last executing test programs: 2m39.401505623s ago: executing program 32 (id=191): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000100), 0x0) 2m38.128312116s ago: executing program 33 (id=225): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2020044, 0x0, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) 2m28.524051241s ago: executing program 34 (id=355): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 2m25.261402205s ago: executing program 35 (id=397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) write$tcp_congestion(r1, &(0x7f0000000600)='reno\x00', 0x5) 1m23.487412865s ago: executing program 36 (id=1084): syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x1) 1m14.961244254s ago: executing program 2 (id=1321): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0x17, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 1m14.937659986s ago: executing program 2 (id=1322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) open(&(0x7f0000000000)='.\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m14.634674811s ago: executing program 2 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 1m13.917589948s ago: executing program 2 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x212d099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m13.850632134s ago: executing program 2 (id=1340): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x30, r0, 0x1, 0x0, 0x3, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 1m13.843316275s ago: executing program 2 (id=1341): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) write$ppp(r1, &(0x7f00000000c0)="8fe6f8afb38f5a03601b08857e994a404ad388d5ad8ddb943f96427dcd3f343abe4da5d969ecd29fbd87f7fbe34f18718552a1adfc66f2b94fdfc81627d8dc4f1f1d959d28581963f91697e2def03733b64ceeb769ef265f74d3359e80694cc4f3245fac5d86e624a4c6ea0706d9bbb8df7cc26ee65e8d8cf811ebf1bdb44d4318f9fab0ec6917fec9dc1a43396c29333b9d31b72e627bfb07f4ff6f9018c39c1d69884f8765c71ed1c26354c20944787a95f122c15aa2330d06f7dba87add4c7b82cd83e44e761c2b85373298ce8e", 0xcf) r2 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x7fffffff, 0x0, 0x4) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) close(r5) r7 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, 0x0, 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) close(0x3) 1m13.742844772s ago: executing program 37 (id=1341): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) write$ppp(r1, &(0x7f00000000c0)="8fe6f8afb38f5a03601b08857e994a404ad388d5ad8ddb943f96427dcd3f343abe4da5d969ecd29fbd87f7fbe34f18718552a1adfc66f2b94fdfc81627d8dc4f1f1d959d28581963f91697e2def03733b64ceeb769ef265f74d3359e80694cc4f3245fac5d86e624a4c6ea0706d9bbb8df7cc26ee65e8d8cf811ebf1bdb44d4318f9fab0ec6917fec9dc1a43396c29333b9d31b72e627bfb07f4ff6f9018c39c1d69884f8765c71ed1c26354c20944787a95f122c15aa2330d06f7dba87add4c7b82cd83e44e761c2b85373298ce8e", 0xcf) r2 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x7fffffff, 0x0, 0x4) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) close(r5) r7 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, 0x0, 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) close(0x3) 1m0.089458866s ago: executing program 8 (id=1439): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0xba5d, 0xa401) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) chown(0x0, 0x0, 0xee01) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2f7e, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 59.064763698s ago: executing program 8 (id=1448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 59.050472989s ago: executing program 8 (id=1449): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) dup2(r1, r3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x54}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 58.944881378s ago: executing program 8 (id=1451): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) 58.041838331s ago: executing program 8 (id=1466): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xa, &(0x7f0000000280)=@string={0xa, 0x3, "9dd354d4321fb826"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 57.497198885s ago: executing program 8 (id=1476): openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x1) 42.490102907s ago: executing program 38 (id=1476): openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x1) 37.865849391s ago: executing program 9 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337662d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6be2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e23343218c8fa2630c77c3877e19db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b282f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000041dcc4cabfc4a21604f0b80da4ec550000000000006c7d6db3a65f4de1e96142bf00000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae6e5c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a010467521dc728eac7d80a5656ac2cbde2023ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace201020875c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2f95b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f65918192fb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435477faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b8085b0de08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979c56479e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e07f9581b40470a7c2fa89cc3ef72a19760b89ded2e546f4966b51c2985101f2248f60ad8119e4db4ade09ebd230db750ffccba20bc0e0f52c3316767bb9f67f7e714df5e462bcfc35f3a79147f62f9227441cb3ffb35f4e4c69b04b1399efbeb4b682d6facea9fe1c456a1fb9173833107a38991abac8b0e616f11a2c3e265c484fbc6522e9894dc3b5989b7d585c56778c77c6595b7482dfa90bb818ebd3b0b352d3f48ab947a1240842d592fd9c2f13df205e8974919162421548357a8823bd322e6562fa3e7fb7c56ee00e246a98710b9a710103b3df69655b38dcc196156a16fcc14d8ddb4acf3506adc95c742919b83fd57c8b52956e93104cdcd1226ca85a29542b9ea606c72d5359a7d30f23ffcd665b85e4c90d526b33ed854543c2a1d189cd6f319644146c5fe91639d50f2083d46fd82e41bc7d528f18be618904d683726e3eee93388cc78d0df624361bb80afc96b823971fcbbb859d4c2de31f03f884ea774e4abe011389557b2429c85cf795e0a82c94ffc11616d7c8b6939eed3f0e8df5dcc75984430b2a497d78824e539e8f7944b459ae45e7ce803495686984aa91745b8cfb1f80c07c194c4a4327e02cea8ad7f5b5304ae442"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff59}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) close(0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000380)="b9ff03316844088cb89e14f008000dd0", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.819455395s ago: executing program 9 (id=1648): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x1600efd26, 0x0) 37.582050954s ago: executing program 9 (id=1651): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xba}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 37.423683167s ago: executing program 9 (id=1656): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xbe6}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x56c, &(0x7f0000000fc0)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000bc0)={[{@grpid}, {@bsdgroups}, {@dax_inode}, {@max_batch_time={'max_batch_time', 0x3d, 0x101}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x31, 0x6c, 0x32, 0x39, 0x32, 0x0, 0x34], 0x2d, [0x65, 0x64, 0x64, 0x66], 0x2d, [0x64, 0x33, 0x62, 0x35], 0x2d, [0x36, 0x33, 0x0, 0x35], 0x2d, [0x65, 0x37, 0x32, 0x39, 0x37, 0x38, 0x36, 0x37]}}}, {@fsmagic={'fsmagic', 0x3d, 0x3d}}, {@obj_type}, {@permit_directio}, {@euid_eq}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0x7) 37.01267023s ago: executing program 9 (id=1657): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB="01000000000000000000010000001400020077673100000000000000", @ANYRES16], 0x21c}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r5, 0x6, 0x0) io_submit(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 36.856922252s ago: executing program 9 (id=1658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 36.791466088s ago: executing program 39 (id=1658): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 27.97396943s ago: executing program 7 (id=1746): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240000000"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect$uac1(0x4, 0xa5, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x7, 0x40, 0x18, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x35, 0xcd}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x3, 0x2}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0xe, 0x35, "467faf592977"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0x9, 0x23}, @as_header={0x7, 0x24, 0x1, 0x8, 0x16, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfc, 0x4, 0x8e, {0x7, 0x25, 0x1, 0x80, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x10, 0x7, 0x8, "d90c5eec95d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0x1, 0x5, {0x7, 0x25, 0x1, 0x103, 0x7, 0x4}}}}}}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x30, 0x6, 0x20, 0x5}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0xd5, &(0x7f0000001f40)=ANY=[@ANYBLOB="d5034527ead7ec60742f63cd6332d8c8aa5727efbb8f1d64c8cb7fb818d04bd41ddb9f4a6d10acdf2b33e639bca11b3e1186d681039dc13e8b13009e7a903a22b5e29951881c89c6b0323e49282ac74138f1f1443ac22f3a6e3027ffe342d0a0ce17fdecf801c903a06b43e227cb636b247f90987160c88076f0d05099263a86f37d369fa2b070bbe009608ba8942c03036b8d1971a30db615bc9f0ee2d5996b592a4dab76d56af6ff0f00000000000044cde791a26cffb882792e7cd50d707cdec7e830d00e3a7291219247eafb2a1772d93d325d4cdbcbf8697f917364b7"]}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x816}}, {0x74, &(0x7f0000001e00)=@string={0x74, 0x3, "fe6c7ef54c6b6a5be4d72723b396a1f1e3b0522eae16239d720464392c338737a7804f88716fe7e834d1cb01831656ddb9e8e1019de3cc33915d1d3481b90868a0d6fb87a4e8f4fe0544290103bfa133aed1de751885bf2f892dc6247887de5226fe979685995c6218876289f6e701a482cb"}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x1acc02, 0x148, 0x328, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {}, {}, 0x1}, 0x40000, 0x98, 0xf8, 0x0, {0x0, 0x5803}, [@common=@icmp={{0x28}, {0xd, "dd1c"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x2, 0x4, 0x0, 0x7], 0x11, 0x2}, {0x1, [0x3, 0xb, 0x2, 0x7, 0x3, 0x4], 0x2, 0x4}}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) creat(&(0x7f0000000280)='./file2\x00', 0xecf86c37d53049c4) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x13, 0xfe9e, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.768969247s ago: executing program 7 (id=1757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x5, 0x1) 26.223610821s ago: executing program 1 (id=1760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={[0x1]}, 0x8) 26.183657505s ago: executing program 1 (id=1761): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069103a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 25.969278802s ago: executing program 7 (id=1762): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000680)=0x0) r4 = socket$inet6(0xa, 0x803, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) read$FUSE(r2, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000001c0)={0x5e}, 0x8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0}) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x3, r0, 0x0, 0x52, 0xdea}]) 25.820316594s ago: executing program 7 (id=1763): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 25.758631069s ago: executing program 7 (id=1766): close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000100)=""/26, &(0x7f0000000140)=0x1a) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 25.24702173s ago: executing program 1 (id=1769): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d80000001b000100", @ANYRESHEX], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) 24.62774604s ago: executing program 7 (id=1771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23.742728002s ago: executing program 40 (id=1771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23.721227194s ago: executing program 1 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0xdc}}, 0x0) 23.660746979s ago: executing program 1 (id=1776): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 23.535808359s ago: executing program 1 (id=1780): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={'veth1_to_hsr\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}) sendmmsg(r5, 0x0, 0x0, 0xc040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0xc094) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 7.957150928s ago: executing program 41 (id=1780): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8002, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={'veth1_to_hsr\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}) sendmmsg(r5, 0x0, 0x0, 0xc040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0xc094) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.279065894s ago: executing program 5 (id=1888): r0 = syz_usb_connect$hid(0x0, 0x5d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x0, 0x7c}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x40, 0x6, 0x5, {0x5, 0x11, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.067865212s ago: executing program 0 (id=1914): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x3) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) 2.549475864s ago: executing program 0 (id=1913): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000540)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x191000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xb, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) getdents(r0, 0x0, 0x54) 2.47688926s ago: executing program 3 (id=1915): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x0, r2}) 2.436593144s ago: executing program 6 (id=1917): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {@user_xattr}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@jqfmt_vfsold}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x189140, 0x110) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000000200)=')\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x50) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) 2.170426755s ago: executing program 5 (id=1920): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) read(r0, &(0x7f0000000400)=""/4096, 0x1000) 2.065347513s ago: executing program 5 (id=1923): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9}}, 0x18}}, 0x0) 2.014545077s ago: executing program 4 (id=1924): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0xba5d, 0xa401) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mkdir(0x0, 0x0) chown(0x0, 0x0, 0xee01) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2f7e, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.944847583s ago: executing program 5 (id=1925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x40000024}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20002005}) r6 = socket$inet(0x2, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0x8) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX]) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000000)=0x40) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, 0x0, &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.654870997s ago: executing program 0 (id=1926): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2000000, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x3f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@grpjquota}, {@noblock_validity}, {@nouid32}, {@jqfmt_vfsv0}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}, {@data_err_abort}, {@grpid}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x16e1167d}}]}, 0x0, 0x4f1, &(0x7f0000000640)="$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") 1.637817168s ago: executing program 3 (id=1927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.536153727s ago: executing program 3 (id=1928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0xb6, 