last executing test programs: 3.611776538s ago: executing program 4 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6tnl0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'wg2\x00'}) 3.508707266s ago: executing program 4 (id=1827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffbf660000000000000000850000003600000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.371761738s ago: executing program 1 (id=1836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.371571758s ago: executing program 0 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3.371497298s ago: executing program 2 (id=1838): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) 3.371411058s ago: executing program 0 (id=1839): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xe1f4}, 0x50) 3.371204078s ago: executing program 4 (id=1840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x2d}]}) 3.307368243s ago: executing program 2 (id=1841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x72, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.247785908s ago: executing program 1 (id=1843): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.247528398s ago: executing program 0 (id=1844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.247298568s ago: executing program 4 (id=1845): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) close(r0) 3.247160908s ago: executing program 3 (id=1846): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3.247025108s ago: executing program 2 (id=1847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 3.246865318s ago: executing program 1 (id=1848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2.860859839s ago: executing program 4 (id=1849): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="80", 0x1, 0x20000045, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000039c0)=[{{&(0x7f00000004c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x80c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) 2.860486969s ago: executing program 0 (id=1850): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x338, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendto$inet(r6, &(0x7f0000000040)="cd", 0x1, 0x20000004, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r10, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r9], 0x80}}, 0x0) 2.860131029s ago: executing program 2 (id=1851): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x338, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendto$inet(r6, &(0x7f0000000040)="cd", 0x1, 0x20000004, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x400) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r10, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r9], 0x80}}, 0x0) 2.860000209s ago: executing program 1 (id=1852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x2000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x299509c, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@subj_role={'subj_role', 0x3d, '/'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ashmem\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/ashmem\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'writeback_queue_io\x00'}}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 2.859771239s ago: executing program 3 (id=1853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x2000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x299509c, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@subj_role={'subj_role', 0x3d, '/'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ashmem\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/ashmem\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'writeback_queue_io\x00'}}]}) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000080)='$+\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000280)='writeback_queue_io\x00', r8}, 0x18) 1.638101338s ago: executing program 1 (id=1854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="0000b2a14600721700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x3, 0x0, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x154}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 1.637849628s ago: executing program 3 (id=1855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 1.414105246s ago: executing program 2 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x2000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000080)='$+\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.025118997s ago: executing program 0 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x2000004) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x299509c, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@subj_role={'subj_role', 0x3d, '/'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ashmem\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/ashmem\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'writeback_queue_io\x00'}}]}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000080)='$+\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.010716049s ago: executing program 3 (id=1858): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000000700000003"], 0x50) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES32], 0xfd, 0x1505, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpid() syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x80000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 511.983249ms ago: executing program 1 (id=1859): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x800, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$TCFLSH(r5, 0x400455c8, 0x0) fallocate(r0, 0x10, 0x6, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0xa718a3b3f1a8c6ec) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) 511.117069ms ago: executing program 2 (id=1860): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e0001006970366772657461700000001800028014000700200100100000000000000000000000020800"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x3ffff) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000580)={0x5, {{0x2, 0x4e22, @remote}}, 0x1, 0x5, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @empty}}]}, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 286.534607ms ago: executing program 4 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1009}], 0x1, 0x8000007) 61.831745ms ago: executing program 0 (id=1862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) dup3(r0, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffb5, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = dup2(r6, r6) sendto$inet6(r7, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007040016000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400040012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r5, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 61.091395ms ago: executing program 3 (id=1863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 0s ago: executing program 3 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0xd23f764c64a91307, 0x0, 0x0) kernel console output (not intermixed with test programs): ]: vcpu2, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000089 [ 339.186443][ T5954] loop1: detected capacity change from 0 to 40427 [ 339.202647][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 339.214850][ T5954] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 339.230749][ T5954] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 339.249356][ T5954] F2FS-fs (loop1): invalid crc value [ 339.335110][ T5954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 339.367624][ T5954] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 339.374757][ T5954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 339.662728][ T3447] usb 3-1: USB disconnect, device number 10 [ 339.669283][ T3447] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 339.678863][ T3447] ftdi_sio 3-1:0.0: device disconnected [ 339.802047][ T63] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 339.995169][ T63] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.004690][ T63] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 340.017827][ T63] usb 1-1: config 1 has no interface number 1 [ 340.027074][ T63] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.047227][ T63] usb 1-1: config 1 interface 2 has no altsetting 0 [ 340.059445][ T63] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.074833][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.087004][ T63] usb 1-1: Product: syz [ 340.091208][ T63] usb 1-1: Manufacturer: syz [ 340.096062][ T63] usb 1-1: SerialNumber: syz [ 340.196499][ T5998] loop2: detected capacity change from 0 to 256 [ 340.203791][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 340.242160][ T5998] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 340.317099][ T63] usb 1-1: found format II with max.bitrate = 26774, frame size=13 [ 340.330188][ T63] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 340.346737][ T63] usb 1-1: selecting invalid altsetting 0 [ 340.377032][ T63] usb 1-1: USB disconnect, device number 13 [ 340.740986][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 340.741002][ T28] audit: type=1400 audit(1755002044.587:2137): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 340.862048][ T63] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 340.987196][ T28] audit: type=1400 audit(1755002044.837:2138): avc: denied { write } for pid=6023 comm="syz.4.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.069416][ T28] audit: type=1400 audit(1755002044.867:2139): avc: denied { read } for pid=6023 comm="syz.4.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.142479][ T6017] overlayfs: failed to resolve './file1': -2 [ 341.222942][ T6017] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1316'. [ 341.230159][ T28] audit: type=1400 audit(1755002044.947:2140): avc: denied { create } for pid=6020 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 341.279856][ T28] audit: type=1400 audit(1755002044.957:2141): avc: denied { read } for pid=6020 comm="syz.0.1318" name="event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.303064][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 341.308285][ T28] audit: type=1400 audit(1755002044.957:2142): avc: denied { open } for pid=6020 comm="syz.0.1318" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.335009][ T63] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 341.348466][ T63] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.358762][ T63] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 341.368774][ T28] audit: type=1400 audit(1755002044.967:2143): avc: denied { ioctl } for pid=6020 comm="syz.0.1318" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.394632][ T63] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 341.405017][ T63] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 341.434971][ T28] audit: type=1400 audit(1755002045.057:2144): avc: denied { create } for pid=6016 comm="syz.1.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.463717][ T63] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.511406][ T28] audit: type=1400 audit(1755002045.067:2145): avc: denied { write } for pid=6016 comm="syz.1.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.555960][ T6028] loop4: detected capacity change from 0 to 40427 [ 341.596156][ T6028] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 341.678636][ T6028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 341.679128][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.695388][ T28] audit: type=1400 audit(1755002045.067:2146): avc: denied { nlmsg_write } for pid=6016 comm="syz.1.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.700328][ T63] usb 4-1: SerialNumber: syz [ 341.772278][ T6028] F2FS-fs (loop4): invalid crc value [ 341.779809][ T6004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.844930][ T6028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 341.896135][ T6028] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 341.903220][ T6028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 342.598239][ T6067] loop2: detected capacity change from 0 to 512 [ 343.068454][ T6067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 343.086112][ T6067] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.093104][ T63] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 343.107821][ T63] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 343.121941][ T63] usb 4-1: USB disconnect, device number 16 [ 344.473064][ T284] EXT4-fs (loop2): unmounting filesystem. [ 345.587385][ T6104] loop1: detected capacity change from 0 to 256 [ 345.596010][ T6104] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 345.721144][ T6108] loop2: detected capacity change from 0 to 512 [ 345.839843][ T6108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 345.927385][ T6108] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.966349][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 345.966380][ T28] audit: type=1400 audit(1755002049.817:2156): avc: denied { view } for pid=6120 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 346.230882][ T28] audit: type=1400 audit(1755002049.987:2157): avc: denied { create } for pid=6120 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.269448][ T28] audit: type=1400 audit(1755002050.027:2158): avc: denied { bind } for pid=6120 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.290312][ T28] audit: type=1400 audit(1755002050.037:2159): avc: denied { setopt } for pid=6120 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.374069][ T28] audit: type=1400 audit(1755002050.227:2160): avc: denied { mount } for pid=6127 comm="syz.4.1338" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 346.430923][ T28] audit: type=1400 audit(1755002050.257:2161): avc: denied { watch } for pid=6127 comm="syz.4.1338" path="/264/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 346.541412][ T28] audit: type=1400 audit(1755002050.387:2162): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 346.904232][ T6133] loop3: detected capacity change from 0 to 40427 [ 346.911331][ T6133] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 346.922171][ T6133] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 346.931402][ T6133] F2FS-fs (loop3): invalid crc value [ 346.955293][ T6133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 347.248608][ T284] EXT4-fs (loop2): unmounting filesystem. [ 347.372153][ T28] audit: type=1400 audit(1755002051.217:2163): avc: denied { create } for pid=6149 comm="syz.1.