last executing test programs: 4m4.234228788s ago: executing program 3 (id=111): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0400000000000000000000000000800000000000", @ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000300)={0x1, 0x327, 0x3}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f8b", 0x2}], 0x1}, 0x8c0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 4m3.479826432s ago: executing program 3 (id=116): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x23, 0x24, 0x200, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) 4m3.476786752s ago: executing program 2 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x801}, 0xe) getpeername$packet(r3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32], 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mkdir(&(0x7f0000000180)='./file1\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4m2.754008837s ago: executing program 4 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xe6) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x32b}) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRES64=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81, 0x0) unshare(0x26020480) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 4m2.212244887s ago: executing program 2 (id=120): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c1c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x89, 0x29b, &(0x7f0000000180)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, 0x0, 0x0) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) syz_io_uring_setup(0x3fb4, &(0x7f0000000580)={0x0, 0xf2e, 0x1, 0x3}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[]) 4m1.149407327s ago: executing program 2 (id=122): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = epoll_create1(0x80000) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="5594b5d8b89b765883b9b00c05c04024f5638c233fb2684fd157c50678ab0834b3e55ada556b8efb2ae896efca9f8efcb11304dc9d46d1bb50d5d0e4fd02e51e0925e26fefc3243090f495f9a660f0c5b2f6eea6e72678d92a921a68638a6e0a6cefa323ff6ffe8456042f429b620832899547dde0d4088f060b58076b167f9a19ee14472b4279baa5455093f9aeb18a7d0a7e8f40b73cad44b04724023a72bb6b5f202f1cdf8a5f41cbd987c16699f1e8882285756b151ff0a0fdda7d3bae4221f9a511439947b714276cb28ce173de235348cd852c87afff836a9a9b32d84cb77989899f84", @ANYRES16=r1], 0x0, 0x0}, 0x0) 4m0.610109988s ago: executing program 4 (id=124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000001695"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x700, &(0x7f0000000140)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@acl}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004a40)=[{{&(0x7f0000000080)=@pppoe, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=""/2, 0x2}, 0x8}, {{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/151, 0x97}], 0x1}, 0xe8}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/171, 0xab}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000ac0)=""/113, 0x71}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000000bc0)=""/227, 0xe3}], 0x6, &(0x7f0000000d40)=""/4096, 0x1000}, 0xfffffff7}, {{&(0x7f0000001d40)=@alg, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001dc0)=""/61, 0x3d}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/173, 0xad}], 0x3}, 0x4}, {{&(0x7f0000002f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002f80)=""/111, 0x6f}, {&(0x7f0000003000)=""/23, 0x17}, {&(0x7f0000003040)=""/175, 0xaf}, {&(0x7f0000003100)=""/199, 0xc7}, {&(0x7f0000003200)=""/203, 0xcb}, {&(0x7f0000003300)=""/93, 0x5d}], 0x6, &(0x7f0000003400)=""/243, 0xf3}, 0x13}, {{&(0x7f0000003500)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003580)=""/253, 0xfd}, {&(0x7f0000003680)=""/181, 0xb5}, {&(0x7f0000003740)=""/21, 0x15}, {&(0x7f0000003780)=""/160, 0xa0}, {&(0x7f0000003840)=""/1, 0x1}, {&(0x7f0000003880)=""/229, 0xe5}, {&(0x7f0000003980)=""/34, 0x22}], 0x7, &(0x7f0000003a40)=""/4096, 0x1000}, 0x7}], 0x6, 0x2000, &(0x7f0000004bc0)={0x0, 0x989680}) 3m59.616933537s ago: executing program 4 (id=127): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=0x0, 0x1e, 0x1, 0x8185, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0}, 0x40) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xd, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x1, 0xd, 0xa}], 0x10, 0x8000}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r3, r0, 0x4, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) (async) lseek(r0, 0xfa64, 0x2) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8081) (async) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0], 0x0, 0x9c, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x1e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4962}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x8b, &(0x7f0000000700)=""/139, 0x40f00, 0x60, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x0, 0x7fff, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b40)=[r3], &(0x7f0000000b80)=[{0x5, 0x5, 0x9, 0x3}, {0x0, 0x4, 0xe}, {0x5, 0x1, 0x2, 0x8}, {0x4, 0x3, 0x8, 0x5}, {0x0, 0x5, 0xa, 0x3}], 0x10, 0x9}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x1, 0x80000000, 0xfdb, 0x24880, r7, 0x1, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x4}, 0x50) (async) r8 = openat(r3, &(0x7f0000000e00)='./file0\x00', 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e40)) (async) fcntl$setpipe(r0, 0x407, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e80)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r9, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001040), r3) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000884}, 0x40000) (async) r12 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r8, &(0x7f00000032c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003280)={&(0x7f00000031c0)={0xac, 0x35, 0x200, 0x70bd2b, 0x25dfdbfe, {0x18}, [@typed={0x8, 0x14d, 0x0, 0x0, @pid=r12}, @nested={0x8, 0xe7, 0x0, 0x1, [@nested={0x4, 0xe1}]}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=r13}, @typed={0x76, 0x73, 0x0, 0x0, @binary="2fa03a54cb65dd8e648410fef1cd834d75bcbac8ba87ff57f18cd0b7e725c18e3289276c1cdc9743fdf75c0c20fd909924731b846a34f1ec9abd574fc217580f3c26cf35110bc400fb5395185e4982c54cf3a1243de8334bca0ca726016f29c3cf1f88d8cf0fcdc7f130bc81dc7a81973a20"}, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x5d}]}, 0xac}}, 0x4000080) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r10) sendmsg$NL80211_CMD_GET_REG(r14, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x24, r15, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000003440)={0x73, 0x12, 0x1, 0x4, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @remote, @dev={0xfe, 0x80, '\x00', 0xa}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private1]}, 0x98) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000003500)) 3m59.523077719s ago: executing program 3 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0xb3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) 3m59.202225495s ago: executing program 4 (id=131): syz_mount_image$msdos(&(0x7f0000001100), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f00000013c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x9}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffe}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x58, 0x4a, 0x800, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r7, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) read(r6, &(0x7f0000002340)=""/232, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000d"], 0x3c}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m58.44292351s ago: executing program 3 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m58.126715526s ago: executing program 4 (id=136): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x13, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, 0x0, 0x56) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0xb87, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 3m58.125107856s ago: executing program 3 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000070000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0xd) r10 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r9, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="aa00080000aa0000000000080045000024000000ed0f119078000000000000000800224e0080fff4000000000000000000"], 0x0) 3m58.098753576s ago: executing program 2 (id=139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x160480, 0x0, 0x810, 0x0, 0x0, 0x0) 3m57.92620228s ago: executing program 4 (id=141): syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3m56.981095358s ago: executing program 32 (id=141): syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3m56.952032258s ago: executing program 2 (id=143): syz_mount_image$msdos(&(0x7f0000001100), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f00000013c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000d"], 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x8, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x3, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001680)={{0x4, 0x0, 0x80, {0x10000, 0x3000}}, "428973d456afd6a912377a2204e7fb268460b8e5c130621c50417344439ea0027818769d7ef8e4717c9ff63ca67a07781b03e2d056e6e945cc94f8c666cdad1379453b1a978b66e295d39c67b7071e6801104e6957a6755746570b3ea4d5195546a957f1dfbdf919448b28d1af574859e4be1a7ba0ca8aef554fcd3bb4bd37b23e2445917d95c1ac1ebb8ad4d201a39b40a60fef37c0f512b390c38b27d49901a8712376ebe26219ca88364cdf4c719c6e244cc243eaba93fa613c45c4c3f16802d0c7717bc958e943a65f883cb543f49cf579f9b4697a91e4e696b0a05fb4daf5e713e1969be69ce978fa4acd284e14f41f1fdd98ebefc488fdbf2ce7ed6afbf281b86a0f37199c3e77f96b6d443d83dffb2428b8bde68de54bbfebe003bba9946c48389dc0951dc4eba00ea5e2ab44d6f03b21d04609b7a2f2d6bbb47742f1a00ec98bfb72b29a54751830d9131cfeda67c00a7e9dff1d9bb9560d11d8efe20cd4e3de1f6f14a23a58dfccfcbf5baa379c4cdd625d6e93f55e38ee0a8dc945d88d5f9a62db524d73f39c1a0d23ecae862d3b142ba9421ee9f7b273d9521afd4e15d8943707fc45091996611d27f88ccbd995bb0d759818e2ee70ee0e177da7eb09c6fc86874f120a4c249a8fc2236f871befc8fb7c9dd0ba8630490919870462ecae1f5516cdba5668251eeb3240602c16c82b8efb0e50b2268ef6cf0b0881b4ba9f7d27089f4136efdea9faacff17f0143ab28a33da63092443e4992ce56e905c22233ecad9afa8a20abc0cf63c0b155cf4ae26ff322024843cf2b52f2f9954de334734b033cc1a75a5eab51dc54f0b0c69eb8be588efe7bf1359914bd05f884d3b17ba5547125416db5bf40dff7343c4b9a40f828b64e4ae9d236b9dc2d4c3ad3acbd647cfea33eb9bdf681105e548ba5eb5814c211fe26cba03e7bb3666f3c247d39f928cd8f1855e6a7bf8bb1b0d9c7e303bad5f429d14573b37367c3f3522cb7479068fdda40abf1f4656716166058567c71076a461d788d958c6746294cdad6d5dbd28bb8c445a024badb4c8aa72dbe5e04b28804a1af34cf38433e8d14f8cb40ef114d9d9e8726e4240a777a5017de367e19b9aa27234a36cec1402e7b785b57ce21d1d0968ac7f9add2082640a55d78db85cbd963f53aa1cc1d132f3283d8b490d9b1c981ece091a044324b874bccb322474bccad9a18dd71f19b7d0c4777922a482c666e02a819dcfcfaf5aac76f4d4a0e22c5e1401bc5eb0b794df8cfd5765a49f505084bc420517e198c4fecf0a12e0ff71dd09a74f57aa03a5f312465a2834e67695fa9c931704ba11ceb4ccc5709faf2791479370436adac7f0f17b9e9f4f4f9a9b7de154fb93e1b4db82002ed2e79a843cddf8c9ad0f9c49efc5a0e843195eea98fef296fc4475fb8fd0e1d817a0db11b23eb8345566aa03dd830712eddc913199e07c1174ec10ffc2670b9a29a60af7c749d78085c0e892816cfd036ab7f4a6e7c70dc365905c9b1dd780813219b3d8a43ab2b59921e1836e1229abed5a73b326bc5e3fdc5d21fd48bb54cc86575d4e4326149d142386f8df58f1e3d3d265ababa8839c39d73709cb0b7702acfd088bebaac5c4ad833e600c7dd0b4bfad508bcf68d10eb39bbbccf0d43a235698c4c3d48d76727235b03577f74604ba45ac1ae783f35d6d1dfa0fb25cfdd240b124cd35a8532edfe763435e09cc861ab8b1043d6da2877e43dd1e8caa958a202ab4344839a04df2bd67a562154dd775a1d2cd70d7bc61dbb2f4e4044e7b2134643840565202da5133ab68bdd6a3816aa378cd9711a9332c1082b89f5cb342bf4c1f2e46f11cb348f12b46228ddb84a0b883ae0187691dd7f7214e9707d3c414e15c557d6fa0658adaf2f069ca44dd3e5ad5401cff3dfe624eea8cf64af80af715dbbdce1a0951c41045f34dd46f62be9b313736b59457ddbc9a2bf95d3c59c56f6c071de04bef884ed91ec151c0f3e5ca1b12f4972a5fa2cd05a26a61545e6d1b6be6ca2312eecf84cdaef52e5f8430f2b45de1a2979177b65969aa33c279282f0276f38810cb7d86d4cbd32ad52076c2788aae6029f1fdae97bef0d5fea027fde510183f2a013735d7bdaa8901fb2fc07a05b8047ca665d3562ba331205fb77513b0d61826140cdf58e8f74ba8a3561adacd3bf3e619de0c44791d899c14211acb0a152a82ec9e07d872a91bfa52920fe6bbac2746174729a507c823bcae6c3b3cbf8bfa51162d7341111337ef16de72ccf5546f059caaffd581c14ba35b7e1a6c877fd53392650d51c70ffd5ce5e78847759e4a2b7e3dd50f075a596e9809c892f8810e361a17c64e1c97f760a610b91554ce2aa4b180e5eaf7f541d2f30d99a2bf4ca74cc381835073b5940c41b9e0cf91a32863ef4bf182166a49fbe5dc8e40f884f63facb4fdaf39c29b17964b8ddaad1f76254aa2b490a0d64a2c821d7e4e63347325d7743c0ea33bc18abd4e7789b478e94ddd9df301c891e4ad5793f4834e922f77efdb1609cd23ea35daa5648ffa33ca75933106ee0b45f51de8547ae80f768e21c5014250a383e910b7ccd31e0977b8b2002f7c25651d3fa51b7d46432ef54c7538d5aecf071d15fa32503f08ad97485b2cc92258465f8e59237b17b22247574957cf5668935864cc0dfef6e70399280960a3e7c6f024c23f1c3206b78d66bafe746f691b329536de0f518d77947fea2b0e113914e6236bbb75886d0f93c36f902e8c72d553c13a1f114de2d9bfbe89a6af116b0f47bdae9e0356949e9dabac7a27ff90e4d0ebdaacb9810dc577ad194e1d684f28a996fef4dc05b895f88e6b66ae997cd251f1973d114d389143fa5fd3c7a479df78048f1ff8d9b95e53d88bd71c626ba2f7f6f168dd49485165f029c0eea5357fb301e6635d09a7db83834495f21a05d2c1351b1594aacc059770a0801f7498004078818a37b5b1e33648a1baea350739cfee1e3bd5dbf74bfc3371f3da0c2bd973393d75b2a763efdfc5bd5c680c210b50910731b03e55e4ee162d70286413cf851df478ed27ca01fd2e1b15a7677b5a700b1e15d12c18c263b5add2459d1570e45552e44b4b8e4c038ed0015982534a271e13829ae754626403c90b3a2e61f4979e65969d2bb96a5894f21c0cbd63321f441a93858c9e093ce8d72ab7fc0f983f295973b68213054685e43365e3b66bc0a0f7a505961b0c6323321ce6938373c893c48a4baaeff8ddea4723544bf5ed940d11d0d8d9a84b017c3c7a230ee5820c40f1d7446c8940d55c30d575eb556f424f197cafeae455faf9a88e37a6aaa6a90c629e3213f92f3a0b9577f45c823b3b01033fd9ae3e665b20957f58dd37cfcbb49b75cec95f46de2caa60cff015f8fd5d6f181a17365e22a93a518d6ffa2d5045aff0862a26655b7d38f3716ab4b7526f2dab44c045d378b5e01b44238de077b0b13a92187047b7b02ae5a7f36d1d8df94f84358a533be44beafdca7bdb99aab57836feb19a76aabb4c21db9096f54cfb6b73949413bc03809e52c0f4845357e18437c58c432b70f7e74b9a2118412e750769c443f9a78531b1f2459ff79d8f2c5c6c2d72a6aed0d3b361a95969d63503b2d5d82d84afb76791f734bf5a3cab43ab15276d7746f6aef6637ab4f3b56de6edab58523101eeeeaa4e3dc414fe054144f682677fdce465605627b379fb98414a74eb6ba43c2a99de5d1b6d3bfb40ca21fb18930d913ee6f8b2e1c3802ec6bd1d79bf171ac43708ed99060570c9fae3c1cc22c2f2b9e1673e2d6b9341bc636c5a439a532fbdd6fbfd57670a6af52fd4fa6561f6a37c1b1a6fca514c5d5dcf96eb86158a646d7a29a305f1d2cde057cb6f022c997a3301a1a7520aec862b2bb1e728745396888dd82b7586ef601c124174589a5f9510eb1f9545ba3b4ef45f76f75563de4fa7e01dca2ce9b091fc96815a52b45290fc3656320a7598e91fbba2aff65481d50ab19adfee8f0b4e00759a9950019198dc44a9849db497f27981c6d731a1c576b42ecdd8ae60894d32dec65aa32d6c577886d2220f32f430d49ffce6498c9d74e3ff168247e9ab27428f5ccb951edb63812771bc32a8115bd008529bf9d4c1de0e0e7b611bc0c6458d6fb79462e54957f02068dd62845b74b319136070b70618ecb38af576d31639eac8c50a8d5693836ac96c72f1b4ea45a5f63213d3139f5cff9cb199c7a8881b29116b0bba5075d14299258973f507cbcb3dc6e38a1962f79ddc3bf335c10519d771daa16e539bb9f105c5cb9ddf3ba6b38c40edb919e0320ec5cb3ada69471cc6a411b08a6ed32506570b03712056ce1ff6e60590dd088e74472154fc86503293d534d9ada8eff87fc5febbba7f26009bfbe00d2ee4144e9b5ce2fb449139eb495b05fd9dbde5f1e7ac161973cf79ca7ca8e6301ee72614dda937c568ae2991bf01fb6913bc324c44b7b3782ba153825c454232a4c3a28b1ae9b869f1f2034e0613b467c2664c07d4bc04dedbcfb47bb2745d62ecb4174a45dfcbb61b26985a79f45d09e3d837e3fc5214e11d2a4d12d12b1239f6f8facfad03a7c98e5fefe6866f182e2c6621319be695637a8b29b6e1e62fe5cbd16b39084a87be8f7866d0c5afff93054c0c1cd9041b695fc803c27c43cb1d3cc183598fed021c33a74930d68786a54eafbd5d4d2835968b26c7a4ec5d9098c614d241a02ffb10f443ee3625eb65e83129583b8f16ef735ee90d7c5d45bd5c4e013e778557f17342aae04213dd6f39a88d7a2439bbf228b580e02d4bbf535b617b0c8cd20476420223617560fd0339e57177234a33dc423b0198494d62b0f2bd95913cfdde96a10836ef53f7f6de9234365b7fcfc36e561e89e57ccfcdeae50988dd0036a295b23f641de65a79ce008f590c8fd01802dae80f566df976daa795814c1be213d55bcbc8518fa12ef7a858d25b7cf61fc0da71a0bac0eed80b1102ed452f3f1648b02441d1b626997b91ca14285b5a7028e943ebec19e9d80f6f4b0c64f8d063fa913d7502ee8b414e5973d044ed22fb5ff4d01dedef27099b5ab9ee0bbdfaffc1fd3e1442f1b658684ae83be515dbc6b96e06fc0fba73eccef0029420f518cb0925356402e5ed37e72bb0e9ba2f7d4a238e537d5093cf54ca285389bf89ea05f5cd91fd9da7d25d70ddc935a113e4dd08e76358f1816c47039317edffec6a6c88d9c88b332c1e813b5e9aac8d1101fc9a51212f378b4fd8030c774884f7dcb1bfb2e857752ed8d4ca88a2ee79c4ad4cbb0882b82f998f41aaece8b66de93908de6a8912a1166ef5dfee63c8cd90d2968b01fc1e4badd4e3619b6bfb5d7566af88b1cc74eec1d3a340cd784ef51aec43f52380d9bd842a83fc6746e25e6e3b25264310db45650d47e2f24882ef604be44417bc8a88d41a9e7b44516ea0f1f1cac4ee53c003735f3f37c7c1da1fa7a38f633c8967cb23d8e53d341b5375ee5f628549e76dcdd469727fd43c0eb1f9fa333469ee39267f28b95524ec33434a1c806756369dad261b55f919d811e60db1209b81f359a1890462f536f29c764243dfeefd2b528e176cd22f34bc6f298e025ae0e6c2d6079172dbde895fd8241369f270dcfb01714a68be12ab99f26dbeb2ced97533c884c0ee2b302c03af7b4bc9238fbd2be32d9096927a8f5d60d9b81d154a196b225bef781fe79c83f505cb6f69389438ec7143a4b27595d2c77a2c39d405a73ab1f1bd8ebe884956564f2cbc81f634889dbf18fdf9848cc152712f863d000f5366483edbe8", "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"}) 3m56.951827318s ago: executing program 3 (id=144): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) 3m56.780643832s ago: executing program 33 (id=144): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) 3m56.586428125s ago: executing program 2 (id=146): syz_clone3(&(0x7f0000000280)={0x4000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x33}, &(0x7f0000000100)=""/69, 0x45, &(0x7f0000000180)=""/99, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) open_tree(r1, &(0x7f00000003c0)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DHOJEQq4fZFIwwUVsF9JVLXTTRaFdlP4Bha6z0UJXpZtWWuheKkV0n3InM8lgZpJUZzx+/H5w555zz2Se55lL5p4DcyeAl9ZE+ZBH7I+Ic1nEWPN4HhHDjdZIxNLq8x7cvzb18P61qSxWVj74O4useaz1Wllzv7vZGYmIX85k8d9PNsatLyzOVouiNtfsH56/eOVwfWHx0MzF6oXahdqlyROTx46fOHb87SM9q/XdvTfPfjV5as/3Z25dfe3G719mcSpGm2PtdfTKREysvSftBiOi2utgiQw062mvMxtMmBAAAJvK2+Zw/4uxGIj1ydtY3Po1aXIAAABAT6wMRKwAAAAAL7jM+h8AAABecK3vATy4f22qtaX9RsLTde90RIx3qn8wlhr7kRiKiF0Psmi/rTVb/bMnNhER+34a/7Hcok/3IW9m6XpE/L9T/Vmj/vHGXdwb688johd3Zk880n+e6j/Vg/ip6wfg5bR8evVCtvH6l6/Nf6LD9W+ww7XrcaS+/nWf/63XP9Bl/vf+NmPUDnz6ebex9vlf8e2rt8v45f6JivoX7l2PeGWw+/ynrD/rUv+5bcYY+uPnH7qNlfWX9ba2p13/yjcRBzuuf9Z/0Sbb/PeJDk/PFLXmY8cYN25/t69b/PbzX25l/NZa4Gkoz/+uLvVvdf6vbDPG8l8H/+w2tnX9+d3h7MNGa7h55Gp1fn5uMmI4O7vx+NHNc2k9p/UaZf1vvr75/3+n+svPhKXm+1CuBa4392X/40diHnrvnTcev/7+Kus//5jn/+Y2Y3z92dzdbmOp6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+ZBHxGhkeWWtneeVSsTuiNgXu/Licn3+renLH106X45FjMdQPj1T1I5ExNhqPyv7k432ev/oI/1jEbE3Ir4Y29noV6YuF+dTFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCa3RExGlleiYg8Ih6O5XmlkjorAAAAoOfGUycAAAAA9J31PwAAALz4rP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADos70Hlu9kEbF0cmdjKw03x4aSZgb0W546ASCZgdQJAMkMpk4ASMYaH8i2GB/pOrKj57kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ow6uH/5ThYRSyd3NrbScHNsKGlmQL/lqRMAkhlInQCQzGDqBIBkrPGBbIvxka4jO3qeCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPrtHGluWViMgb7TyvVCL2RMR4DGXTM0XtSET8JyJ+GxvaUfYnUycNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAz9UXFmerRVGb09DQ0FhrpP5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghfrC4my1KGpz9dSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKnVFxZnq0VRm+tjI3WNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACk808AAAD///qbAaI=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x20006, 0x0, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c010000000000000000000000000011000000000000"], 0x0, 0x26}, 0x20) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8, 0x8, 0x1, 0x4000, r2, 0x3, '\x00', 0x0, r5, 0x5, 0x0, 0x3, 0xa}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="30626c6b696f2005000000000000006fef53fc202b60694473202b70"], 0x5) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 3m56.517716827s ago: executing program 34 (id=146): syz_clone3(&(0x7f0000000280)={0x4000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x33}, &(0x7f0000000100)=""/69, 0x45, &(0x7f0000000180)=""/99, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) open_tree(r1, &(0x7f00000003c0)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DHOJEQq4fZFIwwUVsF9JVLXTTRaFdlP4Bha6z0UJXpZtWWuheKkV0n3InM8lgZpJUZzx+/H5w555zz2Se55lL5p4DcyeAl9ZE+ZBH7I+Ic1nEWPN4HhHDjdZIxNLq8x7cvzb18P61qSxWVj74O4useaz1Wllzv7vZGYmIX85k8d9PNsatLyzOVouiNtfsH56/eOVwfWHx0MzF6oXahdqlyROTx46fOHb87SM9q/XdvTfPfjV5as/3Z25dfe3G719mcSpGm2PtdfTKREysvSftBiOi2utgiQw062mvMxtMmBAAAJvK2+Zw/4uxGIj1ydtY3Po1aXIAAABAT6wMRKwAAAAAL7jM+h8AAABecK3vATy4f22qtaX9RsLTde90RIx3qn8wlhr7kRiKiF0Psmi/rTVb/bMnNhER+34a/7Hcok/3IW9m6XpE/L9T/Vmj/vHGXdwb688johd3Zk880n+e6j/Vg/ip6wfg5bR8evVCtvH6l6/Nf6LD9W+ww7XrcaS+/nWf/63XP9Bl/vf+NmPUDnz6ebex9vlf8e2rt8v45f6JivoX7l2PeGWw+/ynrD/rUv+5bcYY+uPnH7qNlfWX9ba2p13/yjcRBzuuf9Z/0Sbb/PeJDk/PFLXmY8cYN25/t69b/PbzX25l/NZa4Gkoz/+uLvVvdf6vbDPG8l8H/+w2tnX9+d3h7MNGa7h55Gp1fn5uMmI4O7vx+NHNc2k9p/UaZf1vvr75/3+n+svPhKXm+1CuBa4392X/40diHnrvnTcev/7+Kus//5jn/+Y2Y3z92dzdbmOp6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+ZBHxGhkeWWtneeVSsTuiNgXu/Licn3+renLH106X45FjMdQPj1T1I5ExNhqPyv7k432ev/oI/1jEbE3Ir4Y29noV6YuF+dTFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCa3RExGlleiYg8Ih6O5XmlkjorAAAAoOfGUycAAAAA9J31PwAAALz4rP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADos70Hlu9kEbF0cmdjKw03x4aSZgb0W546ASCZgdQJAMkMpk4ASMYaH8i2GB/pOrKj57kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ow6uH/5ThYRSyd3NrbScHNsKGlmQL/lqRMAkhlInQCQzGDqBIBkrPGBbIvxka4jO3qeCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPrtHGluWViMgb7TyvVCL2RMR4DGXTM0XtSET8JyJ+GxvaUfYnUycNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAz9UXFmerRVGb09DQ0FhrpP5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghfrC4my1KGpz9dSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKnVFxZnq0VRm+tjI3WNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACk808AAAD///qbAaI=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x20006, 