0x80, 0x20, 0xbda, 0x818c, 0x7e60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x0, 0x8, 0x2}}]}}]}}, 0x0) 1.37285947s ago: executing program 6 (id=1929): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)="1604", 0x2) 1.358985401s ago: executing program 0 (id=1930): openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.294339686s ago: executing program 6 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x803, 0x0) ftruncate(r0, 0x7) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 1.204925313s ago: executing program 6 (id=1932): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x48810) 1.175597295s ago: executing program 6 (id=1933): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x24d, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x4a5001, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.175482645s ago: executing program 4 (id=1934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xb, 0x1}, 0x0) 1.140929009s ago: executing program 0 (id=1935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r1 = socket(0x1, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r1}, 0x20) 895.181228ms ago: executing program 4 (id=1936): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 894.962648ms ago: executing program 0 (id=1937): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x0, r2}) 894.786618ms ago: executing program 4 (id=1938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 891.566049ms ago: executing program 5 (id=1939): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000400)=0x400000bce) ioprio_get$pid(0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b100)=""/102384, 0x18ff0) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 880.12474ms ago: executing program 3 (id=1940): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 861.587621ms ago: executing program 4 (id=1941): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2000000, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x3f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@grpjquota}, {@noblock_validity}, {@nouid32}, {@jqfmt_vfsv0}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}, {@data_err_abort}, {@grpid}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x16e1167d}}]}, 0x0, 0x4f1, &(0x7f0000000640)="$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") 812.950335ms ago: executing program 3 (id=1942): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x3) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) 512.072419ms ago: executing program 5 (id=1943): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0xba5d, 0xa401) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mkdir(0x0, 0x0) chown(0x0, 0x0, 0xee01) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2f7e, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) syz_usb_control_io$uac1(r0, 0x0, 0x0) 97.987873ms ago: executing program 6 (id=1944): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000440)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x48810) 37.203207ms ago: executing program 3 (id=1945): openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1946): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a11b864ed6dc7dc6c4d39215238c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52506f183d6ef7d15e6852b88300b766ab705358375209bbe7e3756ba577d82e21dca4343146d99cb3e", 0x71}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5780e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f00000008c0)="7066dc66cff6f1d248399b17b5", 0xd}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b9963fb5d76c53baf500904106dbeebb395f0c6912db21635ae1bc6d062", 0x39}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28", 0x62}, {&(0x7f00000009c0)="9190e42e123ee37d19f2a627aec0b3d42e14db4a0954e630a80066086fc2c4f7a3e33e42e0a6d83e3dc38c5edc7741f5e557c64ede71fdf7b721aafa99a009a769092cbb0dd4345178f3b155f1f53d9085595471faa592bbdc3e3f28de545362d4cadcd1b86d3f8c9b8b0bd14e802453e93f", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="b37e8d8e2701c513ff18766901d2a16406cbd2bf7405b3b3e3ea25b31806f699", 0x20}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f23552dbee5fdb5ce9f9ef0f34941be1b8d0cad6145b9ebb1bfe1e01a3694356a88dd4", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f0000000fc0)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b54e4a92348e3be2108ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534f", 0x46}, {&(0x7f0000001040)="0e85119382927d42bd8eccb5fc985cf2a0f62d61bc81a58e9c88", 0x1a}, {&(0x7f0000001080)="67ffd3610b524767a7760698340e3546bbd84f76794d0394f85a10164293e7e68b30c5ef4ea96e73a9b880d18090c35924611b1284407f1c553ca7207b5ffade1338b85187bc064978a5d9050eedee5f1f08aedb633f387e86545ac22e10716c2e27cbdc301117", 0x67}], 0x4}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="d3e7b4373ba9678b1eccb6697fa110ff29ffcc3ab370d555ea939ec5119563a01696675f867ade147f4009f1921311fd3576492ba947e1d2f9816805492ada848f0f96e70f325d913bde1fbb90049ff27b6e713a2d02a213025de8e06e76a041842cafd04327914a5f788adf419bbaf76c176e3486e526b6c524d8ae7974437268032ac2cc6bff94b8dd11b78ef4b0c31e90eaf8374e8af01d71f015c0705458c3c17cc29d8f7c0a71490a10ba5c41c1e2755095a643012eb6a4fe2bae130a", 0xbf}], 0x1}}], 0x6, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) kernel console output (not intermixed with test programs): .623452][ T291] usb 6-1: config 0 has no interface number 0 [ 37.630515][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.714592][ T291] usb 6-1: config 0 interface 170 has no altsetting 0 [ 37.757793][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.779811][ T291] usb 6-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 37.792481][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.801622][ T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.815112][ T933] device veth0_vlan entered promiscuous mode [ 37.822192][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.831314][ T291] usb 6-1: config 0 descriptor?? [ 37.836942][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.846550][ T291] usb 6-1: bad CDC descriptors [ 37.852695][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.861376][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.894073][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.908225][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.923721][ T933] device veth1_macvtap entered promiscuous mode [ 37.950542][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.961708][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.981896][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.003124][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.021823][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.055514][ T291] usb 6-1: USB disconnect, device number 2 [ 38.186350][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 38.186366][ T28] audit: type=1400 audit(1754538868.756:234): avc: denied { write } for pid=1024 comm="syz.4.267" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.232475][ T28] audit: type=1400 audit(1754538868.786:235): avc: denied { name_bind } for pid=1024 comm="syz.4.267" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 38.285109][ T28] audit: type=1400 audit(1754538868.786:236): avc: denied { node_bind } for pid=1024 comm="syz.4.267" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.419952][ T28] audit: type=1400 audit(1754538868.986:237): avc: denied { ioctl } for pid=1034 comm="syz.3.272" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18072 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.596804][ T344] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 38.635470][ T1046] loop5: detected capacity change from 0 to 128 [ 38.645842][ T28] audit: type=1400 audit(1754538869.216:238): avc: denied { ioctl } for pid=1041 comm="syz.2.274" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.796708][ T344] usb 7-1: Using ep0 maxpacket: 8 [ 38.803992][ T344] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 38.815362][ T344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.831598][ T344] usb 7-1: config 0 descriptor?? [ 39.227216][ T1051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 39.235069][ T28] audit: type=1400 audit(1754538869.796:239): avc: denied { name_bind } for pid=1064 comm="syz.2.283" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.257137][ T344] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 39.274449][ T1067] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3724807606 (476775373568 ns) > initial count (185430966784 ns). Using initial count to start timer. [ 39.461346][ T28] audit: type=1400 audit(1754538870.026:240): avc: denied { mount } for pid=1069 comm="syz.5.285" name="/" dev="ramfs" ino=18777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.722587][ T28] audit: type=1400 audit(1754538870.286:241): avc: denied { name_bind } for pid=1087 comm="syz.3.291" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.999641][ T28] audit: type=1400 audit(1754538870.536:242): avc: denied { mount } for pid=1092 comm="syz.3.293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.822800][ T28] audit: type=1400 audit(1754538871.386:243): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.986672][ T335] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 41.177862][ T335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.188064][ T335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.197940][ T335] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.207038][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.215092][ T335] usb 6-1: SerialNumber: syz [ 41.427485][ T335] usb 6-1: 0:2 : does not exist [ 41.434935][ T335] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 41.446923][ T335] usb 6-1: 5:0: failed to get current value for ch 14 (-22) [ 41.459283][ T335] usb 6-1: USB disconnect, device number 3 [ 41.618944][ T344] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 41.676771][ T344] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 41.693468][ T344] asix: probe of 7-1:0.0 failed with error -71 [ 41.703239][ T344] usb 7-1: USB disconnect, device number 2 [ 42.336946][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.490591][ T1160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 42.802644][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.804031][ T1160] syz.2.316 (1160) used greatest stack depth: 19968 bytes left [ 42.811294][ T1171] device bridge_slave_0 left promiscuous mode [ 42.823583][ T1172] loop3: detected capacity change from 0 to 1024 [ 42.824240][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.840007][ T1171] device bridge_slave_1 left promiscuous mode [ 42.846267][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.885769][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 43.885788][ T28] audit: type=1400 audit(1754538874.446:248): avc: denied { mount } for pid=1179 comm="syz.2.325" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.915815][ T28] audit: type=1326 audit(1754538874.446:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.2.325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7278ebe9 code=0x0 [ 43.915947][ T1171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 43.953313][ T1172] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 43.979447][ T1172] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 43.989431][ T1172] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.319: Failed to acquire dquot type 0 [ 44.007494][ T1172] EXT4-fs (loop3): 1 truncate cleaned up [ 44.030601][ T1172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.232003][ T28] audit: type=1400 audit(1754538874.796:250): avc: denied { ioctl } for pid=1206 comm="syz.4.336" path="socket:[18305]" dev="sockfs" ino=18305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.724814][ T28] audit: type=1400 audit(1754538875.286:251): avc: denied { create } for pid=1216 comm="syz.5.339" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.759690][ T28] audit: type=1400 audit(1754538875.316:252): avc: denied { write } for pid=1216 comm="syz.5.339" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.795629][ T28] audit: type=1400 audit(1754538875.316:253): avc: denied { open } for pid=1216 comm="syz.5.339" path="/17/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.822515][ T28] audit: type=1400 audit(1754538875.316:254): avc: denied { ioctl } for pid=1216 comm="syz.5.339" path="/17/file0" dev="tmpfs" ino=110 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.853493][ T28] audit: type=1400 audit(1754538875.326:255): avc: denied { unlink } for pid=840 comm="syz-executor" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.907299][ T1229] loop5: detected capacity change from 0 to 512 [ 44.920928][ T1229] EXT4-fs: Invalid want_extra_isize 567432314 [ 45.140772][ T1233] capability: warning: `syz.4.344' uses deprecated v2 capabilities in a way that may be insecure [ 45.171029][ T1235] loop5: detected capacity change from 0 to 1024 [ 45.209884][ T1235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 45.298380][ T840] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz-executor: inode #16: comm syz-executor: iget: illegal inode # [ 45.322748][ T840] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz-executor: inode #16: comm syz-executor: iget: illegal inode # [ 45.335415][ T1247] device syzkaller0 entered promiscuous mode [ 45.419010][ T840] EXT4-fs (loop5): unmounting filesystem. [ 45.466874][ T335] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.486387][ T335] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.664373][ T1263] loop2: detected capacity change from 0 to 1024 [ 45.673824][ T1263] EXT4-fs: Ignoring removed orlov option [ 45.701972][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.709379][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.717385][ T1263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.717457][ T1259] device bridge_slave_0 entered promiscuous mode [ 45.748006][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.757017][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.761671][ T285] EXT4-fs (loop2): unmounting filesystem. [ 45.764748][ T1259] device bridge_slave_1 entered promiscuous mode [ 45.781441][ T1272] loop6: detected capacity change from 0 to 512 [ 45.782764][ T287] EXT4-fs (loop3): unmounting filesystem. [ 46.498768][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 46.511634][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 46.556273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 46.572875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.606081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 46.632074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.640476][ T1302] loop3: detected capacity change from 0 to 512 [ 46.650793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.659201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.667805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.676517][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.685740][ T1302] EXT4-fs: Invalid want_extra_isize 567432314 [ 46.711234][ T904] device bridge_slave_1 left promiscuous mode [ 46.717483][ T335] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 46.724284][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.743086][ T904] device bridge_slave_0 left promiscuous mode [ 46.757999][ T291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.760735][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.773047][ T291] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.783876][ T904] device veth1_macvtap left promiscuous mode [ 46.795614][ T904] device veth0_vlan left promiscuous mode [ 46.926628][ T335] usb 7-1: Using ep0 maxpacket: 16 [ 46.932926][ T335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.945386][ T335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.955597][ T335] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.969264][ T335] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.986529][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.994034][ T335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.994646][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.010713][ T335] usb 7-1: config 0 descriptor?? [ 47.017462][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.026009][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.036512][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.043616][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.051193][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.061592][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.070141][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.078561][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.085667][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.102045][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.112201][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.122826][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.131231][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.137905][ T1322] loop2: detected capacity change from 0 to 256 [ 47.153215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.171920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.184450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.192650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.202816][ T1259] device veth0_vlan entered promiscuous mode [ 47.211795][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.219581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.234399][ T1259] device veth1_macvtap entered promiscuous mode [ 47.241303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.249758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.259155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.270998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.279479][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.298162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.306805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.437575][ T335] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 47.457974][ T335] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 47.497344][ T335] microsoft 0003:045E:07DA.0003: parse failed [ 47.503498][ T335] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 47.640133][ T335] usb 7-1: USB disconnect, device number 3 [ 47.702346][ T1344] loop7: detected capacity change from 0 to 256 [ 47.720427][ T1344] loop7: detected capacity change from 0 to 512 [ 47.727244][ T1344] ext2: Unknown parameter 'smackfsroot' [ 47.856749][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 48.117710][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 48.127806][ T39] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 48.140522][ T39] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 48.187686][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.195943][ T39] usb 3-1: Product: syz [ 48.200215][ T39] usb 3-1: Manufacturer: syz [ 48.204837][ T39] usb 3-1: SerialNumber: syz [ 48.210339][ T39] usb 3-1: config 0 descriptor?? [ 48.215637][ T1337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.224097][ T1337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.283517][ T1360] loop6: detected capacity change from 0 to 512 [ 48.311542][ T1360] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 48.331198][ T1360] EXT4-fs (loop6): 1 truncate cleaned up [ 48.337444][ T1360] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 48.364348][ T933] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 48.408826][ T933] EXT4-fs (loop6): Remounting filesystem read-only [ 48.417010][ T933] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 48.434207][ T1337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.439592][ T933] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 48.448841][ T1337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.455913][ T933] EXT4-fs (loop6): Remounting filesystem read-only [ 48.469968][ T933] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 48.487479][ T933] EXT4-fs (loop6): Remounting filesystem read-only [ 48.494139][ T933] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #2: comm syz-executor: mark_inode_dirty error [ 48.506565][ T933] EXT4-fs (loop6): Remounting filesystem read-only [ 48.523549][ T43] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm kworker/u4:2: Invalid inode table block 5 in block_group 0 [ 48.537895][ T1371] loop3: detected capacity change from 0 to 256 [ 48.544034][ T43] EXT4-fs (loop6): Remounting filesystem read-only [ 48.560376][ T1371] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 48.583935][ T43] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm kworker/u4:2: Invalid inode table block 5 in block_group 0 [ 48.604374][ T1371] exFAT-fs (loop3): hint_cluster is invalid (17) [ 48.611297][ T43] EXT4-fs (loop6): Remounting filesystem read-only [ 48.622703][ T933] EXT4-fs (loop6): unmounting filesystem. [ 48.636429][ T1371] exFAT-fs (loop3): error, broken FAT chain. [ 48.643396][ T1371] exFAT-fs (loop3): Filesystem has been set read-only [ 48.655359][ T1371] exFAT-fs (loop3): error, failed to bmap (inode : ffff8881330a4910 iblock : 8, err : -5) [ 48.728507][ T1376] 9pnet_fd: Insufficient options for proto=fd [ 48.898317][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 48.898335][ T28] audit: type=1400 audit(1754538879.466:272): avc: denied { nlmsg_read } for pid=1380 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.926245][ T39] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 48.936119][ T1386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.402'. [ 48.956375][ T1387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.965364][ T1387] device bridge_slave_0 left promiscuous mode [ 48.971901][ T1387] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.980747][ T1387] device bridge_slave_1 left promiscuous mode [ 48.987363][ T1387] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.004347][ T1390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.403'. [ 49.023796][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.030927][ T1384] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.038585][ T1384] device bridge_slave_0 entered promiscuous mode [ 49.047129][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.054214][ T1384] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.061786][ T1384] device bridge_slave_1 entered promiscuous mode [ 49.125217][ T39] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 49.136155][ T39] usb 3-1: USB disconnect, device number 2 [ 49.156445][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.163572][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.170927][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.177994][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.205104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.218941][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.223517][ T28] audit: type=1400 audit(1754538879.786:273): avc: denied { unmount } for pid=1259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.247451][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.271247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.282034][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.289159][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.297409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.305985][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.306231][ T28] audit: type=1400 audit(1754538879.866:274): avc: denied { create } for pid=1405 comm="syz.7.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.313111][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.341323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.341700][ T28] audit: type=1400 audit(1754538879.916:275): avc: denied { read } for pid=1405 comm="syz.7.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.362211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.385078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.400583][ T1384] device veth0_vlan entered promiscuous mode [ 49.408027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.417342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.425097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.435302][ T10] device bridge_slave_1 left promiscuous mode [ 49.441784][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.449911][ T10] device bridge_slave_0 left promiscuous mode [ 49.456120][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.465585][ T10] device veth1_macvtap left promiscuous mode [ 49.471751][ T10] device veth0_vlan left promiscuous mode [ 49.586324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.594914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.605820][ T1384] device veth1_macvtap entered promiscuous mode [ 49.623225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.631105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.639523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.661015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.664842][ T28] audit: type=1400 audit(1754538880.226:276): avc: denied { create } for pid=1408 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.669709][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.711460][ T1411] loop8: detected capacity change from 0 to 256 [ 49.723781][ T1411] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.730895][ T28] audit: type=1400 audit(1754538880.296:277): avc: denied { block_suspend } for pid=1412 comm="syz.2.409" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.735511][ T1411] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 49.768029][ T1411] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 49.813544][ T28] audit: type=1400 audit(1754538880.376:278): avc: denied { watch watch_reads } for pid=1410 comm="syz.8.399" path="/0/file0/file2" dev="loop8" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.838667][ T28] audit: type=1400 audit(1754538880.376:279): avc: denied { execute } for pid=1410 comm="syz.8.399" name="file1" dev="loop8" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.863097][ T28] audit: type=1400 audit(1754538880.376:280): avc: denied { execute_no_trans } for pid=1410 comm="syz.8.399" path="/0/file0/file1" dev="loop8" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.943264][ T1422] loop8: detected capacity change from 0 to 256 [ 49.952905][ T1422] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 49.977216][ T1422] exFAT-fs (loop8): hint_cluster is invalid (17) [ 49.991045][ T1422] exFAT-fs (loop8): error, broken FAT chain. [ 49.998702][ T1422] exFAT-fs (loop8): Filesystem has been set read-only [ 50.005633][ T1422] exFAT-fs (loop8): error, failed to bmap (inode : ffff8881330e25f0 iblock : 8, err : -5) [ 50.054959][ T28] audit: type=1400 audit(1754538880.616:281): avc: denied { ioctl } for pid=1423 comm="syz.8.414" path="socket:[20721]" dev="sockfs" ino=20721 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.345565][ T1431] netlink: 224 bytes leftover after parsing attributes in process `syz.7.418'. [ 50.360629][ T1431] loop7: detected capacity change from 0 to 256 [ 50.417466][ T405] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.541704][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.896297][ T1495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.442'. [ 52.065394][ T1507] loop2: detected capacity change from 0 to 16 [ 52.478168][ T405] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.864079][ T1528] loop2: detected capacity change from 0 to 128 [ 52.919427][ T1528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.930440][ T1528] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.718836][ T285] EXT4-fs (loop2): unmounting filesystem. [ 53.917840][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 53.917858][ T28] audit: type=1400 audit(1754538884.486:297): avc: denied { setopt } for pid=1545 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.214101][ T28] audit: type=1400 audit(1754538884.776:298): avc: denied { bind } for pid=1558 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.245319][ T28] audit: type=1400 audit(1754538884.806:299): avc: denied { name_bind } for pid=1558 comm="syz.4.466" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 54.286718][ T28] audit: type=1400 audit(1754538884.806:300): avc: denied { node_bind } for pid=1558 comm="syz.4.466" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 54.958237][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 55.120188][ T1595] loop7: detected capacity change from 0 to 16 [ 55.172224][ T1595] erofs: (device loop7): mounted with root inode @ nid 36. [ 55.252654][ T1595] syz.7.479: attempt to access beyond end of device [ 55.252654][ T1595] loop7: rw=0, sector=8, nr_sectors = 16 limit=16 [ 55.386684][ T28] audit: type=1400 audit(1754538885.916:301): avc: denied { setcurrent } for pid=1594 comm="syz.7.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.559297][ T28] audit: type=1400 audit(1754538886.126:302): avc: denied { bind } for pid=1624 comm="syz.7.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.595628][ T28] audit: type=1400 audit(1754538886.156:303): avc: denied { write } for pid=1624 comm="syz.7.495" path="socket:[20074]" dev="sockfs" ino=20074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.736692][ T1584] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 55.939221][ T1584] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 55.952592][ T1584] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.967553][ T1584] usb 9-1: Product: syz [ 55.971855][ T1584] usb 9-1: Manufacturer: syz [ 55.976550][ T1584] usb 9-1: SerialNumber: syz [ 55.982103][ T1584] usb 9-1: config 0 descriptor?? [ 55.996060][ T1584] usb-storage 9-1:0.0: USB Mass Storage device detected [ 56.227776][ T1666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.421750][ T28] audit: type=1400 audit(1754538886.986:304): avc: denied { ioctl } for pid=1688 comm="syz.2.522" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.501987][ T1693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 56.514108][ T1693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 56.514520][ T1584] usb 9-1: USB disconnect, device number 2 [ 56.523173][ T1693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 56.645205][ T1711] loop2: detected capacity change from 0 to 128 [ 57.215820][ T28] audit: type=1326 audit(1754538887.776:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1717 comm="syz.3.536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 57.227017][ T405] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.314100][ T28] audit: type=1400 audit(1754538887.876:306): avc: denied { shutdown } for pid=1727 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.567913][ T1741] loop8: detected capacity change from 0 to 512 [ 57.575735][ T1741] EXT4-fs (loop8): invalid inodes per group: 100663328 [ 57.575735][ T1741] [ 57.617307][ T405] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.584172][ T1779] loop2: detected capacity change from 0 to 128 [ 60.213637][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 60.213655][ T28] audit: type=1326 audit(1754538890.776:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.7.575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa602f8ebe9 code=0x0 [ 61.549005][ T1847] netlink: 'syz.4.585': attribute type 5 has an invalid length. [ 62.008132][ T1881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.042046][ T28] audit: type=1326 audit(1754538892.606:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7ffc0000 [ 62.049888][ T1881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 62.101865][ T28] audit: type=1326 audit(1754538892.646:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f81a698ebe9 code=0x7ffc0000 [ 62.135443][ T28] audit: type=1326 audit(1754538892.646:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1885 comm="syz.3.