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 347.399021][ T6133] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 347.439870][ T6133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 347.692093][ T1052] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 348.089231][ T28] audit: type=1400 audit(1755002051.937:2164): avc: denied { mount } for pid=6153 comm="syz.2.1343" name="/" dev="ramfs" ino=33008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 348.090617][ T6155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 348.120597][ T6155] overlayfs: failed to set xattr on upper [ 348.131924][ T28] audit: type=1400 audit(1755002051.937:2165): avc: denied { remount } for pid=6153 comm="syz.2.1343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 348.169360][ T6158] loop4: detected capacity change from 0 to 512 [ 348.199325][ T6160] mmap: syz.2.1347 (6160): VmData 167489536 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 348.202890][ T6158] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.223278][ T6158] EXT4-fs: Ignoring removed i_version option [ 348.235182][ T6158] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 348.297879][ T1052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 348.313595][ T1052] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 348.322975][ T1052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.336564][ T1052] usb 2-1: config 0 descriptor?? [ 348.352528][ T6151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.632865][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 348.774803][ T1052] logitech 0003:046D:C287.0018: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0 [ 348.803828][ T1052] logitech 0003:046D:C287.0018: no inputs found [ 348.943219][ T6180] loop3: detected capacity change from 0 to 256 [ 348.961386][ T6180] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 348.983312][ T1052] usb 2-1: USB disconnect, device number 16 [ 349.656049][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 350.069149][ T6227] loop4: detected capacity change from 0 to 256 [ 350.078471][ T6227] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 350.413548][ T6242] cgroup: Invalid name [ 350.781028][ T6245] loop3: detected capacity change from 0 to 4096 [ 350.828658][ T6245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 351.257065][ T6258] FAULT_INJECTION: forcing a failure. [ 351.257065][ T6258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.270362][ T6258] CPU: 1 PID: 6258 Comm: syz.4.1370 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 351.282027][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.292167][ T6258] Call Trace: [ 351.295448][ T6258] [ 351.298371][ T6258] __dump_stack+0x21/0x24 [ 351.302727][ T6258] dump_stack_lvl+0xee/0x150 [ 351.307330][ T6258] ? __cfi_dump_stack_lvl+0x8/0x8 [ 351.312444][ T6258] ? memcpy+0x56/0x70 [ 351.316431][ T6258] dump_stack+0x15/0x24 [ 351.320585][ T6258] should_fail_ex+0x3d4/0x520 [ 351.325251][ T6258] should_fail+0xb/0x10 [ 351.329394][ T6258] should_fail_usercopy+0x1a/0x20 [ 351.334497][ T6258] strncpy_from_user+0x24/0x2d0 [ 351.339452][ T6258] bpf_prog_load+0x1bb/0x15a0 [ 351.344259][ T6258] ? map_freeze+0x390/0x390 [ 351.348940][ T6258] ? selinux_bpf+0xc7/0xf0 [ 351.353349][ T6258] ? security_bpf+0x93/0xb0 [ 351.357851][ T6258] __sys_bpf+0x504/0x780 [ 351.362095][ T6258] ? __kasan_check_read+0x11/0x20 [ 351.367125][ T6258] ? bpf_link_show_fdinfo+0x320/0x320 [ 351.372529][ T6258] ? sysvec_reschedule_ipi+0x78/0x80 [ 351.377920][ T6258] ? fpregs_restore_userregs+0x128/0x260 [ 351.383657][ T6258] __x64_sys_bpf+0x7c/0x90 [ 351.390367][ T6258] x64_sys_call+0x488/0x9a0 [ 351.395304][ T6258] do_syscall_64+0x4c/0xa0 [ 351.399730][ T6258] ? clear_bhb_loop+0x30/0x80 [ 351.404394][ T6258] ? clear_bhb_loop+0x30/0x80 [ 351.409230][ T6258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.415114][ T6258] RIP: 0033:0x7f8e0118ebe9 [ 351.419525][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.439228][ T6258] RSP: 002b:00007f8e01f81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.447758][ T6258] RAX: ffffffffffffffda RBX: 00007f8e013b6180 RCX: 00007f8e0118ebe9 [ 351.456176][ T6258] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 351.464243][ T6258] RBP: 00007f8e01f81090 R08: 0000000000000000 R09: 0000000000000000 [ 351.472290][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.480269][ T6258] R13: 00007f8e013b6218 R14: 00007f8e013b6180 R15: 00007fff72304168 [ 351.488228][ T6258] [ 351.623183][ T286] EXT4-fs (loop3): unmounting filesystem. [ 352.179915][ T6267] IPv6: sit1: Disabled Multicast RS [ 352.388823][ T6278] loop4: detected capacity change from 0 to 256 [ 352.662627][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 352.662682][ T28] audit: type=1400 audit(1755002056.237:2178): avc: denied { bpf } for pid=6268 comm="syz.4.1375" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.713022][ T6278] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 352.916325][ T6283] loop2: detected capacity change from 0 to 512 [ 352.919247][ T28] audit: type=1400 audit(1755002056.237:2179): avc: denied { map_create } for pid=6268 comm="syz.4.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.940538][ T6283] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.962659][ T28] audit: type=1400 audit(1755002056.237:2180): avc: denied { map_read map_write } for pid=6268 comm="syz.4.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.983142][ T28] audit: type=1400 audit(1755002056.237:2181): avc: denied { prog_load } for pid=6268 comm="syz.4.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.005106][ T6283] EXT4-fs: Ignoring removed i_version option [ 353.012859][ T6283] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 353.013878][ T28] audit: type=1400 audit(1755002056.237:2182): avc: denied { perfmon } for pid=6268 comm="syz.4.1375" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.023347][ T6287] devpts: called with bogus options [ 353.040921][ T28] audit: type=1400 audit(1755002056.237:2183): avc: denied { prog_run } for pid=6268 comm="syz.4.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.076552][ T6288] loop3: detected capacity change from 0 to 256 [ 353.082961][ T28] audit: type=1400 audit(1755002056.237:2184): avc: denied { read write } for pid=6268 comm="syz.4.1375" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.083011][ T28] audit: type=1400 audit(1755002056.237:2185): avc: denied { open } for pid=6268 comm="syz.4.1375" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.083030][ T28] audit: type=1400 audit(1755002056.237:2186): avc: denied { ioctl } for pid=6268 comm="syz.4.1375" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.083049][ T28] audit: type=1400 audit(1755002056.257:2187): avc: denied { mounton } for pid=6268 comm="syz.4.1375" path="/271/file1" dev="tmpfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 353.194025][ T5656] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.208364][ T6288] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 353.287180][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'. [ 353.342113][ T464] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 353.543377][ T464] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.551767][ T464] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 353.561094][ T464] usb 1-1: config 1 has no interface number 1 [ 353.567774][ T464] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 353.581278][ T464] usb 1-1: config 1 interface 2 has no altsetting 0 [ 353.593817][ T464] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.603563][ T464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.630057][ T464] usb 1-1: Product: syz [ 353.635214][ T464] usb 1-1: Manufacturer: syz [ 353.640492][ T464] usb 1-1: SerialNumber: syz [ 353.788001][ T6316] loop3: detected capacity change from 0 to 512 [ 353.803583][ T6316] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 353.812779][ T6316] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.847872][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 353.862378][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 353.869433][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 353.884047][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 353.891256][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 353.906004][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 353.908095][ T464] usb 1-1: found format II with max.bitrate = 26774, frame size=13 [ 353.913423][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 353.920944][ T464] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 353.935060][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 353.941295][ T464] usb 1-1: selecting invalid altsetting 0 [ 353.952673][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 353.967864][ T464] usb 1-1: USB disconnect, device number 14 [ 353.968890][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 354.252047][ T616] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 354.271606][ T6320] loop1: detected capacity change from 0 to 16 [ 354.280480][ T6320] erofs: (device loop1): mounted with root inode @ nid 36. [ 354.451671][ T6331] devpts: called with bogus options [ 354.473422][ T616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 354.482366][ T616] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 354.491478][ T616] usb 4-1: config 1 has no interface number 1 [ 354.497836][ T616] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 354.512075][ T616] usb 4-1: config 1 interface 2 has no altsetting 0 [ 354.534067][ T616] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.570540][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'. [ 354.590089][ T616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.598447][ T616] usb 4-1: Product: syz [ 354.603044][ T616] usb 4-1: Manufacturer: syz [ 354.608418][ T616] usb 4-1: SerialNumber: syz [ 354.823320][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 354.837843][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 354.846677][ T6316] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1386: lblock 23 mapped to illegal pblock 18 (length 1) [ 354.847848][ T616] usb 4-1: found format II with max.bitrate = 26774, frame size=13 [ 354.861208][ T6316] EXT4-fs (loop3): Remounting filesystem read-only [ 354.868934][ T616] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 354.881501][ T616] usb 4-1: selecting invalid altsetting 0 [ 354.890490][ T616] usb 4-1: USB disconnect, device number 17 [ 355.092711][ T5656] udevd[5656]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.287192][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 355.418697][ T286] EXT4-fs (loop3): unmounting filesystem. [ 355.444615][ T6367] loop1: detected capacity change from 0 to 256 [ 355.453309][ T6367] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 356.449277][ T6385] devpts: called with bogus options [ 356.790941][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1406'. [ 357.401163][ T6386] loop1: detected capacity change from 0 to 4096 [ 357.410450][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 357.474226][ T6402] loop4: detected capacity change from 0 to 512 [ 357.483758][ T6400] loop2: detected capacity change from 0 to 512 [ 357.523845][ T6400] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.548165][ T6386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 357.557212][ T6400] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 357.568104][ T6402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 357.590805][ T6400] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8002e01c, mo2=0006] [ 357.607613][ T6402] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.618939][ T6400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 357.631119][ T6400] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 357.641405][ T6400] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8002e01c, mo2=0006] [ 357.649596][ T6400] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 357.664238][ T6418] loop3: detected capacity change from 0 to 512 [ 357.723231][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 357.723246][ T28] audit: type=1400 audit(1755002061.577:2285): avc: denied { name_bind } for pid=6399 comm="syz.2.1407" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 357.811749][ T28] audit: type=1400 audit(1755002061.577:2286): avc: denied { node_bind } for pid=6399 comm="syz.2.1407" saddr=fc01:: src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 357.837781][ T6418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 357.859666][ T6418] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.131100][ T28] audit: type=1400 audit(1755002061.957:2287): avc: denied { append } for pid=6401 comm="syz.4.1408" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.168517][ T6418] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1410: lblock 23 mapped to illegal pblock 18 (length 1) [ 358.246896][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 358.278438][ T6427] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1410: lblock 23 mapped to illegal pblock 18 (length 1) [ 358.309538][ T6427] EXT4-fs (loop3): Remounting filesystem read-only [ 358.332174][ T6418] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1410: lblock 23 mapped to illegal pblock 18 (length 1) [ 358.356902][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 358.372552][ T6427] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1410: lblock 23 mapped to illegal pblock 18 (length 1) [ 358.377633][ T6] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 358.399691][ T6427] EXT4-fs (loop3): Remounting filesystem read-only [ 358.414982][ T283] EXT4-fs (loop4): unmounting filesystem. [ 358.421796][ T284] EXT4-fs (loop2): unmounting filesystem. [ 358.422782][ T6418] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1410: lblock 23 mapped to illegal pblock 18 (length 1) [ 358.446779][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 358.478303][ T28] audit: type=1400 audit(1755002062.327:2288): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.518199][ T28] audit: type=1400 audit(1755002062.327:2289): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.543086][ T28] audit: type=1400 audit(1755002062.327:2290): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.603097][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.613570][ T28] audit: type=1400 audit(1755002062.327:2291): avc: denied { read write } for pid=6417 comm="syz.3.1410" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 358.929689][ T6448] loop2: detected capacity change from 0 to 256 [ 358.947647][ T6448] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 359.050907][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.115765][ T502] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 359.210003][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.269335][ T28] audit: type=1400 audit(1755002062.327:2292): avc: denied { open } for pid=6417 comm="syz.3.1410" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.269764][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.301278][ T6] usb 2-1: SerialNumber: syz [ 359.560297][ T28] audit: type=1400 audit(1755002062.327:2293): avc: denied { ioctl } for pid=6417 comm="syz.3.1410" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.625072][ T28] audit: type=1400 audit(1755002062.327:2294): avc: denied { bpf } for pid=6428 comm="syz.0.1413" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 359.650054][ T287] EXT4-fs (loop1): unmounting filesystem. [ 359.668043][ T6] usb 2-1: can't set config #1, error -71 [ 359.676014][ T6] usb 2-1: USB disconnect, device number 17 [ 359.763405][ T502] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.798775][ T502] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.810551][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 359.820132][ T502] usb 4-1: config 1 has no interface number 1 [ 359.861203][ T502] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 359.874339][ T502] usb 4-1: config 1 interface 2 has no altsetting 0 [ 359.964064][ T6468] loop1: detected capacity change from 0 to 256 [ 359.975273][ T6468] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 359.987897][ T502] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.030083][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.048356][ T502] usb 4-1: Product: syz [ 360.056748][ T502] usb 4-1: Manufacturer: syz [ 360.067611][ T502] usb 4-1: SerialNumber: syz [ 360.186178][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 360.343951][ T6418] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1410: lblock 23 mapped to illegal pblock 18 (length 1) [ 360.364466][ T6418] EXT4-fs (loop3): Remounting filesystem read-only [ 360.429463][ T502] usb 4-1: found format II with max.bitrate = 26774, frame size=13 [ 360.439683][ T502] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 360.449017][ T502] usb 4-1: selecting invalid altsetting 0 [ 360.468146][ T502] usb 4-1: USB disconnect, device number 18 [ 360.734887][ T6480] FAULT_INJECTION: forcing a failure. [ 360.734887][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 360.749634][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 360.758670][ T6480] CPU: 0 PID: 6480 Comm: syz.4.1422 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 360.769958][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.780018][ T6480] Call Trace: [ 360.783390][ T6480] [ 360.786416][ T6480] __dump_stack+0x21/0x24 [ 360.791019][ T6480] dump_stack_lvl+0xee/0x150 [ 360.795623][ T6480] ? __cfi_dump_stack_lvl+0x8/0x8 [ 360.800664][ T6480] dump_stack+0x15/0x24 [ 360.804822][ T6480] should_fail_ex+0x3d4/0x520 [ 360.809513][ T6480] __should_failslab+0xac/0xf0 [ 360.814276][ T6480] ? bpf_prog_test_run_skb+0x24f/0x1290 [ 360.819831][ T6480] should_failslab+0x9/0x20 [ 360.824341][ T6480] __kmem_cache_alloc_node+0x3d/0x2c0 [ 360.829729][ T6480] ? bpf_prog_test_run_skb+0x24f/0x1290 [ 360.835461][ T6480] __kmalloc+0xa1/0x1e0 [ 360.839625][ T6480] bpf_prog_test_run_skb+0x24f/0x1290 [ 360.844996][ T6480] ? __fget_files+0x2d5/0x330 [ 360.849679][ T6480] ? __kasan_check_write+0x14/0x20 [ 360.854794][ T6480] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 360.860604][ T6480] bpf_prog_test_run+0x3e3/0x630 [ 360.865627][ T6480] ? slab_free_freelist_hook+0xc2/0x190 [ 360.871177][ T6480] ? bpf_prog_query+0x270/0x270 [ 360.876031][ T6480] ? selinux_bpf+0xce/0xf0 [ 360.880441][ T6480] ? security_bpf+0x93/0xb0 [ 360.884935][ T6480] __sys_bpf+0x56d/0x780 [ 360.889175][ T6480] ? bpf_link_show_fdinfo+0x320/0x320 [ 360.894553][ T6480] ? __cfi_ksys_write+0x10/0x10 [ 360.899405][ T6480] ? debug_smp_processor_id+0x17/0x20 [ 360.904776][ T6480] __x64_sys_bpf+0x7c/0x90 [ 360.909202][ T6480] x64_sys_call+0x488/0x9a0 [ 360.913730][ T6480] do_syscall_64+0x4c/0xa0 [ 360.918147][ T6480] ? clear_bhb_loop+0x30/0x80 [ 360.922818][ T6480] ? clear_bhb_loop+0x30/0x80 [ 360.927494][ T6480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.933383][ T6480] RIP: 0033:0x7f8e0118ebe9 [ 360.937804][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.957409][ T6480] RSP: 002b:00007f8e01fc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.965832][ T6480] RAX: ffffffffffffffda RBX: 00007f8e013b5fa0 RCX: 00007f8e0118ebe9 [ 360.973819][ T6480] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 360.981883][ T6480] RBP: 00007f8e01fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 360.989864][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.997852][ T6480] R13: 00007f8e013b6038 R14: 00007f8e013b5fa0 R15: 00007fff72304168 [ 361.005832][ T6480] [ 361.028291][ T286] EXT4-fs (loop3): unmounting filesystem. [ 361.066979][ T6487] devpts: called with bogus options [ 361.095152][ T6489] loop4: detected capacity change from 0 to 512 [ 361.171708][ T6485] 9pnet_fd: Insufficient options for proto=fd [ 361.183106][ T6489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 361.195850][ T6489] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.716853][ T6503] loop3: detected capacity change from 0 to 256 [ 361.769032][ T6503] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 363.677899][ T6515] devpts: called with bogus options [ 363.916270][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 363.931018][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 363.931040][ T28] audit: type=1400 audit(1755002067.777:2335): avc: denied { connect } for pid=6512 comm="syz.3.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 364.598496][ T28] audit: type=1400 audit(1755002068.407:2336): avc: denied { append } for pid=6488 comm="syz.4.1426" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.092615][ T28] audit: type=1400 audit(1755002068.947:2337): avc: denied { name_bind } for pid=6518 comm="syz.0.1433" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 365.132033][ T28] audit: type=1400 audit(1755002068.947:2338): avc: denied { node_bind } for pid=6518 comm="syz.0.1433" saddr=::ffff:255.255.255.255 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 365.202041][ T28] audit: type=1400 audit(1755002069.017:2339): avc: denied { read } for pid=6518 comm="syz.0.1433" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 365.247216][ T6543] loop3: detected capacity change from 0 to 40427 [ 365.253785][ T28] audit: type=1400 audit(1755002069.017:2340): avc: denied { open } for pid=6518 comm="syz.0.1433" path="net:[4026532387]" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 365.305410][ T28] audit: type=1400 audit(1755002069.017:2341): avc: denied { create } for pid=6518 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.325631][ T6543] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 365.333683][ T6543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 365.342997][ T6543] F2FS-fs (loop3): invalid crc value [ 365.348433][ T28] audit: type=1400 audit(1755002069.017:2342): avc: denied { setopt } for pid=6518 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.368756][ T28] audit: type=1400 audit(1755002069.017:2343): avc: denied { bind } for pid=6518 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.388701][ T28] audit: type=1400 audit(1755002069.017:2344): avc: denied { ioctl } for pid=6518 comm="syz.0.1433" path="socket:[33423]" dev="sockfs" ino=33423 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.448821][ T6543] F2FS-fs (loop3): Found nat_bits in checkpoint [ 365.492013][ T6543] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 365.807209][ T6554] loop1: detected capacity change from 0 to 256 [ 365.828285][ T6554] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 365.842831][ T6543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 366.513325][ T6558] loop2: detected capacity change from 0 to 256 [ 366.866949][ T2848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 367.111214][ T6558] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 367.457352][ T6543] FAULT_INJECTION: forcing a failure. [ 367.457352][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 367.470750][ T283] EXT4-fs (loop4): unmounting filesystem. [ 367.503645][ T6543] CPU: 1 PID: 6543 Comm: syz.3.1438 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 367.515048][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.525106][ T6543] Call Trace: [ 367.528407][ T6543] [ 367.531338][ T6543] __dump_stack+0x21/0x24 [ 367.535682][ T6543] dump_stack_lvl+0xee/0x150 [ 367.540267][ T6543] ? __cfi_dump_stack_lvl+0x8/0x8 [ 367.545285][ T6543] dump_stack+0x15/0x24 [ 367.549437][ T6543] should_fail_ex+0x3d4/0x520 [ 367.554101][ T6543] __should_failslab+0xac/0xf0 [ 367.558850][ T6543] ? alloc_pipe_info+0x1fc/0x4b0 [ 367.563783][ T6543] should_failslab+0x9/0x20 [ 367.568279][ T6543] __kmem_cache_alloc_node+0x3d/0x2c0 [ 367.573634][ T6543] ? alloc_pipe_info+0x1fc/0x4b0 [ 367.578557][ T6543] __kmalloc+0xa1/0x1e0 [ 367.582707][ T6543] alloc_pipe_info+0x1fc/0x4b0 [ 367.587462][ T6543] splice_direct_to_actor+0x956/0xb10 [ 367.592821][ T6543] ? kstrtouint+0x74/0xe0 [ 367.597139][ T6543] ? selinux_file_permission+0x2a5/0x510 [ 367.602753][ T6543] ? fsnotify_perm+0x67/0x5b0 [ 367.607512][ T6543] ? security_file_permission+0x8a/0xb0 [ 367.613131][ T6543] ? __cfi_direct_splice_actor+0x10/0x10 [ 367.618750][ T6543] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 367.624626][ T6543] ? security_file_permission+0x94/0xb0 [ 367.630156][ T6543] ? rw_verify_area+0xa7/0x1c0 [ 367.634906][ T6543] do_splice_direct+0x1b3/0x2c0 [ 367.639740][ T6543] ? avc_policy_seqno+0x1b/0x70 [ 367.644588][ T6543] ? __cfi_do_splice_direct+0x10/0x10 [ 367.649947][ T6543] ? security_file_permission+0x94/0xb0 [ 367.655474][ T6543] do_sendfile+0x5c6/0xeb0 [ 367.659870][ T6543] ? __cfi_vfs_write+0x10/0x10 [ 367.664617][ T6543] ? do_preadv+0x330/0x330 [ 367.669014][ T6543] ? __kasan_check_write+0x14/0x20 [ 367.674171][ T6543] ? fput+0x154/0x1a0 [ 367.678201][ T6543] __x64_sys_sendfile64+0x18f/0x1f0 [ 367.683376][ T6543] ? __cfi_ksys_write+0x10/0x10 [ 367.688222][ T6543] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 367.693929][ T6543] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 367.700006][ T6543] x64_sys_call+0x62c/0x9a0 [ 367.704512][ T6543] do_syscall_64+0x4c/0xa0 [ 367.709014][ T6543] ? clear_bhb_loop+0x30/0x80 [ 367.713726][ T6543] ? clear_bhb_loop+0x30/0x80 [ 367.718401][ T6543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.724387][ T6543] RIP: 0033:0x7f6cee38ebe9 [ 367.728889][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.748511][ T6543] RSP: 002b:00007f6cef1e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 367.756926][ T6543] RAX: ffffffffffffffda RBX: 00007f6cee5b5fa0 RCX: 00007f6cee38ebe9 [ 367.764895][ T6543] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 367.772862][ T6543] RBP: 00007f6cef1e2090 R08: 0000000000000000 R09: 0000000000000000 [ 367.780907][ T6543] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 367.788858][ T6543] R13: 00007f6cee5b6038 R14: 00007f6cee5b5fa0 R15: 00007ffe5eb55a68 [ 367.796823][ T6543] [ 367.827390][ T6567] loop4: detected capacity change from 0 to 512 [ 367.862606][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 367.882401][ T6567] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.533868][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 369.363127][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 369.471554][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 369.478300][ T28] audit: type=1400 audit(1755002073.317:2353): avc: denied { create } for pid=6584 comm="syz.0.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.552814][ T283] EXT4-fs (loop4): unmounting filesystem. [ 369.603547][ T28] audit: type=1400 audit(1755002073.327:2354): avc: denied { write } for pid=6584 comm="syz.0.