0x0, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$eJzs3M1rHGUYAPBnJtmkTaMbQfDjIEILFko3SXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIePboVSj1D/AmBQXvgmiNB/GyMptNatNsum3Srqa/H0z3eefjfd6nO7zsQN4J4Ln1ZvFPEjEcERcjotzen0bEQCs6EnF987yNe9emiy2JZvPSb0lxWWw0y9t9Je3PY9G6JF6NiDuliFMfPZy31lhbmMrzbKXdHq0vLo/WGmtD84tTc9lctjQ+cW7s7MTE2bGJR9bwSpe1nnj33NFb37+zvv7DN/Wbb/SfTmKyVXe0a+uym8ey+X9Siskd+5eeRrIeSno9AAAAulL8zu+LiP7Wr9Ry9LUiAAAA4DBpDjYBAACAQy+JPQ4e2esgAAAA8P+w9XcAW2t7n9Y62E5+fTsiRnbL399aQxxxJEoRMbSRPLAyIdm8DPbl+o2IuD258/77qrjDru+z77Ed7QfXSA/ss3cOwu1i/pncbf5Jt+ef2GX+6d96d8I+dZ7/7ufv6zD/Xewyx7dfvFbqmP9GxOv9u+VPtvMnHfK/12X+m+sf33rUObvl/3eurfdDnH74/RCTs/P5nq8fuPP3ybudjhX1D3XK3+q1c/3LXdRe+GDjj4VOc0mR/+Txvb//3fIX98Qn7XGkEXGr/Vm013fkOL7443d71T8T0XyS7//LLuv/+evBq12eCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC1pRAxHkla24zStVCKORcTLMZTm1Vr91Gx1dWmmOBYxEqV0dj7PxiKivNlOivZ4K77fPrOjPRERL/10dDPpfJ5Vpqv5TK+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNuxiBiOJK1ERBoRf5bTtFKJ6O/i2sFnMD4AAADggIz0egAAAADAU+f5HwAAAA6/J33+Tw54HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChdvHChWJrbty7Nl20Z640VheqV07PZLWFyuLqdGW6urJcmatW5/KsMl1dfFR/ebW6PH4uVq+O1rNafbTWWLu8WF1dql+eX5yayy5npWdSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI9ruLUlaSUi0lacppVKxAsRMRKlZHY+z8Yi4sWIuFsuDRbt8V4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgANXa6wtTOV5tiIQCJ5Z8GFE/AeGsUfQ65kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBeqDXWFqbyPFup9XokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fb6SxIRxfZW+cTwjoN9A8lf5SIYiIj3P7/06dWpen1lPGIg+X17f/2z9v4zPSkAAAAAngfnH+fkref0red4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbtUaawtTeZ6t7C84H421ZtLhnF7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJl/AgAA///CK8Nb") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c010000000000000000000000000011000000000000"], 0x0, 0x26}, 0x20) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x8, 0x8, 0x1, 0x4000, r2, 0x3, '\x00', 0x0, r5, 0x5, 0x0, 0x3, 0xa}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="30626c6b696f2005000000000000006fef53fc202b60694473202b70"], 0x5) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 12.481989309s ago: executing program 6 (id=828): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getxattr(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=@known='com.apple.FinderInfo\x00', &(0x7f0000000440)=""/111, 0x6f) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") mkdir(0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) pipe(&(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="10"], 0x20) ptrace$poke(0x1, r1, &(0x7f0000000280), 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) 12.092058056s ago: executing program 1 (id=829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 11.814777851s ago: executing program 1 (id=832): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x23, 0x24, 0x200, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) 9.885120778s ago: executing program 7 (id=839): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) pipe(&(0x7f0000002bc0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x20) ptrace$poke(0x1, r1, &(0x7f0000000280), 0x7) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000780)=""/252) 8.874779178s ago: executing program 5 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8, 0x7, 0x4, 0x80000000, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @broadcast, @local}}}}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 8.710119732s ago: executing program 0 (id=842): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x13, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, 0x0, 0x56) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0xb87, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 6.791575749s ago: executing program 6 (id=843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.600649652s ago: executing program 0 (id=844): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0x100}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a015174858a1171e2d8b21659736b5af7ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6a0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f34303b13cd07bac87b8774ef637dbb8b22708c6feab8c639c9ee9572923dcfe729b3ff9b59edf8f98e8ae75dc57b6dc866405", 0x8e}, {&(0x7f0000000800)="d4dc81873ef03a797da4039a00006c7ee000001380604c9fc692ef42cff0e4d191", 0x21}, {&(0x7f00000002c0)="6d2657493131db30447fce55af67ac7f10106db6d5cacd06cd9a77b801ded29e208feef1fc2a5bbf1c2783c821e1d0c07bbb11ed8ebb37d0dbcfac913bf604dd833dd7fd2cbd028227ddfaec1d73aed98147250dac77ea7c6603f217dd6648ef9dd91e3fc2f0f7d40cbd9199b32b62d89c1c1cb6ce18e744658c1c50fdba612b6ff093a3c8d0b813aef1aa5ed0c1ed82ae1eaaada03e42b1c201a707e1252787a92233487cb97851", 0xa8}, {&(0x7f00000025c0)="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", 0xef8}], 0x5}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e4", 0x1d}, {&(0x7f0000000680)="3c79f26ea4eacc412e1982c663c230408536db37b8bc69eaf6013960b0fe0d8b18225e34008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e8f00000000ffffffffe32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d6502411ec4161d7c33c21eae64d", 0x73}, {&(0x7f0000000d00)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250a10a879323c67e9e14be35a0ff24a9c56a06c2489f5068b43198feed152c7749f5368a07f20c68ed5192c2603c80353303fd668856c90d48e69046294b1b97c873d09691413243175e8e0091e5b5d8f09f771e2b5ea45f1806a77788434c435e029e8d6c3eb8dd5ce365c52794fdeba397f17c239169772f93af2a9044137b11b0e2e8e03996120b5bd749ee87140dd44a0a2b7472470809acd7a635e842a104ce4ef522cf1c29a602ab806adc85d00bc0bce12d80aad3c94b4e84d25800876137f071ac2eca2ab5b41110bb1b92d7ead272e52679b26359424687374065f02a29a37f53fe6c611953c3fac4898b32df7435e0bca7fdb5153bd2c6b90614e6d437c7b0f0fdf132d6cf57a7225d52116fe404d4b7dceb4a332e623cfa298623cf64728dc66104bc16c799341c5182da780e898bcf71a3561d8f3c60b4077fbb83fdffe581e5f4dfa6497c1a6a7b3f616e22322189ea75aa4960109e0ea55d2eec2646f7339d35d70b0890624bdcea5e9a6b50530005beffd3a74204fcb754ecc7b3b6328b0f586d4ec3a680c2ccba4fae25c93646a3a511d214429338a531b7c97b0e71fef2b65325b651bfb79bec3bd983955e3a6ae6f25420373b705cd5a0ae4e88b0cb798dcdff1840e9c223afd2c2b775ec47d469dbcfc3291351d158f29e91bb8e026a83c3e1119f354b4d6de223fc3841d43b0fcb5ec44322b83e54fce32d21b42e82a9309fbb0a83307dd531372", 0x280}], 0x3}}], 0x2, 0x14008094) 6.462643865s ago: executing program 7 (id=845): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0400000000000000000000000000800000000000", @ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000300)={0x1, 0x327, 0x3}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f8b", 0x2}], 0x1}, 0x8c0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 6.037938543s ago: executing program 7 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.908096176s ago: executing program 5 (id=847): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x200, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c97059570cd500000000000000cdadadbf00"/30, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x0, 0x0, 0x4, 0x4}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r9}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x6a, r9}) 5.888062676s ago: executing program 0 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mount$incfs(0x0, &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)=ANY=[]) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 5.730889109s ago: executing program 7 (id=849): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 5.343325237s ago: executing program 6 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 4.979584654s ago: executing program 5 (id=851): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = epoll_create1(0x80000) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="5594b5d8b89b765883b9b00c05c04024f5638c233fb2684fd157c50678ab0834b3e55ada556b8efb2ae896efca9f8efcb11304dc9d46d1bb50d5d0e4fd02e51e0925e26fefc3243090f495f9a660f0c5b2f6eea6e72678d92a921a68638a6e0a6cefa323ff6ffe8456042f429b620832899547dde0d4088f060b58076b167f9a19ee14472b4279baa5455093f9aeb18a7d0a7e8f40b73cad44b04724023a72bb6b5f202f1cdf8a5f41cbd987c16699f1e8882285756b151ff0a0fdda7d3bae4221f9a511439947b714276cb28ce173de235348cd852c87afff836a9a9b32d84cb77989899f84", @ANYRES16=r1], 0x0, 0x0}, 0x0) 3.967396293s ago: executing program 0 (id=852): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getrlimit(0xe, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000180)) 3.486084432s ago: executing program 0 (id=853): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getxattr(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=@known='com.apple.FinderInfo\x00', &(0x7f0000000440)=""/111, 0x6f) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") mkdir(0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) pipe(&(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="10"], 0x20) ptrace$poke(0x1, r1, &(0x7f0000000280), 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) 3.08909439s ago: executing program 7 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 3.050049261s ago: executing program 7 (id=855): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae500"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) pipe(&(0x7f0000002bc0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x20) ptrace$poke(0x1, r1, &(0x7f0000000280), 0x7) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000780)=""/252) 2.667923668s ago: executing program 5 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) fchmod(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0400000000000000000000000000800000000000", @ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000300)={0x1, 0x327, 0x3}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) syz_emit_ethernet(0x13f, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x109, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x0, 0x1c, "e6b128f1f07453ed8e501a180f87875cfd93599c7b7c7b7d463ebbf31ccd5f74e3a7bd3733a8d38f0021f7f22a63a326918b97acaf2687d503915f0120fc9cea280f423304842e5f2304bc7b1b47d8c6a318e457835f611cf3e007035abd56a797edfa270e2aff92da93d302c3fc522106289f83307474eddcb2967e7dcbd5276cb0c196103ca44ef46bd3656202c2bc3d40e885b91412e4ba9a32c5d3e4e2779ed8dbe23fc5811fbd9cf5786ae1b8547e473be21317ff5d380a9eb7481ac2809b20c81f3afaa68459402d5022fb0948085417e498576f0000000000000000"}]}}}}}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x5e}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 2.666971028s ago: executing program 1 (id=866): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x23, 0x24, 0x200, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) 2.161438828s ago: executing program 5 (id=857): socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000480)={0x7, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/107, 0x6b}], &(0x7f0000000780)=[0x6, 0x86, 0x1, 0x7fffffffffffffff, 0x10000, 0x8c, 0x1ff, 0x9, 0x8, 0x1]}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) 1.566936569s ago: executing program 1 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.524272841s ago: executing program 6 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.422686082s ago: executing program 6 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.392788663s ago: executing program 1 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 345.294343ms ago: executing program 5 (id=862): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x200, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x0, 0x0, 0x4, 0x4}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r9}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x6a, r9}) 344.771223ms ago: executing program 0 (id=863): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getrlimit(0xe, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000180)) 343.936273ms ago: executing program 6 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) fchmod(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0400000000000000000000000000800000000000", @ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000300)={0x1, 0x327, 0x3}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) syz_emit_ethernet(0x13f, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x109, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x0, 0x1c, "e6b128f1f07453ed8e501a180f87875cfd93599c7b7c7b7d463ebbf31ccd5f74e3a7bd3733a8d38f0021f7f22a63a326918b97acaf2687d503915f0120fc9cea280f423304842e5f2304bc7b1b47d8c6a318e457835f611cf3e007035abd56a797edfa270e2aff92da93d302c3fc522106289f83307474eddcb2967e7dcbd5276cb0c196103ca44ef46bd3656202c2bc3d40e885b91412e4ba9a32c5d3e4e2779ed8dbe23fc5811fbd9cf5786ae1b8547e473be21317ff5d380a9eb7481ac2809b20c81f3afaa68459402d5022fb0948085417e498576f0000000000000000"}]}}}}}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x5e}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 0s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): 6.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.513658][ T504] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.522920][ T504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.523026][ T428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.541149][ T428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 125.552251][ T504] usb 2-1: config 0 descriptor?? [ 125.558476][ T504] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 125.571608][ T428] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.580784][ T428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.588856][ T428] usb 1-1: Product: syz [ 125.593085][ T428] usb 1-1: Manufacturer: syz [ 125.597783][ T428] usb 1-1: SerialNumber: syz [ 125.609783][ T428] usb 1-1: config 0 descriptor?? [ 125.623119][ T1067] EXT4-fs (loop5): unmounting filesystem. [ 125.741804][ T1681] FAULT_INJECTION: forcing a failure. [ 125.741804][ T1681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.754998][ T1681] CPU: 1 PID: 1681 Comm: syz.5.307 Not tainted syzkaller #0 [ 125.762307][ T1681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.772370][ T1681] Call Trace: [ 125.775683][ T1681] [ 125.778620][ T1681] __dump_stack+0x21/0x24 [ 125.782953][ T1681] dump_stack_lvl+0xee/0x150 [ 125.787537][ T1681] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.792689][ T1681] dump_stack+0x15/0x24 [ 125.796853][ T1681] should_fail_ex+0x3d4/0x520 [ 125.801548][ T1681] should_fail+0xb/0x10 [ 125.805752][ T1681] should_fail_usercopy+0x1a/0x20 [ 125.810821][ T1681] _copy_to_user+0x1e/0x90 [ 125.815253][ T1681] simple_read_from_buffer+0xe9/0x160 [ 125.820651][ T1681] proc_fail_nth_read+0x19a/0x210 [ 125.825699][ T1681] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 125.831253][ T1681] ? security_file_permission+0x94/0xb0 [ 125.836832][ T1681] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 125.842382][ T1681] vfs_read+0x26e/0x8c0 [ 125.846553][ T1681] ? __cfi_vfs_read+0x10/0x10 [ 125.851247][ T1681] ? __kasan_check_write+0x14/0x20 [ 125.856375][ T1681] ? mutex_lock+0x8d/0x1a0 [ 125.860798][ T1681] ? __cfi_mutex_lock+0x10/0x10 [ 125.865654][ T1681] ? __fdget_pos+0x2cd/0x380 [ 125.870349][ T1681] ? ksys_read+0x71/0x240 [ 125.874698][ T1681] ksys_read+0x140/0x240 [ 125.879134][ T1681] ? __cfi_ksys_read+0x10/0x10 [ 125.883961][ T1681] ? fpregs_restore_userregs+0x128/0x260 [ 125.889627][ T1681] __x64_sys_read+0x7b/0x90 [ 125.894174][ T1681] x64_sys_call+0x2f/0x9a0 [ 125.898623][ T1681] do_syscall_64+0x4c/0xa0 [ 125.903065][ T1681] ? clear_bhb_loop+0x30/0x80 [ 125.907775][ T1681] ? clear_bhb_loop+0x30/0x80 [ 125.912491][ T1681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.918510][ T1681] RIP: 0033:0x7f3328d8d5bc [ 125.922946][ T1681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.942663][ T1681] RSP: 002b:00007f3329bed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.951120][ T1681] RAX: ffffffffffffffda RBX: 00007f3328fd6180 RCX: 00007f3328d8d5bc [ 125.959103][ T1681] RDX: 000000000000000f RSI: 00007f3329bed0a0 RDI: 0000000000000007 [ 125.967099][ T1681] RBP: 00007f3329bed090 R08: 0000000000000000 R09: 0000000000000000 [ 125.975111][ T1681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.983119][ T1681] R13: 00007f3328fd6218 R14: 00007f3328fd6180 R15: 00007ffd89ec00d8 [ 125.991113][ T1681] [ 126.081069][ T1682] loop0: detected capacity change from 0 to 128 [ 126.118312][ T1682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.128890][ T1682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.191674][ T28] audit: type=1400 audit(1757563827.669:723): avc: denied { bind } for pid=1684 comm="syz.6.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.213687][ T28] audit: type=1400 audit(1757563827.689:724): avc: denied { setopt } for pid=1684 comm="syz.6.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.266383][ T28] audit: type=1400 audit(1757563827.739:725): avc: denied { create } for pid=1684 comm="syz.6.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.785095][ T1695] bridge0: port 3(vlan2) entered blocking state [ 126.814464][ T1695] bridge0: port 3(vlan2) entered disabled state [ 126.866165][ T1696] loop6: detected capacity change from 0 to 512 [ 126.887529][ T1696] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.900312][ T1696] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.912371][ T1696] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 126.922893][ T1696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 126.931523][ T1696] System zones: 0-2, 18-18, 34-34 [ 126.940971][ T1696] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.310: iget: bad i_size value: 360287970189639680 [ 126.955688][ T1696] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.310: couldn't read orphan inode 15 (err -117) [ 126.968031][ T1696] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 127.035866][ T28] audit: type=1400 audit(1757563828.509:726): avc: denied { write } for pid=1694 comm="syz.6.310" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.058047][ T1696] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.310: iget: bad i_size value: 360287970189639680 [ 127.072117][ T1695] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.310: iget: bad i_size value: 360287970189639680 [ 127.133667][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 127.139715][ T39] usb 2-1: USB disconnect, device number 3 [ 127.333332][ T1705] loop1: detected capacity change from 0 to 1024 [ 127.356531][ T1709] loop7: detected capacity change from 0 to 1024 [ 127.420041][ T1705] EXT4-fs: Ignoring removed orlov option [ 127.453347][ T1709] EXT4-fs: Ignoring removed orlov option [ 127.578476][ T1705] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.588504][ T1709] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 127.622644][ T1705] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2748: inode #15: comm syz.1.314: corrupted in-inode xattr [ 127.644824][ T1705] EXT4-fs (loop1): Remounting filesystem read-only [ 127.683909][ T283] EXT4-fs (loop1): unmounting filesystem. [ 127.729198][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 127.836028][ T1726] random: crng reseeded on system resumption [ 127.844417][ T1725] loop1: detected capacity change from 0 to 512 [ 127.870986][ T1725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.962468][ T1728] netlink: 16 bytes leftover after parsing attributes in process `syz.7.318'. [ 128.192582][ T428] usb 1-1: USB disconnect, device number 9 [ 128.204281][ T1725] EXT4-fs (loop1): 1 orphan inode deleted [ 128.217371][ T1725] EXT4-fs (loop1): 1 truncate cleaned up [ 128.272210][ T1725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.292733][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 128.292749][ T28] audit: type=1400 audit(1757563829.769:741): avc: denied { create } for pid=1732 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.351938][ T1735] ipt_REJECT: TCP_RESET invalid for non-tcp [ 128.362613][ T1734] device syzkaller0 entered promiscuous mode [ 128.380766][ T28] audit: type=1400 audit(1757563829.799:742): avc: denied { bind } for pid=1732 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.403884][ T1733] device syzkaller0 entered promiscuous mode [ 128.447314][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.509770][ T28] audit: type=1400 audit(1757563829.989:743): avc: denied { read } for pid=1738 comm="syz.6.321" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.569451][ T28] audit: type=1400 audit(1757563829.989:744): avc: denied { open } for pid=1738 comm="syz.6.321" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.611959][ T28] audit: type=1400 audit(1757563829.989:745): avc: denied { read write } for pid=1738 comm="syz.6.321" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 128.636457][ T28] audit: type=1400 audit(1757563829.989:746): avc: denied { open } for pid=1738 comm="syz.6.321" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 128.866823][ T428] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 128.884764][ T28] audit: type=1400 audit(1757563829.989:747): avc: denied { create } for pid=1738 comm="syz.6.