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7ffc0000 [ 62.378861][ T28] audit: type=1326 audit(1754538892.786:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.2.600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7278ebe9 code=0x0 [ 62.678557][ T1902] netlink: 'syz.8.603': attribute type 5 has an invalid length. [ 63.362901][ T28] audit: type=1400 audit(1754538893.926:316): avc: denied { sqpoll } for pid=1906 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.511480][ T28] audit: type=1400 audit(1754538894.076:317): avc: denied { load_policy } for pid=1918 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.535871][ T1921] SELinux: failed to load policy [ 64.228435][ T28] audit: type=1326 audit(1754538894.776:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1940 comm="syz.3.622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 64.544811][ T1970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.578004][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 64.839031][ T1977] netlink: 'syz.7.625': attribute type 5 has an invalid length. [ 66.228184][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.253607][ T2003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 66.565685][ T2029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.580287][ T2029] device bridge_slave_0 left promiscuous mode [ 66.586493][ T2029] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.595589][ T2029] device bridge_slave_1 left promiscuous mode [ 66.601994][ T2029] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.691660][ T2029] netlink: 8 bytes leftover after parsing attributes in process `syz.8.658'. [ 67.908411][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.976438][ T2068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.672'. [ 68.067228][ T2085] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 68.091804][ T28] audit: type=1400 audit(1754538898.656:319): avc: denied { write } for pid=2089 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.121029][ T28] audit: type=1400 audit(1754538899.676:320): avc: denied { map } for pid=2097 comm="syz.4.685" path="socket:[22700]" dev="sockfs" ino=22700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 69.155384][ T2101] loop2: detected capacity change from 0 to 512 [ 69.187591][ T2101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.225488][ T2101] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.287405][ T2101] EXT4-fs (loop2): 1 truncate cleaned up [ 69.293217][ T2101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.413805][ T28] audit: type=1400 audit(1754538899.956:321): avc: denied { getopt } for pid=2124 comm="syz.8.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.486700][ T2101] loop2: detected capacity change from 512 to 64 [ 69.537629][ T28] audit: type=1400 audit(1754538900.106:322): avc: denied { mount } for pid=2141 comm="syz.7.703" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.581399][ T285] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 69.621106][ T285] EXT4-fs (loop2): unmounting filesystem. [ 70.678411][ T2149] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 72.581580][ T2274] loop2: detected capacity change from 0 to 1024 [ 72.908535][ T2290] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 72.921019][ T28] audit: type=1400 audit(1754538903.466:323): avc: denied { read } for pid=2276 comm="syz.4.759" laddr=fe80::11 lport=4 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.106709][ T28] audit: type=1326 audit(1754538904.666:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2321 comm="syz.8.775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73278ebe9 code=0x0 [ 74.698160][ T28] audit: type=1400 audit(1754538905.266:325): avc: denied { mount } for pid=2354 comm="syz.3.790" name="/" dev="configfs" ino=13866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.996043][ T28] audit: type=1400 audit(1754538905.386:326): avc: denied { search } for pid=2354 comm="syz.3.790" name="/" dev="configfs" ino=13866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.573678][ T2370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.642708][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 75.765115][ T28] audit: type=1326 audit(1754538906.326:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2375 comm="syz.7.797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa602f8ebe9 code=0x0 [ 76.992697][ T2417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.009485][ T2417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 77.530585][ T2450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 77.563695][ T2452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.574541][ T2450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 77.606997][ T2450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 77.625996][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 77.957900][ T2462] loop2: detected capacity change from 0 to 16 [ 77.997840][ T2462] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.081641][ T2470] Illegal XDP return value 881938473 on prog (id 117) dev N/A, expect packet loss! [ 78.326584][ C0] sched: RT throttling activated [ 79.355554][ T2541] device syzkaller0 entered promiscuous mode [ 80.899417][ T28] audit: type=1326 audit(1754538911.466:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2559 comm="syz.8.869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73278ebe9 code=0x0 [ 81.787845][ T28] audit: type=1326 audit(1754538912.356:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.2.900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7278ebe9 code=0x0 [ 82.660316][ T2661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.730017][ T2661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 82.773836][ T28] audit: type=1326 audit(1754538913.336:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2664 comm="syz.3.918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 83.228747][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.266827][ T2708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.934'. [ 84.961735][ T28] audit: type=1326 audit(1754538915.526:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.8.960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73278ebe9 code=0x0 [ 87.117705][ T28] audit: type=1326 audit(1754538917.686:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2828 comm="syz.3.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 87.548096][ T2848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.590463][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 87.628705][ T2858] bond0: tun_chr_ioctl cmd 2147767517 [ 89.358485][ T28] audit: type=1326 audit(1754538919.926:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2894 comm="syz.3.1007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 90.866697][ T28] audit: type=1326 audit(1754538921.416:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2928 comm="syz.4.1021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258378ebe9 code=0x0 [ 91.509995][ T28] audit: type=1400 audit(1754538922.076:335): avc: denied { create } for pid=2956 comm="syz.7.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.623525][ T2978] loop2: detected capacity change from 0 to 512 [ 92.736770][ T28] audit: type=1326 audit(1754538923.276:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.4.1037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258378ebe9 code=0x0 [ 92.862881][ T2978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1039: inode #1: comm syz.2.1039: iget: illegal inode # [ 92.877233][ T2978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1039: error while reading EA inode 1 err=-117 [ 92.889999][ T2978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1039: inode #1: comm syz.2.1039: iget: illegal inode # [ 92.905377][ T2978] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1039: error while reading EA inode 1 err=-117 [ 92.918357][ T2978] EXT4-fs (loop2): 1 orphan inode deleted [ 92.924244][ T2978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.981594][ T285] EXT4-fs (loop2): unmounting filesystem. [ 93.158235][ T3001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1046'. [ 93.466737][ T1320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.663732][ T28] audit: type=1326 audit(1754538924.226:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3010 comm="syz.4.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258378ebe9 code=0x0 [ 93.688767][ T1320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.698952][ T1320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 93.712133][ T1320] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 93.721529][ T1320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.748234][ T1320] usb 3-1: config 0 descriptor?? [ 94.100902][ T28] audit: type=1326 audit(1754538924.666:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.8.1059" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73278ebe9 code=0x0 [ 94.156742][ T1320] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 94.164046][ T1320] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 94.171677][ T1320] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 94.179123][ T1320] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 94.186463][ T1320] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 94.195037][ T1320] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 94.573318][ T3055] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1064'. [ 94.582807][ T1320] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 94.591211][ T1320] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 94.599079][ T1320] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -32 [ 95.322618][ T3082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1077'. [ 95.693669][ T28] audit: type=1400 audit(1754538926.256:339): avc: denied { map } for pid=3107 comm="syz.7.1090" path="socket:[24926]" dev="sockfs" ino=24926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.718186][ T28] audit: type=1400 audit(1754538926.256:340): avc: denied { create } for pid=3107 comm="syz.7.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.737738][ T28] audit: type=1400 audit(1754538926.256:341): avc: denied { ioctl } for pid=3107 comm="syz.7.1090" path="socket:[24928]" dev="sockfs" ino=24928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.762362][ T28] audit: type=1400 audit(1754538926.256:342): avc: denied { connect } for pid=3107 comm="syz.7.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.781851][ T28] audit: type=1400 audit(1754538926.256:343): avc: denied { write } for pid=3107 comm="syz.7.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.526052][ T2077] usb 3-1: USB disconnect, device number 3 [ 96.554446][ T3118] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1093'. [ 97.123867][ T28] audit: type=1400 audit(1754538927.686:344): avc: denied { setopt } for pid=3140 comm="syz.7.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.593677][ T28] audit: type=1400 audit(1754538928.156:345): avc: denied { mount } for pid=3146 comm="syz.2.1104" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 97.764677][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1106'. [ 97.896661][ T291] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 98.117923][ T291] usb 3-1: not running at top speed; connect to a high speed hub [ 98.130833][ T291] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.141547][ T291] usb 3-1: config 1 has no interface number 1 [ 98.159217][ T291] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.205467][ T291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.233325][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.260517][ T291] usb 3-1: Product: syz [ 98.267311][ T291] usb 3-1: Manufacturer: syz [ 98.272034][ T291] usb 3-1: SerialNumber: syz [ 98.524589][ T291] usb 3-1: failed to enable PITCH for EP 0x82 [ 98.590638][ T291] usb 3-1: USB disconnect, device number 4 [ 98.610518][ T3170] overlayfs: failed to clone upperpath [ 98.724137][ T3174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1115'. [ 98.808815][ T3180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1118'. [ 98.962986][ T3197] 9pnet_fd: Insufficient options for proto=fd [ 99.004404][ T3204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1129'. [ 99.509579][ T3221] netlink: 'syz.3.1136': attribute type 5 has an invalid length. [ 99.534300][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 99.534317][ T28] audit: type=1400 audit(1754538930.096:348): avc: denied { sys_module } for pid=3222 comm="syz.2.1137" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.598669][ T3231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1140'. [ 99.626378][ T3233] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1141'. [ 100.060260][ T3246] overlayfs: failed to clone upperpath [ 100.597571][ T3259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 102.009894][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1165'. [ 102.019477][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1165'. [ 102.170181][ T28] audit: type=1400 audit(1754538932.736:349): avc: denied { watch watch_reads } for pid=3305 comm="syz.7.1169" path="/172" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.348691][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1177'. [ 102.358277][ T3324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1177'. [ 105.328304][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 105.340387][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 107.213273][ T28] audit: type=1326 audit(1754538937.776:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.8.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73278ebe9 code=0x7ffc0000 [ 107.375067][ T28] audit: type=1326 audit(1754538937.806:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.8.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb73278ebe9 code=0x7ffc0000 [ 107.659291][ T3401] fuse: Bad value for 'fd' [ 107.692315][ T28] audit: type=1326 audit(1754538937.806:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.8.