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.304613][ T28] audit: type=1400 audit(1755002074.157:2355): avc: denied { load_policy } for pid=6592 comm="syz.4.1449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 370.362268][ T6599] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 370.371857][ T6599] SELinux: failed to load policy [ 370.382884][ T28] audit: type=1400 audit(1755002074.237:2356): avc: denied { bind } for pid=6602 comm="syz.1.1453" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.415670][ T28] audit: type=1400 audit(1755002074.237:2357): avc: denied { node_bind } for pid=6602 comm="syz.1.1453" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 370.474809][ T28] audit: type=1400 audit(1755002074.267:2358): avc: denied { connect } for pid=6602 comm="syz.1.1453" laddr=172.20.20.170 lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.531763][ T28] audit: type=1400 audit(1755002074.377:2359): avc: denied { watch watch_reads } for pid=6605 comm="syz.2.1454" path="/278/file0" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.565209][ T28] audit: type=1400 audit(1755002074.417:2360): avc: denied { execute } for pid=6605 comm="syz.2.1454" name="file0" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.588220][ T6601] loop3: detected capacity change from 0 to 40427 [ 370.684031][ T6601] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 370.793890][ T6601] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 370.803334][ T28] audit: type=1400 audit(1755002074.417:2361): avc: denied { execute_no_trans } for pid=6605 comm="syz.2.1454" path="/278/file0" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.832573][ T6601] F2FS-fs (loop3): invalid crc value [ 370.839361][ T6601] F2FS-fs (loop3): Found nat_bits in checkpoint [ 370.877585][ T6601] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 370.884810][ T6601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 371.047299][ T6620] loop4: detected capacity change from 0 to 256 [ 371.996047][ T6622] loop2: detected capacity change from 0 to 256 [ 372.003920][ T6624] FAULT_INJECTION: forcing a failure. [ 372.003920][ T6624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.016989][ T6624] CPU: 0 PID: 6624 Comm: syz.4.1457 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 372.028269][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.038320][ T6624] Call Trace: [ 372.041590][ T6624] [ 372.044513][ T6624] __dump_stack+0x21/0x24 [ 372.048854][ T6624] dump_stack_lvl+0xee/0x150 [ 372.053440][ T6624] ? __cfi_dump_stack_lvl+0x8/0x8 [ 372.058460][ T6624] dump_stack+0x15/0x24 [ 372.062615][ T6624] should_fail_ex+0x3d4/0x520 [ 372.067555][ T6624] should_fail+0xb/0x10 [ 372.071704][ T6624] should_fail_usercopy+0x1a/0x20 [ 372.076725][ T6624] _copy_from_user+0x1e/0xc0 [ 372.081305][ T6624] __sys_sendto+0x2c0/0x5e0 [ 372.085804][ T6624] ? slab_free_freelist_hook+0xc2/0x190 [ 372.091351][ T6624] ? __cfi___sys_sendto+0x10/0x10 [ 372.096390][ T6624] ? ksys_write+0x1eb/0x240 [ 372.100909][ T6624] ? __cfi_ksys_write+0x10/0x10 [ 372.105766][ T6624] __x64_sys_sendto+0xe5/0x100 [ 372.110538][ T6624] x64_sys_call+0x83/0x9a0 [ 372.114951][ T6624] do_syscall_64+0x4c/0xa0 [ 372.119364][ T6624] ? clear_bhb_loop+0x30/0x80 [ 372.124035][ T6624] ? clear_bhb_loop+0x30/0x80 [ 372.128709][ T6624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.134600][ T6624] RIP: 0033:0x7f8e0118ebe9 [ 372.139008][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.158606][ T6624] RSP: 002b:00007f8e01f81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.167020][ T6624] RAX: ffffffffffffffda RBX: 00007f8e013b6180 RCX: 00007f8e0118ebe9 [ 372.174985][ T6624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 372.182952][ T6624] RBP: 00007f8e01f81090 R08: 0000200000000300 R09: 000000000000001c [ 372.190926][ T6624] R10: 0000000000044000 R11: 0000000000000246 R12: 0000000000000001 [ 372.198892][ T6624] R13: 00007f8e013b6218 R14: 00007f8e013b6180 R15: 00007fff72304168 [ 372.206863][ T6624] [ 372.211331][ T28] audit: type=1400 audit(1755002074.917:2362): avc: denied { mount } for pid=6619 comm="syz.4.1457" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 372.256313][ T6622] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 372.642569][ T6627] loop1: detected capacity change from 0 to 256 [ 373.054992][ T6641] loop2: detected capacity change from 0 to 1024 [ 374.502070][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 378.380178][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 378.380192][ T28] audit: type=1400 audit(1755002082.227:2367): avc: denied { read write } for pid=6640 comm="syz.2.1464" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.432486][ T6641] EXT4-fs: failed to create workqueue [ 378.449161][ T6641] EXT4-fs (loop2): mount failed [ 378.457126][ T28] audit: type=1400 audit(1755002082.227:2368): avc: denied { open } for pid=6640 comm="syz.2.1464" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.490623][ T28] audit: type=1400 audit(1755002082.277:2369): avc: denied { ioctl } for pid=6640 comm="syz.2.1464" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.901475][ T6670] loop3: detected capacity change from 0 to 256 [ 378.945363][ T6670] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 379.682441][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 380.242078][ T28] audit: type=1400 audit(1755002083.867:2370): avc: denied { write } for pid=6678 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.275007][ T6652] loop4: detected capacity change from 0 to 40427 [ 380.306863][ T28] audit: type=1400 audit(1755002083.867:2371): avc: denied { read } for pid=6678 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.315387][ T6652] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 380.367046][ T6652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.407202][ T6652] F2FS-fs (loop4): invalid crc value [ 380.477584][ T6652] F2FS-fs (loop4): Found nat_bits in checkpoint [ 380.814275][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 380.822706][ T6652] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 380.823355][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 380.834351][ T6652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 380.842441][ T6707] loop2: detected capacity change from 0 to 256 [ 380.895510][ T6707] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 380.913543][ T6707] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 380.964588][ T28] audit: type=1400 audit(1755002084.817:2372): avc: denied { write } for pid=6705 comm="syz.2.1476" path="/286/file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.011144][ T28] audit: type=1400 audit(1755002084.817:2373): avc: denied { create } for pid=6705 comm="syz.2.1476" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 381.053201][ T28] audit: type=1400 audit(1755002084.907:2374): avc: denied { lock } for pid=6705 comm="syz.2.1476" path="/286/file2/cpuset.effective_cpus" dev="loop2" ino=1048736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.240684][ T6712] loop2: detected capacity change from 0 to 4096 [ 381.288826][ T6712] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 381.992101][ T28] audit: type=1400 audit(1755002085.817:2375): avc: denied { mounton } for pid=6711 comm="syz.2.1478" path="/287/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.174559][ T284] EXT4-fs (loop2): unmounting filesystem. [ 382.192973][ T6730] loop3: detected capacity change from 0 to 2048 [ 382.232081][ T63] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 382.259724][ T6730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 382.269239][ T6730] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.300201][ T28] audit: type=1400 audit(1755002086.147:2376): avc: denied { setopt } for pid=6728 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.309731][ T6746] loop1: detected capacity change from 0 to 1024 [ 382.339445][ T6746] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1485: Invalid block bitmap block 0 in block_group 0 [ 382.392291][ T6749] loop2: detected capacity change from 0 to 256 [ 382.413049][ T6749] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 382.621921][ T286] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /275/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 382.756872][ T6746] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1485: Failed to acquire dquot type 0 [ 382.793849][ T6746] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1485: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.861095][ T6746] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1485: Invalid inode bitmap blk 0 in block_group 0 [ 382.924589][ T6746] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 382.966947][ T6746] EXT4-fs (loop1): 1 orphan inode deleted [ 382.994595][ T6746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 383.193616][ T1959] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:201: Failed to release dquot type 0 [ 383.206350][ T286] EXT4-fs (loop3): unmounting filesystem. [ 383.667812][ T6759] loop3: detected capacity change from 0 to 1024 [ 383.677411][ T63] usb 5-1: config 4 has an invalid interface number: 63 but max is 1 [ 383.694802][ T6759] EXT4-fs: Ignoring removed i_version option [ 383.703769][ T63] usb 5-1: config 4 has an invalid interface number: 97 but max is 1 [ 383.718067][ T6759] EXT4-fs (loop3): Test dummy encryption mode enabled [ 383.725407][ T63] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 383.736048][ T63] usb 5-1: config 4 has no interface number 0 [ 383.742860][ T63] usb 5-1: config 4 has no interface number 1 [ 383.749398][ T63] usb 5-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 383.763152][ T63] usb 5-1: config 4 interface 63 has no altsetting 0 [ 383.771434][ T6759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 383.781142][ T63] usb 5-1: config 4 interface 97 has no altsetting 0 [ 383.801218][ T63] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 383.810544][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.818875][ T63] usb 5-1: Product: syz [ 383.823412][ T63] usb 5-1: Manufacturer: syz [ 383.828501][ T63] usb 5-1: SerialNumber: syz [ 384.039057][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 384.062674][ T287] EXT4-fs (loop1): unmounting filesystem. [ 384.071107][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 384.111109][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 384.111127][ T28] audit: type=1400 audit(1755002087.957:2383): avc: denied { name_bind } for pid=6758 comm="syz.3.1486" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 384.139603][ T6765] loop4: detected capacity change from 0 to 256 [ 384.153729][ T6765] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 384.173463][ T6765] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 384.462109][ T3087] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 384.525220][ T286] EXT4-fs (loop3): unmounting filesystem. [ 384.556555][ T63] usb 5-1: USB disconnect, device number 15 [ 384.585588][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 384.622025][ T3087] usb 3-1: device descriptor read/64, error -71 [ 385.012040][ T3087] usb 3-1: device descriptor read/64, error -71 [ 385.052653][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 385.222037][ T6] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 385.274579][ T28] audit: type=1400 audit(1755002089.127:2384): avc: denied { create } for pid=6794 comm="syz.1.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 385.294053][ T3087] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 385.315343][ T6798] loop1: detected capacity change from 0 to 1024 [ 385.333362][ T6798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 385.341844][ T6798] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.368235][ T1862] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:104: lblock 1 mapped to illegal pblock 1 (length 15) [ 385.382979][ T1862] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 385.395573][ T1862] EXT4-fs (loop1): This should not happen!! Data will be lost [ 385.395573][ T1862] [ 385.406902][ T287] EXT4-fs (loop1): unmounting filesystem. [ 385.413121][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.422835][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 385.433806][ T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 385.442965][ T6] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.452338][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.460337][ T6] usb 4-1: Product: syz [ 385.462117][ T3087] usb 3-1: device descriptor read/64, error -71 [ 385.464763][ T6] usb 4-1: Manufacturer: syz [ 385.475644][ T6] usb 4-1: SerialNumber: syz [ 385.480914][ T6] usb 4-1: config 0 descriptor?? [ 385.623352][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.637328][ T19] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 385.647148][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.667512][ T19] usb 5-1: config 0 descriptor?? [ 385.746254][ T3087] usb 3-1: device descriptor read/64, error -71 [ 385.855034][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 385.872104][ T3087] usb usb3-port1: attempt power cycle [ 386.175318][ T19] sony 0003:054C:024B.0019: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.4-1/input0 [ 386.187128][ T19] sony 0003:054C:024B.0019: failed to claim input [ 386.282046][ T3087] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 386.313125][ T3087] usb 3-1: device descriptor read/8, error -71 [ 386.375474][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.384039][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.463188][ T3087] usb 3-1: device descriptor read/8, error -71 [ 386.560872][ T28] audit: type=1400 audit(1755002090.407:2385): avc: denied { create } for pid=6826 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.716549][ T28] audit: type=1400 audit(1755002090.567:2386): avc: denied { mount } for pid=6826 comm="syz.1.1505" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 386.772041][ T3087] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 386.803196][ T3087] usb 3-1: device descriptor read/8, error -71 [ 386.953085][ T3087] usb 3-1: device descriptor read/8, error -71 [ 387.072114][ T3087] usb usb3-port1: unable to enumerate USB device [ 387.335865][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 387.598680][ T6] usb 4-1: USB disconnect, device number 19 [ 387.613908][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 387.640079][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 387.756068][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 388.005025][ T6854] FAULT_INJECTION: forcing a failure. [ 388.005025][ T6854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.018131][ T6854] CPU: 1 PID: 6854 Comm: syz.3.1511 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 388.029420][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.039556][ T6854] Call Trace: [ 388.042833][ T6854] [ 388.045761][ T6854] __dump_stack+0x21/0x24 [ 388.050090][ T6854] dump_stack_lvl+0xee/0x150 [ 388.054676][ T6854] ? __cfi_dump_stack_lvl+0x8/0x8 [ 388.059705][ T6854] ? push_rt_task+0x35f/0x5b0 [ 388.064387][ T6854] dump_stack+0x15/0x24 [ 388.068541][ T6854] should_fail_ex+0x3d4/0x520 [ 388.073215][ T6854] should_fail+0xb/0x10 [ 388.077363][ T6854] should_fail_usercopy+0x1a/0x20 [ 388.082558][ T6854] _copy_from_user+0x1e/0xc0 [ 388.087156][ T6854] ___sys_sendmsg+0x155/0x290 [ 388.091843][ T6854] ? __sys_sendmsg+0x270/0x270 [ 388.096635][ T6854] __x64_sys_sendmsg+0x1f0/0x2c0 [ 388.101588][ T6854] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 388.107052][ T6854] ? __kasan_check_write+0x14/0x20 [ 388.112171][ T6854] ? fpregs_restore_userregs+0x128/0x260 [ 388.118063][ T6854] ? switch_fpu_return+0xe/0x10 [ 388.122913][ T6854] x64_sys_call+0x171/0x9a0 [ 388.127593][ T6854] do_syscall_64+0x4c/0xa0 [ 388.132064][ T6854] ? clear_bhb_loop+0x30/0x80 [ 388.136742][ T6854] ? clear_bhb_loop+0x30/0x80 [ 388.141419][ T6854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.147314][ T6854] RIP: 0033:0x7f6cee38ebe9 [ 388.151732][ T6854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.171337][ T6854] RSP: 002b:00007f6cef1a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.179757][ T6854] RAX: ffffffffffffffda RBX: 00007f6cee5b6180 RCX: 00007f6cee38ebe9 [ 388.187735][ T6854] RDX: 000000000000c014 RSI: 0000200000000640 RDI: 0000000000000003 [ 388.195707][ T6854] RBP: 00007f6cef1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 