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.986745][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 129.034547][ T28] audit: type=1400 audit(1757563829.989:748): avc: denied { mount } for pid=1738 comm="syz.6.321" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 129.061314][ T428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.091374][ T428] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.136765][ T428] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.178987][ T39] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 129.205519][ T39] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.223699][ T428] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.265884][ T428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.278789][ T39] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.341307][ T39] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.384790][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.492062][ T428] usb 7-1: config 0 descriptor?? [ 129.522853][ T39] usb 6-1: invalid MIDI out EP 0 [ 129.537739][ T39] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 129.564697][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.726359][ T28] audit: type=1400 audit(1757563831.199:749): avc: denied { sys_module } for pid=1744 comm="syz.5.324" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.749718][ T39] usb 6-1: USB disconnect, device number 7 [ 129.786771][ T28] audit: type=1400 audit(1757563831.229:750): avc: denied { module_request } for pid=1744 comm="syz.5.324" kmod="tty-ldisc-30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 130.058558][ T1761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 130.360727][ T1763] loop5: detected capacity change from 0 to 256 [ 130.367887][ T1763] FAT-fs (loop5): bogus number of FAT sectors [ 130.374180][ T1763] FAT-fs (loop5): Can't find a valid FAT filesystem [ 130.510810][ T283] EXT4-fs (loop1): unmounting filesystem. [ 130.526378][ T1768] incfs: Backing dir is not set, filesystem can't be mounted. [ 130.533952][ T1768] incfs: mount failed -2 [ 130.713661][ T342] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 130.959949][ T342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.970828][ T342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 130.987146][ T342] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.997149][ T342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.005569][ T342] usb 6-1: Product: syz [ 131.011743][ T342] usb 6-1: Manufacturer: syz [ 131.017184][ T342] usb 6-1: SerialNumber: syz [ 131.043734][ T342] usb 6-1: config 0 descriptor?? [ 131.776208][ T1776] loop5: detected capacity change from 0 to 128 [ 131.814279][ T1776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.823386][ T1776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.937340][ T428] usbhid 7-1:0.0: can't add hid device: -71 [ 132.087766][ T428] usbhid: probe of 7-1:0.0 failed with error -71 [ 132.323602][ T428] usb 7-1: USB disconnect, device number 5 [ 132.337203][ T1782] incfs: Backing dir is not set, filesystem can't be mounted. [ 132.344736][ T1782] incfs: mount failed -2 [ 132.776677][ T1780] device syzkaller0 entered promiscuous mode [ 134.372311][ T342] usb 6-1: USB disconnect, device number 8 [ 134.391097][ T1791] netlink: 16 bytes leftover after parsing attributes in process `syz.7.335'. [ 134.656768][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 134.656786][ T28] audit: type=1400 audit(1757563836.119:756): avc: denied { mounton } for pid=1801 comm="syz.0.339" path="/75/file0" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.712321][ T28] audit: type=1400 audit(1757563836.119:757): avc: denied { mount } for pid=1801 comm="syz.0.339" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 134.886819][ T342] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 135.068146][ T1808] loop6: detected capacity change from 0 to 512 [ 135.086754][ T342] usb 6-1: Using ep0 maxpacket: 32 [ 135.094930][ T342] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 135.111832][ T1808] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.123531][ T342] usb 6-1: config 4 has no interface number 0 [ 135.129920][ T342] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.150374][ T342] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.169673][ T342] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.188175][ T342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.197680][ T1808] EXT4-fs (loop6): 1 orphan inode deleted [ 135.206611][ T1808] EXT4-fs (loop6): 1 truncate cleaned up [ 135.212661][ T342] hub 6-1:4.128: USB hub found [ 135.224734][ T1808] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 135.425366][ T28] audit: type=1400 audit(1757563836.899:758): avc: denied { write } for pid=1794 comm="syz.5.336" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.492036][ T28] audit: type=1400 audit(1757563836.949:759): avc: denied { name_bind } for pid=1813 comm="syz.7.341" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 135.641726][ T28] audit: type=1400 audit(1757563837.119:760): avc: denied { mount } for pid=1813 comm="syz.7.341" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.743454][ T342] hub 6-1:4.128: 9 ports detected [ 135.749127][ T342] hub 6-1:4.128: Using single TT (err -22) [ 135.766994][ T342] hub 6-1:4.128: insufficient power available to use all downstream ports [ 135.778771][ T28] audit: type=1400 audit(1757563837.259:761): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.812743][ T1819] incfs: Backing dir is not set, filesystem can't be mounted. [ 135.820372][ T1819] incfs: mount failed -2 [ 135.948453][ T1795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.051040][ T1795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.895925][ T28] audit: type=1400 audit(1757563838.239:762): avc: denied { unmount } for pid=1077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 136.917271][ T342] hub 6-1:4.128: hub_hub_status failed (err = -32) [ 136.926067][ T342] hub 6-1:4.128: config failed, can't get hub status (err -32) [ 137.415334][ T566] udevd[566]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.807180][ T1829] random: crng reseeded on system resumption [ 138.270781][ T1836] device syzkaller0 entered promiscuous mode [ 138.281040][ T1836] ipt_REJECT: TCP_RESET invalid for non-tcp [ 138.406838][ T1316] usb 6-1: USB disconnect, device number 9 [ 138.420334][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 138.445701][ T1843] device syzkaller0 entered promiscuous mode [ 138.486736][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.563225][ T1849] loop6: detected capacity change from 0 to 256 [ 138.582046][ T1849] FAT-fs (loop6): bogus number of FAT sectors [ 138.588529][ T1849] FAT-fs (loop6): Can't find a valid FAT filesystem [ 138.643429][ T1853] incfs: Backing dir is not set, filesystem can't be mounted. [ 138.651081][ T1853] incfs: mount failed -2 [ 138.667963][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.681874][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 138.704575][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.720999][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.739759][ T1854] loop0: detected capacity change from 0 to 256 [ 138.746192][ T6] usb 2-1: Product: syz [ 138.750725][ T6] usb 2-1: Manufacturer: syz [ 138.755823][ T6] usb 2-1: SerialNumber: syz [ 138.766940][ T6] usb 2-1: config 0 descriptor?? [ 138.772179][ T1854] FAT-fs (loop0): Directory bread(block 64) failed [ 138.778965][ T1854] FAT-fs (loop0): Directory bread(block 65) failed [ 138.785813][ T1854] FAT-fs (loop0): Directory bread(block 66) failed [ 138.786805][ T504] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 138.801134][ T1854] FAT-fs (loop0): Directory bread(block 67) failed [ 138.809317][ T1854] FAT-fs (loop0): Directory bread(block 68) failed [ 138.816005][ T1854] FAT-fs (loop0): Directory bread(block 69) failed [ 138.823625][ T1854] FAT-fs (loop0): Directory bread(block 70) failed [ 138.830655][ T1854] FAT-fs (loop0): Directory bread(block 71) failed [ 138.838118][ T1854] FAT-fs (loop0): Directory bread(block 72) failed [ 138.860242][ T1854] FAT-fs (loop0): Directory bread(block 73) failed [ 138.997829][ T504] usb 6-1: no configurations [ 139.108975][ T504] usb 6-1: can't read configurations, error -22 [ 140.217868][ T1860] loop1: detected capacity change from 0 to 128 [ 141.766926][ T28] audit: type=1400 audit(1757563843.239:763): avc: denied { mount } for pid=1833 comm="syz.1.346" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 141.812686][ T504] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 141.962358][ T1867] capability: warning: `syz.7.358' uses deprecated v2 capabilities in a way that may be insecure [ 141.974593][ T28] audit: type=1400 audit(1757563843.269:764): avc: denied { read write } for pid=1070 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.007902][ T28] audit: type=1400 audit(1757563843.269:765): avc: denied { open } for pid=1070 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.032140][ T28] audit: type=1400 audit(1757563843.269:766): avc: denied { ioctl } for pid=1070 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.057849][ T28] audit: type=1400 audit(1757563843.309:767): avc: denied { execmem } for pid=1864 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 142.077214][ T28] audit: type=1400 audit(1757563843.429:768): avc: denied { bpf } for pid=1866 comm="syz.7.358" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.106291][ T28] audit: type=1400 audit(1757563843.429:769): avc: denied { map_create } for pid=1866 comm="syz.7.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 142.125512][ T28] audit: type=1400 audit(1757563843.439:770): avc: denied { map_read map_write } for pid=1866 comm="syz.7.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 142.148318][ T28] audit: type=1400 audit(1757563843.439:771): avc: denied { prog_load } for pid=1866 comm="syz.7.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 142.176614][ T28] audit: type=1400 audit(1757563843.439:772): avc: denied { perfmon } for pid=1866 comm="syz.7.358" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.207258][ T504] usb 6-1: no configurations [ 142.212018][ T504] usb 6-1: can't read configurations, error -22 [ 142.222295][ T504] usb usb6-port1: attempt power cycle [ 142.660868][ T504] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 142.882453][ T6] usb 2-1: USB disconnect, device number 4 [ 142.974431][ T1876] device syzkaller0 entered promiscuous mode [ 142.989424][ T1879] ipt_REJECT: TCP_RESET invalid for non-tcp [ 143.064582][ T1881] loop1: detected capacity change from 0 to 512 [ 143.123426][ T1881] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.388632][ T504] usb 6-1: device not accepting address 12, error -71 [ 143.495742][ T1881] EXT4-fs (loop1): 1 orphan inode deleted [ 143.566658][ T1881] EXT4-fs (loop1): 1 truncate cleaned up [ 143.668346][ T1881] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.321482][ T1889] device syzkaller0 entered promiscuous mode [ 144.729181][ T1897] random: crng reseeded on system resumption [ 145.496462][ T1904] incfs: Backing dir is not set, filesystem can't be mounted. [ 145.504315][ T1904] incfs: mount failed -2 [ 145.841603][ T1915] random: crng reseeded on system resumption [ 147.098759][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 147.098781][ T28] audit: type=1400 audit(1757563847.529:797): avc: denied { write } for pid=1912 comm="syz.6.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.162179][ T28] audit: type=1400 audit(1757563847.529:798): avc: denied { nlmsg_write } for pid=1912 comm="syz.6.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.283684][ T1918] device syzkaller0 entered promiscuous mode [ 147.294137][ T1918] ipt_REJECT: TCP_RESET invalid for non-tcp [ 147.296163][ T28] audit: type=1400 audit(1757563848.629:799): avc: denied { create } for pid=1919 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.566937][ T28] audit: type=1400 audit(1757563849.029:800): avc: denied { module_request } for pid=1922 comm="syz.5.373" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 147.878384][ T28] audit: type=1400 audit(1757563849.129:801): avc: denied { read } for pid=1922 comm="syz.5.373" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.522365][ T28] audit: type=1400 audit(1757563849.129:802): avc: denied { open } for pid=1922 comm="syz.5.373" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.874862][ T1933] device syzkaller0 entered promiscuous mode [ 149.295708][ T1942] random: crng reseeded on system resumption [ 149.555102][ T1943] loop7: detected capacity change from 0 to 512 [ 149.563984][ T1943] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.663762][ T28] audit: type=1400 audit(1757563851.139:803): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 149.683986][ T283] EXT4-fs (loop1): unmounting filesystem. [ 149.700896][ T1943] EXT4-fs (loop7): 1 orphan inode deleted [ 150.044911][ T28] audit: type=1400 audit(1757563851.519:804): avc: denied { sqpoll } for pid=1952 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.055999][ T1943] EXT4-fs (loop7): 1 truncate cleaned up [ 150.067736][ T28] audit: type=1400 audit(1757563851.519:805): avc: denied { map } for pid=1952 comm="syz.5.381" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.074563][ T1953] loop5: detected capacity change from 0 to 256 [ 150.098386][ T28] audit: type=1400 audit(1757563851.519:806): avc: denied { read write } for pid=1952 comm="syz.5.381" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.101001][ T1957] incfs: Backing dir is not set, filesystem can't be mounted. [ 150.132235][ T1957] incfs: mount failed -2 [ 150.144416][ T1943] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 150.156087][ T1953] FAT-fs (loop5): bogus number of FAT sectors [ 150.163595][ T1953] FAT-fs (loop5): Can't find a valid FAT filesystem [ 150.229885][ T566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.795344][ T1966] loop5: detected capacity change from 0 to 256 [ 151.848882][ T1966] FAT-fs (loop5): Directory bread(block 64) failed [ 151.887438][ T1966] FAT-fs (loop5): Directory bread(block 65) failed [ 151.894037][ T1966] FAT-fs (loop5): Directory bread(block 66) failed [ 151.968829][ T1966] FAT-fs (loop5): Directory bread(block 67) failed [ 151.975540][ T1966] FAT-fs (loop5): Directory bread(block 68) failed [ 151.983423][ T1966] FAT-fs (loop5): Directory bread(block 69) failed [ 151.990243][ T1966] FAT-fs (loop5): Directory bread(block 70) failed [ 151.996942][ T1966] FAT-fs (loop5): Directory bread(block 71) failed [ 152.003585][ T1966] FAT-fs (loop5): Directory bread(block 72) failed [ 152.017956][ T1966] FAT-fs (loop5): Directory bread(block 73) failed [ 152.194484][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 152.194501][ T28] audit: type=1400 audit(1757563853.669:815): avc: denied { create } for pid=1974 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.443242][ T28] audit: type=1400 audit(1757563853.899:816): avc: denied { create } for pid=1974 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.776796][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.976764][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 152.985144][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 153.086610][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.106019][ T24] usb 1-1: SerialNumber: syz [ 153.135593][ T24] usb 1-1: config 0 descriptor?? [ 153.145819][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 153.165324][ T24] usb 1-1: Detected SIO [ 153.186110][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.226797][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.307529][ T1966] syz.5.383: attempt to access beyond end of device [ 153.307529][ T1966] loop5: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 153.417130][ T6] usb 2-1: no configurations [ 153.421818][ T6] usb 2-1: can't read configurations, error -22 [ 153.580468][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.759102][ T28] audit: type=1400 audit(1757563855.239:817): avc: denied { unmount } for pid=1070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 154.023992][ T6] usb 2-1: no configurations [ 154.073288][ T1986] loop6: detected capacity change from 0 to 512 [ 154.080994][ T6] usb 2-1: can't read configurations, error -22 [ 154.102881][ T6] usb usb2-port1: attempt power cycle [ 154.181984][ T1986] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.444523][ T1986] EXT4-fs (loop6): 1 orphan inode deleted [ 154.576725][ T1986] EXT4-fs (loop6): 1 truncate cleaned up [ 154.686727][ T1986] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 154.786749][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.828214][ T6] usb 2-1: no configurations [ 154.832896][ T6] usb 2-1: can't read configurations, error -22 [ 155.056719][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.243044][ T551] usb 1-1: USB disconnect, device number 10 [ 155.280003][ T551] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.286744][ T6] usb 2-1: device descriptor read/8, error -71 [ 155.340045][ T1996] loop1: detected capacity change from 0 to 256 [ 155.351548][ T551] ftdi_sio 1-1:0.0: device disconnected [ 155.352753][ T1994] device syzkaller0 entered promiscuous mode [ 155.369772][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 155.386753][ T1996] FAT-fs (loop1): bogus number of FAT sectors [ 155.395589][ T1996] FAT-fs (loop1): Can't find a valid FAT filesystem [ 155.437251][ T6] usb 2-1: device descriptor read/8, error -71 [ 155.607809][ T2009] random: crng reseeded on system resumption [ 155.775227][ T2004] device syzkaller0 entered promiscuous mode [ 155.888581][ T6] usb usb2-port1: unable to enumerate USB device [ 155.897384][ T28] audit: type=1400 audit(1757563857.379:818): avc: denied { read } for pid=2007 comm="syz.5.397" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.931073][ T28] audit: type=1400 audit(1757563857.379:819): avc: denied { open } for pid=2007 comm="syz.5.397" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.966994][ T28] audit: type=1400 audit(1757563857.379:820): avc: denied { ioctl } for pid=2007 comm="syz.5.397" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.536778][ T28] audit: type=1400 audit(1757563857.729:821): avc: denied { create } for pid=2016 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.634562][ T28] audit: type=1400 audit(1757563858.109:822): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.663116][ T2020] device syzkaller0 entered promiscuous mode [ 156.671678][ T28] audit: type=1400 audit(1757563858.109:823): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.701535][ T28] audit: type=1400 audit(1757563858.109:824): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.729626][ T2020] ipt_REJECT: TCP_RESET invalid for non-tcp [ 156.812924][ T2032] loop1: detected capacity change from 0 to 256 [ 156.828541][ T2032] FAT-fs (loop1): bogus number of FAT sectors [ 156.834738][ T2032] FAT-fs (loop1): Can't find a valid FAT filesystem [ 156.956404][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 156.965301][ T2036] loop1: detected capacity change from 0 to 256 [ 156.982033][ T2038] device syzkaller0 entered promiscuous mode [ 156.984238][ T2036] FAT-fs (loop1): Unrecognized mount option "nonumdaSl=" or missing value [ 157.006895][ T551] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.466837][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 157.466852][ T28] audit: type=1400 audit(1757563858.949:851): avc: denied { map_read map_write } for pid=2048 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.567804][ T551] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.581191][ T551] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.588124][ T551] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 157.597908][ T551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.607539][ T551] usb 1-1: config 0 descriptor?? [ 157.620490][ T551] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 157.951356][ T28] audit: type=1400 audit(1757563859.169:852): avc: denied { read } for pid=2048 comm="syz.1.411" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.025387][ T28] audit: type=1400 audit(1757563859.169:853): avc: denied { open } for pid=2048 comm="syz.1.411" path="net:[4026532293]" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 158.066772][ T28] audit: type=1400 audit(1757563859.179:854): avc: denied { create } for pid=2048 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.087256][ T28] audit: type=1400 audit(1757563859.459:855): avc: denied { create } for pid=2053 comm="syz.6.