 [ 547.045344][ T9470] ? netlink_detachskb+0x90/0x90 [ 547.050116][ T9470] ? security_netlink_send+0x35/0xa0 [ 547.055237][ T9470] ? security_netlink_send+0x7b/0xa0 [ 547.060358][ T9470] netlink_sendmsg+0xa0a/0xd20 [ 547.064957][ T9470] ? sysvec_reschedule_ipi+0x7d/0x150 [ 547.070167][ T9470] ? netlink_getsockopt+0x560/0x560 [ 547.075199][ T9470] ? ____sys_sendmsg+0x525/0x8f0 [ 547.079972][ T9470] ? netlink_getsockopt+0x560/0x560 [ 547.085007][ T9470] ____sys_sendmsg+0x59e/0x8f0 [ 547.089608][ T9470] ? __sys_sendmsg_sock+0x40/0x40 [ 547.094468][ T9470] ? import_iovec+0xe5/0x120 [ 547.098905][ T9470] ___sys_sendmsg+0x252/0x2e0 [ 547.103426][ T9470] ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0 [ 547.109830][ T9470] ? __sys_sendmsg+0x260/0x260 [ 547.114438][ T9470] ? rcu_read_unlock_special+0xdb/0x4c0 [ 547.119817][ T9470] ? __fdget+0x1bc/0x240 [ 547.123891][ T9470] __se_sys_sendmsg+0x19a/0x260 [ 547.128576][ T9470] ? __x64_sys_sendmsg+0x90/0x90 [ 547.133355][ T9470] ? __kasan_check_read+0x11/0x20 [ 547.138217][ T9470] __x64_sys_sendmsg+0x7b/0x90 [ 547.142811][ T9470] x64_sys_call+0x16a/0x9a0 [ 547.147156][ T9470] do_syscall_64+0x3b/0xb0 [ 547.151412][ T9470] ? clear_bhb_loop+0x35/0x90 [ 547.155919][ T9470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 547.161646][ T9470] RIP: 0033:0x7fe906403eb9 [ 547.165899][ T9470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.185341][ T9470] RSP: 002b:00007fe90503f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.193594][ T9470] RAX: ffffffffffffffda RBX: 00007fe9065a0130 RCX: 00007fe906403eb9 [ 547.201399][ T9470] RDX: 000000002000c050 RSI: 0000000020000000 RDI: 0000000000000003 [ 547.209206][ T9470] RBP: 00007fe90503f090 R08: 0000000000000000 R09: 0000000000000000 [ 547.217031][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.224831][ T9470] R13: 0000000000000000 R14: 00007fe9065a0130 R15: 00007fffe6547668 [ 547.232872][ T9470] [ 547.272279][ T30] audit: type=1400 audit(1725158133.095:3053): avc: denied { unmount } for pid=9369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 547.960647][ T9475] 9pnet: Insufficient options for proto=fd [ 547.968358][ T30] audit: type=1400 audit(1725158133.795:3054): avc: denied { name_bind } for pid=9474 comm="syz.2.2382" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 547.989874][ T30] audit: type=1400 audit(1725158133.795:3055): avc: denied { create } for pid=9474 comm="syz.2.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 548.068715][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2381'. [ 548.477225][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 548.482980][ T312] usbhid: probe of 4-1:0.0 failed with error -71 [ 548.517632][ T312] usb 4-1: USB disconnect, device number 76 [ 548.811893][ T9488] fuse: Bad value for 'fd' [ 548.816719][ T9486] FAULT_INJECTION: forcing a failure. [ 548.816719][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.829731][ T9486] CPU: 1 PID: 9486 Comm: syz.1.2383 Tainted: G W 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 548.840839][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 548.843094][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 548.850731][ T9486] Call Trace: [ 548.850741][ T9486] [ 548.850749][ T9486] dump_stack_lvl+0x151/0x1c0 [ 548.872345][ T9486] ? io_uring_drop_tctx_refs+0x190/0x190 [ 548.877813][ T9486] dump_stack+0x15/0x20 [ 548.881805][ T9486] should_fail+0x3c6/0x510 [ 548.886067][ T9486] should_fail_usercopy+0x1a/0x20 [ 548.890920][ T9486] _copy_from_user+0x20/0xd0 [ 548.895341][ T9486] strndup_user+0xb3/0x150 [ 548.899596][ T9486] __se_sys_mount+0x9b/0x3b0 [ 548.904025][ T9486] ? __x64_sys_mount+0xd0/0xd0 [ 548.908622][ T9486] ? debug_smp_processor_id+0x17/0x20 [ 548.913947][ T9486] __x64_sys_mount+0xbf/0xd0 [ 548.918368][ T9486] x64_sys_call+0x49d/0x9a0 [ 548.922739][ T9486] do_syscall_64+0x3b/0xb0 [ 548.926955][ T9486] ? clear_bhb_loop+0x35/0x90 [ 548.931466][ T9486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.937201][ T9486] RIP: 0033:0x7fb2939d0eb9 [ 548.941452][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.960893][ T9486] RSP: 002b:00007fb29264e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.969155][ T9486] RAX: ffffffffffffffda RBX: 00007fb293b6cf80 RCX: 00007fb2939d0eb9 [ 548.976944][ T9486] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 548.984762][ T9486] RBP: 00007fb29264e090 R08: 0000000020000100 R09: 0000000000000000 [ 548.992571][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.000379][ T9486] R13: 0000000000000000 R14: 00007fb293b6cf80 R15: 00007ffc675f9358 [ 549.008198][ T9486] [ 549.016265][ T557] tipc: Left network mode [ 549.085598][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.092491][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.099796][ T9491] device bridge_slave_0 entered promiscuous mode [ 549.106571][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.113621][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.121149][ T9491] device bridge_slave_1 entered promiscuous mode [ 549.177979][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.184829][ T9491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.191970][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.198732][ T9491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.222718][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.230520][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.237734][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.247815][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.255894][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.262770][ T1722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.273751][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.282086][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.288944][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.307774][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.315554][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.327596][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.342300][ T9491] device veth0_vlan entered promiscuous mode [ 549.349206][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.357076][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.364361][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.379486][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.390757][ T9491] device veth1_macvtap entered promiscuous mode [ 549.400864][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.412015][ T557] device bridge_slave_1 left promiscuous mode [ 549.418018][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.425204][ T557] device bridge_slave_0 left promiscuous mode [ 549.431210][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.439886][ T557] device veth1_macvtap left promiscuous mode [ 549.445714][ T557] device veth0_vlan left promiscuous mode [ 549.903846][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.982975][ T9506] device bridge0 entered promiscuous mode [ 550.002539][ T9506] loop1: detected capacity change from 0 to 2048 [ 550.049857][ T9506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 550.051473][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 550.075417][ T9500] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 550.077510][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 550.077527][ T30] audit: type=1326 audit(1725158135.895:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.090267][ T9500] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 550.095967][ T30] audit: type=1326 audit(1725158135.895:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.119093][ T9500] EXT4-fs (loop1): This should not happen!! Data will be lost [ 550.119093][ T9500] [ 550.131389][ T30] audit: type=1326 audit(1725158135.895:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.154448][ T9500] EXT4-fs (loop1): Total free blocks count 0 [ 550.164104][ T30] audit: type=1326 audit(1725158135.895:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.187072][ T9500] EXT4-fs (loop1): Free/Dirty block details [ 550.187090][ T9500] EXT4-fs (loop1): free_blocks=2415919104 [ 550.187104][ T9500] EXT4-fs (loop1): dirty_blocks=16 [ 550.187117][ T9500] EXT4-fs (loop1): Block reservation details [ 550.187128][ T9500] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 550.266036][ T30] audit: type=1326 audit(1725158135.895:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.291215][ T30] audit: type=1326 audit(1725158135.895:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.316516][ T30] audit: type=1326 audit(1725158135.895:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.342756][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 550.355623][ T30] audit: type=1326 audit(1725158135.895:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.381721][ T30] audit: type=1326 audit(1725158135.895:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.408594][ T30] audit: type=1326 audit(1725158135.895:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.3.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222fd5eb9 code=0x7fc00000 [ 550.490144][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 551.031489][ T9522] loop2: detected capacity change from 0 to 128 [ 551.112613][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 551.279526][ T9525] loop4: detected capacity change from 0 to 2048 [ 551.398033][ T314] udevd[314]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 551.409989][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:2' failed: Read-only file system [ 551.424334][ T9525] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.445452][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 551.477230][ T63] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 551.835990][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 551.847904][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.858577][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 551.869765][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.878723][ T63] usb 2-1: config 0 descriptor?? [ 551.900453][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 552.071100][ T9535] loop2: detected capacity change from 0 to 256 [ 552.961183][ T63] lenovo 0003:17EF:6047.0071: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 553.384866][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.391782][ T9555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.398924][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.405768][ T9555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.413229][ T9555] device bridge0 entered promiscuous mode [ 553.423966][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.604027][ T63] lenovo 0003:17EF:6047.0071: Failed to switch middle button: -71 [ 553.627137][ T63] lenovo 0003:17EF:6047.0071: Fn-lock setting failed: -71 [ 553.647161][ T63] lenovo 0003:17EF:6047.0071: Sensitivity setting failed: -71 [ 553.655641][ T63] usb 2-1: USB disconnect, device number 55 [ 554.125274][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 554.599085][ T9565] loop1: detected capacity change from 0 to 1024 [ 554.741977][ T9565] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext2 [ 554.744342][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 