388.203680][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.211649][ T6854] R13: 00007f6cee5b6218 R14: 00007f6cee5b6180 R15: 00007ffe5eb55a68 [ 388.219628][ T6854] [ 388.440084][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 388.507447][ T63] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 388.525641][ T6] usb 5-1: USB disconnect, device number 16 [ 388.540516][ T6878] loop4: detected capacity change from 0 to 1024 [ 388.581829][ T6878] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1517: Invalid block bitmap block 0 in block_group 0 [ 388.596366][ T28] audit: type=1400 audit(1755002092.447:2387): avc: denied { append } for pid=6881 comm="syz.1.1518" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 388.614377][ T6878] Quota error (device loop4): write_blk: dquota write failed [ 388.627506][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 388.640296][ T6878] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 388.650414][ T6878] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1517: Failed to acquire dquot type 0 [ 388.663982][ T6878] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.1517: Freeing blocks not in datazone - block = 0, count = 4096 [ 388.677570][ T6878] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1517: Invalid inode bitmap blk 0 in block_group 0 [ 388.690551][ T1959] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 388.699655][ T1959] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:201: Failed to release dquot type 0 [ 388.711573][ T6878] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 388.720383][ T6878] EXT4-fs (loop4): 1 orphan inode deleted [ 388.726319][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 388.731530][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 388.741786][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.763808][ T63] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 388.772734][ T63] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping [ 388.789873][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.799997][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.811752][ T283] EXT4-fs (loop4): unmounting filesystem. [ 388.824369][ T63] usb 4-1: Product: syz [ 388.828729][ T63] usb 4-1: Manufacturer: syz [ 388.833567][ T63] usb 4-1: SerialNumber: syz [ 389.585476][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 389.882830][ T28] audit: type=1400 audit(1755002093.737:2388): avc: denied { map } for pid=6922 comm="syz.0.1527" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.076411][ T28] audit: type=1400 audit(1755002093.927:2389): avc: denied { write } for pid=6928 comm="syz.4.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.096683][ T28] audit: type=1400 audit(1755002093.927:2390): avc: denied { nlmsg_write } for pid=6928 comm="syz.4.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.227029][ T28] audit: type=1400 audit(1755002094.077:2391): avc: denied { ioctl } for pid=6930 comm="syz.4.1530" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36091 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.345850][ T6934] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 390.392243][ T28] audit: type=1400 audit(1755002094.197:2392): avc: denied { mac_admin } for pid=6930 comm="syz.4.1530" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.419613][ T28] audit: type=1400 audit(1755002094.207:2393): avc: denied { relabelto } for pid=6930 comm="syz.4.1530" name="pids.max" dev="cgroup2" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 390.446453][ T28] audit: type=1400 audit(1755002094.207:2394): avc: denied { associate } for pid=6930 comm="syz.4.1530" name="pids.max" dev="cgroup2" ino=66 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 390.583552][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 390.880346][ T63] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 390.900527][ T63] usb 4-1: USB disconnect, device number 20 [ 391.437379][ T6963] IPv6: sit1: Disabled Multicast RS [ 391.832608][ T6976] loop3: detected capacity change from 0 to 128 [ 391.839206][ T6976] EXT4-fs: dax option not supported [ 391.857210][ T1862] Bluetooth: hci0: Frame reassembly failed (-84) [ 391.912521][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 392.454595][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 392.942603][ T28] audit: type=1400 audit(1755002096.797:2395): avc: denied { getopt } for pid=6986 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.973645][ T28] audit: type=1400 audit(1755002096.817:2396): avc: denied { setopt } for pid=6986 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.332243][ T6993] mmap: syz.0.1547 (6993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 393.357623][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1548'. [ 393.391812][ T6995] netem: change failed [ 393.782758][ T28] audit: type=1400 audit(1755002097.637:2397): avc: denied { read write } for pid=7007 comm="syz.0.1551" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 393.899357][ T6987] syz.2.1545 (6987) used greatest stack depth: 19056 bytes left [ 393.922979][ T2848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 393.923062][ T451] Bluetooth: hci0: command 0x1003 tx timeout [ 394.002707][ T2067] Bluetooth: hci0: Frame reassembly failed (-84) [ 394.009799][ T2067] Bluetooth: hci0: Frame reassembly failed (-84) [ 394.021635][ T2067] Bluetooth: hci0: Frame reassembly failed (-84) [ 396.090220][ T2848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 396.096485][ T451] Bluetooth: hci0: command 0x1003 tx timeout [ 397.335704][ T7031] loop4: detected capacity change from 0 to 256 [ 397.866307][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 397.930686][ T7031] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 398.408506][ T7041] netlink: 'syz.4.1559': attribute type 10 has an invalid length. [ 398.424532][ T7036] loop4: detected capacity change from 0 to 128 [ 398.483441][ T7036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 398.532231][ T7036] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 398.570841][ T63] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 398.642752][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1559'. [ 398.763132][ T63] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.778003][ T63] usb 1-1: config 0 has no interfaces? [ 398.789298][ T283] EXT4-fs (loop4): unmounting filesystem. [ 398.795279][ T63] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 398.805210][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.818415][ T63] usb 1-1: config 0 descriptor?? [ 399.580283][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 399.580297][ T28] audit: type=1400 audit(1755002103.427:2399): avc: denied { mount } for pid=7064 comm="syz.2.1565" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 399.999492][ T28] audit: type=1400 audit(1755002103.447:2400): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 400.074541][ T7078] loop3: detected capacity change from 0 to 1024 [ 400.081811][ T7080] loop2: detected capacity change from 0 to 256 [ 400.103089][ T28] audit: type=1400 audit(1755002103.957:2401): avc: denied { name_bind } for pid=7076 comm="syz.4.1569" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 400.114286][ T7078] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1568: Invalid block bitmap block 0 in block_group 0 [ 400.144770][ T7080] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 400.222889][ T7078] Quota error (device loop3): write_blk: dquota write failed [ 400.230518][ T7078] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 400.240819][ T7078] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1568: Failed to acquire dquot type 0 [ 400.256994][ T7086] loop1: detected capacity change from 0 to 256 [ 400.269236][ T7086] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 400.308361][ T7078] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1568: Freeing blocks not in datazone - block = 0, count = 4096 [ 400.366111][ T7078] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1568: Invalid inode bitmap blk 0 in block_group 0 [ 400.381779][ T28] audit: type=1400 audit(1755002104.227:2402): avc: denied { map } for pid=7072 comm="syz.2.1566" path="/308/file0/file1" dev="loop2" ino=1048745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 400.405275][ T7078] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 400.405384][ T7078] EXT4-fs (loop3): 1 orphan inode deleted [ 400.420252][ T2061] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 400.438087][ T2061] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:303: Failed to release dquot type 0 [ 400.504891][ T7078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 400.508774][ T28] audit: type=1400 audit(1755002104.277:2403): avc: denied { execute } for pid=7072 comm="syz.2.1566" path="/308/file0/file1" dev="loop2" ino=1048745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 400.549710][ T7090] loop4: detected capacity change from 0 to 2048 [ 400.651570][ T7090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 400.662444][ T7090] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.113173][ T39] usb 1-1: USB disconnect, device number 15 [ 401.244834][ T286] EXT4-fs (loop3): unmounting filesystem. [ 401.580338][ T28] audit: type=1400 audit(1755002105.427:2404): avc: denied { setattr } for pid=7089 comm="syz.4.1571" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.609997][ T7107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1571: bg 0: block 345: padding at end of block bitmap is not set [ 401.692421][ T7109] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 64 with error 117 [ 401.845563][ T7109] EXT4-fs (loop4): This should not happen!! Data will be lost [ 401.845563][ T7109] [ 402.323735][ T283] EXT4-fs (loop4): unmounting filesystem. [ 402.392220][ T1052] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 402.472584][ T7124] loop3: detected capacity change from 0 to 512 [ 402.493665][ T7124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 402.502763][ T7124] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.586850][ T7128] syz.4.1579[7128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.587142][ T7128] syz.4.1579[7128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.611330][ T7128] loop4: detected capacity change from 0 to 128 [ 402.665404][ T1052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.686553][ T7124] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1580: lblock 23 mapped to illegal pblock 18 (length 1) [ 402.716083][ T7128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 402.726654][ T7128] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.753515][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 402.851479][ T28] audit: type=1400 audit(1755002106.677:2405): avc: denied { sqpoll } for pid=7121 comm="syz.4.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 402.971449][ T1052] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 403.086229][ T1052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.115549][ T7124] EXT4-fs (loop3): Remounting filesystem read-only [ 403.138157][ T7132] loop1: detected capacity change from 0 to 512 [ 403.183411][ T1052] usb 3-1: config 0 descriptor?? [ 403.200368][ T7133] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1580: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.358058][ T7132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 403.372091][ T7133] EXT4-fs (loop3): Remounting filesystem read-only [ 403.372724][ T283] EXT4-fs (loop4): unmounting filesystem. [ 403.379699][ T7124] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1580: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.385505][ T7132] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 403.408712][ T7124] EXT4-fs (loop3): Remounting filesystem read-only [ 403.460525][ T7141] loop4: detected capacity change from 0 to 1024 [ 403.477838][ T7134] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1580: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.478265][ T7132] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.1581: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.518923][ T7134] EXT4-fs (loop3): Remounting filesystem read-only [ 403.523752][ T7141] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1583: Invalid block bitmap block 0 in block_group 0 [ 403.525738][ T7124] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1580: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.549514][ T7141] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1583: Failed to acquire dquot type 0 [ 403.553646][ T7132] EXT4-fs (loop1): Remounting filesystem read-only [ 403.571270][ T7141] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.1583: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.585322][ T7141] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1583: Invalid inode bitmap blk 0 in block_group 0 [ 403.598110][ T7144] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.1581: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.600413][ T7124] EXT4-fs (loop3): Remounting filesystem read-only [ 403.619055][ T7141] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 403.627755][ T7144] EXT4-fs (loop1): Remounting filesystem read-only [ 403.627761][ T1959] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:201: Failed to release dquot type 0 [ 403.646010][ T7141] EXT4-fs (loop4): 1 orphan inode deleted [ 403.651828][ T7141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 403.669855][ T7132] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.1581: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.685531][ T7132] EXT4-fs (loop1): Remounting filesystem read-only [ 403.694494][ T7132] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.1581: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.709325][ T7132] EXT4-fs (loop1): Remounting filesystem read-only [ 403.742313][ T7132] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.1581: lblock 23 mapped to illegal pblock 18 (length 1) [ 403.752427][ T283] EXT4-fs (loop4): unmounting filesystem. [ 403.756796][ T7132] EXT4-fs (loop1): Remounting filesystem read-only [ 403.789238][ T1052] sony 0003:054C:024B.