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73278ebe9 code=0x7ffc0000 [ 107.889645][ T3413] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3413 comm=syz.7.1210 [ 108.380880][ T3427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 108.403352][ T3427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 109.085231][ T3436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1219'. [ 109.256151][ T28] audit: type=1400 audit(1754538939.816:353): avc: denied { ioctl } for pid=3446 comm="syz.2.1224" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.281714][ T28] audit: type=1400 audit(1754538939.816:354): avc: denied { set_context_mgr } for pid=3446 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 111.946734][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 111.957788][ T3485] device veth0 entered promiscuous mode [ 111.963407][ T3485] device macsec1 entered promiscuous mode [ 111.971177][ T3485] device veth0 left promiscuous mode [ 112.068545][ T28] audit: type=1400 audit(1754538942.636:355): avc: denied { create } for pid=3493 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.094175][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.101583][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.109268][ T3488] device bridge_slave_0 entered promiscuous mode [ 112.116305][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.123400][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.131216][ T3488] device bridge_slave_1 entered promiscuous mode [ 112.196081][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.203204][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.210513][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.217567][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.239245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.247671][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.255049][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.292667][ T3488] device veth0_vlan entered promiscuous mode [ 112.307160][ T3488] device veth1_macvtap entered promiscuous mode [ 112.374282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.383428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.392395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.401220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.410345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.418492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.500271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.508777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.517312][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.524395][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.532253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.540805][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.547916][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.561284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.569457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.638147][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1245'. [ 112.668191][ T28] audit: type=1400 audit(1754538943.236:356): avc: denied { search } for pid=3516 comm="syz.8.1246" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.708703][ T28] audit: type=1400 audit(1754538943.266:357): avc: denied { write } for pid=3516 comm="syz.8.1246" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.751686][ T28] audit: type=1400 audit(1754538943.266:358): avc: denied { add_name } for pid=3516 comm="syz.8.1246" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.792902][ T28] audit: type=1400 audit(1754538943.266:359): avc: denied { create } for pid=3516 comm="syz.8.1246" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 113.148055][ T10] device veth1_macvtap left promiscuous mode [ 113.154301][ T10] device veth0_vlan left promiscuous mode [ 113.219775][ T3550] usb usb8: usbfs: process 3550 (syz.9.1257) did not claim interface 0 before use [ 113.301726][ T28] audit: type=1400 audit(1754538943.866:360): avc: denied { append } for pid=3555 comm="syz.9.1261" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.927232][ T3573] 9pnet_virtio: no channels available for device [ 115.976798][ T28] audit: type=1326 audit(1754538946.516:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 116.736896][ T1320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.037374][ T1320] usb 3-1: Using ep0 maxpacket: 16 [ 117.046145][ T1320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.057883][ T1320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.069531][ T1320] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.074453][ T3660] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1299'. [ 117.087989][ T1320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.097114][ T1320] usb 3-1: Product: syz [ 117.102230][ T1320] usb 3-1: Manufacturer: syz [ 117.107795][ T1320] usb 3-1: SerialNumber: syz [ 117.376668][ T28] audit: type=1326 audit(1754538947.916:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.7.1302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa602f8ebe9 code=0x0 [ 117.409114][ T1320] usb 3-1: 0:2 : does not exist [ 117.437943][ T1320] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 117.466399][ T1320] usb 3-1: USB disconnect, device number 5 [ 118.267173][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.014220][ T28] audit: type=1326 audit(1754538949.576:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.8.1320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73278ebe9 code=0x0 [ 119.902736][ T3747] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1329'. [ 119.912350][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1329'. [ 120.198850][ T28] audit: type=1326 audit(1754538950.766:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="syz.8.1338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73278ebe9 code=0x0 [ 120.434351][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.441607][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.449666][ T3777] device bridge_slave_0 entered promiscuous mode [ 120.457230][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.464341][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.472758][ T3777] device bridge_slave_1 entered promiscuous mode [ 120.551878][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.559013][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.566343][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.573415][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.594859][ T3788] netlink: 280 bytes leftover after parsing attributes in process `syz.7.1343'. [ 120.648648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.657211][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.665053][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.707051][ T3777] device veth0_vlan entered promiscuous mode [ 120.721929][ T3777] device veth1_macvtap entered promiscuous mode [ 120.768954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.777614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.786456][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.795304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.891119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.919998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.952061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.088111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.131550][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.138682][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.158405][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.183425][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.190550][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.206777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.217363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.418324][ T904] device veth1_macvtap left promiscuous mode [ 121.426840][ T904] device veth0_vlan left promiscuous mode [ 121.494569][ T28] audit: type=1400 audit(1754538952.056:365): avc: denied { accept } for pid=3809 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.077435][ T3831] xt_NFQUEUE: number of total queues is 0 [ 122.777550][ T28] audit: type=1326 audit(1754538953.346:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.9.1359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b0298ebe9 code=0x0 [ 125.900129][ T28] audit: type=1326 audit(1754538956.406:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.9.1372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b0298ebe9 code=0x0 [ 126.006116][ T28] audit: type=1400 audit(1754538956.506:368): avc: denied { connect } for pid=3881 comm="syz.3.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.445587][ T28] audit: type=1326 audit(1754538958.996:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.9.1389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b0298ebe9 code=0x0 [ 129.094678][ T3936] 9pnet_fd: Insufficient options for proto=fd [ 129.596681][ T28] audit: type=1326 audit(1754538960.146:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.3.1407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 130.936700][ T3844] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 130.983669][ T3992] capability: warning: `syz.8.1419' uses 32-bit capabilities (legacy support in use) [ 131.146621][ T3844] usb 10-1: Using ep0 maxpacket: 8 [ 131.155244][ T3844] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.183229][ T3844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.194256][ T3844] usb 10-1: Product: syz [ 131.199132][ T3844] usb 10-1: Manufacturer: syz [ 131.204056][ T3844] usb 10-1: SerialNumber: syz [ 131.234905][ T3844] usb 10-1: config 0 descriptor?? [ 131.614339][ T4002] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1424'. [ 133.678813][ T4031] usb 10-1: USB disconnect, device number 2 [ 133.705510][ T28] audit: type=1400 audit(1754538964.266:371): avc: denied { wake_alarm } for pid=4019 comm="syz.7.1431" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.989456][ T4075] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1449'. [ 135.028270][ T4075] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1449'. [ 135.172724][ T28] audit: type=1400 audit(1754538965.736:372): avc: denied { connect } for pid=4076 comm="syz.8.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.219229][ T4082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1453'. [ 135.376236][ T28] audit: type=1400 audit(1754538965.936:373): avc: denied { ioctl } for pid=4094 comm="syz.7.1459" path="socket:[27835]" dev="sockfs" ino=27835 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.106602][ T3844] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 136.287822][ T3844] usb 10-1: config 118 interface 0 has no altsetting 0 [ 136.296350][ T3844] usb 10-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 136.305685][ T3844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.313987][ T3844] usb 10-1: Product: syz [ 136.318485][ T3844] usb 10-1: Manufacturer: syz [ 136.323176][ T3844] usb 10-1: SerialNumber: syz [ 136.373260][ T28] audit: type=1400 audit(1754538966.936:374): avc: denied { create } for pid=4114 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.574621][ T3844] usb 10-1: USB disconnect, device number 3 [ 137.108189][ T28] audit: type=1400 audit(1754538967.676:375): avc: denied { nlmsg_write } for pid=4138 comm="syz.0.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 137.326607][ T4031] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 137.506595][ T4031] usb 10-1: Using ep0 maxpacket: 8 [ 137.518967][ T4031] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.528295][ T4031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.539102][ T4031] usb 10-1: Product: syz [ 137.543445][ T4031] usb 10-1: Manufacturer: syz [ 137.548206][ T4031] usb 10-1: SerialNumber: syz [ 137.559102][ T4031] usb 10-1: config 0 descriptor?? [ 138.301021][ T28] audit: type=1326 audit(1754538968.866:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.3.1488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 140.078005][ T3844] usb 10-1: USB disconnect, device number 4 [ 140.114331][ T4187] syz.7.1495 uses obsolete (PF_INET,SOCK_PACKET) [ 140.751695][ T28] audit: type=1326 audit(1754538971.316:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4195 comm="syz.3.1500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 141.211675][ T28] audit: type=1326 audit(1754538971.746:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.7.1513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa602f8ebe9 code=0x0 [ 141.528665][ T4223] loop9: detected capacity change from 0 to 512 [ 141.547353][ T4223] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 141.555645][ T4223] EXT4-fs (loop9): orphan cleanup on readonly fs [ 141.562415][ T4223] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 141.572772][ T4223] EXT4-fs warning (device loop9): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.588337][ T4223] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 141.595707][ T4223] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1507: bg 0: block 40: padding at end of block bitmap is not set [ 141.610335][ T4223] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 141.619498][ T4223] EXT4-fs (loop9): 1 truncate cleaned up [ 141.625214][ T4223] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 141.636757][ T4223] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #16: comm syz.9.1507: corrupted xattr block 31 [ 141.648798][ T4223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 141.657911][ T4223] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #16: comm syz.9.1507: corrupted xattr block 31 [ 141.669981][ T4223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 141.679225][ T28] audit: type=1400 audit(1754538972.246:379): avc: denied { read } for pid=4222 comm="syz.9.1507" name="file2" dev="loop9" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 141.679298][ T4223] EXT4-fs error (device loop9): ext4_get_link:104: inode #16: comm syz.9.1507: bad symlink. [ 141.722787][ T4223] EXT4-fs error (device loop9): ext4_xattr_block_get:546: inode #16: comm syz.9.1507: corrupted xattr block 31 [ 141.734858][ T4223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 141.744068][ T4223] EXT4-fs error (device loop9): ext4_get_link:104: inode #16: comm syz.9.1507: bad symlink. [ 141.760608][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 142.493027][ T28] audit: type=1326 audit(1754538973.056:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.7.1524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa602f8ebe9 code=0x0 [ 142.690284][ T4262] loop9: detected capacity change from 0 to 256 [ 142.709017][ T4262] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 142.721534][ T4262] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 143.026614][ T3402] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 143.217687][ T3402] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 143.249809][ T3402] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 143.259064][ T3402] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.270281][ T3402] usb 10-1: config 0 descriptor?? [ 143.276702][ T4264] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 143.318095][ T4280] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 143.728373][ T4286] 9pnet_fd: Insufficient options for proto=fd [ 144.206659][ T28] audit: type=1326 audit(1754538974.766:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4292 comm="syz.0.