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.164926][ T2056] random: crng reseeded on system resumption [ 158.421312][ T28] audit: type=1400 audit(1757563859.639:856): avc: denied { append } for pid=2053 comm="syz.6.412" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.446112][ T28] audit: type=1400 audit(1757563859.639:857): avc: denied { open } for pid=2053 comm="syz.6.412" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.493234][ T28] audit: type=1400 audit(1757563859.969:858): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.517484][ T28] audit: type=1400 audit(1757563859.969:859): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.543272][ T28] audit: type=1400 audit(1757563859.969:860): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.617497][ T2064] loop5: detected capacity change from 0 to 2048 [ 158.649029][ T2064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 158.674657][ T1067] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 158.689553][ T1067] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 158.722030][ T1067] EXT4-fs (loop5): unmounting filesystem. [ 159.827044][ T486] usb 1-1: USB disconnect, device number 11 [ 159.842523][ T2075] loop5: detected capacity change from 0 to 256 [ 159.910819][ T2075] FAT-fs (loop5): bogus number of FAT sectors [ 159.939121][ T2075] FAT-fs (loop5): Can't find a valid FAT filesystem [ 159.943554][ T2083] device syzkaller0 entered promiscuous mode [ 160.349149][ T2092] loop0: detected capacity change from 0 to 512 [ 160.453444][ T2092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.521883][ T2092] EXT4-fs (loop0): 1 orphan inode deleted [ 160.530006][ T2092] EXT4-fs (loop0): 1 truncate cleaned up [ 160.558976][ T2092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.017881][ T2108] random: crng reseeded on system resumption [ 161.560770][ T2116] syz.1.430[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.560852][ T2116] syz.1.430[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.567764][ T2118] futex_wake_op: syz.5.432 tries to shift op by -1; fix this program [ 161.598242][ T2116] syz.1.430[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.598321][ T2116] syz.1.430[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.627687][ T2116] syz.1.430 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 161.863063][ T2124] device syzkaller0 entered promiscuous mode [ 161.993623][ T2127] loop6: detected capacity change from 0 to 256 [ 162.024806][ T2127] FAT-fs (loop6): bogus number of FAT sectors [ 162.044695][ T2127] FAT-fs (loop6): Can't find a valid FAT filesystem [ 163.095160][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 163.095176][ T28] audit: type=1400 audit(1757563864.569:923): avc: denied { create } for pid=2137 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.603337][ T28] audit: type=1400 audit(1757563865.919:924): avc: denied { write } for pid=2137 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.625733][ T2144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 164.781698][ T2154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.794277][ T28] audit: type=1400 audit(1757563866.269:925): avc: denied { name_bind } for pid=2155 comm="syz.6.444" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 165.808439][ T2160] random: crng reseeded on system resumption [ 168.339657][ T2168] loop7: detected capacity change from 0 to 256 [ 168.371240][ T2168] FAT-fs (loop7): bogus number of FAT sectors [ 168.426777][ T2168] FAT-fs (loop7): Can't find a valid FAT filesystem [ 168.582401][ T28] audit: type=1400 audit(1757563869.969:926): avc: denied { create } for pid=2161 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.915466][ T284] EXT4-fs (loop0): unmounting filesystem. [ 168.926635][ T28] audit: type=1400 audit(1757563870.389:927): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 169.104577][ T2176] loop7: detected capacity change from 0 to 512 [ 169.133022][ T2176] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 169.188540][ T2180] device syzkaller0 entered promiscuous mode [ 169.296814][ T6] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 172.087965][ T28] audit: type=1400 audit(1757563873.569:928): avc: denied { read write } for pid=2198 comm="syz.1.456" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.115520][ T28] audit: type=1400 audit(1757563873.599:929): avc: denied { open } for pid=2198 comm="syz.1.456" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 174.642856][ T28] audit: type=1400 audit(1757563873.599:930): avc: denied { ioctl } for pid=2198 comm="syz.1.456" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 174.713153][ T6] usb 6-1: device descriptor read/all, error -71 [ 174.899426][ T28] audit: type=1400 audit(1757563876.379:931): avc: denied { create } for pid=2205 comm="syz.5.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.908276][ T2210] loop0: detected capacity change from 0 to 1024 [ 174.938613][ T2210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.968443][ T2210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 174.985030][ T2210] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.460: Freeing blocks not in datazone - block = 0, count = 4096 [ 175.043144][ T2210] EXT4-fs (loop0): Remounting filesystem read-only [ 175.051809][ T28] audit: type=1400 audit(1757563876.529:932): avc: denied { write } for pid=2205 comm="syz.5.459" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.058968][ T2210] EXT4-fs (loop0): 1 orphan inode deleted [ 175.080876][ T2210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.112910][ T2217] loop5: detected capacity change from 0 to 512 [ 175.127115][ T2210] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.460: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 175.318388][ T2221] random: crng reseeded on system resumption [ 175.399715][ T2210] EXT4-fs (loop0): Remounting filesystem read-only [ 175.454737][ T2217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.663431][ T2217] EXT4-fs (loop5): 1 orphan inode deleted [ 175.677411][ T284] EXT4-fs (loop0): unmounting filesystem. [ 175.691563][ T2217] EXT4-fs (loop5): 1 truncate cleaned up [ 175.716771][ T2217] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 175.743185][ T2225] device syzkaller0 entered promiscuous mode [ 175.908326][ T2230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'. [ 176.175800][ T28] audit: type=1400 audit(1757563877.649:933): avc: denied { bpf } for pid=2235 comm="syz.1.466" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.351333][ T28] audit: type=1400 audit(1757563877.649:934): avc: denied { map_create } for pid=2235 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.687149][ T28] audit: type=1400 audit(1757563877.649:935): avc: denied { map_read map_write } for pid=2235 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.711457][ T28] audit: type=1400 audit(1757563877.659:936): avc: denied { prog_load } for pid=2235 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.718695][ T2242] loop7: detected capacity change from 0 to 256 [ 176.739053][ T28] audit: type=1400 audit(1757563877.659:937): avc: denied { perfmon } for pid=2235 comm="syz.1.466" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.753748][ T2245] loop0: detected capacity change from 0 to 512 [ 176.768034][ T2242] FAT-fs (loop7): bogus number of FAT sectors [ 176.775274][ T2242] FAT-fs (loop7): Can't find a valid FAT filesystem [ 176.798272][ T2245] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 176.800549][ T28] audit: type=1400 audit(1757563877.659:938): avc: denied { prog_run } for pid=2235 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.903256][ T28] audit: type=1400 audit(1757563877.679:939): avc: denied { read write } for pid=1077 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.046781][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 177.264669][ T6] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.278068][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.284710][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.294158][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.369436][ T2264] random: crng reseeded on system resumption [ 178.374432][ T6] usb 2-1: config 0 descriptor?? [ 178.387260][ T6] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 178.411033][ T2272] device syzkaller0 entered promiscuous mode [ 179.965174][ T343] usb 2-1: USB disconnect, device number 9 [ 180.141439][ T1067] EXT4-fs (loop5): unmounting filesystem. [ 180.160508][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 180.371382][ T2295] netlink: 16 bytes leftover after parsing attributes in process `syz.7.480'. [ 180.541021][ T28] audit: type=1400 audit(1757563881.619:974): avc: denied { unmount } for pid=1067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 180.736343][ T28] audit: type=1400 audit(1757563881.859:975): avc: denied { write } for pid=2284 comm="syz.7.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.793782][ T28] audit: type=1400 audit(1757563882.089:976): avc: denied { setopt } for pid=2293 comm="syz.6.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.884067][ T2305] loop5: detected capacity change from 0 to 512 [ 180.904093][ T28] audit: type=1400 audit(1757563882.379:977): avc: denied { create } for pid=2307 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.914198][ T2305] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 180.948943][ T28] audit: type=1400 audit(1757563882.379:978): avc: denied { setopt } for pid=2307 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.976871][ T28] audit: type=1400 audit(1757563882.379:979): avc: denied { create } for pid=2307 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 181.536780][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.717667][ T24] usb 2-1: no configurations [ 181.722702][ T24] usb 2-1: can't read configurations, error -22 [ 181.885375][ T28] audit: type=1400 audit(1757563883.359:980): avc: denied { create } for pid=2333 comm="syz.6.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 181.933179][ T2334] 9pnet_fd: p9_fd_create_unix (2334): problem connecting socket: ./file0: -111 [ 181.945504][ T28] audit: type=1400 audit(1757563883.359:981): avc: denied { sys_admin } for pid=2333 comm="syz.6.492" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 181.967298][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.417593][ T24] usb 2-1: no configurations [ 182.422464][ T24] usb 2-1: can't read configurations, error -22 [ 182.522174][ T24] usb usb2-port1: attempt power cycle [ 182.570015][ T28] audit: type=1400 audit(1757563883.359:982): avc: denied { mount } for pid=2333 comm="syz.6.492" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 183.132238][ T28] audit: type=1400 audit(1757563883.359:983): avc: denied { create } for pid=2333 comm="syz.6.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.258267][ T2347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.495'. [ 183.576722][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.648162][ T24] usb 2-1: no configurations [ 183.652811][ T24] usb 2-1: can't read configurations, error -22 [ 183.806726][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 183.917675][ T24] usb 2-1: no configurations [ 183.922405][ T24] usb 2-1: can't read configurations, error -22 [ 183.937106][ T24] usb usb2-port1: unable to enumerate USB device [ 184.099524][ T2352] device syzkaller0 entered promiscuous mode [ 184.103914][ T2353] ipt_REJECT: TCP_RESET invalid for non-tcp [ 184.396241][ T2363] loop7: detected capacity change from 0 to 256 [ 184.524729][ T2363] FAT-fs (loop7): bogus number of FAT sectors [ 184.611555][ T2363] FAT-fs (loop7): Can't find a valid FAT filesystem [ 184.670400][ T2366] loop6: detected capacity change from 0 to 512 [ 184.705260][ T2366] EXT4-fs: Ignoring removed oldalloc option [ 184.805283][ T2373] loop7: detected capacity change from 0 to 512 [ 184.811688][ T2366] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.824539][ T2366] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.836361][ T2373] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.875906][ T2373] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 184.906838][ T2366] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.500: bg 0: block 64: padding at end of block bitmap is not set [ 184.912368][ T2379] loop1: detected capacity change from 0 to 512 [ 184.927905][ T2373] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 184.937487][ T2366] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.500: Failed to acquire dquot type 0 [ 184.937927][ T2373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 184.957801][ T2379] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 184.962317][ T2366] EXT4-fs (loop6): 1 truncate cleaned up [ 184.972308][ T2373] System zones: 0-2, 18-18, 34-34 [ 184.980909][ T2373] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.503: iget: bad i_size value: 360287970189639680 [ 184.994333][ T2373] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.503: couldn't read orphan inode 15 (err -117) [ 185.012081][ T2373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 185.026760][ T2366] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 185.166721][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 185.166739][ T28] audit: type=1400 audit(1757563886.639:993): avc: denied { name_bind } for pid=2372 comm="syz.7.503" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 185.262525][ T2387] Quota error (device loop6): do_check_range: Getting block 144 out of range 0-5 [ 185.355346][ T2387] netlink: 20 bytes leftover after parsing attributes in process `syz.6.500'. [ 185.954535][ T28] audit: type=1400 audit(1757563887.419:994): avc: denied { node_bind } for pid=2372 comm="syz.7.503" saddr=ff01::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 185.980227][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 186.025423][ T28] audit: type=1400 audit(1757563887.459:995): avc: denied { name_bind } for pid=2372 comm="syz.7.503" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 187.139872][ T2394] incfs: Backing dir is not set, filesystem can't be mounted. [ 187.147527][ T2394] incfs: mount failed -2 [ 187.825970][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 188.344032][ T2405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.510'. [ 189.117208][ T2409] loop7: detected capacity change from 0 to 256 [ 189.152710][ T2409] FAT-fs (loop7): bogus number of FAT sectors [ 189.159141][ T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 189.188075][ T2409] FAT-fs (loop7): Can't find a valid FAT filesystem [ 189.254230][ T2399] loop0: detected capacity change from 0 to 40427 [ 189.279108][ T2399] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 189.334553][ T28] audit: type=1400 audit(1757563890.809:996): avc: denied { create } for pid=2410 comm="syz.7.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.356781][ T2399] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 189.365263][ T6] usb 2-1: no configurations [ 189.371170][ T6] usb 2-1: can't read configurations, error -22 [ 189.398156][ T2399] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 189.428027][ T28] audit: type=1400 audit(1757563890.859:997): avc: denied { setopt } for pid=2410 comm="syz.7.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.476847][ T28] audit: type=1400 audit(1757563890.859:998): avc: denied { read write } for pid=2410 comm="syz.7.512" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.509331][ T2399] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.571419][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 189.601111][ T28] audit: type=1400 audit(1757563890.859:999): avc: denied { open } for pid=2410 comm="syz.7.512" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.624452][ T28] audit: type=1400 audit(1757563890.859:1000): avc: denied { ioctl } for pid=2410 comm="syz.7.512" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.785802][ T2399] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 192.611694][ T2432] loop1: detected capacity change from 0 to 256 [ 193.111913][ T28] audit: type=1400 audit(1757563893.999:1001): avc: denied { read } for pid=2423 comm="syz.1.516" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.139179][ T2399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.642913][ T2432] FAT-fs (loop1): Directory bread(block 64) failed [ 193.649813][ T2432] FAT-fs (loop1): Directory bread(block 65) failed [ 193.656449][ T2432] FAT-fs (loop1): Directory bread(block 66) failed [ 193.663099][ T2432] FAT-fs (loop1): Directory bread(block 67) failed [ 193.669931][ T2432] FAT-fs (loop1): Directory bread(block 68) failed [ 193.676486][ T2432] FAT-fs (loop1): Directory bread(block 69) failed [ 193.683216][ T2432] FAT-fs (loop1): Directory bread(block 70) failed [ 193.689836][ T2432] FAT-fs (loop1): Directory bread(block 71) failed [ 193.696402][ T2432] FAT-fs (loop1): Directory bread(block 72) failed [ 193.702993][ T2432] FAT-fs (loop1): Directory bread(block 73) failed [ 193.815679][ T2440] netlink: 16 bytes leftover after parsing attributes in process `syz.6.519'. [ 194.437548][ T28] audit: type=1400 audit(1757563895.189:1002): avc: denied { mount } for pid=2423 comm="syz.1.516" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 194.500253][ T28] audit: type=1400 audit(1757563895.829:1003): avc: denied { create } for pid=2423 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 194.701864][ T28] audit: type=1400 audit(1757563896.139:1004): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 194.806772][ T343] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 194.890391][ T28] audit: type=1400 audit(1757563896.209:1005): avc: denied { write } for pid=2443 comm="syz.7.521" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.906417][ T2450] loop7: detected capacity change from 0 to 512 [ 194.985563][ T28] audit: type=1400 audit(1757563896.459:1006): avc: denied { read } for pid=2451 comm="syz.0.518" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 195.021894][ T2454] loop1: detected capacity change from 0 to 256 [ 195.139963][ T2454] FAT-fs (loop1): bogus number of FAT sectors [ 195.171070][ T2455] FAULT_INJECTION: forcing a failure. [ 195.171070][ T2455] name failslab, interval 1, probability 0, space 0, times 0 [ 195.184008][ T2455] CPU: 1 PID: 2455 Comm: syz.0.518 Not tainted syzkaller #0 [ 195.191329][ T2455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.201417][ T2455] Call Trace: [ 195.204720][ T2455] [ 195.207673][ T2455] __dump_stack+0x21/0x24 [ 195.212044][ T2455] dump_stack_lvl+0xee/0x150 [ 195.216662][ T2455] ? __cfi_dump_stack_lvl+0x8/0x8 [ 195.221710][ T2455] ? finish_task_switch+0x16b/0x7b0 [ 195.226944][ T2455] dump_stack+0x15/0x24 [ 195.231125][ T2455] should_fail_ex+0x3d4/0x520 [ 195.235921][ T2455] __should_failslab+0xac/0xf0 [ 195.240717][ T2455] should_failslab+0x9/0x20 [ 195.245250][ T2455] kmem_cache_alloc_node+0x42/0x340 [ 195.250487][ T2455] ? __alloc_skb+0xea/0x4b0 [ 195.255021][ T2455] __alloc_skb+0xea/0x4b0 [ 195.259379][ T2455] netlink_dump+0x1d1/0xd80 [ 195.263908][ T2455] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 195.269995][ T2455] ? irqentry_exit+0x37/0x40 [ 195.274611][ T2455] ? refcount_inc+0x80/0x80 [ 195.279160][ T2455] __netlink_dump_start+0x643/0x860 [ 195.284386][ T2455] rtnetlink_rcv_msg+0xada/0xcf0 [ 195.289348][ T2455] ? __cfi_rtnl_stats_dump+0x10/0x10 [ 195.294666][ T2455] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 195.300155][ T2455] ? find_lock_lowest_rq+0x97/0x460 [ 195.305385][ T2455] ? __kasan_check_write+0x14/0x20 [ 195.310553][ T2455] ? push_rt_task+0x35f/0x5b0 [ 195.315263][ T2455] ? __cfi_push_rt_tasks+0x10/0x10 [ 195.320395][ T2455] ? _raw_spin_unlock+0x4c/0x70 [ 195.325263][ T2455] ? __cfi_push_rt_tasks+0x10/0x10 [ 195.330403][ T2455] ? finish_task_switch+0x16b/0x7b0 [ 195.335715][ T2455] ? __switch_to_asm+0x3a/0x60 [ 195.340508][ T2455] ? __schedule+0xb8f/0x14e0 [ 195.345142][ T2455] ? release_firmware_map_entry+0x194/0x194 [ 195.351079][ T2455] ? __cfi_rtnl_stats_dump+0x10/0x10 [ 195.356416][ T2455] ? __kasan_check_read+0x11/0x20 [ 195.361716][ T2455] netlink_rcv_skb+0x1f2/0x440 [ 195.366540][ T2455] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 195.372025][ T2455] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 195.377353][ T2455] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 195.382518][ T2455] rtnetlink_rcv+0x1c/0x20 [ 195.386963][ T2455] netlink_unicast+0x8ab/0xa30 [ 195.391767][ T2455] netlink_sendmsg+0x8aa/0xbc0 [ 195.396560][ T2455] ? irqentry_exit+0x37/0x40 [ 195.401218][ T2455] ? __cfi_netlink_sendmsg+0x10/0x10 [ 195.406540][ T2455] ? security_socket_sendmsg+0x93/0xb0 [ 195.412026][ T2455] ? __cfi_netlink_sendmsg+0x10/0x10 [ 195.417348][ T2455] ____sys_sendmsg+0x5a9/0x990 [ 195.422159][ T2455] ? __sys_sendmsg_sock+0x40/0x40 [ 195.427262][ T2455] ? import_iovec+0x7c/0xb0 [ 195.431798][ T2455] ___sys_sendmsg+0x21c/0x290 [ 195.436506][ T2455] ? __sys_sendmsg+0x270/0x270 [ 195.441333][ T2455] ? __kasan_check_write+0x14/0x20 [ 195.446484][ T2455] ? proc_fail_nth_write+0x17a/0x1f0 [ 195.451813][ T2455] __x64_sys_sendmsg+0x1f0/0x2c0 [ 195.456781][ T2455] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 195.462353][ T2455] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 195.468468][ T2455] x64_sys_call+0x171/0x9a0 [ 195.473005][ T2455] do_syscall_64+0x4c/0xa0 [ 195.477444][ T2455] ? clear_bhb_loop+0x30/0x80 [ 195.482146][ T2455] ? clear_bhb_loop+0x30/0x80 [ 195.486936][ T2455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.492855][ T2455] RIP: 0033:0x7efc91d8eba9 [ 195.497317][ T2455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.516946][ T2455] RSP: 002b:00007efc907f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.525386][ T2455] RAX: ffffffffffffffda RBX: 00007efc91fd6090 RCX: 00007efc91d8eba9 [ 195.533381][ T2455] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 195.538053][ T28] audit: type=1400 audit(1757563896.459:1007): avc: denied { open } for pid=2451 comm="syz.0.518" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 195.541382][ T2455] RBP: 00007efc907f7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.541399][ T2455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.541413][ T2455] R13: 00007efc91fd6128 R14: 00007efc91fd6090 R15: 00007ffcd1462f88 [ 195.541434][ T2455] [ 195.601990][ T2454] FAT-fs (loop1): Can't find a valid FAT filesystem [ 195.611119][ T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.685666][ T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 195.703982][ T343] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.713249][ T2450] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 195.740493][ T28] audit: type=1400 audit(1757563897.219:1008): avc: denied { create } for pid=2459 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.762443][ T2462] incfs: Backing dir is not set, filesystem can't be mounted. [ 195.770122][ T2462] incfs: mount failed -2 [ 195.775165][ T343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.797760][ T343] usb 7-1: Product: syz [ 195.801967][ T343] usb 7-1: Manufacturer: syz [ 195.825275][ T343] usb 7-1: SerialNumber: syz [ 195.858684][ T2450] EXT4-fs (loop7): 1 orphan inode deleted [ 195.879672][ T343] usb 7-1: config 0 descriptor?? [ 195.994977][ T2450] EXT4-fs (loop7): 1 truncate cleaned up [ 196.021754][ T28] audit: type=1400 audit(1757563897.499:1009): avc: denied { shutdown } for pid=2459 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.050055][ T2450] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 196.989419][ T2471] loop6: detected capacity change from 0 to 128 [ 197.017313][ T2471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 197.026201][ T2471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 197.099237][ T28] audit: type=1400 audit(1757563898.489:1010): avc: denied { mounton } for pid=2445 comm="syz.6.522" path="/69/file0/bus" dev="loop6" ino=1048633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 199.139100][ T2482] loop5: detected capacity change from 0 to 512 [ 199.239162][ T2482] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 199.546722][ T1899] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 199.747218][ T1899] usb 1-1: no configurations [ 199.751869][ T1899] usb 1-1: can't read configurations, error -22 [ 199.828140][ T343] usb 7-1: USB disconnect, device number 7 [ 199.934402][ T28] audit: type=1400 audit(1757563901.349:1011): avc: denied { execmem } for pid=2481 comm="syz.5.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 199.954305][ T1899] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.967136][ T28] audit: type=1400 audit(1757563901.439:1012): avc: denied { ioctl } for pid=2483 comm="syz.0.525" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.013456][ T28] audit: type=1400 audit(1757563901.479:1013): avc: denied { read write } for pid=1070 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.223624][ T2498] netlink: 16 bytes leftover after parsing attributes in process `syz.6.533'. [ 200.815445][ T566] udevd[566]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.901450][ T28] audit: type=1400 audit(1757563901.479:1014): avc: denied { open } for pid=1070 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.984871][ T28] audit: type=1400 audit(1757563901.479:1015): avc: denied { ioctl } for pid=1070 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=124 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.236723][ T1899] usb 1-1: device descriptor read/all, error -71 [ 204.279573][ T1899] usb usb1-port1: attempt power cycle [ 204.289988][ T28] audit: type=1400 audit(1757563901.489:1016): avc: denied { create } for pid=2494 comm="syz.6.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.311217][ T28] audit: type=1400 audit(1757563901.489:1017): avc: denied { bpf } for pid=2494 comm="syz.6.533" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.331902][ T28] audit: type=1400 audit(1757563901.489:1018): avc: denied { prog_load } for pid=2494 comm="syz.6.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.351287][ T28] audit: type=1400 audit(1757563901.489:1019): avc: denied { perfmon } for pid=2494 comm="syz.6.533" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.372500][ T28] audit: type=1400 audit(1757563901.489:1020): avc: denied { prog_run } for pid=2494 comm="syz.6.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.018309][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 205.018367][ T28] audit: type=1400 audit(1757563906.379:1032): avc: denied { read } for pid=2524 comm="syz.1.540" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.222941][ T2514] loop6: detected capacity change from 0 to 256 [ 206.148613][ T28] audit: type=1400 audit(1757563906.379:1033): avc: denied { open } for pid=2524 comm="syz.1.540" path="net:[4026532293]" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 206.243088][ T28] audit: type=1400 audit(1757563906.389:1034): avc: denied { create } for pid=2524 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.265990][ T28] audit: type=1400 audit(1757563906.439:1035): avc: denied { lock } for pid=2524 comm="syz.1.540" path="socket:[23276]" dev="sockfs" ino=23276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 206.290029][ T28] audit: type=1400 audit(1757563906.449:1036): avc: denied { create } for pid=2524 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.311134][ T28] audit: type=1400 audit(1757563906.449:1037): avc: denied { module_request } for pid=2524 comm="syz.1.540" kmod="can-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.333192][ T28] audit: type=1400 audit(1757563907.419:1038): avc: denied { read } for pid=2532 comm="syz.1.542" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.355767][ T28] audit: type=1400 audit(1757563907.419:1039): avc: denied { open } for pid=2532 comm="syz.1.542" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.378889][ T28] audit: type=1400 audit(1757563907.429:1040): avc: denied { ioctl } for pid=2532 comm="syz.1.542" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.413162][ T2540] device syzkaller0 entered promiscuous mode [ 206.419427][ T28] audit: type=1400 audit(1757563907.499:1041): avc: denied { create } for pid=2532 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.559308][ T2546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.544'. [ 206.643970][ T2548] random: crng reseeded on system resumption [ 207.706162][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 207.866720][ T294] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 208.058017][ T294] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.069425][ T294] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.080049][ T294] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.086940][ T294] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 208.096189][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.113787][ T294] usb 2-1: config 0 descriptor?? [ 208.246697][ T343] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 208.427941][ T343] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.438344][ T343] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.449337][ T343] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.458780][ T343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.466989][ T343] usb 6-1: Product: syz [ 208.471307][ T343] usb 6-1: Manufacturer: syz [ 208.475977][ T343] usb 6-1: SerialNumber: syz [ 208.523168][ T294] usbhid 2-1:0.0: can't add hid device: -32 [ 208.537485][ T294] usbhid: probe of 2-1:0.0 failed with error -32 [ 208.558474][ T294] usb 2-1: USB disconnect, device number 16 [ 208.712644][ T343] usb 6-1: 0:2 : does not exist [ 208.732758][ T343] usb 6-1: USB disconnect, device number 16 [ 209.146764][ T342] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 209.337475][ T342] usb 7-1: no configurations [ 209.342475][ T342] usb 7-1: can't read configurations, error -22 [ 209.516780][ T342] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 209.717511][ T342] usb 7-1: no configurations [ 209.722480][ T342] usb 7-1: can't read configurations, error -22 [ 209.768392][ T342] usb usb7-port1: attempt power cycle [ 209.909063][ T2601] capability: warning: `syz.5.561' uses 32-bit capabilities (legacy support in use) [ 209.994076][ T2603] loop7: detected capacity change from 0 to 256 [ 210.009910][ T2603] FAT-fs (loop7): bogus number of FAT sectors [ 210.016197][ T2603] FAT-fs (loop7): Can't find a valid FAT filesystem [ 210.046705][ T294] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 210.059556][ T2593] loop1: detected capacity change from 0 to 40427 [ 210.076705][ T2593] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 210.096748][ T2593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 210.107074][ T2593] F2FS-fs (loop1): fault_injection options not supported [ 210.116827][ T2593] F2FS-fs (loop1): fault_type options not supported [ 210.137004][ T2593] F2FS-fs (loop1): invalid crc value [ 210.144231][ T2606] device syzkaller0 entered promiscuous mode [ 210.159589][ T2593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.194301][ T2593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 210.201404][ T2593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 210.209239][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 210.209252][ T28] audit: type=1400 audit(1757563911.689:1069): avc: denied { mount } for pid=2590 comm="syz.1.559" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 210.245938][ T28] audit: type=1400 audit(1757563911.719:1070): avc: denied { write } for pid=2590 comm="syz.1.559" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.246741][ T294] usb 1-1: Using ep0 maxpacket: 8 [ 210.275625][ T28] audit: type=1400 audit(1757563911.719:1071): avc: denied { add_name } for pid=2590 comm="syz.1.559" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.296605][ T28] audit: type=1400 audit(1757563911.719:1072): avc: denied { create } for pid=2590 comm="syz.1.559" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 210.299426][ T294] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.329564][ T294] usb 1-1: config 1 interface 0 has no altsetting 0 [ 210.329749][ T2613] device syzkaller0 entered promiscuous mode [ 210.338754][ T294] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.40 [ 210.342442][ T342] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 210.351806][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.367391][ T294] usb 1-1: Product: У [ 210.367552][ T283] syz-executor: attempt to access beyond end of device [ 210.367552][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.385816][ T294] usb 1-1: Manufacturer: ဉ [ 210.386617][ T2613] ipt_REJECT: TCP_RESET invalid for non-tcp [ 210.390470][ T28] audit: type=1400 audit(1757563911.859:1073): avc: denied { setopt } for pid=2612 comm="syz.7.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.397609][ T342] usb 7-1: no configurations [ 210.416287][ T294] usb 1-1: SerialNumber: Ї [ 210.425659][ T342] usb 7-1: can't read configurations, error -22 [ 210.542743][ T2618] Zero length message leads to an empty skb [ 210.560854][ T2620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.567'. [ 210.572618][ T28] audit: type=1400 audit(1757563912.029:1074): avc: denied { create } for pid=2615 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.592971][ T28] audit: type=1400 audit(1757563912.039:1075): avc: denied { write } for pid=2619 comm="syz.7.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.614854][ T28] audit: type=1400 audit(1757563912.089:1076): avc: denied { write } for pid=2615 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.637234][ T28] audit: type=1400 audit(1757563912.089:1077): avc: denied { nlmsg_write } for pid=2615 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.657953][ T28] audit: type=1400 audit(1757563912.099:1078): avc: denied { bind } for pid=2615 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.510175][ T2638] device syzkaller0 entered promiscuous mode [ 211.950654][ T2642] loop1: detected capacity change from 0 to 512 [ 212.183115][ T2647] loop6: detected capacity change from 0 to 512 [ 213.097450][ T294] usbhid 1-1:1.0: can't add hid device: -71 [ 213.196017][ T2642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 213.245338][ T294] usbhid: probe of 1-1:1.0 failed with error -71 [ 213.264158][ T2647] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #11: comm syz.6.573: ea_inode with extended attributes [ 213.278145][ T2647] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.573: error while reading EA inode 11 err=-117 [ 213.291927][ T2647] EXT4-fs (loop6): 1 orphan inode deleted [ 213.297806][ T2647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 213.587370][ T294] usb 1-1: USB disconnect, device number 15 [ 213.764669][ T2653] loop0: detected capacity change from 0 to 256 [ 213.774099][ T2642] EXT4-fs (loop1): 1 orphan inode deleted [ 213.788720][ T2653] FAT-fs (loop0): bogus number of FAT sectors [ 213.795479][ T2653] FAT-fs (loop0): Can't find a valid FAT filesystem [ 213.802437][ T2642] EXT4-fs (loop1): 1 truncate cleaned up [ 213.819718][ T2642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.024785][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 214.084236][ T2660] ipt_REJECT: TCP_RESET invalid for non-tcp [ 214.115559][ T2664] device syzkaller0 entered promiscuous mode [ 214.123002][ T2666] random: crng reseeded on system resumption [ 214.166729][ T2438] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 214.212093][ T2674] loop6: detected capacity change from 0 to 1024 [ 214.242379][ T2674] EXT4-fs: Ignoring removed nobh option [ 214.250358][ T2674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.366105][ T2674] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.387105][ T2438] usb 6-1: no configurations [ 214.391740][ T2438] usb 6-1: can't read configurations, error -22 [ 214.470172][ T2684] random: crng reseeded on system resumption [ 214.756509][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 214.816781][ T2438] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 215.087421][ T2438] usb 6-1: no configurations [ 215.198701][ T2686] loop6: detected capacity change from 0 to 512 [ 215.237800][ T2438] usb 6-1: can't read configurations, error -22 [ 215.247933][ T2686] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 215.256801][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 215.256817][ T28] audit: type=1400 audit(1757563916.719:1121): avc: denied { mount } for pid=2687 comm="syz.7.586" name="/" dev="configfs" ino=13152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 215.282809][ T2438] usb usb6-port1: attempt power cycle [ 215.312853][ T28] audit: type=1400 audit(1757563916.719:1122): avc: denied { mounton } for pid=2687 comm="syz.7.586" path="/88/file0" dev="configfs" ino=13152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.898576][ T28] audit: type=1400 audit(1757563919.219:1123): avc: denied { create } for pid=2687 comm="syz.7.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.984442][ T2702] loop5: detected capacity change from 0 to 256 [ 219.010106][ T2702] FAT-fs (loop5): bogus number of FAT sectors [ 219.325915][ T2710] overlayfs: failed to resolve './bus': -2 [ 220.298431][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 220.753792][ T28] audit: type=1400 audit(1757563920.459:1124): avc: denied { sqpoll } for pid=2701 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 220.776969][ T2702] FAT-fs (loop5): Can't find a valid FAT filesystem [ 220.814022][ T28] audit: type=1400 audit(1757563920.459:1125): avc: denied { create } for pid=2701 comm="syz.5.589" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.889058][ T28] audit: type=1400 audit(1757563920.459:1126): avc: denied { map } for pid=2701 comm="syz.5.589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.919700][ T2713] loop7: detected capacity change from 0 to 8192 [ 220.995677][ T28] audit: type=1400 audit(1757563920.459:1127): avc: denied { read write } for pid=2701 comm="syz.5.589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 221.027371][ T2700] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.129722][ T28] audit: type=1400 audit(1757563920.719:1128): avc: denied { create } for pid=2685 comm="syz.6.585" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 221.170237][ T28] audit: type=1400 audit(1757563920.799:1129): avc: denied { mounton } for pid=2685 comm="syz.6.585" path="/82/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.229631][ T2713] loop7: detected capacity change from 0 to 512 [ 221.233909][ T2727] loop0: detected capacity change from 0 to 512 [ 221.240987][ T28] audit: type=1400 audit(1757563921.759:1130): avc: denied { unmount } for pid=1077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 221.286721][ T28] audit: type=1400 audit(1757563922.419:1131): avc: denied { write } for pid=2712 comm="syz.7.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.381435][ T28] audit: type=1400 audit(1757563922.419:1132): avc: denied { read } for pid=2712 comm="syz.7.