554.792465][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 554.838867][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 554.940594][ T9569] syz.1.2400[9569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.940983][ T9569] syz.1.2400[9569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.099544][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 555.099627][ T30] audit: type=1400 audit(1725158140.765:3156): avc: denied { integrity } for pid=9559 comm="syz.1.2400" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 555.141325][ T30] audit: type=1400 audit(1725158140.845:3157): avc: denied { mounton } for pid=9559 comm="syz.1.2400" path="/proc/36/task" dev="proc" ino=59137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 555.165164][ T30] audit: type=1400 audit(1725158140.855:3158): avc: denied { mount } for pid=9559 comm="syz.1.2400" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 556.014575][ T30] audit: type=1400 audit(1725158141.835:3159): avc: denied { create } for pid=9572 comm="syz.2.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 556.035742][ T30] audit: type=1400 audit(1725158141.835:3160): avc: denied { setopt } for pid=9572 comm="syz.2.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 556.055707][ T30] audit: type=1326 audit(1725158141.835:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe906403eb9 code=0x7ffc0000 [ 556.082082][ T9579] loop1: detected capacity change from 0 to 128 [ 556.088336][ T30] audit: type=1326 audit(1725158141.835:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fe906403eb9 code=0x7ffc0000 [ 556.111806][ T30] audit: type=1326 audit(1725158141.835:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe906403eb9 code=0x7ffc0000 [ 556.135477][ T30] audit: type=1326 audit(1725158141.865:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9063fae67 code=0x7ffc0000 [ 556.167298][ T30] audit: type=1326 audit(1725158141.865:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe90639f839 code=0x7ffc0000 [ 556.374478][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 556.518478][ T6337] udevd[6337]: symlink '../../loop1' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:1' failed: Read-only file system [ 556.937162][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 557.723333][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 559.143554][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 559.251284][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.258297][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.266011][ T9615] device bridge0 left promiscuous mode [ 559.300979][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.307869][ T9615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.314994][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.321861][ T9615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.329794][ T9615] device bridge0 entered promiscuous mode [ 560.295933][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 560.849720][ T9626] loop4: detected capacity change from 0 to 128 [ 560.857278][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 560.857296][ T30] audit: type=1400 audit(1725158146.685:3355): avc: denied { read write } for pid=9623 comm="syz.1.2416" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.872865][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 560.899255][ T30] audit: type=1400 audit(1725158146.715:3356): avc: denied { open } for pid=9623 comm="syz.1.2416" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.941849][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 560.966217][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:4' failed: Read-only file system [ 560.989656][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 561.038419][ T6337] udevd[6337]: symlink '../../loop4' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:4' failed: Read-only file system [ 561.352659][ T30] audit: type=1400 audit(1725158146.965:3357): avc: denied { write } for pid=9621 comm="syz.3.2418" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 561.381649][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 561.457064][ T1722] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 561.726818][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 561.817288][ T1722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.828223][ T1722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.837798][ T1722] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 561.846630][ T1722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.855365][ T1722] usb 2-1: config 0 descriptor?? [ 562.382518][ T30] audit: type=1400 audit(1725158148.205:3358): avc: denied { create } for pid=9623 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 562.402644][ T30] audit: type=1400 audit(1725158148.205:3359): avc: denied { name_bind } for pid=9623 comm="syz.1.2416" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 562.424144][ T30] audit: type=1400 audit(1725158148.205:3360): avc: denied { setopt } for pid=9623 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 562.557135][ T1722] usbhid 2-1:0.0: can't add hid device: -71 [ 562.562905][ T1722] usbhid: probe of 2-1:0.0 failed with error -71 [ 562.571571][ T1722] usb 2-1: USB disconnect, device number 56 [ 562.822926][ T9639] loop2: detected capacity change from 0 to 40427 [ 562.907618][ T9639] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 562.916432][ T9639] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 562.929450][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 562.943592][ T9639] F2FS-fs (loop2): invalid crc value [ 562.954148][ T9639] F2FS-fs (loop2): Found nat_bits in checkpoint [ 563.072044][ T9639] F2FS-fs (loop2): Start checkpoint disabled! [ 563.109795][ T9639] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 563.126819][ T9639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 563.134674][ T30] audit: type=1400 audit(1725158148.955:3361): avc: denied { mount } for pid=9634 comm="syz.2.2420" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 563.169825][ T30] audit: type=1400 audit(1725158148.995:3362): avc: denied { write } for pid=9634 comm="syz.2.2420" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 563.192426][ T30] audit: type=1400 audit(1725158148.995:3363): avc: denied { add_name } for pid=9634 comm="syz.2.2420" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 563.213087][ T30] audit: type=1400 audit(1725158148.995:3364): avc: denied { create } for pid=9634 comm="syz.2.2420" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 563.249750][ T540] attempt to access beyond end of device [ 563.249750][ T540] loop2: rw=2049, want=40968, limit=40427 [ 563.260901][ T540] attempt to access beyond end of device [ 563.260901][ T540] loop2: rw=2049, want=40992, limit=40427 [ 564.565507][ T9654] loop4: detected capacity change from 0 to 256 [ 564.567383][ T9656] loop2: detected capacity change from 0 to 16 [ 564.572495][ T9651] loop1: detected capacity change from 0 to 16 [ 564.617756][ T9651] erofs: (device loop1): mounted with root inode @ nid 36. [ 564.641977][ T9651] fuse: Bad value for 'fd' [ 564.643175][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 564.664014][ T9654] FAT-fs (loop4): Directory bread(block 64) failed [ 564.672451][ T9656] erofs: (device loop2): mounted with root inode @ nid 36. [ 564.679566][ T9654] FAT-fs (loop4): Directory bread(block 65) failed [ 564.683143][ T314] udevd[314]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 564.685861][ T9654] FAT-fs (loop4): Directory bread(block 66) failed [ 564.707154][ T9654] FAT-fs (loop4): Directory bread(block 67) failed [ 564.713879][ T9654] FAT-fs (loop4): Directory bread(block 68) failed [ 564.734036][ T9654] FAT-fs (loop4): Directory bread(block 69) failed [ 564.741441][ T9654] FAT-fs (loop4): Directory bread(block 70) failed [ 564.782076][ T9654] FAT-fs (loop4): Directory bread(block 71) failed [ 564.895020][ T6337] udevd[6337]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 564.923674][ T9654] FAT-fs (loop4): Directory bread(block 72) failed [ 564.937583][ T314] udevd[314]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 564.952387][ T9660] fuse: Bad value for 'fd' [ 564.955740][ T9654] FAT-fs (loop4): Directory bread(block 73) failed [ 565.434557][ T6337] udevd[6337]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system SYZFAIL: mmap of output file failed want 0x1b32c20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32d20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32e20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2bc20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2bd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f720000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2cf20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2dd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2ec20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2fd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=0 req=2377 state=1 status=67 (errno 9: Bad file descriptor) [ 566.579810][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 566.579828][ T30] audit: type=1400 audit(1725158152.405:3376): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[449]" dev="pipefs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 566.620594][ T30] audit: type=1400 audit(1725158152.435:3377): avc: denied { name_bind } for pid=9670 comm="syz.3.2429" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 566.642284][ T30] audit: type=1400 audit(1725158152.435:3378): avc: denied { node_bind } for pid=9670 comm="syz.3.2429" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 566.927104][ T1722] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 567.658017][ T540] device bridge_slave_1 left promiscuous mode [ 567.663976][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.671421][ T540] device bridge_slave_0 left promiscuous mode [ 567.677437][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.685131][ T540] device veth1_macvtap left promiscuous mode [ 567.690993][ T540] device veth0_vlan left promiscuous mode [ 568.178386][ T540] tipc: Disabling bearer [ 568.183435][ T540] tipc: Left network mode [ 569.108445][ T540] device bridge_slave_1 left promiscuous mode [ 569.114387][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.121680][ T540] device bridge_slave_0 left promiscuous mode [ 569.127745][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.135660][ T540] device bridge_slave_1 left promiscuous mode [ 569.141664][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.148989][ T540] device bridge_slave_0 left promiscuous mode [ 569.154906][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.163917][ T540] device bridge_slave_1 left promiscuous mode [ 569.169920][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.177138][ T540] device bridge_slave_0 left promiscuous mode [ 569.183064][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.191673][ T540] device veth1_macvtap left promiscuous mode [ 569.197640][ T540] device veth1_macvtap left promiscuous mode [ 569.203445][ T540] device veth0_vlan left promiscuous mode [ 569.209476][ T540] device veth1_macvtap left promiscuous mode [ 569.215278][ T540] device veth0_vlan left promiscuous mode