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93d678ebe9 code=0x0 [ 144.239104][ T3402] hid-generic 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 144.986991][ T4314] loop0: detected capacity change from 0 to 256 [ 145.018853][ T4314] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 145.090171][ T3402] usb 10-1: USB disconnect, device number 5 [ 145.606069][ T4326] loop9: detected capacity change from 0 to 512 [ 145.618591][ T4326] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 145.627732][ T4326] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.647188][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 145.849668][ T28] audit: type=1326 audit(1754538976.406:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.9.1551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b0298ebe9 code=0x0 [ 146.358407][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1558'. [ 146.380175][ T4354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.485596][ T4365] loop0: detected capacity change from 0 to 512 [ 146.493255][ T4365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.504955][ T4365] EXT4-fs (loop0): 1 truncate cleaned up [ 146.510681][ T4365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.522299][ T4365] EXT4-fs (loop0): shut down requested (1) [ 146.529258][ T28] audit: type=1400 audit(1754538977.096:383): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 146.551158][ T28] audit: type=1400 audit(1754538977.096:384): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.552822][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 146.573044][ T28] audit: type=1400 audit(1754538977.096:385): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.611016][ T28] audit: type=1400 audit(1754538977.096:386): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.635105][ T28] audit: type=1400 audit(1754538977.096:387): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.674484][ T28] audit: type=1400 audit(1754538977.096:388): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.697925][ T28] audit: type=1400 audit(1754538977.096:389): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.013369][ T4388] loop9: detected capacity change from 0 to 1024 [ 147.041320][ T4388] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 147.074022][ T4388] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1573: inode #808464432: comm syz.9.1573: iget: illegal inode # [ 147.088123][ T4388] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1573: error while reading EA inode 808464432 err=-117 [ 147.112476][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 147.510607][ T28] audit: type=1326 audit(1754538977.876:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.3.1578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 148.330272][ T28] audit: type=1400 audit(1754538978.896:391): avc: denied { append } for pid=4414 comm="syz.0.1582" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.704784][ T4433] loop9: detected capacity change from 0 to 128 [ 148.726782][ T4433] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 148.735512][ T4433] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.775185][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 148.853213][ T4442] loop9: detected capacity change from 0 to 512 [ 148.860718][ T4442] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 148.872831][ T4442] EXT4-fs (loop9): 1 truncate cleaned up [ 148.878686][ T4442] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 148.891750][ T4442] EXT4-fs (loop9): shut down requested (1) [ 148.903871][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 149.409606][ T4452] device bridge_slave_0 entered promiscuous mode [ 149.416202][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.426170][ T4484] kvm: pic: non byte write [ 151.495170][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 151.495185][ T28] audit: type=1400 audit(1754538982.056:396): avc: denied { ioctl } for pid=4489 comm="syz.9.1607" path="socket:[29178]" dev="sockfs" ino=29178 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.602983][ T4514] loop0: detected capacity change from 0 to 512 [ 152.636606][ T19] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 152.707687][ T4514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.723691][ T4514] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.803125][ T4521] overlayfs: failed to clone upperpath [ 153.094628][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 153.107076][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.124612][ T4528] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 153.133883][ T4528] binder: 4527:4528 ioctl 4018620d 200000000100 returned -1 [ 153.141288][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.143183][ T28] audit: type=1400 audit(1754538983.706:397): avc: denied { map } for pid=4527 comm="syz.0.1623" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.156655][ T19] usb 10-1: Using ep0 maxpacket: 32 [ 153.173784][ T4528] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 153.178266][ T4510] device bridge_slave_0 entered promiscuous mode [ 153.184092][ T4528] binder: 4527:4528 ioctl 4018620d 200000004a80 returned -1 [ 153.197566][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.204773][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.213324][ T4510] device bridge_slave_1 entered promiscuous mode [ 153.219967][ T19] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.231795][ T19] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.256037][ T19] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 153.265772][ T19] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 153.274513][ T19] usb 10-1: Product: syz [ 153.279774][ T19] usb 10-1: Manufacturer: syz [ 153.294502][ T19] hub 10-1:4.0: USB hub found [ 153.332889][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.340011][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.347649][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.354695][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.384023][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.391542][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.399758][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.407457][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.416387][ T10] device veth1_macvtap left promiscuous mode [ 153.422889][ T10] device veth0_vlan left promiscuous mode [ 153.495739][ T19] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 153.561985][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.570290][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.577362][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.586039][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.594496][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.601585][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.617511][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.632205][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.648684][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.669823][ T4510] device veth0_vlan entered promiscuous mode [ 153.678098][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.697595][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.705345][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.719960][ T4510] device veth1_macvtap entered promiscuous mode [ 153.727162][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.743909][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.762441][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.814670][ T28] audit: type=1326 audit(1754538984.376:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 153.839545][ T28] audit: type=1326 audit(1754538984.416:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 153.863418][ T28] audit: type=1326 audit(1754538984.436:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 153.866720][ T4031] usb 10-1: USB disconnect, device number 6 [ 153.915139][ T28] audit: type=1326 audit(1754538984.436:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 154.205257][ T4553] loop1: detected capacity change from 0 to 512 [ 154.242650][ T4553] EXT4-fs: quotafile must be on filesystem root [ 154.273790][ T28] audit: type=1326 audit(1754538984.436:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 154.306730][ T28] audit: type=1326 audit(1754538984.436:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 154.379362][ T4552] loop1: detected capacity change from 0 to 2048 [ 154.448560][ T28] audit: type=1326 audit(1754538984.436:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 154.792036][ T28] audit: type=1326 audit(1754538984.436:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4549 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55b318ebe9 code=0x7ffc0000 [ 155.046939][ T4573] loop9: detected capacity change from 0 to 512 [ 155.079527][ T4573] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 155.089040][ T4573] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.126099][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 155.596649][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 155.786653][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 155.802417][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.813521][ T39] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.823981][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.843617][ T39] usb 2-1: config 0 descriptor?? [ 156.639408][ T4627] loop9: detected capacity change from 0 to 1024 [ 156.648251][ T4627] EXT4-fs: Ignoring removed nobh option [ 156.648738][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 156.648754][ T28] audit: type=1400 audit(1754538987.216:448): avc: denied { read } for pid=88 comm="acpid" name="event5" dev="devtmpfs" ino=971 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.653866][ T4627] EXT4-fs: Ignoring removed bh option [ 156.687200][ T4627] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.691729][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.711488][ T28] audit: type=1400 audit(1754538987.216:449): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=971 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.731107][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.752264][ T4627] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 156.769187][ T28] audit: type=1400 audit(1754538987.216:450): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=971 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 156.801953][ T28] audit: type=1326 audit(1754538987.336:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.3.1655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 156.826199][ T4627] EXT4-fs error (device loop9): ext4_get_max_inline_size:116: inode #18: comm syz.9.1656: can't get inode location 18 [ 156.846744][ T4627] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5917: Out of memory [ 156.857201][ T4627] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #18: comm syz.9.1656: mark_inode_dirty error [ 156.870585][ T4627] EXT4-fs warning (device loop9): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7565121430573237993 [ 156.888553][ T4627] EXT4-fs warning (device loop9): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7565121430573237993 [ 156.905965][ T4627] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5917: Out of memory [ 156.916047][ T4627] EXT4-fs error (device loop9): ext4_dirty_inode:6121: inode #18: comm syz.9.1656: mark_inode_dirty error [ 156.929528][ T4627] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5917: Out of memory [ 156.939841][ T4627] EXT4-fs error (device loop9): ext4_ext_truncate:4454: inode #18: comm syz.9.1656: mark_inode_dirty error [ 156.952815][ T4627] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5917: Out of memory [ 156.962721][ T4627] EXT4-fs error (device loop9): ext4_truncate:4314: inode #18: comm syz.9.1656: mark_inode_dirty error [ 157.078593][ T3488] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5917: Out of memory [ 157.095230][ T3488] EXT4-fs (loop9): unmounting filesystem. [ 157.307496][ T28] audit: type=1400 audit(1754538987.876:452): avc: denied { bind } for pid=4635 comm="syz.0.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.361325][ T28] audit: type=1326 audit(1754538987.916:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.7.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa602f8ebe9 code=0x7fc00000 [ 157.385801][ T28] audit: type=1326 audit(1754538987.916:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.7.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa602f8ebe9 code=0x7fc00000 [ 157.505839][ T4644] 9pnet_fd: Insufficient options for proto=fd [ 157.628794][ T28] audit: type=1326 audit(1754538987.916:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.7.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa602f8ebe9 code=0x7fc00000 [ 158.224351][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.234183][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.257117][ T4645] device bridge_slave_0 entered promiscuous mode [ 158.274566][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.281713][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.298238][ T4645] device bridge_slave_1 entered promiscuous mode [ 158.335780][ T39] usb 2-1: USB disconnect, device number 2 [ 158.510503][ T354] device bridge_slave_1 left promiscuous mode [ 158.517602][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.552766][ T354] device bridge_slave_0 left promiscuous mode [ 158.576648][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.608705][ T354] device veth1_macvtap left promiscuous mode [ 158.614998][ T354] device veth0_vlan left promiscuous mode [ 159.047956][ T4681] loop1: detected capacity change from 0 to 2048 [ 159.059186][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.066371][ T4645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.073744][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.080822][ T4645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.137728][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.145442][ T4681] loop1: p3 p4 < > [ 159.150962][ T4681] loop1: p3 start 4284160 is beyond EOD, truncated [ 159.153327][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.179791][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.193102][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.209810][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.218739][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.227515][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.234593][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.242189][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.251452][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.260242][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.267356][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.283106][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.291578][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.300369][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.309009][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.323326][ T4692] loop1: detected capacity change from 0 to 256 [ 159.330397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.341271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.355797][ T4645] device veth0_vlan entered promiscuous mode [ 159.369684][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.378101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.386470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.394788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.403380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.411159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.420266][ T4645] device veth1_macvtap entered promiscuous mode [ 159.430077][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.437923][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.446838][ T28] audit: type=1326 audit(1754538990.006:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.7.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa602f8ebe9 code=0x7fc00000 [ 159.453616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.485891][ T28] audit: type=1326 audit(1754538990.006:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.7.