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.2-1/input0 [ 403.801087][ T1052] sony 0003:054C:024B.001A: failed to claim input [ 403.883761][ T2015] Bluetooth: hci0: Frame reassembly failed (-84) [ 403.912111][ T294] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 403.998745][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.008150][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.153432][ T294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.161933][ T294] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 404.171859][ T294] usb 4-1: config 1 has no interface number 1 [ 404.178166][ T1052] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 404.186268][ T294] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 404.199387][ T294] usb 4-1: config 1 interface 2 has no altsetting 0 [ 404.207652][ T294] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.216767][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.224793][ T294] usb 4-1: Product: syz [ 404.228951][ T294] usb 4-1: Manufacturer: syz [ 404.233554][ T294] usb 4-1: SerialNumber: syz [ 404.600427][ T294] usb 4-1: found format II with max.bitrate = 26774, frame size=13 [ 404.609023][ T294] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 404.615319][ T294] usb 4-1: selecting invalid altsetting 0 [ 404.629767][ T294] usb 4-1: USB disconnect, device number 21 [ 404.683579][ T1052] usb 2-1: unable to get BOS descriptor or descriptor too short [ 404.692641][ T1052] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 404.701609][ T1052] usb 2-1: config 1 has no interface number 1 [ 404.707826][ T1052] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 404.722430][ T1052] usb 2-1: config 1 interface 2 has no altsetting 0 [ 404.730421][ T1052] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.739571][ T1052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.747676][ T1052] usb 2-1: Product: syz [ 404.751852][ T1052] usb 2-1: Manufacturer: syz [ 404.756573][ T1052] usb 2-1: SerialNumber: syz [ 404.971332][ T1052] usb 2-1: found format II with max.bitrate = 26774, frame size=13 [ 404.979535][ T1052] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 405.000715][ T1052] usb 2-1: selecting invalid altsetting 0 [ 405.010534][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 405.010547][ T28] audit: type=1400 audit(1755002108.867:2457): avc: denied { read append } for pid=7169 comm="syz.4.1588" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.023913][ T1052] usb 2-1: USB disconnect, device number 18 [ 405.047797][ T28] audit: type=1400 audit(1755002108.897:2458): avc: denied { open } for pid=7169 comm="syz.4.1588" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.071093][ T28] audit: type=1400 audit(1755002108.897:2459): avc: denied { ioctl } for pid=7169 comm="syz.4.1588" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.103393][ T294] usb 3-1: USB disconnect, device number 15 [ 405.129515][ T28] audit: type=1400 audit(1755002108.977:2460): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 405.149727][ T286] EXT4-fs (loop3): unmounting filesystem. [ 405.156982][ T28] audit: type=1400 audit(1755002108.977:2461): avc: denied { append } for pid=7173 comm="syz.2.1589" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.184230][ T28] audit: type=1400 audit(1755002109.007:2462): avc: denied { write } for pid=7175 comm="syz.2.1591" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.210389][ T28] audit: type=1400 audit(1755002109.067:2463): avc: denied { create } for pid=7178 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.231080][ T28] audit: type=1400 audit(1755002109.067:2464): avc: denied { write } for pid=7178 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.258566][ T28] audit: type=1400 audit(1755002109.067:2465): avc: denied { read } for pid=7178 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.280654][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 405.282407][ T28] audit: type=1400 audit(1755002109.067:2466): avc: denied { ioctl } for pid=7178 comm="syz.3.1590" path="socket:[36733]" dev="sockfs" ino=36733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.361165][ T7176] loop2: detected capacity change from 0 to 256 [ 405.370159][ T7176] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 405.694523][ T7189] bridge: RTM_NEWNEIGH with invalid ether address [ 405.792779][ T287] EXT4-fs (loop1): unmounting filesystem. [ 405.864833][ T7195] loop1: detected capacity change from 0 to 1024 [ 405.892917][ T7195] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1595: Invalid block bitmap block 0 in block_group 0 [ 405.910487][ T7195] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1595: Failed to acquire dquot type 0 [ 405.921960][ T451] Bluetooth: hci0: command 0x1003 tx timeout [ 405.922014][ T2848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.935405][ T7195] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1595: Freeing blocks not in datazone - block = 0, count = 4096 [ 405.970309][ T7195] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1595: Invalid inode bitmap blk 0 in block_group 0 [ 405.983797][ T2067] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:309: Failed to release dquot type 0 [ 405.992498][ T7195] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 406.060234][ T7195] EXT4-fs (loop1): 1 orphan inode deleted [ 406.077136][ T7195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.340882][ T7203] netlink: 552 bytes leftover after parsing attributes in process `syz.4.1598'. [ 406.570935][ T7203] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 406.583712][ T7207] loop3: detected capacity change from 0 to 256 [ 406.592490][ T7207] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 406.627098][ T287] EXT4-fs (loop1): unmounting filesystem. [ 406.647759][ T7211] loop3: detected capacity change from 0 to 512 [ 406.659402][ T7210] loop4: detected capacity change from 0 to 1024 [ 406.684375][ T7210] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 406.694184][ T7215] loop1: detected capacity change from 0 to 128 [ 406.716125][ T7211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.725234][ T7211] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.807060][ T7211] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1601: lblock 23 mapped to illegal pblock 18 (length 1) [ 406.822338][ T7211] EXT4-fs (loop3): Remounting filesystem read-only [ 406.829596][ T7211] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1601: lblock 23 mapped to illegal pblock 18 (length 1) [ 406.844282][ T7211] EXT4-fs (loop3): Remounting filesystem read-only [ 406.852068][ T7211] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1601: lblock 23 mapped to illegal pblock 18 (length 1) [ 406.866827][ T7211] EXT4-fs (loop3): Remounting filesystem read-only [ 406.876946][ T7211] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1601: lblock 23 mapped to illegal pblock 18 (length 1) [ 406.891770][ T7211] EXT4-fs (loop3): Remounting filesystem read-only [ 406.898914][ T7211] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1601: lblock 23 mapped to illegal pblock 18 (length 1) [ 406.913964][ T7211] EXT4-fs (loop3): Remounting filesystem read-only [ 407.062060][ T1052] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 407.319673][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 407.355272][ T7244] loop2: detected capacity change from 0 to 256 [ 407.364498][ T7244] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 407.403148][ T1052] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.413845][ T1052] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 407.427102][ T1052] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.433792][ T1052] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 407.442966][ T1052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.452372][ T1052] usb 2-1: config 0 descriptor?? [ 407.472060][ T502] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 407.653451][ T502] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.662867][ T502] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 407.671940][ T502] usb 4-1: config 1 has no interface number 1 [ 407.678793][ T502] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 407.692425][ T502] usb 4-1: config 1 interface 2 has no altsetting 0 [ 407.700591][ T502] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.709717][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.717759][ T502] usb 4-1: Product: syz [ 407.722084][ T502] usb 4-1: Manufacturer: syz [ 407.727262][ T502] usb 4-1: SerialNumber: syz [ 407.867331][ T1052] wacom 0003:056A:00B1.001B: unknown main item tag 0x0 [ 407.874424][ T1052] wacom 0003:056A:00B1.001B: unknown main item tag 0x0 [ 407.881480][ T1052] wacom 0003:056A:00B1.001B: unknown main item tag 0x0 [ 407.888418][ T1052] wacom 0003:056A:00B1.001B: unknown main item tag 0x0 [ 407.895305][ T1052] wacom 0003:056A:00B1.001B: unknown main item tag 0x0 [ 407.902464][ T1052] wacom 0003:056A:00B1.001B: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 407.913170][ T1052] wacom 0003:056A:00B1.001B: hidraw0: USB HID v80.03 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 408.133120][ T1052] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.001B/input/input13 [ 408.202147][ T502] usb 4-1: found format II with max.bitrate = 26774, frame size=13 [ 408.210101][ T502] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 408.211383][ T7251] loop2: detected capacity change from 0 to 512 [ 408.224844][ T1052] usb 2-1: USB disconnect, device number 19 [ 408.232120][ T502] usb 4-1: selecting invalid altsetting 0 [ 408.260413][ T502] usb 4-1: USB disconnect, device number 22 [ 408.276313][ T7251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 408.282603][ T7252] fido_id[7252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 408.298314][ T7251] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 408.357240][ T7251] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1610: lblock 23 mapped to illegal pblock 18 (length 1) [ 408.372024][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 408.380451][ T7251] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1610: lblock 23 mapped to illegal pblock 18 (length 1) [ 408.399268][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 408.409387][ T7251] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1610: lblock 23 mapped to illegal pblock 18 (length 1) [ 408.425649][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 408.434022][ T7251] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1610: lblock 23 mapped to illegal pblock 18 (length 1) [ 408.448426][ T7261] device wireguard0 entered promiscuous mode [ 408.448525][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 408.467403][ T7251] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1610: lblock 23 mapped to illegal pblock 18 (length 1) [ 408.482316][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 408.565347][ T7265] FAULT_INJECTION: forcing a failure. [ 408.565347][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.578580][ T7265] CPU: 1 PID: 7265 Comm: syz.0.1614 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 408.589877][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.599922][ T7265] Call Trace: [ 408.603203][ T7265] [ 408.606115][ T7265] __dump_stack+0x21/0x24 [ 408.610441][ T7265] dump_stack_lvl+0xee/0x150 [ 408.615012][ T7265] ? __cfi_dump_stack_lvl+0x8/0x8 [ 408.620020][ T7265] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.626092][ T7265] dump_stack+0x15/0x24 [ 408.630235][ T7265] should_fail_ex+0x3d4/0x520 [ 408.635083][ T7265] should_fail+0xb/0x10 [ 408.639227][ T7265] should_fail_usercopy+0x1a/0x20 [ 408.644233][ T7265] strncpy_from_user+0x24/0x2d0 [ 408.649069][ T7265] setxattr+0xc4/0x2d0 [ 408.653125][ T7265] ? path_setxattr+0x280/0x280 [ 408.657876][ T7265] ? __mnt_want_write+0x1e6/0x260 [ 408.662885][ T7265] ? mnt_want_write+0x220/0x300 [ 408.667728][ T7265] path_setxattr+0x142/0x280 [ 408.672365][ T7265] ? fput+0x154/0x1a0 [ 408.676341][ T7265] ? simple_xattr_list_add+0x120/0x120 [ 408.681792][ T7265] ? __cfi_ksys_write+0x10/0x10 [ 408.686639][ T7265] __x64_sys_lsetxattr+0xc2/0xe0 [ 408.691560][ T7265] x64_sys_call+0x8b7/0x9a0 [ 408.696061][ T7265] do_syscall_64+0x4c/0xa0 [ 408.700489][ T7265] ? clear_bhb_loop+0x30/0x80 [ 408.705156][ T7265] ? clear_bhb_loop+0x30/0x80 [ 408.709823][ T7265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.715721][ T7265] RIP: 0033:0x7f322418ebe9 [ 408.720134][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.739783][ T7265] RSP: 002b:00007f3225077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 408.748191][ T7265] RAX: ffffffffffffffda RBX: 00007f32243b5fa0 RCX: 00007f322418ebe9 [ 408.756145][ T7265] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000200000000540 [ 408.764100][ T7265] RBP: 00007f3225077090 R08: 0000000000000003 R09: 0000000000000000 [ 408.772140][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.780187][ T7265] R13: 00007f32243b6038 R14: 00007f32243b5fa0 R15: 00007ffeb07d8558 [ 408.788159][ T7265] [ 408.807238][ T286] EXT4-fs (loop3): unmounting filesystem. [ 408.952067][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 409.103600][ T7291] loop4: detected capacity change from 0 to 256 [ 409.123225][ T7291] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 409.137901][ T7292] loop1: detected capacity change from 0 to 256 [ 409.151949][ T7292] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 410.135743][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 410.135763][ T28] audit: type=1400 audit(1755002113.977:2575): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 410.176757][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 410.192844][ T19] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 410.201816][ T19] usb 3-1: config 1 has no interface number 1 [ 410.212004][ T19] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 410.232219][ T19] usb 3-1: config 1 interface 2 has no altsetting 0 [ 410.245425][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.248897][ T28] audit: type=1400 audit(1755002114.097:2576): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 410.262255][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.287613][ T19] usb 3-1: Product: syz [ 410.292119][ T19] usb 3-1: Manufacturer: syz [ 410.297003][ T19] usb 3-1: SerialNumber: syz [ 410.302186][ T28] audit: type=1400 audit(1755002114.157:2577): avc: denied { name_bind } for pid=7300 comm="syz.0.1623" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 410.335950][ T28] audit: type=1400 audit(1755002114.157:2578): avc: denied { node_bind } for pid=7300 comm="syz.0.1623" saddr=::ffff:172.20.20.9 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 410.344904][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 410.376657][ T28] audit: type=1400 audit(1755002114.177:2579): avc: denied { create } for pid=7300 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.411609][ T28] audit: type=1400 audit(1755002114.177:2580): avc: denied { ioctl } for pid=7300 comm="syz.0.1623" path="socket:[36949]" dev="sockfs" ino=36949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.531598][ T7251] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1610: lblock 23 mapped to illegal pblock 18 (length 1) [ 410.546338][ T7251] EXT4-fs (loop2): Remounting filesystem read-only [ 410.556796][ T19] usb 3-1: found format II with max.bitrate = 26774, frame size=13 [ 410.564803][ T19] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 410.571059][ T19] usb 3-1: selecting invalid altsetting 0 [ 410.598215][ T19] usb 3-1: USB disconnect, device number 16 [ 410.762130][ T63] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 411.024454][ T7308] loop3: detected capacity change from 0 to 512 [ 411.054054][ T7308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 411.063035][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 411.067247][ T7308] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.068459][ T28] audit: type=1400 audit(1755002114.917:2581): avc: denied { mount } for pid=7307 comm="syz.3.1625" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 411.123549][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.136288][ T63] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 411.153265][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1625: lblock 23 mapped to illegal pblock 18 (length 1) [ 411.168060][ T7308] EXT4-fs (loop3): Remounting filesystem read-only [ 411.181185][ T63] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.182501][ T284] EXT4-fs (loop2): unmounting filesystem. [ 411.190653][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.204337][ T63] usb 1-1: Product: syz [ 411.204696][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1625: lblock 23 mapped to illegal pblock 18 (length 1) [ 411.208632][ T63] usb 1-1: Manufacturer: syz [ 411.227468][ T63] usb 1-1: SerialNumber: syz [ 411.234576][ T7308] EXT4-fs (loop3): Remounting filesystem read-only [ 411.260313][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1625: lblock 23 mapped to illegal pblock 18 (length 1) [ 411.275766][ T7308] EXT4-fs (loop3): Remounting filesystem read-only [ 411.291752][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1625: lblock 23 mapped to illegal pblock 18 (length 1) [ 411.307839][ T7308] EXT4-fs (loop3): Remounting filesystem read-only [ 411.319158][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1625: lblock 23 mapped to illegal pblock 18 (length 1) [ 411.335322][ T7308] EXT4-fs (loop3): Remounting filesystem read-only [ 411.376840][ T28] audit: type=1400 audit(1755002115.227:2582): avc: denied { read write } for pid=7307 comm="syz.3.1625" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.384334][ T63] usb 1-1: bad CDC descriptors [ 411.405349][ T28] audit: type=1400 audit(1755002115.227:2583): avc: denied { open } for pid=7307 comm="syz.3.1625" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.429002][ T28] audit: type=1400 audit(1755002115.227:2584): avc: denied { ioctl } for pid=7307 comm="syz.3.1625" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.625089][ T19] usb 1-1: USB disconnect, device number 16 [ 411.642046][ T6] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 411.673666][ T7334] loop4: detected capacity change from 0 to 256 [ 411.683836][ T7334] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 411.792035][ T63] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 411.823380][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 411.831777][ T6] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 411.841045][ T6] usb 4-1: config 1 has no interface number 1 [ 411.847448][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 411.860279][ T6] usb 4-1: config 1 interface 2 has no altsetting 0 [ 411.868299][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.877464][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.885490][ T6] usb 4-1: Product: syz [ 411.889662][ T6] usb 4-1: Manufacturer: syz [ 411.894279][ T6] usb 4-1: SerialNumber: syz [ 411.933787][ T7336] tipc: Failed to remove unknown binding: 66,1,1/0:3192881001/3192881003 [ 411.942360][ T7336] tipc: Failed to remove unknown binding: 66,1,1/0:3192881001/3192881003 [ 411.973685][ T63] usb 3-1: config 0 has no interfaces? [ 411.979291][ T63] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 411.988605][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.997793][ T63] usb 3-1: config 0 descriptor?? [ 412.256427][ T1052] usb 3-1: USB disconnect, device number 17 [ 413.659705][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 414.052620][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 414.162100][ T286] EXT4-fs (loop3): unmounting filesystem. [ 415.076830][ T6] usb 4-1: found format II with max.bitrate = 26774, frame size=13 [ 415.084822][ T6] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 415.090914][ T6] usb 4-1: selecting invalid altsetting 0 [ 415.146857][ T6] usb 4-1: USB disconnect, device number 23 [ 415.972260][ T7378] loop3: detected capacity change from 0 to 1024 [ 415.990478][ T7378] EXT4-fs: Ignoring removed i_version option [ 416.202764][ T7378] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1639: Invalid block bitmap block 0 in block_group 0 [ 416.217105][ T7378] __quota_error: 54 callbacks suppressed [ 416.217139][ T7378] Quota error (device loop3): write_blk: dquota write failed [ 416.230277][ T7378] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 416.240390][ T7378] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1639: Failed to acquire dquot type 0 [ 416.253085][ T7378] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1639: Freeing blocks not in datazone - block = 0, count = 4096 [ 416.267663][ T7378] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1639: Invalid inode bitmap blk 0 in block_group 0 [ 416.280915][ T7378] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 416.290003][ T7378] EXT4-fs (loop3): 1 orphan inode deleted [ 416.295807][ T7378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 416.366055][ T28] audit: type=1400 audit(1755002120.167:2639): avc: denied { mount } for pid=7374 comm="syz.3.1639" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 416.389340][ T1959] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 416.547255][ T5656] udevd[5656]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 416.585179][ T1959] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:201: Failed to release dquot type 0 [ 416.749651][ T7386] input: syz1 as /devices/virtual/input/input16 [ 416.787734][ T28] audit: type=1400 audit(1755002120.597:2640): avc: denied { connect } for pid=7349 comm="syz.4.1637" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.817267][ T286] EXT4-fs (loop3): unmounting filesystem. [ 416.836476][ T28] audit: type=1400 audit(1755002120.687:2641): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=2001 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.849327][ T7389] tipc: Failed to remove unknown binding: 66,1,1/0:1934237272/1934237274 [ 416.867679][ T7389] tipc: Failed to remove unknown binding: 66,1,1/0:1934237272/1934237274 [ 417.056471][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 417.144019][ T28] audit: type=1400 audit(1755002120.687:2642): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2001 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 417.963507][ T28] audit: type=1400 audit(1755002120.687:2643): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2001 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.192760][ T7404] loop2: detected capacity change from 0 to 256 [ 418.201242][ T7404] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 418.589646][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 419.781321][ T7422] loop2: detected capacity change from 0 to 256 [ 419.875167][ T7422] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 419.933707][ T28] audit: type=1400 audit(1755002123.787:2644): avc: denied { map } for pid=7413 comm="syz.2.1650" path="/322/file1/cgroup.controllers" dev="loop2" ino=1048753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 420.084253][ T28] audit: type=1400 audit(1755002123.937:2645): avc: denied { create } for pid=7417 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 420.477011][ T7448] loop3: detected capacity change from 0 to 1024 [ 420.644450][ T7448] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1658: Invalid block bitmap block 0 in block_group 0 [ 420.661609][ T7448] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1658: Failed to acquire dquot type 0 [ 420.675830][ T7448] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1658: Freeing blocks not in datazone - block = 0, count = 4096 [ 420.690149][ T7448] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1658: Invalid inode bitmap blk 0 in block_group 0 [ 420.703747][ T1862] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:104: Failed to release dquot type 0 [ 420.715587][ T7448] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 420.724820][ T7448] EXT4-fs (loop3): 1 orphan inode deleted [ 420.730641][ T7448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 420.749371][ T7459] loop2: detected capacity change from 0 to 512 [ 420.787953][ T7459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 420.804266][ T7459] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.064206][ T1862] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.287333][ T286] EXT4-fs (loop3): unmounting filesystem. [ 421.432610][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 421.432625][ T28] audit: type=1400 audit(1755002125.287:2661): avc: denied { create } for pid=7483 comm="syz.0.1664" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 421.468619][ T7486] loop1: detected capacity change from 0 to 256 [ 421.478243][ T7487] loop3: detected capacity change from 0 to 256 [ 421.488931][ T7486] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 421.501280][ T7487] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 421.543913][ T28] audit: type=1400 audit(1755002125.377:2662): avc: denied { mounton } for pid=7483 comm="syz.0.1664" path="/377/file0" dev="tmpfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 421.580762][ T7477] loop4: detected capacity change from 0 to 256 [ 421.597134][ T28] audit: type=1400 audit(1755002125.387:2663): avc: denied { mount } for pid=7483 comm="syz.0.1664" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 421.645419][ T7477] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 422.232321][ T28] audit: type=1400 audit(1755002126.087:2664): avc: denied { write } for pid=7497 comm="syz.3.1668" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 423.112046][ T2848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.112096][ T451] Bluetooth: hci0: command 0x1003 tx timeout [ 423.145547][ T284] EXT4-fs (loop2): unmounting filesystem. [ 423.157203][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 423.218768][ T7512] loop1: detected capacity change from 0 to 256 [ 423.242374][ T7512] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 423.976964][ T28] audit: type=1400 audit(1755002127.827:2665): avc: denied { create } for pid=7527 comm="syz.1.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 423.991199][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 423.999120][ T7528] loop1: detected capacity change from 0 to 256 [ 424.021526][ T28] audit: type=1400 audit(1755002127.827:2666): avc: denied { ioctl } for pid=7518 comm="syz.4.1673" path="socket:[38070]" dev="sockfs" ino=38070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.055480][ T7528] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 424.550158][ T7549] loop2: detected capacity change from 0 to 512 [ 424.566644][ T28] audit: type=1400 audit(1755002128.417:2667): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 424.601426][ T28] audit: type=1400 audit(1755002128.447:2668): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 425.048420][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 425.059664][ T7549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 425.074398][ T7549] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.354176][ T1862] Bluetooth: hci0: Frame reassembly failed (-84) [ 426.270119][ T7704] bridge_slave_0: mtu greater than device maximum [ 427.432031][ T480] Bluetooth: hci0: command 0x1003 tx timeout [ 427.438316][ T2848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 427.524978][ T284] EXT4-fs (loop2): unmounting filesystem. [ 427.631283][ T28] audit: type=1400 audit(1755002131.477:2669): avc: denied { write } for pid=7757 comm="syz.2.1780" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.679714][ T28] audit: type=1400 audit(1755002131.517:2670): avc: denied { open } for pid=7757 comm="syz.2.1780" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.705775][ T28] audit: type=1400 audit(1755002131.517:2671): avc: denied { read } for pid=7757 comm="syz.2.1780" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.740013][ T28] audit: type=1400 audit(1755002131.517:2672): avc: denied { ioctl } for pid=7757 comm="syz.2.1780" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.289888][ T28] audit: type=1400 audit(1755002132.137:2673): avc: denied { relabelfrom } for pid=7856 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 428.329286][ T28] audit: type=1400 audit(1755002132.167:2674): avc: denied { relabelto } for pid=7856 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 429.005943][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 430.221686][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 430.478764][ T7900] loop4: detected capacity change from 0 to 40427 [ 430.750696][ T7900] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 430.762051][ T7900] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 430.793822][ T7900] F2FS-fs (loop4): invalid crc value [ 430.804068][ T7931] loop3: detected capacity change from 0 to 256 [ 430.835357][ T7931] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 430.844439][ T7900] F2FS-fs (loop4): Found nat_bits in checkpoint [ 430.879245][ T7900] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 430.922051][ T7900] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 431.102217][ T28] audit: type=1400 audit(1755002134.937:2675): avc: denied { name_bind } for pid=7899 comm="syz.4.1849" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 431.163346][ T28] audit: type=1400 audit(1755002134.937:2676): avc: denied { node_bind } for pid=7899 comm="syz.4.1849" saddr=::ffff:255.255.255.255 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 431.186471][ T28] audit: type=1400 audit(1755002134.957:2677): avc: denied { setopt } for pid=7899 comm="syz.4.