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.402096][ T2713] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 221.413182][ T2713] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.416784][ T2727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.452378][ T28] audit: type=1400 audit(1757563922.639:1133): avc: denied { bpf } for pid=2720 comm="syz.5.593" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.519301][ T2727] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.568796][ T2727] FAULT_INJECTION: forcing a failure. [ 221.568796][ T2727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.582076][ T2727] CPU: 0 PID: 2727 Comm: syz.0.592 Not tainted syzkaller #0 [ 221.589392][ T2727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.599464][ T2727] Call Trace: [ 221.602767][ T2727] [ 221.605711][ T2727] __dump_stack+0x21/0x24 [ 221.610062][ T2727] dump_stack_lvl+0xee/0x150 [ 221.614677][ T2727] ? __cfi_dump_stack_lvl+0x8/0x8 [ 221.619720][ T2727] ? proc_fail_nth_write+0x17a/0x1f0 [ 221.625031][ T2727] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 221.630697][ T2727] ? security_file_permission+0x8a/0xb0 [ 221.636273][ T2727] dump_stack+0x15/0x24 [ 221.640446][ T2727] should_fail_ex+0x3d4/0x520 [ 221.645153][ T2727] should_fail+0xb/0x10 [ 221.645982][ T2736] loop5: detected capacity change from 0 to 512 [ 221.649347][ T2727] should_fail_usercopy+0x1a/0x20 [ 221.649377][ T2727] strncpy_from_user+0x24/0x2d0 [ 221.665479][ T2727] strncpy_from_user_nofault+0x73/0x150 [ 221.671125][ T2727] bpf_probe_read_compat_str+0xe6/0x180 [ 221.676678][ T2727] bpf_prog_15fefb20d90ba6ff+0x38/0x5b [ 221.682145][ T2727] bpf_trace_run2+0xff/0x250 [ 221.686778][ T2727] ? __cfi_bpf_trace_run2+0x10/0x10 [ 221.691993][ T2727] ? ksys_write+0x1da/0x240 [ 221.696520][ T2727] ? __cfi_ksys_write+0x10/0x10 [ 221.701389][ T2727] __bpf_trace_sys_enter+0x62/0x70 [ 221.706507][ T2727] trace_sys_enter+0x3d/0x50 [ 221.711111][ T2727] syscall_trace_enter+0xf3/0x150 [ 221.716168][ T2727] syscall_enter_from_user_mode+0x1f/0x30 [ 221.721912][ T2727] do_syscall_64+0x24/0xa0 [ 221.726338][ T2727] ? clear_bhb_loop+0x30/0x80 [ 221.731022][ T2727] ? clear_bhb_loop+0x30/0x80 [ 221.735708][ T2727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.741604][ T2727] RIP: 0033:0x7efc91d8eba9 [ 221.746040][ T2727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.765656][ T2727] RSP: 002b:00007efc907d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 221.774171][ T2727] RAX: ffffffffffffffda RBX: 00007efc91fd6180 RCX: 00007efc91d8eba9 [ 221.782165][ T2727] RDX: 0000000000000701 RSI: 000000000000c000 RDI: 0000200000001340 [ 221.790175][ T2727] RBP: 00007efc907d6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.798154][ T2727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.806127][ T2727] R13: 00007efc91fd6218 R14: 00007efc91fd6180 R15: 00007ffcd1462f88 [ 221.814137][ T2727] [ 221.817709][ T2736] ext4: Unknown parameter 'smackfsdef' [ 221.826433][ T2727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.592: bg 0: block 328: padding at end of block bitmap is not set [ 221.918644][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 224.390696][ T283] EXT4-fs (loop1): unmounting filesystem. [ 224.406694][ T2478] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 225.287107][ T2478] usb 6-1: no configurations [ 225.291750][ T2478] usb 6-1: can't read configurations, error -22 [ 225.506724][ T2478] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 225.707152][ T2478] usb 6-1: no configurations [ 225.711847][ T2478] usb 6-1: can't read configurations, error -22 [ 225.731777][ T2478] usb usb6-port1: attempt power cycle [ 226.017774][ T284] EXT4-fs (loop0): unmounting filesystem. [ 226.081646][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 226.081663][ T28] audit: type=1400 audit(1757563927.559:1165): avc: denied { read } for pid=2770 comm="syz.0.603" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.213884][ T2774] loop5: detected capacity change from 0 to 256 [ 226.272675][ T2774] FAT-fs (loop5): bogus number of FAT sectors [ 226.292575][ T2778] syz.0.603[2778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.292913][ T2778] syz.0.603[2778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.326379][ T2774] FAT-fs (loop5): Can't find a valid FAT filesystem [ 226.379668][ T2779] loop0: detected capacity change from 0 to 128 [ 226.488229][ T28] audit: type=1400 audit(1757563927.559:1166): avc: denied { open } for pid=2770 comm="syz.0.603" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.587051][ T2779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 226.619388][ T2779] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.667885][ T2779] Driver unsupported XDP return value 0 on prog (id 306) dev N/A, expect packet loss! [ 227.252039][ T28] audit: type=1400 audit(1757563927.569:1167): avc: denied { read write } for pid=1067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.320241][ T28] audit: type=1400 audit(1757563927.569:1168): avc: denied { open } for pid=1067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.348283][ T28] audit: type=1400 audit(1757563927.569:1169): avc: denied { ioctl } for pid=1067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.383576][ T28] audit: type=1400 audit(1757563927.589:1170): avc: denied { bpf } for pid=2770 comm="syz.0.603" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.399892][ T2777] device syzkaller0 entered promiscuous mode [ 227.411118][ T28] audit: type=1400 audit(1757563927.589:1171): avc: denied { map_create } for pid=2770 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 227.431041][ T28] audit: type=1400 audit(1757563927.589:1172): avc: denied { prog_load } for pid=2770 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 227.450064][ T28] audit: type=1400 audit(1757563927.599:1173): avc: denied { execmem } for pid=2770 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 227.469246][ T28] audit: type=1400 audit(1757563927.649:1174): avc: denied { perfmon } for pid=2772 comm="syz.5.605" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.507128][ T284] EXT4-fs (loop0): unmounting filesystem. [ 227.550691][ T2793] xt_l2tp: missing protocol rule (udp|l2tpip) [ 227.714771][ T2799] loop0: detected capacity change from 0 to 512 [ 227.724562][ T2799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 227.736496][ T2799] EXT4-fs (loop0): 1 orphan inode deleted [ 227.742359][ T2799] EXT4-fs (loop0): 1 truncate cleaned up [ 227.748592][ T2799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 228.566627][ T2478] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 228.598147][ T2478] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.018132][ T2478] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.028525][ T2478] usb 6-1: config 0 interface 0 has no altsetting 0 [ 229.035230][ T2478] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 229.090955][ T2478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.136987][ T2478] usb 6-1: config 0 descriptor?? [ 229.298239][ T2816] netlink: 16 bytes leftover after parsing attributes in process `syz.7.615'. [ 229.469672][ T343] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 229.679718][ T2478] usbhid 6-1:0.0: can't add hid device: -32 [ 229.713833][ T2478] usbhid: probe of 6-1:0.0 failed with error -32 [ 229.897407][ T343] usb 7-1: no configurations [ 229.903120][ T343] usb 7-1: can't read configurations, error -22 [ 229.921840][ T2478] usb 6-1: USB disconnect, device number 22 [ 230.386728][ T343] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 230.976057][ T2829] ipt_REJECT: TCP_RESET invalid for non-tcp [ 231.034847][ T2827] device syzkaller0 entered promiscuous mode [ 231.407855][ T343] usb 7-1: no configurations [ 231.412569][ T343] usb 7-1: can't read configurations, error -22 [ 231.433985][ T343] usb usb7-port1: attempt power cycle [ 231.481761][ T2838] loop5: detected capacity change from 0 to 256 [ 231.511153][ T2838] FAT-fs (loop5): bogus number of FAT sectors [ 231.531376][ T2838] FAT-fs (loop5): Can't find a valid FAT filesystem [ 231.662254][ T2843] loop5: detected capacity change from 0 to 512 [ 231.688020][ T2843] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 231.866712][ T343] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 231.937903][ T343] usb 7-1: no configurations [ 231.942613][ T343] usb 7-1: can't read configurations, error -22 [ 232.793126][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 232.793142][ T28] audit: type=1400 audit(1757563934.269:1207): avc: denied { mount } for pid=2860 comm="syz.5.630" name="/" dev="configfs" ino=13152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 232.822837][ T2859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 232.848378][ T28] audit: type=1400 audit(1757563934.309:1208): avc: denied { mounton } for pid=2860 comm="syz.5.630" path="/91/file0" dev="configfs" ino=13152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.908839][ T28] audit: type=1400 audit(1757563934.379:1209): avc: denied { create } for pid=2860 comm="syz.5.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.030470][ T28] audit: type=1400 audit(1757563934.509:1210): avc: denied { unmount } for pid=1067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.114872][ T28] audit: type=1400 audit(1757563934.509:1211): avc: denied { create } for pid=2863 comm="syz.6.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.284277][ T284] EXT4-fs (loop0): unmounting filesystem. [ 233.343558][ T28] audit: type=1400 audit(1757563934.819:1212): avc: denied { append } for pid=2863 comm="syz.6.631" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.343662][ T2871] random: crng reseeded on system resumption [ 233.384268][ T28] audit: type=1400 audit(1757563934.819:1213): avc: denied { open } for pid=2863 comm="syz.6.631" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.566728][ T2438] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 233.580234][ T2874] loop1: detected capacity change from 0 to 256 [ 233.610801][ T2874] FAT-fs (loop1): bogus number of FAT sectors [ 233.631047][ T2874] FAT-fs (loop1): Can't find a valid FAT filesystem [ 233.865667][ T2438] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.876893][ T2438] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.907417][ T2438] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.936472][ T2438] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.964195][ T2438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.992068][ T2438] usb 1-1: config 0 descriptor?? [ 235.444279][ T2438] usbhid 1-1:0.0: can't add hid device: -32 [ 235.499581][ T2438] usbhid: probe of 1-1:0.0 failed with error -32 [ 235.621874][ T2438] usb 1-1: USB disconnect, device number 16 [ 236.593343][ T28] audit: type=1400 audit(1757563938.069:1214): avc: denied { write } for pid=2892 comm="syz.6.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.615295][ T2896] FAULT_INJECTION: forcing a failure. [ 236.615295][ T2896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.641976][ T2896] CPU: 1 PID: 2896 Comm: syz.6.640 Not tainted syzkaller #0 [ 236.649315][ T2896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.659384][ T2896] Call Trace: [ 236.662678][ T2896] [ 236.665626][ T2896] __dump_stack+0x21/0x24 [ 236.669977][ T2896] dump_stack_lvl+0xee/0x150 [ 236.674669][ T2896] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.679748][ T2896] dump_stack+0x15/0x24 [ 236.683927][ T2896] should_fail_ex+0x3d4/0x520 [ 236.688631][ T2896] should_fail+0xb/0x10 [ 236.692809][ T2896] should_fail_usercopy+0x1a/0x20 [ 236.697855][ T2896] copyin+0x20/0xa0 [ 236.701685][ T2896] _copy_from_iter+0x3e2/0xfd0 [ 236.706496][ T2896] ? __cfi__copy_from_iter+0x10/0x10 [ 236.711801][ T2896] ? __kasan_check_write+0x14/0x20 [ 236.716938][ T2896] ? __build_skb_around+0x24f/0x470 [ 236.722162][ T2896] ? check_stack_object+0x81/0x140 [ 236.727302][ T2896] ? __check_object_size+0x45a/0x600 [ 236.732612][ T2896] netlink_sendmsg+0x72c/0xbc0 [ 236.737409][ T2896] ? __cfi_netlink_sendmsg+0x10/0x10 [ 236.742884][ T2896] ? security_socket_sendmsg+0x93/0xb0 [ 236.748358][ T2896] ? __cfi_netlink_sendmsg+0x10/0x10 [ 236.753675][ T2896] ____sys_sendmsg+0x5a9/0x990 [ 236.758460][ T2896] ? __sys_sendmsg_sock+0x40/0x40 [ 236.763500][ T2896] ? import_iovec+0x7c/0xb0 [ 236.768028][ T2896] ___sys_sendmsg+0x21c/0x290 [ 236.772753][ T2896] ? __sys_sendmsg+0x270/0x270 [ 236.777533][ T2896] ? __kasan_check_write+0x14/0x20 [ 236.782712][ T2896] ? proc_fail_nth_write+0x17a/0x1f0 [ 236.788018][ T2896] ? vfs_write+0x9d6/0xca0 [ 236.792490][ T2896] ? __fdget+0x19c/0x220 [ 236.796758][ T2896] __x64_sys_sendmsg+0x1f0/0x2c0 [ 236.801783][ T2896] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 236.807369][ T2896] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 236.813460][ T2896] x64_sys_call+0x171/0x9a0 [ 236.817986][ T2896] do_syscall_64+0x4c/0xa0 [ 236.822422][ T2896] ? clear_bhb_loop+0x30/0x80 [ 236.827123][ T2896] ? clear_bhb_loop+0x30/0x80 [ 236.831821][ T2896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.837737][ T2896] RIP: 0033:0x7fec8958eba9 [ 236.842190][ T2896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.861898][ T2896] RSP: 002b:00007fec8a45c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.870336][ T2896] RAX: ffffffffffffffda RBX: 00007fec897d6090 RCX: 00007fec8958eba9 [ 236.878510][ T2896] RDX: 0000000020000054 RSI: 0000200000000100 RDI: 0000000000000005 [ 236.886496][ T2896] RBP: 00007fec8a45c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.894481][ T2896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.902467][ T2896] R13: 00007fec897d6128 R14: 00007fec897d6090 R15: 00007ffe5dff2958 [ 236.910466][ T2896] [ 236.950532][ T28] audit: type=1400 audit(1757563938.089:1215): avc: denied { read } for pid=2892 comm="syz.6.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.022365][ T2901] loop7: detected capacity change from 0 to 512 [ 237.040174][ T2901] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 237.071779][ T2901] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:164: inode #17: comm syz.7.642: inline data xattr refers to an external xattr inode [ 237.087191][ T28] audit: type=1400 audit(1757563938.569:1216): avc: denied { write } for pid=2900 comm="syz.5.643" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.122080][ T2901] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.642: couldn't read orphan inode 17 (err -117) [ 237.134206][ T2901] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 237.152468][ T2907] loop6: detected capacity change from 0 to 256 [ 237.162511][ T2907] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 237.627068][ T2438] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 237.679001][ T2928] loop0: detected capacity change from 0 to 512 [ 237.682441][ T2919] device syzkaller0 entered promiscuous mode [ 237.696839][ T2928] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 237.731009][ T2928] EXT4-fs (loop0): 1 orphan inode deleted [ 237.756419][ T2928] EXT4-fs (loop0): 1 truncate cleaned up [ 237.778905][ T2928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.815108][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 237.815124][ T28] audit: type=1400 audit(1757563939.289:1246): avc: denied { mount } for pid=2913 comm="syz.0.647" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 237.847875][ T2438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 237.875733][ T2438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 237.916242][ T2438] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.928585][ T28] audit: type=1400 audit(1757563939.409:1247): avc: denied { map_read map_write } for pid=2933 comm="syz.6.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.936871][ T2438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.971305][ T2438] usb 6-1: Product: syz [ 237.980719][ T2438] usb 6-1: Manufacturer: syz [ 237.990533][ T2438] usb 6-1: SerialNumber: syz [ 238.005431][ T2934] device syzkaller0 entered promiscuous mode [ 238.005786][ T2438] usb 6-1: config 0 descriptor?? [ 238.041254][ T28] audit: type=1400 audit(1757563939.519:1248): avc: denied { setopt } for pid=2933 comm="syz.6.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.061421][ T2934] ipt_REJECT: TCP_RESET invalid for non-tcp [ 238.175986][ T28] audit: type=1400 audit(1757563939.649:1249): avc: denied { unmount } for pid=1077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 238.196972][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 238.280507][ T28] audit: type=1400 audit(1757563939.759:1250): avc: denied { sqpoll } for pid=2938 comm="syz.6.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.319989][ T2941] loop6: detected capacity change from 0 to 256 [ 238.367817][ T28] audit: type=1400 audit(1757563939.799:1251): avc: denied { create } for pid=2938 comm="syz.6.653" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.389362][ T28] audit: type=1400 audit(1757563939.799:1252): avc: denied { map } for pid=2938 comm="syz.6.653" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.399152][ T2941] FAT-fs (loop6): bogus number of FAT sectors [ 238.414054][ T28] audit: type=1400 audit(1757563939.799:1253): avc: denied { read write } for pid=2938 comm="syz.6.653" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.444490][ T2941] FAT-fs (loop6): Can't find a valid FAT filesystem [ 238.493920][ T2946] syz.5.648[2946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.494419][ T2946] syz.5.648[2946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.521892][ T2946] loop5: detected capacity change from 0 to 128 [ 238.572007][ T28] audit: type=1400 audit(1757563940.029:1254): avc: denied { mount } for pid=2916 comm="syz.5.648" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 240.135925][ T28] audit: type=1400 audit(1757563941.239:1255): avc: denied { read } for pid=2936 comm="syz.1.651" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 240.707573][ T2954] random: crng reseeded on system resumption [ 240.825573][ T2438] usb 6-1: USB disconnect, device number 23 [ 241.988924][ T2964] netlink: 16 bytes leftover after parsing attributes in process `syz.7.658'. [ 242.258575][ T2969] device syzkaller0 entered promiscuous mode [ 242.377576][ T2973] loop6: detected capacity change from 0 to 512 [ 242.408609][ T2973] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 242.938041][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 242.938060][ T28] audit: type=1400 audit(1757563944.119:1279): avc: denied { read write } for pid=2974 comm="syz.1.662" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 243.052701][ T28] audit: type=1400 audit(1757563944.119:1280): avc: denied { open } for pid=2974 comm="syz.1.662" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 243.115767][ T28] audit: type=1400 audit(1757563944.129:1281): avc: denied { ioctl } for pid=2974 comm="syz.1.662" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 243.154017][ T2982] loop6: detected capacity change from 0 to 256 [ 243.166594][ T28] audit: type=1400 audit(1757563944.559:1282): avc: denied { map_read map_write } for pid=2972 comm="syz.6.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.202666][ T2982] FAT-fs (loop6): bogus number of FAT sectors [ 243.357633][ T2984] netlink: 16 bytes leftover after parsing attributes in process `syz.7.663'. [ 243.493005][ T2982] FAT-fs (loop6): Can't find a valid FAT filesystem [ 243.526724][ T28] audit: type=1400 audit(1757563944.629:1283): avc: denied { sqpoll } for pid=2981 comm="syz.6.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.556734][ T2986] incfs: Backing dir is not set, filesystem can't be mounted. [ 243.564287][ T2986] incfs: mount failed -2 [ 243.594912][ T28] audit: type=1400 audit(1757563944.629:1284): avc: denied { create } for pid=2981 comm="syz.6.664" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.620983][ T284] EXT4-fs (loop0): unmounting filesystem. [ 243.642001][ T28] audit: type=1400 audit(1757563944.629:1285): avc: denied { map } for pid=2981 comm="syz.6.664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 245.287636][ T28] audit: type=1400 audit(1757563944.629:1286): avc: denied { read write } for pid=2981 comm="syz.6.664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 245.312432][ T28] audit: type=1400 audit(1757563945.099:1287): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 245.332054][ T28] audit: type=1400 audit(1757563945.109:1288): avc: denied { create } for pid=2987 comm="syz.6.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.298314][ T3011] incfs: Backing dir is not set, filesystem can't be mounted. [ 247.305892][ T3011] incfs: mount failed -2 [ 247.409927][ T343] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 250.019077][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 250.019096][ T28] audit: type=1400 audit(1757563949.139:1305): avc: denied { prog_run } for pid=3010 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.055426][ T28] audit: type=1400 audit(1757563949.839:1306): avc: denied { map_create } for pid=3010 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.074929][ T28] audit: type=1400 audit(1757563949.839:1307): avc: denied { map_read map_write } for pid=3010 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.104998][ T28] audit: type=1400 audit(1757563951.579:1308): avc: denied { create } for pid=3016 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.106302][ T3023] loop6: detected capacity change from 0 to 256 [ 250.124516][ T28] audit: type=1400 audit(1757563951.579:1309): avc: denied { read write } for pid=3015 comm="syz.7.676" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.157609][ T28] audit: type=1400 audit(1757563951.579:1310): avc: denied { open } for pid=3015 comm="syz.7.676" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.169867][ T3018] bridge0: port 3(vlan2) entered blocking state [ 250.181103][ T3023] FAT-fs (loop6): bogus number of FAT sectors [ 250.193898][ T3023] FAT-fs (loop6): Can't find a valid FAT filesystem [ 250.200989][ T28] audit: type=1400 audit(1757563951.579:1311): avc: denied { sqpoll } for pid=3021 comm="syz.6.