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa602f8ebe9 code=0x7fc00000 [ 159.514118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.531075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.642471][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 159.873439][ T4720] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1700'. [ 159.893991][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 159.997911][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.340404][ T4734] loop0: detected capacity change from 0 to 8192 [ 160.366616][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 160.373939][ T39] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.385645][ T4734] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.423187][ T39] usb 6-1: config 9 has an invalid interface number: 3 but max is 2 [ 160.442939][ T39] usb 6-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 160.463492][ T39] usb 6-1: config 9 has an invalid interface number: 150 but max is 2 [ 160.478737][ T39] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 160.492487][ T39] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 160.502221][ T39] usb 6-1: config 9 has no interface number 0 [ 160.508626][ T39] usb 6-1: config 9 has no interface number 1 [ 160.515843][ T39] usb 6-1: config 9 interface 150 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 160.529486][ T39] usb 6-1: config 9 interface 150 has no altsetting 0 [ 160.553094][ T39] usb 6-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=b2.3d [ 160.571648][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.581016][ T39] usb 6-1: Product: syz [ 160.585375][ T39] usb 6-1: Manufacturer: syz [ 160.590563][ T39] usb 6-1: SerialNumber: syz [ 161.444819][ T4763] loop0: detected capacity change from 0 to 128 [ 161.500788][ T4763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.515735][ T4763] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.609211][ T39] usb 6-1: USB disconnect, device number 4 [ 161.669348][ T4763] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 161.689587][ T4763] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 161.724587][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 161.724604][ T28] audit: type=1400 audit(1754538992.286:471): avc: denied { name_bind } for pid=4770 comm="syz.3.1711" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 161.803117][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 163.866618][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 164.179185][ T28] audit: type=1326 audit(1754538994.746:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4801 comm="syz.7.1720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa602f8ebe9 code=0x0 [ 164.304445][ T28] audit: type=1400 audit(1754538994.856:473): avc: denied { bind } for pid=4799 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.433172][ T28] audit: type=1400 audit(1754538994.856:474): avc: denied { listen } for pid=4799 comm="syz.1.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.981898][ T28] audit: type=1400 audit(1754538995.546:475): avc: denied { bind } for pid=4829 comm="syz.3.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.126603][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 165.133067][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 165.145399][ T60] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 165.156394][ T28] audit: type=1326 audit(1754538995.726:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.1737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 165.179403][ T60] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 165.188028][ T60] usb 6-1: Product: syz [ 165.192270][ T60] usb 6-1: Manufacturer: syz [ 165.197082][ T60] usb 6-1: SerialNumber: syz [ 165.202972][ T60] usb 6-1: config 0 descriptor?? [ 165.246637][ T3844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 165.414206][ T60] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 165.430893][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.456672][ T3844] usb 2-1: Using ep0 maxpacket: 32 [ 165.463230][ T3844] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 165.471658][ T3844] usb 2-1: config 0 has no interface number 0 [ 165.480360][ T3844] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.489786][ T3844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.498011][ T3844] usb 2-1: Product: syz [ 165.502339][ T3844] usb 2-1: Manufacturer: syz [ 165.507610][ T3844] usb 2-1: SerialNumber: syz [ 165.513217][ T3844] usb 2-1: config 0 descriptor?? [ 165.523303][ T3844] smsc95xx v2.0.0 [ 165.614190][ T39] usb 6-1: USB disconnect, device number 5 [ 165.985144][ T4855] fuseblk: Unknown parameter 'vfat' [ 166.107732][ T28] audit: type=1400 audit(1754538996.676:477): avc: denied { append } for pid=4856 comm="syz.0.1742" name="pfkey" dev="proc" ino=4026532724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 166.768406][ T3844] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 166.984599][ T28] audit: type=1326 audit(1754538997.546:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.5.1753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd85e78ebe9 code=0x0 [ 167.045590][ T3844] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 167.176299][ T3844] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 167.208237][ T4891] loop0: detected capacity change from 0 to 512 [ 167.215730][ T4891] EXT4-fs: Ignoring removed orlov option [ 167.221721][ T4891] EXT4-fs: Ignoring removed i_version option [ 167.227946][ T3844] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 167.243050][ T3844] usb 2-1: USB disconnect, device number 3 [ 167.744090][ T4891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.808263][ T4891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.835433][ T4891] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.861758][ T4891] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1755: corrupted inode contents [ 167.904148][ T4891] EXT4-fs (loop0): Remounting filesystem read-only [ 167.914417][ T4891] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #2: comm syz.0.1755: mark_inode_dirty error [ 167.956201][ T4891] EXT4-fs (loop0): Remounting filesystem read-only [ 167.963178][ T4891] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1755: corrupted inode contents [ 167.977765][ T4891] EXT4-fs (loop0): Remounting filesystem read-only [ 168.013360][ T4891] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1755: mark_inode_dirty error [ 168.025175][ T4891] EXT4-fs (loop0): Remounting filesystem read-only [ 168.047425][ T4909] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1755: corrupted inode contents [ 168.086821][ T4909] EXT4-fs (loop0): Remounting filesystem read-only [ 168.124893][ T39] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.134992][ T4909] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #2: comm syz.0.1755: mark_inode_dirty error [ 168.147377][ T4909] EXT4-fs (loop0): Remounting filesystem read-only [ 168.154069][ T4909] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1755: corrupted inode contents [ 168.166283][ T4909] EXT4-fs (loop0): Remounting filesystem read-only [ 168.173273][ T4891] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #2: comm syz.0.1755: corrupted inode contents [ 168.185501][ T4891] EXT4-fs (loop0): Remounting filesystem read-only [ 168.196599][ T4891] EXT4-fs error (device loop0): add_dirent_to_buf:2216: inode #2: comm syz.0.1755: mark_inode_dirty error [ 168.211756][ T4891] EXT4-fs (loop0): Remounting filesystem read-only [ 168.326585][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 168.333089][ T39] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 168.341985][ T39] usb 6-1: config 0 has no interface number 0 [ 168.395401][ T39] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 168.405435][ T39] usb 6-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 168.417587][ T39] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 168.437709][ T39] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 168.462578][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.475955][ T39] usb 6-1: Product: syz [ 168.484372][ T39] usb 6-1: Manufacturer: syz [ 168.494199][ T39] usb 6-1: SerialNumber: syz [ 168.504317][ T39] usb 6-1: config 0 descriptor?? [ 168.515757][ T4897] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 168.525206][ T4897] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 169.347516][ T28] audit: type=1326 audit(1754538999.916:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93d678ebe9 code=0x0 [ 169.747321][ T4930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1769'. [ 170.315524][ T4939] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1773'. [ 170.469272][ T28] audit: type=1400 audit(1754539001.046:480): avc: denied { execute } for pid=4948 comm="syz.3.1779" name="file1" dev="ramfs" ino=29994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 170.534076][ T28] audit: type=1400 audit(1754539001.046:481): avc: denied { execute_no_trans } for pid=4948 comm="syz.3.1779" path="/file1" dev="ramfs" ino=29994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 170.720763][ T28] audit: type=1400 audit(1754539001.256:482): avc: denied { setopt } for pid=4953 comm="syz.0.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.928421][ T39] usb 6-1: USB disconnect, device number 6 [ 171.466581][ T28] audit: type=1326 audit(1754539001.916:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.0.1783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93d678ebe9 code=0x0 [ 171.507561][ T354] device veth1_macvtap left promiscuous mode [ 171.705536][ T28] audit: type=1400 audit(1754539002.266:484): avc: denied { getopt } for pid=4973 comm="syz.5.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.764659][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.782123][ T4950] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.791851][ T4950] device bridge_slave_0 entered promiscuous mode [ 171.804644][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.811849][ T4950] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.821823][ T4950] device bridge_slave_1 entered promiscuous mode [ 171.874155][ T28] audit: type=1400 audit(1754539002.436:485): avc: denied { read } for pid=4976 comm="syz.5.1788" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.949751][ T28] audit: type=1400 audit(1754539002.476:486): avc: denied { open } for pid=4976 comm="syz.5.1788" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.065918][ T4979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1789'. [ 172.067862][ T28] audit: type=1400 audit(1754539002.476:487): avc: denied { map } for pid=4976 comm="syz.5.1788" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.585926][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.593070][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.600416][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.607527][ T4950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.658024][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.667641][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.757996][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.796909][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.820280][ T4997] __vm_enough_memory: pid: 4997, comm: syz.3.1793, no enough memory for the allocation [ 172.854577][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.876914][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.884014][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.901817][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.022361][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.029505][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.061116][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.340806][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.450695][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.459018][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.494445][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.507928][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.538620][ T4950] device veth0_vlan entered promiscuous mode [ 173.547481][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.568722][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.586321][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.603515][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.627492][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.646134][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.661743][ T4950] device veth1_macvtap entered promiscuous mode [ 173.682436][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.693185][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.711712][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.731348][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.807549][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.086946][ T5025] loop0: detected capacity change from 0 to 512 [ 174.133875][ T5025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.147888][ T5025] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.222782][ T5025] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes [ 174.498872][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 174.633819][ T5033] loop0: detected capacity change from 0 to 512 [ 175.028031][ T5033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.166468][ T5033] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.473525][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 175.876361][ T5048] 9pnet_fd: Insufficient options for proto=fd [ 175.883531][ T5048] SELinux: Context is not valid (left unmapped). [ 175.976824][ T28] audit: type=1400 audit(1754539006.466:488): avc: denied { relabelto } for pid=5045 comm="syz.3.1808" name="rdma.current" dev="tmpfs" ino=2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 176.056896][ T28] audit: type=1400 audit(1754539006.466:489): avc: denied { associate } for pid=5045 comm="syz.3.1808" name="rdma.current" dev="tmpfs" ino=2202 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 176.377924][ T28] audit: type=1400 audit(1754539006.886:490): avc: denied { unlink } for pid=287 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 176.606624][ T28] audit: type=1400 audit(1754539006.996:491): avc: denied { ioctl } for pid=5053 comm="syz.0.1812" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 177.237694][ T28] audit: type=1326 audit(1754539007.806:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.6.1815" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c738ebe9 code=0x0 [ 177.435485][ T28] audit: type=1400 audit(1754539007.996:493): avc: denied { bind } for pid=5075 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.503426][ T28] audit: type=1326 audit(1754539010.066:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.6.1832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c738ebe9 code=0x0 [ 179.529974][ T28] audit: type=1400 audit(1754539010.066:495): avc: denied { read write } for pid=5125 comm="syz.5.1834" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.554371][ T28] audit: type=1400 audit(1754539010.066:496): avc: denied { open } for pid=5125 comm="syz.5.1834" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.589369][ T28] audit: type=1400 audit(1754539010.076:497): avc: denied { ioctl } for pid=5125 comm="syz.5.1834" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.012692][ T5131] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1836'. [ 182.184297][ T5163] netlink: 'syz.6.1848': attribute type 4 has an invalid length. [ 182.770877][ T5181] loop5: detected capacity change from 0 to 128 [ 182.798704][ T5181] EXT4-fs (loop5): Test dummy encryption mode enabled [ 182.844084][ T5181] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 182.947229][ T5181] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.018065][ T4645] EXT4-fs (loop5): unmounting filesystem. [ 184.210156][ T5215] netlink: 'syz.3.1864': attribute type 4 has an invalid length. [ 184.841429][ T5232] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 184.848092][ T5232] binder: 5229:5232 ioctl 4018620d 200000000100 returned -1 [ 185.287857][ T5236] loop5: detected capacity change from 0 to 256 [ 187.413776][ T28] audit: type=1326 audit(1754539017.976:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.3.1877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a698ebe9 code=0x0 [ 187.547821][ T5256] loop6: detected capacity change from 0 to 256 [ 187.772261][ T5269] loop6: detected capacity change from 0 to 2048 [ 187.940925][ T405] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.954166][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.996092][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.009561][ T5256] loop6: detected capacity change from 0 to 512 [ 188.017995][ T5251] device bridge_slave_0 entered promiscuous mode [ 188.024878][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1881'. [ 188.037321][ T5256] EXT4-fs: Ignoring removed bh option [ 188.042759][ T5256] ext2: Unknown parameter 'subj_type' [ 188.060445][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.067721][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.075299][ T5251] device bridge_slave_1 entered promiscuous mode [ 188.131901][ T405] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.182585][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.189711][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.197032][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.204094][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.230618][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.239336][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.250819][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.318732][ T28] audit: type=1400 audit(1754539018.886:499): avc: denied { setattr } for pid=5272 comm="syz.5.1883" name="/" dev="configfs" ino=13866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.566877][ T28] audit: type=1400 audit(1754539019.136:500): avc: denied { unmount } for pid=4645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 188.940981][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.950141][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.958652][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.965706][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.973112][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.981606][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.990352][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.997430][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.041293][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.057951][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.061789][ T5293] loop6: detected capacity change from 0 to 16 [ 189.085584][ T5293] erofs: (device loop6): mounted with root inode @ nid 36. [ 189.106073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.113281][ T5294] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 189.125445][ T5294] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 189.136569][ T5294] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 189.161487][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.279239][ T354] device bridge_slave_1 left promiscuous mode [ 189.286199][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.827462][ T354] device bridge_slave_0 left promiscuous mode [ 189.833811][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.855221][ T354] device veth1_macvtap left promiscuous mode [ 189.861345][ T354] device veth0_vlan left promiscuous mode [ 189.976506][ T5316] loop0: detected capacity change from 0 to 1024 [ 190.007585][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.012490][ T5316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.016520][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.032368][ T5316] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.043749][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.069133][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.078025][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.085600][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.092993][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.101432][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 190.102530][ T5251] device veth0_vlan entered promiscuous mode [ 190.120460][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.136172][ T468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.149752][ T5251] device veth1_macvtap entered promiscuous mode [ 190.161264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.169091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.180922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.183217][ T5327] loop0: detected capacity change from 0 to 16 [ 190.199949][ T5327] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.209963][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.218459][ T5328] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 190.223241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.228756][ T5328] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 190.248986][ T5328] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 190.397413][ T4031] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 190.398231][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 190.537061][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.579417][ T39] usb 6-1: config 0 descriptor?? [ 190.636466][ T4031] usb 7-1: Using ep0 maxpacket: 16 [ 190.643701][ T4031] usb 7-1: unable to get BOS descriptor or descriptor too short [ 190.652774][ T4031] usb 7-1: config 35 has an invalid interface number: 1 but max is 0 [ 190.661080][ T4031] usb 7-1: config 35 has no interface number 0 [ 190.667706][ T4031] usb 7-1: config 35 interface 1 has no altsetting 0 [ 190.677015][ T4031] usb 7-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=73.24 [ 190.686117][ T4031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.694240][ T4031] usb 7-1: Product: syz [ 190.698503][ T4031] usb 7-1: Manufacturer: syz [ 190.703251][ T4031] usb 7-1: SerialNumber: syz [ 190.727953][ T28] audit: type=1326 audit(1754539018.295:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.757132][ T28] audit: type=1326 audit(1754539018.295:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.781415][ T28] audit: type=1326 audit(1754539018.295:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.805646][ T28] audit: type=1326 audit(1754539018.295:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.829380][ T28] audit: type=1326 audit(1754539018.295:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.852877][ T28] audit: type=1326 audit(1754539018.295:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.877358][ T28] audit: type=1326 audit(1754539018.295:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a698ebe9 code=0x7fc00000 [ 190.970836][ T4031] ftdi_sio 7-1:35.1: FTDI USB Serial Device converter detected [ 190.992523][ T4031] ftdi_sio ttyUSB0: unknown device type: 0x7324 [ 191.012370][ T39] logitech 0003:046D:C298.0006: unknown main item tag 0x0 [ 191.019798][ T4031] usb 7-1: USB disconnect, device number 4 [ 191.020827][ T4031] ftdi_sio 7-1:35.1: device disconnected [ 191.037852][ T39] logitech 0003:046D:C298.0006: item fetching failed at offset 3/5 [ 191.067443][ T39] logitech 0003:046D:C298.0006: parse failed [ 191.110942][ T39] logitech: probe of 0003:046D:C298.0006 failed with error -22 [ 191.257398][ T4031] usb 6-1: USB disconnect, device number 7 [ 191.499628][ T5363] loop0: detected capacity change from 0 to 512 [ 191.509140][ T5363] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.516231][ T5363] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 191.525386][ T5363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 191.533745][ T5363] System zones: 1-12 [ 191.538659][ T5363] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1913: corrupted in-inode xattr [ 191.552225][ T5363] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1913: couldn't read orphan inode 15 (err -117) [ 191.569461][ T5363] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.621185][ T5372] loop6: detected capacity change from 0 to 1024 [ 191.658139][ T5372] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 191.711059][ T5380] loop4: detected capacity change from 0 to 128 [ 191.718035][ T5380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.725124][ T5380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.736481][ T5380] EXT4-fs (loop4): Test dummy encryption mode enabled [ 191.772752][ T5380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.817886][ T5380] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.855769][ T5386] loop5: detected capacity change from 0 to 1024 [ 191.864357][ T5380] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 191.903628][ T5251] EXT4-fs (loop4): unmounting filesystem. [ 191.915348][ T5386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.927652][ T5386] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.983663][ T4645] EXT4-fs (loop5): unmounting filesystem. [ 192.372839][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 192.483724][ T5407] loop0: detected capacity change from 0 to 2048 [ 192.562914][ T5407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 192.602738][ T5407] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 192.621670][ T4950] EXT4-fs (loop6): unmounting filesystem. [ 192.669854][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 192.669897][ T28] audit: type=1400 audit(1754539020.236:634): avc: denied { write } for pid=5412 comm="syz.6.1929" path="socket:[32445]" dev="sockfs" ino=32445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.670578][ T3777] EXT4-fs (loop0): unmounting filesystem. [ 193.036009][ T5423] loop6: detected capacity change from 0 to 128 [ 193.042727][ T5423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.099041][ T5423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.140524][ T5423] EXT4-fs (loop6): Test dummy encryption mode enabled [ 193.185382][ T5439] loop4: detected capacity change from 0 to 2048 [ 193.523381][ T5423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 193.635497][ T5439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.744945][ T5423] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.876265][ T5439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 193.935875][ T4950] EXT4-fs (loop6): unmounting filesystem. [ 193.959552][ T28] audit: type=1326 audit(1754539021.527:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.028309][ T8] ------------[ cut here ]------------ [ 194.033898][ T8] kernel BUG at fs/ext4/inode.c:2761! [ 194.049845][ T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 194.055968][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted 6.1.145-syzkaller-00001-g39fefc4d6aea #0 [ 194.065709][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.075782][ T8] Workqueue: writeback wb_workfn (flush-7:4) [ 194.081805][ T8] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 194.087549][ T8] Code: 9e 86 ff 84 db 75 31 e8 66 9b 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 48 9b 86 ff <0f> 0b e8 41 9b 86 ff e8 68 13 17 ff eb 93 e8 35 9b 86 ff e8 5c 13 [ 194.107173][ T8] RSP: 0018:ffffc90000087120 EFLAGS: 00010293 [ 194.113277][ T8] RAX: ffffffff81e96738 RBX: 000000c410000000 RCX: ffff888100399440 [ 194.121260][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 194.129244][ T8] RBP: ffffc90000087490 R08: dffffc0000000000 R09: ffffed10268112e7 [ 194.137232][ T8] R10: ffffed10268112e7 R11: 1ffff110268112e6 R12: dffffc0000000000 [ 194.145217][ T8] R13: ffff888134089848 R14: 0000008000000000 R15: ffff888134089730 [ 194.147371][ T28] audit: type=1326 audit(1754539021.527:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.153203][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 194.179707][ T28] audit: type=1326 audit(1754539021.527:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.185384][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.208746][ T28] audit: type=1326 audit(1754539021.527:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.215283][ T8] CR2: 00007ffed7e75d18 CR3: 0000000127be5000 CR4: 00000000003506a0 [ 194.215306][ T8] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 194.215321][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.246633][ T28] audit: type=1326 audit(1754539021.527:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.254569][ T8] Call Trace: [ 194.254576][ T8] [ 194.254589][ T8] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 194.254622][ T8] ? xas_start+0x317/0x3e0 [ 194.263090][ T28] audit: type=1326 audit(1754539021.527:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.285844][ T8] ? xas_load+0x39e/0x3b0 [ 194.285876][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 194.285901][ T8] ? __kasan_check_write+0x14/0x20 [ 194.289621][ T28] audit: type=1326 audit(1754539021.527:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.292124][ T8] ? __filemap_get_folio+0x81c/0x980 [ 194.298135][ T28] audit: type=1326 audit(1754539021.527:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.302326][ T8] ? __kasan_check_read+0x11/0x20 [ 194.333987][ T28] audit: type=1326 audit(1754539021.527:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d678ebe9 code=0x7fc00000 [ 194.335201][ T8] ? folio_mark_accessed+0x1b8/0x3f0 [ 194.335238][ T8] ? __kasan_check_write+0x14/0x20 [ 194.430739][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 194.436050][ T8] do_writepages+0x3a9/0x5e0 [ 194.440640][ T8] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 194.446280][ T8] ? __cfi_do_writepages+0x10/0x10 [ 194.451405][ T8] ? __kasan_check_write+0x14/0x20 [ 194.456524][ T8] ? _raw_spin_lock+0x8e/0xe0 [ 194.461219][ T8] __writeback_single_inode+0xc6/0xad0 [ 194.466678][ T8] ? inode_io_list_move_locked+0x366/0x3d0 [ 194.472522][ T8] writeback_sb_inodes+0x9b8/0x1550 [ 194.477763][ T8] ? check_preempt_wakeup+0x7fd/0xbc0 [ 194.483140][ T8] ? queue_io+0x4c0/0x4c0 [ 194.487498][ T8] ? __kasan_check_read+0x11/0x20 [ 194.492561][ T8] ? queue_io+0x382/0x4c0 [ 194.496900][ T8] wb_writeback+0x3f1/0x980 [ 194.501421][ T8] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 194.507405][ T8] ? set_worker_desc+0x155/0x1c0 [ 194.512354][ T8] ? update_load_avg+0x4c2/0x13f0 [ 194.517390][ T8] ? __kasan_check_write+0x14/0x20 [ 194.522515][ T8] ? sched_clock_cpu+0x6e/0x250 [ 194.527378][ T8] wb_workfn+0x350/0xda0 [ 194.531637][ T8] ? __cfi_wb_workfn+0x10/0x10 [ 194.536413][ T8] ? kthread_data+0x50/0xc0 [ 194.540936][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 194.545788][ T8] ? finish_task_switch+0x16b/0x7b0 [ 194.550997][ T8] ? __switch_to_asm+0x3a/0x60 [ 194.555762][ T8] ? __schedule+0xb8f/0x14e0 [ 194.560375][ T8] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 194.565921][ T8] process_one_work+0x71f/0xc40 [ 194.570779][ T8] worker_thread+0xa29/0x11f0 [ 194.575465][ T8] kthread+0x281/0x320 [ 194.579537][ T8] ? __cfi_worker_thread+0x10/0x10 [ 194.584647][ T8] ? __cfi_kthread+0x10/0x10 [ 194.589241][ T8] ret_from_fork+0x1f/0x30 [ 194.593763][ T8] [ 194.596926][ T8] Modules linked in: [ 194.604996][ T8] ---[ end trace 0000000000000000 ]--- [ 194.610575][ T8] RIP: 0010:ext4_writepages+0x2ff8/0x3020 [ 194.616697][ T8] Code: 9e 86 ff 84 db 75 31 e8 66 9b 86 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 18 4c 8b 6c 24 38 e9 a2 f7 ff ff e8 48 9b 86 ff <0f> 0b e8 41 9b 86 ff e8 68 13 17 ff eb 93 e8 35 9b 86 ff e8 5c 13 [ 194.636826][ T8] RSP: 0018:ffffc90000087120 EFLAGS: 00010293 [ 194.643091][ T8] RAX: ffffffff81e96738 RBX: 000000c410000000 RCX: ffff888100399440 [ 194.651313][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 194.659465][ T8] RBP: ffffc90000087490 R08: dffffc0000000000 R09: ffffed10268112e7 [ 194.667746][ T8] R10: ffffed10268112e7 R11: 1ffff110268112e6 R12: dffffc0000000000 [ 194.675984][ T8] R13: ffff888134089848 R14: 0000008000000000 R15: ffff888134089730 [ 194.684156][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 194.693647][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.707225][ T8] CR2: 00007fa4c813ff98 CR3: 0000000107e0c000 CR4: 00000000003506a0 [ 194.715426][ T8] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 194.723422][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.731543][ T8] Kernel panic - not syncing: Fatal exception [ 194.737914][ T8] Kernel Offset: disabled [ 194.742246][ T8] Rebooting in 86400 seconds..