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.221874][ T28] audit: type=1400 audit(1755002134.957:2678): avc: denied { bind } for pid=7899 comm="syz.4.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.282159][ T7941] loop1: detected capacity change from 0 to 512 [ 431.347237][ T7941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 431.356430][ T7941] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.582543][ T1862] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.603544][ T1862] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.792318][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'. [ 444.152063][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.811966][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 531.818947][ C1] (detected by 1, t=10002 jiffies, g=35409, q=338 ncpus=2) [ 531.826228][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294990399-4294980396), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 531.839603][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g35409 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 531.850806][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 531.861117][ C1] rcu: RCU grace-period kthread stack dump: [ 531.867025][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 531.877890][ C1] Call Trace: [ 531.881164][ C1] [ 531.884098][ C1] __schedule+0xb87/0x14e0 [ 531.888611][ C1] ? release_firmware_map_entry+0x194/0x194 [ 531.894740][ C1] ? __mod_timer+0x7ae/0xb30 [ 531.899417][ C1] schedule+0xbd/0x170 [ 531.903568][ C1] schedule_timeout+0x12c/0x2e0 [ 531.908417][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 531.913782][ C1] ? preempt_schedule+0xa7/0xb0 [ 531.918629][ C1] ? __cfi_process_timeout+0x10/0x10 [ 531.923921][ C1] ? prepare_to_swait_event+0x308/0x320 [ 531.929481][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 531.934353][ C1] ? rcu_gp_init+0xf10/0xf10 [ 531.938965][ C1] rcu_gp_kthread+0x95/0x370 [ 531.943559][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 531.948777][ C1] ? __kasan_check_read+0x11/0x20 [ 531.953844][ C1] ? __kthread_parkme+0x142/0x180 [ 531.958867][ C1] kthread+0x281/0x320 [ 531.962931][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 531.968133][ C1] ? __cfi_kthread+0x10/0x10 [ 531.972728][ C1] ret_from_fork+0x1f/0x30 [ 531.977148][ C1] [ 531.980154][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 531.986462][ C1] Sending NMI from CPU 1 to CPUs 0: [ 531.991654][ C0] NMI backtrace for cpu 0 [ 531.991666][ C0] CPU: 0 PID: 7948 Comm: syz.1.1859 Tainted: G W 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 531.991683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.991697][ C0] RIP: 0010:handle_softirqs+0x128/0x600 [ 531.991719][ C0] Code: 4c 89 f8 48 c1 e8 03 48 89 45 90 4c 89 bd 70 ff ff ff 44 89 6d b4 48 c7 c7 c0 05 49 85 e8 a0 3b aa 03 65 66 89 1d b8 c9 c0 7e <48> c7 c7 c0 05 49 85 e8 8c 3b aa 03 65 44 89 25 3c c7 bf 7e fb 49 [ 531.991733][ C0] RSP: 0018:ffffc90000007f48 EFLAGS: 00000082 [ 531.991747][ C0] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 3b90cd7d60cd4e00 [ 531.991758][ C0] RDX: 1ffffffff0f2d000 RSI: ffffffff854905c0 RDI: ffffffff85aa0be0 [ 531.991770][ C0] RBP: ffffc90000007fd8 R08: ffffffff87968008 R09: ffffffff87968018 [ 531.991782][ C0] R10: ffffffff87968003 R11: 1ffffffff0f2d000 R12: 0000000000000000 [ 531.991793][ C0] R13: 000000000000000a R14: 0000000000000008 R15: ffff88811f47d100 [ 531.991803][ C0] FS: 00007f17b41b76c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 531.991816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.991827][ C0] CR2: 0000000005ffffe8 CR3: 000000011f179000 CR4: 00000000003506b0 [ 531.991841][ C0] DR0: 0000000100000000 DR1: 0000000000001000 DR2: 0000000000000004 [ 531.991851][ C0] DR3: 000000000000009c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 531.991861][ C0] Call Trace: [ 531.991865][ C0] [ 531.991872][ C0] ? irqtime_account_irq+0xc4/0x240 [ 531.991896][ C0] __do_softirq+0xb/0xd [ 531.991913][ C0] do_softirq+0xc6/0x120 [ 531.991928][ C0] [ 531.991933][ C0] [ 531.991937][ C0] ? __cfi_do_softirq+0x10/0x10 [ 531.991954][ C0] __local_bh_enable_ip+0x75/0x80 [ 531.991972][ C0] fpu__restore_sig+0x848/0xf40 [ 531.991992][ C0] ? fpu__restore_sig+0x38d/0xf40 [ 531.992010][ C0] ? __cfi_fpu__restore_sig+0x10/0x10 [ 531.992030][ C0] ? __kasan_check_write+0x14/0x20 [ 531.992053][ C0] ? recalc_sigpending+0x180/0x1c0 [ 531.992073][ C0] ? __kasan_check_write+0x14/0x20 [ 531.992095][ C0] __ia32_sys_rt_sigreturn+0x5d0/0x6c0 [ 531.992114][ C0] ? __set_printk_clr_event+0x80/0x80 [ 531.992137][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 531.992162][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 531.992178][ C0] ? trace_sys_enter+0x3d/0x50 [ 531.992194][ C0] x64_sys_call+0x832/0x9a0 [ 531.992211][ C0] do_syscall_64+0x4c/0xa0 [ 531.992233][ C0] ? clear_bhb_loop+0x30/0x80 [ 531.992250][ C0] ? clear_bhb_loop+0x30/0x80 [ 531.992267][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.992284][ C0] RIP: 0033:0x7f17b338ebe9 [ 531.992297][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.992309][ C0] RSP: 002b:00007f17b41b70e8 EFLAGS: 00000246 [ 531.992321][ C0] RAX: fffffffffffffffc RBX: 00007f17b35b6098 RCX: 00007f17b338ebe9 [ 531.992333][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f17b35b6098 [ 531.992344][ C0] RBP: 00007f17b35b6090 R08: 0000000000000000 R09: 0000000000000000 [ 531.992354][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.992364][ C0] R13: 00007f17b35b6128 R14: 00007ffff56b5d60 R15: 00007ffff56b5e48 [ 531.992379][ C0] [ 715.512134][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 283s! [ 715.521075][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 283s! [ 715.529994][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 279s! [ 715.539349][ C0] Showing busy workqueues and worker pools: [ 715.545247][ C0] workqueue events: flags=0x0 [ 715.549913][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=24/256 refcnt=25 [ 715.549952][ C0] in-flight: 616:bpf_prog_free_deferred [ 715.549990][ C0] pending: update_stats_workfn, psi_avgs_work, kfree_rcu_monitor, xfrm_state_gc_task, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 715.550295][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=22/256 refcnt=23 [ 715.550329][ C0] pending: vmstat_shepherd, rht_deferred_worker, kfree_rcu_monitor, key_garbage_collector, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 715.550598][ C0] workqueue events_long: flags=0x0 [ 715.665579][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=44/256 refcnt=45 [ 715.665627][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 715.666369][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=45/256 refcnt=46 [ 715.666403][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 715.667140][ C0] workqueue events_unbound: flags=0x2 [ 715.838879][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 715.838920][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 715.838966][ C0] workqueue events_power_efficient: flags=0x80 [ 715.860014][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 715.860060][ C0] pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, reg_check_chans_work, check_lifetime [ 715.860172][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 715.860202][ C0] pending: wg_ratelimiter_gc_entries, gc_worker [ 715.860252][ C0] workqueue rcu_gp: flags=0x8 [ 715.901154][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.901195][ C0] pending: srcu_invoke_callbacks [ 715.901234][ C0] workqueue mm_percpu_wq: flags=0x8 [ 715.919579][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.919619][ C0] pending: vmstat_update [ 715.919659][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 715.919692][ C0] pending: vmstat_update [ 715.919726][ C0] workqueue writeback: flags=0x4a [ 715.949116][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/256 refcnt=7 [ 715.949151][ C0] pending: wb_update_bandwidth_workfn, wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 715.949226][ C0] workqueue kblockd: flags=0x18 [ 715.970882][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 715.970922][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 715.970970][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 715.971002][ C0] pending: blk_mq_timeout_work [ 715.971116][ C0] workqueue dm_bufio_cache: flags=0x8 [ 716.006247][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.006290][ C0] pending: work_fn [ 716.006331][ C0] workqueue mld: flags=0x40008 [ 716.022757][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 716.022796][ C0] pending: mld_dad_work [ 716.022834][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 716.040459][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 716.040495][ C0] pending: addrconf_dad_work [ 716.040533][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 716.040596][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 716.040629][ C0] pending: addrconf_dad_work [ 716.040665][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 716.040734][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.088891][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.088934][ C0] pending: wg_packet_handshake_send_worker [ 716.088961][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.107554][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.107597][ C0] pending: wg_packet_encrypt_worker [ 716.107634][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.107668][ C0] pending: wg_packet_encrypt_worker [ 716.107699][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.139117][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.139159][ C0] pending: wg_packet_handshake_send_worker [ 716.139188][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.157826][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.157873][ C0] pending: wg_packet_encrypt_worker [ 716.157910][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.157945][ C0] pending: wg_packet_encrypt_worker [ 716.157979][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.189711][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.189778][ C0] pending: wg_packet_encrypt_worker [ 716.189819][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.189857][ C0] pending: wg_packet_encrypt_worker [ 716.189891][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.221455][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.221497][ C0] pending: wg_packet_encrypt_worker [ 716.221534][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.221568][ C0] pending: wg_packet_encrypt_worker [ 716.221599][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.252940][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.252979][ C0] pending: wg_packet_handshake_send_worker [ 716.253004][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.271585][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.271628][ C0] pending: wg_packet_encrypt_worker [ 716.271663][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.271697][ C0] pending: wg_packet_encrypt_worker [ 716.271729][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.303300][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.303343][ C0] pending: wg_packet_encrypt_worker [ 716.303378][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.303410][ C0] pending: wg_packet_encrypt_worker [ 716.303444][ C0] workqueue wg-kex-wg1: flags=0x6 [ 716.334927][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.334973][ C0] pending: wg_packet_handshake_send_worker [ 716.335001][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.354041][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.354101][ C0] pending: wg_packet_encrypt_worker [ 716.354139][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.354174][ C0] pending: wg_packet_encrypt_worker [ 716.354209][ C0] workqueue wg-kex-wg2: flags=0x6 [ 716.385701][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 716.385742][ C0] pending: wg_packet_handshake_send_worker [ 716.385769][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.404409][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.404462][ C0] pending: wg_packet_encrypt_worker [ 716.404499][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.404534][ C0] pending: wg_packet_encrypt_worker [ 716.404568][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 716.438765][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.438807][ C0] pending: wg_packet_encrypt_worker [ 716.438847][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.438881][ C0] pending: wg_packet_encrypt_worker [ 716.438912][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 716.470471][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.470513][ C0] pending: wg_packet_encrypt_worker [ 716.470551][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.470584][ C0] pending: wg_packet_encrypt_worker [ 716.470616][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 716.502263][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.502305][ C0] pending: wg_packet_encrypt_worker [ 716.502339][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 716.502374][ C0] pending: wg_packet_encrypt_worker [ 716.502406][ C0] workqueue hci0: flags=0xa0012 [ 716.533643][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 [ 716.533686][ C0] pending: hci_cmd_timeout [ 716.533712][ C0] workqueue hci0: flags=0xa0012 [ 716.550487][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 [ 716.550522][ C0] in-flight: 2848:hci_power_on [ 716.550553][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=284s workers=4 idle: 1052 1263 39 [ 716.550603][ C0] pool 5: cpus=0-1 flags=0x4 nice=-20 hung=282s workers=3 idle: 480 451 [ 720.632043][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!