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.201625][ T3018] bridge0: port 3(vlan2) entered disabled state [ 250.226730][ T28] audit: type=1400 audit(1757563951.579:1312): avc: denied { create } for pid=3021 comm="syz.6.677" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.253611][ T28] audit: type=1400 audit(1757563951.579:1313): avc: denied { map } for pid=3021 comm="syz.6.677" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.286946][ T28] audit: type=1400 audit(1757563951.579:1314): avc: denied { read write } for pid=3021 comm="syz.6.677" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.339479][ T3026] device syzkaller0 entered promiscuous mode [ 250.357307][ T3018] loop1: detected capacity change from 0 to 512 [ 250.364038][ T3018] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.373721][ T3029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 250.390675][ T3018] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.415985][ T3018] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 250.441051][ T3018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 250.441275][ T3033] loop6: detected capacity change from 0 to 512 [ 250.456954][ T3018] System zones: 0-2, 18-18, 34-34 [ 250.462721][ T3033] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 250.474513][ T3018] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.672: iget: bad i_size value: 360287970189639680 [ 250.493778][ T3033] EXT4-fs (loop6): 1 orphan inode deleted [ 250.494348][ T3018] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.672: couldn't read orphan inode 15 (err -117) [ 250.499912][ T3033] EXT4-fs (loop6): 1 truncate cleaned up [ 250.518070][ T3033] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 250.527161][ T3018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.675231][ T3025] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.672: iget: bad i_size value: 360287970189639680 [ 250.693550][ T3025] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.672: iget: bad i_size value: 360287970189639680 [ 250.821612][ T283] EXT4-fs (loop1): unmounting filesystem. [ 250.843902][ T3037] loop5: detected capacity change from 0 to 256 [ 250.863198][ T3037] FAT-fs (loop5): bogus number of FAT sectors [ 250.872686][ T3037] FAT-fs (loop5): Can't find a valid FAT filesystem [ 250.997382][ T3045] incfs: Backing dir is not set, filesystem can't be mounted. [ 251.005502][ T3045] incfs: mount failed -2 [ 251.054318][ T3046] random: crng reseeded on system resumption [ 253.596766][ T39] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 253.797449][ T39] usb 2-1: no configurations [ 253.802351][ T39] usb 2-1: can't read configurations, error -22 [ 253.976721][ T39] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 254.266736][ T343] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 254.274963][ T39] usb 2-1: no configurations [ 254.279634][ T39] usb 2-1: can't read configurations, error -22 [ 254.286086][ T39] usb usb2-port1: attempt power cycle [ 254.706887][ T39] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 254.879765][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 254.937550][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 254.956760][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 254.978283][ T343] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.996694][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.014935][ T343] usb 1-1: Product: syz [ 255.019320][ T343] usb 1-1: Manufacturer: syz [ 255.023926][ T343] usb 1-1: SerialNumber: syz [ 255.047917][ T343] usb 1-1: config 0 descriptor?? [ 255.195514][ T39] usb 2-1: no configurations [ 255.200295][ T39] usb 2-1: can't read configurations, error -22 [ 255.224292][ T3073] loop7: detected capacity change from 0 to 512 [ 255.238053][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 255.238068][ T28] audit: type=1400 audit(1757563956.719:1369): avc: denied { mounton } for pid=3072 comm="syz.7.691" path="/109/file1" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 255.239908][ T3070] loop5: detected capacity change from 0 to 256 [ 255.244552][ T3073] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 255.283111][ T3070] FAT-fs (loop5): bogus number of FAT sectors [ 255.301220][ T3070] FAT-fs (loop5): Can't find a valid FAT filesystem [ 255.330774][ T3074] device syzkaller0 entered promiscuous mode [ 255.349564][ T28] audit: type=1400 audit(1757563956.829:1370): avc: denied { name_bind } for pid=3071 comm="syz.6.689" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 255.371772][ T28] audit: type=1400 audit(1757563956.829:1371): avc: denied { node_bind } for pid=3071 comm="syz.6.689" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 255.416713][ T39] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 255.421119][ T28] audit: type=1400 audit(1757563956.829:1372): avc: denied { create } for pid=3071 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.447420][ T39] usb 2-1: no configurations [ 255.452082][ T39] usb 2-1: can't read configurations, error -22 [ 255.492034][ T39] usb usb2-port1: unable to enumerate USB device [ 255.506175][ T3076] syz.0.684[3076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.506524][ T3076] syz.0.684[3076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.527691][ T3076] loop0: detected capacity change from 0 to 128 [ 255.833833][ T3079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.692'. [ 255.843529][ T28] audit: type=1400 audit(1757563956.839:1373): avc: denied { create } for pid=3071 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.399782][ T28] audit: type=1400 audit(1757563956.839:1374): avc: denied { bind } for pid=3071 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.950821][ T28] audit: type=1400 audit(1757563957.029:1375): avc: denied { mount } for pid=3054 comm="syz.0.684" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 258.720694][ T28] audit: type=1400 audit(1757563957.319:1376): avc: denied { write } for pid=3077 comm="syz.5.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.740997][ T28] audit: type=1400 audit(1757563957.559:1377): avc: denied { create } for pid=3081 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.760788][ T28] audit: type=1400 audit(1757563957.629:1378): avc: denied { map_write } for pid=3080 comm="syz.6.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 258.786810][ T343] usb 1-1: USB disconnect, device number 18 [ 259.990398][ T2700] udevd[2700]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.257495][ T3108] random: crng reseeded on system resumption [ 262.807031][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 262.807048][ T28] audit: type=1400 audit(1757563961.739:1403): avc: denied { append } for pid=3094 comm="syz.0.696" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.908208][ T3112] loop0: detected capacity change from 0 to 256 [ 262.968301][ T3112] FAT-fs (loop0): bogus number of FAT sectors [ 263.055218][ T28] audit: type=1400 audit(1757563961.739:1404): avc: denied { open } for pid=3094 comm="syz.0.696" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 263.078615][ T28] audit: type=1400 audit(1757563964.349:1405): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 263.096879][ T3112] FAT-fs (loop0): Can't find a valid FAT filesystem [ 263.098342][ T28] audit: type=1400 audit(1757563964.409:1406): avc: denied { create } for pid=3115 comm="syz.6.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.124876][ T28] audit: type=1400 audit(1757563964.429:1407): avc: denied { write } for pid=3115 comm="syz.6.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.130811][ T3114] device syzkaller0 entered promiscuous mode [ 263.145279][ T28] audit: type=1400 audit(1757563964.459:1408): avc: denied { execmem } for pid=3117 comm="syz.7.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 263.170055][ T28] audit: type=1400 audit(1757563964.599:1409): avc: denied { name_bind } for pid=3113 comm="syz.1.703" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 263.192510][ T28] audit: type=1400 audit(1757563964.599:1410): avc: denied { node_bind } for pid=3113 comm="syz.1.703" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 263.225815][ T28] audit: type=1400 audit(1757563964.599:1411): avc: denied { create } for pid=3113 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.252867][ T28] audit: type=1400 audit(1757563964.599:1412): avc: denied { create } for pid=3113 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.382519][ T3133] loop1: detected capacity change from 0 to 512 [ 263.397862][ T3133] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 263.456781][ T350] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 263.465800][ T3134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'. [ 263.646703][ T294] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 263.658514][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.676539][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 263.700599][ T350] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.718419][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.735770][ T350] usb 6-1: Product: syz [ 263.747843][ T350] usb 6-1: Manufacturer: syz [ 263.760379][ T350] usb 6-1: SerialNumber: syz [ 263.770261][ T350] usb 6-1: config 0 descriptor?? [ 263.847779][ T294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.857577][ T294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 263.878073][ T294] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.887332][ T294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.895382][ T294] usb 7-1: Product: syz [ 263.900129][ T294] usb 7-1: Manufacturer: syz [ 263.904801][ T294] usb 7-1: SerialNumber: syz [ 263.915183][ T294] usb 7-1: config 0 descriptor?? [ 264.169733][ T3141] syz.5.707[3141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.169815][ T3141] syz.5.707[3141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.183781][ T3141] loop5: detected capacity change from 0 to 128 [ 264.210016][ T3141] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 264.218808][ T3141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 264.398788][ T3148] loop0: detected capacity change from 0 to 256 [ 264.429880][ T3146] loop1: detected capacity change from 0 to 512 [ 264.453678][ T3148] FAT-fs (loop0): bogus number of FAT sectors [ 264.485658][ T3148] FAT-fs (loop0): Can't find a valid FAT filesystem [ 264.532947][ T3146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 264.731437][ T3146] EXT4-fs (loop1): 1 orphan inode deleted [ 264.740073][ T3146] EXT4-fs (loop1): 1 truncate cleaned up [ 264.771189][ T3146] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 264.808949][ T3150] syz.6.706[3150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.809046][ T3150] syz.6.706[3150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.822532][ T3150] loop6: detected capacity change from 0 to 128 [ 265.386684][ T39] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 265.577771][ T39] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 265.596224][ T39] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.628551][ T39] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.656729][ T39] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.665866][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.875338][ T283] EXT4-fs (loop1): unmounting filesystem. [ 266.731986][ T3161] loop0: detected capacity change from 0 to 256 [ 266.866700][ T3161] FAT-fs (loop0): bogus number of FAT sectors [ 266.893178][ T3161] FAT-fs (loop0): Can't find a valid FAT filesystem [ 266.922610][ T3163] device syzkaller0 entered promiscuous mode [ 267.005569][ T3166] loop0: detected capacity change from 0 to 512 [ 267.046322][ T3166] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 267.102795][ T350] usb 6-1: USB disconnect, device number 24 [ 268.047638][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 268.047658][ T28] audit: type=1400 audit(1757563969.509:1461): avc: denied { create } for pid=3184 comm="syz.7.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.150725][ T28] audit: type=1400 audit(1757563969.629:1462): avc: denied { write } for pid=3184 comm="syz.7.727" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 268.163320][ T3188] loop7: detected capacity change from 0 to 512 [ 268.209607][ T28] audit: type=1400 audit(1757563969.659:1463): avc: denied { read } for pid=3189 comm="syz.0.728" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.265644][ T3188] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 268.279536][ T39] usb 1-1: invalid MIDI out EP 0 [ 268.280381][ T294] usb 7-1: USB disconnect, device number 16 [ 268.348209][ T39] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 268.367644][ T28] audit: type=1400 audit(1757563969.669:1464): avc: denied { open } for pid=3189 comm="syz.0.728" path="net:[4026532464]" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.397405][ T39] usb 1-1: USB disconnect, device number 19 [ 268.411119][ T3194] udevd[3194]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 268.431436][ T28] audit: type=1400 audit(1757563969.669:1465): avc: denied { create } for pid=3189 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.483104][ T3188] EXT4-fs (loop7): 1 orphan inode deleted [ 268.504775][ T3193] loop0: detected capacity change from 0 to 8192 [ 268.521455][ T3188] EXT4-fs (loop7): 1 truncate cleaned up [ 268.536751][ T28] audit: type=1400 audit(1757563969.679:1466): avc: denied { accept } for pid=3189 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.556749][ T28] audit: type=1400 audit(1757563969.729:1467): avc: denied { mounton } for pid=3182 comm="syz.1.726" path="/165/file0" dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 268.571481][ T3201] device syzkaller0 entered promiscuous mode [ 268.579303][ T28] audit: type=1400 audit(1757563969.739:1468): avc: denied { create } for pid=3192 comm="syz.0.729" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 268.593752][ T3188] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 268.606716][ T28] audit: type=1400 audit(1757563969.839:1469): avc: denied { read write } for pid=3195 comm="syz.5.730" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.702747][ T3201] ipt_REJECT: TCP_RESET invalid for non-tcp [ 268.712273][ T28] audit: type=1400 audit(1757563969.839:1470): avc: denied { open } for pid=3195 comm="syz.5.730" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.756672][ T350] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 268.855935][ T3205] loop0: detected capacity change from 0 to 512 [ 269.199798][ T3205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.379274][ T3205] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.066978][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.086669][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 270.099063][ T350] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.116660][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.124687][ T350] usb 6-1: Product: syz [ 270.134971][ T3211] device syzkaller0 entered promiscuous mode [ 270.141072][ T350] usb 6-1: Manufacturer: syz [ 270.145683][ T350] usb 6-1: SerialNumber: syz [ 270.158327][ T350] usb 6-1: config 0 descriptor?? [ 270.232520][ T284] EXT4-fs (loop0): unmounting filesystem. [ 270.485401][ T3221] random: crng reseeded on system resumption [ 270.998167][ T3223] syz.5.730[3223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.998277][ T3223] syz.5.730[3223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.488049][ T3223] loop5: detected capacity change from 0 to 128 [ 271.545063][ T3223] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 271.553905][ T3223] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 271.750565][ T3226] incfs: Backing dir is not set, filesystem can't be mounted. [ 271.758155][ T3226] incfs: mount failed -2 [ 272.706702][ T504] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.978021][ T504] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.001476][ T504] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.031981][ T504] usb 1-1: config 0 interface 0 has no altsetting 0 [ 273.053159][ T504] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 273.080748][ T504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.197641][ T504] usb 1-1: config 0 descriptor?? [ 273.414067][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 273.414135][ T28] audit: type=1400 audit(1757563974.889:1501): avc: denied { unmount } for pid=1067 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 273.443007][ T350] usb 6-1: USB disconnect, device number 25 [ 273.572384][ T28] audit: type=1400 audit(1757563974.959:1502): avc: denied { read } for pid=3229 comm="syz.6.739" dev="nsfs" ino=4026533115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.613681][ T28] audit: type=1400 audit(1757563974.959:1503): avc: denied { open } for pid=3229 comm="syz.6.739" path="net:[4026533115]" dev="nsfs" ino=4026533115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.638252][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 273.654708][ T504] usbhid 1-1:0.0: can't add hid device: -32 [ 273.662755][ T504] usbhid: probe of 1-1:0.0 failed with error -32 [ 273.679461][ T28] audit: type=1400 audit(1757563974.959:1504): avc: denied { create } for pid=3229 comm="syz.6.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.688547][ T504] usb 1-1: USB disconnect, device number 20 [ 273.712349][ T28] audit: type=1400 audit(1757563975.079:1505): avc: denied { unmount } for pid=1077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 274.144419][ T28] audit: type=1400 audit(1757563975.189:1506): avc: denied { create } for pid=3238 comm="syz.7.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.176343][ T28] audit: type=1400 audit(1757563975.309:1507): avc: denied { read write } for pid=3233 comm="syz.6.740" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.268483][ T28] audit: type=1400 audit(1757563975.309:1508): avc: denied { open } for pid=3233 comm="syz.6.740" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.294661][ T28] audit: type=1400 audit(1757563975.319:1509): avc: denied { ioctl } for pid=3233 comm="syz.6.740" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.700807][ T3248] device syzkaller0 entered promiscuous mode [ 274.738231][ T28] audit: type=1400 audit(1757563976.219:1510): avc: denied { name_bind } for pid=3247 comm="syz.6.745" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 275.059637][ T350] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 275.146888][ T3261] random: crng reseeded on system resumption [ 275.204631][ T3264] loop1: detected capacity change from 0 to 512 [ 275.247805][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.261237][ T3264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 275.267279][ T350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 275.293797][ T350] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.306514][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.324927][ T350] usb 6-1: Product: syz [ 275.335019][ T350] usb 6-1: Manufacturer: syz [ 275.339707][ T350] usb 6-1: SerialNumber: syz [ 275.345071][ T350] usb 6-1: config 0 descriptor?? [ 275.350707][ T3264] EXT4-fs (loop1): 1 orphan inode deleted [ 275.372691][ T3264] EXT4-fs (loop1): 1 truncate cleaned up [ 275.408184][ T3264] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 275.629241][ T3269] incfs: Backing dir is not set, filesystem can't be mounted. [ 275.636855][ T3269] incfs: mount failed -2 [ 275.768710][ T3270] syz.5.742[3270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.769147][ T3270] syz.5.742[3270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.795062][ T3270] loop5: detected capacity change from 0 to 128 [ 278.732397][ T3280] loop7: detected capacity change from 0 to 512 [ 278.831930][ T3280] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 278.938661][ T350] usb 6-1: USB disconnect, device number 26 [ 279.043915][ T3280] EXT4-fs (loop7): 1 orphan inode deleted [ 279.081825][ T3280] EXT4-fs (loop7): 1 truncate cleaned up [ 279.398063][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 279.398082][ T28] audit: type=1400 audit(1757563980.639:1520): avc: denied { create } for pid=3284 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.439892][ T3289] device syzkaller0 entered promiscuous mode [ 279.446261][ T3280] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 279.478578][ T28] audit: type=1400 audit(1757563980.959:1521): avc: denied { setopt } for pid=3288 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.498780][ T3290] ipt_REJECT: TCP_RESET invalid for non-tcp [ 279.567214][ T2960] udevd[2960]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 279.632681][ T2815] udevd[2815]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.506719][ T2478] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 281.536827][ T283] EXT4-fs (loop1): unmounting filesystem. [ 281.606681][ T294] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 281.697909][ T2478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.707836][ T2478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 281.720696][ T2478] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.730263][ T2478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.738583][ T2478] usb 6-1: Product: syz [ 281.742874][ T2478] usb 6-1: Manufacturer: syz [ 281.747702][ T2478] usb 6-1: SerialNumber: syz [ 281.762078][ T2478] usb 6-1: config 0 descriptor?? [ 281.767648][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 281.797821][ T294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.807642][ T294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 281.827867][ T294] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.837106][ T294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.845149][ T294] usb 7-1: Product: syz [ 281.846766][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 281.849792][ T294] usb 7-1: Manufacturer: syz [ 281.861995][ T294] usb 7-1: SerialNumber: syz [ 281.876077][ T294] usb 7-1: config 0 descriptor?? [ 282.067749][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.086674][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.120331][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.143975][ T3324] syz.5.762[3324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.144302][ T3324] syz.5.762[3324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.164304][ T3324] loop5: detected capacity change from 0 to 128 [ 282.192848][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 282.331577][ T3324] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 282.340426][ T3324] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 282.768419][ T3326] syz.6.765[3326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.768765][ T3326] syz.6.765[3326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.204254][ T3326] loop6: detected capacity change from 0 to 128 [ 283.301079][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.337620][ T3328] ipt_REJECT: TCP_RESET invalid for non-tcp [ 283.390169][ T24] usb 2-1: config 0 descriptor?? [ 283.574381][ T3327] device syzkaller0 entered promiscuous mode [ 284.740304][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 284.746311][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 284.782606][ T3340] netlink: 16 bytes leftover after parsing attributes in process `syz.7.774'. [ 284.805852][ T28] audit: type=1400 audit(1757563986.269:1522): avc: denied { write } for pid=3339 comm="syz.7.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 285.035746][ T24] usb 2-1: USB disconnect, device number 22 [ 285.327876][ T28] audit: type=1400 audit(1757563986.609:1523): avc: denied { setopt } for pid=3345 comm="syz.7.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.693357][ T3351] loop6: detected capacity change from 0 to 512 [ 285.736794][ T28] audit: type=1400 audit(1757563986.649:1524): avc: denied { accept } for pid=3345 comm="syz.7.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.015406][ T2478] usb 6-1: USB disconnect, device number 27 [ 286.021971][ T3351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.283015][ T294] usb 7-1: USB disconnect, device number 17 [ 286.299119][ T2815] udevd[2815]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 286.323379][ T3351] EXT4-fs (loop6): 1 orphan inode deleted [ 286.337715][ T3361] loop7: detected capacity change from 0 to 512 [ 286.347387][ T3351] EXT4-fs (loop6): 1 truncate cleaned up [ 286.353064][ T3351] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 286.389792][ T3361] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 286.410795][ T3361] EXT4-fs (loop7): 1 orphan inode deleted [ 286.437826][ T3361] EXT4-fs (loop7): 1 truncate cleaned up [ 286.469579][ T3361] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 287.316885][ T342] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 287.518056][ T3382] device syzkaller0 entered promiscuous mode [ 287.534921][ T3382] ipt_REJECT: TCP_RESET invalid for non-tcp [ 287.577761][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 287.591618][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 287.614960][ T342] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 287.633532][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.649922][ T342] usb 2-1: Product: syz [ 287.660370][ T342] usb 2-1: Manufacturer: syz [ 287.670268][ T342] usb 2-1: SerialNumber: syz [ 287.680935][ T342] usb 2-1: config 0 descriptor?? [ 287.966791][ T428] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 288.081580][ T3390] syz.1.784[3390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.082009][ T3390] syz.1.784[3390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.107902][ T3390] loop1: detected capacity change from 0 to 128 [ 288.153148][ T3390] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 288.162181][ T3390] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.219143][ T428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 288.367369][ T428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 288.563716][ T428] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.698738][ T428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.795975][ T428] usb 6-1: Product: syz [ 288.846771][ T428] usb 6-1: Manufacturer: syz [ 288.901898][ T428] usb 6-1: SerialNumber: syz [ 288.996720][ T428] usb 6-1: config 0 descriptor?? [ 289.176979][ T1070] EXT4-fs (loop6): unmounting filesystem. [ 290.308545][ T3398] syz.5.787[3398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.308971][ T3398] syz.5.787[3398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.346767][ T3398] loop5: detected capacity change from 0 to 128 [ 290.845065][ T342] usb 2-1: USB disconnect, device number 23 [ 291.169853][ T3401] loop0: detected capacity change from 0 to 256 [ 291.383078][ T3401] FAT-fs (loop0): bogus number of FAT sectors [ 291.496674][ T3401] FAT-fs (loop0): Can't find a valid FAT filesystem [ 291.521063][ T3402] device syzkaller0 entered promiscuous mode [ 291.556693][ T2478] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 291.619428][ T1077] EXT4-fs (loop7): unmounting filesystem. [ 291.652918][ T3406] device syzkaller0 entered promiscuous mode [ 291.670702][ T3406] ipt_REJECT: TCP_RESET invalid for non-tcp [ 291.702248][ T28] audit: type=1400 audit(1757563993.179:1525): avc: denied { module_request } for pid=3399 comm="syz.0.792" kmod="arptable_vfat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.748849][ T2478] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.766222][ T2478] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.778959][ T2478] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.787469][ T2478] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.806840][ T2478] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.832731][ T2478] usb 7-1: config 0 descriptor?? [ 292.669169][ T3415] device syzkaller0 entered promiscuous mode [ 292.680406][ T3415] ipt_REJECT: TCP_RESET invalid for non-tcp [ 292.762138][ T428] usb 6-1: USB disconnect, device number 28 [ 292.765666][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 292.777859][ T2478] usbhid 7-1:0.0: can't add hid device: -32 [ 292.783829][ T2478] usbhid: probe of 7-1:0.0 failed with error -32 [ 292.793231][ T2478] usb 7-1: USB disconnect, device number 18 [ 293.367459][ T2960] udevd[2960]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 293.817919][ T2700] udevd[2700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 294.249787][ T3441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.801'. [ 294.781886][ T3449] device syzkaller0 entered promiscuous mode [ 294.791764][ T3451] loop0: detected capacity change from 0 to 512 [ 294.878751][ T3451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 294.956533][ T3451] EXT4-fs (loop0): 1 orphan inode deleted [ 294.988391][ T3451] EXT4-fs (loop0): 1 truncate cleaned up [ 294.994143][ T3451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 295.502826][ T3466] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.163597][ T28] audit: type=1400 audit(1757563997.639:1526): avc: denied { read write } for pid=1067 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.194420][ T28] audit: type=1400 audit(1757563997.669:1527): avc: denied { open } for pid=1067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.226617][ T28] audit: type=1400 audit(1757563997.669:1528): avc: denied { ioctl } for pid=1067 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.326037][ T3479] random: crng reseeded on system resumption [ 296.405768][ T350] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 296.430773][ T28] audit: type=1400 audit(1757563997.669:1529): avc: denied { read } for pid=3478 comm="syz.5.814" dev="nsfs" ino=4026532544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 296.460339][ T28] audit: type=1400 audit(1757563997.669:1530): avc: denied { open } for pid=3478 comm="syz.5.814" path="net:[4026532544]" dev="nsfs" ino=4026532544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 296.484281][ T28] audit: type=1400 audit(1757563997.669:1531): avc: denied { create } for pid=3478 comm="syz.5.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 296.505717][ T28] audit: type=1400 audit(1757563997.739:1532): avc: denied { execmem } for pid=3478 comm="syz.5.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 296.507501][ T3484] device syzkaller0 entered promiscuous mode [ 296.525215][ T28] audit: type=1400 audit(1757563997.799:1533): avc: denied { create } for pid=3473 comm="syz.6.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.553689][ T3485] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.563984][ T28] audit: type=1400 audit(1757563997.799:1534): avc: denied { append } for pid=3478 comm="syz.5.814" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 296.687776][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 296.706841][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 296.737430][ T350] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.746647][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.754672][ T350] usb 2-1: Product: syz [ 296.759015][ T350] usb 2-1: Manufacturer: syz [ 296.763641][ T350] usb 2-1: SerialNumber: syz [ 296.774415][ T350] usb 2-1: config 0 descriptor?? [ 297.251247][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 297.251265][ T28] audit: type=1400 audit(1757563998.729:1546): avc: denied { name_bind } for pid=3492 comm="syz.7.818" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 297.264388][ T3494] device syzkaller0 entered promiscuous mode [ 297.286870][ T28] audit: type=1400 audit(1757563998.759:1547): avc: denied { node_bind } for pid=3492 comm="syz.7.818" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 297.365764][ T3496] syz.1.811[3496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.366056][ T3496] syz.1.811[3496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.389108][ T3496] loop1: detected capacity change from 0 to 128 [ 297.672337][ T28] audit: type=1400 audit(1757563998.859:1548): avc: denied { prog_run } for pid=3471 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.988122][ T28] audit: type=1400 audit(1757563998.889:1549): avc: denied { mounton } for pid=3471 comm="syz.1.811" path="/178/file0" dev="tmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 298.361682][ T28] audit: type=1400 audit(1757563998.899:1550): avc: denied { mount } for pid=3471 comm="syz.1.811" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 298.388927][ T284] EXT4-fs (loop0): unmounting filesystem. [ 298.564731][ T28] audit: type=1400 audit(1757563999.509:1551): avc: denied { write } for pid=3497 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.665342][ T28] audit: type=1400 audit(1757563999.509:1552): avc: denied { read } for pid=3497 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.685758][ T28] audit: type=1400 audit(1757563999.519:1553): avc: denied { create } for pid=3501 comm="syz.6.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 298.705343][ T28] audit: type=1400 audit(1757563999.709:1554): avc: denied { read } for pid=3497 comm="syz.5.819" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 298.728680][ T28] audit: type=1400 audit(1757563999.709:1555): avc: denied { open } for pid=3497 comm="syz.5.819" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 298.753338][ T3507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.820'. [ 299.553028][ T3523] device syzkaller0 entered promiscuous mode [ 299.617770][ T3523] ipt_REJECT: TCP_RESET invalid for non-tcp [ 300.202079][ T350] usb 2-1: USB disconnect, device number 24 [ 300.298399][ T3537] device syzkaller0 entered promiscuous mode [ 300.346700][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 300.755090][ T3545] loop1: detected capacity change from 0 to 512 [ 300.768233][ T3545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 300.820696][ T3551] incfs: Backing dir is not set, filesystem can't be mounted. [ 300.828679][ T3551] incfs: mount failed -2 [ 300.906121][ T3545] EXT4-fs (loop1): 1 orphan inode deleted [ 300.911993][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 300.924095][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 300.925182][ T3545] EXT4-fs (loop1): 1 truncate cleaned up [ 300.936547][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.952387][ T3545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 300.963881][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.986956][ T24] usb 7-1: Product: syz [ 300.991377][ T24] usb 7-1: Manufacturer: syz [ 300.996087][ T24] usb 7-1: SerialNumber: syz [ 301.273649][ T24] usb 7-1: config 0 descriptor?? [ 301.968965][ T3559] syz.6.828[3559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.969051][ T3559] syz.6.828[3559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.982017][ T3559] loop6: detected capacity change from 0 to 128 [ 302.281302][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 302.281386][ T28] audit: type=1400 audit(1757564003.759:1591): avc: denied { read write } for pid=1077 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.584935][ T3561] loop0: detected capacity change from 0 to 256 [ 302.807093][ T3561] FAT-fs (loop0): bogus number of FAT sectors [ 302.955084][ T3561] FAT-fs (loop0): Can't find a valid FAT filesystem [ 302.981196][ T28] audit: type=1400 audit(1757564003.789:1592): avc: denied { open } for pid=1077 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.070525][ T28] audit: type=1400 audit(1757564003.799:1593): avc: denied { ioctl } for pid=1077 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.121973][ T28] audit: type=1400 audit(1757564003.699:1590): avc: denied { bpf } for pid=3560 comm="syz.0.838" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.152311][ T3566] device syzkaller0 entered promiscuous mode [ 303.173394][ T3566] ipt_REJECT: TCP_RESET invalid for non-tcp [ 303.219938][ T28] audit: type=1400 audit(1757564003.859:1594): avc: denied { prog_load } for pid=3560 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 303.282506][ T28] audit: type=1400 audit(1757564003.889:1595): avc: denied { perfmon } for pid=3560 comm="syz.0.838" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 194) [ 303.380995][ T28] audit: type=1400 audit(1757564004.249:1596): avc: denied { mounton } for pid=3560 comm="syz.0.838" path="/168/file0" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 303.403850][ T28] audit: type=1400 audit(1757564004.299:1597): avc: denied { read write } for pid=3563 comm="syz.7.839" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 OK [ 303.432076][ T28] audit: type=1400 audit(1757564004.299:1598): avc: denied { open } for pid=3563 comm="syz.7.839" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping crond: [ 303.493854][ T28] audit: type=1400 audit(1757564004.309:1599): avc: denied { ioctl } for pid=3563 comm="syz.7.839" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.540856][ T3580] syz.5.841[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.542381][ T3580] syz.5.841[3580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.774527][ T3582] loop5: detected capacity change from 0 to 128 stopped /usr/sbin/crond (pid 187) OK [ 305.539904][ T24] usb 7-1: USB disconnect, device number 19 [ 305.555114][ T3582] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 305.565032][ T3582] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.689600][ T3594] device syzkaller0 entered promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 306.108980][ T2815] udevd[2815]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.230703][ T1067] EXT4-fs (loop5): unmounting filesystem. [ 306.287813][ T3608] incfs: Backing dir is not set, filesystem can't be mounted. [ 306.295403][ T3608] incfs: mount failed -2 Stopping network: [ 307.616864][ T342] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 307.858341][ T342] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.952594][ T342] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.110737][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 308.110753][ T28] audit: type=1400 audit(1757564009.589:1626): avc: denied { read write } for pid=3625 comm="ip" path="/dev/console" dev="rootfs" ino=6602 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 308.150297][ T342] usb 6-1: config 0 interface 0 has no altsetting 0 [ 308.196687][ T342] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 308.247340][ T342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.276746][ T28] audit: type=1400 audit(1757564009.749:1627): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.280281][ T342] usb 6-1: config 0 descriptor?? [ 308.401209][ T3636] random: crng reseeded on system resumption [ 308.411872][ T28] audit: type=1400 audit(1757564009.749:1628): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK Stopping iptables: [ 308.513443][ T28] audit: type=1400 audit(1757564009.749:1629): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK [ 308.626397][ T28] audit: type=1400 audit(1757564009.789:1630): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Stopping system message bus: [ 308.686681][ T28] audit: type=1400 audit(1757564009.879:1631): avc: denied { append } for pid=3612 comm="syz.7.849" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 308.750375][ T28] audit: type=1400 audit(1757564009.879:1632): avc: denied { open } for pid=3612 comm="syz.7.849" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 308.797241][ T28] audit: type=1400 audit(1757564009.989:1633): avc: denied { read write } for pid=3638 comm="iptables" path="/dev/console" dev="rootfs" ino=6602 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 308.846738][ T28] audit: type=1400 audit(1757564010.019:1634): avc: denied { search } for pid=3638 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.896684][ T28] audit: type=1400 audit(1757564010.029:1635): avc: denied { write } for pid=3638 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.896726][ T346] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 308.949355][ T342] usb 6-1: string descriptor 0 read error: -71 [ 308.967009][ T342] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 done [ 308.996758][ T342] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 309.015010][ T342] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 309.040837][ T342] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 309.056800][ T342] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 309.102013][ T342] usb 6-1: USB disconnect, device number 29 [ 309.167955][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 309.187396][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 309.199679][ T283] EXT4-fs (loop1): unmounting filesystem. [ 309.208216][ T346] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 309.226647][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.244826][ T346] usb 1-1: Product: syz [ 309.254900][ T346] usb 1-1: Manufacturer: syz [ 309.259786][ T346] usb 1-1: SerialNumber: syz [ 309.265377][ T346] usb 1-1: config 0 descriptor?? killall: can't kill pid 2698: No such process killall: can't kill pid 2699: No such process killall: can't kill pid 2700: No such process killall: can't kill pid 2815: No such process killall: can't kill pid 2960: No such process killall: can't kill pid 3002: No such process killall: can't kill pid 3194: No such process killall: can't kill pid 3197: No such process Stopping klogd: OK Stopping acpid: [ 309.568946][ T3663] device syzkaller0 entered promiscuous mode [ 309.587192][ T3663] ipt_REJECT: TCP_RESET invalid for non-tcp [ 309.662344][ T3665] syz.0.853[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.662797][ T3665] syz.0.853[3665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.690306][ T3665] loop0: detected capacity change from 0 to 128 [ 309.869052][ T3666] loop1: detected capacity change from 0 to 512 [ 309.938390][ T3666] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 310.131452][ T3666] EXT4-fs (loop1): 1 orphan inode deleted [ 310.152523][ T3666] EXT4-fs (loop1): 1 truncate cleaned up [ 310.270830][ T3666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 310.572376][ T283] EXT4-fs (loop1): unmounting filesystem. OK Stopping syslogd: stopped /sbin/syslogd (pid 85) OK umount: can't remount debugfs read-only [ 311.797120][ T346] usb 1-1: USB disconnect, device number 21 Connection to 10.128.0.114 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 312.897292][ T721] device bridge_slave_1 left promiscuous mode [ 312.903397][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.910917][ T721] device bridge_slave_0 left promiscuous mode [ 312.917111][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.924953][ T721] device veth1_macvtap left promiscuous mode [ 312.930989][ T721] device veth0_vlan left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 313.897914][ T721] device bridge_slave_1 left promiscuous mode [ 313.904049][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.911566][ T721] device bridge_slave_0 left promiscuous mode [ 313.917763][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.925284][ T721] device veth3 left promiscuous mode [ 313.930658][ T721] bridge1: port 1(veth3) entered disabled state [ 313.937607][ T721] device bridge_slave_1 left promiscuous mode [ 313.943774][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.951148][ T721] device bridge_slave_0 left promiscuous mode [ 313.958746][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.968138][ T721] device bridge_slave_1 left promiscuous mode [ 313.974274][ T721] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.982002][ T721] device bridge_slave_0 left promiscuous mode [ 313.988178][ T721] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.996969][ T721] device veth1_macvtap left promiscuous mode [ 314.003160][ T721] device veth0_vlan left promiscuous mode [ 314.009731][ T721] device veth1_macvtap left promiscuous mode [ 314.015737][ T721] device veth0_vlan left promiscuous mode [ 314.021756][ T721] device veth1_macvtap left promiscuous mode [ 314.027824][ T721] device veth0_vlan left promiscuous mode [ 314.033717][ T721] device veth1_macvtap left promiscuous mode [ 314.039922][ T721] device veth0_vlan left promiscuous mode [ 314.507181][ T3701] kvm: exiting hardware virtualization [ 314.513426][ T3701] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 314.520738][ T3701] ACPI: PM: Preparing to enter system sleep state S5 [ 314.527715][ T3701] reboot: Power down serialport: VM disconnected.